Harbor
A self-hosted container registry with vulnerability scanning, image signing and role-based access control.
These buttons open the developer's own site, repository or store listing in a new tab. wares.gg does not host downloads.
About Harbor
Harbor is an open-source registry for container images and other cloud native artifacts. It adds policies and role-based access control on top of image storage, scans images for vulnerabilities, and signs images as trusted.
It supports multiple tenants, identity integration, replication across registries including other Harbor instances, and has both a web UI and an extensible API. Harbor can be installed on any Kubernetes environment or on a system with Docker. It is a CNCF Graduated project and suits organisations that need a managed private registry.
Strengths
- Built-in vulnerability scanning and content signing
- Role-based access control with identity integration
- Replication between registries
- Web UI and API
Limitations
- Heavier to run than a plain registry
- Needs Docker or Kubernetes to install
Details
- Pricing
- FreeFree and open source.
- License
- Open source, license not stated
- Developer
- The Harbor contributors
- Platforms
- Linux, Self-hosted
- How it runs
- Self-hosted
- Best suited for
- Organisations running a private registry with access control and scanning
- Categories
- Container tools, Security tools, Developer tools
- Last verified
- Added
- Provenance
- Facts checked against the developer's own pages and store listings, 1 sources on file.
Alternatives to Harbor
Compare allSoftware that can replace Harbor for an important use case, and what changes if you switch.
Project Quay
A self-hostable container image registry for building, storing and distributing container images.
Project Quay is a self-hosted registry with image scanning, access controls, image builds and mirroring, likewise heavier to deploy than a simple registry.
zot
Self-hosted OCI-native container image registry shipped as a single binary with no dependencies.
zot is a single static binary OCI registry with no external services that runs without root, includes scanning and auth, but offers no replication or web UI as listed.
Distribution
An open-source container registry server for storing and distributing container images and other content.
Distribution is a lighter self-hosted registry that runs as a container, but it has no built-in web interface or vulnerability scanning, and access control needs extra setup.
Harbor as an alternative
Listings that name Harbor as an alternative.
Clair
A self-hosted service that statically analyses container images for known vulnerabilities.
Harbor is a self-hosted container registry with built-in vulnerability scanning, image signing and role-based access control, more than Clair's analysis alone.
Similar software
Related functionality, not necessarily a direct replacement.
Skopeo
A command-line tool for inspecting, copying and signing container images in remote registries.
regclient
A Go client and command-line tooling for inspecting, copying and managing images in Docker and OCI registries.
ORAS
A command-line tool and client libraries for pushing and pulling OCI artifacts to container registries.
cert-manager
A Kubernetes and OpenShift controller that issues and renews X.509 TLS certificates automatically.
Diun
A self-hosted tool that notifies you when container images you use get new tags or digests.
