From the course: Microservices Security Workshop: From Build to Production

Unlock this course with a free trial

Join today to access over 25,500 courses taught by industry experts.

Securing artifact repositories (artifactories)

Securing artifact repositories (artifactories)

From the course: Microservices Security Workshop: From Build to Production

Start my 1-month free trial Buy for my team

Securing artifact repositories (artifactories)

“

- [Instructor] Let's take a lesson to talk about a part of the build process that often gets overlooked in microservice security, the artifact repository. In a typical CI/CD pipeline, code goes through a test phase where unit or integration tests are run, followed by a build phase where some kind of artifact is produced. That artifact might be a compiled binary, a container image, a static file bundle. Regardless of what form it takes, the outputs of the build phase is known as an artifact, and these artifacts are typically uploaded to a centralized storage system known as an artifact repository or artifactory. Artifactory tools include services like JFrog Artifactory, GitHub Packages, AWS Container Registry, and many, many others. These are repositories are where build systems push the final compiled result before a deployment, and where orchestrators or cloud platforms then pull those artifacts and deploy them out into production. For microservice environments where each service may…

Contents