---
title: "STACKIT Container Registry"
description: "Managed registry for securely storing, scanning, and distributing OCI container images and Helm charts."
scfAsset:
  category: "service"
  managed: true
  marketplaceUrl: "https://marketplace.stackit.cloud/en/products"
  tags: ["Container Registry", "OCI", "Docker", "Helm", "Security"]
  maintainers:
    - user: "alexander.gabert"
source_url: "https://framework.stackit.cloud/architecture/assetcontainer/stackit/stackit-service-container-registry/"
source_file: "docs/architecture/assetcontainer/stackit/stackit-service-container-registry.mdx"
---

STACKIT Container Registry provides secure storage and distribution for container images.

## Service Overview
- **Zero Registry Operations**: Managed registry backend eliminates self-hosted Harbor/Docker Registry maintenance.
- **Vulnerability Scanning**: Automated Trivy vulnerability scans inspect images upon push.
- **Supply-Chain Security**: Supports tag immutability policies and robot accounts for CI/CD pipelines.

## Technical Details
- **Integrations**: Native integration with STACKIT Kubernetes Engine (SKE) and standard Docker/Podman clients.
- **Access Control**: Scoped RBAC permissions and dedicated robot account API keys.

## Limitations & Constraints
- **Public Endpoint Push**: Pushing and pulling images routes through encrypted public HTTPS endpoints.

<LinkCard title="STACKIT Container Registry Documentation" href="https://docs.stackit.cloud" />