Create Harness STO security exemptions for vulnerabilities in bulk.
npx skills add https://github.com/harness/harness-skills --skill exempt-vuln
Please help me install this Agent Skill. Skill: exempt-vuln Source: https://github.com/harness/harness-skills/tree/main/skills/exempt-vuln Command: npx skills add https://github.com/harness/harness-skills --skill exempt-vuln
Automates the creation of security exemptions (waivers) for Harness STO vulnerabilities.
Exempt a vulnerability by creating a single exemption for a chosen issue in a specific scope using a False Positive type.
High-intent search queries and answers about installing and using this skill.
To create a security exemption for a Harness STO vulnerability, you specify the target issue, scope, and exemption type such as False Positive. The workflow guides field collection, validation, and approval to generate the waiver.
Yes, you can apply bulk security waivers to multiple vulnerabilities at once. The workflow supports creating up to 100 exemptions simultaneously with per-row error tolerance and all-or-none guarantees.
When waiving CVE vulnerabilities in Harness, you can target multiple scopes including This Project, This Pipeline, and This Target. The exemption process enforces scope rules across both the Vulnerabilities tab and All Issues page.
You can track a security exemption status by checking the returned exemption identifiers and deep links. These outputs provide direct access to review the approval workflow and current standing of the waiver.
Yes, the vulnerability exemption workflow works directly with the All Issues page as well as the Vulnerabilities tab view. It enforces scope rules and returns exemption identifiers with deep links for review.
If one vulnerability fails during bulk exemption creation, the workflow provides per-row tolerance for errors. However, it enforces all-or-none guarantees for bulk actions up to 100 items.
harnessAggregate vulnerabilities, SBOMs, and exemptions via MCP for audit-ready security reports.
BaneeishaqueRename project files, directories, and identifiers to lowercase snake_case.
harnessInsert code scanning steps into existing Harness pipeline YAML.
harnessApprove Harness STO security exemptions at current or elevated scopes via MCP APIs.
