enforce-sbom

What problem does it solve?

This Skill enables teams to enforce SBOM policies within Harness pipelines by inserting an SBOM Policy Enforcement step that validates SBOM attestations and evaluates policy sets before deployment.

Core Features & Use Cases

• Adds an SBOM Policy Enforcement step (SscaEnforcement / CdSscaEnforcement) to existing pipelines to verify attestations and apply OPA SBOM rules.
• Supports CI, Security, and CD deployment placements, including adding a CD deployment stage when needed.
• Guides users through a wizard-like workflow to collect pipeline, source, and policy information and then updates the YAML pipeline accordingly.

Quick Start

To start, provide your pipeline URL or ID, select CI or CD placement, and specify the artifact source and policy sets to enforce.