# Sonatype Lifecycle Developer Workshop

**Interactive challenges with Lifecycle component management, policies, and build-safe automation**

The Sonatype Lifecycle Developer Workshop provides the knowledge and practical instruction to get developers started with Sonatype Lifecycle. Take this half-day workshop to get up to speed quickly and understand how component management can be a natural part of your development process. See how to analyze component risk and fix vulnerabilities early in the development lifecycle to avoid costly rework.

## Key accomplishments:

- Describe how development benefits from Sonatype Lifecycle
- Observe how to use Sonatype Lifecycle in the Eclipse IDE
- Experience triage issues and prioritizing remediation
- Excel at fixing flawed components across applications

## 37.5%

Total risk reduction with Lifecycle's build-safe automation and zero manual intervention

Boost mean time to remediate (MTTR) by up to 30%

**150x**  
More open source malware packages identified than Sonatype's closest competitor

Sonatype **tracks and identifies** over 65M+ malicious components

**6x**  
Faster policy-based automation due to Sonatype Lifecycle and SCA tools

Sonatype Lifecycle improves customer release velocity by ~6x on average

## Recommended for:

Ideal for any person involved in a development capacity such as application developers, architects, and development managers.

## Register Cost:

Multiple options are available and prices may vary. Please contact us at success@sonatype.com or education@sonatype.com for information about pricing or how to register for a workshop.

---

# Sonatype Lifecycle Developer Outline

NOTE: Requires the ability to run screen-sharing software (Zoom) and complete exercises. Maximum of 10 learners per class.

**It’s not just Sonatype Lifecycle — it's mastering the art of secure, automatic, and efficient software delivery**

## MODULE 1

### Introduction to Nexus Lifecycle

- Discussing the risk and magnitude of OSS consumption
- Building a good component practice
- Finding your place in the Nexus Lifecycle deployment model
- Defining the role of Nexus Lifecycle policy

## MODULE 2

### IDE installation and configuration

- Configuring Sonatype Lifecycle plug-in installed and configured
- Consuming and mitigating Sonatype Lifecycle results

## MODULE 3

### Prioritizing remediation

- Observing Sonatype Lifecycle data
- Establishing a security, license, and architecture issue resolution strategy

## MODULE 4

### Support for other IDEs

- Working with the Maven plugin in other IDEs
- Using the command line scanner
- Describing developer communication processes
- Discussing scanning philosophies for component selection and governance
- Accessing embedded reports
- Bridging the developer and Sonatype Lifecycle owner gap

## MODULE 5

### Socializing expectations

## About Sonatype Workshops:

Sonatype Workshops jump-start your team's momentum and support essential changes. You'll gain strong foundational skills, expert-led training for every department, and curricula covering everything from Maven and Nexus Repository basics to advanced Sonatype Lifecycle.

Whether you prefer public classes, onsite sessions, or self-paced learning, we can help, including custom courses tailored to your needs. Learn more at sonatype.com/learning-and-development.

Sonatype is the software supply chain management company. We enable organizations to innovate faster in a highly competitive market. Our industry-leading platform empowers engineers to develop software fearlessly and focus on building products that power businesses. Sonatype researchers have analyzed more than 120 million open source components – 40x more than its competitors – and the Sonatype platform has automatically blocked over 115,000 malicious components from attacking software development pipelines. Enabling high-quality, secure software helps organizations meet their business needs and those of their customers and partners. More than 2,000 organizations, including 70% of the Fortune 100 and 15 million software developers, rely on our tools and guidance to be ambitious, move fast and do it securely. To learn more about Sonatype, please visit **www.sonatype.com**.