Harbor
Self-hosted, CNCF-graduated container registry with built-in vulnerability scanning, image signing, and access control.
- Actively maintained
- Foundation-backed
- Well documented
- Permissive license
Overview
Harbor stores and serves container images (and other OCI artifacts) the same way a public registry like Docker Hub does, but self-hosted within your own infrastructure, with role-based access control, automated vulnerability scanning of stored images, and replication between multiple Harbor instances. It's a CNCF graduated project widely used as an enterprise-grade private registry.
Harbor is a fit for teams that need a private, self-hosted container registry with built-in security scanning rather than relying on a third-party registry, complementing Trivy (also in this catalog), one of the scanners Harbor can use internally.
Why it's in this catalog
Catalog rating: ★★★★☆ (4/5)
Standard self-hosted container registry with strong security scanning integration.
- Foundational
- Foundation-governed
- Categories
- DevOps
- Languages
- Go
- License
- Apache-2.0
Related Projects
Cilium
Apache-2.0eBPF-based networking, security, and observability platform for Kubernetes that replaces traditional networking components with kernel-level performance.
Actively maintained
- DevOps
etcd
Apache-2.0Distributed, consistent key-value store that Kubernetes itself uses to store all cluster state, and a reliable building block for other distributed systems.
Actively maintained
- DevOps
Open Policy Agent (OPA)
Apache-2.0General-purpose, CNCF-graduated policy engine for enforcing authorization, compliance, and configuration rules as code across microservices, APIs, Kubernetes, and CI pipelines.
Actively maintained
- DevOps
cert-manager
Apache-2.0Automates issuing, renewing, and managing TLS certificates for Kubernetes applications, eliminating manual certificate handling.
Actively maintained
- DevOps
Spotted an error? Suggest an edit on GitHub.