qualys/Qualys GitHub actions for Web Application Scanning
The Qualys GitHub Actions for Web Application Scanning allows DevOps teams to build application vulnerability scans into their existing CI/CD processes. By integrating web application scans in this manner, application security testing is accomplished earlier in the SDLC to catch and eliminate security flaws.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Maintainedlast commit Dec 5, 2025
- License
- None
Pinned Snippet
uses: qualys/github-action-qwas@ade3ed7dd931cebf9c40245f7270ca336f328d7b # v1.2.1tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| QUALYS_USERNAME | Qualys Username | yes | — |
| QUALYS_PASSWORD | Qualys Password | yes | — |
| API_SERVER | API Server URL | yes | — |
| SCAN_NAME | Scan Name | yes | — |
| SCAN_TYPE | Scan Type | yes | — |
| WEBAPP_ID | Webapp ID | yes | — |
| AUTH_RECORD | Authentication Record | no | — |
| AUTH_RECORD_ID | Authentication Record ID | no | — |
| OPTION_PROFILE | Option Profile | no | — |
| OPTION_PROFILE_ID | Option Profile ID | no | — |
| CANCEL_OPTION | Cancel Option | no | — |
| CANCEL_HOURS | Cancel Hours | no | — |
| SEVERITY_CHECK | Severity Check | no | — |
| SEVERITY_LEVEL | Severity Level | no | — |
| EXCLUDE | Exclude | no | — |
| FAIL_ON_SCAN_ERROR | Fail on Scan Error | no | — |
| WAIT_FOR_RESULT | Wait for Result | no | — |
| INTERVAL | Interval | no | — |
| TIMEOUT | Timeout | no | — |
| FILE_TYPE | File format to download artifact | no | — |
Outputs
no outputs