Namespace Confusion API

Namespace Confusion is an attack where malicious packages are installed using weaknesses common in dependency management practices. These endpoints require the EVALUATE_COMPONENT permission in the IQ server.

See the Namespace Confusion protection documentation.

Note
Namespace Confusion Protections applies to proxy repositories supported by Repository Firewall except for Docker and Hugging Face.
Namespace Confusion Protection is not currently supported for Docker and Hugging Face.

Add a Namespace to Protect

Use the following endpoint to add new namespaces to the Namespace Confusion protection.

POST /api/v2/firewall/namespace_confusion/maven

Example request

curl -X POST "http://localhost:8070/api/v2/firewall/namespace_confusion/maven" \
  --header 'Content-Type: application/json' \
  -u admin:admin123 \
  -d '["org.sonatype"]'

The passed in data element includes an array of namespaces to add. An asterisk character (*) may be used as a wild card.

Repository Endpoints

When a namespace is added through the IQ API, IQ does not create or use a real Nexus Repository Manager repository. Instead, it always creates or reuses a logical Nexus Repository instance with the deployment or instance ID namespace_confusion.

Within this instance, IQ creates or reuses logical repositories named nsc_{format}, such as nsc_maven or nsc_npm. These repositories exist only within the namespace_confusion instance and are used internally by IQ to manage namespaces.

Remove all Namespaces

Removes the contents of the entire namespace repository.

DELETE /api/v2/firewall/namespace_confusion/maven

curl -X DELETE "http://localhost:8070/api/v2/firewall/namespace_confusion/maven" \
  --header 'Content-Type: application/json' \
  -u admin:admin123'

Search results

No results found.