You can use boolean logic (e.g. AND/OR/NOT) for complex search queries. For more help and examples, see the search documentation.
Search by package name:
my-package (implicit)
name:my-package (explicit)
Search by package filename:
my-package.ext (implicit)
filename:my-package.ext (explicit)
Search by package tag:
latest (implicit)
tag:latest (explicit)
Search by package version:
1.0.0 (implicit)
version:1.0.0 (explicit)
prerelease:true (prereleases)
prerelease:false (no prereleases)
Search by package architecture:
architecture:x86_64
Search by package distribution:
distribution:el
Search by package license:
license:MIT
Search by package format:
format:deb
Search by package status:
status:in_progress
Search by package file checksum:
checksum:5afba
Search by package security status:
severity:critical
Search by package vulnerabilities:
vulnerabilities:>1
vulnerabilities:<1000
Search by # of package downloads:
downloads:>8
downloads:<100
Search by package type:
type:binary
type:source
Search by package size (bytes):
size:>50000
size:<10000
Search by dependency name/version:
dependency:log4j
dependency:log4j=1.0.0
dependency:log4j>1.0.0
Search by uploaded date:
uploaded:>"1 day ago"
uploaded:<"August 14, 2022 EST"
Search by entitlement token (identifier):
entitlement:3lKPVJPosCsY
Search by policy violation:
policy_violated:true
deny_policy_violated:true
license_policy_violated:true
vulnerability_policy_violated:true
Search by repository:
repository:repo-name
Search queries for all Debian-specific (and related) package types
Search by component:
deb_component:unstable
Search queries for all Maven-specific (and related) package types
Search by group ID:
maven_group_id:org.apache
Search queries for all Docker-specific (and related) package types
Search by image digest:
docker_image_digest:sha256:7c5..6d4
(full hashref only)
Search by layer digest:
docker_layer_digest:sha256:4c4..ae4
(full hashref only)
Field type modifiers (depending on the type, you can influence behaviour)
For all queries, you can use:
~foo for negation
For string queries, you can use:
^foo to anchor to start of term
foo$ to anchor to end of term
foo*bar for fuzzy matching
For number/date or version queries, you can use:
>foo for values greater than
>=foo for values greater / equal
<foo for values less than
<=foo for values less / equal
Need a secure and centralised artifact repository to deliver Alpine,
Cargo,
CocoaPods,
Composer,
Conan,
Conda,
CRAN,
Dart,
Debian,
Docker,
Go,
Helm,
Hex,
LuaRocks,
Maven,
npm,
NuGet,
P2,
Python,
RedHat,
Ruby,
Swift,
Terraform,
Vagrant,
Raw & More packages?
Cloudsmith is the new standard in Package / Artifact Management and Software Distribution.
With support for all major package formats, you can trust us to manage your software supply chain.
tetrate
Tool-Specific Instructions
Although we use GPG (and RSA) keys across each repository and package format, client-side tools might have specific instructions that differ (or require manual steps). To add or use the signing key for these tools, please click on the package format specific tabs above.
Public GPG Key
GPG-based keys/signatures are used by:
The public GPG key for the tetrate/tsb-helm is:
-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: GnuPG v2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=svmR
-----END PGP PUBLIC KEY BLOCK-----It has the following long (20 bytes) and short (8 bytes) fingerprints:
33D8EEB7E9DF5ED1B541A39A79ABBAFA5DC06A2279ABBAFA5DC06A22You can download the GPG key or fetch it via the command-line:
curl -1sLf 'https://charts.dl.tetrate.io/public/gpg.79ABBAFA5DC06A22.key'Public RSA Key
RSA-based keys/signatures are used by:
The public RSA key for the tetrate/tsb-helm is:
-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----It has the following long (16 bytes) and short (8 bytes) fingerprints:
FBA9EABAA9B7BF45A871E88062FD0BE9A871E88062FD0BE9You can download the RSA key or fetch it via the command-line:
curl -1sLf 'https://charts.dl.tetrate.io/public/rsa.A871E88062FD0BE9.key'Need Help?
If you couldn't find what you needed in our documentation, then you can always chat to a member of our team instead. It's our mission to be your dedicated off-site team for package management, and we mean it. Come and chat with us, anytime.
What's this page? All Cloudsmith repositories and packages are signed using GPG (or RSA) keys where supported. GPG (or RSA) signatures and checksums provide reliable mechanisms to ensure that the packages that you download/install are neither corrupt nor modified. GPG is generally preferred, but RSA is used for some package formats (such as Alpine). Learn more in the signing keys documentation.
