Harbor Container Registry

Harbor is an open-source cloud-native registry that stores, signs, and scans container images and Helm charts for vulnerabilities. Originally developed by VMware in 2014 and contributed to the CNCF (Cloud Native Computing Foundation) in 2018, becoming a graduated project in 2020. Key features: enterprise-grade container image registry with role-based access control (RBAC), multi-tenant project isolation, and user management via database, LDAP, OIDC, or UAA authentication. Image vulnerability scanning integrated with Trivy, Clair, or Aqua scanners, automatically scanning images upon push and providing vulnerability reports with severity levels and CVE references. Image signing via Notary v2 (Cosign) and Notary v1 for content trust, ensuring image integrity and provenance through cryptographic signatures. Helm chart registry for storing and serving Helm charts alongside container images. Garbage collection for reclaiming storage space from unreferenced blobs and deleted images. Replication for synchronizing images across multiple Harbor instances for geographic distribution, air-gapped environments, and multi-cloud deployments, with event-triggered and scheduled replication policies. Image quotas for limiting storage consumption per project. Tag retention policies for automatically cleaning up old image tags based on configurable rules. Webhook notifications for integrating push, pull, scan, and replication events with CI/CD pipelines and monitoring systems. Robust API and CLI (harbor-cli) for automation and management. Multi-architecture image support (manifest lists) for serving images for different CPU architectures. OIDC-based SSO integration. Audit logging for compliance and security tracking. High availability deployment via Helm chart on Kubernetes. Used by thousands of organizations for secure container image management. Open source under Apache 2.0.