Tech riderRev. 4 Oct 2026

ZenoRegistry

Ch 206.4of 53 Container Registries

1Runs onAPI, self-hosted, Web
2CostsNot stated by the maker
3OCI artifactsYes
4Retention policiesYes

3 lines stated Written from the maker's own pages: citiumsoftware.com

Visit site Alternatives

Overview

ZenoRegistry is ranked #20 of 53 in container registries on Specifiction. It runs on API, Self-hosted, Web.

ZenoRegistry plans and pricing

All plans

Self-hosted licence Not published Contact for licence; no per-seat fees stated citiumsoftware.com · 4 Oct 2026

Compared on container registries

OCI artifacts: Yescitiumsoftware.com
Retention policies: Yescitiumsoftware.com

Facts

Purpose: ZenoRegistry is a self-hosted, OCI-compliant container registry for internal enterprise use.citiumsoftware.com · 4 Oct 2026
Deployment: The server, OCI API, admin REST API, and embedded admin UI ship in one Go binary; PostgreSQL and S3-compatible object storage are its runtime dependencies.citiumsoftware.com · 4 Oct 2026
OCI support: It implements OCI push, pull, tag listing, catalog, chunked uploads, cross-repository blob mounts, and manifest deletion, and the page names Docker, Podman, and nerdctl as compatible clients.citiumsoftware.com · 4 Oct 2026
Storage integrations: Its S3-compatible storage driver works with AWS S3, MinIO, Ceph, DigitalOcean Spaces, Scaleway Object Storage, and other S3-compatible services.citiumsoftware.com · 4 Oct 2026
Identity integrations: Admin dashboard SSO supports OIDC providers including Keycloak, Entra ID, Google Workspace, Authentik, Okta, and Dex; local admin is available as an emergency option.citiumsoftware.com · 4 Oct 2026
Access control: It provides pull, push, and admin roles, with JWT scopes checked per repository and action on OCI requests.citiumsoftware.com · 4 Oct 2026
Image retention: Retention policies can keep a specified number of recent tags or tags within a specified age, protect glob patterns, and enforce a per-repository safety floor; dry-run previews are available.citiumsoftware.com · 4 Oct 2026
Supply chain: The registry recognizes Cosign signatures, attestations, SBOM sibling tags, and multi-architecture references, and excludes signatures and SBOMs from retention deletion.citiumsoftware.com · 4 Oct 2026
Security controls: The page describes bearer JWTs, HTTP-only SameSite=Lax admin session cookies, bcrypt password hashing, configurable token lifetime, native TLS, and OIDC login.citiumsoftware.com · 4 Oct 2026
Operations: It includes a dependency-free health endpoint, graceful shutdown, structured JSON logs, automatic PostgreSQL migrations, and Kubernetes deployment guidance.citiumsoftware.com · 4 Oct 2026
Integrations: The page says Argo CD and Flux can pull from ZenoRegistry and that it ships as a core service in the ZenoKube sovereign cloud platform.citiumsoftware.com · 4 Oct 2026
Intended users: The maker describes it for internal platform teams, sovereign or air-gapped deployments, GitOps, Cosign supply-chain workflows, and organizations seeking a self-hosted alternative to SaaS registries.citiumsoftware.com · 4 Oct 2026
Support: The maker invites customers to contact it for a demo, managed deployment, or self-hosted licence; its contact page says inquiries receive a response within 24 hours on business days.citiumsoftware.com · 4 Oct 2026
Company location: Citium Software describes its European roots as being in Denmark, and its contact page lists Denmark, European Union.citiumsoftware.com · 4 Oct 2026