2025年3月11日 · TUF provides a flexible specification defining functionality that developers can use in any software update system or re-implement to fit their needs. TUF is hosted by the Linux Foundation as part of the Cloud Native Computing Foundation (CNCF) and its design is used in production by various tech companies and open source organizations.

2024年6月11日 · Automated updates for stand-alone Python applications, built upon python-tuf. A simple software updater for stand-alone Python applications. Here's what a basic update-cycle for a self-updating application could look like: goto 1. The principle is relatively simple, as long as you don't consider the security risks involved.

All versions of python-tuf can be installed from PyPI with pip. By default tuf is installed as pure python package with limited cryptographic abilities. See Install with full cryptographic abilities for more options. Default installation supports signature verification only, using a pure Python ed25519 implementation.

2022年4月26日 · The notsotuf package is built on top of python-tuf, which is the reference implementation for TUF (The Update Framework). The initial implementation is focused on Windows. The package can be used on other platforms, but these are not actively supported.

2022年2月21日 · The Python-TUF community is proud to announce the release of Python-TUF 1.0.0. The release, which is available on PyPI and GitHub, introduces new stable and more ergonomic APIs. Python-TUF is the reference implementation of The Update Framework specification, an open source framework for securing content delivery and updates. It protects ...

更新框架 (tuf) 设计可帮助开发人员维护软件更新系统的安全性，即使是针对破坏存储库或签名密钥的攻击者也是如此。tuf 提供了一个灵活的 规范 定义功能，开发人员可以在任何软件更新系统中使用或重新实现以满足他们的需求。

2024年8月7日 · Python TUF 是 TUF 的 Python 参考实现，适用于需要安全更新的各种环境和系统。 首先，确保你已经安装了 Python 和 pip。 然后，使用以下命令安装 Python TUF： 操作系统更新：确保操作系统更新过程中的安全性。 软件仓库管理：保护软件仓库免受恶意更新的影响。 容器镜像更新：在容器化环境中确保镜像更新的安全性。 定期更新元数据：确保元数据是最新的，以防止过时的安全策略。 使用强加密算法：推荐使用 Ed25519 等强加密算法进行签名。 监控更 …

This documentation provides essential information for those developing software with the Python reference implementation of The Update Framework (TUF). The reference implementation provides easy-to-use components for Python developers but also aims to be a readable guide and demonstration for those working on implementing TUF in their own ...

2025年2月1日 · Specifically, this PEP describes how PyPI processes should be adapted to generate and incorporate TUF metadata (i.e., the minimum security model). This minimum security model supports verification of PyPI distributions that are signed with keys stored on PyPI.

2020年9月17日 · Learn about the TUF PyPI integration and how this integration will allow the open source framework to fit into the overall software security landscape.