Skip to main content
Harbor is an open-source enterprise container registry. CybeDefend integrates with Harbor to scan your container images using robot account authentication.

CybeDefend Configuration

Required Robot Account Permissions

How to Configure Harbor Container Registry

1

Access Harbor

Connect to your Harbor instance and navigate to your project
2

Create Robot Account

Go to Robot Accounts and create a new robot account with read access
3

Set Permissions

Configure the robot account permissions as listed above for scanning access
4

Copy Credentials

Copy the robot username (e.g., robot$project+name) and the generated token
5

Configure CybeDefend

Enter your Harbor URL, project name, robot username, and token in CybeDefend
The robot token is only displayed once when created. Make sure to copy it immediately before closing the dialog.

Security Best Practices

Use Robot Accounts

Prefer robot accounts over personal credentials for automated scanning.

Minimal Permissions

Grant only the required permissions listed above for security.

Set Expiration

Configure robot account expiration dates to limit exposure.

Use HTTPS

Always use TLS for Harbor connections to encrypt data in transit.

Troubleshooting

  • Verify robot username format: robot$project+name
  • Check if the robot account has expired
  • Ensure the Harbor URL is correct
  • Verify robot account has the required permissions
  • Check project visibility settings