- Home
- Container Registries
- Iron Bank Registry1
On the recordRead 9 Oct 202613 facts
Iron Bank Registry1
Plans and prices
Iron Bank
Free
No cost to contributors or users · Registry1 requires an account for image pulls
Read 9 Oct 2026 · docs-ironbank.dso.mil
On the record
- Authorization limit
- Hardened containers do not themselves have a Certificate to Field or an Authority to Operate.docs-ironbank.dso.mil · read 9 Oct 2026
- Deployment limit
- Iron Bank publishes container images but does not run or automatically deploy them in a user's environment.docs-ironbank.dso.mil · read 9 Oct 2026
- Hardening pipeline
- The Container Hardening Pipeline checks project requirements, builds hardened containers, scans them, and publishes findings to VAT and images to Registry1.docs-ironbank.dso.mil · read 9 Oct 2026
- Image access
- Registry1 does not allow anonymous image pulls; users need a Repo1/Registry1 account.docs-ironbank.dso.mil · read 9 Oct 2026
- Integrations
- The documented ecosystem includes Repo1 Git repositories and CI pipelines, VAT for tracking vulnerability findings and justifications, and tools including Anchore, OpenSCAP, Twistlock, Cosign, and Renovate.docs-ironbank.dso.mil · read 9 Oct 2026
- Publishing restriction
- External container images cannot be uploaded directly to the registry; images must pass through the Iron Bank Container Hardening Pipeline.docs-ironbank.dso.mil · read 9 Oct 2026
- Purpose
- Iron Bank is a Platform One repository that provides hardened software container images and compliance and vulnerability assessments for the Department of Defense.docs-ironbank.dso.mil · read 9 Oct 2026
- Refresh cadence
- Iron Bank images are rebuilt every 24 hours with updated operating system packages.docs-ironbank.dso.mil · read 9 Oct 2026
- Registry
- Registry1 is an OCI-compliant registry where users can download images using the command line.docs-ironbank.dso.mil · read 9 Oct 2026
- Risk information
- Iron Bank provides automated Acceptance Baseline Criteria compliance results and a numeric Overall Risk Assessment score for images.docs-ironbank.dso.mil · read 9 Oct 2026
- Security artifacts
- Hosted containers can include Anchore, Twistlock, and OpenSCAP scan results, ClamAV virus scans, Trufflehog secrets scans, Syft SBOMs, Cosign signatures, and vendor finding justifications.docs-ironbank.dso.mil · read 9 Oct 2026
- Support
- Users can request support by creating repository issues with the appropriate templates, attending Iron Bank weekly sessions, or contacting Iron Bank support directly.docs-ironbank.dso.mil · read 9 Oct 2026
- Supported users
- Iron Bank is intended for DoD organizations consuming or contributing containers, authorization officials assessing application risks, and commercial vendors bringing applications to the DoD.docs-ironbank.dso.mil · read 9 Oct 2026
Alternatives to Iron Bank Registry1
JFrog Container RegistryWebWindows+3Volcengine Container RegistryAndroidiPhone & iPad+5Inedo ProGetWebWindows+3Samsung Cloud Platform Container RegistryAndroidiPhone & iPad+3Chainguard RegistryWebLinux+18gears Container RegistryWebLinux+2Alibaba Cloud Container RegistryWebWindows+2KakaoCloud Container RegistryWebMac+2
