Cratedock

Cratedock hosts container images and OCI artifacts behind your own walls, with vulnerability scanning, image signing, retention policies and replication between instances.

Worth knowing before you commit:

• Role-based access maps cleanly onto team and project boundaries.
• Scheduled scans catch newly disclosed CVEs in images you already pushed.
• Garbage collection needs an occasional maintenance window.

The registry to graduate to once "just use a public one" stops being an answer.