Our Community Projects

Here are all our Open Source projects.

Ahab

ARCHIVED

Scan base OS (debian, fedora, alpine) packages for vulnerabilities.

Worked with:

API Clients (IQ)

golangpythontypescriptapiclient

Generated API Clients in Go, Python and Typescript for Sonatype IQ Server Manager

Works with:

API Clients (Repo)

golangjavatypescriptapiclient

Generated API Clients in Go, Java and Typescript for Sonatype Nexus Repository Manager

Works with:

AuditJS

javascriptnodejs

Scan JavaScript (node.js inclusive) projects for vulnerable third-party dependencies.

Works with:

Bach

phpcomposer

Scan PHP and Composer projects for vulnerable third-party dependencies.

Works with:

Cargo Pants

rustcargo

Cargo subcommand provides a project bill of materials and identifies vulnerabilities.

Works with:

Chelsea

rubygems

Scan RubyGems powered projects for vulnerable third-party dependencies.

Works with:

Cheque

c

Scan C projects for vulnerable third-party dependencies.

Works with:

Container (IQ)

GRADUATEDarm

Container Image built for ARM for Sonatype IQ Server

Worked with:

See official Sonatype Documentation

Container (Repo)

GRADUATEDarm

Container Image built for ARM for Sonatype Nexus Repository Manager

Worked with:

See official Sonatype Documentation

GCP Blobstore

GRADUATEDblobstore

Sonatype Nexus Repository Manager Blobstore backed by Google Cloud Storage.

Worked with:

See official Sonatype Documentation

GitHub Action

GRADUATEDcisbom

GitHub Action for invoking Sonatype Lifecycle scans and obtaining SBOMs

Worked with:

See official Sonatype Documentation

Jake

pythoncondapip

Scan Python and Conda environments for vulnerable third-party dependencies.

Works with:

Nancy

golang

Scan Golang projects for vulnerable third-party dependencies.

Works with:

Nexus CasC Plugin

java

Nexus CasC is a configuration as code plugin for Sonatype Nexus Repository Manager 3

Works with:

OysterR

rcran

Scan R code for vulnerable third-party dependencies.

Works with:

Sherlock Trunks

javagradle

A Gradle plugin that scans the dependencies of a Gradle project for vulnerabilities.

Works with:

Terraform Provider: IQ

tf

Terraform Provider for configuring Sonatype IQ Server

Works with:

Terraform Provider: Repo

tf

Terraform Provider for configuring Sonatype Nexus Repository

Works with:

The CLA Bot

cla

Also known as Paul Botsco - this is our CLA Bot.

Works with:

Last modified July 11, 2024: feat: project listing pages driven by JSON data (659900b)