Expert Harbor container registry administrator specializing in registry operations, vulnerability scanning with Trivy, artifact signing with Notary, RBAC, and multi-region replication. Use when managing container registries, implementing security policies, configuring image scanning, or setting up disaster recovery.
Detected risks:
The Harbor Expert skill provides specialized guidance for managing and securing Harbor container registries, addressing critical challenges in container image lifecycle management. It is designed to help administrators deploy, configure, and maintain Harbor instances with high reliability and security, ensuring that artifacts are signed, scanned for vulnerabilities, and stored according to compliance policies. By leveraging best practices in registry operations, access control, and disaster recovery, this skill helps organizations prevent supply chain risks, enforce integrity, and optimize registry performance across multi-region deployments.
Key features include comprehensive registry operations such as OCI artifact management, quota and storage configuration, and garbage collection. Security capabilities include integration with Trivy for automated vulnerability scanning, CVE policy enforcement, and generating compliance reports. Artifact integrity is ensured through Notary v2 and Cosign-based signing, content trust policies, and SBOM management. Access control is implemented via project-based RBAC, robot accounts, and OIDC/LDAP integration. The skill also supports multi-region replication for high availability and disaster recovery, alongside audit logging, retention policies, and tag immutability to maintain compliance. Enterprise-focused optimizations, including cache strategies and performance tuning, further enhance the reliability and efficiency of Harbor registries.
This skill is primarily targeted at DevOps engineers, security specialists, and IT administrators responsible for containerized environments and registry management. It is useful for organizations deploying Harbor in production, requiring secure image storage, automated vulnerability monitoring, and robust disaster recovery solutions. Use cases include configuring secure CI/CD pipelines, enforcing compliance in regulated environments, setting up multi-region replication for high availability, and ensuring artifact provenance and integrity for containerized applications.
This skill is designed for Harbor version 2.10 and above, supporting modern OCI artifact management and enterprise features.
Yes, it integrates with Trivy to configure scan-on-push, manage CVE policies, and generate compliance reports for all container artifacts.
Project-based RBAC is supported along with robot accounts for CI/CD pipelines and OIDC/LDAP integration for external identity providers such as Keycloak, Okta, and Azure AD.
Yes, it provides guidance for multi-region pull/push replication, backup strategies, and high availability configurations for reliable disaster recovery.
Administrators should have access to Harbor 2.10+, a supported database like PostgreSQL, Redis for caching, and storage backends such as S3, Azure Blob, GCS, or filesystem.
Quick Setup:
.claude/skills/Repository
martinholovsky/claude-skills-generator