New data sources and expanded upstream support added to the Cloudsmith Terraform Provider
We've significantly enhanced the Cloudsmith Terraform Provider with new data sources and expanded support for upstream formats…
We’ve introduced the cloudsmith download command to the Cloudsmith CLI, enabling users to programmatically retrieve packages from repositories. This command provides advanced filtering, bulk operations, and pre-execution validation features.
This update resolves the prior friction created by the lack of a native download utility, eliminating the need for manual web UI downloads or complex curl/wget workarounds for artifact retrieval.
The cloudsmith download command is designed for flexible and automated artifact fetching:
--all-files flag to download all associated package assets (e.g., sources, javadoc, SBOMs).--outfile option, particularly useful for bulk operations.--dry-run capability to see exactly which files would be downloaded without initiating the transfer.Usage examples
Below are practical examples illustrating the command's flexibility:
cloudsmith download myorg/myrepo mypackagecloudsmith download myorg/myrepo mypackage --outfile /tmp/myfiles/cloudsmith download myorg/myrepo mypackage --format deb --arch amd64 --os ubuntucloudsmith download myorg/myrepo mynugetpackage --all-filesThe cloudsmith download command acts as a sophisticated file retrieval utility - think of it as a specialized wget for Cloudsmith. This is NOT a package manager pull command. Unlike tools such as docker pull, npm install, or pip install, this command does not:
Its function is to transfer the package files (binaries, archives, etc.) to your local filesystem for manual use, inspection, or further processing.
If you have feedback or questions about the Cloudsmith CLI, please contact us.
We've significantly enhanced the Cloudsmith Terraform Provider with new data sources and expanded support for upstream formats…
Cloudsmith now provides official upstream proxying and caching support for Chainguard Libraries for Javascript in your npm repositories. This integration enables customers to use Cloudsmith as the primary, secure distribution platform for Chainguard’s malware-resistant, built-from-source JavaScript dependencies. Key benefits Centralized distribut…
We’ve added the --show-all flag to the Cloudsmith CLI, which simplifies your automation scripts by eliminating the need for pagination logic…
We've improved how package statuses are displayed and managed across the Cloudsmith web app to help you quickly understand if a package or container is available, safe, and compliant…
We’ve added a last_downloaded field to packages in Cloudsmith, extending search-based package retention rules to enable cleanup of unused packages. This feature allows you to create retention rules that automatically clean up packages in your repository based on usage, rather than just age or count, ensuring you retain only actively used packages…
You can now use the package publish date in Enterprise Policy Manager (EPM) for npm packages. This enables you to define policies that automatically quarantine new packages for a specific time period (e.g., two weeks) after release…