ReadMeFeed / Community knowledge
Real questions. Useful conversations. Find the people who know your stack.
Immutable tag enforcement in Harbor blocks overwriting an existing tag digest at push time, making image promotion reproducible and preventing silent drift in CI/CD pipelines.
Learn how to lock down container image tags in Harbor so that once an image is pushed it can’t be overwritten. The guide covers prerequisites, UI and API steps, validation checks, and recovery options so you can protect production releases without breaking CI pipelines.
A minimal Harbor lifecycle uses per-project retention policies, immutable tag rules for releases, scheduled garbage collection, and scoped robot accounts to bound storage growth while protecting release artifacts.
harbor
docker