theupdateframework/rust-tuf

View on GitHub

Rust implementation of The Update Framework (TUF)

Stars: 198
Forks: 39
Open beginner issues: 0
Indexed issues: 63
Avg merge: 9h 19m
Merged PRs (30d): 2

Dominant language: Rust
License: Apache-2.0
Last GitHub push: Aug 24, 2026
Latest indexed: Sep 19, 2026
Contributing guide: No contributing guide
Code of conduct: No code of conduct
Beginner labels: No beginner labels indexed

Beginner friendly Everything

Open All

63 open issues indexed

Integrating tuf-conformance Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

theupdateframework/rust-tuf#410 · Opened Oct 15, 2024
ECDSA key support Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

theupdateframework/rust-tuf#408 · 2 comments · Opened Jun 24, 2024
rust-tuf doesn't support delegation glob pathpatterns Open

Difficulty 3/5 1-2 days Newbie friendliness 45/100

theupdateframework/rust-tuf#388 · Opened Sep 23, 2022
rust-tuf doesn't support diamond delegations Open

Difficulty 4/5 3-5 days Newbie friendliness 45/100

theupdateframework/rust-tuf#381 · Opened Sep 12, 2022
Create a security policy Open

Difficulty 2/5 1-3 hours Newbie friendliness 35/100

theupdateframework/rust-tuf#380 · 3 comments · Opened Sep 6, 2022
TUF specification has a new version - v1.0.30 Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

theupdateframework/rust-tuf#368 · Opened Jul 14, 2022
Cleaning up API surface before releasing 0.3.0 Open

Difficulty 5/5 Over a week Newbie friendliness 18/100

theupdateframework/rust-tuf#355 · 1 comment · Opened Feb 4, 2022
ECDSA keys do not conform to the spec Open

Difficulty 3/5 1-2 days Newbie friendliness 35/100

theupdateframework/rust-tuf#330 · Opened Dec 16, 2021
RSA key support does not conform to the spec Open

Difficulty 3/5 1-2 days Newbie friendliness 35/100

theupdateframework/rust-tuf#329 · Opened Dec 16, 2021
recovering from Client::update failing to write root metadata Open

Difficulty 5/5 Over a week Newbie friendliness 30/100

theupdateframework/rust-tuf#309 · Opened Oct 28, 2020
Consider adding an upper bound on the number of root metadata we'll fetch in Client::update_root Open

Difficulty 4/5 3-5 days Newbie friendliness 42/100

theupdateframework/rust-tuf#306 · Opened Oct 24, 2020
Resolve why rust-tuf diverges in a few places from the TUF spec Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

theupdateframework/rust-tuf#297 · Opened Sep 18, 2020
Client::update_root should update from N+1, not fetch the latest root metadata Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

theupdateframework/rust-tuf#292 · Opened Sep 17, 2020
rust-tuf should not deserialize metadata until it has been verified Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

theupdateframework/rust-tuf#291 · Opened Sep 17, 2020
Properly verify delegated metadata signatures Open

Difficulty 5/5 Over a week Newbie friendliness 30/100

theupdateframework/rust-tuf#279 · Opened Feb 5, 2020
HttpRepository can bail out early in some cases Open

Difficulty 3/5 1-2 days Newbie friendliness 38/100

theupdateframework/rust-tuf#278 · Opened Feb 5, 2020
SafeReader doesn't detect stalled transfers Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

theupdateframework/rust-tuf#272 · Opened Feb 2, 2020
Decide how to handle corrupt local metadata Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

theupdateframework/rust-tuf#270 · Opened Jan 28, 2020
Dependency issue, untrusted = "^0.5" Open

Difficulty 2/5 1-3 hours Newbie friendliness 25/100

theupdateframework/rust-tuf#263 · 3 comments · Opened Jan 14, 2020
RUSTSEC-2019-0031: spin is no longer actively maintained Open

Difficulty 3/5 1-2 days Newbie friendliness 25/100

theupdateframework/rust-tuf#261 · 1 comment · Opened Dec 18, 2019
Client::update_root should verify fetched metadata is expected version Open

Difficulty 3/5 1-2 days Newbie friendliness 45/100

theupdateframework/rust-tuf#253 · 1 comment · 1 reaction · Opened Dec 6, 2019
move tuf::client::PathTranslator to FileSystemRepository Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

theupdateframework/rust-tuf#236 · 1 comment · Opened Nov 21, 2019
Need a high level interface for creating and changing TUF metadata Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

theupdateframework/rust-tuf#232 · 2 comments · 3 reactions · Opened Nov 21, 2019
RSA and ECDSA keys should be encoded as a PEM string Open

Difficulty 3/5 1-2 days Newbie friendliness 45/100

theupdateframework/rust-tuf#204 · 1 reaction · Opened Aug 5, 2019
Switch from base64 to hex encoding of binary data Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

theupdateframework/rust-tuf#181 · 3 comments · Opened Jul 31, 2019
Re-add custom user agent prefix for HTTP repos Open

Difficulty 3/5 1-2 days Newbie friendliness 35/100

theupdateframework/rust-tuf#171 · Opened Jan 10, 2019
Should Client::new download the latest metadata? Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

theupdateframework/rust-tuf#162 · 1 comment · Opened Sep 4, 2018
Consider migrating signing to signatory Open

Difficulty 5/5 Over a week Newbie friendliness 20/100

theupdateframework/rust-tuf#161 · 5 comments · Opened Aug 22, 2018
Merge MetadataPath/TargetPath/VirtualTargetPath? Open

Difficulty 5/5 Over a week Newbie friendliness 20/100

theupdateframework/rust-tuf#160 · 1 comment · Opened Aug 20, 2018
Should we stop directly storing metadata MetadataVersion::None? Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

theupdateframework/rust-tuf#152 · Opened Aug 1, 2018
factoring out Repository implementations into separate crates Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

theupdateframework/rust-tuf#149 · 1 comment · 1 reaction · Opened Jul 26, 2018
Consistent snapshot feature is not completely implemented Open

Bug :: Medium Priority :: Medium

Difficulty 2/5 1-3 hours Newbie friendliness 35/100

theupdateframework/rust-tuf#147 · 1 comment · Opened Jul 24, 2018
Repos don't store metadata by `MetadataVersion::Hash(_)` when values are added Open

Bug :: Medium Priority :: Medium

Difficulty 3/5 1-2 days Newbie friendliness 30/100

theupdateframework/rust-tuf#146 · Opened Jul 18, 2018
Metadata update needs better Ok/Err logic Open

Feature :: Improvement Priority :: Medium

Difficulty 4/5 3-5 days Newbie friendliness 25/100

theupdateframework/rust-tuf#144 · Opened Jul 18, 2018
Remove errant metadata/targets from local repo on failure Open

Feature :: Improvement Priority :: Low

Difficulty 4/5 3-5 days Newbie friendliness 38/100

theupdateframework/rust-tuf#143 · Opened Jul 18, 2018
Attempt to box more traits to clean up type signatures Open

Feature :: Improvement

Difficulty 5/5 Over a week Newbie friendliness 25/100

theupdateframework/rust-tuf#137 · Opened Jul 17, 2018
Use `failure` crate for errors instead of a enum Open

Feature :: Improvement

Difficulty 4/5 3-5 days Newbie friendliness 20/100

theupdateframework/rust-tuf#136 · 1 comment · Opened Jul 17, 2018
Zero memory of private keys Open

Feature :: Improvement Flag :: Research Priority :: Low

Difficulty 5/5 Over a week Newbie friendliness 25/100

theupdateframework/rust-tuf#125 · 1 comment · Opened Jul 28, 2017
Use "symlinking" to point unversioned metadata at latest metadata Open

Feature :: Improvement Priority :: Low

Difficulty 5/5 Over a week Newbie friendliness 30/100

theupdateframework/rust-tuf#123 · Opened Jul 27, 2017
Split `Repository` trait into local and remote components Open

Feature :: Improvement Priority :: Low

Difficulty 5/5 Over a week Newbie friendliness 25/100

theupdateframework/rust-tuf#119 · 3 comments · Opened Jul 26, 2017
Extensive integration tests Open

Feature :: Test Case Flag :: Help Wanted Priority :: High

Difficulty 5/5 Over a week Newbie friendliness 25/100

theupdateframework/rust-tuf#117 · 2 comments · Opened Jul 22, 2017
Support for password protected private keys Open

Feature :: Improvement Priority :: Medium

Difficulty 5/5 Over a week Newbie friendliness 20/100

theupdateframework/rust-tuf#115 · 2 comments · Opened Jul 19, 2017
tuf/remote: HTTP client with custom/authentication headers Open

Feature :: API Priority :: Low

Difficulty 5/5 Over a week Newbie friendliness 25/100

theupdateframework/rust-tuf#99 · 3 comments · Opened Jul 5, 2017
Create map file that points a TargetPath to a location on the filesystem Open

Feature :: Improvement Priority :: Medium

Difficulty 5/5 Over a week Newbie friendliness 25/100

theupdateframework/rust-tuf#95 · 1 comment · Opened Jul 4, 2017
Hide Windows file path compatibility behind a feature flag Open

Flag :: Research Priority :: Low

Difficulty 4/5 3-5 days Newbie friendliness 28/100

theupdateframework/rust-tuf#94 · 1 comment · Opened Jul 4, 2017
Add configurable max size for targets Open

Feature :: Improvement Priority :: Low

Difficulty 4/5 3-5 days Newbie friendliness 35/100

theupdateframework/rust-tuf#89 · Opened Jun 29, 2017
Add configurable max size for snapshot metadata Open

Feature :: Improvement Priority :: Low

Difficulty 4/5 3-5 days Newbie friendliness 20/100

theupdateframework/rust-tuf#88 · Opened Jun 29, 2017
Add configurable max size for targets metadata Open

Feature :: Improvement Priority :: Low

Difficulty 5/5 Over a week Newbie friendliness 20/100

theupdateframework/rust-tuf#87 · Opened Jun 29, 2017
Current serde/shims don't parse Vec<u8>, only hex/base64/pem strings Open

Feature :: Improvement Priority :: Low

Difficulty 3/5 1-2 days Newbie friendliness 45/100

theupdateframework/rust-tuf#86 · 8 comments · Opened Jun 28, 2017
Add `clean` function to `Repository` Open

Feature :: API Priority :: Low

Difficulty 5/5 Over a week Newbie friendliness 30/100

theupdateframework/rust-tuf#85 · 9 comments · Opened Jun 28, 2017

theupdateframework/rust-tuf

Get new issues in your inbox