Insert SBOM Policy Enforcement steps into existing Harness pipelines.
npx skills add https://github.com/harness/harness-skills --skill enforce-sbom
Please help me install this Agent Skill. Skill: enforce-sbom Source: https://github.com/harness/harness-skills/tree/main/skills/enforce-sbom Command: npx skills add https://github.com/harness/harness-skills --skill enforce-sbom
This Skill enables teams to enforce SBOM policies within Harness pipelines by inserting an SBOM Policy Enforcement step that validates SBOM attestations and evaluates policy sets before deployment.
To start, provide your pipeline URL or ID, select CI or CD placement, and specify the artifact source and policy sets to enforce.
High-intent search queries and answers about installing and using this skill.
You can enforce SBOM policies by inserting an SscaEnforcement or CdSscaEnforcement step into your pipeline. This validates SBOM attestations and applies OPA rules before allowing deployments to proceed.
You need an existing SBOM artifact and configured policy sets ready. You must also provide the pipeline URL or ID, select CI or CD placement, and specify the artifact source for the enforcement step validation.
Yes, SBOM policy enforcement supports CI, Security, and CD deployment placements. The workflow can insert steps into existing stages or add a new CD deployment stage when required by your pipeline configuration.
SBOM attestation verification uses configurable verifyAttestation settings within the enforcement step. It checks the attestation against specified policy sets to ensure artifacts meet OPA compliance rules before deployment.
SscaEnforcement and CdSscaEnforcement are step types used to apply SBOM policies. CdSscaEnforcement is specifically utilized when adding policy validation directly within a CD deployment stage placement in Harness pipelines.
You configure OPA SBOM rules by specifying policy sets during the enforcement step setup. The inserted step evaluates your SBOM against these rules to block or allow deployments based on policy compliance.
camgrimsecAutomate IaC security policy enforcement with Checkov, OPA, and SBOM generation.
RedHatProductSecurityGenerate SPDX and CycloneDX SBOMs with build provenance attestation.
adaptive-enforcement-labAutomate CI/CD gate enforcement, SBOM generation, vulnerability scanning, and SLSA provenance.
thisrohanguptaCreate and verify OPA governance policies for Harness via MCP.
