Harbor is an open source trusted cloud native registry that stores, signs, and scans content such as container images and Helm charts.

---

🚀 Overview

Harbor is an open-source, CNCF Graduated project that provides a secure, cloud native artifact registry. It extends the open source Docker Distribution by adding capabilities like role-based access control, vulnerability scanning, content signing, replication, and auditing to help organizations manage artifacts compliantly and efficiently across Kubernetes, Docker, and other platforms.

What problem does this project solve? Basic container registries lack built-in security features like vulnerability scanning, fine-grained access control, replication for high availability, and content trust mechanisms, making it hard to deploy secure and compliant CI/CD pipelines in enterprise environments.

Who is it built for? DevOps teams, platform engineers, and organizations running cloud native workloads who need a private, trusted registry.

Why did you build it? Originally developed by VMware and donated to CNCF, Harbor was created to deliver an enterprise-grade, open source alternative to proprietary registries, ensuring trust, performance, and interoperability for cloud native artifacts.

---

✨ Key Features

• Role-based access control (RBAC) and multi-tenancy through projects (enables secure team collaboration)
• Vulnerability & image scanning with Trivy integration and policy enforcement (identifies and blocks risky images)
• Policy-based replication across multiple registries (supports geo-replication and disaster recovery)
• Content signing and validation using Notary (ensures image integrity and trust)
• Optional: Graphical web UI, RESTful API, LDAP/OIDC auth, garbage collection, Helm chart support, OCI artifacts

---

🛠 Tech Stack

• Backend: Go (core services like registry, jobservice)
• Frontend: TypeScript, HTML (Angular-based portal)
• Database: PostgreSQL
• Cache/Queue: Redis
• Scanner: Trivy
• Auth: OIDC, LDAP/AD
• Deployment: Docker Compose, Helm Charts, Harbor Operator (Kubernetes)

---

👥 Who Is This For?

This project is useful for:

• DevOps who want to securely manage container images and artifacts
• Kubernetes teams looking for private registries with scanning and RBAC
• Organizations building compliant, scalable cloud native infrastructure

---

📸 Screenshots / Demo

• Live demo: https://demo.goharbor.io
• GitHub: https://github.com/goharbor/harbor

---

🔥 Project Status

• 🟢 Actively building

Last updated: 2026-03-24

---

❓ FAQ

Is this project free?

Yes / Open Source (Apache License 2.0, completely free to use and self-host.)

---

Is the source code available?

Yes — https://github.com/goharbor/harbor

---

Can I contribute?

Yes — Check CONTRIBUTING.md for guidelines. Report issues, submit PRs. Join community via CNCF Slack (#harbor, #harbor-dev), mailing lists (harbor-users@lists.cncf.io, harbor-dev@lists.cncf.io).

---

📬 Contact & Links

• Website: https://goharbor.io
• GitHub: https://github.com/goharbor/harbor
• Community: https://goharbor.io/community/

---

Built with ❤️ and kept warm on WarmIndex.