Artifactory support

[mjpitz]

It's always been hard to figure out how to refer to these in conversations, but I've largely taken to calling them "artifactories" or an "artifactory" for one. Termed after JFrog's project (I'm sure I'll catch some flack for this later on), an artifactory is a repository for build artifacts. They often host both published library code as well as other deployable artifacts. For the purpose and scope of this ticket, we will consider the following artifactories in scope:

• JFrog Artifactory
• Sonatype Nexus
• Helm Chart Repositories

In order to process artifactories, we often need to pull a list of artifacts, download targz, unpack them, and walk the underlying structure.. Some languages, like Java, host their pom.xml files as separate artifacts in an of themselves.

Needs:

• careful thought around how interactions for extraction occurs
• a proposal on how this should be done

[mjpitz]

Missed this somehow, but it's got a lot of good links: #7