# Harbor

> Apache-2.0 CNCF container registry with RBAC, vulnerability scanning, signing and replication

**Category:** DevOps  
**Pricing:** open-source  
**URL:** https://goharbor.io  
**GitHub:** https://github.com/goharbor/harbor  
**Added:** 2026-10-21

---

## The Hook

Harbor is a self-hosted registry for container images and other OCI artifacts. It adds projects, role-based access, vulnerability scanning, signing, replication and pull-through caching on top of a plain registry.

## What's Good

Apache-2.0 (goharbor/harbor), release v2.15.4 (2026-10-09), commit on 2026-10-20. ★~30k (~53 a week), a CNCF graduated project. Useful when a team wants its own registry with per-project permissions, scan-before-pull policies and a proxy cache in front of Docker Hub rate limits.

## The Catch

It is a heavy multi-service install: core, portal, job service, the registry itself, Postgres, Redis and a scanner, set up with the installer and Docker Compose or the Helm chart. That is overkill for one developer or a small homelab; a single-binary registry like zot is lighter.

## Verdict

The standard self-hosted registry for teams; too much machinery for a solo setup.