configure-container-scan

To add a container image scan to a Harness pipeline, you provide your pipeline name, image details, and preferred scanner. The configuration generates the appropriate Harness STO step YAML to automate vulnerability detection.

Yes, you can use Aqua Trivy, Snyk, Grype, Prisma Cloud, Anchore, Black Duck, Wiz, or Harness SCA for container scanning. The configuration generates the appropriate STO step YAML with proper authentication blocks when credentials exist.

The container scanner can insert the scan step directly into an existing CI stage. Alternatively, it can create a dedicated SecurityTests stage to isolate your container image scanning workflow within the pipeline.

Configuring a commercial scanner requires selecting your scanner, providing image registry details, and supplying credentials. The configuration uses these inputs to generate Harness STO step YAML with proper authentication blocks.

Generating dedicated STO step YAML for container image vulnerability scanning ensures vulnerabilities are detected early in the pipeline. It standardizes security testing across supported scanners like Wiz, Anchore, and Black Duck.