Software Supply Chain · security identity · CNCF — graduated

The Update Framework (TUF)

The Update Framework is a graduated CNCF specification for securing software update systems. It defines a set of signed JSON metadata roles and a client workflow designed to remain safe even when the repository or its signing keys are partially compromised.

theupdateframework.io/The standard

CNCF — graduatedGoverning body · Linux Foundation

2010First published

StableCurrent version

No — the object model is normative, b...Machine-readable schema · open

0providers in the catalog

Also known as TUF, The Update Framework.

Providers that carry The Update Framework (TUF) 0

No provider in the catalog carries this standard as a tag yet. That is a statement about the catalog's tagging, not about adoption: a provider that implements The Update Framework (TUF) and says so in its APIs.json profile appears here on the next build. Add or correct a listing.

Read from the API Evangelist standards directory, facts verified 2026-08-17. Provider links come from the catalog's own identity tags and are rebuilt nightly. If this page is wrong about a standard or a provider, say so.