Update Your IQ Server License Threat Groups - Sonatype Labs - Sonatype Community

Load more posts above

post by jplevac on Apr 19, 2024

@venkat.sannamuri this is a special bash character that you’re passing on the command line. You can try simply escaping it with \.

Try:

java -jar ltg-updater-1.0.2.jar -s https://nexusxxxx/ -u admin -p ‘XXX\!XXXX’ -i license_ltgs_02012024.csv -d -f

post by twinter on May 16, 2024

Hello everyone!

We have a new release of the License LTG Updater that contains support for the new AI-ML LTG and associated licenses:

ltg-updater-1.0.3.jar (8.4 MB)

Additionally, here are the latest license mappings:

license_threat_groups_04302024.csv (74.1 KB)

post by ovoronin on Jun 18, 2024

Hi all. The latest license mappings from 2024-05-28 are here:

license_threat_groups_05282024.csv (76.2 KB)

post by jplevac on Jul 19, 2024

Hi all. The latest license mappings from 2024-06-28 are here:

license_threat_groups_06282024.csv (77.3 KB)

post by djb on Jul 26, 2024

I have to agree with @u.maurer, this seems like the wrong channel for a versioned official .jar. Why not a separate page like how the Reference Policy files are provided? Feels like a similar use case.

post by jplevac on Aug 6, 2024

We realize this process is painful and are looking at ways of automating some of these steps. I’ll forward your message to appropriate internal stakeholders.

post by jplevac on Aug 6, 2024

Hi all. The latest license mappings from 2024-07-30 are here:

license_threat_groups_07302024.csv (78.2 KB)

post by twinter on Sep 17, 2024

Hello! The latest license mappings from 2024-08-29 are here:

license_threat_groups_08292024.csv (79.3 KB)

post by twinter on Oct 7, 2024

Hello! The latest license mappings from 2024-09-26 can be found here:

license_threat_groups_09262024.csv (80.5 KB)

post by twinter on Nov 1, 2024

Hello everyone, the latest license information for Oct, 2024 can be found here:

license_threat_groups_10312024.csv (81.5 KB)

post by tiam-shin.yong on Nov 11, 2024

Hello. I agree with the comments here. As an admin of IQ, this update process is challenging due to the number of licenses in the LTG. While the version updates and the tool are useful, they do not apply to our use case, where we customize our LTG based on IT Law guidance. Currently, there is no efficient way to compare the list of licenses in the updated LTG with those configured in IQ (other than manually) to identify discrepancies and decide whether to update the policies.

post by twinter on Dec 13, 2024

Hello everyone, the latest license information for Nov, 2024 can be found here:

license_threat_groups_11282024.csv (83.2 KB)

post by jplevac on Jan 14, 2025

Hello everyone, the latest license information for December, 2024 can be found here:

license_threat_groups_01062025.csv (85.2 KB)

post by jonathan.solan on Feb 7, 2025

Hi,

I have a quick question.

Are these group updates not included with the IQ Server releases? Do the group updates have to be performed manually?

post by jzora on Feb 7, 2025

That’s correct, Jonathan. New license data is added to the platform all the time, but threat groups need to be updated manually. We do this so as not to overwrite any modifications your organization’s legal teams may have made.

For more details, check our documentation on the topic.

post by jonathan.solan on Feb 11, 2025

Thanks Jonathan.

Is it possible to make the current LTG listing available via CLI? Or another option?

post by djb on Feb 13, 2025

You can GET this undocumented endpoint for a list of LTGs: https://{{iq_url}}/rest/licenseThreatGroup/organization/{{organization_id}}.

But, add /applicable on the end of the above to return the individual licenses within each of those returned LTGs.

{
  "licenseThreatGroupsByOwner": [
    {
      "ownerId": "example_org_id",
      "ownerName": "Example Org",
      "ownerType": "organization",
      "licenseThreatGroups": [
        {
          "id": "xb3q7cvt27d5323aa677899398a4c74d",
          "name": "Banned",
          "threatLevel": 10,
          "licenses": [
            {
              "id": "h9d3c52fgtyu4b956p3f5935y309u973",
              "ownerId": "example_org_id",
              "licenseThreatGroupId": "vd3f7fbd27d5423aa698765098a4c67d",
              "licenseId": "GPL-3.0"
            }
          ]
        }
      ]
    }
  ]
}

post by jplevac on Feb 18, 2025

Hello everyone, the latest license information for January, 2025 can be found here:

license_threat_groups-01312025.csv (86.2 KB)

post by jplevac on Mar 17, 2025

Hello everyone, the latest license information for February, 2025 can be found here:

license_threat_groups_02282025.csv (87.1 KB)

post by nsai on Apr 4, 2025

Hello everyone, the latest license information for March, 2025 can be found here:

license_threat_groups_04042025.csv (88.5 KB)