The Update Framework (TUF) · Example Payload

Tuf Targets Metadata Example

Example TUF targets.json metadata file listing software packages

CNCFCloud NativeGraduatedSecuritySoftware Supply ChainSoftware UpdatesVerification

Tuf Targets Metadata Example is an example object payload from The Update Framework (TUF), with 3 top-level fields. It illustrates the shape of data this provider's APIs accept or return.

Top-level fields

descriptionsignedsignatures

Example Payload

tuf-targets-metadata-example.json Raw ↑ 
{
  "description": "Example TUF targets.json metadata file listing software packages",
  "signed": {
    "_type": "targets",
    "spec_version": "1.0.31",
    "version": 1,
    "expires": "2027-01-01T00:00:00Z",
    "targets": {
      "myapp-1.2.3-linux-amd64.tar.gz": {
        "length": 15728640,
        "hashes": {
          "sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
          "sha512": "cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e"
        },
        "custom": {
          "version": "1.2.3",
          "platform": "linux-amd64"
        }
      },
      "myapp-1.2.3-darwin-arm64.tar.gz": {
        "length": 14680064,
        "hashes": {
          "sha256": "b94d27b9934d3e08a52e52d7da7dabfac484efe04294e576bc7f7f37e3e9f7bc",
          "sha512": "9b71d224bd62f3785d96d46ad3ea3d73319bfbc2890caadae2dff72519673ca72323c3d99ba5c11d7c7acc6e14b8c5da0c4663475c2e5c3adef46f73bcdec043"
        },
        "custom": {
          "version": "1.2.3",
          "platform": "darwin-arm64"
        }
      }
    }
  },
  "signatures": [
    {
      "keyid": "b2c3d4e5f6a1b2c3d4e5f6a1b2c3d4e5f6a1b2c3d4e5f6a1b2c3d4e5f6a1b2c3",
      "sig": "abcdef0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef"
    }
  ]
}