Harbor logo

Harbor

Cloud native registry for storing, signing, scanning, and replicating container images and Helm charts

Open Source Alternative to
Repository activity
  • Stars28.7k
  • Forks5.3k
  • Open Issues828
License

Apache-2.0

Languages
  • Go
  • TypeScript
  • HTML
Harbor screenshot

About Harbor

Harbor is an open source cloud native registry for storing, signing, and scanning content. It extends Docker Distribution with security, identity, and management features for container images and Helm charts, giving teams a registry close to their build and runtime environments.

Projects provide role based access control for repositories. Policy based replication synchronizes images and charts between registry instances with filters for repository, tag, and label. Harbor scans images for vulnerabilities, supports policy checks to block vulnerable or unsigned images, tracks repository operations in logs, and provides a graphical portal plus RESTful APIs.

Harbor can be deployed on a Linux host with Docker Compose, on Kubernetes with the Harbor chart, and through a Harbor Operator. It is hosted by the Cloud Native Computing Foundation, licensed under Apache 2, and had a third party security audit by Cure53 in October 2019.

Key features

  • Registry for container images and Helm charts
  • Role based access control through projects
  • Policy based replication with repository, tag, and label filters
  • Vulnerability scanning with deployment policy checks
  • Docker Content Trust image signing with Notary

Details

First released
2016
Self-hosting
Docker Compose · Helm chart · Operator
Content
Container images · Helm charts
Identity
LDAP/AD · OIDC
Auditing
Repository operations tracked in logs
Governance
Hosted by CNCF