Qualys SwCA Scanner for Linux 1.4
June 02, 2026
We are introducing the new updates for the SwCA Scanner for Linux.
Configure SwCA Log-level in Cloud Agent UI
The SwCA Scanner now uses log levels configured in the Cloud Agent configuration profile. You are no longer required to set the SwCA log levels separatly. This enhancement provides a simpler way to set the log level and collect the SwCA process logs.
To set SwCA log level in Cloud Agent user interface, navigate to Configuration > Configuration Profile > Performance tab. Specify the log level under the Logging Level for Agent field.
Extended Language Support for SwCA Runtime Analysis
We have extended the language support for SwCA Runtime Analysis on Linux platforms to the following languages:
| Language | Newly Supported Files for Runtime Analysis |
|---|---|
| Ruby | /*.gemspec |
| PHP | vendor/composer/installed.json modules/{}/.info.yml wp-content/plugins/.php administrator/components/com_/.xml administrator\manifests\packages\pkg_.xml |
| Node.js | package.json {}.yarn/cache/.zip/package.json ~/.yarn/berry/cache/ *.asar/package.json |
The extended language support for the SwCA Runtime Analysis enables deeper analysis of running executables on Linux assets, enhancing detection and remediation. Enabling Runtime analysis may increase the SwCA scan time, as the Cloud Agent scans all executable files on assets to extract component metadata.
The Ruby, PHP, and Node.js support for runtime analysis is available for Linux Intel Cloud Agent 7.4 and later.
To learn more about the supported languages for Runtime and Static Analysis, refer to Supported Languages - Linux.
Behavior Change
There are no behavior changes for this release.
Platform Coverage Support
No new platform coverage is added in this release.
Issues Addressed
The following important and notable customer issues are fixed in this release:
| Component/Category | Description |
|---|---|
| SwCA Scan | We fixed an issue where Cloud Agent immediately launched a SwCA scan and did not follow the configured scan interval when a new SwCA scan manifest was published. The agent now follows the configured scan interval and launches the SwCA scan as per the configured time. This updated is available for Linux Intel Cloud Agent 7.4.2 and later. |
| Third-party Library Updated | The SwCA Go library was outdated. We have updated the Go library version from 1.25.8 to 1.26.3. |