JFrog

当然，JFrog JFrog Artifactory 很棒。

但您考虑过这些开源替代方案吗？

它们是免费的，可自托管的，并由社区驱动。

自己检查一下： Harbor  Harbor ,  Quay .

  1. 所以是 Harbor Harbor

    Registry that stores, signs, and scans content

    ★ 25.4K Container Registry Security License: Apache-2.0

    Harbor is an open source trusted cloud native registry project that stores, signs, and scans content. Harbor extends the open source Docker Distribution by adding the functionalities usually required by users such as security, identity and management. Having a registry closer to the build and run environment can improve the image transfer efficiency. Harbor supports replication of images between registries, and also offers advanced security features such as user management, access control and activity auditing.

  2. 所以是 Quay

    Applications and containers Registry

    ★ 2.6K Container Registry Security License: Apache-2.0

    Project Quay builds, stores, and distributes your container images.

    Features

    • Store your containers securely: Ensure your apps are stored privately, with access that you control. Quay is teamwork optimized, with powerful access controls.
    • Build & deploy new containers easily: Use Quay to automate your container builds, with integration to GitHub, Bitbucket, and more. Robot accounts allow you to lock down automated access and audit each deployment.
    • Automatic Security Scanning: Quay continually scans your containers for vulnerabilities, giving you complete visibility into known issues and how to fix them.