All issues

Search results

Incorrect delegation verification (diamond delegation case)

Status: Open.

#759 In theupdateframework/go-tuf;

· jku opened on Aug 5, 2026

Potential fragility in path-pattern matching

Status: Open.

#747 In theupdateframework/go-tuf;

· udf2457 opened on Jun 19, 2026

Non-deterministic hash selection in DownloadTarget

Status: Open.

#746 In theupdateframework/go-tuf;

· udf2457 opened on Jun 19, 2026

multirepo Refresh() logic fails on first repo

Status: Open.

#745 In theupdateframework/go-tuf;

· udf2457 opened on Jun 19, 2026

go-tuf and Sigstore

Status: Open.

#738 In theupdateframework/go-tuf;

· paul-doherty opened on Jun 8, 2026

FAIL: RsaSuite.TestMarshalUnmarshalPrivateKey: PrivateKey.Precomputed.fips.dP: []uint8[127] != []uint8[128]

Status: Open.

#728 In theupdateframework/go-tuf;

· jas4711 opened on Apr 2, 2026

RFE: use json.RawMessage for all UnrecognizedFields maps

Status: Open.

#724 In theupdateframework/go-tuf;

· cyphar opened on Mar 22, 2026

PITCH: Update config to support an allowlist of signing algorithms.

Status: Open.

#723 In theupdateframework/go-tuf;

· kommendorkapten opened on Mar 3, 2026

Run the tuf-conformance test suite for go-tuf

Status: Open.

#700 In theupdateframework/go-tuf;

· rdimitrov opened on Nov 5, 2025

Use streaming semantics for DownloadFile through io.Reader/Writer interfaces instead of byte slices for memory efficiency

Status: Open.

#689 In theupdateframework/go-tuf;

· mikn opened on Jul 24, 2025

Decouple metadata / target retrieval from HTTP

Status: Open.

#670 In theupdateframework/go-tuf;

· random2442 opened on Jan 21, 2025

Add Blake2B hash support ?

Status: Open.

#668 In theupdateframework/go-tuf;

· udf2457 opened on Jan 21, 2025