Harbor

Harbor stores and serves container images (and other OCI artifacts) the same way a public registry like Docker Hub does, but self-hosted within your own infrastructure, with role-based access control, automated vulnerability scanning of stored images, and replication between multiple Harbor instances. It's a CNCF graduated project widely used as an enterprise-grade private registry.

Harbor is a fit for teams that need a private, self-hosted container registry with built-in security scanning rather than relying on a third-party registry, complementing Trivy (also in this catalog), one of the scanners Harbor can use internally.