TAP request: artifact discovery, index files and targets metadata
Nobody has claimed this yet.
Assessment
- Difficulty
- 5/5
- Estimated time
- Over a week
- Newbie friendliness
- 25/100
- Issue type
- Documentation
- Clarity
- Needs clarification
- Activity status
- Stale
- Domain
- documentation, security
Research direction
Start with the linked “TUF and target discovery” problem statement, then compare PEP 458 and its index-only variant. Define the scope of an informational TAP covering artifact discovery, index files, and targets metadata; done means the proposal clearly addresses the observations and security implications.
Written by the indexing model from the issue text.
Description
The following observations have been made at several points in time by different people and might be worth an informational TAP:
- Artifact (target) discovery is not part of the TUF design, and only possible to a limited extent with TUF metadata
- Artifact discovery is a crucial feature in many content repositories, e.g.
- download latest version of project
- list all versions of project
- Content repositories may employ a custom search index for this purpose
- The search index must be included in targets metadata for security reasons
- If the search index is protected by targets metadata and lists additional information about artifacts, the actual artifacts may be omitted in targets metadata, and thus reduce metadata overhead.
References
- TUF and target discovery (detailed problem statement of above)
- PEP 458
- PEP 458 - Index only variant
- Dominant language
- No language data
- Stars
- 37
- Forks
- 23
- PR merge metrics
- No merged PRs in 30d
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from theupdateframework/taps
-
Difficulty 5/5 Over a week Newbie friendliness 42/100
theupdateframework/taps#194 ·
-
Difficulty 5/5 Over a week Newbie friendliness 20/100
theupdateframework/taps#191 · 8 comments ·
-
Difficulty 5/5 Over a week Newbie friendliness 25/100
theupdateframework/taps#190 · 19 comments · 1 reaction ·
-
Difficulty 4/5 3-5 days Newbie friendliness 32/100
theupdateframework/taps#178 · 1 comment · 1 reaction ·
-
Difficulty 5/5 Over a week Newbie friendliness 25/100
theupdateframework/taps#171 · 1 reaction ·
All issues in theupdateframework/taps
Similar issues
-
documentation help wanted
Difficulty 2/5 1-3 hours Newbie friendliness 90/100
-
user-reported
Difficulty 2/5 1-3 hours Newbie friendliness 85/100
Kong/developer.konghq.com#7316 ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 88/100
HarperFast/skills#96 ·
-
enhancement
Difficulty 2/5 1-3 hours Newbie friendliness 68/100
-
Difficulty 2/5 1-3 hours Newbie friendliness 82/100
infinispan/infinispan#18150 ·