Infrastructure & DevOps

GitHub Container Registry

Last updated 2026-07-13 · benchmark measured 2026-09-09 — deterministic & reproducible

GitHub's built-in registry for publishing and pulling Docker and OCI container images, with access inherited from GitHub permissions.

Are you the maker of GitHub Container Registry? Claim this listing. It is free, takes a meta tag, a DNS record or GitHub admin rights, and never changes the score.

Launched something? Add your product, free.

To cite this score: legit.show/s/ghcr-io/2026-09-09. That address never changes; this page moves with every re-measure.

Legit.Show scored GitHub Container Registry 74/100 on 2026-09-09, measured across 5 of 7 frames from its public surface. legit.show/s/ghcr-io/2026-09-09

Is GitHub Container Registry production-ready?

Legit.Show scores GitHub Container Registry 74 out of 100 — the simple average of its 5 measured frames. Legit.Show ran its deterministic 7-Frame production-readiness benchmark on GitHub Container Registry (public-surface assessment), measured from the public surface with no LLM in the scoring path. Its strongest frame is Security; its weakest is Privacy. 5 of the seven frames returned a score; Performance and Accessibility were not measurable on this service and are recorded as null — not as zero. Every frame it averages is published with its evidence on the Legit.Show listing.

The 7 Frames

• Performance — not measurable on this service (null — not scored as 0)
• Accessibility — not measurable on this service (null — not scored as 0)
• Security — 100/100
  How this compares across the catalogue: The Web Security Baseline
• Privacy — 25/100
  How this compares across the catalogue: The Privacy Gap
• Reliability — 70/100
• Standards — 100/100
• Discoverability — 75/100

What we measured

• Security headers present: CSP, HSTS, X-Frame-Options, X-Content-Type-Options, Referrer-Policy.
• Served over HTTPS with a valid certificate.
• Real Lighthouse performance run — 765 ms to first byte.
• Returns a proper 404 for unknown routes.
• 0 of 3 sampled routes reachable.
• No privacy policy found.
• Sets cookies / loads scripts with no consent prompt.
• Discoverable: OpenGraph image, canonical URL.

Who built it

product account @github

Who it's for

Developers · DevOps engineers · Platform teams · Open source maintainers

Pricing

Free tier ($0/month); paid plans available; 30-day free trial of Enterprise with Copilot and Advanced Security

Sources and updates

Description

Taken from ghcr.io's own website on 2026-07-13.

Benchmark

Measured by Legit.Show from the live site, the way any visitor sees it — with no access to its code or accounts. Same method for every product, and no AI decides the score. Last checked 2026-09-09.

Put together from public information, without GitHub Container Registry's involvement. If anything here is wrong, tell us and a person will check it.

Visit GitHub Container Registry → · Alternatives to GitHub Container Registry → · How this was measured →