You require a service account to access the Assured Open Source Software (Assured OSS) repository and download packages. You also require the service account to access any of the Assured OSS APIs. We recommended that you create a new service account to use exclusively for Assured OSS. However, you can also use an existing service account.
To set up service accounts, see Creating and managing service accounts.
To create a service account key, see Create and manage service account keys.
To learn about best practices for creating and managing service accounts, see Best practices for working with service accounts.
Software Delivery Shield
Assured Open Source Software is part of the Software Delivery Shield solution. Software Delivery Shield is a fully-managed, end-to-end software supply chain security solution that helps you to improve the security posture of developer workflows and tools, software dependencies, CI/CD systems used to build and deploy your software, and runtime environments such as Google Kubernetes Engine and Cloud Run. To learn how you can use Assured Open Source Software with other components of Software Delivery Shield to improve the security posture of your software supply chain, see Software Delivery Shield overview.
- Enable Assured Open Source Software
- Validate your connection to Assured OSS
- Set up remote repository access
- Download Java packages using direct repository access
- Download Python packages using direct repository access