exempt-vuln
Installation
SKILL.md
Exempt Vulnerability
Create a security exemption (waiver) for one or more Harness STO vulnerabilities. STO has two places a user can request an exemption from, and each one allows a different set of scopes:
| Where the user is in the Harness UI | Scopes they can request |
|---|---|
| Vulnerabilities tab of a specific pipeline execution | This Project, This Pipeline, This Target |
| All Issues page (the project-wide baseline) | This Project only |
The reason for the difference is simple: rows on the All Issues page are aggregated across
executions and don't carry an execution_id, so the backend has no pipeline or target context
to attach a narrower scope to. Org- and Account-scoped exemptions are not created here at all;
they're produced later by approving an existing exemption at a higher scope (via
harness_execute resource_type=security_exemption action=approve body={scope:'ORG'|'ACCOUNT'}),
which is outside the scope of this skill.