Skip to content

Update Snap role section in Metadata from Spec file #122

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 4 commits into from
Apr 17, 2025

Conversation

Dindihub
Copy link
Contributor

This PR covers issue #118. I updated the Snap role section to read like the Spec file, as suggested. Please review @lukpueh

The snapshot role signs a metadata file that provides information about the
latest version of all targets metadata on the repository (the top-level targets
role and all delegated roles). This information allows clients to know which
metadata files have been updated and also prevents mix-and-match attacks.
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It looks like you accidentally updated the root role section.

Also, I don't think we need to completely change the snapshot section. The original text was actually quite okay, apart from the outdated "all but timestamp.json" info.

Actually, I just saw that there's already a pending fix for this (#120). Would you mind adopting that change into your PR, including @joshuagl's suggestion, and adding the file format fix? That would be really appreciated! :)

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Wow! Silly mistake! Thanks for noticing I'll update it with @joshuagl suggestion

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Done the correction please review @lukpueh

Copy link
Member

@lukpueh lukpueh left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks a lot, @Dindihub! 🚀

@lukpueh lukpueh merged commit 8959e31 into theupdateframework:main Apr 17, 2025
7 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants