-
Notifications
You must be signed in to change notification settings - Fork 56
Reference the map file in the specification (TAP4) #88
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Comments
The specification is now in a separate repository theupdateframework/specification, should this issue be moved there? |
The specification claims that it adheres to TAP 3 and TAP 4, which is not the case. TAP 3 requires changes to the existing metadata format (prepared in theupdateframework#57) and TAP 4 adds a new metadata file (map.json), which is not yet mentioned in the specification (issue described in theupdateframework#88). As agreed in the TUF community meeting on Dec 10, 2019, we remove TAP 3 and TAP 4 (adherence claims), for a formal 1.0.0 release and add TAP 4 in version 1.1.x and TAP 3 in version 2.x.x. (see meeting notes about "Versioning" https://groups.google.com/forum/#!msg/theupdateframework/oPTliXibT_4/0tJ_POLGAwAJ)
As discussed in the TUF community meeting on Dec 10, 2019 the changes of this PR require a minor bump of the spec version (see meeting notes about "Versioning" ). |
I'm planning to take a stab at this over the next week or two. |
For the interested, I submitted theupdateframework/taps#117 to try and clean up TAP 4 before I work on this. |
I haven't forgotten this work, but I want to discuss and resolve #109 on documenting concepts first. |
TAP 4 (the map file) describes how users may specify that a certain repository should be used for some targets, while other repositories are to be used for other targets.
We should reference the map file in the specification once TAP 4 is reviewed and accepted, which depends on the acceptance of TAP 7 (conformance testing). Pending pull request for the map file implementation is available here: theupdateframework/python-tuf#430
A detailed outline of the map file should be covered in the specification, similar to pull request theupdateframework/python-tuf#440 that has now been merged.
The text was updated successfully, but these errors were encountered: