{"id":17747668,"url":"https://github.com/docker/tuf","last_synced_at":"2025-04-01T18:31:12.928Z","repository":{"id":259347912,"uuid":"778865562","full_name":"docker/tuf","owner":"docker","description":"Docker's production TUF repository","archived":false,"fork":false,"pushed_at":"2024-10-24T01:51:07.000Z","size":235,"stargazers_count":2,"open_issues_count":0,"forks_count":0,"subscribers_count":3,"default_branch":"main","last_synced_at":"2024-10-24T17:52:17.271Z","etag":null,"topics":["rego","supply-chain-security","the-update-framework","tuf","tuf-on-ci"],"latest_commit_sha":null,"homepage":"","language":"Open Policy Agent","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/docker.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2024-03-28T15:04:32.000Z","updated_at":"2024-10-24T01:51:10.000Z","dependencies_parsed_at":"2024-10-24T20:42:58.454Z","dependency_job_id":null,"html_url":"https://github.com/docker/tuf","commit_stats":null,"previous_names":["docker/tuf"],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/docker%2Ftuf","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/docker%2Ftuf/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/docker%2Ftuf/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/docker%2Ftuf/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/docker","download_url":"https://codeload.github.com/docker/tuf/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":246635983,"owners_count":20809333,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["rego","supply-chain-security","the-update-framework","tuf","tuf-on-ci"],"created_at":"2024-10-26T10:00:19.925Z","updated_at":"2025-04-01T18:31:12.532Z","avatar_url":"https://github.com/docker.png","language":"Open Policy Agent","funding_links":[],"categories":[],"sub_categories":[],"readme":"# TUF\n\nDocker's production [TUF](https://theupdateframework.io/) repository generated\nusing [TUF-on-CI](https://github.com/theupdateframework/tuf-on-ci).\n\nThe TUF metadata can be found in the [`metadata`](./metadata/) directory.\n\nThe TUF targets can be found under the [`targets`](./targets/) directory. The\nTUF targets for\n[Docker Official Images (DOI)](https://docs.docker.com/trusted-content/official-images/),\nspecifically the policies used to verify DOI, can be found in the\n[`targets/doi`](./targets/doi/) directory.\n\n## Signing Ceremony\n\nThe process used to establish Docker's production TUF root is documented in\n[CEREMONY.md](./ceremony/CEREMONY.md).\n\n## Keys\n\n| Keyholder Name   | Keyholder GitHub ID                                             | Role                             | Serial Number                                    |\n| ---------------- | --------------------------------------------------------------- | -------------------------------- | ------------------------------------------------ |\n| Jean Laurent     | [jeanlaurent](https://github.com/jeanlaurent)                   | Root                             | [28751288](./ceremony/2024-06-04/keys/28751288/) |\n| Alex Hokanson    | [ingshtrom](https://github.com/ingshtrom)                       | Root                             | [25515142](./ceremony/2024-06-04/keys/25515142/) |\n| Brett Inman      | [binman-docker](https://github.com/binman-docker)               | Root                             | [25515991](./ceremony/2024-06-04/keys/25515991/) |\n| Christian Dupuis | [cdupuis](https://github.com/cdupuis)                           | Root                             | [25599865](./ceremony/2024-06-04/keys/25599865/) |\n| Rachel Taylor    | [rachel-taylor-docker](https://github.com/rachel-taylor-docker) | Root                             | [25515264](./ceremony/2024-06-04/keys/25515264/) |\n| Laurent Goderre  | [LaurentGoderre](https://github.com/LaurentGoderre)             | Delegated Targets (DOI)          | [25515985](./ceremony/2024-06-04/keys/25515985/) |\n| Tianon Gravi     | [tianon-sso](https://github.com/tianon-sso)                     | Delegated Targets (DOI)          | [25515137](./ceremony/2024-06-04/keys/25515137/) |\n| Joseph Ferguson  | [yosifkit](https://github.com/yosifkit)                         | Delegated Targets (DOI)          | [25515267](./ceremony/2024-06-04/keys/25515267/) |\n| Joel Kamp        | [mrjoelkamp](https://github.com/mrjoelkamp)                     | Targets, Delegated Targets (DOI) | [25515139](./ceremony/2024-06-04/keys/25515139/) |\n| David Dooling    | [whalelines](https://github.com/whalelines)                     | Targets, Delegated Targets (DOI) | [25515003](./ceremony/2024-06-04/keys/25515003/) |\n| James Carnegie   | [kipz](https://github.com/kipz)                                 | Targets, Delegated Targets (DOI) | [28751259](./ceremony/2024-06-04/keys/28751259/) |\n| Jonny Stoten     | [jonnystoten](https://github.com/jonnystoten)                   | Targets, Delegated Targets (DOI) | [28751258](./ceremony/2024-06-04/keys/28751258/) |\n\n## Verifying\n\nTo verify the TUF root key attestations, see\n[key verification README](./tools/key-verification/README.md).\n\n## Security reporting\n\nIf you have any security concerns please follow [SECURITY.md](./SECURITY.md)\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fdocker%2Ftuf","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fdocker%2Ftuf","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fdocker%2Ftuf/lists"}