fix: allow sigstore's TUF repository to be downloaded

Sigstore's TUF repository format changed in way that breaks the tough crate. This commit updates to a forked release of the tough crate that includes fixes for these issues: * awslabs/tough#778 - the fix for the TUF repo change * awslabs/tough#769 - another long standing issue Signed-off-by: Flavio Castelli <[email protected]>
flavio · Sep 4, 2024 · ec1db97 · ec1db97
1 parent 2872baf
commit ec1db97
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/Cargo.toml b/Cargo.toml
@@ -136,7 +136,7 @@ thiserror = "1.0.30"
 tokio = { version = "1.17.0", features = ["rt"] }
 tokio-util = { version = "0.7.10", features = ["io-util"] }
 #tough = { version = "0.17.1", features = ["http"], optional = true }
-tough = { git = "https://github.com/flavio/tough.git", branch = "kubewarden", features = [
+tough = { git = "https://github.com/flavio/tough.git", tag = "tough-v0.17.1+kw1", features = [
   "http",
 ], optional = true }
 tracing = "0.1.31"