Create a registry
In DevOps → Registry click “Create registry”. On-prem installs it on one of your servers (data stays in your network); Cloud creates a namespace on the central whycloud registry.

Push and pull
docker login with a personal or robot token and push images. Access follows organization roles and tokens stop working the moment a member leaves.
Proxy cache
Define mirrors for Docker Hub, Quay, GHCR and others so public images are fetched once and served from your network.
Scanning and retention
Every image is scanned with Trivy and vulnerabilities are grouped by severity. Retention rules delete old tags automatically.