Ship package remediation
Connect
SPIRITT
CloudsmithCloudsmith
Give private packages an operating system
Build package security, release evidence, and repository oversight from your Cloudsmith account. Give SPIRITT the outcome and put your connected account to work.
What you can do with Cloudsmith.
Know what you ship
Read package versions, checksums, license details, and processing state from private repositories.
Carry security work through
Turn repository vulnerability findings into owned engineering tasks with source package context.
Keep delivery sustainable
Track storage, bandwidth, request limits, and audit activity without guessing account entitlements.
Works with your other apps.
Get started in three steps.
01
Open your workspace
Start a SPIRITT workspace for your Cloudsmith workflows, connected apps, and finished outcomes.
02
Connect Cloudsmith
Connect Cloudsmith and select the account and records your agent should work with.
03
Hand over a mission
Describe the result, scope, and handoffs. SPIRITT builds the workflow and follows the work through.
Hand over a mission.
Choose a mission. Make it yours.
Put Cloudsmith to work.
Give private packages an operating system
Questions
Cloudsmith, with SPIRITT.
01What can SPIRITT do with Cloudsmith?+
Build package security, release evidence, and repository oversight from your Cloudsmith account. Read package versions, checksums, license details, and processing state from private repositories. Turn repository vulnerability findings into owned engineering tasks with source package context.
02Can SPIRITT build an app around Cloudsmith?+
Yes. Ask it to "build a package security desk". Build a Cloudsmith security app from our private repositories, package metadata, and vulnerability summaries. Match affected packages to GitHub owners, create deduplicated remediation issues, and recheck package security state before resolving each case.
03Can SPIRITT build a release gate around Cloudsmith?+
Yes. It can check the specified package version, returned security state, checksum, and policy evidence, then record the result in a connected repository workflow. The gate evaluates source evidence; it does not itself upload or promote a package.
04How does Cloudsmith work with my other apps?+
Connect the apps your mission uses. GitHub to ship package remediation; GitLab to gate release evidence; Linear to own vulnerability follow-up. SPIRITT carries the handoff through and checks the result in the destination.
05What should I know about the Cloudsmith connection?+
Cloudsmith supports package, repository, vulnerability, quota, rate-limit, and audit reads. Package uploads, promotions, and repository changes are handled through separately authorized release tooling, not implied by this connection.
06How do I get started with Cloudsmith?+
Open a SPIRITT workspace, connect Cloudsmith, and name the target records and desired outcome. Start with "Build a package security desk" or bring your own mission. Set the scope for changes and external actions, then let your agent run the work.