Container security with Harbor integration

Feature availability This feature is available with Enterprise plans. See pricing plans for more details.

Snyk integrates with Harbor Container Registry to enable you to import your container images and monitor them for vulnerabilities.

Snyk tests the images you have imported (referred to as Projects) for any known security vulnerabilities, testing them at a frequency you control, and alerts you when new issues are detected.

Follow these instructions to set up Harbor integration in Snyk and start managing image vulnerabilities.:

Prerequisites for Harbor integration

• You must be an administrator for the organization you are configuring in Snyk.

• Snyk needs user credentials to integrate with Harbor and does not support Harbor when configured for single sign-on (SSO).

Configure integration

1. In your Snyk account, navigate to Integrations from the menu bar at the top. Under the Container Registries section, select the Harbor option.

2. In the Account credentials section, enter your Harbor username and password login credentials.

3. In the Container registry name fill in the full URL to the registry you want to integrate with.

4. To finish, select Save.

If you are using a self-hosted Harbor registry, contact Snyk to provide you with a token. For more information about setting up private registry integration see Snyk Container for self-hosted container registries (with broker).

Harbor Account credentials and Container registry name

Note To set up the integration, the Harbor user should be an admin user. It currently uses /v2/_catalog endpoint for listing repos.

Harbor Account credentials with Broker token

Snyk tests the connection values and the page reloads, now displaying Harbor integration information, and the Add your Harbor images to Snyk button becomes available. In case the connection to Harbor failed, notification appears under the Connected to Harbor section. Now you can use Snyk to scan your images from Harbor.