Package: gittuf
Version: 0.9.0-5
Architecture: arm64
Maintainer: Ubuntu Developers <ubuntu-devel-discuss@lists.ubuntu.com>
Original-Maintainer: Debian Go Packaging Team <team+pkg-go@tracker.debian.org>
Installed-Size: 64438
Depends: libc6 (>= 2.34)
Built-Using: cosign (= 2.5.0-2), docker-registry (= 2.8.3+ds1-2), docker.io (= 26.1.5+dfsg1-9ubuntu1), gitsign (= 0.13.0-1), go-containerregistry (= 0.20.1+ds1-1), golang-1.24 (= 1.24.2-2), golang-filippo-edwards25519 (= 1.0.0~rc1+git20210721-0.1), golang-fsnotify (= 1.8.0-3), golang-github-asaskevich-govalidator (= 11.0.1-1), golang-github-atotto-clipboard (= 0.1.4-1), golang-github-aws-aws-sdk-go (= 1.49.0-2), golang-github-aws-aws-sdk-go-v2 (= 1.30.3-1), golang-github-aws-smithy-go (= 1.20.3-1), golang-github-aymanbagabas-go-osc52-v2 (= 2.0.1-1), golang-github-blang-semver (= 4.0.0-1), golang-github-cespare-xxhash (= 2.3.0-1), golang-github-charmbracelet-bubbles (= 0.18.0-1), golang-github-charmbracelet-bubbletea (= 0.27.0-1), golang-github-charmbracelet-lipgloss (= 0.12.1-2), golang-github-charmbracelet-x (= 0.0~git20240809.9ab0ca0+ds-2), golang-github-cloudflare-circl (= 1.6.1-1), golang-github-containerd-stargz-snapshotter (= 0.14.3-4), golang-github-coreos-go-oidc-v3 (= 3.4.0-2), golang-github-cyphar-filepath-securejoin (= 0.3.4-3), golang-github-danwakefield-fnmatch (= 0.0~git20160403.cbb64ac-3), golang-github-digitorus-pkcs7 (= 0.0~git20230818.3a137a8-3), golang-github-digitorus-timestamp (= 0.0~git20231217.220c5c2-2), golang-github-docker-docker-credential-helpers (= 0.6.4+ds1-1build4), golang-github-dustin-go-humanize (= 1.0.1-1), golang-github-emirpasic-gods (= 1.12.0-2), golang-github-github-smimesign (= 0.2.0+dfsg-3), golang-github-go-chi-chi (= 5.2.0-1), golang-github-go-git-go-billy (= 5.5.0-1), golang-github-go-git-go-git (= 5.14.0-1), golang-github-go-jose-go-jose (= 4.0.5-1), golang-github-go-logr-logr (= 1.4.2-2), golang-github-go-logr-stdr (= 1.2.2-4), golang-github-go-openapi-analysis (= 0.23.0-1), golang-github-go-openapi-errors (= 0.22.0-1), golang-github-go-openapi-jsonpointer (= 1:0.21.1-2), golang-github-go-openapi-jsonreference (= 1:0.21.0-1), golang-github-go-openapi-loads (= 0.22.0-1), golang-github-go-openapi-runtime (= 0.28.0-2), golang-github-go-openapi-spec (= 1:0.21.0-1), golang-github-go-openapi-strfmt (= 0.23.0-1), golang-github-go-openapi-swag (= 1:0.23.1-1), golang-github-go-openapi-validate (= 0.24.0-3), golang-github-golang-groupcache (= 0.0~git20210331.41bb18b-1), golang-github-golang-protobuf-1-5 (= 1.5.4-1), golang-github-golang-snappy (= 0.0.2-3), golang-github-google-certificate-transparency (= 1.3.1-2), golang-github-google-go-github (= 60.0.0-1), golang-github-google-go-querystring (= 1.1.0-2), golang-github-google-uuid (= 1.6.0-1), golang-github-googleapis-gax-go (= 2.14.1-1), golang-github-hashicorp-go-cleanhttp (= 0.5.2-1), golang-github-hashicorp-go-retryablehttp (= 0.7.1-1), golang-github-hashicorp-hcl (= 1.0.0-1.1), golang-github-hiddeco-sshsig (= 0.1.0-2), golang-github-imdario-mergo (= 1.0.1-2), golang-github-in-toto-attestation (= 1.1.1-1), golang-github-jbenet-go-context (= 0.0~git20150711.d14ea06-4), golang-github-jedisct1-go-minisign (= 0.2.5-1), golang-github-jellydator-ttlcache (= 3.0.1-2), golang-github-jmespath-go-jmespath (= 0.4.0-2), golang-github-jonboulle-clockwork (= 0.1.0-4.1), golang-github-josharian-intern (= 1.0.0-3), golang-github-kevinburke-ssh-config (= 1.2.0-1), golang-github-klauspost-compress (= 1.18.0+ds1-1), golang-github-lucasb-eyer-go-colorful (= 1.2.0-1), golang-github-magiconair-properties (= 1.8.7-1), golang-github-mailru-easyjson (= 0.7.7-1build1), golang-github-mattn-go-isatty (= 0.0.20-1), golang-github-mattn-go-runewidth (= 0.0.16-1), golang-github-mitchellh-go-homedir (= 1.1.0-1), golang-github-mitchellh-mapstructure (= 1.5.0+git20231216.8508981-1), golang-github-muesli-ansi (= 0.0~git20211031.c9f0611-2), golang-github-muesli-cancelreader (= 0.2.2-2), golang-github-muesli-reflow (= 0.3.0-2), golang-github-muesli-termenv (= 0.15.2-1), golang-github-nozzle-throttler (= 1.1-4), golang-github-oklog-ulid (= 2.0.2+ds-2), golang-github-opencontainers-go-digest (= 1.0.0-2), golang-github-opencontainers-image-spec (= 1.1.0-2), golang-github-opentracing-opentracing-go (= 1.2.0-2), golang-github-pelletier-go-toml.v2 (= 2.2.1-1), golang-github-pjbgf-sha1cd (= 0.3.0-2), golang-github-pkg-errors (= 0.9.1-3), golang-github-protonmail-go-crypto (= 1.2.0-1), golang-github-rivo-uniseg (= 0.4.7-1), golang-github-sahilm-fuzzy (= 0.1.1-1), golang-github-secure-systems-lab-go-securesystemslib (= 0.9.0-1), golang-github-segmentio-ksuid (= 1.0.4-2build1), golang-github-sergi-go-diff (= 1.2.0-2), golang-github-shibumi-go-pathspec (= 1.3.0-2), golang-github-sigstore-protobuf-specs (= 0.4.1-2), golang-github-sigstore-sigstore (= 1.9.3-2), golang-github-sigstore-timestamp-authority (= 1.2.3-2), golang-github-skeema-knownhosts (= 1.3.0-1), golang-github-skratchdot-open-golang (= 0.0~git20160302.0.75fb7ed-2.1), golang-github-smallstep-crypto (= 0.57.0-1), golang-github-spf13-afero (= 1.11.0-1), golang-github-spf13-cast (= 1.6.0-2), golang-github-spf13-cobra (= 1.8.1-1), golang-github-spf13-jwalterweatherman (= 1.1.0+really1.1.0-2), golang-github-spf13-pflag (= 1.0.6~git20210604-d5e0c0615ace-1), golang-github-spf13-viper (= 1.12.0-1), golang-github-src-d-gcfg (= 1.4.0-3), golang-github-subosito-gotenv (= 1.3.0-1), golang-github-theupdateframework-go-tuf (= 2.0.2+0.7.0-1), golang-github-tink-crypto-tink-go (= 2.4.0-1), golang-github-tink-crypto-tink-go-awskms (= 2.1.0-2), golang-github-tink-crypto-tink-go-gcpkms (= 2.2.0-2), golang-github-transparency-dev-merkle (= 0.0.2-2), golang-github-vbatts-tar-split (= 0.11.6-1), golang-github-xanzy-ssh-agent (= 0.3.2-1), golang-github-xo-terminfo (= 0.0~git20220910.abceb7e-1), golang-go.crypto (= 1:0.25.0-1), golang-go.opencensus (= 0.24.0-2), golang-go.uber-atomic (= 1.11.0-1), golang-go.uber-multierr (= 1.6.0-1), golang-go.uber-zap (= 1.26.0-1), golang-golang-x-exp (= 0.0~git20231006.7918f67-2), golang-golang-x-mod (= 0.19.0-1), golang-golang-x-net (= 1:0.27.0-2), golang-golang-x-oauth2 (= 0.27.0-1), golang-golang-x-sync (= 0.7.0-1), golang-golang-x-sys (= 0.22.0-1), golang-golang-x-term (= 0.22.0-1), golang-golang-x-text (= 0.22.0-1), golang-goleveldb (= 0.0~git20200815.5c35d60-2), golang-google-api (= 0.61.0-6), golang-google-cloud (= 0.56.0-6), golang-google-genproto (= 0.0~git20210726.e7812ac-4), golang-google-grpc (= 1.64.0-7), golang-google-protobuf (= 1.36.5-1), golang-gopkg-ini.v1 (= 1.67.0-1), golang-gopkg-square-go-jose.v2 (= 2.6.3-3), golang-gopkg-warnings.v0 (= 0.1.2-1.1), golang-gopkg-yaml.v3 (= 3.0.1-3), golang-k8s-klog (= 2.130.1-1), golang-k8s-sigs-yaml (= 1.4.0-2), golang-logrus (= 1.9.0-1), golang-mongodb-mongo-driver (= 1.17.1+ds1-2), golang-opentelemetry-otel (= 1.31.0-4), golang-webpki-org-jsoncanonicalizer (= 1.0.1-3), in-toto-golang (= 0.9.0+ds-3), rekor (= 1.3.9-1), relic (= 7.6.1-2), sigstore-go (= 0.7.1-2), trillian (= 1.6.1-1)
Static-Built-Using: cosign (= 2.5.0-2), docker-registry (= 2.8.3+ds1-2), docker.io (= 26.1.5+dfsg1-9ubuntu1), gitsign (= 0.13.0-1), go-containerregistry (= 0.20.1+ds1-1), golang-1.24 (= 1.24.2-2), golang-filippo-edwards25519 (= 1.0.0~rc1+git20210721-0.1), golang-fsnotify (= 1.8.0-3), golang-github-asaskevich-govalidator (= 11.0.1-1), golang-github-atotto-clipboard (= 0.1.4-1), golang-github-aws-aws-sdk-go (= 1.49.0-2), golang-github-aws-aws-sdk-go-v2 (= 1.30.3-1), golang-github-aws-smithy-go (= 1.20.3-1), golang-github-aymanbagabas-go-osc52-v2 (= 2.0.1-1), golang-github-blang-semver (= 4.0.0-1), golang-github-cespare-xxhash (= 2.3.0-1), golang-github-charmbracelet-bubbles (= 0.18.0-1), golang-github-charmbracelet-bubbletea (= 0.27.0-1), golang-github-charmbracelet-lipgloss (= 0.12.1-2), golang-github-charmbracelet-x (= 0.0~git20240809.9ab0ca0+ds-2), golang-github-cloudflare-circl (= 1.6.1-1), golang-github-containerd-stargz-snapshotter (= 0.14.3-4), golang-github-coreos-go-oidc-v3 (= 3.4.0-2), golang-github-cyphar-filepath-securejoin (= 0.3.4-3), golang-github-danwakefield-fnmatch (= 0.0~git20160403.cbb64ac-3), golang-github-digitorus-pkcs7 (= 0.0~git20230818.3a137a8-3), golang-github-digitorus-timestamp (= 0.0~git20231217.220c5c2-2), golang-github-docker-docker-credential-helpers (= 0.6.4+ds1-1build4), golang-github-dustin-go-humanize (= 1.0.1-1), golang-github-emirpasic-gods (= 1.12.0-2), golang-github-github-smimesign (= 0.2.0+dfsg-3), golang-github-go-chi-chi (= 5.2.0-1), golang-github-go-git-go-billy (= 5.5.0-1), golang-github-go-git-go-git (= 5.14.0-1), golang-github-go-jose-go-jose (= 4.0.5-1), golang-github-go-logr-logr (= 1.4.2-2), golang-github-go-logr-stdr (= 1.2.2-4), golang-github-go-openapi-analysis (= 0.23.0-1), golang-github-go-openapi-errors (= 0.22.0-1), golang-github-go-openapi-jsonpointer (= 1:0.21.1-2), golang-github-go-openapi-jsonreference (= 1:0.21.0-1), golang-github-go-openapi-loads (= 0.22.0-1), golang-github-go-openapi-runtime (= 0.28.0-2), golang-github-go-openapi-spec (= 1:0.21.0-1), golang-github-go-openapi-strfmt (= 0.23.0-1), golang-github-go-openapi-swag (= 1:0.23.1-1), golang-github-go-openapi-validate (= 0.24.0-3), golang-github-golang-groupcache (= 0.0~git20210331.41bb18b-1), golang-github-golang-protobuf-1-5 (= 1.5.4-1), golang-github-golang-snappy (= 0.0.2-3), golang-github-google-certificate-transparency (= 1.3.1-2), golang-github-google-go-github (= 60.0.0-1), golang-github-google-go-querystring (= 1.1.0-2), golang-github-google-uuid (= 1.6.0-1), golang-github-googleapis-gax-go (= 2.14.1-1), golang-github-hashicorp-go-cleanhttp (= 0.5.2-1), golang-github-hashicorp-go-retryablehttp (= 0.7.1-1), golang-github-hashicorp-hcl (= 1.0.0-1.1), golang-github-hiddeco-sshsig (= 0.1.0-2), golang-github-imdario-mergo (= 1.0.1-2), golang-github-in-toto-attestation (= 1.1.1-1), golang-github-jbenet-go-context (= 0.0~git20150711.d14ea06-4), golang-github-jedisct1-go-minisign (= 0.2.5-1), golang-github-jellydator-ttlcache (= 3.0.1-2), golang-github-jmespath-go-jmespath (= 0.4.0-2), golang-github-jonboulle-clockwork (= 0.1.0-4.1), golang-github-josharian-intern (= 1.0.0-3), golang-github-kevinburke-ssh-config (= 1.2.0-1), golang-github-klauspost-compress (= 1.18.0+ds1-1), golang-github-lucasb-eyer-go-colorful (= 1.2.0-1), golang-github-magiconair-properties (= 1.8.7-1), golang-github-mailru-easyjson (= 0.7.7-1build1), golang-github-mattn-go-isatty (= 0.0.20-1), golang-github-mattn-go-runewidth (= 0.0.16-1), golang-github-mitchellh-go-homedir (= 1.1.0-1), golang-github-mitchellh-mapstructure (= 1.5.0+git20231216.8508981-1), golang-github-muesli-ansi (= 0.0~git20211031.c9f0611-2), golang-github-muesli-cancelreader (= 0.2.2-2), golang-github-muesli-reflow (= 0.3.0-2), golang-github-muesli-termenv (= 0.15.2-1), golang-github-nozzle-throttler (= 1.1-4), golang-github-oklog-ulid (= 2.0.2+ds-2), golang-github-opencontainers-go-digest (= 1.0.0-2), golang-github-opencontainers-image-spec (= 1.1.0-2), golang-github-opentracing-opentracing-go (= 1.2.0-2), golang-github-pelletier-go-toml.v2 (= 2.2.1-1), golang-github-pjbgf-sha1cd (= 0.3.0-2), golang-github-pkg-errors (= 0.9.1-3), golang-github-protonmail-go-crypto (= 1.2.0-1), golang-github-rivo-uniseg (= 0.4.7-1), golang-github-sahilm-fuzzy (= 0.1.1-1), golang-github-secure-systems-lab-go-securesystemslib (= 0.9.0-1), golang-github-segmentio-ksuid (= 1.0.4-2build1), golang-github-sergi-go-diff (= 1.2.0-2), golang-github-shibumi-go-pathspec (= 1.3.0-2), golang-github-sigstore-protobuf-specs (= 0.4.1-2), golang-github-sigstore-sigstore (= 1.9.3-2), golang-github-sigstore-timestamp-authority (= 1.2.3-2), golang-github-skeema-knownhosts (= 1.3.0-1), golang-github-skratchdot-open-golang (= 0.0~git20160302.0.75fb7ed-2.1), golang-github-smallstep-crypto (= 0.57.0-1), golang-github-spf13-afero (= 1.11.0-1), golang-github-spf13-cast (= 1.6.0-2), golang-github-spf13-cobra (= 1.8.1-1), golang-github-spf13-jwalterweatherman (= 1.1.0+really1.1.0-2), golang-github-spf13-pflag (= 1.0.6~git20210604-d5e0c0615ace-1), golang-github-spf13-viper (= 1.12.0-1), golang-github-src-d-gcfg (= 1.4.0-3), golang-github-subosito-gotenv (= 1.3.0-1), golang-github-theupdateframework-go-tuf (= 2.0.2+0.7.0-1), golang-github-tink-crypto-tink-go (= 2.4.0-1), golang-github-tink-crypto-tink-go-awskms (= 2.1.0-2), golang-github-tink-crypto-tink-go-gcpkms (= 2.2.0-2), golang-github-transparency-dev-merkle (= 0.0.2-2), golang-github-vbatts-tar-split (= 0.11.6-1), golang-github-xanzy-ssh-agent (= 0.3.2-1), golang-github-xo-terminfo (= 0.0~git20220910.abceb7e-1), golang-go.crypto (= 1:0.25.0-1), golang-go.opencensus (= 0.24.0-2), golang-go.uber-atomic (= 1.11.0-1), golang-go.uber-multierr (= 1.6.0-1), golang-go.uber-zap (= 1.26.0-1), golang-golang-x-exp (= 0.0~git20231006.7918f67-2), golang-golang-x-mod (= 0.19.0-1), golang-golang-x-net (= 1:0.27.0-2), golang-golang-x-oauth2 (= 0.27.0-1), golang-golang-x-sync (= 0.7.0-1), golang-golang-x-sys (= 0.22.0-1), golang-golang-x-term (= 0.22.0-1), golang-golang-x-text (= 0.22.0-1), golang-goleveldb (= 0.0~git20200815.5c35d60-2), golang-google-api (= 0.61.0-6), golang-google-cloud (= 0.56.0-6), golang-google-genproto (= 0.0~git20210726.e7812ac-4), golang-google-grpc (= 1.64.0-7), golang-google-protobuf (= 1.36.5-1), golang-gopkg-ini.v1 (= 1.67.0-1), golang-gopkg-square-go-jose.v2 (= 2.6.3-3), golang-gopkg-warnings.v0 (= 0.1.2-1.1), golang-gopkg-yaml.v3 (= 3.0.1-3), golang-k8s-klog (= 2.130.1-1), golang-k8s-sigs-yaml (= 1.4.0-2), golang-logrus (= 1.9.0-1), golang-mongodb-mongo-driver (= 1.17.1+ds1-2), golang-opentelemetry-otel (= 1.31.0-4), golang-webpki-org-jsoncanonicalizer (= 1.0.1-3), in-toto-golang (= 0.9.0+ds-3), rekor (= 1.3.9-1), relic (= 7.6.1-2), sigstore-go (= 0.7.1-2), trillian (= 1.6.1-1)
Section: vcs
Priority: optional
Homepage: https://github.com/gittuf/gittuf
Description: security layer for Git repositories (program)
 gittuf is a security layer for Git repositories. With gittuf, any
 developer who can pull from a Git repository can independently verify
 that the repository's security policies were followed. gittuf's policy,
 inspired by The Update Framework (TUF) (https://theupdateframework.io/),
 handles key management for all trusted developers in a repository,
 allows for setting permissions for repository branches, tags, files,
 etc., protects against other attacks
 (https://ssl.engineering.nyu.edu/papers/torres_toto_usenixsec-2016.pdf)
 Git is vulnerable to, and more — all while being backwards compatible
 with forges such as GitHub and GitLab.
 .
 gittuf is currently in alpha. gittuf's metadata may have breaking
 changes, meaning a repository's gittuf policy may have to be
 reinitialized from time to time. As such, gittuf is currently not
 intended to be the primary mechanism for enforcing a repository's
 security.
 .
 That said, we're actively seeking feedback from users. Take a look at
 the get started guide (/docs/get-started.md) to learn how to install and
 try gittuf out!
 .
 This package contains the command-line gittuf tool.
