# Ci Cd
All Ci Cd notes →1 — Artifact Management
Covers artifact repositories, OCI registries, language package repositories, and versioning schemes as the foundation of an artifact platform.
2 — Artifact Lifecycle
Walks an artifact's lifecycle from publishing through promotion, retention policy, and cleanup, and why each stage needs explicit platform support.
3 — Software Supply Chain
Covers build provenance, SBOMs, artifact signing, and verification as the software-supply-chain controls layered on top of artifact storage — see kubernetes/08-supply-chain-security for the Sigstore/cosign/SLSA implementation detail.
4 — Dependency Management
Covers internal library management, third-party dependency handling, repository mirroring, and dependency governance policy at platform scale.
5 — GitHub Actions: Artifacts
Covers uploading and downloading build artifacts, retention policy tuning, handling large files, and publishing test/report artifacts from a workflow run.