> For the complete documentation index, see [llms.txt](https://developer.harness.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://developer.harness.io/artifact-registry/use-artifact-registry/platform-integrations/security-integrations/ar-security.md).

# Artifact Registry Security Integration

This guide explains how to configure and review security scanners in your Harness Artifact Registry.

{% hint style="info" %}
**DEFAULT PROJECT-LEVEL SCANNER**

The security scanner pipeline operates within a default project context, regardless of the registry's scope level (Account, Organization, or Project). This section explains the project requirements for each registry scope.

#### Project-Level Registry <a href="#project-level-registry" id="project-level-registry"></a>

When a registry is created at the project level, the scanner pipeline automatically runs in the same project. No additional configuration is required.

#### Organization-Level Registry <a href="#organization-level-registry" id="organization-level-registry"></a>

For registries created at the organization level:

1. Create a project named `default_project` within the organization that contains the registry
2. The scanner pipeline will automatically use this project for scanning operations

**Example:**

* Registry in organization "default" → Create `default_project` in "default" organization
* Registry in organization "custom\_org" → Create `default_project` in "custom\_org" organization

#### Account-Level Registry <a href="#account-level-registry" id="account-level-registry"></a>

For registries created at the account level:

1. Locate the "default" organization (automatically created with your account)
2. Create a project named `default_project` within the "default" organization
3. The scanner pipeline will use this project for all account-level registry scans
   {% endhint %}

### Configuring Security Scanners <a href="#configuring-security-scanners" id="configuring-security-scanners"></a>

Follow these steps to set up automated security scanning for your container images. This configuration will enable vulnerability detection and generate detailed reports each time you push a new image to your registry.

{% tabs %}
{% tab title="Interactive guide" %}
{% embed url="<https://app.tango.us/app/embed/970b5d5c-600c-4567-96e0-62146d4f0b94>" %}
Harness Artifact Registry Security Configuration
{% endembed %}
{% endtab %}

{% tab title="Step-by-step" %}

#### Select a Registry <a href="#select-a-registry" id="select-a-registry"></a>

1. Navigate to your Artifact Registry module
2. Select the registry you want to configure security scanning for

#### Access Configuration <a href="#access-configuration" id="access-configuration"></a>

1. Go to the **Configuration** tab
2. Locate the **Security** section

#### Review Integrated Security Scanners <a href="#review-integrated-security-scanners" id="review-integrated-security-scanners"></a>

Harness Artifact Registry integrates with the Harness Security modules ([Supply Chain Security](https://app.gitbook.com/s/SN2B2M5cFWy0hhD0xTuE/README) and [Security Testing Orchestration](https://app.gitbook.com/s/na57sNwixrWxOX8cOMRg/README)) for scanning. Depending on your registry type and licenses, the following scanners are available:

* **SBOM:** Generates a Software Bill of Materials
* **AquaTrivy:** Comprehensive vulnerability scanning
  {% endtab %}
  {% endtabs %}

***

#### Security Pipeline Creation <a href="#security-pipeline-creation" id="security-pipeline-creation"></a>

When you configure security scanning, Harness automatically creates a security scanner pipeline called **HARNESS ARTIFACT SCAN PIPELINE**. This pipeline includes:

* A supply chain security (SCS) stage
* Inline steps for either:
  * SBOM scanning
  * AquaTrivy security scanning

The specific scan performed depends on your selection in the Artifact Registry configuration.

{% embed url="<https://app.tango.us/app/embed/aa88f990-326b-4edf-9323-1de4fd5125d4>" %}
Harness Artifact Registry Security Scan Pipeline
{% endembed %}

### Conclusion <a href="#conclusion" id="conclusion"></a>

With security scanning configured, your Artifact Registry now integrates with Harness Security modules to check for vulnerabilities in your container images. You can view scan results directly in the Harness platform and take action on any security findings. This integration helps ensure your container images meet your organization's security requirements before deployment.