About Harbor
Harbor is an open source registry for storing and managing container images and other artifacts. It is a CNCF graduated project that you install and run on your own infrastructure.
What it does
Harbor stores your images and checks them before they reach production. It scans images for known vulnerabilities, can sign images, and limits who can push or pull them with role-based access control. It can also replicate artifacts to other registries, and it offers a web interface and an API for automation.
Key features
- Vulnerability scanning of stored images
- Image signing and validation
- Role-based access and multi-tenant projects
- Replication to other registries
- Web interface and API
Who it's for
Platform and security teams that run Kubernetes or Docker and want a private registry they control. It suits organizations with compliance rules about where images are stored and who can change them.
Pricing and good to know
Harbor is free and released under the Apache License 2.0. You run it yourself on Kubernetes or on a Docker host, so you need to plan for storage, backups and upgrades. Community help is available through Slack and mailing lists.
Highlights
- Scan stored images for known vulnerabilities
- Sign images and check signatures
- Control access with roles and projects
- Replicate images to other registries
- Manage the registry from a web interface or API
