🏛️Artifact Repository

NEW

Centralized system for storing, versioning, and retrieving binary artifacts such as packages, containers, and models with metadata.

DESCRIPTION

An artifact repository provides controlled storage and distribution for build outputs like container images, language packages, and ML models. It supports versioning, immutability, metadata, and access policies, often acting as a caching proxy for upstream registries. Integrations include CI/CD publication, vulnerability scanning, license checks, and promotion workflows. Common products include JFrog Artifactory, Sonatype Nexus, GitHub Packages, and cloud-native registries. Repositories underpin reproducibility and supply chain security across environments.

ALTERNATIVE DEFINITIONS

Wikipedia

A repository manager is a software tool designed to store, retrieve and manage software packages.

General definition of the managing tool class behind artifact repositories.

Source

JFrog

JFrog Artifactory is a universal repository manager supporting all major package formats.

Vendor definition emphasizing universal, multi-format artifact support.

Source

RELATED TERMS

Repository Manager Container Registry Artifact Management Bill of Materials Continuous Integration Binary Promotion Content Addressable Storage Immutable Artifact Caching Proxy

COMPETING TERMS

Object Storage Package Registry

RELATIONS

• Broader: Repository
• Narrower: Artifact Registry

KNOWLEDGE AREAS

Platform & Tooling Software Engineering MLOps Infrastructure

TARGET AUDIENCE

DevOps Engineer MLOps Engineer Software Developer Application Administrator IT Manager Software Architect

EXTERNAL SOURCES

• Wikipedia - Repository manager
• JFrog - Artifactory documentation hub
• Sonatype - Nexus Repository documentation
• Google Cloud - Artifact Registry overview
• GitHub - GitHub Packages documentation

TOP QUESTIONS

Why use an Artifact Repository instead of object storage?

Repositories provide metadata, versioning, retention, access policies, proxies, and integrations CI/CD pipelines need, beyond raw blob storage.

Category: Relevancy

How do Artifact Repositories improve build performance?

They cache dependencies locally, reduce external fetches, and accelerate builds via proxies and edge caching.

Category: Best practices

What security features matter in an Artifact Repository?

Support for signatures, vulnerability scanning, license checks, RBAC, immutable tags, and audit logs is key.

Category: Security

How do repositories support multi-format artifacts?

They host repositories for formats like Docker, Maven, npm, PyPI, and Conda, each with native metadata and APIs.

Category: Example

What is a promotion workflow in repositories?

Artifacts move from development to staging to production repos, governed by checks and approvals.

Category: Definition

How to avoid repository sprawl?

Define naming conventions, retention policies, and cleanup tasks; consolidate where possible and separate by trust boundary.

Category: Mistakes

What’s a hot topic around Artifact Repositories?

Provenance (SLSA), SBOM generation, and sigstore-based signing to strengthen supply chain assurance.

Category: Topic

How do repositories integrate with Kubernetes?

They serve container images to clusters, integrate with admission controllers for signature or policy checks.

Category: Integration

Can ML models live in an Artifact Repository?

Yes, models and datasets can be stored with metadata, often alongside a model registry.

Category: Example