Sonatype Lifecycle Developer Workshop

Interactive challenges with Lifecycle component management, policies, and build-safe automation

The Sonatype Lifecycle Developer Workshop provides the knowledge and practical instruction to get developers started with Sonatype Lifecycle. Take this half-day workshop to get up to speed quickly and understand how component management can be a natural part of your development process. See how to analyze component risk and fix vulnerabilities early in the development lifecycle to avoid costly rework.

Key accomplishments:

• Describe how development benefits from Sonatype Lifecycle
• Observe how to use Sonatype Lifecycle in the Eclipse IDE
• Experience triage issues and prioritizing remediation
• Excel at fixing flawed components across applications

37.5%

Total risk reduction with Lifecycle's build-safe automation and zero manual intervention

Boost mean time to remediate (MTTR) by up to 30%

150x
More open source malware packages identified than Sonatype's closest competitor

Sonatype tracks and identifies over 65M+ malicious components

6x
Faster policy-based automation due to Sonatype Lifecycle and SCA tools

Sonatype Lifecycle improves customer release velocity by ~6x on average

Recommended for:

Ideal for any person involved in a development capacity such as application developers, architects, and development managers.

Register Cost:

Multiple options are available and prices may vary. Please contact us at success@sonatype.com or education@sonatype.com for information about pricing or how to register for a workshop.

Sonatype Lifecycle Developer Outline

NOTE: Requires the ability to run screen-sharing software (Zoom) and complete exercises. Maximum of 10 learners per class.

It’s not just Sonatype Lifecycle — it's mastering the art of secure, automatic, and efficient software delivery

MODULE 1

Introduction to Nexus Lifecycle

• Discussing the risk and magnitude of OSS consumption
• Building a good component practice
• Finding your place in the Nexus Lifecycle deployment model
• Defining the role of Nexus Lifecycle policy

MODULE 2

IDE installation and configuration

• Configuring Sonatype Lifecycle plug-in installed and configured
• Consuming and mitigating Sonatype Lifecycle results

MODULE 3

Prioritizing remediation

• Observing Sonatype Lifecycle data
• Establishing a security, license, and architecture issue resolution strategy

MODULE 4

Support for other IDEs

• Working with the Maven plugin in other IDEs
• Using the command line scanner
• Describing developer communication processes
• Discussing scanning philosophies for component selection and governance
• Accessing embedded reports
• Bridging the developer and Sonatype Lifecycle owner gap

MODULE 5

Socializing expectations

About Sonatype Workshops:

Sonatype Workshops jump-start your team's momentum and support essential changes. You'll gain strong foundational skills, expert-led training for every department, and curricula covering everything from Maven and Nexus Repository basics to advanced Sonatype Lifecycle.

Whether you prefer public classes, onsite sessions, or self-paced learning, we can help, including custom courses tailored to your needs. Learn more at sonatype.com/learning-and-development.

Sonatype is the software supply chain management company. We enable organizations to innovate faster in a highly competitive market. Our industry-leading platform empowers engineers to develop software fearlessly and focus on building products that power businesses. Sonatype researchers have analyzed more than 120 million open source components – 40x more than its competitors – and the Sonatype platform has automatically blocked over 115,000 malicious components from attacking software development pipelines. Enabling high-quality, secure software helps organizations meet their business needs and those of their customers and partners. More than 2,000 organizations, including 70% of the Fortune 100 and 15 million software developers, rely on our tools and guidance to be ambitious, move fast and do it securely. To learn more about Sonatype, please visit www.sonatype.com.