Skip to main content

Integrations and permissions

Harness requires gathering data from all relevant entities to perform security scanning and apply standards across multiple software supply chain entities. The SSCA module facilitates this by using Harness-built integration apps that connect with these entities and fetch the necessary data. These entities include code repositories, artifacts, and CI/CD toolchains.

note

Currently, Harness supports only Code Repositories, and specifically GitHub. In the near future, Harness will add support for other entities.

To find all the integrations, navigate to the “Integrations” section within the SSCA module. From here, you can perform various operations, including:

  • Adding a new integration
  • Updating an existing integration
  • Deleting an integration
  • Filtering by integration status
  • Searching for a specific integration

GitHub App Integration​

You can configure your GitHub account directly from the “Get Started” section or by clicking “Add Integration” in the Integrations section.

The integration is done by installing the Harness-SSCA app on GitHub. This app, developed by Harness, facilitates the connection between your GitHub account and Harness SSCA.

Permission required for the GitHub app​

The GitHub app requires read level permissions on your code repositories and organization settings.