Ross ROSS = Recommend OSS · open-source software intelligence for agents

Harbor

An open source trusted cloud native registry project that stores, signs, and scans content. observed · 2026-08-28

github.com/goharbor/harbor · homepage · Go · Apache-2.0 (permissive) observed · 2026-08-28

Health v2 · maintenance only

96/100

  • Activity 99
  • Release rhythm 91
  • Longevity 100
How is this computed?

round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-09-03. Adoption (stars, forks) is never an input.

  • gap_med: 30.0
  • age_days: 3870
  • days_rel: 62
  • days_push: 8
  • n_releases_24m: 21

Full methodology

Adoption not part of the score

29236 stars · 5318 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

Harbor is an open source cloud native container registry that stores, signs, and scans container images and other OCI artifacts. It extends Docker Distribution with security, identity, and management features such as role-based access control, vulnerability scanning, content signing, and replication across registries.

Use cases

  • self-host a private docker registry for kubernetes
  • scan container images for vulnerabilities before deployment
  • sign and verify container images for supply chain security
  • replicate images between multiple container registries
  • manage multi-tenant container artifact projects with rbac
  • integrate oidc authentication with a container registry
  • deploy a highly available registry on kubernetes with helm

When to choose

  • you need a private, self-hosted registry with access control and audit trails
  • you want vulnerability scanning and image signing built into your registry
  • you run kubernetes or docker at scale and need reliable artifact storage close to your cluster
  • you need to replicate images across registries or enforce content policies

When to avoid

  • you only need a simple registry without security or management features - plain Docker Distribution may suffice
  • you prefer a fully managed registry service like ECR, GCR, or Docker Hub
  • you do not want to operate the infrastructure required to run Harbor

Facets

application · maturity stable

object-storage security vulnerability-scanning auth authorization api-gateway self-hosted developer-tools cloud-computing security self-hosted self-hosted go cloud container-registry image-signing helm-chart cncf-graduated artifact-registry replication oci-distribution vulnerability-scanning rbac docker-registry containers devops kubernetes docker linux

10 sources

Member repositories

RepositoryRoleHealth v2
goharbor/harbormain96
goharbor/harbor-helminfra96

For agents

markdown · JSON · MCP: product_card(name="goharbor/harbor")

Data as of 2026-08-30T08:39:29.467469+00:00 · Report a problem