--- title: "Datadog Integration Update: Vulnerability Scanning and Audit Logs" description: "" canonical_url: "https://cloudsmith.com/blog/cloudsmith-in-datadog-update" last_updated: "2023-03-28T14:40:07.000Z" --- # Datadog Integration Update: Vulnerability Scanning and Audit Logs The team at Cloudsmith is always looking for ways our customers and community can leverage adjacent technologies within the DevOps and application development ecosystem to secure the software supply chain. Cloudsmith developed the first [integration](https://docs.datadoghq.com/integrations/cloudsmith/#) with [Datadog](https://www.datadoghq.com/), the Cloud Monitoring as a Service solution, a few years ago! That integration was the first step in helping the community leverage both solutions simultaneously, strength for strength. We are excited to introduce the latest enhancement to the community integration, [Security Scanning](https://help.cloudsmith.io/docs/security-scanning) and [Audit Logs](https://help.cloudsmith.io/docs/repo-audit-logs). In the initial release, [Ciara Carey](https://cloudsmith.com/blog/author/ciara) published a [blog post](/blog/datadog-cloudsmith-integration) describing the integration between Datadog and Cloudsmith and how it allows developers to monitor the health and performance of their software packages by highlighting the most common metrics, all from the Datadog UI. The initially supported metrics are detailed below: - **Storage Used** - _The percentage of storage used_ - **Bandwidth Used** - _The percentage of bandwidth used_ - **Token Count** - _The number of token in an organization_ - **Token Bandwidth Used** - _The total bandwidth used by tokens_ - **Token Download Total** - _The total downloads used by tokens_ ## Next Steps and Expanding Scope During the January 2023 [Cloudsmith Webinar](https://youtu.be/RB_70KJp_cs), the discussion covered a variety of topics but some of the overarching themes were reducing complexity and security. These themes are popular amongst developers, and Cloudsmith is committed to building meaningful solutions for our great customers and community. The next step in this journey is providing additional Cloudsmith visibility in Datadog. ## Vulnerability Scanning ```json { "_key": "f7c56bd603f0", "_type": "image", "alt": null, "asset": { "_createdAt": "2025-06-05T08:02:05Z", "_id": "image-d2f542e56509e0a5f540176c9a32f77b21ae9951-1598x540-png", "_rev": "yO7itY9PAzaQqagh0UQBEM", "_type": "sanity.imageAsset", "_updatedAt": "2025-06-05T08:02:05Z", "assetId": "d2f542e56509e0a5f540176c9a32f77b21ae9951", "extension": "png", "metadata": { "_type": "sanity.imageMetadata", "blurHash": "DCR{*~RnV_WFV_~qWBRjWBR%", "dimensions": { "_type": "sanity.imageDimensions", "aspectRatio": 2.9592592592592593, "height": 540, "width": 1598 }, "hasAlpha": true, "isOpaque": true, "lqip": "data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAABQAAAAHCAYAAAAIy204AAAACXBIWXMAABYlAAAWJQFJUiTwAAAA4klEQVR4nH2R3W7DMAhG8/6v2WarEsUG/N+s+iYgnnpR7eLIxsCxSZbHY8O2H2BJeD5PvF6vf/n5cHaep6G5Zb1v2PeASIxSKsYY6Eq/eIstN8/6QOsdvfe/VaXLeguIQcDsSEpgkYsEYjE0FkmO1rAgEllNqdWlY2D5uhEoZiv0ZrZChxEiGbrX3Kw5QsQRgsUmbPpKFd5dqDdpkzOFl+yDMEQVRheWKexYvlcCU7Yx5nje6M3zkjm2fRqZUgLJFDYX7hsjSbVn51KMlJV8rQWSfJ9LRX5b7bwU1NZQm/6cgV8MzRtWxx/NKwAAAABJRU5ErkJggg==", "palette": { "_type": "sanity.imagePalette", "darkMuted": { "_type": "sanity.imagePaletteSwatch", "background": "#3b296f", "foreground": "#fff", "population": 0, "title": "#fff" }, "darkVibrant": { "_type": "sanity.imagePaletteSwatch", "background": "#332460", "foreground": "#fff", "population": 0, "title": "#fff" }, "dominant": { "_type": "sanity.imagePaletteSwatch", "background": "#b6b2d6", "foreground": "#000", "population": 0.09, "title": "#fff" }, "lightMuted": { "_type": "sanity.imagePaletteSwatch", "background": "#b6b2d6", "foreground": "#000", "population": 0.09, "title": "#fff" }, "lightVibrant": { "_type": "sanity.imagePaletteSwatch", "background": "#d4bcf4", "foreground": "#000", "population": 0.01, "title": "#000" }, "muted": { "_type": "sanity.imagePaletteSwatch", "background": "#785da0", "foreground": "#fff", "population": 0.03, "title": "#fff" }, "vibrant": { "_type": "sanity.imagePaletteSwatch", "background": "#9f8dd4", "foreground": "#000", "population": 0.04, "title": "#fff" } } }, "mimeType": "image/png", "originalFilename": "image.png", "path": "images/rafvlnhi/production/d2f542e56509e0a5f540176c9a32f77b21ae9951-1598x540.png", "sha1hash": "d2f542e56509e0a5f540176c9a32f77b21ae9951", "size": 244762, "uploadId": "vFSsgIUXZnuKJx2xRYuQCqsCI04MTQXO", "url": "https://cdn.sanity.io/images/rafvlnhi/production/d2f542e56509e0a5f540176c9a32f77b21ae9951-1598x540.png" }, "caption": null, "link": null, "markDefs": null } ``` Cloudsmith Vulnerability Scanning will automatically scan supported package types for CVEs upon package upload. As you can see from the image above, all results from this capability can now be seen via the Datadog dashboard. This is in addition to existing capabilities within the Cloudsmith Web UI, the [Cloudsmith API](https://help.cloudsmith.io/reference/introduction), and as [Webhooks](https://help.cloudsmith.io/docs/webhooks). The Cloudsmith Security Scan drives other actions including [quarantining a package](https://help.cloudsmith.io/docs/package-quarantine), preventing users and systems from downloading the compromised package. ## Audit Logs ```json { "_key": "a43f651b000b", "_type": "image", "alt": null, "asset": { "_createdAt": "2025-06-05T08:02:05Z", "_id": "image-49f0b48c0e206d506dab2adc00180d2618ce9c2f-1592x522-png", "_rev": "gnJeqIUmT5gWK5E6lfqU28", "_type": "sanity.imageAsset", "_updatedAt": "2025-06-05T08:02:05Z", "assetId": "49f0b48c0e206d506dab2adc00180d2618ce9c2f", "extension": "png", "metadata": { "_type": "sanity.imageMetadata", "blurHash": "D8Ss51IV9G%4D*~qNFoeofWB", "dimensions": { "_type": "sanity.imageDimensions", "aspectRatio": 3.049808429118774, "height": 522, "width": 1592 }, "hasAlpha": true, "isOpaque": true, "lqip": "data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAABQAAAAHCAYAAAAIy204AAAACXBIWXMAABYlAAAWJQFJUiTwAAAAyElEQVR4nJWQWQ7DIAwFc/+LtumSBJs9mFdhuif9KNLIEss842E8nTHNC3wIKCKotSoiAtHaaXt7q1agFEEpRe8Mx+OEy3XGYgy894gxKiEEBK2dlLKGPAJfwRUpZ32T84phPBDmmWEMgZjBbLUaIhhqtZ+1sEcXe8LQwmPEcDpYmMWBiMHO6ddbd/4dH+4dNgk+EKnI6/ot9CC2fY6l9Plt2Mp2hefRgozTr7ZZ/RZ26RbR2T2F09WBycM6p8J2+C8pJX0bY8INyN8kTYNwT+QAAAAASUVORK5CYII=", "palette": { "_type": "sanity.imagePalette", "darkMuted": { "_type": "sanity.imagePaletteSwatch", "background": "#5c4f75", "foreground": "#fff", "population": 0.06, "title": "#fff" }, "darkVibrant": { "_type": "sanity.imagePaletteSwatch", "background": "#51146f", "foreground": "#fff", "population": 0, "title": "#fff" }, "dominant": { "_type": "sanity.imagePaletteSwatch", "background": "#c2bad7", "foreground": "#000", "population": 0.13, "title": "#fff" }, "lightMuted": { "_type": "sanity.imagePaletteSwatch", "background": "#c2bad7", "foreground": "#000", "population": 0.13, "title": "#fff" }, "lightVibrant": { "_type": "sanity.imagePaletteSwatch", "background": "#e4c4f4", "foreground": "#000", "population": 0, "title": "#000" }, "muted": { "_type": "sanity.imagePaletteSwatch", "background": "#746e8c", "foreground": "#fff", "population": 0.01, "title": "#fff" }, "vibrant": { "_type": "sanity.imagePaletteSwatch", "background": "#9c28d6", "foreground": "#fff", "population": 0, "title": "#fff" } } }, "mimeType": "image/png", "originalFilename": "image-1.png", "path": "images/rafvlnhi/production/49f0b48c0e206d506dab2adc00180d2618ce9c2f-1592x522.png", "sha1hash": "49f0b48c0e206d506dab2adc00180d2618ce9c2f", "size": 133631, "uploadId": "OU4OjxeX0ev8QLj6jbWx1FnEyFq7Puvy", "url": "https://cdn.sanity.io/images/rafvlnhi/production/49f0b48c0e206d506dab2adc00180d2618ce9c2f-1592x522.png" }, "caption": null, "link": null, "markDefs": null } ``` The audit logs feature allows you to monitor all activity performed by the system, users or services in Cloudsmith, including creating or deleting a repository, modifications to repository settings, package deletions and quarantines, and more. Now alerts can be set up in Datadog based on the audit log data to receive notifications when suspicious activity is detected. ## Conclusion The addition of vulnerability scanning and audit logs to the Datadog-Cloudsmith integration provides developers with even more tools to monitor the health and security of their software packages. One of the biggest challenges developers and teams are struggling with is tooling or screen fatigue. By combining these features with Datadog's monitoring capabilities, developers can stay on top of any issues and ensure their packages are secure and reliable within the tool or screen that makes the most sense to them. For the initial setup instructions for the Datadog-Cloudsmith integration, please refer to our [previous blog post](/blog/datadog-cloudsmith-integration). ```json { "_key": "501f0c86b3c1", "_type": "image", "alt": null, "asset": { "_createdAt": "2025-06-05T08:02:05Z", "_id": "image-3090df5dbf728e8b3abac27e3307f402e943d58b-1881x1013-png", "_rev": "yO7itY9PAzaQqagh0UQBQM", "_type": "sanity.imageAsset", "_updatedAt": "2025-06-05T08:02:05Z", "assetId": "3090df5dbf728e8b3abac27e3307f402e943d58b", "extension": "png", "metadata": { "_type": "sanity.imageMetadata", "blurHash": "M3RC_F00000000ngtS%h~Vo#IpIUM|_3t7", "dimensions": { "_type": "sanity.imageDimensions", "aspectRatio": 1.8568608094768015, "height": 1013, "width": 1881 }, "hasAlpha": false, "isOpaque": true, "lqip": "data:image/png;base64,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", "palette": { "_type": "sanity.imagePalette", "darkMuted": { "_type": "sanity.imagePaletteSwatch", "background": "#29202e", "foreground": "#fff", "population": 6.46, "title": "#fff" }, "darkVibrant": { "_type": "sanity.imagePaletteSwatch", "background": "#225579", "foreground": "#fff", "population": 0.29, "title": "#fff" }, "dominant": { "_type": "sanity.imagePaletteSwatch", "background": "#29202e", "foreground": "#fff", "population": 6.46, "title": "#fff" }, "lightMuted": { "_type": "sanity.imagePaletteSwatch", "background": "#c1c6c7", "foreground": "#000", "population": 3.56, "title": "#fff" }, "lightVibrant": { "_type": "sanity.imagePaletteSwatch", "background": "#95eaf8", "foreground": "#000", "population": 0.11, "title": "#000" }, "muted": { "_type": "sanity.imagePaletteSwatch", "background": "#796d7c", "foreground": "#fff", "population": 0.12, "title": "#fff" }, "vibrant": { "_type": "sanity.imagePaletteSwatch", "background": "#20b3e4", "foreground": "#fff", "population": 0.68, "title": "#fff" } } }, "mimeType": "image/png", "originalFilename": "b2def6b-dataDogCSDashboard.png", "path": "images/rafvlnhi/production/3090df5dbf728e8b3abac27e3307f402e943d58b-1881x1013.png", "sha1hash": "3090df5dbf728e8b3abac27e3307f402e943d58b", "size": 296796, "uploadId": "TlgRuhn0HsOveDTyf8YHXTHN0ctbdH6k", "url": "https://cdn.sanity.io/images/rafvlnhi/production/3090df5dbf728e8b3abac27e3307f402e943d58b-1881x1013.png" }, "caption": null, "link": null, "markDefs": null } ```