Qualys IaC Security Using Jenkins Plugin

This method uses the Qualys IaC Security Jenkins plugin to scan your IaC templates. You install the plugin directly from the Jenkins Plugin Manager, configure your Qualys account credentials at the system level, and create a Freestyle project with the Qualys IaC Scan build step.

This approach provides a GUI-based configuration experience with built-in scan reports directly in the Jenkins interface, including Build Summary, IaC Posture, and Remediation views.

Prerequisites

Before you begin, ensure that the following prerequisites are met:

  • Qualys IaC Security using Jenkins Plugin installed on Jenkins 
  • Configure your Qualys account credentials at the system level (instead of environment variables for pipeline script)

Quick Workflow

  1. Configure the Plugin
  2. Configure System
  3. Run IaC Scan
  4. View Scan Output

Next Step

Configure the Plugin