Elgato_dark/python-tuf
1
0
Fork 0
mirror of https://github.com/theupdateframework/python-tuf synced 2026-05-24 10:08:28 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions
python-tuf/tuf/ngclient
History
Jussi Kukkonen 6eaf405bd5 ngclient: Increase default max_root_rotations 
this configuration variable controls how many root versions
the client will upgrade in a single refresh(). The idea is to prevent
a malicious repository from filling the disk with root versions.

We want a number that is high enough that a repository should not have
made that many roots in the time that clients take to update the "embedded"
root that the client shipped with ship with.

32 is small enough that a repository could reach it while clients with
v1 embedded in them are still in use. Let's bump to 256: this should be
plenty.

Signed-off-by: Jussi Kukkonen <jkukkonen@google.com>
2024-07-17 11:50:43 +03:00
..
_internal removing linting contraint arise from noqa:SLF001 2024-05-28 17:45:12 +05:30
__init__.py lint: Update formatting for ruff 3.x 2024-03-07 10:05:36 +02:00
config.py ngclient: Increase default max_root_rotations 2024-07-17 11:50:43 +03:00
fetcher.py lint: Remove unneeded noqa flags 2024-05-07 11:11:08 +02:00
README.md Improve README 2021-07-05 10:45:19 +03:00
updater.py Support app-specific user-agents 2024-04-19 17:55:29 +03:00

README.md

Next-gen TUF client for Python

This package provides modules for TUF client implementers.

tuf.ngclient.Updater is a class that implements the client workflow described in the TUF specification (see https://theupdateframework.github.io/specification/latest/#detailed-client-workflow)

tuf.ngclient.FetcherInterface is an abstract class that client implementers can implement a concrete class of in order to reuse their own networking/download libraries -- a Requests-based implementation is used by default.

This package:

  • Aims to be a clean, easy-to-validate reference client implementation written in modern Python
  • At the same time aims to be the library of choice for anyone implementing a TUF client in Python: light-weight, easy to integrate and with minimal required dependencies
  • Is still under development but is planned to become the default client in this implementation (i.e., the older tuf.client will be deprecated in the future)