Qualys IaC 与 GitHub 的安全集成.pdf

Copyright 2022 by Qualys, Inc. All Rights Reserved.

Qualys IaC Security Integration with GitHub

In the current continuous integration and continuous deployment (CICD) environment,

the security scans are conducted on cloud resources after deployment. As a result, you

secure your cloud resources post deployment to respective Cloud accounts.

With an introduction of Infrastructure as Code (IaC) security feature by Qualys CloudView,

you can now secure your IaC templates before the cloud resources are deployed in your

cloud environments. The IaC Security feature will help you shifting cloud security and

guide for more details.

Qualys IaC Security Integration with GitHub

Scanning IaC Templates at GitHub

2

Scanning IaC Templates at GitHub

pull and push requests. We provide you with a GitHub actions template and options that

You can perform IaC scan on either of the following:

Ensure that you have valid subscription of Qualys CloudView (Cloud Security Assessment)

app.

that are used in the actions.

Self-hosted runners must use a Linux operating system and have Docker installed to run

Qualys IaC Security Integration with GitHub

Scanning IaC Templates at GitHub

3

repository.

here

.