zoom_in Click to enlarge

ORAS

▲ ▼

language

description ORAS Overview

ORAS is a containerization platform leveraging Kubernetes to manage applications across diverse environments. It offers robust image management including registries and scanning capabilities. Primarily designed for organizations requiring secure and automated application deployment at scale, particularly those utilizing hybrid cloud infrastructures.

help ORAS FAQ

What does ORAS actually do with container registries?

ORAS stands for OCI Registry As Storage and lets users push and pull arbitrary artifacts through OCI-compatible registries. These can include Helm charts, software bills of materials, signatures, policies, and other files that are not runnable container images.

Does ORAS require Kubernetes?

No, ORAS is a registry client and library rather than a Kubernetes application platform. Its command-line tool can communicate directly with registries that implement the OCI Distribution Specification.

How is ORAS different from Docker push?

Docker push is primarily organized around container images, while ORAS can package general files and assign them an artifact type. Both use familiar registry concepts such as repositories, tags, manifests, blobs, and immutable digests.

Can ORAS attach an SBOM or signature to an existing image?

Yes, OCI referrers allow an artifact to identify another manifest as its subject. ORAS can use that relationship to associate an SBOM, signature, or attestation with a particular image digest without rebuilding the image.

swap_horiz

Looking for ORAS alternatives? Compare top competitors ranked & scored

arrow_forward