Supported Platforms
Qualys CI/CD Security Integration supports the following platforms and environments.
CI/CD Platforms
| Platform | Integration Type | Requirements |
|---|---|---|
| GitHub Actions | Reusable Actions | GitHub-hosted or self-hosted runners with Docker |
| GitLab CI | CI Component | GitLab 16.0+ with Docker executor |
| Jenkins | Jenkins Plugin | Jenkins 2.426.3+, Java 11+ |
| Azure DevOps | Pipeline Extension | Azure Pipelines with Docker support |
Runner/Agent Requirements
GitHub Actions
- GitHub-hosted: ubuntu-latest, ubuntu-22.04, ubuntu-20.04 (Docker pre-installed)
- Self-hosted: Linux with Docker installed
- Node.js 20+ (bundled with action)
GitLab CI
- GitLab Runner with Docker executor
- Docker 20.10+ or compatible container runtime
Jenkins
- Jenkins 2.426.3 or later
- Java 11 or later
- Docker (for container scanning)
- Optional: Pre-installed CICD Sensor for dedicated build servers
- CloudBees CI compatible
Azure DevOps
- Azure Pipelines (cloud or self-hosted)
- Microsoft-hosted: ubuntu-latest, windows-latest
- Self-hosted: Docker installed
- Node.js 20+ (bundled with tasks)
Qualys Platform Regions (PODs)
All integrations support the following Qualys platform regions:
| POD ID | Region | API Gateway |
|---|---|---|
| US1 | United States 1 | qg1.apps.qualys.com |
| US2 | United States 2 | qg2.apps.qualys.com |
| US3 | United States 3 | qg3.apps.qualys.com |
| US4 | United States 4 | qg4.apps.qualys.com |
| EU1 | Europe 1 | qg1.apps.qualys.eu |
| EU2 | Europe 2 | qg2.apps.qualys.eu |
| CA1 | Canada | qg1.apps.qualys.ca |
| IN1 | India | qg1.apps.qualys.in |
| AU1 | Australia | qg1.apps.qualys.com.au |
| UK1 | United Kingdom | qg1.apps.qualys.co.uk |
| AE1 | United Arab Emirates | qg1.apps.qualys.ae |
| KSA1 | Saudi Arabia | qg1.apps.qualys.sa |
Container Registry Support
The integrations can scan images from any OCI-compliant registry:
- Docker Hub
- Amazon ECR
- Azure Container Registry (ACR)
- Google Container Registry (GCR) / Artifact Registry
- GitHub Container Registry (GHCR)
- GitLab Container Registry
- JFrog Artifactory
- Harbor
- Quay.io
- Private Docker registries
Container Image Platforms
| Platform | Architecture |
|---|---|
| linux/amd64 | x86_64 (default) |
| linux/arm64 | ARM 64-bit |
Storage Drivers
For optimized container scanning, the following storage drivers are supported:
| Driver | Use Case |
|---|---|
none |
Default - pull image from registry |
docker-overlay2 |
Use local Docker daemon cache |
containerd-overlayfs |
Use local containerd cache |
podman-overlay |
Use local Podman cache |