8gears Container Registry vs Harbor

8gears Container Registry manages container images and OCI artifacts through a hardened enterprise distribution of Harbor, built and maintained by Harbor project maintainers and contributors. It supports project organization, replication, proxying, quotas and retention policies. Identity options include OIDC, LDAP, SAML 2.0, group synchronization, fine-grained RBAC and workload identity federation. Security features include Trivy vulnerability scanning, content trust and signing, SSL/TLS encryption, and encrypted storage at rest. Teams can use vulnerability overviews, SBOM, audit trails and image policies for supply-chain visibility. It can run as hosted SaaS, on a customer's cloud, or self-hosted on Kubernetes, including on-premise and air-gapped deployments. Managed cloud options include AWS, Azure, GCP, OCI, Exoscale and StackIT. The free Individuals plan costs nothing and includes 1 GB of storage and unlimited private repositories. Dedicated is billed monthly, with price not displayed, and lists 1000 GB storage. Enterprise pricing is custom.

Harbor is an open-source registry for managing artifacts across cloud-native platforms such as Kubernetes and Docker. It offers a web UI and extensible API, and can be installed on Kubernetes or a system with Docker support. Security features include policies, role-based access control, vulnerability scanning, and image signing and validation. Image scanning uses Trivy when enabled during installation, and Harbor can connect to additional scanners. It replicates images and charts to or from other registries in pull or push mode; listed adapters include Docker Hub, Amazon ECR, Google Container Registry, Azure Container Registry, and GitLab Registry. Authentication options are database, LDAP/Active Directory, and OIDC, though choosing database authentication and adding local users prevents a later switch to another mode. Project storage quotas are unlimited by default but can be set globally or per project. Robot account secrets are not stored by Harbor, so they must be saved when created; robot accounts cannot log into the user interface. Harbor is a CNCF Graduated project. HTTPS is recommended for production use.