The safeguards map / 3.7 Admission and owner settings

Harbor

Cloud Native Computing Foundation (foundation). CNCF, graduated. Apache-2.0. Mapped; as of .

Drafted with AI

Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page. How this site is made

A container registry that scans images for vulnerabilities and, per project, blocks pulls of images whose vulnerabilities reach a severity the project administrator selects.

Where it sits

3.7 Admission and owner settings (primary): Scans images for vulnerabilities and, when a project administrator selects a severity level, refuses to serve images at or above it, so vulnerable images are stopped before they run.

Harbor scans images regularly for vulnerabilities and has policy checks to prevent vulnerable images from being deployed.

captured

Select the severity level of vulnerabilities to prevent images from running.

captured

Facts

Concern
security
Names the law
no
Subject
software
Used by
those who run it
Runs
at runtime
Policy comes from
owner-entered settings

Handoffs

None recorded. A mapped entry with no handoff is here for its foundation home.

Collector's note

Placed in 3.7 for the vulnerability gate on image pulls; the registry itself is generic infrastructure and only that documented gate is the leaf function.

Every quote is verbatim from a stored capture of the page linked under it. Placement is our reading of the product's own documentation; no publisher has reviewed or endorsed it. Rows CC BY 4.0. Names, marks and logos belong to their owners; logos identify each product and are not part of the dataset.