diff --git a/.changeset/lovely-waves-hug.md b/.changeset/lovely-waves-hug.md new file mode 100644 index 00000000..93a5dadc --- /dev/null +++ b/.changeset/lovely-waves-hug.md @@ -0,0 +1,5 @@ +--- +"@sigstore/tuf": patch +--- + +Load TUF seeds via `require` instead of `require.resolve` diff --git a/packages/tuf/src/client.ts b/packages/tuf/src/client.ts index 1892eb6e..6799f39c 100644 --- a/packages/tuf/src/client.ts +++ b/packages/tuf/src/client.ts @@ -23,7 +23,6 @@ import type { MakeFetchHappenOptions } from 'make-fetch-happen'; export type Retry = MakeFetchHappenOptions['retry']; -const TUF_SEEDS_PATH = require.resolve('../seeds.json'); const TARGETS_DIR_NAME = 'targets'; type RepoSeed = { @@ -125,10 +124,8 @@ function seedCache({ if (tufRootPath) { fs.copyFileSync(tufRootPath, cachedRootPath); } else { - // Load the embedded repo seeds - const seeds: RepoSeeds = JSON.parse( - fs.readFileSync(TUF_SEEDS_PATH).toString('utf-8') - ); + /* eslint-disable @typescript-eslint/no-var-requires */ + const seeds: RepoSeeds = require('../seeds.json'); const repoSeed = seeds[mirrorURL]; if (!repoSeed) {