Run IaC Scan

Once you have deployed the IaC plugin and authenticated, you can run scans on selected directories/templates.

1. On the Jenkins console, click New Item.

   

2. Enter the name and select the type of project. Select Freestyle project and click OK.

   

3. In the Build Steps, scroll down to Qualys IaC Scan.

4. Enter the required information:

   • IaC Scan service/server endpoint - Select the configuration you created in Configure System.
   • Scan Name - Enter a name for the scan.
   • Compressed file path/directory to be scanned - Enter the path to the IaC template. The file extension must be .yml, .yaml, .json, or .tf.

5. You can choose to display Failed Results only, set the Build Failure conditions, and Timeout settings.

   The Build Failure conditions let you set thresholds for when the build should fail based on the count of failed controls by severity:

   • Fail if the count of 'High' failed controls is more than the specified value.
   • Fail if the count of 'Medium' failed controls is more than the specified value.
   • Fail if the count of 'Low' failed controls is more than the specified value.

   

6. Click Save.

7. Return to the Jenkins Console and click Build Now.

   

Next Step

View Scan Output