Harness STO - GitHub Advanced Security | Feature Requests | harness

harness - The Modern Software Delivery Platform®

Harness STO - GitHub Advanced Security

complete

Denim Herring

Requesting three items: 
Enable CodeQL in Harness STO
Enable API request plugin to get scan results for SCA (Dependabot)
Can we ingest the results from Dependabot. 
Enable API request plugin to get scan results for Secrets
Default policies for all the 3 items

September 25, 2024

Lavakush

updated the status to

complete

Papaya whip Locust

CodeQL and Dependabot is now supported and GA'ed. Please find the document link to start using this feature. https://developer.harness.io/docs/security-testing-orchestration/sto-techref-category/github-advanced-security/#codeql

Harness Engineering

updated the status to

this fiscal quarter

August 25, 2025

Pritesh Chandaliya

updated the status to

in progress

Pritesh Chandaliya

The work is happening in this quarter to support ingestion and extraction mode.

For the orchestration mode we are trying it out if the current APIs support it or not. We will be able to confirm by the end of this quarter.

Pritesh Chandaliya

updated the status to

this fiscal quarter

Pritesh Chandaliya

updated the status to

next fiscal quarter

Pritesh Chandaliya

updated the status to

under review

What do you mean by Default Policies?

You want us to ingest policy failures from GHAS side into Harness for governance?