Repository navigation
Delegated targets support - #1173
Open
loosebazooka wants to merge 1 commit into
Open
loosebazooka wants to merge 1 commit into
loosebazooka wants to merge 1 commit into
Conversation
loosebazooka
force-pushed
the
tuf-delegated-targets
branch
6 times, most recently
from
February 26, 2026 15:20
58d5ebf to
cd71b05
Compare
loosebazooka
marked this pull request as ready for review
February 27, 2026 16:52
jku
approved these changes
Mar 6, 2026
jku
left a comment
jku
left a comment
Member
There was a problem hiding this comment.
Looks good to me:
- I would have raised the question of "do you really want more code in sigstore-java" but if there are any plans of extracting the tuf part into a library, then I think this is valid as is it makes the implementation spec complete
- I've read the code, left one note about reading local metadata
- I would not trust my ability to verify this code by just reading (since I've overlooked so many bugs in the corresponding python implementation) but I am much more confident about the conformance testing: it really should cover a lot of potential mistakes in this area
loosebazooka
force-pushed
the
tuf-delegated-targets
branch
from
March 10, 2026 15:42
cd71b05 to
0a91cbb
Compare
loosebazooka
force-pushed
the
tuf-delegated-targets
branch
from
October 23, 2026 22:09
0a91cbb to
bb1101a
Compare
- No support for succinct delegations - Removed eager download of all targets - SigstoreTufClient must now download the targets it wants explicitly - Rename updateMeta() to refresh() to match naming of other clients - downloadTarget() implicitly calls refresh() if not yet refreshed - Correctly handle url escaping in names - Delegated target meta is cached per session - Enable passing delegation tests in tuf-cli xfails Signed-off-by: Appu Goundan <appu@google.com>
loosebazooka
force-pushed
the
tuf-delegated-targets
branch
from
November 2, 2026 20:23
bb1101a to
26cbb11
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
NOTE: this was produced with the help of AI coding tools
Summary
Release Note
Documentation