Quarantine a package - Sonatype Lifecycle & Repository Firewall - Sonatype Community

Quarantine a package

post by tiam-shin.yong on Apr 19, 2021

Tiam Shin Yong
Does anyone know if there’s an option to quarantine an unquarantined package (ex. Pandas 1.0.0) from the Nexus IQ Server?
We have the option to release a package from quarantine but there doesn’t seem to have an option to quarantine it back. We can remove the existing waiver that will reinstate violations but it still does quarantine the package.

The only way I can think of is to delete the package from the Repository Manager to prevent users from downloading the package.

Any advice would be much appreciated. Thank you.

post by mpiggott on Apr 20, 2021

Matthew Piggott
Deleting it is the way.
The design intent behind Firewall was to not break existing builds, thus quarantines cannot be applied to content that has already passed through the evaluation process. At that point application evaluations are expected to be relied upon to locate problems in individual applications.

post by tiam-shin.yong on Apr 26, 2021

Tiam Shin Yong
Thank you for the information! This is really helpful

New & Unread Topics

Topic Replies Views Activity
Bom scan does not generate a report 3 122 Mar 11
how to use remote tcp socket instead of local unix socket for nexus iq container image scan for pulling neuvector image from private registry 1 65 Apr 21
IQ Firewall: Database update frequency and coverage of new libraries against recent threats 4 39 Jun 9
Cleaning up nuget repostories 4 190 Nov 2025
Failed to make connection to backend after upgrade to nexus 3.78.2 1 180 Oct 2025