Skip to content

Commit 11f32cb

Browse files
Update adoptions
Added: * CNAB Security. Replaced: * Amazon with Bottlerocket. * Google with Fuchsia. * ATS with HERE. Removed: * VMware because Harbor now transfered to CNCF. * DigitalOcean because their do-agent no longer seems to use Notary. * RubyGems because the Square PR has never been merged. * IBM container registry because redundant with Notary. * Azure container registry because redundant with Notary. * Docker because original blog post seems to be gone; also, redundant with Notary. * Quay because no more reference to using Notary. * LEAP because Bitmask no longer seems to be using TUF. Signed-off-by: Trishank Karthik Kuppusamy <[email protected]>
1 parent 2567588 commit 11f32cb

18 files changed

+19
-37
lines changed

content/_index.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -3,4 +3,4 @@
33

44
The Update Framework (**TUF**) helps developers maintain the security of software update systems, providing protection even against attackers that compromise the repository or signing keys. TUF provides a flexible framework and [specification](https://github.com/theupdateframework/specification/blob/master/tuf-spec.md#the-update-framework-specification) that developers can adopt into any software update system.
55

6-
TUF is hosted by the [Linux Foundation](https://www.linuxfoundation.org/) as part of the [Cloud Native Computing Foundation](https://www.cncf.io) (CNCF) and is used in production by companies such as Cloudflare, Datadog, Docker, DigitalOcean, Flynn, IBM, Microsoft, LEAP, Kolide, and VMware. A variant of TUF called [Uptane](https://uptane.github.io/) is widely used to secure over-the-air updates in automobiles.
6+
TUF is hosted by the [Linux Foundation](https://www.linuxfoundation.org/) as part of the [Cloud Native Computing Foundation](https://www.cncf.io) (CNCF) and is [used in production](/adoptions) by various tech companies and open source organizations. A variant of TUF called [Uptane](https://uptane.github.io/) is widely used to secure over-the-air updates in automobiles.

data/adoptions.yaml

Lines changed: 18 additions & 36 deletions
Original file line numberDiff line numberDiff line change
@@ -1,49 +1,31 @@
11
main:
2-
- url: https://github.com/awslabs/tough
3-
tag: Amazon
4-
- url: https://fuchsia.dev/
5-
tag: Google
6-
- url: https://github.com/theupdateframework/notary
7-
tag: Notary
8-
- url: https://console.bluemix.net/docs/services/Registry/registry_trusted_content.html#registry_trustedcontent
9-
tag: IBM
10-
img_type: jpg
11-
- url: https://docs.microsoft.com/en-us/azure/container-registry/container-registry-content-trust
12-
tag: Azure
13-
img_type: jpg
14-
- url: https://blog.docker.com/2015/08/content-trust-docker-1-8/
15-
tag: Docker
16-
- url: https://www.youtube.com/watch?v=2ZIu9XTvsC0
17-
tag: VMWare
18-
- url: https://advancedtelematic.com/en/press-releases/ats-is-integrating-the-uptane-security-framework-for-over-the-air-software-updates-to-connected-vehicles.html
19-
tag: ATS
2+
- url: https://docs.automotivelinux.org/docs/en/master/architecture/reference/security/part-8/1-FOTA.html
3+
tag: AGL
4+
- url: https://www.airbiquity.com/news/press-releases/airbiquity-unveils-new-otamatictm-release-further-strengthening-over-air-ota-software-and-data-management-offering-automotive
5+
tag: Airbiquity
6+
- url: https://github.com/bottlerocket-os/bottlerocket/tree/develop/sources/updater
7+
tag: Bottlerocket
8+
- url: https://github.com/cnabio/cnab-spec/blob/cnab-security-1.0.0-ga/300-CNAB-security.md
9+
tag: CNAB
2010
- url: https://www.datadoghq.com/blog/engineering/secure-publication-of-datadog-agent-integrations-with-tuf-and-in-toto
2111
tag: Datadog
2212
- url: https://flynn.io/docs/development#the-update-framework-%28tuf%29
2313
tag: Flynn
24-
- url: https://www.youtube.com/watch?v=ofXHmfOTLyA
25-
tag: Quay
26-
- url: https://github.com/digitalocean/do-agent
27-
tag: DigitalOcean
28-
- url: https://blog.cloudflare.com/pal-a-container-identity-bootstrapping-tool
29-
tag: Cloudflare
30-
- url: https://docs.automotivelinux.org/docs/architecture/en/dev/reference/security/05-platform-security.html#agl-platform-software-update
31-
tag: AGL
14+
- url: https://fuchsia.dev/fuchsia-src/concepts/system/software_update_system
15+
tag: Fuchsia
16+
- url: https://www.here.com/company/press-releases/en/2019-28-05
17+
tag: HERE
18+
- url: https://goharbor.io/docs/2.0.0/working-with-projects/project-configuration/implementing-content-trust/
19+
tag: Harbor
3220
- url: https://github.com/kolide/updater
3321
tag: Kolide
34-
- url: https://www.airbiquity.com/news/press-releases/airbiquity-unveils-new-otamatictm-release-further-strengthening-over-air-ota-software-and-data-management-offering-automotive
35-
tag: Airbiquity
36-
- url: https://github.com/goharbor/harbor/blob/master/docs/use_notary.md
37-
tag: Harbor
38-
- url: https://leap.se/en/2014/darkest-night
39-
tag: LEAP
22+
- url: https://github.com/theupdateframework/notary
23+
tag: Notary
4024
ongoing:
41-
- url: https://github.com/pypa/interoperability-peps/blob/master/pep-0458-tuf-online-keys.rst
42-
tag: PyPi
43-
- url: https://corner.squareup.com/2013/12/securing-rubygems-with-tuf-part-1.html
44-
tag: RubyGems
4525
- url: https://www.well-typed.com/blog/2015/04/improving-hackage-security
4626
tag: Haskell
4727
alt: Haskell Industrial Group
4828
- url: https://opam.ocaml.org/blog/Signing-the-opam-repository
4929
tag: OPAM
30+
- url: https://www.python.org/dev/peps/pep-0458/
31+
tag: PyPI
-5.37 KB
Binary file not shown.
-4.77 KB
Binary file not shown.
-8.64 KB
Binary file not shown.
1.97 KB
Loading
-229 KB
Binary file not shown.
3.57 KB
Loading
-8.04 KB
Binary file not shown.
-13.4 KB
Binary file not shown.
143 KB
Loading
-4.43 KB
Binary file not shown.
17.8 KB
Loading
-118 KB
Binary file not shown.
-51.1 KB
Binary file not shown.
-11.3 KB
Binary file not shown.
-35.5 KB
Binary file not shown.
-43.6 KB
Binary file not shown.

0 commit comments

Comments
 (0)