Crea piรน repository regionali in un unico Google Cloud
progetto. Raggruppa le immagini per team o fase di sviluppo e controlla l'accesso a livello di repository.
Artifact Registry si integra con Cloud Build e altri sistemi di distribuzione e integrazione continua per archiviare i pacchetti delle build.
Puoi anche memorizzare le dipendenze attendibili che utilizzi per le build e i deployment.
Gestione delle dipendenze
La protezione della catena di fornitura del software va oltre l'utilizzo di strumenti specifici.
Anche le procedure e le prassi che utilizzi per sviluppare, creare ed eseguire il software influiscono sulla sua integritร . Per scoprire di piรน sulle best practice per le dipendenze, consulta la sezione Gestione delle dipendenze.
Sicurezza della catena di fornitura del software
Google Cloud fornisce un insieme completo e modulare di funzionalitร
e strumenti che gli sviluppatori, i team DevOps e di sicurezza possono utilizzare per migliorare
la security posture della catena di fornitura del software.
Artifact Registry fornisce:
Repository remoti per memorizzare nella cache le dipendenze da origini pubbliche a monte in modo da avere un maggiore controllo su di esse e poterle analizzare per rilevare vulnerabilitร , la provenienza della compilazione e altre informazioni sulle dipendenze.
Repository virtuali per raggruppare repository remoti e privati dietro un singolo endpoint. Imposta una prioritร per ogni repository per controllare l'ordine di ricerca durante il download o l'installazione di un elemento.
Puoi visualizzare approfondimenti sulla sicurezza relativi alla tua security posture, agli elementi di build e alle dipendenze nelle Google Cloud dashboard della console in Cloud Build, Cloud Run e GKE.
Artifact Registry e Container Registry
Artifact Registry amplia le funzionalitร di Container Registry ed รจ il registry container consigliato per Google Cloud. Se al momento utilizzi
Container Registry, scopri come eseguire la
transizione da Container Registry per usufruire di
funzionalitร nuove e migliorate.
[[["Facile da capire","easyToUnderstand","thumb-up"],["Il problema รจ stato risolto","solvedMyProblem","thumb-up"],["Altra","otherUp","thumb-up"]],[["Difficile da capire","hardToUnderstand","thumb-down"],["Informazioni o codice di esempio errati","incorrectInformationOrSampleCode","thumb-down"],["Mancano le informazioni o gli esempi di cui ho bisogno","missingTheInformationSamplesINeed","thumb-down"],["Problema di traduzione","translationIssue","thumb-down"],["Altra","otherDown","thumb-down"]],["Ultimo aggiornamento 2025-09-02 UTC."],[[["\u003cp\u003eArtifact Registry offers a centralized solution for storing and managing packages and Docker container images, integrating seamlessly with Google Cloud's CI/CD services and other tools.\u003c/p\u003e\n"],["\u003cp\u003eIt enhances software supply chain security by allowing users to manage container metadata, scan for vulnerabilities with Artifact Analysis, and protect repositories within a VPC Service Controls security perimeter.\u003c/p\u003e\n"],["\u003cp\u003eArtifact Registry provides remote repositories for caching dependencies from public sources and virtual repositories to group remote and private repositories, enabling greater control and prioritization.\u003c/p\u003e\n"],["\u003cp\u003eArtifact Registry is the recommended container registry for Google Cloud, offering expanded capabilities compared to Container Registry, and the ability to transition between them.\u003c/p\u003e\n"],["\u003cp\u003eArtifact Registry integrates with Cloud Build and other CI/CD systems to store build packages, as well as trusted dependencies for builds and deployments.\u003c/p\u003e\n"]]],[],null,["# Artifact Registry overview\n\nArtifact Registry lets you centrally store artifacts and build\ndependencies as part of an integrated Google Cloud experience.\n\nIntroduction\n------------\n\nArtifact Registry provides a single location for storing and managing\nyour packages and Docker container images. You can:\n\n- Integrate Artifact Registry with Google Cloud [CI/CD services](https://cloud.google.com/blog/topics/developers-practitioners/devops-and-cicd-google-cloud-explained) or your existing CI/CD tools.\n - Store artifacts from [Cloud Build](/build/docs).\n - Deploy artifacts to Google Cloud runtimes, including [Google Kubernetes Engine](/kubernetes-engine/docs), [Cloud Run](/run/docs), [Compute Engine](/compute/docs), and [App Engine flexible environment](/appengine/docs/flexible).\n - Identity and Access Management provides consistent credentials and access control.\n- Protect your software supply chain.\n - Manage container metadata and scan for container vulnerabilities with [Artifact Analysis](/artifact-analysis/docs).\n- Protect repositories in a [VPC Service Controls](/vpc-service-controls/docs/overview) security perimeter.\n- Create multiple regional repositories within a single Google Cloud project. Group images by team or development stage and control access at the repository level.\n\nArtifact Registry integrates with Cloud Build and other continuous delivery and continuous integration systems to store packages from your builds. You can also store trusted dependencies that you use for builds and deployments.\n\nDependency management\n---------------------\n\nProtecting your software supply chain goes beyond using specific tools.\nThe processes and practices you use to develop, build, and run your software\nalso impact the integrity of your software. To learn more about best practices\nfor dependencies, see\n[Dependency management](/software-supply-chain-security/docs/dependencies)\n\nSoftware supply chain security\n------------------------------\n\nGoogle Cloud provides a comprehensive and modular set of capabilities\nand tools that your developers, DevOps, and security teams can use to improve\nthe security posture of your software supply chain.\n\nArtifact Registry provides:\n\n- Remote repositories to cache dependencies from upstream public sources so that you have greater control over them and can scan them for vulnerabilities, build provenance, and other dependency information.\n- Virtual repositories to group remote and private repositories behind a single endpoint. Set a priority on each repository to control search order when downloading or installing an artifact.\n\nYou can view security insights about your security posture, build artifacts,\nand dependencies in Google Cloud console dashboards within Cloud Build,\nCloud Run, and GKE.\n\nArtifact Registry and Container Registry\n----------------------------------------\n\nArtifact Registry expands on the capabilities of Container Registry and\nis the recommended container registry for Google Cloud. If you currently use\nContainer Registry, learn about\n[transitioning from Container Registry](/artifact-registry/docs/transition-from-gcr) to take advantage of\nnew and improved features.\n\n\nWhat's next\n-----------\n\n- [Docker quickstart](/artifact-registry/docs/docker/quickstart)\n- [Go quickstart](/artifact-registry/docs/go/store-go)\n- [Helm quickstart](/artifact-registry/docs/helm/store-helm-charts)\n- [Java quickstart](/artifact-registry/docs/java/quickstart)\n- [Node.js quickstart](/artifact-registry/docs/nodejs/quickstart)\n- [Python quickstart](/artifact-registry/docs/python/quickstart)"]]
