The Qualys Web App Scanning Connector for Bamboo empowers DevOps teams to build application vulnerability scans into their existing CI/CD processes.
Once you configure the Qualys WAS connector, select the web application, and configure the build fail conditions if certain criteria are met such as the presence of specific QIDs or a severity 5 vulnerability.
When the web application is scanned, the WAS connector retrieves the vulnerability data from Qualys Cloud Platform, and you can view the scan results in Bamboo. The report in Bamboo also provides a link to the full scan that is available in Qualys UI
- A valid Qualys subscription with the Web Application Scanning application activated.
- Access to Qualys Web Application Scanning application API endpoint from your build host.
For more information refer to the Qualys Web App Scanning Connector for Bamboo