54 docs tagged with "harness-scs"

Risk and compliance posture of your CI/CD

View Compliance Reports across the Repos using Harness Dashboards

Assess and understand the risk posture of your software supply chain

View component summary dashboard across Artifacts and Code Repositories

View Component Violations for Artifacts and Code Repositories

Configure how SCS pipelines pull plugin images, including using a private registry instead of the default public source.

Learn to create and manage your remediation tracker

Create SBOM policies using OPA.

Create SLSA policies using OPA.

Manage SCS Settings

Filter dependencies via direct and indirect dependencies.

Use SCS GitHub Actions to implement SBOM Verification and Policy Enforcement.

Use SCS GitLab CI/CD to implement SBOM Verification and Policy Enforcement.

Use SCS to implement SBOM Policy Enforcement.

Learn about the categories used to calculate the EOL score

Generate and Attest SBOM with Harness Github Actions

Learn how to use Harness GitLab CI/CD to generate a Software Bill of Materials (SBOM) and attest it for supply chain verification.

Learn how to generate an AI Bill of Materials (AIBOM) for your repositories to gain visibility into AI model dependencies and supply chain risks.

Generate SBOM for Artifacts using Harness SCS

Generate SBOM for Repositories using Harness SCS

Generate SLSA Provenance with Harness SCS

Use Harness GitHub Actions to Generate SLSA Provenance

Use Harness GitLab CI/CD to Generate SLSA Provenance

Get started with Harness SCS

Basic terminology and concepts related to SCS

Secure your software supply chain with Harness SCS

Track the deployment of your open-source components

Ingest and Attest SBOM with Harness Github Actions

Ingest and Attest SBOM with Harness GitLab CI/CD

Harness SCS can ingest data from any scanner that can generate SBOM

Harness SCS can ingest data from STO scanners that can generate an SBOM.

Categorize individual licenses into standard families to quickly understand their impact and risk.

View License Reports across the projects using Harness Dashboards

Configure and enforce SBOM policies in Harness SCS using OPA templates for allow list, deny list, and package age rules, apply them in the SBOM Policy Enforcement step during pipeline execution, and review policy violations and skipped dependency counts.

Manage SCS Roles and Permissions with RBAC.

Onboard Bitbucket repositories in SCS to perform repository security and posture management.

Onboard GitHub repositories in SCS to perform repository security and posture management.

Manage and mitigate security risks in your open source components effectively.

Remediate security risks in your open source components effectively.

Use Harness SCS to comply with SLSA Levels

Identify and track vulnerable artifacts using Remediation tracker.

Security, risk and compliance posture of your code repositories.

View and manage the standards and associated rules supported by Harness SCS

Understanding the process of generate and manage SBOMs with Harness SCS

Use Harness GitLab CI/CD to sign artifacts

Sign your artifacts using Harness SCS

Learn to track your remediation progress in a given tracker

Use Harness GitLab CI/CD to verify artifacts

Verify SLSA Provenance with Harness SCS

Use Harness GitHub Actions to Verify SLSA Provenance

Use Harness GitLab CI/CD to Verify SLSA Provenance

Verify the artifacts that are signed using the Artifact Signing step

Learn how to write policy definitions for SBOM policy files.

Use the Zero Day Agent to detect and remediate zero-day vulnerabilities across your software supply chain.