Skip to content

Commit

Permalink
adding <details> disclosure element
Browse files Browse the repository at this point in the history
Signed-off-by: h4l0gen <[email protected]>
  • Loading branch information
h4l0gen committed Jun 3, 2024
1 parent fa7b152 commit 6ce62e7
Showing 1 changed file with 31 additions and 20 deletions.
51 changes: 31 additions & 20 deletions content/metadata.md
Original file line number Diff line number Diff line change
Expand Up @@ -40,9 +40,9 @@ Specifies the other top-level roles. When specifying these roles, the trusted
keys for each are listed, along with the minimum number of those keys required
to sign the role's metadata. We call this number the signature threshold.

See an **example**

```
<details>
<summary><strong>Example Root metadata</strong></summary>
<pre><code>
{
"signatures": [
{
Expand Down Expand Up @@ -150,7 +150,8 @@ See an **example**
"version": 1
}
}
```
</code></pre>
</details>

## Targets Metadata (targets.json)

Expand All @@ -167,8 +168,9 @@ so in a way similar to how the Root role specifies the top-level roles: by givin
the trusted keys and signature threshold for each role. Additionally, one or more
[glob patterns](https://en.wikipedia.org/wiki/Glob_(programming)) will be specified to indicate the target file paths for which clients should trust each delegated role.

See as an **example**
```
<details>
<summary><strong>Example Targets metadata</strong></summary>
<pre><code>
{
"signatures": [
{
Expand Down Expand Up @@ -236,7 +238,8 @@ See as an **example**
"version": 1
}
}
```
</code></pre>
</details>

## Delegated Targets Metadata (role1.json)

Expand All @@ -260,8 +263,9 @@ metadata file would be found at:

/ANOTHER_ROLE.json

See **example** of delegated Targets metadata
```
<details>
<summary><strong>Example delegated Targets metadata</strong></summary>
<pre><code>
{
"signatures": [
{
Expand Down Expand Up @@ -317,10 +321,12 @@ See **example** of delegated Targets metadata
"version": 1
}
}
```

and **example** of a nested delegation
```
</code></pre>
</details>
and
<details>
<summary><strong>Example nested delegation</strong></summary>
<pre><code>
{
"signatures": [
{
Expand All @@ -338,7 +344,8 @@ and **example** of a nested delegation
"version": 1
}
}
```
</code></pre>
</details>

## Snapshot Metadata (snapshot.json)

Expand All @@ -350,8 +357,9 @@ view of all files on the repository. That is, metadata files (and thus Target
files) that existed on the repository at different times cannot be combined
and presented to clients by an attacker.

​See **example** of Snapshot metadata.
```
<details>
<summary><strong>Example Snapshot metadata</strong></summary>
<pre><code>
{
"signatures": [
{
Expand Down Expand Up @@ -379,7 +387,8 @@ and presented to clients by an attacker.
"version": 1
}
}
```
</code></pre>
</details>

## Timestamp Metadata (timestamp.json)

Expand All @@ -403,8 +412,9 @@ keys should be used for signing the snapshot.json file so that the
Snapshot role's keys can be kept offline, and thus more secure.
* Timestamp.json may be given to mirrors.

See **example** of Timestamp metadata.
```
<details>
<summary><strong>Example Timestamp metadata</strong></summary>
<pre><code>
{
"signatures": [
{
Expand All @@ -430,4 +440,5 @@ See **example** of Timestamp metadata.
"version": 1
}
}
```
</code></pre>
</details>

0 comments on commit 6ce62e7

Please sign in to comment.