theupdateframework / theupdateframework/specification

Unclear what asterisk means in delegation paths

Open
#208 2 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

question
Dominant language
Python
Stars
405
Forks
59
Avg merge
3d 4h
Merged PRs (30d)
1

Description

For delegations, some examples seem to use a directory structure where foo/ means foo/bar/, foo/baz, and recursively everything under them. Other examples use what appears to be Unix style globbing like /foo/*.bar which would match foo/baz.bar and so on.

The spec should not actually specify either but say that a TUF implementation could use:

  • A directory structure
  • Regex
  • Unix globbing
  • Anything so long as it is well define and the server/client can agree on the method of representing delegated paths

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

No file, test, or entry point is named. Locate the delegation-path sections and examples in the specification, compare the directory and Unix-style interpretations described here, and check that the revised text permits an agreed representation without prescribing one method.

Written by the indexing model from the issue text.

Assessment

Domain
documentation
Issue type
Documentation
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.