software

Script should do the following

• Validate the links of the podcasts (whether they are broken)
• Validate the order of the podcasts in each category (and also categories)

Break the build when either of the above validations fail

tuf/ngclient/updater.py: Updater._persist_metadata():

    with open(os.path.join(self._dir, f"{rolename}.json"), "wb") as f:
        f.write(data)

this is not as safe as it should be (as file could be corrupted midway through). This should work:

• write content to tempfile
• use sslib_util.persist_temp_file() to move tempfile to correct filepath