An open source registry that secures artifacts with policies and RBAC, ensures images are scanned and free from vulnerabilities, and signs images as trusted.