Sonatype Lifecycle Fundamentals Workshop

Interactive challenges with Lifecycle deployment, policies, and SDLC integration

This one-day hands-on workshop gets your team up to speed quickly, allowing you to achieve initial success with your Sonatype Lifecycle deployment. Upon completion, your team will have the foundation to release Sonatype Lifecycle in your enterprise, and you will be on the path to open source component governance.

Key accomplishments:

• Conduct complete installation —including in the IDE and CI
• Apply and review Sonatype sample security/licensing policies
• Review scan results and generate actionable findings
• Consume and mitigate Sonatype Lifecycle results in the IDE
• Configure Nexus to perform Sonatype Lifecycle analysis
• Outline long-term goals for component management

37.5%

Total risk reduction with Lifecycle's build-safe automation and zero manual intervention

Boost mean time to remediate (MTTR) by up to 30%

150x More open source malware packages identified than Sonatype's closest competitor

Sonatype tracks and identifies over 65M+ malicious components

95x Sonatype's proven vulnerability identification effectiveness versus certain competitors

Sonatype Lifecycle helps reduce vulnerable components by ~20% on average

Recommended for:

Ideal for any user, new to Sonatype Lifecycle, and looking for a better understanding and initial implementation of component management integration into the SDLC. This typically includes developers, IT Ops / DevOps, architects, build engineers, architects, security professionals, and the legal/compliance team.

Register: Cost

Multiple options are available and prices may vary. Please contact us at success@sonatype.com or education@sonatype.com for information about pricing or how to register for a workshop.

Sonatype Lifecycle Fundamentals Outline

NOTE: Requires the ability to run screen-sharing software (Zoom) and complete exercises. Maximum of 10 learners per class.

It’s not just Sonatype Lifecycle — it's mastering the art of secure, efficient software delivery

MODULE 1

Getting Sonatype Lifecycle installed

• Getting Sonatype Lifecycle up and running
• Scanning your first application

MODULE 2

Policy basics

• Applying policies to your raw scan data
• Creating your first set of policies

MODULE 3

Sonatype Lifecycle and IDE

• Installing and configuring the IDE plugin
• Consuming and mitigating Sonatype Lifecycle results in the IDE

MODULE 4

Sonatype Lifecycle and build CI

• Integrating into the build
• Getting the CI plugin installed and configured

MODULE 5

Sonatype Lifecycle and Sonatype Nexus Repository

• Configuring Sonatype Nexus Repository to perform Sonatype Lifecycle analysis
• Deploying to Nexus Repository staging

MODULE 6

Data triage and policy tuning

• Policy management
• Creating actionable results
• Creating policy exceptions

MODULE 7

Long-term Sonatype Lifecycle strategic considerations

• Long term goals for component Lifecycle management
• Enforcement actions and notifications

About Sonatype Workshops:

Sonatype Workshops jump-start your team's momentum and support essential changes. You'll gain strong foundational skills, expert-led training for every department, and curricula covering everything from Maven and Nexus Repository basics to advanced Sonatype Lifecycle.

Whether you prefer public classes, onsite sessions, or self-paced learning, we can help, including custom courses tailored to your needs. Learn more at sonatype.com/learning-and-development.

Sonatype is the software supply chain management company. We enable organizations to innovate faster in a highly competitive market. Our industry-leading platform empowers engineers to develop software fearlessly and focus on building products that power businesses. Sonatype researchers have analyzed more than 120 million open source components – 40x more than its competitors – and the Sonatype platform has automatically blocked over 115,000 malicious components from attacking software development pipelines. Enabling high-quality, secure software helps organizations meet their business needs and those of their customers and partners. More than 2,000 organizations, including 70% of the Fortune 100 and 15 million software developers, rely on our tools and guidance to be ambitious, move fast and do it securely. To learn more about Sonatype, please visit www.sonatype.com.