Product guide

Artifact management and supply-chain security

Review the three connected Smart Kubaba product areas and their shared enterprise control layer.

Content statusVerified in sourceDocumentation versionLatest

Product family

The platform brings three product responsibilities into one installation.

  • Artifact Management: repositories, artifacts, metadata, storage, and lifecycle.
  • Intelligence Management: OSV, SBOM, findings, policy, and risk context.
  • Repository Firewall: PASS, WARN, or BLOCK decisions for proxy requests.

Shared enterprise layer

Organization/project ownership, identity, roles, access policy, tasks, storage, and audit form the shared control plane.

End-to-end operating flow

A team can publish to a Hosted repository or resolve through Proxy and Group repositories. While artifact metadata and content lifecycle are managed, OSV and CycloneDX context produces security findings, and the applicable policy result feeds repository or CI/CD consumption decisions.

  • Manage: repositories, artifacts, storage, access, cleanup, and transfer
  • Secure: OSV sources, CycloneDX SBOMs, components, and findings
  • Govern: policy scope, risk acceptance, decision history, and audit

Evaluation boundaries

Format coverage, deployment topology, and operational targets must be validated independently. Source verification on this site does not guarantee capacity, high availability, RTO or RPO, SLA, or commercial entitlement for a specific customer topology.