Artifact Hub
Artifact Hub is a CNCF incubating web-based application that enables finding, installing, and publishing cloud-native packages. Built primarily in TypeScript and Go, it addresses fragmentation in the cloud-native ecosystem by providing a single discovery experience for consumers. It supports 27+ artifact types including Helm charts, OPA policies, Falco rules, OLM operators, Tinkerbell actions, kubectl plugins, Tekton tasks, KEDA scalers, CoreDNS plugins, and more. Artifact Hub provides a searchable catalog with versioning, security reports via Trivy and Snyk, changelog tracking, and webhook notification support. Licensed under Apache 2.0 and governed by the CNCF.
APIs
Artifact Hub API
The Artifact Hub REST API provides endpoints for searching and retrieving cloud-native packages across all supported artifact types, managing repositories, handling user authent...
Features
Unified search across 27+ cloud-native artifact types including Helm charts, Kubernetes operators, OPA policies, Falco rules, and Tekton tasks from a single interface.
Automated security scanning of Helm chart images using Trivy and Snyk, with visualized vulnerability reports and severity ratings.
Configurable webhooks for receiving notifications when new package versions are published or security issues are discovered.
Publishers add and manage their Helm chart repositories, OCI registries, and other sources via the Artifact Hub API.
Interactive exploration of Helm chart values schemas and template structures directly in the browser.
Artifact Hub can be deployed on-premise using the official Helm chart, enabling organizations to run their own private artifact registry.
Use Cases
Platform engineers discover and evaluate Helm charts across multiple repositories from a single searchable interface with version history and security report data.
Open source maintainers publish their Helm charts, operators, and other cloud-native packages to Artifact Hub for discoverability.
Security teams review Artifact Hub security reports to identify vulnerable container images used in Helm charts before deployment.
Development teams configure webhooks to receive notifications when new versions of dependencies like Helm charts are published.
Integrations
Native integration with Helm chart repositories including support for OCI-based chart distribution via container registries.
Integration with Aqua Security's Trivy for container image vulnerability scanning in Helm chart security reports.
Integration with Snyk for additional container security scanning capabilities in Artifact Hub security reports.
Artifact Hub is an official CNCF incubating project integrated into the Cloud Native Computing Foundation's ecosystem.