Add Task

Perform the following steps to create tasks:

1. Under Create tasks, click Add tasks.

   

2. Search for the Qualys IaC Scan plugin and Install it.

   

3. You can select from your available linked repositories or add more repositories from Source Code Checkout. Once selected, you can proceed to run a scan.

   

4. To run a scan, select the Qualys IaC Security tab.

5. Enter Task description. 

6. Enter Qualys Platform URL.

7. From the Authentication Type dropdown, select one of the following options:

   Basic

   OAuth

   The fields displayed below depend on the selected authentication type. 
   

   To create a user-level client, see Set up Token-based Authentication from UI.

   Basic Authentication 

   Enter Basic Authentication Details (If Selected)
   

   Provide the following details:
   • Username – Enter the Qualys username.
   • Password – Enter the corresponding password.

   OAuth Authentication 

   Provide the following details:
   

   • Client ID – Enter the OAuth client ID.
   • Client Secret – Enter the OAuth client secret.

8. Click Test Connection to ensure you are authenticated. The plugin cannot perform scans unless the test connection is successful.

9. Enter the path to the IaC template (file extension must be .yml, .yaml, .json or .tf).

10. You can choose to display failed results only and set the build failure conditions and timeout period.

11. Click Save and then click Create.

    

Next Step

Trigger Scan