skills.rest
ConnectiveTCS
ConnectiveTCSCOMMUNITY
Explore all skills by this author →
GitHub

harbor-expert

Enforce Trivy scanning, Cosign signing, and RBAC on Harbor registries.

Updated Apr 5, 2026
Search Tags:#rbac#replication#vulnerability-management#image-signing#harbor#registry-security#content-trust
One-click install
npx skills add https://github.com/ConnectiveTCS/Gradient_Generator --skill harbor-expert-connectivetcs
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: harbor-expert
Source: https://github.com/ConnectiveTCS/Gradient_Generator/tree/main/.agents/skills/harbor-expert
Command: npx skills add https://github.com/ConnectiveTCS/Gradient_Generator --skill harbor-expert-connectivetcs

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Harbor deployments require cohesive security policies, reliable image signing, vulnerability management, and scalable replication across regions. This Skill provides a security-first blueprint for deploying and operating Harbor with integrated scanning, signing, RBAC, and DR capabilities.

Core Features & Use Cases

  • Registry Operations: Deploy and manage Harbor with robust storage backends, quotas, and health monitoring.
  • Security & Compliance: Enforce Trivy scanning, CVE policies, content trust, Notary/Cosign signing, SBOM, and audit trails.
  • Access & Replication: Implement project-based RBAC, robot accounts, OIDC/LDAP, and multi-region replication with failover planning.
  • Use Case: A global organization runs Harbor across regions, ensuring signed images, automated scans, and rapid DR so deployments meet compliance requirements.

Quick Start

Enable Trivy scanning, turn on content trust with Cosign via OIDC, and set up a basic cross-region replication.

Frequently Asked Questions about harbor-expert

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I enforce vulnerability scanning and image signing in Harbor registries?▼

To enforce vulnerability scanning and image signing in Harbor registries, enable Trivy scanning and activate content trust with Cosign via OIDC signing. This ensures only verified images pass deployment policies.

What is the best way to configure multi-region replication for Harbor deployments?▼

Configuring multi-region replication for Harbor deployments involves setting up cross-region replication policies via the Harbor API, establishing webhook configurations, and planning failover strategies to ensure rapid disaster recovery.

How do I set up RBAC and robot accounts for Harbor registry access control?▼

To set up RBAC and robot accounts for Harbor registry access control, implement project-based permissions and integrate OIDC or LDAP authentication, restricting CI/CD pipeline access securely.

Do I need Trivy and Cosign to secure Harbor registry content trust?▼

Yes, securing Harbor registry content trust requires Trivy for vulnerability scanning and Cosign for OIDC image signing. These dependencies enforce security policies and compliance reporting across multi-region Harbor deployments.

Why use immutable tags and SBOM for Harbor registry security?▼

Using immutable tags prevents unauthorized image alterations, while SBOM generation provides software composition analysis. Together with audit trails, they ensure Harbor deployments meet strict compliance requirements.

Can I automate Harbor security policies through CI/CD pipelines?▼

Yes, you can automate Harbor security policies through CI/CD pipelines by configuring the Harbor API to enforce Trivy scanning, Cosign signing, and RBAC checks during the image build and deployment process.

Related Skills

Explore More Software Engineering Skills→
martinholovskymartinholovsky
45

harbor-expert

Administer Harbor container registries with Trivy scanning, RBAC, and replication.

Community
Advanced
nicolasmosquerarnicolasmosquerar
1

Disaster Recovery Blueprints

Orchestrate multi-region disaster recovery with automated failover and cross-region replication.

Community
Advanced
orangehrmorangehrm
1.1k

auth-providers

Diagnose and configure OrangeHRM authentication, including LDAP, OAuth2, and OpenID Connect.

Official
Advanced
devendrapratapsinghdevendrapratapsingh
1

platform-security

Audit container images, Kubernetes configurations, cloud environments, and infrastructure as code for security vulnerabilities.

Community
Advanced