Feature Requests

Hi team, We need a feature that enables us to use Quality gate in our sonarqube scan step. The pipeline should fail when it fails the quality gate checks. Can you please help us on this requirement. Thank you.

Currently STO module isn't listed in the selection of resources within resource group. Although the users have the necessary roles assigned to the view entities within STO, they will need have "all" the resources selected in the resource groups if not they are presented with a 403 forbidden error on the UI. Having granularity to select STO objects will be beneficial.

add support for the aqua trivy fs (file system) scan which scans a code repo/files. https://trivy.dev/v0.51/docs/target/filesystem/

Add aqua security on-prem support, which requires adding auth support for username/password. Confirmed with Aqua Security, our partner, than the on-prem does not support long-lived tokens and just the username and password for auth. Today aqua security native STO step only support SaaS version and auth method as Token.

Does sonarqube extraction scan supports pulling pull request scans? Assuming that we enable the API access to the ADO Connecters, how should we pass the pull request id to the sonarqube scan step? If the extraction scan does not support the pull request scan, is there a way to pass the specific analysis id and have it pull that?

Hi team, Since building the arm64 image is on-demand nowdays and harness now supports the build of arm64, however the STO supports amd64 only, can we enhance the STO to support both arm64 and amd64 therefore we don't need to create separate stages between build and scan?

Currently the prisma STO step is marked as success even if "Vulnerability threshold check" result is "failed". We need to ensure that the execution fails if the "Vulnerability Threshold Check" fails.

Hello dear support team, looking for your kind support for adding following plugins: . Checkmarx native plugin for checkmarx one . Fluid attacks native plugin It's a very nice feature the integration of results for several AST tools anyways those I mentioned are not available Thanks

Customer wants the ability to override image path similar to CI

STO has it's own way of calculating vulnerabilities than that of the scan tool. We'd like the ability to use the specific calculation of the scan tool instead of what STO returns. For example, we have a medium severity vulnerability reported by Prisma Scan that Harness is reporting as high/critical. Although Harness does provide the raw scan results from the scanner, we'd like the ability to set the default results to be from Prisma instead of taking the calculation from STO in the Harness UI.