manage-artifacts

Name: manage-artifacts
Availability: InStock
Author: Harness

Configure Harness Artifact Registry repositories, RBAC, replication, and security scanning policies.

80|16|Updated Mar 11, 2026

Search Tags:#rbac #replication #artifact #security-scanning #license-compliance #artifact-registry #cve-thresholds

Ready to run

npx skills add https://github.com/harness/harness-skills --skill manage-artifacts

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: manage-artifacts
Source: https://github.com/harness/harness-skills/tree/main/skills/manage-artifacts
Command: npx skills add https://github.com/harness/harness-skills --skill manage-artifacts

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Harness Artifact Registry (AR) configuration and governance automation to simplify creating private registries, applying RBAC, enabling replication, and enforcing security policies.

Core Features & Use Cases

Private Registry Setup for Docker, Helm, Maven, npm, and PyPI with RBAC and replication
Security Scanning Policy with CVE thresholds and license checks
Cross-region replication and SBOM generation for compliant artifact delivery
Upstream proxies to cache public images and reduce build times

Quick Start

Configure a private Docker registry with RBAC and enable security scanning for images.

Frequently Asked Questions about manage-artifacts

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I configure a private Docker registry with RBAC and security scanning?▼

To configure a private Docker registry with RBAC and security scanning, you collect the target scope, select the Docker repository type in Harness Artifact Registry, and enforce policies with CVE thresholds and license checks.

How does cross-region replication work for private artifact registries?▼

Cross-region replication in artifact registries works by synchronizing repositories across multiple environments to ensure compliant artifact delivery and high availability for distributed teams pulling Docker or Helm packages.

Can I set up upstream proxies to cache public npm and PyPI packages?▼

Yes, you can set up upstream proxies to cache public npm and PyPI packages, which reduces external network dependencies and significantly cuts down build times during continuous integration.

What is the best way to generate SBOMs for artifacts in a registry?▼

The best way to generate SBOMs for registry artifacts is by using CycloneDX or SPDX formats during the security scanning phase, producing standardized software bills of materials for compliant artifact delivery.

How do I enforce CVE thresholds and license compliance for Helm repositories?▼

You enforce CVE thresholds and license compliance for Helm repositories by applying security scanning policies that evaluate artifact metadata against configured vulnerability rules before permitting deployment.

Does Harness Artifact Registry support Maven and npm repository creation with security policies?▼

Yes, Harness Artifact Registry supports creating Maven and npm repositories, allowing you to apply RBAC, configure upstream proxies, and enforce security scanning policies across these package types.