Artifact Keeper | Cybersecurity & Ethical Hacking Project

Abstract

Artifact Keeper is an open-source Cybersecurity & Ethical Hacking project. Open-source universal artifact registry. Drop-in Artifactory/Nexus alternative with 40+ package formats, security scanning, WASM plugins, and edge replication. An enterprise-grade, open-source artifact registry supporting 45+ package formats. Built with Rust. It is built using Rust. Key capabilities include: 45+ Package Formats - Native protocol support for Maven, PyPI, NPM, Docker/OCI, Cargo, Go, Helm, and 38 more; WASM Plugin System - Extend with custom format handlers via WebAssembly (WIT-based, Wasmtime runtime); Security Scanning - Automated vulnerability detection with Trivy and Grype, policy engine, quarantine workflow. The complete source code is publicly available on GitHub under the MIT License, making it a useful reference for students building a Cybersecurity & Ethical Hacking mini project or final-year project.

1. Introduction

An enterprise-grade, open-source artifact registry supporting 45+ package formats. Built with Rust.

2. Objective

Open-source universal artifact registry. Drop-in Artifactory/Nexus alternative with 40+ package formats, security scanning, WASM plugins, and edge replication.

This project demonstrates how Rust can be applied to a real-world Cybersecurity & Ethical Hacking problem.

3. Key Features / Modules

45+ Package Formats - Native protocol support for Maven, PyPI, NPM, Docker/OCI, Cargo, Go, Helm, and 38 more
WASM Plugin System - Extend with custom format handlers via WebAssembly (WIT-based, Wasmtime runtime)
Security Scanning - Automated vulnerability detection with Trivy and Grype, policy engine, quarantine workflow
Hardened Containers - All images built on DISA STIG-approved Red Hat UBI 9 base images, non-root execution, no shell or package manager in runtime
Borg Replication - Recursive peer mesh with swarm-based artifact distribution and P2P transfers
Full-Text Search - OpenSearch-powered search across all repositories and artifacts
Multi-Auth - JWT, OpenID Connect, LDAP, SAML 2.0, and API token support
Artifactory Migration - Built-in tooling to migrate repositories, artifacts, and permissions from JFrog Artifactory
Artifact Signing - GPG and RSA signing integrated into Debian, RPM, Alpine, and Conda handlers

4. Technology Stack

Rust

5. System Requirements

General requirements for this technology stack — check the README for exact versions.

Rust toolchain (rustup / cargo)
Git (to clone the repository)

6. Installation & Setup

git clone https://github.com/artifact-keeper/artifact-keeper.git
cd artifact-keeper

Full setup instructions are in the project README.

7. Future Enhancements

Suggested extensions you can add to make this your own project.

Add logging and alert notifications (email / Telegram)
Write a threat model document for the tool
Package it with Docker for safe lab testing

8. Viva / Review Questions

Common questions examiners ask for projects in this domain.

Which threat or attack does this project defend against?
What detection or protection technique is used and what are its limits?
How are false positives and false negatives handled?
Which cryptographic algorithms or security standards are involved?
What legal and ethical rules apply when testing a tool like this?

9. Source Code & License

This project is developed by artifact-keeper and published on GitHub under the MIT License. Please follow the license terms and credit the original author when you use or modify this code.

View Source on GitHub Download ZIP

Want to build this as your internship project?

Work on a Cybersecurity & Ethical Hacking project like this with mentor guidance, weekly reviews and an internship certificate from Training Trains, Erode — online or offline.

Apply for Cybersecurity & Ethical Hacking Internship