QScanner Release 4.6.0
October 01, 2025
With QScanner 4.6.0 release, the following features are offered.
- Added Support to MacOS (darwin-amd64)
- Integration with GitLab
- Improvement in Masked Environmental Variable Reporting
- Renaming Storage Driver Option for 'Containerd' & 'Docker' Environments
Added Support to MacOS (darwin-amd64)
QScanner now supports image scanning on MacOS (Darwin). Individual QScanner binary build will be published for 'darwin-amd64' architecture. With this enhancement, QScanner now supports the following architectures.
- Linux x86_64
- Linux ARM64
- Darwin AMD64
QScanner supports remote as well as local image scanning. On a MacOS host, remote image scanning is supported with Podman Desktop and Docker Desktop.
Currently, QScanner does not support a storage driver (--storage-driver) on MacOS.
Integration with GitLab
With this release, QScanner supports its integration with GitLab, enabling any image to be scanned directly through the GitLab pipeline. There are the following two approaches to perform the scan:
- Using the QScanner binary
- Using the QScanner image
To enable this support, a new value (gitlab) in Report Format is introduced (--report-format gitlab). You can configure the QScanner in GitLab using the GitLab > Pipelines and run the image scan to find the vulnerabilities and secrets present in that image.
Once scanning is done, the resultant reports are uploaded to GitLab > Pipelines > Security. You can view the scan results and download the resultant reports from here.
To know more about QScanner integration with GitLab, refer to QScanner Online Help.
Improvement in Masked Environmental Variable Reporting
Environment Variables are masked with the help of '--mask-env-variable' flag. Such masked variables are reported under Assets > Images > Layers. With this release, Qualys Container Security Sensor indicates the masked environmental variable in masked format - MASKED_KEY=XXXXX. This has improved security.
Renaming Storage Driver Option for 'Containerd' Environment
With this release, the storage driver option in Containerd environment is renamed as mentioned in the table below.
| Runtime Environment | Storage Driver - Old | Storage Driver - New |
| Containerd | --storage-driver containerd-overlay | --storage-driver containerd-overlayfs |
For example, for the Containerd environment, '--storage-driver containerd-overlay' flag was used to enable the storage driver in that environment. Now, you are requested to use `--storage-driver containerd-overlayfs` instead.
With this change, QScanner is maintaining the consistency with the supported storage driver options.