Bump Go to 1.22 · theupdateframework/go-tuf@bd2ffab

fetcher.DefaultFetcher.DownloadFile calls http.Client.Do

repository.main calls elliptic.P256, which eventually calls x509.CertPool.AppendCertsFromPEM

metadata.TargetFiles.FromBytes calls io.Copy, which eventually calls x509.Certificate.Verify

metadata.TargetFiles.FromBytes calls io.Copy, which eventually calls x509.Certificate.VerifyHostname

repository.main calls fmt.Sprintln, which eventually calls x509.HostnameError.Error

metadata.Key.ToPublicKey calls x509.MarshalPKIXPublicKey

repository.main calls elliptic.P256, which eventually calls x509.ParseCertificate

rsapss.LoadRSAPSSSignerFromPEMFile calls x509.ParsePKCS1PrivateKey

metadata.Key.ToPublicKey calls cryptoutils.UnmarshalPEMToPublicKey, which calls x509.ParsePKCS1PublicKey

metadata.Key.ToPublicKey calls cryptoutils.UnmarshalPEMToPublicKey, which calls x509.ParsePKIXPublicKey

Provide feedback