Crie vários repositórios regionais em um único projeto Google Cloud. Agrupe imagens por equipe ou estágio de desenvolvimento e controle o acesso no
nível do repositório.
O Artifact Registry se integra ao Cloud Build e a outros sistemas de
entrega contínua e integração contínua para armazenar pacotes dos seus builds.
Também é possível armazenar dependências confiáveis usadas em versões e implantações.
Gerenciamento de dependências
Proteger a cadeia de suprimentos de software vai além do uso de ferramentas específicas.
Os processos e as práticas que você usa para desenvolver, criar e executar o software
também afetam a integridade dele. Para saber mais sobre as práticas recomendadas
para dependências, consulte
Gerenciamento de dependências.
Segurança da cadeia de suprimentos de software
OGoogle Cloud oferece um conjunto abrangente e modular de recursos
e ferramentas que as equipes de desenvolvimento, DevOps e segurança podem usar para melhorar
a postura de segurança da cadeia de suprimentos de software.
O Artifact Registry oferece:
Repositórios remotos para armazenar em cache dependências de origens públicas para que
você tenha mais controle sobre elas e possa verificar se há vulnerabilidades,
criar a procedência e outras informações de dependência.
Repositórios virtuais para agrupar repositórios remotos e privados em um único
endpoint. Defina uma prioridade em cada repositório para controlar a ordem de pesquisa ao
fazer o download ou instalar um artefato.
É possível conferir insights de segurança sobre sua postura de segurança, artefatos de build
e dependências nos Google Cloud painéis do console no Cloud Build,
Cloud Run e GKE.
Artifact Registry e Container Registry
O Artifact Registry amplia os recursos do Container Registry e
é o registro de contêineres recomendado para Google Cloud. Se você usa o Container Registry atualmente, saiba mais sobre a
transição do Container Registry para aproveitar os
recursos novos e aprimorados.
[[["Fácil de entender","easyToUnderstand","thumb-up"],["Meu problema foi resolvido","solvedMyProblem","thumb-up"],["Outro","otherUp","thumb-up"]],[["Difícil de entender","hardToUnderstand","thumb-down"],["Informações incorretas ou exemplo de código","incorrectInformationOrSampleCode","thumb-down"],["Não contém as informações/amostras de que eu preciso","missingTheInformationSamplesINeed","thumb-down"],["Problema na tradução","translationIssue","thumb-down"],["Outro","otherDown","thumb-down"]],["Última atualização 2025-08-18 UTC."],[[["\u003cp\u003eArtifact Registry offers a centralized solution for storing and managing packages and Docker container images, integrating seamlessly with Google Cloud's CI/CD services and other tools.\u003c/p\u003e\n"],["\u003cp\u003eIt enhances software supply chain security by allowing users to manage container metadata, scan for vulnerabilities with Artifact Analysis, and protect repositories within a VPC Service Controls security perimeter.\u003c/p\u003e\n"],["\u003cp\u003eArtifact Registry provides remote repositories for caching dependencies from public sources and virtual repositories to group remote and private repositories, enabling greater control and prioritization.\u003c/p\u003e\n"],["\u003cp\u003eArtifact Registry is the recommended container registry for Google Cloud, offering expanded capabilities compared to Container Registry, and the ability to transition between them.\u003c/p\u003e\n"],["\u003cp\u003eArtifact Registry integrates with Cloud Build and other CI/CD systems to store build packages, as well as trusted dependencies for builds and deployments.\u003c/p\u003e\n"]]],[],null,["# Artifact Registry overview\n\nArtifact Registry lets you centrally store artifacts and build\ndependencies as part of an integrated Google Cloud experience.\n\nIntroduction\n------------\n\nArtifact Registry provides a single location for storing and managing\nyour packages and Docker container images. You can:\n\n- Integrate Artifact Registry with Google Cloud [CI/CD services](https://cloud.google.com/blog/topics/developers-practitioners/devops-and-cicd-google-cloud-explained) or your existing CI/CD tools.\n - Store artifacts from [Cloud Build](/build/docs).\n - Deploy artifacts to Google Cloud runtimes, including [Google Kubernetes Engine](/kubernetes-engine/docs), [Cloud Run](/run/docs), [Compute Engine](/compute/docs), and [App Engine flexible environment](/appengine/docs/flexible).\n - Identity and Access Management provides consistent credentials and access control.\n- Protect your software supply chain.\n - Manage container metadata and scan for container vulnerabilities with [Artifact Analysis](/artifact-analysis/docs).\n- Protect repositories in a [VPC Service Controls](/vpc-service-controls/docs/overview) security perimeter.\n- Create multiple regional repositories within a single Google Cloud project. Group images by team or development stage and control access at the repository level.\n\nArtifact Registry integrates with Cloud Build and other continuous delivery and continuous integration systems to store packages from your builds. You can also store trusted dependencies that you use for builds and deployments.\n\nDependency management\n---------------------\n\nProtecting your software supply chain goes beyond using specific tools.\nThe processes and practices you use to develop, build, and run your software\nalso impact the integrity of your software. To learn more about best practices\nfor dependencies, see\n[Dependency management](/software-supply-chain-security/docs/dependencies)\n\nSoftware supply chain security\n------------------------------\n\nGoogle Cloud provides a comprehensive and modular set of capabilities\nand tools that your developers, DevOps, and security teams can use to improve\nthe security posture of your software supply chain.\n\nArtifact Registry provides:\n\n- Remote repositories to cache dependencies from upstream public sources so that you have greater control over them and can scan them for vulnerabilities, build provenance, and other dependency information.\n- Virtual repositories to group remote and private repositories behind a single endpoint. Set a priority on each repository to control search order when downloading or installing an artifact.\n\nYou can view security insights about your security posture, build artifacts,\nand dependencies in Google Cloud console dashboards within Cloud Build,\nCloud Run, and GKE.\n\nArtifact Registry and Container Registry\n----------------------------------------\n\nArtifact Registry expands on the capabilities of Container Registry and\nis the recommended container registry for Google Cloud. If you currently use\nContainer Registry, learn about\n[transitioning from Container Registry](/artifact-registry/docs/transition-from-gcr) to take advantage of\nnew and improved features.\n\n\nWhat's next\n-----------\n\n- [Docker quickstart](/artifact-registry/docs/docker/quickstart)\n- [Go quickstart](/artifact-registry/docs/go/store-go)\n- [Helm quickstart](/artifact-registry/docs/helm/store-helm-charts)\n- [Java quickstart](/artifact-registry/docs/java/quickstart)\n- [Node.js quickstart](/artifact-registry/docs/nodejs/quickstart)\n- [Python quickstart](/artifact-registry/docs/python/quickstart)"]]
