GitHub Actions for TotalAppSec 

The Qualys GitHub Actions for Web Application Scanning (WAS) allows DevOps teams to build application vulnerability scans into their existing CI/CD processes. By integrating web application scans in this manner, application security testing is accomplished earlier in the Software Development Life Cycle (SDLC) to catch and eliminate security flaws.

Prerequisites

A valid Qualys subscription with the TotalAppSec application activated.

Access to Qualys TotalAppSec application API in the Qualys GitHub Actions for WAS. Refer to the WAS API User Guide and check the permissions required for the following APIs.

• Launch Scans (Single): /qps/rest/3.0/launch/was/wasscan/

• Retrieve Scan Status: /qps/rest/3.0/status/was/wasscan/<id>

• Retrieve Scan Results: /qps/rest/3.0/download/was/wasscan/<id>

For more information,  refer to the Qualys GitHub Actions for WAS.