Open-Source Container Registries & OCI Artifact Stores

An open-source trusted cloud native registry project that secures artifacts with role-based access control, vulnerability scanning with Trivy, policy-driven image signing via Cosign, and multi-cloud replication.

The original, lightweight open-source implementation of the OCI distribution specification, serving as the core engine behind many commercial registries and private local pull-through caches.

Red Hat's open-source enterprise registry platform providing automated build triggers from Git, robot account credential scoping, Clair vulnerability scanners, and geo-replicated storage backends.

A universal repository manager with free Docker registry support that allows organizations to proxy and cache upstream registries, host private images, and manage npm, PyPI, and Maven packages side-by-side.