Tough is a client library for TUF repositories.
This client adheres to TUF version 1.0.0, with the following exceptions:
- Delegated roles (and TAP 3) are not yet supported.
- TAP 4 (multiple repository consensus) is not yet supported.
Unit tests are run in the usual manner:
Integration tests require docker and are disabled by default behind a feature named
To run all tests, including integration tests:
cargo test --all-features or
cargo test --features 'http,integ'.
Contains the error type for this library.
Provides an abstraction over the source of a signing key. This allows signing keys to be obtained, for example, from local files or from cloud provider key stores.
Provides the schema objects as defined by the TUF spec.
A Transport that provides support for both local files and, if the
Limits used when fetching repository metadata.
A TUF repository.
A builder for settings with which to load a
The error type that
Represents whether a Repository should fail to load when metadata is expired (
The kind of error that the transport object experienced during
A trait to abstract over the method/protocol by which files are obtained.