skills.rest
harness
harnessOFFICIAL
Explore all skills by this author →
WebsiteGitHub

configure-repo-scan

Insert code scanning steps into existing Harness pipeline YAML.

80|16|Updated Mar 11, 2026
Search Tags:#sast#connector#code-scanning#sca#pipeline-security#harness-mcp
One-click install
npx skills add https://github.com/harness/harness-skills --skill configure-repo-scan
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: configure-repo-scan
Source: https://github.com/harness/harness-skills/tree/main/skills/configure-repo-scan
Command: npx skills add https://github.com/harness/harness-skills --skill configure-repo-scan

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Configure repo scanning in Harness pipelines to automatically inject code scanning steps, helping teams enforce security checks without manual YAML edits.

Core Features & Use Cases

  • Identify where to inject SAST/SCA scanning steps into existing pipelines
  • Recommend appropriate scanners and configure them with proper connectors
  • Work with existing pipelines via MCP to fetch and update YAML definitions
  • Use when asked to add code scanning, configure security scans, or integrate vulnerability scanning

Quick Start

Insert a code-scanning step into your existing Harness pipeline after the code checkout.

Frequently Asked Questions about configure-repo-scan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I add code scanning to an existing Harness pipeline?▼

To add code scanning to a Harness pipeline, this skill analyzes your pipeline YAML, identifies the codebase connector, and outputs a ready-to-insert scanner step using Harness STO.

How do I configure SAST and SCA checks in Harness CI workflows?▼

You can configure SAST and SCA checks in Harness CI workflows by injecting code scanning steps that recommend appropriate scanners and configure them with the correct connectors.

What is the best way to integrate vulnerability scanning into pipeline YAML without manual edits?▼

The best way to integrate vulnerability scanning without manual YAML edits is to automatically fetch and update existing pipeline definitions via MCP to insert scanner steps.

Do I need a specific connector to set up repo scanning in Harness pipelines?▼

Yes, setting up repo scanning requires an existing codebase connector in your pipeline YAML, which the configuration process identifies to attach the SAST/SCA scanning steps.

Can I insert security scans into any stage of my Harness pipeline?▼

Security scans are designed to be inserted into existing Harness pipelines immediately after the code checkout step to effectively analyze the source code.

Why configure repo scans with Harness STO instead of manually updating pipeline YAML?▼

Configuring repo scans with Harness STO automatically outputs ready-to-insert scanner steps, enforcing security checks and eliminating the risk of errors from manual YAML edits.

Related Skills

Explore More Software Engineering Skills→
markus41markus41
18

harness-code-integration

Automate Harness Code repository management, triggers, CI/CD pipelines, and GitOps for AWS EKS.

Community
Advanced
thisrohanguptathisrohangupta
1

security-report

Generate security compliance reports from Harness SCS and STO vulnerability data.

Community
Advanced
webrix-aiwebrix-ai
1

vulnerability-prioritization

Correlate CVE scan results with infrastructure to prioritize patching and create Jira tickets.

Official
Advanced
managedcodemanagedcode
4

mcaf-dotnet-quality-ci

Configure .NET code-quality gates for CI pipelines.

Official
Intermediate