QScanner Authentication

You can authenticate QScanner using OAuth or using the Access token mechanism.

• QScanner Authentication using OAuth
• QScanner Authentication using Access Token

The Access Token mechanism will be deprecated in the next few releases.

QScanner Authentication using OAuth

You need to enable the following minimum user-level client permissions for QScanner Scan using OAuth authentication. Once a user-level client is created, you get the Client ID and Client Secret, which can be used for Authentication.

Preferably, you can set the QUALYS_CLIENT_ID and QUALYS_CLIENT_SECRET envrionment variables.

Permission to run QScanner Scan CICD

Minimum user-level client permissions for the QScanner CICD use case using OAuth authentication.

Permission to run QScanner Scan Development

Minimum user-level client permissions for the QScanner Developer use case using OAuth authentication.

Command to run QScanner Scan using OAuth mechanism,
$ ./qscanner --pod <POD Name> --client-id <Client ID> --client-secret <Secret ID> image <Image name or ID>

For example,
If you have added the Client ID and Secret ID in the environment variables, run the Qscanner scan with the following command.
$ ./qscanner --pod US3 --client-id $QUALYS_CLIENT_ID --client-secret $QUALYS_CLIENT_SECRET image redhat/ubi8:latest

QScanner Authentication using Access Token

Qualys Container Security provides a unique Access Token which you can use to authenticate QScanner. To know more, refer to QScanner Quick Start.