- Kairo Araujo, TestifySec, kairoaraujo
- Radoslav Dimitrov, Stacklok, rdimitrov
- Martin Vrachev, VMware by Broadcom, mvrachev
- Lukas Pühringer, NYU, lukpueh
- Konstantinos Papadopoulos, Channable, KAUTH
The Repository Service for TUF's mission is to make it easier for repositories to integrate the features of The Update Framework (TUF) without requiring TUF expertise or deep changes to the repository service implementation.
The project provides repository signing functionality with a simple REST API for integration into any repository offering. The system's architecture enables scalability for high-traffic repositories.
The project was born out of experience developing changes for Warehouse (PyPI) to deliver PEP 458 and, for the initial roadmap, focuses on providing PEP 458-like repository signing functionality. In future, the Repository Service for TUF will develop to support other TUF architecture patterns including PEP 480-like developer signing and more.
The project has early adoption (beta version) by the following organizations:
We have a monthly meeting on the first Wednesday of the month.
- The meeting agenda is available here
Governance
Contributor Guide
Project has attained an OpenSSF Best Practice Badge at "passing" level
Project is integrated into the OpenSSF Scorecard
- https://scorecard.dev/viewer/?uri=github.com/repository-service-tuf/repository-service-tuf-cli
- https://scorecard.dev/viewer/?uri=github.com/repository-service-tuf/repository-service-tuf-worker
- https://scorecard.dev/viewer/?uri=github.com/repository-service-tuf/repository-service-tuf-api
- This has been completed as per ossf#136.
The project should provide a list of existing resources with links to the repository, website, a roadmap, contributing guide, demos and walkthroughs, and any other material to showcase the existing breadth, maturity, and direction of the project.
| Reference | URL |
|---|---|
| Repo | github.com/repository-service-tuf |
| Meeting Agenda | https://hackmd.io/sSB1pwpDR5Seag0YB-vYMA |
| OSSF Calendar Entry | https://zoom-lfx.platform.linuxfoundation.org/meetings/repository-service-tuf |
| Website | https://repository-service-tuf.readthedocs.io |
| Contributing guide | https://repository-service-tuf.readthedocs.io/en/stable/devel/contributing.html |
| Roadmap | https://repository-service-tuf.readthedocs.io/en/stable/devel/roadmap.html |
| Demos | https://repository-service-tuf.readthedocs.io/en/stable/index.html#mentions |