4 Commits

Author	SHA1	Message	Date
Lucas Manuel Rodriguez	72df6bf486	Add notes for TUF root keys usage in fleetctl and orbit (#9005)	2022-12-20 10:59:54 -03:00
Lucas Manuel Rodriguez	832b29f8c7	Update go-tuf to v0.5.0 (bis) (#8112) ... * Update go-tuf to v0.5.0 This was triggered by the security advisory [GHSA-3633-5h82-39pq](https://github.com/theupdateframework/go-tuf/security/advisories/GHSA-3633-5h82-39pq). Fleet's use of go-tuf is not vulnerable to this issue due to not using key thresholds greater than 1. There were some API changes that necessitate changing the initialization code for the TUF client. See https://github.com/theupdateframework/go-tuf/issues/379 for further discussion. * Add changes file * Update default root metadata * Add review changes to update-go-tuf branch * Update tests * Add more checks to roots output Co-authored-by: Zach Wasserman <zach@fleetdm.com>	2022-10-07 17:03:39 -03:00
Lucas Manuel Rodriguez	7d8c38751d	Add TUF update guide (#7368) ... * Add TUF guide * Move docs to orbit/docs * Add fixes	2022-08-25 10:17:20 -05:00
Lucas Manuel Rodriguez	74dfdcb882	Kickoff documentation for Orbit Release Process (#5544) ... * Kickoff documentation for Orbit releasing * Fixes to the github action * Missing follow redirect on curl * Run osqueryd --version to verify before uploading artifacts * Use cmd as shell for windows-latest runner * Final set of changes to the guide	2022-05-13 07:15:29 -03:00