Artifact management documentation

Artifact management overview

• Overview

  Learn about artifact management.

Container images

• Quickstart for Artifact Registry

  Artifact Registry is a universal package manager for all your build artifacts and dependencies. It provides a single location for managing private packages and Docker container images.

• Quickstart for Container Registry

  Container Registry provides secure, private Docker image storage on Google Cloud.

• Transitioning from Container Registry to Artifact Registry

  Artifact Registry is the evolution of Container Registry. If you currently use Container Registry, use the information on this page to learn about transitioning to Artifact Registry.

• Scanning container images for vulnerabilities

  Use Container Analysis to scan container images for vulnerabilities.

• Ensure only trusted containers are deployed to production

  Use Binary Authorization to create attestations and deployment policies. This tutorial describes how to use Binary Authorization in a multi-project configuration.

Java packages

• Quickstart for Maven and Gradle

  This quickstart shows you how to set up an Artifact Registry Maven repository and upload a package to it.

Node.js packages

• Quickstart for npm

  This quick start shows you how to set up a Artifact Registry npm repository and upload a package to it.

Tutorials

• Securing software supply chains on Google Kubernetes Engine

  Use Google Kubernetes Engine to secure your software supply chains, allowing you to shift left on security though continuous delivery and deployment automation.

• Vulnerability scanning integration with Kritis Signer

  Create Binary Authorization attestations, based on Container Analysis vulnerability scanning, using Kritis Signer.