Tools/Harbor
Harbor
CNCF open-source container registry — RBAC, image signing, and built-in vulnerability scanning (via Trivy). Closest feature-for-feature open-source match to Amazon_ECR; plain Docker Registry (registry:2) is the bare-minimum option without Harbor's RBAC/scanning layer.