Abstract: In general, a device comprising a processor and a memory may be configured to perform various aspects of the techniques described in this disclosure. A distribution controller configured to support a software artifact management system may comprise a memory and a processor configured to perform the techniques. The memory may store an environmental descriptor that identifies one or more software artifacts stored to a central repository located in an unsecure environment. The processor may generate, based on the environmental descriptor, one or more distribution operations specifying that at least one software artifact of the one or more software artifacts is to be distributed to a secure environment from the unsecure environment. The processor may also transmit, to the central repository, the one or more distribution operations to cause the central repository to transfer the at least one software artifact to the edge repository in the secure environment.