Table of Contents

Class TufClient

Namespace
Sigstore.Tuf
Assembly
Sigstore.dll

Minimal TUF client for the Sigstore Public Good Instance that bootstraps from a versioned root published on tuf-repo-cdn.sigstore.dev, then refreshes timestamp/snapshot/targets metadata and downloads trusted_root.json.

public sealed class TufClient : ITufClient
Inheritance
TufClient
Implements
Inherited Members

Constructors

TufClient(HttpClient, ILogger<TufClient>)

Creates a TUF client.

public TufClient(HttpClient httpClient, ILogger<TufClient> logger)

Parameters

httpClient HttpClient

HTTP client used for metadata and target fetches.

logger ILogger<TufClient>

Logger.

Methods

FetchPublicGoodTrustedRootAsync(CancellationToken)

Downloads and verifies TUF metadata, then returns the parsed TrustedRoot.

public Task<TrustedRoot> FetchPublicGoodTrustedRootAsync(CancellationToken cancellationToken)

Parameters

cancellationToken CancellationToken

Cancellation token.

Returns

Task<TrustedRoot>

Trusted root protobuf model.