Mendownload paket OSS Terjamin menggunakan repositori jarak jauh
Tetap teratur dengan koleksi
Simpan dan kategorikan konten berdasarkan preferensi Anda.
Halaman ini menjelaskan cara menyiapkan repositori jarak jauh untuk mengakses dan mendownload paket OSS Tepercaya. Anda memiliki dua opsi untuk menyiapkan repositori jarak jauh: JFrog Artifactory atau Sonatype Nexus. Untuk mengetahui informasi selengkapnya tentang opsi repositori, lihat Opsi repositori OSS tepercaya.
Ganti PROJECT_ID dengan ID
project yang Anda pilih saat menyiapkan
Assured OSS.
Di kolom Nama Pengguna, masukkan _json_key_base64.
Di kolom Password, berikan string berenkode base64 dari
file kunci JSON akun layanan. Gunakan seluruh string berenkode base64
dalam satu baris sebagai sandi. Untuk mendapatkan string berenkode base64, jalankan perintah cat key-filename.json | base64 -w 0.
Untuk paket Python, tambahkan /simple ke URL yang diperoleh. Gunakan URL sebagai
index-url dalam perintah pip install untuk mendownload paket Python yang diperlukan. Misalnya, jika URL repositori yang diperoleh adalah
https://a0a87smb7hcda.jfrog.io/artifactory/api/pypi/assured-oss-python-repo,
maka index-url yang sesuai adalah
https://a0a87smb7hcda.jfrog.io/artifactory/api/pypi/assured-oss-python-repo/simple.
Setelah repositori jarak jauh baru disiapkan, konfigurasikan alat build Anda (misalnya, Apache Maven, Alat Build Gradle, atau pip) untuk menggunakan repositori jarak jauh baru ini.
Masalah umum
Menguji koneksi menggunakan tombol Uji dapat menampilkan error meskipun koneksi dikonfigurasi dengan benar. Sebaiknya buat repositori
jarak jauh terlepas dari perilaku tombol pengujian. Untuk cara lain dalam
mengonfirmasi koneksi, lihat Memvalidasi koneksi Anda.
Menyiapkan repositori jarak jauh menggunakan Sonatype Nexus
Login ke pengelola repositori Sonatype Nexus Anda. Pastikan Anda memiliki
hak istimewa yang diperlukan untuk membuat repositori jarak jauh baru.
Pilih opsi untuk membuat repositori baru.
Pilih jenis repositori yang sesuai (misalnya, pilih Maven untuk Java atau
PyPi untuk Python).
Masukkan detail berikut untuk repositori baru:
Di kolom Name, masukkan nama atau ID unik untuk repositori
jarak jauh.
Di kolom Remote Storage, pilih salah satu opsi berikut:
Ganti PROJECT_ID dengan ID
project yang Anda pilih saat menyiapkan
Assured OSS.
Di bagian HTTP, pilih Authentication.
Tentukan nilai berikut:
Di kolom Authentication type, masukkan Username.
Di kolom Nama Pengguna, masukkan _json_key_base64.
Di kolom Password, berikan string berenkode base64 dari
file kunci JSON akun layanan. Gunakan seluruh string berenkode base64
dalam satu baris sebagai sandi. Untuk mendapatkan string berenkode base64, jalankan perintah base64 key-filename.json.
Klik Create Repository.
Setelah repositori jarak jauh baru disiapkan, arahkan alat build Anda (misalnya,
Apache Maven, Gradle Build Tool, atau pip) untuk menggunakan repositori jarak jauh baru ini.
[[["Mudah dipahami","easyToUnderstand","thumb-up"],["Memecahkan masalah saya","solvedMyProblem","thumb-up"],["Lainnya","otherUp","thumb-up"]],[["Sulit dipahami","hardToUnderstand","thumb-down"],["Informasi atau kode contoh salah","incorrectInformationOrSampleCode","thumb-down"],["Informasi/contoh yang saya butuhkan tidak ada","missingTheInformationSamplesINeed","thumb-down"],["Masalah terjemahan","translationIssue","thumb-down"],["Lainnya","otherDown","thumb-down"]],["Terakhir diperbarui pada 2025-09-05 UTC."],[],[],null,["| Enterprise [service tier](/security-command-center/docs/service-tiers)\n\nThis page explains how you can set up a remote repository to access and download\nAssured OSS packages. You have two options for setting up a\nremote repository: JFrog Artifactory or Sonatype Nexus. For more information\nabout repository options, see [Assured OSS repository\noptions](/assured-open-source-software/docs/overview#aoss-repository-options).\n\nThis document applies to the Assured OSS premium tier only. For\nthe free tier, see [Download\nAssured OSS packages using a remote\nrepository](/assured-open-source-software/docs/remote-repository-access).\n\nBefore you begin\n\n1. [Integrate Assured OSS with\n Security Command Center](/security-command-center/docs/integrate-aoss-with-scc).\n\n2. [Validate connectivity](/assured-open-source-software/docs/validate-connection)\n to Security Command Center for the requested service accounts.\n\nSet up a remote repository using JFrog Artifactory\n\n1. Sign in to the JFrog Artifactory repository manager. Ensure that you have the required privileges to create a new remote repository.\n2. Select the option to create a new remote repository in your repository manager.\n3. Select the appropriate repository type (for example, select `Maven` for Java or `PyPi` for Python).\n4. Optionally, test the connection to the Java, Python, or JavaScript repository\n using the following steps:\n\n 1. In the **Repository Key** field, enter a unique name or identifier for the remote repository.\n 2. In the **URL** field, enter one of the following:\n\n - Java: \n\n ```\n https://us-maven.pkg.dev\n ```\n - Python: \n\n ```\n https://us-python.pkg.dev\n ```\n - Javascript: \n\n ```\n https://us-npm.pkg.dev\n ```\n\n Don't enter the complete domain name as this may return an HTTP `404` or\n HTTP `405` status code.\n 3. Leave the remaining fields blank.\n\n 4. Click **Test**.\n The connection is successful when you see the following output:\n\n `Successfully connected to server`\n5. To create a new remote repository, enter the following information:\n\n 1. In the **Repository Key** field, enter a unique name or identifier for the remote repository. For example, `assured-oss-java-repo`.\n 2. In the **URL** field, enter one of the following:\n\n - Java: \n\n ```\n https://us-maven.pkg.dev/PROJECT_ID/assuredoss-java\n ```\n - Python: \n\n ```\n https://us-python.pkg.dev/\n ```\n - JavaScript: \n\n ```\n https://us-npm.pkg.dev/PROJECT_ID/assuredoss-npm\n ```\n\n Replace \u003cvar translate=\"no\"\u003ePROJECT_ID\u003c/var\u003e with the ID\n of the project that you selected when you set up\n Assured OSS.\n 3. In the **User Name** field, enter `_json_key_base64`.\n\n 4. In the **Password** field, provide the base64-encoded string of the\n service account JSON key file. Use the entire base64-encoded string\n in a single line as password. To get the base64-encoded string, run the\n command `cat `\u003cvar translate=\"no\"\u003ekey-filename.json\u003c/var\u003e` | base64 -w 0`.\n\n 5. For Python only, in the **Registry URL** field, enter\n\n ```\n https://us-python.pkg.dev/PROJECT_ID/assuredoss-python\n ```\n .\n\n \u003cbr /\u003e\n\n6. Click **Create Remote Repository**.\n\n For Python packages, append the obtained URL with `/simple`. Use the URL as\n the `index-url` in the `pip install` command to download the required Python\n packages. For example, if the obtained URL of the repository is\n `https://a0a87smb7hcda.jfrog.io/artifactory/api/pypi/assured-oss-python-repo`,\n then the corresponding `index-url` is\n `https://a0a87smb7hcda.jfrog.io/artifactory/api/pypi/assured-oss-python-repo/simple`.\n\nAfter the new remote repository is set up, configure your build tools (for\nexample, Apache Maven, Gradle Build Tool, or pip) to use this new remote\nrepository.\n\nKnown issues\n\nTesting the connection using the **Test** button can return an error even if the\nconnection is configured correctly. We recommend that you create the remote\nrepository irrespective of the test button behavior. For another way of\nconfirming a connection, see [Validate your connection](/assured-open-source-software/docs/validate-connection).\n\nSet up a remote repository using Sonatype Nexus\n\n1. Sign in to your Sonatype Nexus repository manager. Ensure that you have the required privileges to create a new remote repository.\n2. Select the option to create a new repository.\n3. Select the appropriate repository type (for example, select `Maven` for Java or `PyPi` for Python).\n4. Enter the following details for the new repository:\n\n 1. In the **Name** field, enter a unique name or identifier for the remote repository.\n 2. In the **Remote Storage** field, choose from the following:\n\n - Java:\n\n ```\n https://us-maven.pkg.dev/PROJECT_ID/assuredoss-java\n ```\n\n \u003cbr /\u003e\n\n - Python:\n\n ```\n https://us-python.pkg.dev/PROJECT_ID/assuredoss-python\n ```\n\n \u003cbr /\u003e\n\n - JavaScript:\n\n ```\n https://us-npm.pkg.dev/PROJECT_ID/assuredoss-npm\n ```\n\n \u003cbr /\u003e\n\n Replace \u003cvar translate=\"no\"\u003ePROJECT_ID\u003c/var\u003e with the ID\n of the project that you selected when you set up\n Assured OSS.\n5. Under **HTTP** , select **Authentication**.\n\n6. Specify the following:\n\n 1. In the **Authentication type** field, enter `Username`.\n 2. In the **Username** field, enter `_json_key_base64`.\n 3. In the **Password** field, provide the base64-encoded string of the service account JSON key file. Use the entire base64 encoded-string in a single line as password. To get the base64-encoded string, run the command `base64 `\u003cvar translate=\"no\"\u003ekey-filename.json\u003c/var\u003e.\n7. Click **Create Repository**.\n\nAfter the new remote repository is set up, point your build tools (for example,\nApache Maven, Gradle Build Tool, or pip) to use this new remote repository.\n\nWhat's next\n\n- [Download Java packages using direct repository access](/security-command-center/docs/aoss-download-java-packages)\n- [Download Python packages using direct repository access](/security-command-center/docs/aoss-download-python-packages)"]]
