Elgato_dark/python-tuf
1
0
Fork 0
mirror of https://github.com/theupdateframework/python-tuf synced 2026-05-24 10:08:28 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions
3484 commits 28 branches 35 tags 23 MiB
Commit graph

3484 commits

This branch
This branch
All branches
Author SHA1 Message Date
Justin Cappos
3a79476ffd
Merge pull request #960 from brainwane/pypi-badge 
Add PyPI badge
 2019-11-26 15:18:54 -05:00
Sumana Harihareswara
4d43201af8 Add PyPI badge 
Signed-off-by: Sumana Harihareswara <sh@changeset.nyc>
 2019-11-26 14:23:28 -05:00
lukpueh
25e9e77dad
Merge pull request #959 from lukpueh/bump_version_0.12.1 
Bump version 0.12.1
 2019-11-15 16:27:43 +01:00
Lukas Puehringer
054a32ce1a setup.py/__init__.py: bump version to v0.12.1 
Signed-off-by: Lukas Puehringer <lukas.puehringer@nyu.edu>
 2019-11-14 15:49:15 +01:00
Lukas Puehringer
733c2edfe0 CHANGELOG: Add v0.12.1 entry 
Signed-off-by: Lukas Puehringer <lukas.puehringer@nyu.edu>
 2019-11-14 15:49:10 +01:00
lukpueh
73aff69b34
Merge pull request #950 from theupdateframework/trishankatdatadog-patch-1 
Relax semver for spec version in 0.12.MINOR
 2019-11-14 15:29:59 +01:00
lukpueh
42c8d116d9
Merge pull request #956 from lukpueh/update-2019-11-12 
Update dependencies
 2019-11-12 16:00:02 +01:00
Lukas Puehringer
e718757dde Update dependencies 
- Fix syntax issue (remove stray conflict marker)
- Update dependencies
  astroid from 2.3.2 to 2.3.3
  securesystemslib from 0.12.1 to 0.12.2
  six from 1.12.0 to 1.13.0

Signed-off-by: Lukas Puehringer <lukas.puehringer@nyu.edu>
 2019-11-12 12:34:55 +01:00
lukpueh
9b93c0bccc
Merge pull request #954 from theupdateframework/JustinCappos-Governance-clarifications 
Governance clarifications
 2019-11-11 15:55:00 +01:00
Justin Cappos
f6bd46fc13 Governance clarifications 
Signed-off-by: Justin Cappos <justincappos@gmail.com>
Signed-off-by: Lukas Puehringer <lukas.puehringer@nyu.edu>
 2019-11-11 15:51:52 +01:00
Trishank K Kuppusamy
e488386a0c
relax semver for spec version in 0.12.MINOR 
Signed-off-by: Trishank K Kuppusamy <trishank.kuppusamy@datadoghq.com>

Update formats.py
 2019-11-06 11:52:25 -05:00
Justin Cappos
141be9cd92
Merge pull request #953 from theupdateframework/JustinCappos-term-info-1 
CB term information
 2019-11-05 16:13:06 -05:00
Justin Cappos
1f2df57ecd
Update docs/GOVERNANCE.md 
Signed-off-by: Justin Cappos <justincappos@gmail.com>

Co-Authored-By: Trishank K Kuppusamy <33133073+trishankatdatadog@users.noreply.github.com>
 2019-11-05 15:32:29 -05:00
Justin Cappos
35b97a1951
Update docs/GOVERNANCE.md 
Signed-off-by: Justin Cappos <justincappos@gmail.com>

Co-Authored-By: Lois Anne DeLong <lad278@nyu.edu>
 2019-11-05 15:25:36 -05:00
Justin Cappos
01b90c4245
Update docs/GOVERNANCE.md 
Signed-off-by: Justin Cappos <justincappos@gmail.com>

Co-Authored-By: Lois Anne DeLong <lad278@nyu.edu>
 2019-11-05 15:25:11 -05:00
Justin Cappos
7753af072c
Update docs/GOVERNANCE.md 
Signed-off-by: Justin Cappos <justincappos@gmail.com>

Co-Authored-By: Lois Anne DeLong <lad278@nyu.edu>
 2019-11-05 15:25:00 -05:00
Justin Cappos
6a13894fb5
CB term information 
Signed-off-by: Justin Cappos <justincappos@gmail.com>
 2019-11-05 13:28:11 -05:00
Trishank K Kuppusamy
3d96fb1933
Merge pull request #945 from theupdateframework/pyup-scheduled-update-2019-11-04 
Scheduled weekly dependency update for week 44
 2019-11-05 10:54:13 -05:00
Justin Cappos
991b4f3ee3
Merge pull request #947 from theupdateframework/JustinCappos-CB-clarify+DCO 
CB clarifications requested by Liz
 2019-11-05 10:42:19 -05:00
Justin Cappos
51a972736f
Merge pull request #948 from theupdateframework/trishankatdatadog-patch-1 
Update MAINTAINERS.txt
 2019-11-05 10:04:51 -05:00
Trishank K Kuppusamy
f067ff9e3e
Update MAINTAINERS.txt 2019-11-05 09:56:28 -05:00
Trishank K Kuppusamy
ccd8904a1e
Update MAINTAINERS.txt 2019-11-05 09:55:17 -05:00
pyup-bot
5f54053aee Update dependencies 
backports.functools-lru-cache from 1.5 to 1.6.1
cffi from 1.13.1 to 1.13.2
python-dateutil from 2.8.0 to 2.8.1
securesystemslib from 0.12.0 to 0.12.1

Signed-off-by: Lukas Puehringer <lukas.puehringer@nyu.edu>
 2019-11-05 15:41:53 +01:00
Justin Cappos
bab230ff32
CB clarifications requested by Liz 
Signed-off-by: Justin Cappos <justincappos@gmail.com>
 2019-11-05 09:00:35 -05:00
Justin Cappos
a142413099
Merge pull request #944 from theupdateframework/JustinCappos-CB 
changes recommended by Liz
 2019-10-30 06:56:00 -04:00
Justin Cappos
3973e79b87
changes recommended by Liz 
Signed-off-by: Justin Cappos  <justincappos@gmail.com>
 2019-10-30 06:31:33 -04:00
lukpueh
3079888a06
Merge pull request #942 from theupdateframework/pyup-scheduled-update-2019-10-28 
Scheduled weekly dependency update for week 43
 2019-10-29 10:13:44 +01:00
pyup-bot
f5690aac13 Misc dependency updates 
gitpython from 3.0.3 to 3.0.4
lazy-object-proxy from 1.4.2 to 1.4.3
virtualenv from 16.7.6 to 16.7.7

Signed-off-by: Lukas Puehringer <lukas.puehringer@nyu.edu>
 2019-10-29 10:06:23 +01:00
lukpueh
96858da2d8
Merge pull request #941 from theupdateframework/pyup-scheduled-update-2019-10-21 
Scheduled weekly dependency update for week 42
 2019-10-28 16:04:52 +01:00
pyup-bot
98f0a405f2 Misc dependency updates 
asn1crypto from 1.1.0 to 1.2.0
astroid from 2.3.1 to 2.3.2
cffi from 1.12.3 to 1.13.1
cffi from 1.13.0 to 1.13.1
cryptography from 2.7 to 2.8
ipaddress from 1.0.22 to 1.0.23
pylint from 2.4.2 to 2.4.3
virtualenv from 16.7.5 to 16.7.6

Signed-off-by: Lukas Puehringer <lukas.puehringer@nyu.edu>
 2019-10-28 10:17:07 +01:00
lukpueh
e911fc4016
Merge pull request #936 from lukpueh/update-requirements 
Update requirements files
 2019-10-21 15:02:35 +02:00
Justin Cappos
2713c335eb
Merge pull request #939 from theupdateframework/JustinCappos-CNCF-role 
Clarify CNCF role...
 2019-10-17 11:01:21 -04:00
Justin Cappos
8f6fc69735
Clarify CNCF role... 
Signed-off-by: Justin Cappos <justincappos@gmail.com>
 2019-10-16 20:23:32 -04:00
Santiago Torres
107b472377
Merge pull request #937 from theupdateframework/JustinCappos-governance 
quorum on CB
 2019-10-16 13:29:15 -04:00
Justin Cappos
2ad18feb27
quorum on CB 
Signed-off-by: Justin Cappos <justincappos@gmail.com>
Signed-off-by: Santiago Torres <santiago@nyu.edu>
 2019-10-16 11:52:12 -04:00
Lukas Puehringer
0d9d1e17a4 Update dev-requirements.txt with pip-compile 
Manually merges pip-compile output  for Python2 and Python3

Signed-off-by: Lukas Puehringer <lukas.puehringer@nyu.edu>
 2019-10-15 12:37:58 +02:00
Lukas Puehringer
839d30b5a5 Update requirements.txt with pip-compile 
Manually merges pip-compile output  for Python2 and Python3

- Update cffi to 1.13.0
- Update securesystemslib 0.12.0 hashes
- Add missing python-dateutil transitive dependency
- Add missing subprocess32 transitive conditional dependency

Signed-off-by: Lukas Puehringer <lukas.puehringer@nyu.edu>
 2019-10-15 12:37:25 +02:00
pyup-bot
bbad693080 Update asn1crypto from 1.0.1 to 1.1.0 
Signed-off-by: Lukas Puehringer <lukas.puehringer@nyu.edu>
 2019-10-15 11:37:33 +02:00
Justin Cappos
6138395114
Merge pull request #921 from lukpueh/bump_version_0.12.0-dev0 
Bump version 0.12.0
 2019-10-14 15:52:12 -04:00
Lukas Puehringer
9a8e3c9ef9 setup.py/__init__.py: bump version to v0.12.0 
Signed-off-by: Lukas Puehringer <lukas.puehringer@nyu.edu>
 2019-10-14 16:47:16 +02:00
Lukas Puehringer
3b77a7d320 CHANGELOG: Add 0.12.0 entry 
Signed-off-by: Lukas Puehringer <lukas.puehringer@nyu.edu>
 2019-10-14 16:47:16 +02:00
lukpueh
536fed7358
Merge pull request #934 from lukpueh/update-sslib-0.12.0 
Update securesystemslib to 0.12.0
 2019-10-14 16:46:05 +02:00
Joshua Lock
78356eff44 Remove uses of securesystemslib.util.TempFile 
The class has been removed from securesystemslib as its desirable
features are no longer required and its behavioural inconsistencies
with a standard Python file object are confusing. Therefore remove
uses of the class from TUF.

Signed-off-by: Joshua Lock <jlock@vmware.com>
Signed-off-by: Lukas Puehringer <lukas.puehringer@nyu.edu>
 2019-10-14 12:37:34 +02:00
Joshua Lock
f5c168d4e6 Explicitly encode data passed to securesystemslib.keys 
securesystemslib PR #162 removed implicit encoding of data to bytes
in securesystemslib.keys.[create_signature|verify_signature]

Update to encode data where required.

Signed-off-by: Joshua Lock <jlock@vmware.com>
 2019-10-14 12:26:31 +02:00
Lukas Puehringer
2342e18e45 Update securesystemslib dependency to 0.12.0 
Signed-off-by: Lukas Puehringer <lukas.puehringer@nyu.edu>
 2019-10-14 12:26:26 +02:00
lukpueh
232a4d6097
Merge pull request #928 from lukpueh/add-slow-retrieval-disclaimer 
Add disclaimer about limited slow retrieval attack protection
 2019-10-11 09:43:51 +02:00
Lukas Puehringer
42a4cee56c Add slow retrieval disclaimer 
Since https://github.com/theupdateframework/tuf/pull/781 we
only provide limited protection against slow retrieval attacks.
So far this has only been discussed in above issue and hinted at
by a disabled test and a code comment in that test.

This change adds a corresponding disclaimer to a more prominent
place, i.e. the list of attacks in SECURITY.md.

Signed-off-by: Lukas Puehringer <lukas.puehringer@nyu.edu>
Co-Authored-By: Trishank K Kuppusamy <33133073+trishankatdatadog@users.noreply.github.com>
 2019-10-10 16:43:46 +02:00
lukpueh
c097547ab2
Merge pull request #931 from theupdateframework/pyup-scheduled-update-2019-10-07 
Scheduled weekly dependency update for week 40
 2019-10-08 14:16:13 +02:00
pyup-bot
e75e0a2cc4 Update dependencies 
Update asn1crypto from 0.24.0 to 1.0.1
Update gitpython from 3.0.2 to 3.0.3

Signed-off-by: Lukas Puehringer <lukas.puehringer@nyu.edu>
 2019-10-08 09:49:45 +02:00
lukpueh
4f9faf107d
Merge pull request #930 from lukpueh/correctly-rotate-root-test 
Add tests for multiple root key rotation
 2019-10-08 09:44:10 +02:00