Dark mode now available for Cloudsmith docs
Cloudsmith Docs now supports dark mode, reducing eye strain when moving between the product and documentation. Toggle it manually in the footer, or let it follow your system theme…
Jun 27 2026
Set up Docker Hub and DHI upstreams with Cloudsmith-managed authentication
Cloudsmith now handles authentication for Docker Hub and Docker Hardened Images (DHI) upstreams using a managed token, removing the need to supply your own credentials during setup. Authenticated requests receive a higher rate limit than anonymous access.
How it works
When a Docker Hub or DHI upstream is created without credentials, Cloudsmith uses a managed Docker Hub organization access token (OAT) to authenticate requests on your behalf. Workspace names are shared with Docker to attribute usage when the Cloudsmith-managed token is used.
New pre-configured DHI upstream
A pre-configured DHI upstream is also available, so you can start proxying and caching images from the DHI Community tier immediately.
DHI are minimal, secure, and production-ready container base and application images maintained by Docker. Designed to reduce vulnerabilities and simplify compliance, DHI integrate easily into your existing Docker-based workflows with little to no retooling required.
To access the DHI Select or Enterprise tiers, you must configure the DHI registry as a private upstream with your Docker Hub credentials.
For more information about creating Docker Hub and DHI upstreams in Cloudsmith, see:
Other logs
01/06
Enrich packages with custom metadata
Custom key-value metadata can now be attached to any package in Cloudsmith, making it possible to store structured contextual data - CI build info, Git provenance, compliance evidence, cost attribution - directly alongside the artifact it describes…
Jun 16 2026
Vulnerability detection now covers ecosystem-native OSV advisories
Packages from Debian, Alpine, PyPI, and other ecosystems that use native version ranges are now matched against a broader set of OSV advisories, building on existing coverage for SemVer-based ranges…
Jun 16 2026
Manage policies as code with Terraform
Cloudsmith's Terraform provider (v0.0.75) now supports full lifecycle management of policies and policy actions as code…
Jun 16 2026
More events now trigger policy evaluations
Two additional policy evaluation triggers are now available, ensuring that policies are enforced consistently across repositories without manual intervention…
Jun 15 2026
Create and manage connected repositories with Terraform
With the new cloudsmith_connected_repository resource for the Cloudsmith Terraform provider, you can define connected repository configurations in code alongside the rest of your Cloudsmith infrastructure…
Jun 15 2026
Keep up to date with our monthly product bulletin