Harbor
Apache-2.0 CNCF container registry with RBAC, vulnerability scanning, signing and replication
DevOps / Infrastructure · Apache-2.0 · 29.6k
Reviewed 2026-10-21 · last push 2026-10-20 · repo checked 2026-10-21
What's Good
Apache-2.0 (goharbor/harbor), release v2.15.4 (2026-10-09), commit on 2026-10-20. ★~30k (~53 a week), a CNCF graduated project. Useful when a team wants its own registry with per-project permissions, scan-before-pull policies and a proxy cache in front of Docker Hub rate limits.
The Catch
It is a heavy multi-service install: core, portal, job service, the registry itself, Postgres, Redis and a scanner, set up with the installer and Docker Compose or the Helm chart. That is overkill for one developer or a small homelab; a single-binary registry like zot is lighter.
Verdict
The standard self-hosted registry for teams; too much machinery for a solo setup.
Embed
Maintainer? Add the badge to your README. It is free, links to this review, and there is no paid version.
Markdown
[](https://stackgems.com/gems/harbor)
HTML
<a href="https://stackgems.com/gems/harbor"><img src="https://stackgems.com/badge/harbor.svg" alt="Harbor reviewed on Stack Gems" height="20"></a>