Advisories for Golang/Github.com/Gittuf/Gittuf package

An attacker with push access to gittuf's Reference State Log (RSL) can roll back the current policy to any previous policy trusted by the current set of root keys.