Package: go-tuf
Source: golang-github-theupdateframework-go-tuf
Version: 2.4.2+0.7.0-1
Architecture: amd64
Maintainer: Ubuntu Developers <ubuntu-devel-discuss@lists.ubuntu.com>
Original-Maintainer: Debian Go Packaging Team <team+pkg-go@tracker.debian.org>
Installed-Size: 10987
Depends: libc6 (>= 2.34)
Static-Built-Using: go-containerregistry (= 0.20.7+ds1-3), golang-1.26 (= 1.26.4-1), golang-github-cenkalti-backoff (= 5.0.3-3), golang-github-go-logr-logr (= 1.4.3-1), golang-github-go-logr-stdr (= 1.2.2-4), golang-github-golang-snappy (= 1.0.0-1), golang-github-opencontainers-go-digest (= 1.0.0-2), golang-github-secure-systems-lab-go-securesystemslib (= 0.11.0-1), golang-github-sigstore-protobuf-specs (= 0.5.1-1), golang-github-sigstore-sigstore (= 1.10.4-1), golang-github-spf13-cobra (= 1.10.2-1), golang-github-spf13-pflag (= 1.0.10-1), golang-go.crypto (= 1:0.53.0-1), golang-golang-x-sys (= 0.45.0+dfsg-1), golang-golang-x-term (= 0.41.0-1), golang-goleveldb (= 0.0~git20200815.5c35d60-2), golang-google-genproto (= 0.0~git20260414.afd174a-1build5), golang-google-protobuf (= 1.36.10-2)
Section: devel
Priority: optional
Homepage: https://github.com/theupdateframework/go-tuf
Description: framework for Securing Software Update Systems (program)
 The Update Framework (TUF) (https://theupdateframework.io/) is a
 framework for secure content delivery and updates. It protects against
 various types of supply chain attacks and provides resilience to
 compromise.
 .
 The Update Framework (TUF) design helps developers maintain the security
 of a software update system, even against attackers that compromise the
 repository or signing keys. TUF provides a flexible specification
 (https://github.com/theupdateframework/specification/blob/master/tuf-
 spec.md) defining functionality that developers can use in any software
 update system or re-implement to fit their needs.
 .
 The go-tuf v2 project provides a lightweight library with the following
 functionality:
 .
  * creation, reading, and writing of TUF metadata
  * an easy object-oriented approach for interacting with TUF metadata
  * consistent snapshots
  * signing and verifying TUF metadata
  * ED25519, RSA, and ECDSA key types referenced by the latest TUF
    specification
  * top-level role delegation
  * target delegation via standard and hash bin delegations
  * support of succinct hash bin delegations (https://github.
    com/theupdateframework/taps/blob/master/tap15.md) which significantly
    reduce the size of the TUF metadata
  * support for unrecognized fields within the metadata (i.e. preserved
    and accessible through root.Signed.UnrecognizedFields["some-unknown-
    field"], also used for verifying/signing (if included in the Signed
    portion of the metadata))
  * TUF client API
  * TUF multi-repository client API (implements TAP 4 - Multiple
    repository consensus on entrusted targets (https://github.
    com/theupdateframework/taps/blob/master/tap4.md))
 .
 This package contains the command-line tool 'tuf-client'.
