단일 프로젝트 내에 여러 리전 저장소를 만듭니다. Google Cloud
팀 또는 개발 단계별로 이미지를 그룹화하고 저장소 수준에서 액세스를 제어합니다.
Artifact Registry는 Cloud Build와 기타 지속적 배포 및 지속적 통합 시스템과 통합되어 빌드의 패키지를 저장합니다.
빌드 및 배포에 사용하는 신뢰할 수 있는 종속 항목을 저장할 수도 있습니다.
종속 항목 관리
소프트웨어 공급망 보호에는 특정 도구를 사용하는 것 이상의 의미가 있습니다.
소프트웨어를 개발, 빌드, 실행하기 위해 사용하는 프로세스 및 관행 역시 소프트웨어의 무결성에 영향을 미칩니다. 종속 항목의 권장사항에 대해 자세히 알아보려면 종속 항목 관리를 참조하세요.
소프트웨어 공급망 보안
Google Cloud 는 개발자, DevOps, 보안팀이 소프트웨어 공급망의 보안 상태를 개선하는 데 사용할 수 있는 포괄적이고 모듈화된 기능 및 도구 모음을 제공합니다.
Artifact Registry는 다음을 제공합니다.
관리 수준을 높이고 취약점, 빌드 출처 및 기타 종속 항목 정보를 검색할 수 있도록 업스트림 공개 소스에서 종속 항목을 캐시하기 위한 원격 저장소를 제공합니다.
단일 엔드포인트 뒤에서 원격 및 비공개 저장소를 그룹화하기 위한 가상 저장소를 제공합니다. 아티팩트를 다운로드하거나 설치할 때 검색 순서를 제어하기 위해 각 저장소에서 우선순위를 설정합니다.
Cloud Build, Cloud Run, GKE 내에서 보안 상태, 빌드 아티팩트, 종속 항목에 대한 보안 정보를 확인할 수 있습니다. Google Cloud
Artifact Registry 및 Container Registry
Artifact Registry는 Container Registry의 기능을 확장하며 Google Cloud에 권장되는 컨테이너 레지스트리입니다. 현재 Container Registry를 사용하고 있다면 Container Registry에서 전환하여 새롭고 개선된 기능을 활용해 보세요.
[[["이해하기 쉬움","easyToUnderstand","thumb-up"],["문제가 해결됨","solvedMyProblem","thumb-up"],["기타","otherUp","thumb-up"]],[["이해하기 어려움","hardToUnderstand","thumb-down"],["잘못된 정보 또는 샘플 코드","incorrectInformationOrSampleCode","thumb-down"],["필요한 정보/샘플이 없음","missingTheInformationSamplesINeed","thumb-down"],["번역 문제","translationIssue","thumb-down"],["기타","otherDown","thumb-down"]],["최종 업데이트: 2025-09-04(UTC)"],[[["\u003cp\u003eArtifact Registry offers a centralized solution for storing and managing packages and Docker container images, integrating seamlessly with Google Cloud's CI/CD services and other tools.\u003c/p\u003e\n"],["\u003cp\u003eIt enhances software supply chain security by allowing users to manage container metadata, scan for vulnerabilities with Artifact Analysis, and protect repositories within a VPC Service Controls security perimeter.\u003c/p\u003e\n"],["\u003cp\u003eArtifact Registry provides remote repositories for caching dependencies from public sources and virtual repositories to group remote and private repositories, enabling greater control and prioritization.\u003c/p\u003e\n"],["\u003cp\u003eArtifact Registry is the recommended container registry for Google Cloud, offering expanded capabilities compared to Container Registry, and the ability to transition between them.\u003c/p\u003e\n"],["\u003cp\u003eArtifact Registry integrates with Cloud Build and other CI/CD systems to store build packages, as well as trusted dependencies for builds and deployments.\u003c/p\u003e\n"]]],[],null,["# Artifact Registry overview\n\nArtifact Registry lets you centrally store artifacts and build\ndependencies as part of an integrated Google Cloud experience.\n\nIntroduction\n------------\n\nArtifact Registry provides a single location for storing and managing\nyour packages and Docker container images. You can:\n\n- Integrate Artifact Registry with Google Cloud [CI/CD services](https://cloud.google.com/blog/topics/developers-practitioners/devops-and-cicd-google-cloud-explained) or your existing CI/CD tools.\n - Store artifacts from [Cloud Build](/build/docs).\n - Deploy artifacts to Google Cloud runtimes, including [Google Kubernetes Engine](/kubernetes-engine/docs), [Cloud Run](/run/docs), [Compute Engine](/compute/docs), and [App Engine flexible environment](/appengine/docs/flexible).\n - Identity and Access Management provides consistent credentials and access control.\n- Protect your software supply chain.\n - Manage container metadata and scan for container vulnerabilities with [Artifact Analysis](/artifact-analysis/docs).\n- Protect repositories in a [VPC Service Controls](/vpc-service-controls/docs/overview) security perimeter.\n- Create multiple regional repositories within a single Google Cloud project. Group images by team or development stage and control access at the repository level.\n\nArtifact Registry integrates with Cloud Build and other continuous delivery and continuous integration systems to store packages from your builds. You can also store trusted dependencies that you use for builds and deployments.\n\nDependency management\n---------------------\n\nProtecting your software supply chain goes beyond using specific tools.\nThe processes and practices you use to develop, build, and run your software\nalso impact the integrity of your software. To learn more about best practices\nfor dependencies, see\n[Dependency management](/software-supply-chain-security/docs/dependencies)\n\nSoftware supply chain security\n------------------------------\n\nGoogle Cloud provides a comprehensive and modular set of capabilities\nand tools that your developers, DevOps, and security teams can use to improve\nthe security posture of your software supply chain.\n\nArtifact Registry provides:\n\n- Remote repositories to cache dependencies from upstream public sources so that you have greater control over them and can scan them for vulnerabilities, build provenance, and other dependency information.\n- Virtual repositories to group remote and private repositories behind a single endpoint. Set a priority on each repository to control search order when downloading or installing an artifact.\n\nYou can view security insights about your security posture, build artifacts,\nand dependencies in Google Cloud console dashboards within Cloud Build,\nCloud Run, and GKE.\n\nArtifact Registry and Container Registry\n----------------------------------------\n\nArtifact Registry expands on the capabilities of Container Registry and\nis the recommended container registry for Google Cloud. If you currently use\nContainer Registry, learn about\n[transitioning from Container Registry](/artifact-registry/docs/transition-from-gcr) to take advantage of\nnew and improved features.\n\n\nWhat's next\n-----------\n\n- [Docker quickstart](/artifact-registry/docs/docker/quickstart)\n- [Go quickstart](/artifact-registry/docs/go/store-go)\n- [Helm quickstart](/artifact-registry/docs/helm/store-helm-charts)\n- [Java quickstart](/artifact-registry/docs/java/quickstart)\n- [Node.js quickstart](/artifact-registry/docs/nodejs/quickstart)\n- [Python quickstart](/artifact-registry/docs/python/quickstart)"]]
