Add | Conan Remote

: Temporarily deactivates or reactivates a remote without removing it. Best Practices Conan Repositories - Sonatype Help

If a server URL changes, update it using update instead of deleting it: conan remote update company-artifactory company.com Use code with caution. To entirely remove a repository configuration: conan remote remove company-artifactory Use code with caution. Troubleshooting Common Errors SSL Verification Failures conan remote add

However, the power of conan remote add brings responsibilities. Adding untrusted remotes exposes the supply chain to malicious packages—a risk analogous to adding unknown PPAs on Linux or arbitrary package feeds in npm. A malicious remote could serve a compromised binary of a popular library, leading to code injection or data exfiltration. Therefore, prudent teams combine conan remote add with other security practices: using HTTPS URLs, verifying server fingerprints, employing Conan’s package signing and verification features (available in Conan V2), and restricting the use of --insecure to isolated test environments. Furthermore, over-reliance on too many remotes can lead to "dependency confusion" attacks, where a malicious actor uploads a higher-versioned package to a public remote that a misconfigured client might prefer over a private one. Strict ordering and the use of conan remote add --insert 0 (making a remote top priority) are effective countermeasures. : Temporarily deactivates or reactivates a remote without

conan remote add <remote_name> <remote_url> [arguments] Therefore, prudent teams combine conan remote add with

The command also facilitates modern DevOps practices such as artifact promotion and multi-stage pipelines. Consider a continuous integration pipeline that builds a library, uploads it to a "development" remote using conan upload , and runs tests. Once the library passes validation, a promotion script could issue conan remote add stable https://artifacts.company.com/stable on a different stage, allowing production builds to consume only promoted artifacts. Without conan remote add , each environment would require manual configuration of its Conan client; with it, the configuration becomes part of the build script itself—codified, version-controlled, and repeatable. This transforms infrastructure from pet to cattle, where remotes are ephemeral references that can be added and removed as easily as switching branches.

Verify your configuration to ensure the URLs and search priorities are correct: conan remote list Use code with caution. Removing or Modifying Remotes

: Defines the priority order. Packages are searched sequentially based on this index. Step-by-Step Implementation Examples 1. Adding a JFrog Artifactory Remote