Skip to content
SPECIFICTION
Get listed

Angos

angos.dev

WebmacOSLinuxAPISelf-hosted
Visit angos.dev
Spec score 8.0 #10 of 60 in Container Registries

Spec sheet

Product
Angos is an OCI registry configured in one file and run without a database.Read 11 Oct 2026 · angos.dev
Integrations
The project README lists Docker Compose and Kubernetes deployment guides, GitHub Actions OIDC setup, and Trivy or Grype scanning.Read 11 Oct 2026 · github.com
Security
The security model documents TLS, authentication, rate limiting, and fail-closed authorization behavior for critical security decisions.Read 11 Oct 2026 · angos.dev
License
The project’s GitHub repository identifies its license as Apache-2.0.Read 11 Oct 2026 · github.com
Access control
CEL policies and optional webhooks control push, pull, and delete access per repository.Read 11 Oct 2026 · angos.dev
Artifact verification
The release page says artifacts are signed with keyless Sigstore Cosign using GitHub Actions OIDC, with verification backed by the public Sigstore transparency log.Read 11 Oct 2026 · github.com
Caching
It can mirror Docker Hub, ghcr.io, or another upstream registry through a pull-through cache.Read 11 Oct 2026 · angos.dev
CI authentication
Passwordless CI authentication supports OIDC from GitHub Actions, Kubernetes, or another issuer.Read 11 Oct 2026 · angos.dev
Downloads
The v1.12.2 release lists standalone binaries for Linux amd64 and arm64, and macOS Intel and Apple silicon.Read 11 Oct 2026 · github.com
Image inspection
Its web UI browses repositories, manifests, referrers, pull history, and image filesystems layer by layer.Read 11 Oct 2026 · angos.dev
Maker details
The site footer credits “Angos Maintainers”; the pages opened did not state a headquarters or founding year.Read 11 Oct 2026 · angos.dev
OCI compatibility
Angos supports Docker, Podman, containerd, and other OCI tools, including OCI referrers for signatures and SBOMs.Read 11 Oct 2026 · angos.dev
Operations
Angos requires no database or lock service, supports replicas sharing storage, and runs garbage collection, scrub, and prune while serving.Read 11 Oct 2026 · angos.dev
Registry compatibility
Angos supports OCI 1.1 and works with Docker, Podman, containerd, and other OCI tools.Read 11 Oct 2026 · angos.dev
Release verification
The v1.12.2 release says artifacts are signed with keyless Sigstore Cosign using GitHub Actions OIDC.Read 11 Oct 2026 · github.com
Replication
It mirrors repositories to downstream registries in both directions with a durable retry queue.Read 11 Oct 2026 · angos.dev
Retention
Retention rules can keep tags by age, semantic-version pattern, or recent pushes and pulls; immutable tags can protect releases from overwrites.Read 11 Oct 2026 · angos.dev
Scaling
For multiple registry instances, the storage documentation recommends shared S3 storage; filesystem storage is single-instance unless shared storage is used.Read 11 Oct 2026 · angos.dev
Scanning
Trivy or Grype can scan images on push, with reports stored beside the image as OCI referrers.Read 11 Oct 2026 · angos.dev
Security features
Angos supports mutual TLS and can run Trivy or Grype vulnerability scans on push, keeping reports beside images as OCI referrers.Read 11 Oct 2026 · angos.dev
Storage
The project README says Angos stores its data in the image storage, which can be a directory or an S3 bucket.Read 11 Oct 2026 · github.com
Supported downloads
The release page lists standalone binaries for macOS amd64 and arm64 and Linux amd64 and arm64.Read 11 Oct 2026 · github.com

Where Specifiction places it

Alternatives to AngosAll alternatives →