An artifact repository is a system that stores, versions, and serves software packages, build outputs, and dependencies used in development and deployment workflows. Examples include package registries, binary stores, and tools such as JFrog Artifactory. These systems often sit between developers, build pipelines, and external package sources, so they become trusted infrastructure in the software supply chain.
In cyber security, artifact repositories matter because a compromise can affect many downstream systems at once. Attackers may target repository credentials, upload malicious packages, poison dependency chains, or abuse proxy and caching features to reach internal services. Defenders use access control, integrity checks, short-lived credentials, and monitoring for unusual downloads or uploads to reduce this risk. In AI and automated testing environments, artifact repositories are especially sensitive because tool-using agents may interact with them directly, turning a normal build dependency into an attack surface.