---
title: ✨ August 2026 product updates
---

Host a private Nix binary cache in Cloudsmith. Plus, continuous risk detection and policy management are now generally available. ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­    ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏  ͏ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­  

| View in browser ArtiFacts is your monthly roundup of new Cloudsmith product releases, industry news, and helpful resources. NEW Secure your Nix binary cache, with upstream caching and proxying for NixOS Cloudsmith now hosts your Nix binary cache directly, eliminating reliance on nix-serve or leaning on the public NixOS cache. Consolidating Nix onto the same platform that governs the rest of your packages simplifies access, permissioning, and repository architecture.    Signing happens server-side with Ed25519 on every read, rather than at upload, so rotating a repository's key applies instantly to all its packages, with no re-signing backlog. Upstream proxying and caching keeps builds working against NixOS release channels even if the public NixOS cache goes down.    Support for the Nix format is available in Early Access. Learn more PRODUCT UPDATES    What's new in Cloudsmith 🔐 Continuous risk detection and policy management are now generally available If you missed the July special edition, continuous risk detection and policy management both crossed into general availability at the start of August. Every package in your workspace is continuously monitored against threat intelligence aggregated by OSV.dev, and policies are applied before packages reach your developers or pipelines.   📚 Add curated library registries as upstreams from the new Libraries tab If your team uses vendor-curated open source libraries, adding them to Cloudsmith is now a few-clicks rather than a manual URL entry. The new Libraries tab includes quick-configuration for Chainguard Libraries and RapidFort Curated Libraries. We fill in the proxy URL: you just need to pick a vendor and library, name the upstream, and add your credentials. ➕ Cooldown policies now cover seven package formats If you build across a polyglot stack, more of it is now covered by cooldown policies. Maven, NuGet, Conda, and Docker join npm, Python, and Go as supported formats. Hold newly published package versions until they clear a minimum age, closing the window most novel-package attacks rely on. Cooldown policies apply to newly pulled packages from upstream packages, as well as those that are already cached in your workspace. 🆕 What's new in the Cloudsmith CLI: The Cloudsmith CLI now ships as a self-contained binary for Linux, macOS, and Windows, with refreshed GitHub Actions, Azure DevOps, and CircleCI integrations. v1.19.0 removes the need for static API keys in CI/CD by discovering OIDC credentials on every major platform, and adds a Docker credential helper so docker pull and docker push skip the per-registry login.   ✨ View analytics directly in the Broadcasts view in the web app: See downloads, entitlement token use, and client logs, with a delivery-by-country map and a filterable client-log event stream, without leaving the Broadcasts view. 🏃 Use Go? We've extended upstream support so now any GOPROXY-compatible proxy can be configured Go upstreams can now point at any GOPROXY-compatible module proxy, including private proxies like the Buf Schema Registry. Manage private Go modules alongside the rest of your artifacts.   ⚠️ The Rego editor flags policy errors as you type The policy editor surfaces Rego problems inline and suggests schema fields as autocomplete, so mistakes surface during authoring instead of at runtime. INDUSTRY ROUND UP    Resources we think you'll love  🎪 Event \| BSides Belfast 2026 \| September 10, Europa Hotel, Belfast BSides Belfast is a full day of security talks at the Europa Hotel on September 10. Cloudsmith is based in Belfast – if you're attending, find us and say hello. View event details →   ⚠️ Blog \| Keyv and Cacheable npm packages compromised in an active supply-chain attack At the start of the month, a self-propagating worm began publishing malicious versions of the npm packages keyv and cacheable and their common dependencies – now tracked as keyv-shai-hulud. This post covers what's known so far, how to check whether your organization is exposed, and the controls that stop this class of attack from reaching your builds. Read more → Cloudsmith, 7 Donegall Square West, Belfast, Northern Ireland BT1 6JH Unsubscribe Manage preferences |
| --- |