# Google Artifact Registry

Google Artifact Registry is enables you to centrally store artifacts and build dependencies as part of an integrated Google Cloud experience.

### Usage of Google Artifact Registry in Delivery Shield

* Delivery Shield gets notified for every build run in a pipeline. To identify the image for every build, it connects to the Google Artifact Registry and pulls the newly built image.
* Once the image is pulled, it runs security scans on it. The scanned results are available in the [Vulnerability Management](https://docs.opsmx.com/opsmx-secure-software-delivery-ssd-platform/user-guide/vulnerability-management) page, and **Artifact** section of the [DBOM](https://docs.opsmx.com/opsmx-secure-software-delivery-ssd-platform/user-guide/delivery-bill-of-materials-dbom) page.
* Delivery Shield also collects metadata such as Artifact SHA to perform artifact integrity checks and ensure the security in the supply chain. This information gets populated in the DBOM page for audit purposes. 

{% hint style="info" %}
Google Artifact Registry is integrated as part of Delivery Shield. You need to just enable or disable it when required. 
{% endhint %}

### To Manage Google Artifact Registry:

1. Navigate to **Config** > **Integrations**.
2. In the **Artifact** panel, click **Google Artifact Registry**.

<figure><img src="https://2047464521-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MBEa1hoX6SqpDj-ymNs%2Fuploads%2FC2rMlWYRb0F8fldDowzr%2Fgoogle%20artifact%201.png?alt=media&#x26;token=3b12a8ae-5e7d-4de3-a2c0-c51e315459fa" alt=""><figcaption></figcaption></figure>

3. The integration page is displayed. Click **+New Account**.&#x20;
4. In the popup appears, enter the following details:

<figure><img src="https://2047464521-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MBEa1hoX6SqpDj-ymNs%2Fuploads%2FbnCCNruSP5vrxzT5Q6cj%2Fgoogle%20artifact%202.png?alt=media&#x26;token=daae6a42-6410-4f69-a2af-92b00486a88f" alt=""><figcaption></figcaption></figure>

5. Enter the **Account Name**, **Service Account Key**, **Source details**.&#x20;
6. Select the **Teams** and the corresponding **Environments** from the dropdown for which you want the integration to be available. The integration will be available for the selected teams and environment only.&#x20;

{% hint style="info" %}
You can select up to 5 teams for the integration to be displayed.&#x20;
{% endhint %}

* An example is given below for reference:

<figure><img src="https://lh7-rt.googleusercontent.com/docsz/AD_4nXeuMZQzZsZQuulVdW9B9OuffNPoEXqbcpcAkYtKVyb7YiTQxbVIt1L4Gh-zshqX2J9MFKIat8x4oWFIGxdg3j1XVagyUNhUAlD_52soyMyd1cy53p6XiYi0LsTjIBfHcybRWl61?key=D9EXoOdGF7oYOBvYaW2GnRWJ" alt=""><figcaption></figcaption></figure>

* In the example above,&#x20;
  * if **Team 1**, **Team 2**, and **Team 3** are selected, only applications associated with these teams can access the integration. Any applications belonging to other teams, such as **Team 4**, will not have access to this account.
  * Even if the user who created this account is also an admin for **Team 4**, the integration account remains restricted and is not available for **Team 4**.&#x20;
  * Access to the account is strictly limited to the specified **Teams** and **Environments** selected during account creation.
* **For Organization Admins:**
  * When an **Organization Admin** creates an account without selecting specific **Teams** and **Environments**, the account will be universally applicable, granting access to **all teams** and **all environments** by default.
* **For Team Admins with Multiple Teams:**<br>
  * If a **Team Admin** who manages multiple teams creates an account without specifying particular **Teams** and **Environments**, the account will only be accessible to the teams for which the logged-in user holds admin privileges.

7. Click **Save**. The tool is connected.&#x20;
8. You can edit the entered values by clicking the **Edit** option as shown below:
9. Enable or disable the Vulnerability Scan toggle button and click **Update**.&#x20;

The new setting gets updated.&#x20;

<br>