Configure the Plugin for Freestyle Projects

As the configuration settings are the same as those for the Pipeline Project, refer to Configure the Plugin Pipeline Project for detailed configuration.

To create a Freestyle Project perform the following steps:

  1. Click Post-build Actions tab and go to the Post-build Actions section.
  2. Select the Scan host/instances with Qualys VM from the Add post-build action drop-down menu. 
  3. Provide the following configuration details:

    Freestyle project

    1. login account credentials to access the Qualys VM API server on the Qualys cloud platform. Select Use Proxy Settings to provide proxy information if your Jenkins server is behind a firewall.
    2. Click Test Connection to verify that the plugin can connect to the Qualys VM API server.
    3. Provide parameters: scan name, target host IPs and Network or AWS EC2 information required to call the launch scan API.

      For Host/AssetIP and EC2 Instance ID, you can also specify an environment variable in this format: env.{variable name}

      For example:

      If your environment variable name for Host IP is hostIp then the input for the Host IP field should be env.hostIp.

      If your environment variable name for EC2 Instance ID is ec2Id then the input for the EC2 ID field should be env.ec2Id.

    4. Provide parameters: Option profile and Scanner name to launch the scan.

    5. Build fail conditions by vulnerabilities detected for severity types and by QIDs CVE IDs, CVSSv2 or V3 with a specific base score and PCI and potential vulnerability detections.
    6. Provide data collection frequency and timeout duration for the running scan.
    7. Finally, click Save.