Skip to main content
Harbor is an open-source enterprise container registry. CybeDefend integrates with Harbor to scan your container images using robot account authentication.

​
CybeDefend Configuration

FieldDescriptionExample
Harbor URLFull URL of your Harbor instancehttps://harbor.example.com
Harbor ProjectName of the Harbor projectmy-project
Robot UsernameRobot account usernamerobot$my-project+deploy
Robot TokenRobot account token*****
DescriptionOptional descriptionProduction Harbor Registry

​
Required Robot Account Permissions

ResourcePermission
ArtifactList, Read
LabelList, Read
ProjectRead
RepositoryList, Pull, Read
TagList

​
How to Configure Harbor Container Registry

1

Access Harbor

Connect to your Harbor instance and navigate to your project
2

Create Robot Account

Go to Robot Accounts and create a new robot account with read access
3

Set Permissions

Configure the robot account permissions as listed above for scanning access
4

Copy Credentials

Copy the robot username (e.g., robot$project+name) and the generated token
5

Configure CybeDefend

Enter your Harbor URL, project name, robot username, and token in CybeDefend
The robot token is only displayed once when created. Make sure to copy it immediately before closing the dialog.

​
Security Best Practices

Use Robot Accounts

Prefer robot accounts over personal credentials for automated scanning.

Minimal Permissions

Grant only the required permissions listed above for security.

Set Expiration

Configure robot account expiration dates to limit exposure.

Use HTTPS

Always use TLS for Harbor connections to encrypt data in transit.

​
Troubleshooting

  • Verify robot username format: robot$project+name
  • Check if the robot account has expired
  • Ensure the Harbor URL is correct
  • Verify robot account has the required permissions
  • Check project visibility settings