Prerequisites

To launch the scan successfully using Qualys WAS integration with GitLab, you must ensure that:

• You have valid Qualys user credentials with access to the Web Application Scanning (WAS) module.
• Appropriate API permissions for the Qualys WAS APIs used in the GitLab integration.

  Refer to the Qualys WAS API User Guide to verify the required permissions for the relevant API endpoints.

  • Launch Scans (Single): /qps/rest/3.0/launch/was/wasscan/
  • Retrieve Scan Status: /qps/rest/3.0/status/was/wasscan/<id>
  • Retrieve Scan Results: /qps/rest/3.0/download/was/wasscan/<id>
  • Retrieve Web App Count: /qps/rest/3.0/count/was/webapp
  • Create Report: /qps/rest/3.0/create/was/report  
  • Retrieve Report status: /qps/rest/3.0/status/was/report/
  • Download Report: /qps/rest/3.0/download/was/report/