harbor-portalKubernetes, CI & IaC
Harbor's portal UI and nginx reverse proxy, built from source via melange.
Pull this image
docker pull ghcr.io/rtvkiz/minimal-harbor-portal:latestdocker pull ghcr.io/rtvkiz/minimal-harbor-portal:latest-devThe -dev variant adds a shell, package manager and build toolchain. For CI and debugging — not production.
Details
- Repository
- ghcr.io/rtvkiz/minimal-harbor-portal
- Architectures
- x86_64, aarch64
- Primary package
- harbor-portal
Some data was unavailable for this build: partial.
- Entrypoint
- /usr/sbin/nginx -g "daemon off;"
- User
- nginx (65532)
- Working dir
- /
- Architectures
- x86_64, aarch64
- Environment
- Labels
org.opencontainers.image.title minimal-harbor-portal org.opencontainers.image.description Hardened shell-less Harbor portal (UI + nginx reverse proxy) built from source via melange with daily CVE patches org.opencontainers.image.url https://github.com/rtvkiz/minimal org.opencontainers.image.source https://github.com/rtvkiz/minimal/tree/main/images/harbor-portal org.opencontainers.image.licenses Apache-2.0
- Entrypoint
- /usr/sbin/nginx -g "daemon off;"
- User
- nginx (65532)
- Working dir
- /
- Architectures
- x86_64, aarch64
- Environment
- Labels
org.opencontainers.image.title minimal-harbor-portal-dev org.opencontainers.image.description Development variant of the Harbor portal image with debugging tools org.opencontainers.image.url https://github.com/rtvkiz/minimal org.opencontainers.image.source https://github.com/rtvkiz/minimal/tree/main/images/harbor-portal org.opencontainers.image.licenses Apache-2.0
| Tag | Pull | Published |
|---|---|---|
| 2 | ghcr.io/rtvkiz/minimal-harbor-portal:2 | 2026-11-02 |
| 2.14 | ghcr.io/rtvkiz/minimal-harbor-portal:2.14 | 2026-11-02 |
| 2.14.6-r0 | ghcr.io/rtvkiz/minimal-harbor-portal:2.14.6-r0 | 2026-11-02 |
| 2.14.6-r0-20261102 | ghcr.io/rtvkiz/minimal-harbor-portal:2.14.6-r0-20261102 | 2026-11-02 |
| latest | ghcr.io/rtvkiz/minimal-harbor-portal:latest | 2026-11-02 |
| 2-dev | ghcr.io/rtvkiz/minimal-harbor-portal:2-dev | 2026-11-02 |
| 2.14-dev | ghcr.io/rtvkiz/minimal-harbor-portal:2.14-dev | 2026-11-02 |
| 2.14.6-r0-20261102-dev | ghcr.io/rtvkiz/minimal-harbor-portal:2.14.6-r0-20261102-dev | 2026-11-02 |
| 2.14.6-r0-dev | ghcr.io/rtvkiz/minimal-harbor-portal:2.14.6-r0-dev | 2026-11-02 |
| latest-dev | ghcr.io/rtvkiz/minimal-harbor-portal:latest-dev | 2026-11-02 |
| 2.14.6-r0-20261031 | ghcr.io/rtvkiz/minimal-harbor-portal:2.14.6-r0-20261031 | 2026-10-31 |
| 2.14.6-r0-20261031-dev | ghcr.io/rtvkiz/minimal-harbor-portal:2.14.6-r0-20261031-dev | 2026-10-31 |
| 2.14.2-r1 | ghcr.io/rtvkiz/minimal-harbor-portal:2.14.2-r1 | 2026-10-31 |
| 2.14.2-r1-20261031 | ghcr.io/rtvkiz/minimal-harbor-portal:2.14.2-r1-20261031 | 2026-10-31 |
| 2.14.2-r1-20261031-dev | ghcr.io/rtvkiz/minimal-harbor-portal:2.14.2-r1-20261031-dev | 2026-10-31 |
| 2.14.2-r1-dev | ghcr.io/rtvkiz/minimal-harbor-portal:2.14.2-r1-dev | 2026-10-31 |
| 2.14.2-r1-20261030 | ghcr.io/rtvkiz/minimal-harbor-portal:2.14.2-r1-20261030 | 2026-10-30 |
| 2.14.2-r1-20261030-dev | ghcr.io/rtvkiz/minimal-harbor-portal:2.14.2-r1-20261030-dev | 2026-10-30 |
| 2.14.2-r1-20261029 | ghcr.io/rtvkiz/minimal-harbor-portal:2.14.2-r1-20261029 | 2026-10-29 |
| 2.14.2-r1-20261029-dev | ghcr.io/rtvkiz/minimal-harbor-portal:2.14.2-r1-20261029-dev | 2026-10-29 |
| 2.14.2-r1-20261028 | ghcr.io/rtvkiz/minimal-harbor-portal:2.14.2-r1-20261028 | 2026-10-28 |
| 2.14.2-r1-20261028-dev | ghcr.io/rtvkiz/minimal-harbor-portal:2.14.2-r1-20261028-dev | 2026-10-28 |
| 2.14.2-r1-20261027 | ghcr.io/rtvkiz/minimal-harbor-portal:2.14.2-r1-20261027 | 2026-10-27 |
| 2.14.2-r1-20261027-dev | ghcr.io/rtvkiz/minimal-harbor-portal:2.14.2-r1-20261027-dev | 2026-10-27 |
The resolved SBOM isn't available for this build yet — showing the packages requested in the apko build recipe (without resolved versions). The full SBOM appears after the next scheduled build.
No scan data for this build. Advisories appear after the next scheduled CVE scan.
Everything is verifiable without an account. Copy and run:
Build provenance (SLSA v1.0, Build L2)
gh attestation verify oci://ghcr.io/rtvkiz/minimal-harbor-portal:latest --owner rtvkizCosign signature
cosign verify \
--certificate-identity-regexp='https://github.com/rtvkiz/minimal/' \
--certificate-oidc-issuer='https://token.actions.githubusercontent.com' \
ghcr.io/rtvkiz/minimal-harbor-portal:latestSBOM attestation (SPDX)
cosign verify-attestation --type spdxjson \
--certificate-identity-regexp='https://github.com/rtvkiz/minimal/' \
--certificate-oidc-issuer='https://token.actions.githubusercontent.com' \
ghcr.io/rtvkiz/minimal-harbor-portal:latest \
| jq -r '.payload | @base64d | fromjson | .predicate'Signatures are logged in the public Rekor transparency log.
More Kubernetes, CI & IaC images
Weighing this against another provider? Thecomparison pages publish head-to-head scan data with the raw dataset, including the images where Minimal comes off worse — or read themigration guide for what actually breaks when you switch.