# Our Community Projects

Here are all our Open Source projects.

#### Ahab

ARCHIVED

Scan base OS (debian, fedora, alpine) packages for vulnerabilities.

Worked with:

#### API Clients (IQ)

golangpythontypescriptapiclient

Generated API Clients in Go, Python and Typescript for Sonatype IQ Server Manager

Works with:

#### API Clients (Repo)

golangjavatypescriptapiclient

Generated API Clients in Go, Java and Typescript for Sonatype Nexus Repository Manager

Works with:

#### AuditJS

javascriptnodejs

Scan JavaScript (node.js inclusive) projects for vulnerable third-party dependencies.

Works with:

#### Bach

phpcomposer

Scan PHP and Composer projects for vulnerable third-party dependencies.

Works with:

#### Cargo Pants

rustcargo

Cargo subcommand provides a project bill of materials and identifies vulnerabilities.

Works with:

#### Chelsea

rubygems

Scan RubyGems powered projects for vulnerable third-party dependencies.

Works with:

#### Cheque

c

Scan C projects for vulnerable third-party dependencies.

Works with:

#### Container (IQ)

GRADUATEDarm

Container Image built for ARM for Sonatype IQ Server

Worked with:

[See official Sonatype Documentation](https://hub.docker.com/r/sonatype/nexus-iq-server)

#### Container (Repo)

GRADUATEDarm

Container Image built for ARM for Sonatype Nexus Repository Manager

Worked with:

[See official Sonatype Documentation](https://hub.docker.com/r/sonatype/nexus3)

#### GCP Blobstore

GRADUATEDblobstore

Sonatype Nexus Repository Manager Blobstore backed by Google Cloud Storage.

Worked with:

[See official Sonatype Documentation](https://help.sonatype.com/en/configuring-blob-stores.html#google-cloud-blob-store)

#### GitHub Action

GRADUATEDcisbom

GitHub Action for invoking Sonatype Lifecycle scans and obtaining SBOMs

Worked with:

[See official Sonatype Documentation](https://help.sonatype.com/en/sonatype-github-actions.html)

#### Jake

pythoncondapip

Scan Python and Conda environments for vulnerable third-party dependencies.

Works with:

#### Nancy

golang

Scan Golang projects for vulnerable third-party dependencies.

Works with:

#### Nexus CasC Plugin

java

Nexus CasC is a configuration as code plugin for Sonatype Nexus Repository Manager 3

Works with:

#### OysterR

rcran

Scan R code for vulnerable third-party dependencies.

Works with:

#### Sherlock Trunks

javagradle

A Gradle plugin that scans the dependencies of a Gradle project for vulnerabilities.

Works with:

#### Terraform Provider: IQ

tf

Terraform Provider for configuring Sonatype IQ Server

Works with:

#### Terraform Provider: Repo

tf

Terraform Provider for configuring Sonatype Nexus Repository

Works with:

#### The CLA Bot

cla

Also known as Paul Botsco - this is our CLA Bot.

Works with:

Last modified July 11, 2024: [feat: project listing pages driven by JSON data (659900b)](https://github.com/sonatype-nexus-community/contribute.sonatype.com/commit/659900b2a82b90475ba13ac8fc8029780c64e0a1)