Skip to content

Update TUF conformance action to v2.5.0 - #1325

Open
aaronlew02 wants to merge 5 commits into
mainfrom
tuf-conformance-v2.5.0
Open

aaronlew02 wants to merge 5 commits into
mainfrom
tuf-conformance-v2.5.0

Conversation

@aaronlew02

@aaronlew02 aaronlew02 commented Oct 22, 2026 •

Copy link
Copy Markdown
Collaborator

Summary

This change updates the TUF conformance action from v2.4.0 to v2.5.0.

To support this update, this change:

  • Adds support for multiple targets in the TUF CLI, using the same updater as per CLIENT-CLI.md.
  • Adds an xfail in TUF conformance for:
    • All ML-DSA tests, as sigstore-java does not yet support ML-DSA.
    • All RSA and ECDSA keytype and scheme tests, as sigstore-java does not have full RSA and ECDSA support.
    • test_targetfile_search[targetpath matches question mark wildcard], as the updater skips delegations.

Signed-off-by: Aaron Lew <64337293+aaronlew02@users.noreply.github.com>
Signed-off-by: Aaron Lew <64337293+aaronlew02@users.noreply.github.com>
Signed-off-by: Aaron Lew <64337293+aaronlew02@users.noreply.github.com>
Signed-off-by: Aaron Lew <64337293+aaronlew02@users.noreply.github.com>
Signed-off-by: Aaron Lew <64337293+aaronlew02@users.noreply.github.com>
@aaronlew02
aaronlew02 marked this pull request as ready for review October 22, 2026 21:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant