Harbor
An open source trusted cloud native registry project that stores, signs, and scans content.
- 25
- Projects
- 4
- Years active
- 1
- In 2026 T3
Projects
252026
6 projectsTerm 3 · Sep-Nov · 1 project
Air-Gapped Peer-to-Peer Image Proxying in Harbor-Satellite
LFX Mentorship · Listed in the official cohort
Harbor Satellite makes OCI images and artifacts available at edge locations. In air-gapped or intermittently connected deployments, a Satellite that misses an artifact currently depends on a central registry, Ground Control, or manually imported offline media. This creates unnecessary operational work when another trusted Satellite on the same local network already has the required content. This project will add an opt-in peer-to-peer distribution mode for Harbor Satellite. A Satellite will be able to use a configured set of trusted local peers, identify a peer that has a requested OCI artifact, and copy that artifact into its own local registry. The design must work without Internet or Ground Control connectivity and preserve OCI digest-based integrity verification.
- Go
- OCI Distribution Spec
- OCI Image Spec
- ORAS
- go-containerregistry
Term 2 · Jun-Aug · 2 projects
Harbor CLI: Bubbletea v2 TUI Refactor and OIDC Device-Flow Login
LFX Mentorship · Listed in the official cohort
Harbor CLI needs two foundational improvements this term. First, migrate the TUI from Bubbletea v1 to v2 and refactor the fragmented list/table/selection models into a unified loadingtablelist abstraction with consistent loading, pagination, and error states across all commands. Second, replace static credentials with an OAuth 2.0 Device Authorization Grant (RFC 8628) and OIDC login flow so users and CI/CD pipelines can authenticate against Harbor through their identity provider without long-lived secrets.
- Go
- Charmbracelet Bubbletea
- OAuth 2.0 / OIDC
- spf13/cobra
- testing
Harbor Satellite: Ground Control CLI and Kubernetes Fleet Operator
LFX Mentorship · Listed in the official cohort
Harbor Satellite needs first-class fleet management on top of the new Swagger-first Ground Control API. The mentee will build a groundctl CLI generated from the OpenAPI spec covering satellite lifecycle, user management, and a GitOps-style apply -f workflow, and pair it with a lightweight Kubernetes operator that manages Satellite instances as custom resources so fleets can be driven through ArgoCD or Flux on edge clusters (k3s, RKE2, microk8s).
- Go
- OpenAPI/Swagger
- spf13/cobra
- Kubernetes (CRDs
- controller-runtime
- kubebuilder)
- +2
Term 1 · Mar-May · 3 projects
Harbor CLI
LFX Mentorship · Listed in the official cohort
Harbor CLI is the official command-line interface for Harbor container registry. This project focuses on improving CLI user experience by porting the remaining complex commands such as job service dashboard and audit logs streaming, and enhancing the release pipeline for simplicity and security.
- Go
- spf13/cobra
Harbor Satellite
LFX Mentorship · Listed in the official cohort
Harbor Satellite is a lightweight OCI-compliant registry designed for edge devices. This project focuses on implementing SPIFFE/SPIRE-based authentication for satellite identity management, improving the release pipeline and developer workflow, and ensuring cloud-agnostic compatibility across Kubernetes, Docker, VMs, and bare metal environments.
- Go
- Containers
- SPIFFE/SPIRE
- Edge Computing
- OCI Spec
Harbor Satellite - Hardware-Backed Zero-Trust Device Identity via PARSEC
LFX Mentorship · Listed in the official cohort
Harbor Satellite provides software-based config encryption and device fingerprinting for edge registries. This project hardens the security model by integrating CNCF PARSEC to enable hardware-backed zero-trust provisioning (ZTP), X.509 device certificates, and device identity. Mentees will implement a secure backend toward a hardware root of trust to enable device attestation via PARSEC's platform-agnostic API, hardware-sealed config encryption with graceful software fallback, and verifiable device identity that Ground Control can cryptographically validate. The work extends the existing SPIFFE/SPIRE authentication with hardware root-of-trust, advancing Harbor Satellite toward a fully zero-trust edge registry with hardware-attested device enrollment.
- Go
- Containers
- PARSEC
- SPIFFE/SPIRE
- Edge Computing
- Cryptography
- +1
2025
9 projectsTerm 3 · Sep-Nov · 4 projects
Extend Harbor's Pluggable Scanner API for Runtime Behavior Profiles
LFX Mentorship · Listed in the official cohort
Harbor is a widely adopted container registry. As one of the most widely adopted container registries, it is a critical component in modern software supply chains. This project aims to enhance its security capabilities by extending Harbor's Pluggable Scanner specification to support Runtime Behavior Profiles (also known as a Behavior of Bill, or "BoB"). While Software Bill of Materials (SBOMs) describe what an artifact *contains*, a BoB describes how it *behaves* at runtime. By integrating kubescape-node-agent as a scanner, Harbor will be able to retrieve, store, and display these runtime profiles for OCI artifacts. This allows software producers to ship secure-by-default configurations and provides consumers with a way to verify runtime behavior, detect anomalies, and report unexpected activity. This feature will create greater trust in artifacts and help users meet emerging compliance requirements, such as the EU's CyberResilience Act, by enabling active breach identification through anomaly detection.
- Go
- REST API Design
- Kubernetes
- Containers and OCI Image/Distribution Specifications
- Familiarity with software supply chain security concepts (SBOM
- SPDX)
Harbor CLI - System Settings and Configuration
LFX Mentorship · Listed in the official cohort
Harbor is a widely adopted container registry, and its initial CLI has been developed by LFX mentees. The goal is to extend this CLI by implementing additional functionalities and workflows that are currently only available in the Web UI. The CLI should be useful for Harbor administrators and users, especially to manage workflows within CI/CD pipelines. We seek a Golang-experienced mentee to enhance the CLI independently.
- Go
- spf13/cobra
- Harbor
Harbor Satellite: Implementing a Eventing System for Satellite
LFX Mentorship · Listed in the official cohort
Harbor Satellite is a lightweight, OCI-compliant registry (currently based on Zot) designed to run on edge devices, such as Raspberry Pi or ARM-based hardware. It acts as a local container registry for edge devices and workloads. The satellite autonomously fetches configuration and state, registers with Ground Control, reports its status, and optionally sends system-level events to connected edge systems.
- Go
- Containers
- Edge Computing
- OCI Image/Distribution Spec
- Webhooks
- Event-Driven Architecture
Harbor Satellite: Q&A and Docs
LFX Mentorship · Listed in the official cohort
As edge computing grows, managing container registries at edge becomes a challenge. As the Harbor satellite project matures and evolves, we need to improve the code quality, the release process and user documentation.
- Go
- GitHub workflow
- Dagger
- Testing
- Q&A
- Good writing and communication
Term 2 · Jun-Aug · 3 projects
Harbor CLI
LFX Mentorship · Listed in the official cohort
Harbor is a widely adopted container registry, and its initial CLI has been developed by LFX mentees. The goal is to extend this CLI by implementing additional functionalities and workflows that are currently only available in the Web UI. The CLI should be useful for Harbor administrators and users, especially to manage workflows within CI/CD pipelines. We seek a Golang-experienced mentee to enhance the CLI independently.
- Go
- spf13/cobra
Harbor Satellite: Implementing a Eventing System for Satellite
LFX Mentorship · Listed in the official cohort
Harbor Satellite is a lightweight, OCI-compliant registry (currently based on Zot) designed to run on edge devices, such as Raspberry Pi or ARM-based hardware. It acts as a local container registry for edge devices and workloads. The satellite autonomously fetches configuration and state, registers with Ground Control, reports its status, and optionally sends system-level events to connected edge systems.
- Go
- Containers
- Edge Computing
- OCI Image/Distribution Spec
- Webhooks
- Event-Driven Architecture
Implementing Ground Control for Harbor Satellite
LFX Mentorship · Listed in the official cohort
As edge computing grows, managing container registries at edge becomes a challenge. Ground Control (GC) is a centralized control plane that manages and coordinates distributed edge registries, known as satellites. GC handles satellite registration, state management, robot account creation and management. It is deployed near the central Harbor registry and acts as the brain of the distributed registry system.
- REST API
- Go
- GitHub workflow
- Dagger
- PostgreSQL
- sqlc
- +2
Term 1 · Mar-May · 2 projects
Harbor CLI
LFX Mentorship · Listed in the official cohort
Harbor is a widely adopted container registry, and its initial CLI has been developed by LFX mentees. The goal is to extend this CLI by implementing additional functionalities and workflows that are currently only available in the Web UI. The CLI should be useful for Harbor administrators and users, especially to manage workflows within CI/CD pipelines. We seek a Golang-experienced mentee to enhance the CLI independently.
- Go
- spf13/cobra
Harbor Satellite
LFX Mentorship · Listed in the official cohort
Containers have extended beyond their traditional cloud environments, becoming increasingly prevalent in remote and edge computing contexts. These environments often lack reliable internet connectivity, posing significant challenges in managing and running containerized applications due to difficulties in fetching container images. To address this, the project aims to decentralize container registries, making them more accessible to edge devices.
- Go
- Container
- Image-spec
- Distribution-spec
2024
6 projectsTerm 3 · Sep-Nov · 2 projects
Harbor CLI
LFX Mentorship · Listed in the official cohort
Harbor is a popular and widely adopted container registry. LFX manatees have developed an initial CLI ( that we would like to extend and implement additional functionality, and common workflows that are currently only present in the Web UI. We are seeking a Golang experienced manatee who can work on the project independently.
- Go
- spf13/cobra
Harbor Satellite
LFX Mentorship · Listed in the official cohort
Containers have extended beyond their traditional cloud environments, becoming increasingly prevalent in remote and edge computing contexts. These environments often lack reliable internet connectivity, posing significant challenges in managing and running containerized applications due to difficulties in fetching container images. To address this, the project aims to decentralize container registries, making them more accessible to edge devices.
- Go
- Container
- Image-spec
- Distribution-spec
Term 2 · Jun-Aug · 2 projects
Harbor CLI
LFX Mentorship · Listed in the official cohort
Harbor is a popular and widely adopted container registry. We have developed an initial CLI ( that we would like to extend and implement additional functionality, and common workflows that are currently only present in the Web UI. We are seeking a Golangs experienced manatee who can work on the project independently.
- Go
- spf13/cobra
Harbor Satellite
LFX Mentorship · Listed in the official cohort
In recent years, containers have extended beyond their traditional cloud environments, becoming increasingly prevalent in remote and edge computing contexts. These environments often lack reliable internet connectivity, posing significant challenges in managing and running containerized applications due to difficulties in fetching container images. To address this, the project aims to decentralize container registries, making them more accessible to edge devices. The need for a satellite that can operate independently, store images on disk, and run indefinitely with stored data is crucial for maintaining operations in areas with limited or no internet connectivity. Harbor Satellite aims to bring Harbor container registries to edge locations, ensuring consistent, available, and integrity-checked images for edge computing environments. This proposal outlines the development of a stateful, standalone satellite that can function as a primary registry for edge locations and as a fallback option if the central Harbor registry is unavailable.
- Go
- Container
- Image-spec
- Distribution-spec
Term 1 · Mar-May · 2 projects
Harbor CLI
LFX Mentorship · Listed in the official cohort
Harbor is a popular and widely adopted container registry. We have developed an initial CLI ( that we would like to extend and implement additional functionality, and common workflows that are currently only present in the Web UI. We are seeking a Golangs experienced manatee who can work on the project independently.
- Go
- spf13/cobra
Harbor Satellite
LFX Mentorship · Listed in the official cohort
Containers are becoming more and more omnipresent, event outside their natural habitat, the cloud. It is not common today to see that container are running on small and remote devices on the EDGE. Those fleets of devices often don’t have a reliable internet connection or no internet connection at all. Running containers without being able to fetch images is a hard thing to do. So we are bringing the registry closer to the appliances where they are running. Since we are not talking about a few registries but many more, it becomes challenging to manage all the registries, this is where the satellite concept comes into place where images are distributes from a central registry. The following slides and video outline the concept and its purpose in more detail.
- Go
- OSS contributions
- distributed systems
2023
4 projectsTerm 1 · Mar-May · 4 projects
An official Golang API client and CLI for Harbor
LFX Mentorship · Listed in the official cohort
Design, plan and implement an Golang API client for Harbor
- Go
- spf13/cobra
Harbor Robot accounts with full Harbor API access
LFX Mentorship · Listed in the official cohort
Robot accounts should be allowed to access the full Harbor API (more of a UI thing)
- Angular
- JavaScript
- Go
- UI/UX
- Clarity
Implement per project and/or for the whole instance vulnerability overview
LFX Mentorship · Listed in the official cohort
Design, plan and implement an and UI and backend to be able to visualize per project and/or for the registry vulnerability overview which will allow better security audits and vulenrability mitigation
- Angular
- JavaScript
- Go
- UI/UX
- Clarity
Regex replication rules
LFX Mentorship · Listed in the official cohort
Add more versatile replication filters
- Angular
- JavaScript
- Go
