docker/attest
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Check version of attest against constraints in TUF (#19)

Browse Source 
* Check version of attest against constraints in TUF

* Add link to semver lib constraints docs
This commit is contained in:
Jonny Stoten
2024-05-22 17:02:25 +01:00
committed by GitHub
parent 1a7897a052
commit 6397dcede8
12 changed files with 138 additions and 17 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
pkg/tuf/tuf.go
View File

@@ -36,7 +36,7 @@ type TufClient struct {
}
// NewTufClient creates a new TUF client
func NewTufClient(initialRoot []byte, tufPath, metadataSource, targetsSource string) (*TufClient, error) {
func NewTufClient(initialRoot []byte, tufPath, metadataSource, targetsSource string, versionChecker VersionChecker) (*TufClient, error) {
var tufSource TufSource
if strings.HasPrefix(metadataSource, "https://") || strings.HasPrefix(metadataSource, "http://") {
tufSource = HttpSource
@@ -102,8 +102,13 @@ func NewTufClient(initialRoot []byte, tufPath, metadataSource, targetsSource str
updater: up,
cfg: cfg,
}
return client, nil
err = versionChecker.CheckVersion(client)
if err != nil {
return nil, err
}
return client, nil
}
// DownloadTarget downloads the target file using Updater. The Updater gets the target