The Update Framework
The Update Framework (TUF) is a free, open-source framework and specification for securing software update systems.
What The Update Framework is
The Update Framework (TUF) is a free, open-source framework and specification for securing software update systems. Developers can integrate it with new or existing content-delivery and update systems, including application updaters, programming-language package managers, and operating-system package managers. TUF uses signed metadata to identify trusted files, downloads them, and verifies them before handing them to the update software. It is designed to withstand compromised repositories or signing keys and threats such as rollback, freeze, fast-forward, endless-data, mix-and-match, wrong-file, malicious-mirror, and arbitrary-installation attacks. Multiple keys, signature thresholds, revocation, replacement, and reduced reliance on online keys support key management. Reference implementations exist in Python, Go, JavaScript, and Rust, with third-party PHP and Tough options. TUF does not define package formats or perform the actual file update.
Good
- Free and open-source framework
- Protects against compromised repositories and keys
- Supports multiple signing keys and thresholds
- Reference implementations span four languages
- Supports CI/CD and cloud signing
Watch out
- Does not define package formats
- Does not apply application-file updates
- Does not bootstrap arbitrary new software
- Requires integration with an update system
Who it suits
TUF suits developers securing software update systems, package managers, repositories, or digital-artifact distribution. It is intended for teams integrating security into existing or new delivery systems.
Verdict
TUF provides a specification and tooling foundation for verifying software updates before an update system applies them. Its broad threat coverage and key controls suit teams that need update security without replacing their delivery system.
The facts
Each one read from The Update Framework's own pages, with the date it was checked.
Where it runs
- Browser implementation
- The official site describes TUF Browser as a minimal TypeScript implementation intended to be compatible with browsers.checked 8 Oct 2026
What it does
- Community support
- The project directs questions and feedback to its Google group and CNCF Slack channel, and lists community meetings as a way to participate.checked 7 Oct 2026
- Docker adoption
- The official adoptions page lists Docker registry bindings and a Rust implementation.checked 8 Oct 2026
- Governance
- The project’s about page says TUF is managed by the Linux Foundation under the Cloud Native Computing Foundation.checked 7 Oct 2026
- How it works
- TUF uses signed metadata to identify trusted update files, downloads them, and checks them before handing them to the software update system.checked 8 Oct 2026
- Implementations
- The project lists reference implementations in Python, Go, JavaScript, and Rust, plus third-party implementations in PHP and AWS Labs’ Tough.checked 7 Oct 2026
- Integration
- TUF is intended to integrate with new and existing content delivery systems and software update systems.checked 7 Oct 2026
- Integrations
- The official getting-started page lists python-tuf, go-tuf, tuf-js, and rust-tuf as reference implementations, and php-tuf and AWS Labs’ tough as third-party implementations.checked 8 Oct 2026
- Intended users
- The framework is intended for software update systems such as application updaters, programming language library package managers, and operating system package managers.checked 8 Oct 2026
- Key controls
- TUF supports multiple keys, signature thresholds, key replacement and revocation, and reduced trust in keys used online or automatically.checked 7 Oct 2026
- Key resilience
- TUF supports multiple signing keys and signature thresholds, revocation and replacement of keys, and minimizing trust in keys kept online.checked 8 Oct 2026
- Limit
- TUF does not define package formats or perform the actual update of application files.checked 7 Oct 2026
- Limitations
- TUF does not define a universal update system or package formats, perform the actual application file update, or bootstrap secure installation of arbitrary new software.checked 8 Oct 2026
- Project history
- The project history page says the basic technology was developed at the University of Washington in 2009 and that TUF has been based at NYU Tandon since 2011.checked 8 Oct 2026
- Project status
- TUF is a graduated CNCF project.checked 8 Oct 2026
- Protection
- TUF is designed to protect update systems even when an attacker compromises a repository or signing keys.checked 7 Oct 2026
- Purpose
- TUF is a framework for securing new and existing software update systems, designed to protect against repository and signing key compromise.checked 8 Oct 2026
- Related systems
- Listed systems include Repository Service for TUF, tuf-on-ci, Uptane, The Archive Framework, and TUF Browser.checked 7 Oct 2026
- Security audits
- The official security audits page lists public reports dated 2015, 2017, 2018, 2022, and 2024, covering TUF and several related implementations or projects.checked 8 Oct 2026
- Signing systems
- The official site lists Repository Service for TUF for integration with existing artifact repositories, tuf-on-ci for CI and Git forge signing workflows, and Uptane for automotive updates.checked 8 Oct 2026
- Support and community
- The specification directs users to the CNCF Slack channel #tuf or the specification repository to report questions and issues.checked 8 Oct 2026
- Threat defenses
- The security documentation describes defenses against rollback, freeze, fast-forward, endless data, mix-and-match, and key-compromise attacks.checked 7 Oct 2026
- Threat protections
- TUF is designed to address arbitrary installation, rollback, fast-forward, freeze, endless data, extraneous dependency, mix-and-match, wrong-file, malicious mirror, and key compromise attacks.checked 8 Oct 2026
The company
- Founded
- 2009checked 28 Sep 2026
Alternatives to The Update Framework
- 1
Sigstore
Free planOpen sourceWebAPILinuxmacOS7.6Free plan - 2
SignPath
Free planWebAPILinuxmacOS7.2Free plan - 3
AWS Signer
Free planWebAPILinuxmacOS7.1Free plan - 4
Cosign
Free planLinuxmacOSSelf-hostedWindows6.6Free plan - 5
OpenPubkey
Free planAPILinuxmacOSSelf-hosted6.6Free plan - 6
SignServer
Free planWebAPILinuxmacOS6.5Free plan