update

name	update
description	Install or update Harness SAST and SCA engine dependencies (analyzers and dependency tooling). Use when the user asks to update the security tools, install missing dependencies, or check for updates.

Update Harness SAST and SCA dependencies

Use this when the user wants to install analysis dependencies (first-time, ~400MB) or update them to the latest version.

What happens

• Nothing installed yet: downloads and installs dependencies, then reports success.
• Installed but an update exists: installs the update and reports success.
• Already up to date: reports the current version.

Claude Code plugin

If the user is using the Harness SAST and SCA plugin with Claude Code, run the bundled update script and show the output:

node "${CLAUDE_PLUGIN_ROOT}/handlers/update-handler.js"

If CLAUDE_PLUGIN_ROOT is not set, use the plugin directory the user actually loaded with claude --plugin-dir, for example:

node "/path/to/plugin/handlers/update-handler.js"

Some installs use a default under $HOME/.claude/plugins/; only use that if it matches how the user installed the plugin.

Cursor / VS Code

If the user is not using the Claude plugin (only Cursor or VS Code), they typically install or update via the Curness / Harness SAST extension or the project install.sh. Point them there instead of running update-handler.js, which ships with the Claude plugin.

If the command fails

Suggest starting a new session so install hooks can run, or running install.sh from the Curness / Harness SAST project if they are setting up from source.