The Russian vendor AppSec Solutions has integrated its AppSec.Registry artifact repository into the Fintech Association's industry repository. This platform serves as a local replacement for foreign software like Sonatype Nexus, allowing companies to manage dependencies, libraries, and Docker images within their own secure infrastructure.
AppSec.Registry supports 22 repository types across various programming languages. The system operates on a Russian operating system and includes support for domestic cryptography and GOST-based digital signatures for artifacts and certificates. It also provides tools for supply chain security and access control.
According to the Fintech Association, the inclusion of this tool addresses the financial sector's need for secure software component management. It enables organizations to maintain compliance with data localization and information security regulations while mitigating risks associated with potential access restrictions to foreign services.
