Harbor

Harbor is an open-source cloud-native registry that securely stores, signs, and scans container images, Helm charts, and other cloud-native artifacts. As a CNCF Graduated project, it delivers enterprise-grade compliance, performance, and interoperability for managing artifacts across Kubernetes and Docker platforms. Security features include automated vulnerability scanning that detects CVEs in container images during push and pull operations, content trust via Cosign and Notary for cryptographic image signing and validation, and policy-based admission control that blocks deployment of vulnerable or unsigned images. Management capabilities include multi-tenant project isolation with role-based access control, registry-to-registry replication for geo-distributed deployments, garbage collection for storage optimization, and quota management per project. The extensible REST API and web UI support integration with identity providers including LDAP, OIDC, SAML, and UAA. Users include CERN for scientific computing, China Mobile for telecom infrastructure, JD.com for e-commerce operations, OVHcloud for managed services, Dynatrace for observability platforms, Trend Micro for cybersecurity products, DE-CIX for internet exchange operations, Nederlandse Spoorwegen for railway systems, and NetEase for gaming services. Partners include Anchore, Aqua Security, Rancher, Sysdig, VMware, and Alauda for integrated security and management. Harbor installs on any Kubernetes environment or system with Docker support.