harbor-expert

Administer Harbor container registries with Trivy scanning, RBAC, and replication.

45|4|Updated Nov 25, 2025

Search Tags:#rbac #disaster recovery #container registry #replication #security scanning #trivy #harbor

Ready to run

npx skills add https://github.com/martinholovsky/claude-skills-generator --skill harbor-expert

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: harbor-expert
Source: https://github.com/martinholovsky/claude-skills-generator/tree/main/skills/harbor-expert
Command: npx skills add https://github.com/martinholovsky/claude-skills-generator --skill harbor-expert

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill provides expert guidance and automation for managing Harbor container registries, ensuring robust security, efficient operations, and reliable disaster recovery.

Core Features & Use Cases

Registry Management: Deploy, configure, and optimize Harbor for security and performance.
Security Scanning: Integrate Trivy for vulnerability scanning and enforce CVE policies.
Artifact Signing: Implement content trust with Notary and Cosign.
Access Control: Configure RBAC and robot accounts for secure access.
Replication & DR: Set up multi-region replication and disaster recovery strategies.
Use Case: Secure your CI/CD pipeline by ensuring all images pushed to Harbor are scanned for vulnerabilities, signed, and only accessible via scoped robot accounts.

Quick Start

Use the harbor-expert skill to configure a new Harbor registry with Trivy scanning and RBAC enabled.

Frequently Asked Questions about harbor-expert

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I configure Harbor registry with Trivy vulnerability scanning and RBAC?▼

To configure Harbor with Trivy and RBAC, you deploy the registry, enable Trivy scanning, and define access control policies. This setup enforces vulnerability scanning and restricts image access using scoped robot accounts.

What is the best way to set up multi-region replication for a Harbor container registry?▼

The best way to set up Harbor multi-region replication is to configure remote replication rules targeting secondary instances. This synchronizes artifacts across regions, ensuring reliable access and supporting robust disaster recovery.

How does artifact signing with Notary and Cosign work in Harbor?▼

Artifact signing with Notary and Cosign in Harbor works by attaching cryptographic signatures to container images. This implements content trust, verifying that deployed images are authentic and have not been tampered with.

Can I use robot accounts to secure CI/CD pipeline access to Harbor?▼

Yes, you can use robot accounts to secure CI/CD pipeline access to Harbor. By assigning scoped permissions through RBAC, robot accounts ensure automated systems can push and pull images without exposing human credentials.

When do I need to enforce CVE policies in a container registry?▼

You need to enforce CVE policies in a container registry when securing enterprise environments. Enforcing these policies prevents vulnerable images from being deployed, ensuring compliance and reliable software management.