SHSelfHostIndex
QU

Quay

Enterprise-grade container image registry

Developer Tools & Git ★ 2.8k stars Hard setup Apache-2.0

Project Quay is an open-source container image registry that stores, scans, and serves container images and artifacts. It includes vulnerability scanning, geo-replication, and fine-grained access control.

Official siteSource code

Key features

  • Container image hosting
  • Built-in vulnerability scanning
  • Geo-replication
  • Robot accounts and ACLs

Strengths

  • Released under the Apache-2.0 license
  • First-class Docker support for quick deployment
  • Kubernetes-ready with Helm charts available
  • Active community (2.8k GitHub stars)

Is Quay secure?

No known vulnerabilities affect Quay's latest release (v3.18.1). OSV.dev lists 2 past advisories for the project; none of them applies to this release. No known vulnerabilities is not proof of security: it means none have been publicly catalogued.

  • Most recent fixed advisory CVE-2025-4374, published 2025-05-06 (526 days ago), fixed in 3.11.11, 3.14.2, 3.12.10

Source: OSV.dev, checked 2026-10-14. How this is measured.

Quay replaces

Self-hosted Docker Hub alternativesSelf-hosted Harbor alternatives

Health badge

Maintain Quay? Add its health score to your README. The badge links back to this page.

SelfHostIndex: 90 · excellent

Markdown
[![SelfHostIndex health score for Quay](https://selfhostindex.com/badge/quay.svg)](https://selfhostindex.com/app/quay/)
HTML
<a href="https://selfhostindex.com/app/quay/"><img src="https://selfhostindex.com/badge/quay.svg" alt="SelfHostIndex health score for Quay"></a>
reStructuredText
.. image:: https://selfhostindex.com/badge/quay.svg
   :alt: SelfHostIndex health score for Quay
   :target: https://selfhostindex.com/app/quay/

The score is recomputed on every nightly rebuild from public repository data — see how it is calculated.

Compare Quay

4 head-to-head comparisons.

Similar developer tools & git apps