Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Properly deprecate custom metadata in snapshot file metadata #411

Closed
asraa opened this issue Oct 5, 2022 · 1 comment
Closed

Properly deprecate custom metadata in snapshot file metadata #411

asraa opened this issue Oct 5, 2022 · 1 comment

Comments

@asraa
Copy link
Contributor

asraa commented Oct 5, 2022

#373

See context.

This is out of TUF specification, and the user should actually put this information in the parent role's DELEGATIONS object.

As with @trishankatdatadog, this field is not in the TUF specification: https://theupdateframework.github.io/specification/latest/#file-formats-snapshot

If you want to keep information about a delegated target, then ideally the information should live in/signed by the parent role, rather than the snapshot role, correct?

It seems like you may want CUSTOM metadata inside a DELEGATIONS object long-term, right? https://theupdateframework.github.io/specification/latest/#delegations

@arbll

@rdimitrov
Copy link
Contributor

Closing since the code base changed and this is no longer valid.

Thanks for raising this 👍

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants