diff --git a/settings.gradle.kts b/settings.gradle.kts index 5500514d8..15ff0d88e 100644 --- a/settings.gradle.kts +++ b/settings.gradle.kts @@ -14,6 +14,7 @@ includeBuild("build-logic-commons") includeBuild("build-logic") include("sigstore-common") +include("sigstore-tuf") include("sigstore-java") include("sigstore-gradle:sigstore-gradle-sign-base-plugin") include("sigstore-gradle:sigstore-gradle-sign-plugin") diff --git a/sigstore-cli/src/main/java/dev/sigstore/cli/Sign.java b/sigstore-cli/src/main/java/dev/sigstore/cli/Sign.java index e1bba4b0e..93a4ae9b2 100644 --- a/sigstore-cli/src/main/java/dev/sigstore/cli/Sign.java +++ b/sigstore-cli/src/main/java/dev/sigstore/cli/Sign.java @@ -21,8 +21,8 @@ import dev.sigstore.bundle.Bundle; import dev.sigstore.oidc.client.OidcClients; import dev.sigstore.oidc.client.TokenStringOidcClient; +import dev.sigstore.trustroot.SigstoreTufClient; import dev.sigstore.tuf.RootProvider; -import dev.sigstore.tuf.SigstoreTufClient; import java.net.URI; import java.nio.charset.StandardCharsets; import java.nio.file.Files; diff --git a/sigstore-cli/src/main/java/dev/sigstore/cli/Verify.java b/sigstore-cli/src/main/java/dev/sigstore/cli/Verify.java index 779bd0561..7652b42f7 100644 --- a/sigstore-cli/src/main/java/dev/sigstore/cli/Verify.java +++ b/sigstore-cli/src/main/java/dev/sigstore/cli/Verify.java @@ -24,8 +24,8 @@ import dev.sigstore.VerificationOptions.CertificateMatcher; import dev.sigstore.bundle.Bundle; import dev.sigstore.strings.StringMatcher; +import dev.sigstore.trustroot.SigstoreTufClient; import dev.sigstore.tuf.RootProvider; -import dev.sigstore.tuf.SigstoreTufClient; import java.net.URI; import java.nio.charset.StandardCharsets; import java.nio.file.Path; diff --git a/sigstore-gradle/sigstore-gradle-sign-base-plugin/build.gradle.kts b/sigstore-gradle/sigstore-gradle-sign-base-plugin/build.gradle.kts index 2237a79a1..990cb747f 100644 --- a/sigstore-gradle/sigstore-gradle-sign-base-plugin/build.gradle.kts +++ b/sigstore-gradle/sigstore-gradle-sign-base-plugin/build.gradle.kts @@ -9,6 +9,7 @@ dependencies { compileOnly(project(":sigstore-java")) sigstoreJavaRuntime(project(":sigstore-common")) + sigstoreJavaRuntime(project(":sigstore-tuf")) sigstoreJavaRuntime(project(":sigstore-java")) { because("Test code needs access locally-built sigstore-java as a Maven repository") } diff --git a/sigstore-gradle/sigstore-gradle-sign-plugin/build.gradle.kts b/sigstore-gradle/sigstore-gradle-sign-plugin/build.gradle.kts index 028eeb95c..8b1a4c469 100644 --- a/sigstore-gradle/sigstore-gradle-sign-plugin/build.gradle.kts +++ b/sigstore-gradle/sigstore-gradle-sign-plugin/build.gradle.kts @@ -9,6 +9,7 @@ dependencies { api(project(":sigstore-gradle:sigstore-gradle-sign-base-plugin")) sigstoreJavaRuntime(project(":sigstore-common")) + sigstoreJavaRuntime(project(":sigstore-tuf")) sigstoreJavaRuntime(project(":sigstore-java")) { because("Test code needs access locally-built sigstore-java as a Maven repository") } diff --git a/sigstore-java/build.gradle.kts b/sigstore-java/build.gradle.kts index 5610836ac..9579888d5 100644 --- a/sigstore-java/build.gradle.kts +++ b/sigstore-java/build.gradle.kts @@ -18,6 +18,7 @@ tasks.jar { dependencies { api(project(":sigstore-common")) + api(project(":sigstore-tuf")) compileOnly("org.immutables:gson:2.12.2") compileOnly("org.immutables:value-annotations:2.12.2") diff --git a/sigstore-java/src/main/java/dev/sigstore/KeylessSigner.java b/sigstore-java/src/main/java/dev/sigstore/KeylessSigner.java index 4bcf6c27b..bab84a2ea 100644 --- a/sigstore-java/src/main/java/dev/sigstore/KeylessSigner.java +++ b/sigstore-java/src/main/java/dev/sigstore/KeylessSigner.java @@ -67,7 +67,7 @@ import dev.sigstore.timestamp.client.TimestampVerifier; import dev.sigstore.trustroot.Service; import dev.sigstore.trustroot.SigstoreConfigurationException; -import dev.sigstore.tuf.SigstoreTufClient; +import dev.sigstore.trustroot.SigstoreTufClient; import java.io.IOException; import java.nio.charset.StandardCharsets; import java.nio.file.Path; diff --git a/sigstore-java/src/main/java/dev/sigstore/KeylessVerifier.java b/sigstore-java/src/main/java/dev/sigstore/KeylessVerifier.java index fe62f6661..9c16545f1 100644 --- a/sigstore-java/src/main/java/dev/sigstore/KeylessVerifier.java +++ b/sigstore-java/src/main/java/dev/sigstore/KeylessVerifier.java @@ -47,7 +47,7 @@ import dev.sigstore.timestamp.client.TimestampVerificationException; import dev.sigstore.timestamp.client.TimestampVerifier; import dev.sigstore.trustroot.SigstoreConfigurationException; -import dev.sigstore.tuf.SigstoreTufClient; +import dev.sigstore.trustroot.SigstoreTufClient; import java.io.IOException; import java.nio.charset.StandardCharsets; import java.nio.file.Path; diff --git a/sigstore-java/src/main/java/dev/sigstore/SigningConfigProvider.java b/sigstore-java/src/main/java/dev/sigstore/SigningConfigProvider.java index 85772c230..5bdb1e4fa 100644 --- a/sigstore-java/src/main/java/dev/sigstore/SigningConfigProvider.java +++ b/sigstore-java/src/main/java/dev/sigstore/SigningConfigProvider.java @@ -18,7 +18,7 @@ import com.google.common.base.Preconditions; import dev.sigstore.trustroot.SigstoreConfigurationException; import dev.sigstore.trustroot.SigstoreSigningConfig; -import dev.sigstore.tuf.SigstoreTufClient; +import dev.sigstore.trustroot.SigstoreTufClient; import java.io.IOException; import java.nio.file.Files; import java.nio.file.Path; diff --git a/sigstore-java/src/main/java/dev/sigstore/TrustedRootProvider.java b/sigstore-java/src/main/java/dev/sigstore/TrustedRootProvider.java index 772e36ae4..f2efee355 100644 --- a/sigstore-java/src/main/java/dev/sigstore/TrustedRootProvider.java +++ b/sigstore-java/src/main/java/dev/sigstore/TrustedRootProvider.java @@ -18,7 +18,7 @@ import com.google.common.base.Preconditions; import dev.sigstore.trustroot.SigstoreConfigurationException; import dev.sigstore.trustroot.SigstoreTrustedRoot; -import dev.sigstore.tuf.SigstoreTufClient; +import dev.sigstore.trustroot.SigstoreTufClient; import java.io.IOException; import java.nio.file.Files; import java.nio.file.Path; diff --git a/sigstore-java/src/main/java/dev/sigstore/rekor/client/RekorEntryFetcher.java b/sigstore-java/src/main/java/dev/sigstore/rekor/client/RekorEntryFetcher.java index a839a4d01..2ffd6c8ab 100644 --- a/sigstore-java/src/main/java/dev/sigstore/rekor/client/RekorEntryFetcher.java +++ b/sigstore-java/src/main/java/dev/sigstore/rekor/client/RekorEntryFetcher.java @@ -20,8 +20,8 @@ import dev.sigstore.encryption.certificates.Certificates; import dev.sigstore.trustroot.Service; import dev.sigstore.trustroot.SigstoreConfigurationException; +import dev.sigstore.trustroot.SigstoreTufClient; import dev.sigstore.trustroot.TransparencyLog; -import dev.sigstore.tuf.SigstoreTufClient; import java.io.IOException; import java.nio.file.Path; import java.security.cert.CertificateExpiredException; diff --git a/sigstore-java/src/main/java/dev/sigstore/tuf/SigstoreTufClient.java b/sigstore-java/src/main/java/dev/sigstore/trustroot/SigstoreTufClient.java similarity index 95% rename from sigstore-java/src/main/java/dev/sigstore/tuf/SigstoreTufClient.java rename to sigstore-java/src/main/java/dev/sigstore/trustroot/SigstoreTufClient.java index c10990930..b7a449796 100644 --- a/sigstore-java/src/main/java/dev/sigstore/tuf/SigstoreTufClient.java +++ b/sigstore-java/src/main/java/dev/sigstore/trustroot/SigstoreTufClient.java @@ -13,15 +13,19 @@ * See the License for the specific language governing permissions and * limitations under the License. */ -package dev.sigstore.tuf; +package dev.sigstore.trustroot; import com.google.common.annotations.VisibleForTesting; import com.google.common.base.Preconditions; import dev.sigstore.common.http.URIFormat; import dev.sigstore.common.json.JsonParseException; -import dev.sigstore.trustroot.SigstoreConfigurationException; -import dev.sigstore.trustroot.SigstoreSigningConfig; -import dev.sigstore.trustroot.SigstoreTrustedRoot; +import dev.sigstore.tuf.FileSystemTufStore; +import dev.sigstore.tuf.HttpFetcher; +import dev.sigstore.tuf.MetaFetcher; +import dev.sigstore.tuf.PassthroughCacheMetaStore; +import dev.sigstore.tuf.RootProvider; +import dev.sigstore.tuf.TrustedMetaStore; +import dev.sigstore.tuf.Updater; import java.io.IOException; import java.net.URI; import java.nio.file.Files; diff --git a/sigstore-java/src/test/java/dev/sigstore/KeylessTest.java b/sigstore-java/src/test/java/dev/sigstore/KeylessTest.java index e2b2bf3ce..6da3af068 100644 --- a/sigstore-java/src/test/java/dev/sigstore/KeylessTest.java +++ b/sigstore-java/src/test/java/dev/sigstore/KeylessTest.java @@ -27,7 +27,7 @@ import dev.sigstore.testkit.oidc.ConformanceTestingToken; import dev.sigstore.trustroot.ImmutableSigstoreSigningConfig; import dev.sigstore.trustroot.Service; -import dev.sigstore.tuf.SigstoreTufClient; +import dev.sigstore.trustroot.SigstoreTufClient; import java.io.IOException; import java.io.StringReader; import java.net.URI; diff --git a/sigstore-java/src/test/java/dev/sigstore/rekor/client/RekorClientHttpTest.java b/sigstore-java/src/test/java/dev/sigstore/rekor/client/RekorClientHttpTest.java index aa9fe000a..1aca2fed2 100644 --- a/sigstore-java/src/test/java/dev/sigstore/rekor/client/RekorClientHttpTest.java +++ b/sigstore-java/src/test/java/dev/sigstore/rekor/client/RekorClientHttpTest.java @@ -25,7 +25,7 @@ import dev.sigstore.encryption.signers.Signers; import dev.sigstore.testing.CertGenerator; import dev.sigstore.trustroot.Service; -import dev.sigstore.tuf.SigstoreTufClient; +import dev.sigstore.trustroot.SigstoreTufClient; import java.io.IOException; import java.nio.charset.StandardCharsets; import java.security.InvalidKeyException; diff --git a/sigstore-java/src/test/java/dev/sigstore/rekor/v2/client/RekorV2ClientHttpTest.java b/sigstore-java/src/test/java/dev/sigstore/rekor/v2/client/RekorV2ClientHttpTest.java index 3586f18d2..13fbbb36c 100644 --- a/sigstore-java/src/test/java/dev/sigstore/rekor/v2/client/RekorV2ClientHttpTest.java +++ b/sigstore-java/src/test/java/dev/sigstore/rekor/v2/client/RekorV2ClientHttpTest.java @@ -28,7 +28,7 @@ import dev.sigstore.proto.rekor.v2.Verifier; import dev.sigstore.testing.CertGenerator; import dev.sigstore.trustroot.Service; -import dev.sigstore.tuf.SigstoreTufClient; +import dev.sigstore.trustroot.SigstoreTufClient; import java.io.IOException; import java.nio.charset.StandardCharsets; import java.security.InvalidKeyException; diff --git a/sigstore-java/src/test/java/dev/sigstore/timestamp/client/TimestampClientHttpTest.java b/sigstore-java/src/test/java/dev/sigstore/timestamp/client/TimestampClientHttpTest.java index 79f7bf7ba..b9c93247f 100644 --- a/sigstore-java/src/test/java/dev/sigstore/timestamp/client/TimestampClientHttpTest.java +++ b/sigstore-java/src/test/java/dev/sigstore/timestamp/client/TimestampClientHttpTest.java @@ -23,7 +23,7 @@ import dev.sigstore.AlgorithmRegistry; import dev.sigstore.trustroot.Service; -import dev.sigstore.tuf.SigstoreTufClient; +import dev.sigstore.trustroot.SigstoreTufClient; import java.nio.charset.StandardCharsets; import java.security.MessageDigest; import java.util.List; diff --git a/sigstore-java/src/test/java/dev/sigstore/tuf/SigstoreTufClientTest.java b/sigstore-java/src/test/java/dev/sigstore/trustroot/SigstoreTufClientTest.java similarity index 97% rename from sigstore-java/src/test/java/dev/sigstore/tuf/SigstoreTufClientTest.java rename to sigstore-java/src/test/java/dev/sigstore/trustroot/SigstoreTufClientTest.java index 6da4cf161..8cc5826fe 100644 --- a/sigstore-java/src/test/java/dev/sigstore/tuf/SigstoreTufClientTest.java +++ b/sigstore-java/src/test/java/dev/sigstore/trustroot/SigstoreTufClientTest.java @@ -13,15 +13,15 @@ * See the License for the specific language governing permissions and * limitations under the License. */ -package dev.sigstore.tuf; +package dev.sigstore.trustroot; import com.google.protobuf.util.JsonFormat; import dev.sigstore.proto.trustroot.v1.ServiceConfiguration; import dev.sigstore.proto.trustroot.v1.ServiceSelector; import dev.sigstore.proto.trustroot.v1.SigningConfig; import dev.sigstore.proto.trustroot.v1.TrustedRoot; -import dev.sigstore.trustroot.SigstoreSigningConfig; -import dev.sigstore.trustroot.SigstoreTrustedRoot; +import dev.sigstore.tuf.TargetStore; +import dev.sigstore.tuf.Updater; import java.io.ByteArrayInputStream; import java.io.IOException; import java.io.InputStream; diff --git a/sigstore-maven-plugin/build.gradle.kts b/sigstore-maven-plugin/build.gradle.kts index 66facaff0..a054df8e0 100644 --- a/sigstore-maven-plugin/build.gradle.kts +++ b/sigstore-maven-plugin/build.gradle.kts @@ -22,6 +22,7 @@ dependencies { testImplementation(project(":sigstore-testkit")) sigstoreJavaRuntime(project(":sigstore-common")) + sigstoreJavaRuntime(project(":sigstore-tuf")) sigstoreJavaRuntime(project(":sigstore-java")) { because("Test code needs access locally-built sigstore-java as a Maven repository") } diff --git a/sigstore-tuf/build.gradle.kts b/sigstore-tuf/build.gradle.kts new file mode 100644 index 000000000..d90b4d14f --- /dev/null +++ b/sigstore-tuf/build.gradle.kts @@ -0,0 +1,45 @@ +plugins { + id("build-logic.java-published-library") + id("build-logic.test-junit5") +} + +description = "The Update Framework (TUF) client implementation for Sigstore Java" + +tasks.jar { + manifest { + attributes["Automatic-Module-Name"] = "dev.sigstore.tuf" + } +} + +dependencies { + compileOnly("org.immutables:gson:2.12.2") + compileOnly("org.immutables:value-annotations:2.12.2") + annotationProcessor("org.immutables:value:2.12.2") + + api(project(":sigstore-common")) + + implementation("org.bouncycastle:bcutil-jdk18on:1.85") + implementation("org.bouncycastle:bcpkix-jdk18on:1.85") + implementation("com.google.guava:guava:33.7.1-jre") + + testImplementation(platform("org.junit:junit-bom:5.14.4")) + testRuntimeOnly("org.junit.jupiter:junit-jupiter-engine") + testImplementation("org.assertj:assertj-core:3.27.7") + testImplementation(platform("org.mockito:mockito-bom:5.23.0")) + testImplementation("org.mockito:mockito-core") + testImplementation("org.mockito:mockito-junit-jupiter") + + testImplementation("com.squareup.okhttp3:mockwebserver:5.5.0") + testImplementation("io.github.netmikey.logunit:logunit-core:2.0.0") + testRuntimeOnly("io.github.netmikey.logunit:logunit-jul:2.0.0") + testImplementation("org.hamcrest:hamcrest:3.0") + testImplementation("org.apache.commons:commons-lang3:3.17.0") + testImplementation("commons-io:commons-io:2.18.0") + testImplementation("org.jetbrains:annotations:26.0.2") +} + +forbiddenApis { + signaturesFiles = files("$rootDir/config/forbiddenApis.txt") + suppressAnnotations = setOf("dev.sigstore.common.forbidden.SuppressForbidden") + ignoreSignaturesOfMissingClasses = true +} diff --git a/sigstore-java/src/main/java/dev/sigstore/tuf/DuplicateKeyIdsException.java b/sigstore-tuf/src/main/java/dev/sigstore/tuf/DuplicateKeyIdsException.java similarity index 100% rename from sigstore-java/src/main/java/dev/sigstore/tuf/DuplicateKeyIdsException.java rename to sigstore-tuf/src/main/java/dev/sigstore/tuf/DuplicateKeyIdsException.java diff --git a/sigstore-java/src/main/java/dev/sigstore/tuf/Fetcher.java b/sigstore-tuf/src/main/java/dev/sigstore/tuf/Fetcher.java similarity index 100% rename from sigstore-java/src/main/java/dev/sigstore/tuf/Fetcher.java rename to sigstore-tuf/src/main/java/dev/sigstore/tuf/Fetcher.java diff --git a/sigstore-java/src/main/java/dev/sigstore/tuf/FileExceedsMaxLengthException.java b/sigstore-tuf/src/main/java/dev/sigstore/tuf/FileExceedsMaxLengthException.java similarity index 100% rename from sigstore-java/src/main/java/dev/sigstore/tuf/FileExceedsMaxLengthException.java rename to sigstore-tuf/src/main/java/dev/sigstore/tuf/FileExceedsMaxLengthException.java diff --git a/sigstore-java/src/main/java/dev/sigstore/tuf/FileNotFoundException.java b/sigstore-tuf/src/main/java/dev/sigstore/tuf/FileNotFoundException.java similarity index 100% rename from sigstore-java/src/main/java/dev/sigstore/tuf/FileNotFoundException.java rename to sigstore-tuf/src/main/java/dev/sigstore/tuf/FileNotFoundException.java diff --git a/sigstore-java/src/main/java/dev/sigstore/tuf/FileSystemTufStore.java b/sigstore-tuf/src/main/java/dev/sigstore/tuf/FileSystemTufStore.java similarity index 100% rename from sigstore-java/src/main/java/dev/sigstore/tuf/FileSystemTufStore.java rename to sigstore-tuf/src/main/java/dev/sigstore/tuf/FileSystemTufStore.java diff --git a/sigstore-java/src/main/java/dev/sigstore/tuf/HttpFetcher.java b/sigstore-tuf/src/main/java/dev/sigstore/tuf/HttpFetcher.java similarity index 100% rename from sigstore-java/src/main/java/dev/sigstore/tuf/HttpFetcher.java rename to sigstore-tuf/src/main/java/dev/sigstore/tuf/HttpFetcher.java diff --git a/sigstore-java/src/main/java/dev/sigstore/tuf/InvalidHashesException.java b/sigstore-tuf/src/main/java/dev/sigstore/tuf/InvalidHashesException.java similarity index 100% rename from sigstore-java/src/main/java/dev/sigstore/tuf/InvalidHashesException.java rename to sigstore-tuf/src/main/java/dev/sigstore/tuf/InvalidHashesException.java diff --git a/sigstore-java/src/main/java/dev/sigstore/tuf/MetaFetchResult.java b/sigstore-tuf/src/main/java/dev/sigstore/tuf/MetaFetchResult.java similarity index 100% rename from sigstore-java/src/main/java/dev/sigstore/tuf/MetaFetchResult.java rename to sigstore-tuf/src/main/java/dev/sigstore/tuf/MetaFetchResult.java diff --git a/sigstore-java/src/main/java/dev/sigstore/tuf/MetaFetcher.java b/sigstore-tuf/src/main/java/dev/sigstore/tuf/MetaFetcher.java similarity index 100% rename from sigstore-java/src/main/java/dev/sigstore/tuf/MetaFetcher.java rename to sigstore-tuf/src/main/java/dev/sigstore/tuf/MetaFetcher.java diff --git a/sigstore-java/src/main/java/dev/sigstore/tuf/MetaReader.java b/sigstore-tuf/src/main/java/dev/sigstore/tuf/MetaReader.java similarity index 100% rename from sigstore-java/src/main/java/dev/sigstore/tuf/MetaReader.java rename to sigstore-tuf/src/main/java/dev/sigstore/tuf/MetaReader.java diff --git a/sigstore-java/src/main/java/dev/sigstore/tuf/MetaStore.java b/sigstore-tuf/src/main/java/dev/sigstore/tuf/MetaStore.java similarity index 100% rename from sigstore-java/src/main/java/dev/sigstore/tuf/MetaStore.java rename to sigstore-tuf/src/main/java/dev/sigstore/tuf/MetaStore.java diff --git a/sigstore-java/src/main/java/dev/sigstore/tuf/PassthroughCacheMetaStore.java b/sigstore-tuf/src/main/java/dev/sigstore/tuf/PassthroughCacheMetaStore.java similarity index 100% rename from sigstore-java/src/main/java/dev/sigstore/tuf/PassthroughCacheMetaStore.java rename to sigstore-tuf/src/main/java/dev/sigstore/tuf/PassthroughCacheMetaStore.java diff --git a/sigstore-java/src/main/java/dev/sigstore/tuf/RoleExpiredException.java b/sigstore-tuf/src/main/java/dev/sigstore/tuf/RoleExpiredException.java similarity index 100% rename from sigstore-java/src/main/java/dev/sigstore/tuf/RoleExpiredException.java rename to sigstore-tuf/src/main/java/dev/sigstore/tuf/RoleExpiredException.java diff --git a/sigstore-java/src/main/java/dev/sigstore/tuf/RollbackVersionException.java b/sigstore-tuf/src/main/java/dev/sigstore/tuf/RollbackVersionException.java similarity index 100% rename from sigstore-java/src/main/java/dev/sigstore/tuf/RollbackVersionException.java rename to sigstore-tuf/src/main/java/dev/sigstore/tuf/RollbackVersionException.java diff --git a/sigstore-java/src/main/java/dev/sigstore/tuf/RootProvider.java b/sigstore-tuf/src/main/java/dev/sigstore/tuf/RootProvider.java similarity index 100% rename from sigstore-java/src/main/java/dev/sigstore/tuf/RootProvider.java rename to sigstore-tuf/src/main/java/dev/sigstore/tuf/RootProvider.java diff --git a/sigstore-java/src/main/java/dev/sigstore/tuf/SignatureVerificationException.java b/sigstore-tuf/src/main/java/dev/sigstore/tuf/SignatureVerificationException.java similarity index 100% rename from sigstore-java/src/main/java/dev/sigstore/tuf/SignatureVerificationException.java rename to sigstore-tuf/src/main/java/dev/sigstore/tuf/SignatureVerificationException.java diff --git a/sigstore-java/src/main/java/dev/sigstore/tuf/SnapshotTargetMissingException.java b/sigstore-tuf/src/main/java/dev/sigstore/tuf/SnapshotTargetMissingException.java similarity index 100% rename from sigstore-java/src/main/java/dev/sigstore/tuf/SnapshotTargetMissingException.java rename to sigstore-tuf/src/main/java/dev/sigstore/tuf/SnapshotTargetMissingException.java diff --git a/sigstore-java/src/main/java/dev/sigstore/tuf/SnapshotTargetVersionException.java b/sigstore-tuf/src/main/java/dev/sigstore/tuf/SnapshotTargetVersionException.java similarity index 100% rename from sigstore-java/src/main/java/dev/sigstore/tuf/SnapshotTargetVersionException.java rename to sigstore-tuf/src/main/java/dev/sigstore/tuf/SnapshotTargetVersionException.java diff --git a/sigstore-java/src/main/java/dev/sigstore/tuf/SnapshotVersionMismatchException.java b/sigstore-tuf/src/main/java/dev/sigstore/tuf/SnapshotVersionMismatchException.java similarity index 100% rename from sigstore-java/src/main/java/dev/sigstore/tuf/SnapshotVersionMismatchException.java rename to sigstore-tuf/src/main/java/dev/sigstore/tuf/SnapshotVersionMismatchException.java diff --git a/sigstore-java/src/main/java/dev/sigstore/tuf/TargetMetadataMissingException.java b/sigstore-tuf/src/main/java/dev/sigstore/tuf/TargetMetadataMissingException.java similarity index 100% rename from sigstore-java/src/main/java/dev/sigstore/tuf/TargetMetadataMissingException.java rename to sigstore-tuf/src/main/java/dev/sigstore/tuf/TargetMetadataMissingException.java diff --git a/sigstore-java/src/main/java/dev/sigstore/tuf/TargetReader.java b/sigstore-tuf/src/main/java/dev/sigstore/tuf/TargetReader.java similarity index 100% rename from sigstore-java/src/main/java/dev/sigstore/tuf/TargetReader.java rename to sigstore-tuf/src/main/java/dev/sigstore/tuf/TargetReader.java diff --git a/sigstore-java/src/main/java/dev/sigstore/tuf/TargetStore.java b/sigstore-tuf/src/main/java/dev/sigstore/tuf/TargetStore.java similarity index 100% rename from sigstore-java/src/main/java/dev/sigstore/tuf/TargetStore.java rename to sigstore-tuf/src/main/java/dev/sigstore/tuf/TargetStore.java diff --git a/sigstore-java/src/main/java/dev/sigstore/tuf/TrustedMetaStore.java b/sigstore-tuf/src/main/java/dev/sigstore/tuf/TrustedMetaStore.java similarity index 100% rename from sigstore-java/src/main/java/dev/sigstore/tuf/TrustedMetaStore.java rename to sigstore-tuf/src/main/java/dev/sigstore/tuf/TrustedMetaStore.java diff --git a/sigstore-java/src/main/java/dev/sigstore/tuf/TufException.java b/sigstore-tuf/src/main/java/dev/sigstore/tuf/TufException.java similarity index 100% rename from sigstore-java/src/main/java/dev/sigstore/tuf/TufException.java rename to sigstore-tuf/src/main/java/dev/sigstore/tuf/TufException.java diff --git a/sigstore-java/src/main/java/dev/sigstore/tuf/Updater.java b/sigstore-tuf/src/main/java/dev/sigstore/tuf/Updater.java similarity index 99% rename from sigstore-java/src/main/java/dev/sigstore/tuf/Updater.java rename to sigstore-tuf/src/main/java/dev/sigstore/tuf/Updater.java index ef4f31e6d..e8c1c99cf 100644 --- a/sigstore-java/src/main/java/dev/sigstore/tuf/Updater.java +++ b/sigstore-tuf/src/main/java/dev/sigstore/tuf/Updater.java @@ -563,12 +563,12 @@ void downloadTarget(String targetName, TargetData targetData) throws IOException } @VisibleForTesting - TargetStore getTargetStore() { + public TargetStore getTargetStore() { return targetStore; } @VisibleForTesting - TrustedMetaStore getMetaStore() { + public TrustedMetaStore getMetaStore() { return trustedMetaStore; } diff --git a/sigstore-java/src/main/java/dev/sigstore/tuf/encryption/EcdsaVerifier.java b/sigstore-tuf/src/main/java/dev/sigstore/tuf/encryption/EcdsaVerifier.java similarity index 100% rename from sigstore-java/src/main/java/dev/sigstore/tuf/encryption/EcdsaVerifier.java rename to sigstore-tuf/src/main/java/dev/sigstore/tuf/encryption/EcdsaVerifier.java diff --git a/sigstore-java/src/main/java/dev/sigstore/tuf/encryption/Ed25519Verifier.java b/sigstore-tuf/src/main/java/dev/sigstore/tuf/encryption/Ed25519Verifier.java similarity index 100% rename from sigstore-java/src/main/java/dev/sigstore/tuf/encryption/Ed25519Verifier.java rename to sigstore-tuf/src/main/java/dev/sigstore/tuf/encryption/Ed25519Verifier.java diff --git a/sigstore-java/src/main/java/dev/sigstore/tuf/encryption/RsaPssVerifier.java b/sigstore-tuf/src/main/java/dev/sigstore/tuf/encryption/RsaPssVerifier.java similarity index 100% rename from sigstore-java/src/main/java/dev/sigstore/tuf/encryption/RsaPssVerifier.java rename to sigstore-tuf/src/main/java/dev/sigstore/tuf/encryption/RsaPssVerifier.java diff --git a/sigstore-java/src/main/java/dev/sigstore/tuf/encryption/Verifier.java b/sigstore-tuf/src/main/java/dev/sigstore/tuf/encryption/Verifier.java similarity index 100% rename from sigstore-java/src/main/java/dev/sigstore/tuf/encryption/Verifier.java rename to sigstore-tuf/src/main/java/dev/sigstore/tuf/encryption/Verifier.java diff --git a/sigstore-java/src/main/java/dev/sigstore/tuf/encryption/Verifiers.java b/sigstore-tuf/src/main/java/dev/sigstore/tuf/encryption/Verifiers.java similarity index 100% rename from sigstore-java/src/main/java/dev/sigstore/tuf/encryption/Verifiers.java rename to sigstore-tuf/src/main/java/dev/sigstore/tuf/encryption/Verifiers.java diff --git a/sigstore-java/src/main/java/dev/sigstore/tuf/json/TufGsonSupplier.java b/sigstore-tuf/src/main/java/dev/sigstore/tuf/json/TufGsonSupplier.java similarity index 100% rename from sigstore-java/src/main/java/dev/sigstore/tuf/json/TufGsonSupplier.java rename to sigstore-tuf/src/main/java/dev/sigstore/tuf/json/TufGsonSupplier.java diff --git a/sigstore-java/src/main/java/dev/sigstore/tuf/model/DelegationRole.java b/sigstore-tuf/src/main/java/dev/sigstore/tuf/model/DelegationRole.java similarity index 100% rename from sigstore-java/src/main/java/dev/sigstore/tuf/model/DelegationRole.java rename to sigstore-tuf/src/main/java/dev/sigstore/tuf/model/DelegationRole.java diff --git a/sigstore-java/src/main/java/dev/sigstore/tuf/model/Delegations.java b/sigstore-tuf/src/main/java/dev/sigstore/tuf/model/Delegations.java similarity index 100% rename from sigstore-java/src/main/java/dev/sigstore/tuf/model/Delegations.java rename to sigstore-tuf/src/main/java/dev/sigstore/tuf/model/Delegations.java diff --git a/sigstore-java/src/main/java/dev/sigstore/tuf/model/Hashes.java b/sigstore-tuf/src/main/java/dev/sigstore/tuf/model/Hashes.java similarity index 100% rename from sigstore-java/src/main/java/dev/sigstore/tuf/model/Hashes.java rename to sigstore-tuf/src/main/java/dev/sigstore/tuf/model/Hashes.java diff --git a/sigstore-java/src/main/java/dev/sigstore/tuf/model/Key.java b/sigstore-tuf/src/main/java/dev/sigstore/tuf/model/Key.java similarity index 100% rename from sigstore-java/src/main/java/dev/sigstore/tuf/model/Key.java rename to sigstore-tuf/src/main/java/dev/sigstore/tuf/model/Key.java diff --git a/sigstore-java/src/main/java/dev/sigstore/tuf/model/Role.java b/sigstore-tuf/src/main/java/dev/sigstore/tuf/model/Role.java similarity index 100% rename from sigstore-java/src/main/java/dev/sigstore/tuf/model/Role.java rename to sigstore-tuf/src/main/java/dev/sigstore/tuf/model/Role.java diff --git a/sigstore-java/src/main/java/dev/sigstore/tuf/model/Root.java b/sigstore-tuf/src/main/java/dev/sigstore/tuf/model/Root.java similarity index 100% rename from sigstore-java/src/main/java/dev/sigstore/tuf/model/Root.java rename to sigstore-tuf/src/main/java/dev/sigstore/tuf/model/Root.java diff --git a/sigstore-java/src/main/java/dev/sigstore/tuf/model/RootMeta.java b/sigstore-tuf/src/main/java/dev/sigstore/tuf/model/RootMeta.java similarity index 100% rename from sigstore-java/src/main/java/dev/sigstore/tuf/model/RootMeta.java rename to sigstore-tuf/src/main/java/dev/sigstore/tuf/model/RootMeta.java diff --git a/sigstore-java/src/main/java/dev/sigstore/tuf/model/RootRole.java b/sigstore-tuf/src/main/java/dev/sigstore/tuf/model/RootRole.java similarity index 100% rename from sigstore-java/src/main/java/dev/sigstore/tuf/model/RootRole.java rename to sigstore-tuf/src/main/java/dev/sigstore/tuf/model/RootRole.java diff --git a/sigstore-java/src/main/java/dev/sigstore/tuf/model/Signature.java b/sigstore-tuf/src/main/java/dev/sigstore/tuf/model/Signature.java similarity index 100% rename from sigstore-java/src/main/java/dev/sigstore/tuf/model/Signature.java rename to sigstore-tuf/src/main/java/dev/sigstore/tuf/model/Signature.java diff --git a/sigstore-java/src/main/java/dev/sigstore/tuf/model/SignedTufMeta.java b/sigstore-tuf/src/main/java/dev/sigstore/tuf/model/SignedTufMeta.java similarity index 100% rename from sigstore-java/src/main/java/dev/sigstore/tuf/model/SignedTufMeta.java rename to sigstore-tuf/src/main/java/dev/sigstore/tuf/model/SignedTufMeta.java diff --git a/sigstore-java/src/main/java/dev/sigstore/tuf/model/Snapshot.java b/sigstore-tuf/src/main/java/dev/sigstore/tuf/model/Snapshot.java similarity index 100% rename from sigstore-java/src/main/java/dev/sigstore/tuf/model/Snapshot.java rename to sigstore-tuf/src/main/java/dev/sigstore/tuf/model/Snapshot.java diff --git a/sigstore-java/src/main/java/dev/sigstore/tuf/model/SnapshotMeta.java b/sigstore-tuf/src/main/java/dev/sigstore/tuf/model/SnapshotMeta.java similarity index 100% rename from sigstore-java/src/main/java/dev/sigstore/tuf/model/SnapshotMeta.java rename to sigstore-tuf/src/main/java/dev/sigstore/tuf/model/SnapshotMeta.java diff --git a/sigstore-java/src/main/java/dev/sigstore/tuf/model/TargetMeta.java b/sigstore-tuf/src/main/java/dev/sigstore/tuf/model/TargetMeta.java similarity index 100% rename from sigstore-java/src/main/java/dev/sigstore/tuf/model/TargetMeta.java rename to sigstore-tuf/src/main/java/dev/sigstore/tuf/model/TargetMeta.java diff --git a/sigstore-java/src/main/java/dev/sigstore/tuf/model/Targets.java b/sigstore-tuf/src/main/java/dev/sigstore/tuf/model/Targets.java similarity index 100% rename from sigstore-java/src/main/java/dev/sigstore/tuf/model/Targets.java rename to sigstore-tuf/src/main/java/dev/sigstore/tuf/model/Targets.java diff --git a/sigstore-java/src/main/java/dev/sigstore/tuf/model/Timestamp.java b/sigstore-tuf/src/main/java/dev/sigstore/tuf/model/Timestamp.java similarity index 100% rename from sigstore-java/src/main/java/dev/sigstore/tuf/model/Timestamp.java rename to sigstore-tuf/src/main/java/dev/sigstore/tuf/model/Timestamp.java diff --git a/sigstore-java/src/main/java/dev/sigstore/tuf/model/TimestampMeta.java b/sigstore-tuf/src/main/java/dev/sigstore/tuf/model/TimestampMeta.java similarity index 100% rename from sigstore-java/src/main/java/dev/sigstore/tuf/model/TimestampMeta.java rename to sigstore-tuf/src/main/java/dev/sigstore/tuf/model/TimestampMeta.java diff --git a/sigstore-java/src/main/java/dev/sigstore/tuf/model/TufMeta.java b/sigstore-tuf/src/main/java/dev/sigstore/tuf/model/TufMeta.java similarity index 100% rename from sigstore-java/src/main/java/dev/sigstore/tuf/model/TufMeta.java rename to sigstore-tuf/src/main/java/dev/sigstore/tuf/model/TufMeta.java diff --git a/sigstore-testkit/src/main/java/dev/sigstore/testkit/tuf/TestResources.java b/sigstore-tuf/src/test/java/dev/sigstore/testkit/tuf/TestResources.java similarity index 100% rename from sigstore-testkit/src/main/java/dev/sigstore/testkit/tuf/TestResources.java rename to sigstore-tuf/src/test/java/dev/sigstore/testkit/tuf/TestResources.java diff --git a/sigstore-java/src/test/java/dev/sigstore/tuf/FileSystemTufStoreTest.java b/sigstore-tuf/src/test/java/dev/sigstore/tuf/FileSystemTufStoreTest.java similarity index 100% rename from sigstore-java/src/test/java/dev/sigstore/tuf/FileSystemTufStoreTest.java rename to sigstore-tuf/src/test/java/dev/sigstore/tuf/FileSystemTufStoreTest.java diff --git a/sigstore-java/src/test/java/dev/sigstore/tuf/HttpFetcherTest.java b/sigstore-tuf/src/test/java/dev/sigstore/tuf/HttpFetcherTest.java similarity index 100% rename from sigstore-java/src/test/java/dev/sigstore/tuf/HttpFetcherTest.java rename to sigstore-tuf/src/test/java/dev/sigstore/tuf/HttpFetcherTest.java diff --git a/sigstore-java/src/test/java/dev/sigstore/tuf/PassthroughCacheMetaStoreTest.java b/sigstore-tuf/src/test/java/dev/sigstore/tuf/PassthroughCacheMetaStoreTest.java similarity index 100% rename from sigstore-java/src/test/java/dev/sigstore/tuf/PassthroughCacheMetaStoreTest.java rename to sigstore-tuf/src/test/java/dev/sigstore/tuf/PassthroughCacheMetaStoreTest.java diff --git a/sigstore-java/src/test/java/dev/sigstore/tuf/UpdaterTest.java b/sigstore-tuf/src/test/java/dev/sigstore/tuf/UpdaterTest.java similarity index 100% rename from sigstore-java/src/test/java/dev/sigstore/tuf/UpdaterTest.java rename to sigstore-tuf/src/test/java/dev/sigstore/tuf/UpdaterTest.java diff --git a/sigstore-java/src/test/java/dev/sigstore/tuf/encryption/EcdsaVerifierTest.java b/sigstore-tuf/src/test/java/dev/sigstore/tuf/encryption/EcdsaVerifierTest.java similarity index 100% rename from sigstore-java/src/test/java/dev/sigstore/tuf/encryption/EcdsaVerifierTest.java rename to sigstore-tuf/src/test/java/dev/sigstore/tuf/encryption/EcdsaVerifierTest.java diff --git a/sigstore-java/src/test/java/dev/sigstore/tuf/encryption/Ed25519VerifierTest.java b/sigstore-tuf/src/test/java/dev/sigstore/tuf/encryption/Ed25519VerifierTest.java similarity index 100% rename from sigstore-java/src/test/java/dev/sigstore/tuf/encryption/Ed25519VerifierTest.java rename to sigstore-tuf/src/test/java/dev/sigstore/tuf/encryption/Ed25519VerifierTest.java diff --git a/sigstore-java/src/test/java/dev/sigstore/tuf/encryption/RsaPssVerifierTest.java b/sigstore-tuf/src/test/java/dev/sigstore/tuf/encryption/RsaPssVerifierTest.java similarity index 100% rename from sigstore-java/src/test/java/dev/sigstore/tuf/encryption/RsaPssVerifierTest.java rename to sigstore-tuf/src/test/java/dev/sigstore/tuf/encryption/RsaPssVerifierTest.java diff --git a/sigstore-java/src/test/java/dev/sigstore/tuf/encryption/VerifiersTest.java b/sigstore-tuf/src/test/java/dev/sigstore/tuf/encryption/VerifiersTest.java similarity index 100% rename from sigstore-java/src/test/java/dev/sigstore/tuf/encryption/VerifiersTest.java rename to sigstore-tuf/src/test/java/dev/sigstore/tuf/encryption/VerifiersTest.java diff --git a/sigstore-java/src/test/java/dev/sigstore/tuf/json/TufGsonSupplierTest.java b/sigstore-tuf/src/test/java/dev/sigstore/tuf/json/TufGsonSupplierTest.java similarity index 100% rename from sigstore-java/src/test/java/dev/sigstore/tuf/json/TufGsonSupplierTest.java rename to sigstore-tuf/src/test/java/dev/sigstore/tuf/json/TufGsonSupplierTest.java diff --git a/sigstore-java/src/test/java/dev/sigstore/tuf/model/TestTufJsonLoading.java b/sigstore-tuf/src/test/java/dev/sigstore/tuf/model/TestTufJsonLoading.java similarity index 100% rename from sigstore-java/src/test/java/dev/sigstore/tuf/model/TestTufJsonLoading.java rename to sigstore-tuf/src/test/java/dev/sigstore/tuf/model/TestTufJsonLoading.java diff --git a/sigstore-java/src/test/resources/dev/sigstore/samples/keys/test-ec.pub b/sigstore-tuf/src/test/resources/dev/sigstore/samples/keys/test-ec.pub similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/samples/keys/test-ec.pub rename to sigstore-tuf/src/test/resources/dev/sigstore/samples/keys/test-ec.pub diff --git a/sigstore-java/src/test/resources/dev/sigstore/samples/keys/test-rsa.pub b/sigstore-tuf/src/test/resources/dev/sigstore/samples/keys/test-rsa.pub similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/samples/keys/test-rsa.pub rename to sigstore-tuf/src/test/resources/dev/sigstore/samples/keys/test-rsa.pub diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/.editorconfig b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/.editorconfig similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/.editorconfig rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/.editorconfig diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/model/root.json b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/model/root.json similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/model/root.json rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/model/root.json diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/model/snapshot.json b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/model/snapshot.json similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/model/snapshot.json rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/model/snapshot.json diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/model/targets.json b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/model/targets.json similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/model/targets.json rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/model/targets.json diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/no-size-no-hash-snapshot-timestamp/2.root.json b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/no-size-no-hash-snapshot-timestamp/2.root.json similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/no-size-no-hash-snapshot-timestamp/2.root.json rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/no-size-no-hash-snapshot-timestamp/2.root.json diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/no-size-no-hash-snapshot-timestamp/3.snapshot.json b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/no-size-no-hash-snapshot-timestamp/3.snapshot.json similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/no-size-no-hash-snapshot-timestamp/3.snapshot.json rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/no-size-no-hash-snapshot-timestamp/3.snapshot.json diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/no-size-no-hash-snapshot-timestamp/README.md b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/no-size-no-hash-snapshot-timestamp/README.md similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/no-size-no-hash-snapshot-timestamp/README.md rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/no-size-no-hash-snapshot-timestamp/README.md diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/no-size-no-hash-snapshot-timestamp/timestamp.json b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/no-size-no-hash-snapshot-timestamp/timestamp.json similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/no-size-no-hash-snapshot-timestamp/timestamp.json rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/no-size-no-hash-snapshot-timestamp/timestamp.json diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/root-signing-workspace/README.md b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/root-signing-workspace/README.md similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/root-signing-workspace/README.md rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/root-signing-workspace/README.md diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/root-signing-workspace/keys/root.json b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/root-signing-workspace/keys/root.json similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/root-signing-workspace/keys/root.json rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/root-signing-workspace/keys/root.json diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/root-signing-workspace/keys/snapshot.json b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/root-signing-workspace/keys/snapshot.json similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/root-signing-workspace/keys/snapshot.json rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/root-signing-workspace/keys/snapshot.json diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/root-signing-workspace/keys/targets.json b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/root-signing-workspace/keys/targets.json similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/root-signing-workspace/keys/targets.json rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/root-signing-workspace/keys/targets.json diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/root-signing-workspace/keys/timestamp.json b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/root-signing-workspace/keys/timestamp.json similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/root-signing-workspace/keys/timestamp.json rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/root-signing-workspace/keys/timestamp.json diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/root-signing-workspace/repository/1.root.json b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/root-signing-workspace/repository/1.root.json similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/root-signing-workspace/repository/1.root.json rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/root-signing-workspace/repository/1.root.json diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/root-signing-workspace/repository/1.snapshot.json b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/root-signing-workspace/repository/1.snapshot.json similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/root-signing-workspace/repository/1.snapshot.json rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/root-signing-workspace/repository/1.snapshot.json diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/root-signing-workspace/repository/1.targets.json b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/root-signing-workspace/repository/1.targets.json similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/root-signing-workspace/repository/1.targets.json rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/root-signing-workspace/repository/1.targets.json diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/root-signing-workspace/repository/2.root.json b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/root-signing-workspace/repository/2.root.json similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/root-signing-workspace/repository/2.root.json rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/root-signing-workspace/repository/2.root.json diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/root-signing-workspace/repository/2.snapshot.json b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/root-signing-workspace/repository/2.snapshot.json similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/root-signing-workspace/repository/2.snapshot.json rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/root-signing-workspace/repository/2.snapshot.json diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/root-signing-workspace/repository/2.targets.json b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/root-signing-workspace/repository/2.targets.json similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/root-signing-workspace/repository/2.targets.json rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/root-signing-workspace/repository/2.targets.json diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/root-signing-workspace/repository/3.snapshot.json b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/root-signing-workspace/repository/3.snapshot.json similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/root-signing-workspace/repository/3.snapshot.json rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/root-signing-workspace/repository/3.snapshot.json diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/root-signing-workspace/repository/3.targets.json b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/root-signing-workspace/repository/3.targets.json similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/root-signing-workspace/repository/3.targets.json rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/root-signing-workspace/repository/3.targets.json diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/root-signing-workspace/repository/root.json b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/root-signing-workspace/repository/root.json similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/root-signing-workspace/repository/root.json rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/root-signing-workspace/repository/root.json diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/root-signing-workspace/repository/snapshot.json b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/root-signing-workspace/repository/snapshot.json similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/root-signing-workspace/repository/snapshot.json rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/root-signing-workspace/repository/snapshot.json diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/root-signing-workspace/repository/targets.json b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/root-signing-workspace/repository/targets.json similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/root-signing-workspace/repository/targets.json rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/root-signing-workspace/repository/targets.json diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/root-signing-workspace/repository/targets/32005f02eac21b4cf161a02495330b6c14b548622b5f7e19d59ecfa622de650603ecceea39ed86cc322749a813503a72ad14ce5462c822b511eaf2f2cd2ad8f2.test.txt.v2 b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/root-signing-workspace/repository/targets/32005f02eac21b4cf161a02495330b6c14b548622b5f7e19d59ecfa622de650603ecceea39ed86cc322749a813503a72ad14ce5462c822b511eaf2f2cd2ad8f2.test.txt.v2 similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/root-signing-workspace/repository/targets/32005f02eac21b4cf161a02495330b6c14b548622b5f7e19d59ecfa622de650603ecceea39ed86cc322749a813503a72ad14ce5462c822b511eaf2f2cd2ad8f2.test.txt.v2 rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/root-signing-workspace/repository/targets/32005f02eac21b4cf161a02495330b6c14b548622b5f7e19d59ecfa622de650603ecceea39ed86cc322749a813503a72ad14ce5462c822b511eaf2f2cd2ad8f2.test.txt.v2 diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/root-signing-workspace/repository/targets/53904bc6216230bf8da0ec42d34004a3f36764de698638641870e37d270e4fd13e1079285f8bca73c2857a279f6f7fbc82038274c3eb48ec5bb2da9b2e30491a.test2.txt b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/root-signing-workspace/repository/targets/53904bc6216230bf8da0ec42d34004a3f36764de698638641870e37d270e4fd13e1079285f8bca73c2857a279f6f7fbc82038274c3eb48ec5bb2da9b2e30491a.test2.txt similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/root-signing-workspace/repository/targets/53904bc6216230bf8da0ec42d34004a3f36764de698638641870e37d270e4fd13e1079285f8bca73c2857a279f6f7fbc82038274c3eb48ec5bb2da9b2e30491a.test2.txt rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/root-signing-workspace/repository/targets/53904bc6216230bf8da0ec42d34004a3f36764de698638641870e37d270e4fd13e1079285f8bca73c2857a279f6f7fbc82038274c3eb48ec5bb2da9b2e30491a.test2.txt diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/root-signing-workspace/repository/targets/860de8f9a858eea7190fcfa1b53fe55914d3c38f17f8f542273012d19cc9509bb423f37b7c13c577a56339ad7f45273b479b1d0df837cb6e20a550c27cce0885.test.txt b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/root-signing-workspace/repository/targets/860de8f9a858eea7190fcfa1b53fe55914d3c38f17f8f542273012d19cc9509bb423f37b7c13c577a56339ad7f45273b479b1d0df837cb6e20a550c27cce0885.test.txt similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/root-signing-workspace/repository/targets/860de8f9a858eea7190fcfa1b53fe55914d3c38f17f8f542273012d19cc9509bb423f37b7c13c577a56339ad7f45273b479b1d0df837cb6e20a550c27cce0885.test.txt rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/root-signing-workspace/repository/targets/860de8f9a858eea7190fcfa1b53fe55914d3c38f17f8f542273012d19cc9509bb423f37b7c13c577a56339ad7f45273b479b1d0df837cb6e20a550c27cce0885.test.txt diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/root-signing-workspace/repository/timestamp.json b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/root-signing-workspace/repository/timestamp.json similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/root-signing-workspace/repository/timestamp.json rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/root-signing-workspace/repository/timestamp.json diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/root-too-big/2.root.json b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/root-too-big/2.root.json similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/root-too-big/2.root.json rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/root-too-big/2.root.json diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/root-too-big/README.md b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/root-too-big/README.md similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/root-too-big/README.md rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/root-too-big/README.md diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/root-unsigned/2.root.json b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/root-unsigned/2.root.json similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/root-unsigned/2.root.json rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/root-unsigned/2.root.json diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/root-unsigned/README.md b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/root-unsigned/README.md similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/root-unsigned/README.md rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/root-unsigned/README.md diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/root-update-with-empty-signature/2.root.json b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/root-update-with-empty-signature/2.root.json similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/root-update-with-empty-signature/2.root.json rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/root-update-with-empty-signature/2.root.json diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/root-update-with-empty-signature/README.md b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/root-update-with-empty-signature/README.md similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/root-update-with-empty-signature/README.md rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/root-update-with-empty-signature/README.md diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/root-update-with-invalid-signature/2.root.json b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/root-update-with-invalid-signature/2.root.json similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/root-update-with-invalid-signature/2.root.json rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/root-update-with-invalid-signature/2.root.json diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/root-update-with-invalid-signature/README.md b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/root-update-with-invalid-signature/README.md similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/root-update-with-invalid-signature/README.md rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/root-update-with-invalid-signature/README.md diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/root-update-with-unknown-fields/4.root.json b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/root-update-with-unknown-fields/4.root.json similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/root-update-with-unknown-fields/4.root.json rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/root-update-with-unknown-fields/4.root.json diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/root-update-with-unknown-fields/5.root.json b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/root-update-with-unknown-fields/5.root.json similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/root-update-with-unknown-fields/5.root.json rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/root-update-with-unknown-fields/5.root.json diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/root-update-with-unknown-fields/README.md b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/root-update-with-unknown-fields/README.md similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/root-update-with-unknown-fields/README.md rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/root-update-with-unknown-fields/README.md diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/root-wrong-version/2.root.json b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/root-wrong-version/2.root.json similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/root-wrong-version/2.root.json rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/root-wrong-version/2.root.json diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/root-wrong-version/README.md b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/root-wrong-version/README.md similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/root-wrong-version/README.md rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/root-wrong-version/README.md diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/snapshot-expired/2.root.json b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/snapshot-expired/2.root.json similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/snapshot-expired/2.root.json rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/snapshot-expired/2.root.json diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/snapshot-expired/3.snapshot.json b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/snapshot-expired/3.snapshot.json similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/snapshot-expired/3.snapshot.json rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/snapshot-expired/3.snapshot.json diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/snapshot-expired/README.md b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/snapshot-expired/README.md similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/snapshot-expired/README.md rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/snapshot-expired/README.md diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/snapshot-expired/timestamp.json b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/snapshot-expired/timestamp.json similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/snapshot-expired/timestamp.json rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/snapshot-expired/timestamp.json diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/snapshot-invalid-hash/2.root.json b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/snapshot-invalid-hash/2.root.json similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/snapshot-invalid-hash/2.root.json rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/snapshot-invalid-hash/2.root.json diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/snapshot-invalid-hash/3.snapshot.json b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/snapshot-invalid-hash/3.snapshot.json similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/snapshot-invalid-hash/3.snapshot.json rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/snapshot-invalid-hash/3.snapshot.json diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/snapshot-invalid-hash/README.md b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/snapshot-invalid-hash/README.md similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/snapshot-invalid-hash/README.md rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/snapshot-invalid-hash/README.md diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/snapshot-invalid-hash/timestamp.json b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/snapshot-invalid-hash/timestamp.json similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/snapshot-invalid-hash/timestamp.json rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/snapshot-invalid-hash/timestamp.json diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/snapshot-target-missing/2.root.json b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/snapshot-target-missing/2.root.json similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/snapshot-target-missing/2.root.json rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/snapshot-target-missing/2.root.json diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/snapshot-target-missing/3.snapshot.json b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/snapshot-target-missing/3.snapshot.json similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/snapshot-target-missing/3.snapshot.json rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/snapshot-target-missing/3.snapshot.json diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/snapshot-target-missing/4.snapshot.json b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/snapshot-target-missing/4.snapshot.json similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/snapshot-target-missing/4.snapshot.json rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/snapshot-target-missing/4.snapshot.json diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/snapshot-target-missing/README.md b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/snapshot-target-missing/README.md similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/snapshot-target-missing/README.md rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/snapshot-target-missing/README.md diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/snapshot-target-missing/timestamp.json b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/snapshot-target-missing/timestamp.json similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/snapshot-target-missing/timestamp.json rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/snapshot-target-missing/timestamp.json diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/snapshot-target-version-rollback/2.root.json b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/snapshot-target-version-rollback/2.root.json similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/snapshot-target-version-rollback/2.root.json rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/snapshot-target-version-rollback/2.root.json diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/snapshot-target-version-rollback/3.snapshot.json b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/snapshot-target-version-rollback/3.snapshot.json similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/snapshot-target-version-rollback/3.snapshot.json rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/snapshot-target-version-rollback/3.snapshot.json diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/snapshot-target-version-rollback/README.md b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/snapshot-target-version-rollback/README.md similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/snapshot-target-version-rollback/README.md rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/snapshot-target-version-rollback/README.md diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/snapshot-target-version-rollback/timestamp.json b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/snapshot-target-version-rollback/timestamp.json similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/snapshot-target-version-rollback/timestamp.json rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/snapshot-target-version-rollback/timestamp.json diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/snapshot-version-mismatch/2.root.json b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/snapshot-version-mismatch/2.root.json similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/snapshot-version-mismatch/2.root.json rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/snapshot-version-mismatch/2.root.json diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/snapshot-version-mismatch/3.snapshot.json b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/snapshot-version-mismatch/3.snapshot.json similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/snapshot-version-mismatch/3.snapshot.json rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/snapshot-version-mismatch/3.snapshot.json diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/snapshot-version-mismatch/README.md b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/snapshot-version-mismatch/README.md similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/snapshot-version-mismatch/README.md rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/snapshot-version-mismatch/README.md diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/snapshot-version-mismatch/snapshot.json b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/snapshot-version-mismatch/snapshot.json similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/snapshot-version-mismatch/snapshot.json rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/snapshot-version-mismatch/snapshot.json diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/snapshot-version-mismatch/timestamp.json b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/snapshot-version-mismatch/timestamp.json similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/snapshot-version-mismatch/timestamp.json rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/snapshot-version-mismatch/timestamp.json diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/targets-download-invalid-hash/2.root.json b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/targets-download-invalid-hash/2.root.json similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/targets-download-invalid-hash/2.root.json rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/targets-download-invalid-hash/2.root.json diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/targets-download-invalid-hash/3.snapshot.json b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/targets-download-invalid-hash/3.snapshot.json similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/targets-download-invalid-hash/3.snapshot.json rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/targets-download-invalid-hash/3.snapshot.json diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/targets-download-invalid-hash/3.targets.json b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/targets-download-invalid-hash/3.targets.json similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/targets-download-invalid-hash/3.targets.json rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/targets-download-invalid-hash/3.targets.json diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/targets-download-invalid-hash/README.md b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/targets-download-invalid-hash/README.md similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/targets-download-invalid-hash/README.md rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/targets-download-invalid-hash/README.md diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/targets-download-invalid-hash/targets/860de8f9a858eea7190fcfa1b53fe55914d3c38f17f8f542273012d19cc9509bb423f37b7c13c577a56339ad7f45273b479b1d0df837cb6e20a550c27cce0885.test.txt b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/targets-download-invalid-hash/targets/860de8f9a858eea7190fcfa1b53fe55914d3c38f17f8f542273012d19cc9509bb423f37b7c13c577a56339ad7f45273b479b1d0df837cb6e20a550c27cce0885.test.txt similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/targets-download-invalid-hash/targets/860de8f9a858eea7190fcfa1b53fe55914d3c38f17f8f542273012d19cc9509bb423f37b7c13c577a56339ad7f45273b479b1d0df837cb6e20a550c27cce0885.test.txt rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/targets-download-invalid-hash/targets/860de8f9a858eea7190fcfa1b53fe55914d3c38f17f8f542273012d19cc9509bb423f37b7c13c577a56339ad7f45273b479b1d0df837cb6e20a550c27cce0885.test.txt diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/targets-download-invalid-hash/timestamp.json b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/targets-download-invalid-hash/timestamp.json similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/targets-download-invalid-hash/timestamp.json rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/targets-download-invalid-hash/timestamp.json diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/targets-download-invalid-length/2.root.json b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/targets-download-invalid-length/2.root.json similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/targets-download-invalid-length/2.root.json rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/targets-download-invalid-length/2.root.json diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/targets-download-invalid-length/3.snapshot.json b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/targets-download-invalid-length/3.snapshot.json similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/targets-download-invalid-length/3.snapshot.json rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/targets-download-invalid-length/3.snapshot.json diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/targets-download-invalid-length/3.targets.json b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/targets-download-invalid-length/3.targets.json similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/targets-download-invalid-length/3.targets.json rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/targets-download-invalid-length/3.targets.json diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/targets-download-invalid-length/README.md b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/targets-download-invalid-length/README.md similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/targets-download-invalid-length/README.md rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/targets-download-invalid-length/README.md diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/targets-download-invalid-length/targets/860de8f9a858eea7190fcfa1b53fe55914d3c38f17f8f542273012d19cc9509bb423f37b7c13c577a56339ad7f45273b479b1d0df837cb6e20a550c27cce0885.test.txt b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/targets-download-invalid-length/targets/860de8f9a858eea7190fcfa1b53fe55914d3c38f17f8f542273012d19cc9509bb423f37b7c13c577a56339ad7f45273b479b1d0df837cb6e20a550c27cce0885.test.txt similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/targets-download-invalid-length/targets/860de8f9a858eea7190fcfa1b53fe55914d3c38f17f8f542273012d19cc9509bb423f37b7c13c577a56339ad7f45273b479b1d0df837cb6e20a550c27cce0885.test.txt rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/targets-download-invalid-length/targets/860de8f9a858eea7190fcfa1b53fe55914d3c38f17f8f542273012d19cc9509bb423f37b7c13c577a56339ad7f45273b479b1d0df837cb6e20a550c27cce0885.test.txt diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/targets-download-invalid-length/timestamp.json b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/targets-download-invalid-length/timestamp.json similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/targets-download-invalid-length/timestamp.json rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/targets-download-invalid-length/timestamp.json diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/targets-download-missing-target-metadata/2.root.json b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/targets-download-missing-target-metadata/2.root.json similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/targets-download-missing-target-metadata/2.root.json rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/targets-download-missing-target-metadata/2.root.json diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/targets-download-missing-target-metadata/3.snapshot.json b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/targets-download-missing-target-metadata/3.snapshot.json similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/targets-download-missing-target-metadata/3.snapshot.json rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/targets-download-missing-target-metadata/3.snapshot.json diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/targets-download-missing-target-metadata/3.targets.json b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/targets-download-missing-target-metadata/3.targets.json similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/targets-download-missing-target-metadata/3.targets.json rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/targets-download-missing-target-metadata/3.targets.json diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/targets-download-missing-target-metadata/README.md b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/targets-download-missing-target-metadata/README.md similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/targets-download-missing-target-metadata/README.md rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/targets-download-missing-target-metadata/README.md diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/targets-download-missing-target-metadata/timestamp.json b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/targets-download-missing-target-metadata/timestamp.json similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/targets-download-missing-target-metadata/timestamp.json rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/targets-download-missing-target-metadata/timestamp.json diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/targets-expired/2.root.json b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/targets-expired/2.root.json similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/targets-expired/2.root.json rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/targets-expired/2.root.json diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/targets-expired/3.snapshot.json b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/targets-expired/3.snapshot.json similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/targets-expired/3.snapshot.json rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/targets-expired/3.snapshot.json diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/targets-expired/3.targets.json b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/targets-expired/3.targets.json similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/targets-expired/3.targets.json rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/targets-expired/3.targets.json diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/targets-expired/README.md b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/targets-expired/README.md similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/targets-expired/README.md rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/targets-expired/README.md diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/targets-expired/timestamp.json b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/targets-expired/timestamp.json similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/targets-expired/timestamp.json rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/targets-expired/timestamp.json diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/targets-invalid-hash/2.root.json b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/targets-invalid-hash/2.root.json similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/targets-invalid-hash/2.root.json rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/targets-invalid-hash/2.root.json diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/targets-invalid-hash/3.snapshot.json b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/targets-invalid-hash/3.snapshot.json similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/targets-invalid-hash/3.snapshot.json rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/targets-invalid-hash/3.snapshot.json diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/targets-invalid-hash/3.targets.json b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/targets-invalid-hash/3.targets.json similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/targets-invalid-hash/3.targets.json rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/targets-invalid-hash/3.targets.json diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/targets-invalid-hash/README.md b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/targets-invalid-hash/README.md similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/targets-invalid-hash/README.md rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/targets-invalid-hash/README.md diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/targets-invalid-hash/timestamp.json b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/targets-invalid-hash/timestamp.json similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/targets-invalid-hash/timestamp.json rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/targets-invalid-hash/timestamp.json diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/targets-sha256-or-sha512/1.root.json b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/targets-sha256-or-sha512/1.root.json similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/targets-sha256-or-sha512/1.root.json rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/targets-sha256-or-sha512/1.root.json diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/targets-sha256-or-sha512/1.targets.json b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/targets-sha256-or-sha512/1.targets.json similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/targets-sha256-or-sha512/1.targets.json rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/targets-sha256-or-sha512/1.targets.json diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/targets-sha256-or-sha512/2.root.json b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/targets-sha256-or-sha512/2.root.json similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/targets-sha256-or-sha512/2.root.json rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/targets-sha256-or-sha512/2.root.json diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/targets-sha256-or-sha512/2.snapshot.json b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/targets-sha256-or-sha512/2.snapshot.json similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/targets-sha256-or-sha512/2.snapshot.json rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/targets-sha256-or-sha512/2.snapshot.json diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/targets-sha256-or-sha512/root.json b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/targets-sha256-or-sha512/root.json similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/targets-sha256-or-sha512/root.json rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/targets-sha256-or-sha512/root.json diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/targets-sha256-or-sha512/targets/2dff935df7d1e1221ef52c753091c487c6fdaabbb0b0e2b193764de8cd7c1222776c61d7ef21f20a4d031a6a6bfa631713df7c4f71b4ee21d362152d4618d514.test2.txt b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/targets-sha256-or-sha512/targets/2dff935df7d1e1221ef52c753091c487c6fdaabbb0b0e2b193764de8cd7c1222776c61d7ef21f20a4d031a6a6bfa631713df7c4f71b4ee21d362152d4618d514.test2.txt similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/targets-sha256-or-sha512/targets/2dff935df7d1e1221ef52c753091c487c6fdaabbb0b0e2b193764de8cd7c1222776c61d7ef21f20a4d031a6a6bfa631713df7c4f71b4ee21d362152d4618d514.test2.txt rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/targets-sha256-or-sha512/targets/2dff935df7d1e1221ef52c753091c487c6fdaabbb0b0e2b193764de8cd7c1222776c61d7ef21f20a4d031a6a6bfa631713df7c4f71b4ee21d362152d4618d514.test2.txt diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/targets-sha256-or-sha512/targets/55f8718109829bf506b09d8af615b9f107a266e19f7a311039d1035f180b22d4.test.txt b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/targets-sha256-or-sha512/targets/55f8718109829bf506b09d8af615b9f107a266e19f7a311039d1035f180b22d4.test.txt similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/targets-sha256-or-sha512/targets/55f8718109829bf506b09d8af615b9f107a266e19f7a311039d1035f180b22d4.test.txt rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/targets-sha256-or-sha512/targets/55f8718109829bf506b09d8af615b9f107a266e19f7a311039d1035f180b22d4.test.txt diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/targets-sha256-or-sha512/timestamp.json b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/targets-sha256-or-sha512/timestamp.json similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/targets-sha256-or-sha512/timestamp.json rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/targets-sha256-or-sha512/timestamp.json diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/targets-snapshot-version-mismatch/2.root.json b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/targets-snapshot-version-mismatch/2.root.json similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/targets-snapshot-version-mismatch/2.root.json rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/targets-snapshot-version-mismatch/2.root.json diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/targets-snapshot-version-mismatch/3.snapshot.json b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/targets-snapshot-version-mismatch/3.snapshot.json similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/targets-snapshot-version-mismatch/3.snapshot.json rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/targets-snapshot-version-mismatch/3.snapshot.json diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/targets-snapshot-version-mismatch/3.targets.json b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/targets-snapshot-version-mismatch/3.targets.json similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/targets-snapshot-version-mismatch/3.targets.json rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/targets-snapshot-version-mismatch/3.targets.json diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/targets-snapshot-version-mismatch/README.md b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/targets-snapshot-version-mismatch/README.md similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/targets-snapshot-version-mismatch/README.md rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/targets-snapshot-version-mismatch/README.md diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/targets-snapshot-version-mismatch/timestamp.json b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/targets-snapshot-version-mismatch/timestamp.json similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/targets-snapshot-version-mismatch/timestamp.json rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/targets-snapshot-version-mismatch/timestamp.json diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/targets-with-subdirs/1.root.json b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/targets-with-subdirs/1.root.json similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/targets-with-subdirs/1.root.json rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/targets-with-subdirs/1.root.json diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/targets-with-subdirs/1.snapshot.json b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/targets-with-subdirs/1.snapshot.json similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/targets-with-subdirs/1.snapshot.json rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/targets-with-subdirs/1.snapshot.json diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/targets-with-subdirs/1.targets.json b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/targets-with-subdirs/1.targets.json similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/targets-with-subdirs/1.targets.json rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/targets-with-subdirs/1.targets.json diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/targets-with-subdirs/README.md b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/targets-with-subdirs/README.md similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/targets-with-subdirs/README.md rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/targets-with-subdirs/README.md diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/targets-with-subdirs/root.json b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/targets-with-subdirs/root.json similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/targets-with-subdirs/root.json rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/targets-with-subdirs/root.json diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/targets-with-subdirs/targets/subdir/860de8f9a858eea7190fcfa1b53fe55914d3c38f17f8f542273012d19cc9509bb423f37b7c13c577a56339ad7f45273b479b1d0df837cb6e20a550c27cce0885.test.txt b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/targets-with-subdirs/targets/subdir/860de8f9a858eea7190fcfa1b53fe55914d3c38f17f8f542273012d19cc9509bb423f37b7c13c577a56339ad7f45273b479b1d0df837cb6e20a550c27cce0885.test.txt similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/targets-with-subdirs/targets/subdir/860de8f9a858eea7190fcfa1b53fe55914d3c38f17f8f542273012d19cc9509bb423f37b7c13c577a56339ad7f45273b479b1d0df837cb6e20a550c27cce0885.test.txt rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/targets-with-subdirs/targets/subdir/860de8f9a858eea7190fcfa1b53fe55914d3c38f17f8f542273012d19cc9509bb423f37b7c13c577a56339ad7f45273b479b1d0df837cb6e20a550c27cce0885.test.txt diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/targets-with-subdirs/timestamp.json b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/targets-with-subdirs/timestamp.json similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/targets-with-subdirs/timestamp.json rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/targets-with-subdirs/timestamp.json diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/test-template/1.root.json b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/test-template/1.root.json similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/test-template/1.root.json rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/test-template/1.root.json diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/test-template/1.snapshot.json b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/test-template/1.snapshot.json similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/test-template/1.snapshot.json rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/test-template/1.snapshot.json diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/test-template/1.targets.json b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/test-template/1.targets.json similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/test-template/1.targets.json rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/test-template/1.targets.json diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/test-template/1.timestamp.json b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/test-template/1.timestamp.json similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/test-template/1.timestamp.json rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/test-template/1.timestamp.json diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/test-template/2.root.json b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/test-template/2.root.json similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/test-template/2.root.json rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/test-template/2.root.json diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/test-template/2.snapshot.json b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/test-template/2.snapshot.json similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/test-template/2.snapshot.json rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/test-template/2.snapshot.json diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/test-template/2.targets.json b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/test-template/2.targets.json similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/test-template/2.targets.json rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/test-template/2.targets.json diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/test-template/2.timestamp.json b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/test-template/2.timestamp.json similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/test-template/2.timestamp.json rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/test-template/2.timestamp.json diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/test-template/3.snapshot.json b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/test-template/3.snapshot.json similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/test-template/3.snapshot.json rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/test-template/3.snapshot.json diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/test-template/3.targets.json b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/test-template/3.targets.json similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/test-template/3.targets.json rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/test-template/3.targets.json diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/test-template/root.json b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/test-template/root.json similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/test-template/root.json rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/test-template/root.json diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/test-template/snapshot.json b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/test-template/snapshot.json similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/test-template/snapshot.json rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/test-template/snapshot.json diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/test-template/targets.json b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/test-template/targets.json similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/test-template/targets.json rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/test-template/targets.json diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/test-template/targets/32005f02eac21b4cf161a02495330b6c14b548622b5f7e19d59ecfa622de650603ecceea39ed86cc322749a813503a72ad14ce5462c822b511eaf2f2cd2ad8f2.test.txt.v2 b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/test-template/targets/32005f02eac21b4cf161a02495330b6c14b548622b5f7e19d59ecfa622de650603ecceea39ed86cc322749a813503a72ad14ce5462c822b511eaf2f2cd2ad8f2.test.txt.v2 similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/test-template/targets/32005f02eac21b4cf161a02495330b6c14b548622b5f7e19d59ecfa622de650603ecceea39ed86cc322749a813503a72ad14ce5462c822b511eaf2f2cd2ad8f2.test.txt.v2 rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/test-template/targets/32005f02eac21b4cf161a02495330b6c14b548622b5f7e19d59ecfa622de650603ecceea39ed86cc322749a813503a72ad14ce5462c822b511eaf2f2cd2ad8f2.test.txt.v2 diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/test-template/targets/53904bc6216230bf8da0ec42d34004a3f36764de698638641870e37d270e4fd13e1079285f8bca73c2857a279f6f7fbc82038274c3eb48ec5bb2da9b2e30491a.test2.txt b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/test-template/targets/53904bc6216230bf8da0ec42d34004a3f36764de698638641870e37d270e4fd13e1079285f8bca73c2857a279f6f7fbc82038274c3eb48ec5bb2da9b2e30491a.test2.txt similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/test-template/targets/53904bc6216230bf8da0ec42d34004a3f36764de698638641870e37d270e4fd13e1079285f8bca73c2857a279f6f7fbc82038274c3eb48ec5bb2da9b2e30491a.test2.txt rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/test-template/targets/53904bc6216230bf8da0ec42d34004a3f36764de698638641870e37d270e4fd13e1079285f8bca73c2857a279f6f7fbc82038274c3eb48ec5bb2da9b2e30491a.test2.txt diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/test-template/targets/860de8f9a858eea7190fcfa1b53fe55914d3c38f17f8f542273012d19cc9509bb423f37b7c13c577a56339ad7f45273b479b1d0df837cb6e20a550c27cce0885.test.txt b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/test-template/targets/860de8f9a858eea7190fcfa1b53fe55914d3c38f17f8f542273012d19cc9509bb423f37b7c13c577a56339ad7f45273b479b1d0df837cb6e20a550c27cce0885.test.txt similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/test-template/targets/860de8f9a858eea7190fcfa1b53fe55914d3c38f17f8f542273012d19cc9509bb423f37b7c13c577a56339ad7f45273b479b1d0df837cb6e20a550c27cce0885.test.txt rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/test-template/targets/860de8f9a858eea7190fcfa1b53fe55914d3c38f17f8f542273012d19cc9509bb423f37b7c13c577a56339ad7f45273b479b1d0df837cb6e20a550c27cce0885.test.txt diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/test-template/timestamp.json b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/test-template/timestamp.json similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/test-template/timestamp.json rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/test-template/timestamp.json diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/test/keys/root.json b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/test/keys/root.json similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/test/keys/root.json rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/test/keys/root.json diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/test/keys/snapshot.json b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/test/keys/snapshot.json similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/test/keys/snapshot.json rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/test/keys/snapshot.json diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/test/keys/targets.json b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/test/keys/targets.json similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/test/keys/targets.json rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/test/keys/targets.json diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/test/keys/timestamp.json b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/test/keys/timestamp.json similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/test/keys/timestamp.json rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/test/keys/timestamp.json diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/test/repository/1.root.json b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/test/repository/1.root.json similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/test/repository/1.root.json rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/test/repository/1.root.json diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/test/repository/2.root.json b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/test/repository/2.root.json similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/test/repository/2.root.json rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/test/repository/2.root.json diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/test/repository/root.json b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/test/repository/root.json similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/test/repository/root.json rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/test/repository/root.json diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/test/repository/snapshot.json b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/test/repository/snapshot.json similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/test/repository/snapshot.json rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/test/repository/snapshot.json diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/test/repository/targets.json b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/test/repository/targets.json similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/test/repository/targets.json rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/test/repository/targets.json diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/test/repository/targets/2dff935df7d1e1221ef52c753091c487c6fdaabbb0b0e2b193764de8cd7c1222776c61d7ef21f20a4d031a6a6bfa631713df7c4f71b4ee21d362152d4618d514.test2.txt b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/test/repository/targets/2dff935df7d1e1221ef52c753091c487c6fdaabbb0b0e2b193764de8cd7c1222776c61d7ef21f20a4d031a6a6bfa631713df7c4f71b4ee21d362152d4618d514.test2.txt similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/test/repository/targets/2dff935df7d1e1221ef52c753091c487c6fdaabbb0b0e2b193764de8cd7c1222776c61d7ef21f20a4d031a6a6bfa631713df7c4f71b4ee21d362152d4618d514.test2.txt rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/test/repository/targets/2dff935df7d1e1221ef52c753091c487c6fdaabbb0b0e2b193764de8cd7c1222776c61d7ef21f20a4d031a6a6bfa631713df7c4f71b4ee21d362152d4618d514.test2.txt diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/test/repository/targets/55f8718109829bf506b09d8af615b9f107a266e19f7a311039d1035f180b22d4.test.txt b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/test/repository/targets/55f8718109829bf506b09d8af615b9f107a266e19f7a311039d1035f180b22d4.test.txt similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/test/repository/targets/55f8718109829bf506b09d8af615b9f107a266e19f7a311039d1035f180b22d4.test.txt rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/test/repository/targets/55f8718109829bf506b09d8af615b9f107a266e19f7a311039d1035f180b22d4.test.txt diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/test/repository/timestamp.json b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/test/repository/timestamp.json similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/test/repository/timestamp.json rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/test/repository/timestamp.json diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/timestamp-rollback-version/2.root.json b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/timestamp-rollback-version/2.root.json similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/timestamp-rollback-version/2.root.json rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/timestamp-rollback-version/2.root.json diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/timestamp-rollback-version/README.md b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/timestamp-rollback-version/README.md similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/timestamp-rollback-version/README.md rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/timestamp-rollback-version/README.md diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/timestamp-rollback-version/timestamp.json b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/timestamp-rollback-version/timestamp.json similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/timestamp-rollback-version/timestamp.json rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/timestamp-rollback-version/timestamp.json diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/timestamp-unsigned/2.root.json b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/timestamp-unsigned/2.root.json similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/timestamp-unsigned/2.root.json rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/timestamp-unsigned/2.root.json diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/timestamp-unsigned/README.md b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/timestamp-unsigned/README.md similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/timestamp-unsigned/README.md rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/timestamp-unsigned/README.md diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/timestamp-unsigned/timestamp.json b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/timestamp-unsigned/timestamp.json similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/timestamp-unsigned/timestamp.json rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/timestamp-unsigned/timestamp.json diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/tmp/2.root.json b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/tmp/2.root.json similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/tmp/2.root.json rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/tmp/2.root.json diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/tmp/3.snapshot.json b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/tmp/3.snapshot.json similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/tmp/3.snapshot.json rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/tmp/3.snapshot.json diff --git a/sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/trusted-root.json b/sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/trusted-root.json similarity index 100% rename from sigstore-java/src/test/resources/dev/sigstore/tuf/synthetic/trusted-root.json rename to sigstore-tuf/src/test/resources/dev/sigstore/tuf/synthetic/trusted-root.json diff --git a/tuf-cli/build.gradle.kts b/tuf-cli/build.gradle.kts index ea37adf07..b5e3e11ab 100644 --- a/tuf-cli/build.gradle.kts +++ b/tuf-cli/build.gradle.kts @@ -11,7 +11,7 @@ repositories { } dependencies { - implementation(project(":sigstore-java")) + implementation(project(":sigstore-tuf")) implementation("info.picocli:picocli:4.7.6") implementation("com.google.guava:guava:33.7.1-jre")