harbor-expert

Name: harbor-expert
Availability: InStock
Author: connectivetcs

Enforce Trivy scanning, Cosign signing, and RBAC on Harbor registries.

Updated Apr 5, 2026

Search Tags:#rbac #replication #vulnerability-management #image-signing #harbor #registry-security #content-trust

Ready to run

npx skills add https://github.com/ConnectiveTCS/Gradient_Generator --skill harbor-expert-connectivetcs

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: harbor-expert
Source: https://github.com/ConnectiveTCS/Gradient_Generator/tree/main/.agents/skills/harbor-expert
Command: npx skills add https://github.com/ConnectiveTCS/Gradient_Generator --skill harbor-expert-connectivetcs

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Harbor deployments require cohesive security policies, reliable image signing, vulnerability management, and scalable replication across regions. This Skill provides a security-first blueprint for deploying and operating Harbor with integrated scanning, signing, RBAC, and DR capabilities.

Core Features & Use Cases

Registry Operations: Deploy and manage Harbor with robust storage backends, quotas, and health monitoring.
Security & Compliance: Enforce Trivy scanning, CVE policies, content trust, Notary/Cosign signing, SBOM, and audit trails.
Access & Replication: Implement project-based RBAC, robot accounts, OIDC/LDAP, and multi-region replication with failover planning.
Use Case: A global organization runs Harbor across regions, ensuring signed images, automated scans, and rapid DR so deployments meet compliance requirements.

Quick Start

Enable Trivy scanning, turn on content trust with Cosign via OIDC, and set up a basic cross-region replication.

Frequently Asked Questions about harbor-expert

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I enforce vulnerability scanning and image signing in Harbor registries?▼

To enforce vulnerability scanning and image signing in Harbor registries, enable Trivy scanning and activate content trust with Cosign via OIDC signing. This ensures only verified images pass deployment policies.

What is the best way to configure multi-region replication for Harbor deployments?▼

Configuring multi-region replication for Harbor deployments involves setting up cross-region replication policies via the Harbor API, establishing webhook configurations, and planning failover strategies to ensure rapid disaster recovery.

How do I set up RBAC and robot accounts for Harbor registry access control?▼

To set up RBAC and robot accounts for Harbor registry access control, implement project-based permissions and integrate OIDC or LDAP authentication, restricting CI/CD pipeline access securely.

Do I need Trivy and Cosign to secure Harbor registry content trust?▼

Yes, securing Harbor registry content trust requires Trivy for vulnerability scanning and Cosign for OIDC image signing. These dependencies enforce security policies and compliance reporting across multi-region Harbor deployments.

Why use immutable tags and SBOM for Harbor registry security?▼

Using immutable tags prevents unauthorized image alterations, while SBOM generation provides software composition analysis. Together with audit trails, they ensure Harbor deployments meet strict compliance requirements.

Can I automate Harbor security policies through CI/CD pipelines?▼

Yes, you can automate Harbor security policies through CI/CD pipelines by configuring the Harbor API to enforce Trivy scanning, Cosign signing, and RBAC checks during the image build and deployment process.