harness-scs

Harness Software Supply Chain Security (SCS) CLI tool. It helps you generate, manage, and verify software supply chain attestations and provenance metadata as part of your CI/CD pipelines.

Installation

Quick install (latest version)

curl -fsSL https://raw.githubusercontent.com/harness/harness-scs/main/install.sh | sh

Or using wget:

wget -qO- https://raw.githubusercontent.com/harness/harness-scs/main/install.sh | sh

Install a specific version

VERSION=1.0.0 curl -fsSL https://raw.githubusercontent.com/harness/harness-scs/main/install.sh | sh

Verify installation

harness-scs version

The binary is installed to /usr/local/bin by default. If elevated permissions are required, the script will automatically prompt for sudo.

Supported Platforms

OS	Architecture
Linux	amd64, arm64
macOS	amd64, arm64

Releases

Pre-built binaries are available on the Releases page. Each release includes SHA-256 checksums for verification. The install script automatically downloads and verifies checksums before installing.

Prerequisites

The install script requires one of the following:

• curl or wget for downloading
• sha256sum or shasum for checksum verification (optional but recommended)

Third-Party Acknowledgements

This project uses code from go-witness, licensed under the Apache License 2.0. See the NOTICE file for full attribution details.

License

This project is licensed under the Apache License 2.0. See LICENSE for the full license text.