The OCI is an open project under the Linux Foundation that publishes the image, runtime, and distribution specs. It is not a single-vendor engine, not a hosted registry (it defines the registry API, not a service), and not a security scanner — it standardizes formats, not vulnerability testing.
Official docs