Quarantine a package - Sonatype Lifecycle & Repository Firewall - Sonatype Community

Quarantine a package

post by tiam-shin.yong on Apr 19, 2021

Tiam Shin Yong

Does anyone know if there’s an option to quarantine an unquarantined package (ex. Pandas 1.0.0) from the Nexus IQ Server? We have the option to release a package from quarantine but there doesn’t seem to have an option to quarantine it back. We can remove the existing waiver that will reinstate violations but it still does quarantine the package.

The only way I can think of is to delete the package from the Repository Manager to prevent users from downloading the package.

Any advice would be much appreciated. Thank you.


post by mpiggott on Apr 20, 2021

Matthew Piggott

Deleting it is the way.

The design intent behind Firewall was to not break existing builds, thus quarantines cannot be applied to content that has already passed through the evaluation process. At that point application evaluations are expected to be relied upon to locate problems in individual applications.


post by tiam-shin.yong on Apr 26, 2021

Tiam Shin Yong

Thank you for the information! This is really helpful


New & Unread Topics

Topic Replies Views Activity
how to use remote tcp socket instead of local unix socket for nexus iq container image scan for pulling neuvector image from private registry 1 65 Apr 21
Sonatype Firewall Pro now available for third-party users! 1 95 May 28
Bom scan does not generate a report 3 122 Mar 11
Batch Deletion of expired waivers 1 26 26d
How could I find out the role name 1 65 Aug 2025