Self-hostedOCI registry

>_Deploy in one command. Scan and sign your artifacts. Pull through any upstream. Replicate across clusters.

Get started

Live demo

Run in one command$docker run -d --name sigma -p 3000:3000 ghcr.io/go-sigma/sigma:nightly-alpine

OCI

Store artifacts

OCI images, Helm charts, SBOMs, and any custom artifact type behind one registry.

BUILD

Build images

Build on Docker, Podman, or Kubernetes and push straight into sigma.

SCAN

Scan for CVEs

Trivy-backed scanning on push, with a severity report for every artifact.

SIGN

Sign and verify

Cosign key and keyless signing, verified from the web console.

PROXY

Proxy upstreams

Cache Docker Hub or any registry with per-namespace pull-through rules.

SYNC

Distribute

Replicate across sigma instances, with Dragonfly P2P for large clusters.

Start in one command

Pull the image and run. The server, distribution, worker, and builder all ship in one container, with an embedded database and local storage by default.

Full quickstart

bash

$ docker run -d --name sigma -p 3000:3000 \
      ghcr.io/go-sigma/sigma:nightly-alpine

Architecture

Four processes, one binary. Run them together on a laptop, or split the server, distribution, worker, and builder across a cluster.

Run your own registry

Deploy sigma in a minute, or read the docs to plan a production setup.

Get started Star on GitHub