Datadog Integration Update: Vulnerability Scanning and Audit Logs
The team at Cloudsmith is always looking for ways our customers and community can leverage adjacent technologies within the DevOps and application development ecosystem to secure the software supply chain. Cloudsmith developed the first integration with Datadog, the Cloud Monitoring as a Service solution, a few years ago! We are excited to share th…
Get early access to Cloudsmith's new Policy Management feature
Cloudsmith is excited to announce that Policy Management is in early access for customers. With Policy Management, you can automatically quarantine packages based on insights about your software artifacts, ensuring compliance and reducing software supply chain risk.
Currently, customers can set license policies and vulnerability policies.
License…
Cloudsmith - Zero Exposure to SVB
A quick note to let you know we are unaffected by the recent Silicon Valley Bank collapse. Rest assured, we are well capitalized, with our holdings diversified, and have supportive investors and knowledgeable advisors, and we are proactively monitoring the situation.
If we can be of any assistance to our customers, please get in touch with us thro…
Experience faster, more reliable builds with Cargo's new sparse registry protocol
With the Rust team's announcement of the 1.68.0 version of Rust, Cloudsmith is happy to announce our support for the new "sparse" registry protocol, which has been stabilized as part of version 1.68.0.
Cargo is the package manager for Rust, a programming language empowering everyone to build reliable and efficient software. Cloudsmith customers wh…
New resources added to Cloudsmith's Terraform Provider
It's easier than ever to automate provisioning and updating Cloudsmith resources with the latest version of Cloudsmith's Terraform Provider. With the latest version, customers can now:
Create and manage repositories, including updating repository settings
Create and manage entitlement tokens, granting read-only access to end users
Create and man…
Entitlement Token Search
Power users of the Cloudsmith API and CLI have long enjoyed search functionality of repository entitlement tokens. Today we're delighted to announce that our UI-using friends are now also covered!
Entitlement token search uses the same query syntax as our other search fields and provides a simple way to perform searches based on name, kind, or ass…
Integrating Cloudsmith with Your Roadie Developer Portal
Great news!
We've just released an integration with Roadie, a start-up that provides SaaS for Backstage, a service catalog open-sourced by Spotify that automatically tracks your microservices. Organizations use Roadie to build a software catalog and developer portal for internal systems, centralizing information in one convenient location.
We kno…
Improvements to managing access and permissions of Service Accounts
Great news! Based on customer feedback, we've made improvements to how you manage access and permissions for Service Accounts, improving their usability and extending the capabilities of what a Service Account can do.
What's changed?
With this release, there are two key feature improvements.
First, Service Accounts can now be assigned a manager…
Remove users from your organization automatically with SCIM
Managing users with Cloudsmith should be easy. That's why we have support for SAML sign-on and SAML group sync, two features that let you automate user access. With our latest feature release - deprovisioning users with SCIM - we've made it just as easy for you to remove users from your organization, too.
By integrating Cloudsmith with your IdP vi…
The Weekly Fix: Improvements on 2022-11-14
This week, the Cloudsmith team made the following improvements:
Allow users to specify the use of an entitlement tokens name, rather than its identifier when configuring their webhook
Fixes an issue where general Permission Denied API responses were including "Geo/IP" when not relevant.
Fixed an issue where the Repository>Access Controls UI woul…