The Update Framework

Spec sheet

Purpose

TUF is a framework for securing new and existing software update systems, designed to protect against repository and signing key compromise.Read 8 Oct 2026 · theupdateframework.io

Intended users

The framework is intended for software update systems such as application updaters, programming language library package managers, and operating system package managers.Read 8 Oct 2026 · theupdateframework.io

Integrations

The official getting-started page lists python-tuf, go-tuf, tuf-js, and rust-tuf as reference implementations, and php-tuf and AWS Labs’ tough as third-party implementations.Read 8 Oct 2026 · theupdateframework.io

Founded

2009Read 28 Sep 2026 · theupdateframework.io

Browser implementation

The official site describes TUF Browser as a minimal TypeScript implementation intended to be compatible with browsers.Read 8 Oct 2026 · theupdateframework.io

Community support

The project directs questions and feedback to its Google group and CNCF Slack channel, and lists community meetings as a way to participate.Read 7 Oct 2026 · theupdateframework.io

Docker adoption

The official adoptions page lists Docker registry bindings and a Rust implementation.Read 8 Oct 2026 · theupdateframework.io

Governance

The project’s about page says TUF is managed by the Linux Foundation under the Cloud Native Computing Foundation.Read 7 Oct 2026 · theupdateframework.io

How it works

TUF uses signed metadata to identify trusted update files, downloads them, and checks them before handing them to the software update system.Read 8 Oct 2026 · theupdateframework.io

Implementations

The project lists reference implementations in Python, Go, JavaScript, and Rust, plus third-party implementations in PHP and AWS Labs’ Tough.Read 7 Oct 2026 · theupdateframework.io

Integration

TUF is intended to integrate with new and existing content delivery systems and software update systems.Read 7 Oct 2026 · theupdateframework.io

Key controls

TUF supports multiple keys, signature thresholds, key replacement and revocation, and reduced trust in keys used online or automatically.Read 7 Oct 2026 · theupdateframework.io

Key resilience

TUF supports multiple signing keys and signature thresholds, revocation and replacement of keys, and minimizing trust in keys kept online.Read 8 Oct 2026 · theupdateframework.io

Limit

TUF does not define package formats or perform the actual update of application files.Read 7 Oct 2026 · theupdateframework.io

Limitations

TUF does not define a universal update system or package formats, perform the actual application file update, or bootstrap secure installation of arbitrary new software.Read 8 Oct 2026 · theupdateframework.github.io

Project history

The project history page says the basic technology was developed at the University of Washington in 2009 and that TUF has been based at NYU Tandon since 2011.Read 8 Oct 2026 · theupdateframework.io

Project status

TUF is a graduated CNCF project.Read 8 Oct 2026 · theupdateframework.io

Protection

TUF is designed to protect update systems even when an attacker compromises a repository or signing keys.Read 7 Oct 2026 · theupdateframework.io

Related systems

Listed systems include Repository Service for TUF, tuf-on-ci, Uptane, The Archive Framework, and TUF Browser.Read 7 Oct 2026 · theupdateframework.io

Security audits

The official security audits page lists public reports dated 2015, 2017, 2018, 2022, and 2024, covering TUF and several related implementations or projects.Read 8 Oct 2026 · theupdateframework.io

Signing systems

The official site lists Repository Service for TUF for integration with existing artifact repositories, tuf-on-ci for CI and Git forge signing workflows, and Uptane for automotive updates.Read 8 Oct 2026 · theupdateframework.io

Support and community

The specification directs users to the CNCF Slack channel #tuf or the specification repository to report questions and issues.Read 8 Oct 2026 · theupdateframework.github.io

Threat defenses

The security documentation describes defenses against rollback, freeze, fast-forward, endless data, mix-and-match, and key-compromise attacks.Read 7 Oct 2026 · theupdateframework.io

Threat protections

TUF is designed to address arbitrary installation, rollback, fast-forward, freeze, endless data, extraneous dependency, mix-and-match, wrong-file, malicious mirror, and key compromise attacks.Read 8 Oct 2026 · theupdateframework.io

Use cases

The documentation describes application updaters, language package managers, and operating system package managers as types of update systems TUF can secure.Read 7 Oct 2026 · theupdateframework.io

What it handles

TUF identifies updates, downloads them, and verifies downloaded files against repository metadata; applying updates is handled by the software update system.Read 7 Oct 2026 · theupdateframework.io

Where Specifiction places it

• Code Signing Software#26 of 286.7