# sonatype.com

> AI-optimized mirror of sonatype.com containing 9313 pages totalling 32125972257524415515849283139693956535255216012594141639574186500289145820361412284991106691121827033031357411345316466274826925495243044713041011221711321847436243210725504899070911305035446926304232397611519801163149701445285194518225210091494681581145183128511283171695202295162174126951733544871742176611506019130573173509105214304163444161784542113268764474121392130911463926024536737220241220923035723925215915222818434004289121169413673043858185138197227108725613816711010708365861044392515331371333178495371022205233941193992941596995032810016917711587634035197553114165530293919660517918975814516922270791194420614573112723664511408107016818714816426620797824395370455257440252195136138245235280135142429027271336834175178197142147938492330219515329117434707275751471911275982543901812030162318198481661119103717014852314286123951359104469352346269788716563912696612726792981812013108282321116671135443465256845048575731702721511657362321105296363613495183211534417524898152235557523184019917774551143662381861332119754552287930526743813166798012578176838870335421197213116256384282061845602119217892132951188311921527967441206309202201127171136413014019794501424136313811434651584282415861826245055871774522059002605464361171633941854845513575615117830026232819614718727459013222439716117245419952735832192394274349213178675539229170417978922886126010419207586376604507805529376814564385383871691918322516716910008233312911063297204152472358372475992341402188436052946294182143215746562861018635455435820130264240120081004502493137947043820658260468724420189269112553620207922943259517084345973623017570718354118573521422826946417545434451653114374324726118916895985742319830823138245513721425427255871581095183991896871005221288134382683145502033809197626750380929772072424863392765957212346066010521412425544872234538552323015730828416317294020910233676635842633170113548139813341726415220655011123119441067746893011594314163339445268309713255812356217289424278389932253216217818214623410582813834663523409126716723064713050315277024110713522344836354557314207148115713553474981281881010294922191336738920472541264728155854245021472416190313871316279216104203443632122771586242442508956948415231296914131581836405314383391113173375761937023331844089110392341593242828710913283222503502934846323462319262436498173154316710291689834114412474515631083278016018924522422445211113740746959513713654311030107130315600857455336365209789116511269537290111073393742324247217792001776531726831983691293396706774042679230010194293116305491831243459960610951814248113630106410142685551048025179331613622313610691082860710045061116607981802203021326191518218322445941741925018511451009153206375161326326355965538193375213183153564228186239917645125421814918319859985437358116103218853310823152920717855822991204391917011303832791764301634158859266104314313910666212232285702185167140718213913292399411381392414102141571023051427318534965103545428122734028347517051786328210322889510243782159619103325480166248953123657422201541622905312341011141551987062062608219520950916315101318121629031656292724143162714377858430418583119371242452111149042486652102387785292621282001555216364395351322990817207542198213971038318888541447422842127350117339015819712611124723717548405825137017211272652246854919583482307397571872847324189694408684850268143318021150620245365123645116979819235521124252439284611164871447117793729195201191601263257862242125731194571011631383983986919564830173783165148178239495147967657594736577636346876813562683441921459828162471414727150157259360155543358229685835617581358133161449819977380236246660261227179652204192447435648579844213116564651067782193180450131175158984649924802153492414686613724595312712256513445449130081958921514026367141551113636624924155159265377205622225541721583986373061814892874635184306104126475091225133253174136296041835761354791989581181897106161071344406234636573282097153677278344960212169974314165176191309886224791809185711581311393331941410655101907147207092774139911751438145011947113580715261613691498623701101084355273215874294529242496325010332737139115935918841105616195265353150189387163129361348727464914112227354575967641309949548794768240371753117822982755250458865831127915211243562590235374709245151432397951349478024180565224712201931782557026913916061232418242412951117613525598334464352241874694191651100710335440178282333109103635317154655114506209810516681261716443801951786251092137395293602843192801151659337626986628314897318126334641821142131165283362291318854817715761510964702695123554850263725822802161242548874831367712791218544668326022812133146220393626013321121135879588131743523275974715437161040397401481508365519213111987167392270397109150812810952454467142427238619915797921134136504541778237981036193240218920931081001724974158571110413784603461273348508191477771601976861152212130210832471307852191163608114133918441212840451141024612702661974501995422404451180882021949250949552331731805935565264754780719993392590705281302423277617521841023948828571241822520111626461561742197723413526411363441019634950260136396125611171552806344625563246362061066459415517639182347563823411618252078105219229871656310013992004778654832172583240282160681124189517419937619628228971225014293752477947023620143320711879838015815982153131471117272106830721628832761540143732150013231371994704075857113180017013319411131435117747183317173175681601305609673241574211564243264281294491433611246181862683845571395365114112925725176686056798216357010490195100169879415220107231168264950755120234145641066321812128117017486927192131511105415613712183797552554335841447301397177325189106879864177278812938744256116480745191873295055101451213188533294535149132510392141813521971858053160291431385956371341006931064884901314619909317713233208502031317818088447109724287330815233087812167811501347343011860242302475642826176751252741167791712492571172310816931546541749528235623317614613052268819645552023867919753131554411995053390595555416919361511921924401536215315848475894415535401961546118811094487105770010186721186297143139170349871156363837013177099652301732031717016280325669028012713951081398628272676533207121536713588792016162218856352466922982012282761728226030211079317411911983771795122675936852844781315266850308248137749681013627205209217156939102588214256798586366232235932121911143012302086792562444881207205801012554416125604201165177140724786410275445057812458917652157157801688773039478861212971424129210155333114713551121105733419482911931082163455832001182354722759516063035631416021461233119851476945196617361392101043702341724311695824932021713325630991829432199615670181315517629587632394941121446904923822510745336221114531028212011856433783784252002594021885117299344808655595670564393268181199232449414183794617172506143832629935410503514425010603601108196170145868125798014641872923191774721332861071952989032134602367101745902303135170286254156116287287728132527851961282521989141417209364651175444445165167661987114360700149124270724615565911124161943360101992869491417891134509167168893207773115979816249071287110167722971644525010252917265063214635282966129343228647395200337116461438131712148522453814322618811032640115224863042383465754653021711014388155807696651529354562528332055877645723220087294612440876827510981695102762984949659026749426446428252359228901511433949941321981192172643201204042210081632383175631415102156518103321861363771973487502717436216963114630478311453303042313038175952061021875758657382381463222137299912617772570289148244431800397407101753236319146011570910252075463370014495713487341081120909162238213818289186121140193593586384160882081693818023052351746835441315501861068384214913762065586122842181229163173102029162513438671351513751692305867231416483121991521741765284791274306111062172951563787631901425432040723311767389475636143980109140166561037186969449082473031824152173830370288615661304181815115097106417035033514119145435514378147703334823311209871812044541338173820336230188245810761821116187132114517922892298952527131922065614787612935216602153231005425106301389251591101602205308211108431836104332868744116120940258396148353256272925918088256483419145557964853417524331317467578811925539400145651639232234854241660829551211215351216475392898614362562061583164521731323646179138441962572103473808833300823873093368504873545124311161317673877342151491561022192737247111386219652108626383410188510120621266550912419510911102582514102801133101431931402156221582079831916511025061427258929555867341493261276119196420320353306471725432910821313910833812801251312232001883167913869912611888818151379108127534550222812154517415210831402119533619180144182474128311184345251842129178769376214918619461961722176378561226031004475663307281951842595862624269615917689921369178142157414420306355013235162028543005545154105041081773766310865521830637121043090228491214215503703261066155556233260101313486118315618157339559662219538431020615715734810131402319409191989415212901068912319128822946682552236531989168395494147302116128517417611601752749557185762053969543231162399113104110822411102183505581832724474364117013524361802982310083217191300916118168435211704313183901682406546222151722817291251164663054325341421021440241042103423693182230377109555482171261013396784914253175149112481501811472173446548801601001153831987747954741414853109201576101929810211935551061617510493899917289721177802594504209955140478335194137310114917076440493048443124177135139426165697264411410462527013186401425411356811555408121164309499144397514519769146465160407441341982141582101344679107222374892476357341322778102511669133549786910221881011712003385240217471190420154483106776140698323417184400462808172512274284217128239251225433787711154435047319619617222148823854125310121016752795341365624680188694399124719033928769488554183845730761385640181536412410031702661943320524430111473693131347354227174147503321251241224217347012536871313434373901339184371711461048820486715835310614317077621212401679413231315101341461629581927920237148422598348910526750417663149515335217117433170227432823911013273006419738822357299409925747926691357762155324513955368459480931820810393052374943816051094240265411658701653181176612558104766628718787660317435722713197752111909198844013426205482692101813866124318319188526467091465831669485925317499113314087615058991932455174451495971000378132851186247229598769377394269147611268453551771677222317617325133161417671398768149139365912766074883062665323447511147698071824765942755315451712001214045149318171056769414725246180745261994921698212246712702575001110240184147178103469497118082595136549839334214649654143819212865553694141535669415577237810031772015458036431193181772864611657188201341291186870415166305298918117918898405545120516346120824017752581684714359396782684949142369332404937822910567254392112145064526881859517143198783154215692322410255479491881194186335374614628337205292344157631205846172256269108352118322136520343845917311190807279177236223538219501231961963921046423755964337457824131679266330228928804466118288212877955716832586534171156403255879115127405239929833681251728378105343941638552674204240941839012101081899719479444597537142341197172651486958402019910962786514943903775476155881611883225279318531721358486285399719781803861938944442657031278691066485041212957060025119765567175392681741343195168247986643134243517282309593355926866252109560976931299144331764357678113820958225946121122298246718681502815182011651221551532123635498591485210022001610377441213532642339864372552582011095468665208378160168126114124919271951775673408501241060217264341461936106257512446315837533782193485511998003305921415039303482072377217375310598348368211432916038033921430713231324346742438399215186051018216217596277149494288670521179480772031050426015643354317173532104342611554509322718936530657615360922514918644990015215126660497763540189267188939827360516419234167186931257106916466024313062157014253088366520127117214260208409884209419752194841674015905919042469310769981067267496009346423320941818942013969216904084430132430441622213282204741835520912965201568859552122341521157342311312619534611714156126711324438685114598261262621281774481344101180362222138407168981145364970641255207716139489210134482227144770151177150236176235122276801444138803012474251012229137447062147156311587514067614324920911192806067317130886249228325188433322661147392545122241642966011782431291821613524914978861940151071079971875411357921062862139293278823427710176462163061797184216392180141551421148901435626133506310361485352331812242829520821210518210662832411641481138133423742175004177597585469225297115611362113126563953738113021163064607924321511525053312262826731393415573633662720035823718111827118361395732303266629032275173751221771951233226474904827872684877531241337312713590253713627391300169101545333194483436763562802381531625316965408187100296149431522362741201046390976534705710885664002801176752294106375907238723423718017232203922260117525114660144228264266171886101100321796271046691181561218010912163152275850610716923501712216471056014422181390112180247500714020525815042535211159184817147573916170436019220534130121019643375111091020314622817319019078187799146415205743143316673520264218229278616065302841971985421362917741118455915010013176531881474073633211458826913730851850432747613857224765596128503873559505597629069254204274154350255132899221813206330760714820793546753604405232912142317112022621375404352950480301186237644718514332427014637920844971564731539264812319453264146144123929095114842312207124621333711161475143128142017273602670618849103179113017819116611757053154903283116296826695875354568721316621488241085510822092151094758221020135922012740063557642232530717682041538946934932244659265233012814881715098694128872248826340633492977814856021614855212323085134514581512033171247119174731131758561871493843817611062211256221629229961324961011021617379260716311481421483741900696146911274101387509993775448812714316167117310103082961138443128628015123949116157394767436948177124367399469403263616213324518059429213143719021220462092091661228261763317286461277521576238239181118126167616868718524118424319427839298209114922516116081958393247178433334720451427102336524427770296206652175785313768091312531934236444321175696582241207759854744215794262626206156358497537390164174825311241019514361241454081281719512630522123363322649932218022851851714222135823950357817261222028832548433131996882853485614918329155611113926552404008922079334404646319911833975122652524811651481722210835505417756237408031057183347461299421152325923855927751612772876480010919841473714002304459635058795386166142136760576197465561077705012602084506245111691619831521092671164948162197295103279451000120313353963813865824794146801771921481289136627567871609584338275713001874881505281571727889551904411562314304909852017321852547081945472491242278552932112371234736199171759981665736147816011002823671604480575291601412631793222098345557378617209111526526832053797057531804911053370173120156851299576515279937021484252117119316415511950630533319910948910425443105467209100357980912811992411424411663267180914635342524032622914364253427691323104613109628775443151922989640016121951059286321474551968665792283654361831418614962072015064141135840118283221520814001483682703442131747085334315012681072361206430164330811928022721783443450799561921391656622131988936132440456336539201535734559773181392111861018825161159688127126109866270905250710486686112123313841541635173002398861571705613261034618612380913027418039779688169856513883781748651530200169160166109517187571752242588249375352852177918283212513955093781084611237967431033345574310432135411264176820483118281011365316255110764538192316429892137198259654483818582193659135608826107616522110101683011791992457211725001010392612113484159222001944516559515586337916354441108328039311285488900363691581033583339981897414751564453455578225515910007593243038674813156873410165119325740610825491954518534129420118219245278248729918320412469542203971126313202295813717265933148825233405363217335102727495341101613229282391271751521140608415835150355200310109544156308297222122516262123677516167536720273290351274112241465615229438926391718515137791567118819751640157216112512462121472817211131962305344731814511692474658716866017930117744211411309812510943422410915815719923110951214220161293854691815315915415328792001477511151260399205358243100132835514316824310620164015912022811761160316319833091994051094107259388426583402261591561873103523311133643810747122903774153121765147843561321199213162125633682436516493214952172435569914312685054897587634664540436237341196321292538571606517421288117588578431592511932938829514897811191191947272307011098830389164378767469433875571199428233329103772619638932124617824610943428536111781842371054790633197171442669113696294714345132207811754692293179594179665163257893907311753567988151172075984071342820918825117939303581161823731854069624915174768161119344776514835318441520260866315921684604451921027560540196992351609893781711034273971766330312715443206591126858125285150053120135981267135473134341404374171165180227533834421866339216112860639819254269292742551193984216396282954777442188194189857255372711367797032113521210910531014792655644014621380791184922371781773911991281646251310157126819119413204283110284196673201440125554176781801911204370624204390214129492297456246744554178490735112207406526925161342635808292199175721551319422991694385251121715188445478118404881176682326857534415571861387022210846835624839457106732814060106733754936713220145347826789278123532112821361981006742117154900166300403247527332341722527110636944265183106188217150241409431994211526152013393287311121692519637361265244203113156980563358190192102514651901035162664101336146241031178291241869678179592651516876813048332252147201115765670524644153102262963866166112318654315222498855718056554532384927887242577119192736887293862189017612925485547743791982191301342969514291798372555192711013139301170555721538024822846127644190153937961523711493142514916246874832174010187725817215594911981898415710315220748121168379350902203131694953705282052240190521721228232316730050313613922562192348266294171143630030193706642189190362257472575652623385263017215018174182678389153203876932664035119347101591246424246286591247231524724118620454361001676651362379139161533319759129958312816704821196828601501805044027318240106279170555102112857632002810063013419365635812401711943091239123070973184975863219499619665137218329028100422343154308106815520817520332824214845841192561122133125934364351818626436416527644321806318366487142832413384432176431176106121085919787013429617697631678373670668713973535363325117229322610662397298237709934967151432042342061404916027239217190218074517110869815194623261644452824940127512611181990189814923571355635237177123980614822823061210071349193437208706251982073312247083215261213104578670018714643176426917128818235519021115518066533914471316377129626621911015134647360747854153632111673736403251807905152126617882816186286216163759302846433577702181099511173358283316650910753125419747811342061541905161246471375134575891840338209456710219615898146330404629230423313758857952325104261217163182151271190410143275837940557147216021841341614213143171801211432183760176713124664266436691225273141811211401202171211345841537418050040972631507544142563385187923630928140534155611634091232438692461807983731162662823131951442644107238791352105781935892321112573159752977734828178960014523930187971017654891123114125355147415017183118632811116572022671218310270317986459638117302146224831253014451712521717172312601781516203033143910758553592411751654481422612147041021031688601507166635100423123931551271500483733631671122837121302397146417011517823318344526607536243212940246739417154214714411064028566763059728518227389018110941491919413593844350925789613210831357185171226931593702057165345217875111425745615419699626194323370481332276256253378155110355953167910881573395252494537719310413316615231244753541631419377146239622041136150033013530512644922612118155621474040510191407491531660059326716524013699544742125634333732878331996815521646864564615416865054327642001508050181110149815148761672412165118166842038582192147613289240324750439114757211738131907232621992414786428439114533222768165824850744748002406532008194216912322411066575688131324053135488428135082629216346585495543315118465241125346328354172164255693159142117511821216414928319998038033811066012557622881489170184912010815824123113412055341139215315245683837143147814602101212541094087737223918849948173187471012414451526262274758086021058646212199110182038499314279842788867357281025110971521011446430137875510568129848571465631133155416501422437586125328176323445921674946153981631793122111451237150108031470913613111452342435362889169466901436890265612986162672566908411195235741886572442182103313538043583926169524168494308176977186465795451351073482190107138550143924613215826910347492982811145725481921778423071178211650152135720714701522388139218195231835274816012312393021745362873154721674429120132334666113331540457574930453926725613316417821768313830816617217918632452816032971368910201591291200659212246527396613177257232601131141307553194791901111094199224438822910761286247814708160167145202514251461293961273744271497213021275135061894985548176119171001741654745205346963342172901363314049775295391881012441622661731435111421136193817418741710721322322686318746548332712065132314691537164491174417121459203123261105136126444828617901058221141481742966858171601035024710154865158719380105129357290342292251126571966516766337418037193346472001497743062273305434778201878205175514116221341216717135735710241738278411521508662403191281248125915304493854274075417741208927596741311054627478814041929013759414121710561723711531691822433936115534113028848129311901594821026517161210339798213846138123919029829828766216293200646820337555167238679048468156179127415279961076112981856246354320236664815354742472431288813557359131174465931316315424026368731535195258995513162287250216311211205561811234286493191210512317015975178148188452214121478421155322172980495131545189311743524793258702531464701138978513475245591662123621417269653343426137492136091413871352152053814321913983767441422185124735987917711791416821611278829012247782281056501042954820192922461685252063722774578072938247932592234620714320416121271128174949217917327830236758050376319679494261197147245582280917223333696102641537888124313314511401861371087451881378232627314454625036417632465146562551951724200612472220100912893958583157650472398189634834168111326315040861322225170318242538231246214235686350179806113384048641206614912312382722720511912513984117514055135231652123131872489161891927523669118122545956144211426246124611168391681252373516448986920318317202227635301104134642611157817173914834435918498024388720911333348323112573489851113225567448218240792585374176135541212474732189308893492301302193247931122902782183621262391081020274172381281552616183125252926100153450418761841552645236495681971681728212482582842427771101754011031233752494242269238611501895045483791220171104631282491707352245811064823238248933921624451908032201446009767814811011191243780140602341492108180382109759064923686177432198121523871140833451919524722865351813206294818815020312674200655205283561944956168551016143374180618986894713822434827122416268936533365144397414939240166326590266196124922816344756896167241942917251021991594282809036131914375151914748741302402931635323465491903184893157961919851618715720211131434277482242164683059722987331323131248872187675416859491945134155648526187524981527417416164426211481709012018052141416712646971221036205230654952982982612861685122125630164418711053734223118421883390250623234109123179211172921571135181289671190193123316816820747032721660156071843028170661362730369575447806173991577398275172293657110817843849646284254773791022702220114122427173017144241714054419418975243397890752933212254329512152154311295384140963411385343686018199164718077962282749851415972711349316173220235174201865606133431442100201193792551099122353210081012407624861684712748010990533225266733349024660627118423553562801301521674041632409190838052787091019810730641436595854755032344155574473014282505741132211333332161634956727111970238314216721269115661535013312020671227541391984610339633937410479018806632251138221511918857650210603826941135292481422575314722848470242656918781291031598547370381146282778121244831881434448332271215583182232184739231585129683237668651381988477432236745206634794376667272248739641374215179238252130150224193620938572684049537529568616626824922385191778313228328917040618116427978756947587041437717017353690642862141851283509320707931022316264713484116467341332145305118152596141334214963030592569352152533907563323277336236261968652196187178355411692377152441062805751290618105820072139399260910532668276183454691501681523163301177313802867887035985211149459618774317321719481484626177870160415199889567104214318440447643110118977161360229114619391844345545983071191722481621327016460047914516028223187514023329127562609076671547831168617532217702625794202013234732727722314996251652159597134182316171533651298247784112031116689240497875961024210637400609152547469590733564192200181422841526408051092105431971374514663405131647936261316913011539379515430334981489511222728722379061401718811822141344210637185971627340365159284266144848213846009416539045115419524025157013719410541551157675342466103647632069196924159060107776626020396442022107782292103617067682522021151363131616725158810521701675424111832432531478415737919373731313043722019463515361330134130520102178213940742242821145943162910197825795100552992901013361494248243552433859819832994792804242244675396250336464344113980513866082155770344442011281579164462515415226748011941392891831093307545364231388129190758095722733286187359523106864261 words of clean markdown content, structured data, and semantic HTML. Original source: https://sonatype.com. Last updated: 2026-07-25T09:36:25.540Z.

Each page is available as HTML (with JSON-LD structured data) and Markdown (text-only, ideal for LLMs and RAG).

## Homepage

- [Sonatype](/content/clm/index.html) (75 words)
- [Sonatype Status](/content/status/index.html): Welcome to Sonatype's home for real-time and historical data on system performance. (173 words)
- [blog/index.html](/content/blog/index.html) (282 words)
- [Sonatype Community](/content/community/index.html) (348 words)
- [Maven Central](/content/central/index.html): Official search by the maintainers of Maven Central Repository. (168 words)
- [Sonatype Help](/content/help/index.html) (300 words)
- [Trust Center - sonatype](/content/trust/index.html): Trust is foundational to the success of our business. Trust = Transparency + Accountability. We strive for transparency through clear communication across functions and levels. We hold ourselves accountable for the promise we make to our employees, investors, and customers.

To earn your trust, we share our security and compliance programs with you. We continuously evolve with the ever-changing world around us to safely manage the confidentiality, integrity, and availability of not only Sonatype's but also the customers' data and services that we manage.

Security at Sonatype | Bug Bounty Program | Security Advisories (310 words)
- [Sonatype Open Source Community Handbook](/content/contribute/index.html): Engaging with Sonatype Community Projects, The Sonatype Open Source Community Our Flagship Projects Get Involved Open Source projects maintained by Sonatype!
Sonatype Community is a collection of Open Source projects and incubator projects maintained by Sonatype with help from the Open Source Community.
Some of the projects eventually graduate and become commercially supported by Sonatype, but most will live here forever.
Checkout our Flagship Projects We have over 9 Flagship Projects
Check them out (95 words)
- [Sonatype Guide | Open Source Security Intelligence](/content/guide/index.html): Search open source components and vulnerabilities with Sonatype Guide. AI-powered security intelligence for safer, faster development. (221 words)
- [Sonatype | Secure Software Development with Open Source & AI](/content/site-root.html): Sonatype provides intelligence & automated governance to help you build faster & safer with open source and AI. From the creators of Nexus Repository. (523 words)

## Articles & Blog Posts

- [org.slf4j/slf4j-parent 2.1.0-alpha1 | Sonatype Guide](/content/guide/component/maven/org-slf4j-slf4j-parent/2-1-0-alpha1.html): Comprehensive security analysis for org.slf4j/slf4j-parent version 2.1.0-alpha1. No known vulnerabilities. License: MIT. View dependencies, vulnerabilities, an… (44 words)
- [org.apache.commons/commons-jexl3 3.7.0 | Sonatype Guide](/content/guide/component/maven/org-apache-commons-3acommons-jexl3/3-7-0.html): Comprehensive security analysis for org.apache.commons/commons-jexl3 version 3.7.0. No known vulnerabilities. License: Apache-2.0. View dependencies, vulnerabi… (42 words)
- [org.apache.commons/commons-statistics-bom… | Sonatype Guide](/content/guide/component/maven/org-apache-commons-3acommons-statistics-bom/1-3.html): Comprehensive security analysis for org.apache.commons/commons-statistics-bom version 1.3. No known vulnerabilities. License: Not Declared. View dependencies,… (49 words)
- [Maven Central: org.apache.logging.log4j:log4j-api](/content/central/artifact/org-apache-logging-log4j/log4j-api/versions/index.html): Discover log4j-api in the org.apache.logging.log4j namespace. Explore metadata, contributors, the Maven POM file, and more. (27 words)
- [Maven Central: org.eclipse.birt.runtime.3_7_1:org.eclipse.birt.runtime:3.7.1](/content/central/artifact/org-eclipse-birt-runtime-3_7_1/org-eclipse-birt-runtime/3-7-1.html): Discover org.eclipse.birt.runtime in the org.eclipse.birt.runtime.3_7_1 namespace. Explore metadata, contributors, the Maven POM file, and more. (478 words)
- [Maven Central: org.slf4j:slf4j-parent:2.1.0-alpha1](/content/central/artifact/org-slf4j/slf4j-parent/2-1-0-alpha1.html): Discover slf4j-parent in the org.slf4j namespace. Explore metadata, contributors, the Maven POM file, and more. (374 words)
- [org.opengis.cite.teamengine/teamengine-spi… | Sonatype Guide](/content/guide/component/maven/org-opengis-cite-teamengine-3ateamengine-spi-ctl/6-0-0/versions/index.html): Browse all available versions of org.opengis.cite.teamengine/teamengine-spi-ctl. Compare version 6.0.0 with other releases, view security scores, and track ver… (147 words)
- [Troubleshooting – Sonatype Support](/content/support/hc/en-us/sections/203012628-troubleshooting/index.html): All the troubleshooting information you need to keep your Sonatype Nexus instances humming and diagnose any problems along the way. (687 words)
- [org.apache.commons/commons-jexl3 3.6.4 | V… | Sonatype Guide](/content/guide/component/maven/org-apache-commons-3acommons-jexl3/3-6-4/versions/index.html): Browse all available versions of org.apache.commons/commons-jexl3. Compare version 3.6.4 with other releases, view security scores, and track version history f… (213 words)
- [org.apache.commons/commons-statistics-bom… | Sonatype Guide](/content/guide/component/maven/org-apache-commons-3acommons-statistics-bom/1-2/versions/index.html): Browse all available versions of org.apache.commons/commons-statistics-bom. Compare version 1.2 with other releases, view security scores, and track version hi… (96 words)
- [Package URLs (purl) and Component Identifiers](/content/help/en/package-url-and-component-identifiers-html.html) (1,476 words)
- [Maven Central: org.slf4j:slf4j-jdk-platform-logging:2.0.18](/content/central/artifact/org-slf4j/slf4j-jdk-platform-logging/2-0-18.html): Discover slf4j-jdk-platform-logging in the org.slf4j namespace. Explore metadata, contributors, the Maven POM file, and more. (143 words)
- [Maven Central: org.apache.logging.log4j:log4j-docker](/content/central/artifact/org-apache-logging-log4j/log4j-docker/dependents/index.html): Discover log4j-docker in the org.apache.logging.log4j namespace. Explore metadata, contributors, the Maven POM file, and more. (20 words)
- [Component Not Found | Sonatype Guide](/content/guide/component/maven/org-apache-commons-3acommons-statistics-bom/x-y-z.html): Could not find component data for maven/org.apache.commons:commons-statistics-bom/x.y.z. This component may not exist in our database or may have been removed. (17 words)
- [Maven Central: org.slf4j:slf4j-simple](/content/central/artifact/org-slf4j/slf4j-simple/dependents/index.html): Discover slf4j-simple in the org.slf4j namespace. Explore metadata, contributors, the Maven POM file, and more. (396 words)
- [Maven Central: org.apache.logging.log4j](/content/central/namespace/org-apache-logging-log4j.html): Explore the collection of packages in org.apache.logging.log4j (465 words)
- [Maven Central: org.opengis.cite:ets-cat20-dgiwg10:0.5](/content/central/artifact/org-opengis-cite/ets-cat20-dgiwg10/0-5.html): Discover ets-cat20-dgiwg10 in the org.opengis.cite namespace. Explore metadata, contributors, the Maven POM file, and more. (308 words)
- [org.slf4j/slf4j-simple 2.0.18 | Sonatype Guide](/content/guide/component/maven/org-slf4j-slf4j-simple/2-0-18.html): Comprehensive security analysis for org.slf4j/slf4j-simple version 2.0.18. No known vulnerabilities. License: MIT. View dependencies, vulnerabilities, and deta… (46 words)
- [Sonatype Vulnerability Data](/content/help/en/sonatype-vulnerability-data-html.html) (1,461 words)
- [Maven Central: org.slf4j:slf4j-simple](/content/central/artifact/org-slf4j/slf4j-simple/versions/index.html): Discover slf4j-simple in the org.slf4j namespace. Explore metadata, contributors, the Maven POM file, and more. (16 words)
- [Maven Central: org.apache.tomcat](/content/central/namespace/org-apache-tomcat.html): Explore the collection of packages in org.apache.tomcat (353 words)
- [Notification Configuration](/content/help/en/notification-configuration-html.html) (1,119 words)
- [Page Not Found - Sonatype Community](/content/community/u/roland-asmann.html) (34 words)
- [Component Not Found | Sonatype Guide](/content/guide/component/maven/org-apache-commons-3acommons-jexl3/x-y-z.html): Could not find component data for maven/org.apache.commons:commons-jexl3/x.y.z. This component may not exist in our database or may have been removed. (17 words)
- [org.slf4j/osgi-over-slf4j 2.0.18 | Sonatype Guide](/content/guide/component/maven/org-slf4j-osgi-over-slf4j/2-0-18.html): Comprehensive security analysis for org.slf4j/osgi-over-slf4j version 2.0.18. No known vulnerabilities. License: MIT. View dependencies, vulnerabilities, and d… (42 words)
- [Nexus Documentation - Nexus IQ Server 1.26 - Sonatype.com](/content/books/sonatype-clm-book/1-26/html/book/policy-monitoring-html.html): Control the flow of components throughout your software supply chain. (731 words)
- [Maven Central: org.sonatype:maven-policy-demo](/content/central/artifact/org-sonatype/maven-policy-demo/index.html): Discover maven-policy-demo in the org.sonatype namespace. Explore metadata, contributors, the Maven POM file, and more. (261 words)
- [Understanding Golden Versions (Suggested Non-Breaking Versions) in IQ Server – Sonatype Support](/content/support/hc/en-us/articles/47998541418003-understanding-golden-versions-suggested-non-breaking-versions-in-iq-server.html): .SummaryWhen IQ Server evaluates components with security or policy violations, we provide remediation recommendations called... (794 words)
- [Configuring Inbound Traffic](/content/help/en/configuring-inbound-traffic-html.html) (891 words)
- [Maven Central: org.slf4j:slf4j-simple](/content/central/artifact/org-slf4j/slf4j-simple/index.html): Discover slf4j-simple in the org.slf4j namespace. Explore metadata, contributors, the Maven POM file, and more. (90 words)
- [org.apache.logging.log4j/log4j-api 2.26.1 | Sonatype Guide](/content/guide/component/maven/org-apache-logging-log4j-log4j-api/2-26-1.html): Comprehensive security analysis for org.apache.logging.log4j/log4j-api version 2.26.1. No known vulnerabilities. License: Apache-2.0. View dependencies, vulner… (52 words)
- [Maven Central: org.slf4j:osgi-over-slf4j](/content/central/artifact/org-slf4j/osgi-over-slf4j/dependents/index.html): Discover osgi-over-slf4j in the org.slf4j namespace. Explore metadata, contributors, the Maven POM file, and more. (119 words)
- [Configuring Service Accounts and User Tokens - IQ Cloud](/content/help/en/configuring-service-accounts-and-user-tokens-iq-cloud-html.html) (835 words)
- [Component Not Found | Sonatype Guide](/content/guide/component/maven/org-opengis-cite-teamengine-3ateamengine-spi/x-y-z.html): Could not find component data for maven/org.opengis.cite.teamengine:teamengine-spi/x.y.z. This component may not exist in our database or may have been removed. (17 words)
- [Migrating from Self-Hosted to Sonatype Cloud](/content/help/en/migrating-from-self-hosted-to-sonatype-cloud-html.html) (742 words)
- [Component Not Found | Sonatype Guide](/content/guide/component/maven/org-eclipse-birt-runtime-3_7_1-3aorg-eclipse-datatools-modelbase-sql-query/x-y-z.html): Could not find component data for maven/org.eclipse.birt.runtime.3_7_1:org.eclipse.datatools.modelbase.sql.query/x.y.z. This component may not exist in our dat… (17 words)
- [Component Not Found | Sonatype Guide](/content/guide/component/maven/org-eclipse-birt-runtime-3_7_1-3aorg-eclipse-osgi/x-y-z.html): Could not find component data for maven/org.eclipse.birt.runtime.3_7_1:org.eclipse.osgi/x.y.z. This component may not exist in our database or may have been re… (17 words)
- [Maven Central: org.eclipse.birt.runtime.3_7_1:org.eclipse.osgi:3.7.1](/content/central/artifact/org-eclipse-birt-runtime-3_7_1/org-eclipse-osgi/3-7-1.html): Discover org.eclipse.osgi in the org.eclipse.birt.runtime.3_7_1 namespace. Explore metadata, contributors, the Maven POM file, and more. (89 words)
- [Nexus Documentation - Nexus IQ Server 1.26 - Sonatype.com](/content/books/sonatype-clm-book/1-26/html/book/sonarqube-clm-widget-configuration-html.html): Control the flow of components throughout your software supply chain. (280 words)
- [Logging Configuration](/content/help/en/logging-configuration-html.html) (791 words)
- [Maven Central: org.eclipse.birt.runtime.3_7_1:org.eclipse.datatools.modelbase.sql.query:1.1.1](/content/central/artifact/org-eclipse-birt-runtime-3_7_1/org-eclipse-datatools-modelbase-sql-query/1-1-1.html): Discover org.eclipse.datatools.modelbase.sql.query in the org.eclipse.birt.runtime.3_7_1 namespace. Explore metadata, contributors, the Maven POM file, and more. (91 words)
- [Maven Central: org.eclipse.birt.runtime.3_7_1:org.eclipse.emf.ecore:2.7.0](/content/central/artifact/org-eclipse-birt-runtime-3_7_1/org-eclipse-emf-ecore/2-7-0.html): Discover org.eclipse.emf.ecore in the org.eclipse.birt.runtime.3_7_1 namespace. Explore metadata, contributors, the Maven POM file, and more. (92 words)
- [Sonatype Lifecycle FIPS 140-3 Compliance](/content/help/en/sonatype-lifecycle-fips-compliance-html.html) (475 words)
- [Getting Started with Lifecycle SaaS](/content/help/en/getting-started-with-lifecycle-saas-html.html) (558 words)
- [Data Retention](/content/help/en/data-retention-html.html) (436 words)
- [Policy Inheritance](/content/help/en/policy-inheritance-html.html) (134 words)
- [Phase 2 - Reviewing and Assessing Risk](/content/help/en/phase-2-reviewing-and-assessing-risk-html.html) (528 words)
- [License Policies](/content/help/en/license-policies-html.html) (551 words)
- [Configuring with Java System Properties](/content/help/en/configuring-with-java-system-properties-html.html) (185 words)
- [Organization Management](/content/help/en/organization-management-html.html) (537 words)
- [Configuring System Notice](/content/help/en/configuring-system-notice-html.html) (180 words)
- [Manage User Account](/content/help/en/manage-your-user-account-html.html) (272 words)
- [Reverse Proxy Authentication](/content/help/en/reverse-proxy-authentication-html.html) (204 words)
- [Public Key Infrastructure (PKI) Authentication](/content/help/en/pki-authentication-html.html) (95 words)
- [Migrating to HA Setup](/content/help/en/migrating-to-ha-setup-html.html) (504 words)
- [Backup the IQ Server](/content/help/en/backing-up-the-iq-server-html.html) (567 words)
- [Sonatype Data Handling Process](/content/help/en/sonatype-data-handling-process-html.html) (523 words)
- [Running as a Windows Service](/content/help/en/run-iq-server-as-a-windows-service-html.html) (404 words)
- [Bring-Your-Own Log Aggregation Examples for IQ Server HA](/content/help/en/bring-your-own-log-aggregation-examples-for-iq-server-ha-html.html) (370 words)
- [Working with Vulnerability Data](/content/help/en/working-with-vulnerability-data-html.html) (156 words)
- [Naming conventions for OSS licenses](/content/help/en/naming-conventions-for-oss-licenses-html.html) (242 words)
- [Deployment Options](/content/help/en/deployment-options-html.html) (230 words)
- [Container Vulnerability Data Sources and Operating System Coverage](/content/help/en/container-vulnerability-data-sources-and-operating-system-coverage-html.html) (462 words)
- [Add-on Packs](/content/help/en/add-on-packs-html.html) (366 words)
- [Performance Benchmarks for High Availability](/content/help/en/performance-benchmarks-for-high-availability-html.html) (260 words)
- [Service Limits for Lifecycle SaaS](/content/help/en/service-limits-for-lifecycle-saas-html.html) (87 words)
- [IQ Server High Availability Installation](/content/help/en/iq-server-high-availability-installation-html.html) (257 words)
- [Configuring with Environment Variables](/content/help/en/configuring-with-environment-variables-html.html) (105 words)
- [Product Information and Downloads](/content/help/en/lifecycle-product-information-html.html) (90 words)
- [Repository: How to Find the Sonatype Nexus Repository 2 Product Version – Sonatype Support](/content/support/hc/en-us/articles/37708547200659-repository-how-to-find-the-sonatype-nexus-repository-2-product-version.html): .  Overview: Understanding Nexus Repository Product Version Format Nexus Repository product versions use this format: {semantic product... (309 words)
- [Move the installation](/content/help/en/move-the-installation-html.html) (338 words)
- [Getting Started](/content/help/en/getting-started-html.html) (198 words)
- [Switching from the IQ Server Standalone JAR to the Bundled JDK Assembly](/content/help/en/migrate-to-iq-with-bundled-jdk-html.html) (379 words)
- [Restore the IQ Server](/content/help/en/restoring-the-iq-server-html.html) (317 words)
- [Configuring](/content/help/en/configuring-html.html) (13 words)
- [Nexus Repository 2 Documentation – Sonatype Support](/content/support/hc/en-us/articles/33379982205459-nexus-repository-2-documentation/index.html): Nexus Repository 2 has entered extended maintenance support. Support for all Nexus Repo 2 versions will end on June 30, 2025. As part of... (50 words)
- [Policy Management](/content/help/en/policy-management-html.html) (450 words)
- [Sonatype Solution Switcher](/content/help/en/sonatype-solution-switcher-html.html) (113 words)
- [The page you were looking for doesn't exist – Sonatype Support](/content/support/hc/en-us/articles/360021680953-04-22-19-new-licenses-and-updates-to-default-license-threat-groups-ltgs.html) (21 words)
- [MarkupSafe 3.0.3 | Sonatype Guide](/content/guide/component/pypi/markupsafe/3-0-3.html): Comprehensive security analysis for MarkupSafe version 3.0.3. No known vulnerabilities. License: BSD-3-Clause. View dependencies, vulnerabilities, and detailed… (39 words)
- [charset-normalizer 3.4.9 | Sonatype Guide](/content/guide/component/pypi/charset-normalizer/3-4-9.html): Comprehensive security analysis for charset-normalizer version 3.4.9. No known vulnerabilities. License: MIT. View dependencies, vulnerabilities, and detailed… (41 words)
- [download/nexus/professional-bundle/nexus-professional-2-15-2-03-bundle-tar-gz-asc.html](/content/download/nexus/professional-bundle/nexus-professional-2-15-2-03-bundle-tar-gz-asc.html) (10 words)
- [org.mockito/mockito-inline 5.2.0 | Sonatype Guide](/content/guide/component/maven/org-mockito-3amockito-inline/5-2-0.html): Comprehensive security analysis for org.mockito/mockito-inline version 5.2.0. No known vulnerabilities. License: MIT. View dependencies, vulnerabilities, and d… (39 words)
- [cffi 2.1.0 | Sonatype Guide](/content/guide/component/pypi/cffi/2-1-0.html): Comprehensive security analysis for cffi version 2.1.0. No known vulnerabilities. License: MIT-0. View dependencies, vulnerabilities, and detailed package info… (36 words)
- [PyYAML 6.0.3 | Sonatype Guide](/content/guide/component/pypi/pyyaml/6-0-3.html): Comprehensive security analysis for PyYAML version 6.0.3. No known vulnerabilities. License: MIT. View dependencies, vulnerabilities, and detailed package info… (37 words)
- [Lifecycle Release Notes](/content/help/en/lifecycle-release-notes-html.html) (20 words)
- [Top Sonatype Labs topics - Sonatype Community](/content/community/c/sonatype-labs/32/l/top/index.html): Ask questions and discuss Sonatype Labs experimental features, including Data Insights. (54 words)
- [Search results – Sonatype Support](/content/support/hc/en-us/search/index.html) (21 words)
- [How to configure HSTS in Nexus Repository 3 – Sonatype Support](/content/support/hc/articles/360024943193/index.html): . What is HTTP Strict Transport Security (HSTS)? HSTS is a standard intended to encourage web browsers to only transmit requests securely... (273 words)
- [Component Not Found | Sonatype Guide](/content/guide/component/pypi/pydantic_core/2-47-0.html): Could not find component data for pypi/pydantic_core/2.47.0. This component may not exist in our database or may have been removed. (17 words)
- [Advanced Method of Relocating Blob Stores in Repo 3 Running OrientDB – Sonatype Support](/content/support/hc/en-us/articles/235816228-relocating-blob-stores/index.html): Please Use Caution The preferred and supported way to move a blob store can be found in our help documentation.  These steps in this... (305 words)
- [Latest Sonatype Labs topics - Sonatype Community](/content/community/c/sonatype-labs/32/l/latest/index.html): Ask questions and discuss Sonatype Labs experimental features, including Data Insights. (94 words)
- [Maven Central: org.sonatype](/content/central/namespace/org-sonatype.html): Explore the collection of packages in org.sonatype (83 words)
- [Component Not Found | Sonatype Guide](/content/guide/component/pypi/propcache/x-y-z.html): Could not find component data for pypi/propcache/x.y.z. This component may not exist in our database or may have been removed. (17 words)
- [support/hc/article_attachments/39479210798355/index.html](/content/support/hc/article_attachments/39479210798355/index.html) (7 words)
- [support/hc/en-us/article_attachments/39479210798355/index.html](/content/support/hc/en-us/article_attachments/39479210798355/index.html) (7 words)
- [Page Not Found - Sonatype Community](/content/community/u/jfinnessy/index.html) (27 words)
- [Page Not Found - Sonatype Community](/content/community/c/sonatype-ideas/index.html) (158 words)
- [Maven Central: org.apache.commons:commons-jexl3:3.7.0](/content/central/artifact/org-apache-commons/commons-jexl3/3-7-0.html): Discover commons-jexl3 in the org.apache.commons namespace. Explore metadata, contributors, the Maven POM file, and more. (608 words)
- [Latest Sonatype Exchange/Sonatype Exchange Discussion topics - Sonatype Community](/content/community/c/exchange/exchange-discussion/46/l/latest/index.html): Questions or thoughts about what you find on the Exchange? Start a conversation here. (160 words)
- [Maven Central: com.akamai.edgegrid:edgerc-reader:6.0.2](/content/central/artifact/com-akamai-edgegrid/edgerc-reader/6-0-2.html): Discover edgerc-reader in the com.akamai.edgegrid namespace. Explore metadata, contributors, the Maven POM file, and more. (90 words)
- [org.apache.commons/commons-parent 100 | Ve… | Sonatype Guide](/content/guide/component/maven/org-apache-commons-3acommons-parent/100/versions/index.html): Browse all available versions of org.apache.commons/commons-parent. Compare version 100 with other releases, view security scores, and track version history fo… (103 words)
- [Maven Central: org.apache.commons:commons-jexl3:3.6.2](/content/central/artifact/org-apache-commons/commons-jexl3/3-6-2.html): Discover commons-jexl3 in the org.apache.commons namespace. Explore metadata, contributors, the Maven POM file, and more. (602 words)
- [com.akamai.edgegrid/edgerc-reader 6.0.3-rc… | Sonatype Guide](/content/guide/component/maven/com-akamai-edgegrid-edgerc-reader/6-0-3-rc-1.html): Comprehensive security analysis for com.akamai.edgegrid/edgerc-reader version 6.0.3-rc.1. No known vulnerabilities. License: Apache-2.0. View dependencies, vul… (51 words)
- [com.akamai.edgegrid/edgerc-reader 6.0.3 | Sonatype Guide](/content/guide/component/maven/com-akamai-edgegrid-edgerc-reader/6-0-3.html): Comprehensive security analysis for com.akamai.edgegrid/edgerc-reader version 6.0.3. No known vulnerabilities. License: Apache-2.0. View dependencies, vulnerab… (48 words)
- [com.akamai.edgegrid/edgerc-reader 6.0.2 | Sonatype Guide](/content/guide/component/maven/com-akamai-edgegrid-edgerc-reader/6-0-2.html): Comprehensive security analysis for com.akamai.edgegrid/edgerc-reader version 6.0.2. No known vulnerabilities. License: Apache-2.0. View dependencies, vulnerab… (52 words)
- [com.akamai.edgegrid/edgerc-reader 6.0.2-rc… | Sonatype Guide](/content/guide/component/maven/com-akamai-edgegrid-edgerc-reader/6-0-2-rc-1.html): Comprehensive security analysis for com.akamai.edgegrid/edgerc-reader version 6.0.2-rc.1. No known vulnerabilities. License: Apache-2.0. View dependencies, vul… (42 words)
- [Maven Central: com.akamai.edgegrid:edgerc-reader:6.0.3-rc.1](/content/central/artifact/com-akamai-edgegrid/edgerc-reader/6-0-3-rc-1.html): Discover edgerc-reader in the com.akamai.edgegrid namespace. Explore metadata, contributors, the Maven POM file, and more. (102 words)
- [org.apache.commons/commons-parent 94 | Ver… | Sonatype Guide](/content/guide/component/maven/org-apache-commons-3acommons-parent/94/versions/index.html): Browse all available versions of org.apache.commons/commons-parent. Compare version 94 with other releases, view security scores, and track version history for… (276 words)
- [Maven Central: com.akamai.edgegrid:edgerc-reader:6.0.2-rc.1](/content/central/artifact/com-akamai-edgegrid/edgerc-reader/6-0-2-rc-1.html): Discover edgerc-reader in the com.akamai.edgegrid namespace. Explore metadata, contributors, the Maven POM file, and more. (91 words)
- [Maven Central: com.akamai.edgegrid:edgerc-reader:6.0.3](/content/central/artifact/com-akamai-edgegrid/edgerc-reader/6-0-3.html): Discover edgerc-reader in the com.akamai.edgegrid namespace. Explore metadata, contributors, the Maven POM file, and more. (103 words)
- [Release Notes](/content/help/en/release-notes-html.html) (606 words)
- [Maven Central: org.apache.commons:commons-jexl3:3.6.3](/content/central/artifact/org-apache-commons/commons-jexl3/3-6-3.html): Discover commons-jexl3 in the org.apache.commons namespace. Explore metadata, contributors, the Maven POM file, and more. (598 words)
- [Configuring MCP Servers](/content/help/en/configuring-mcp-server-html.html) (1,708 words)
- [org.apache.commons/commons-jexl3 3.3 | Ver… | Sonatype Guide](/content/guide/component/maven/org-apache-commons-3acommons-jexl3/3-3/versions/index.html): Browse all available versions of org.apache.commons/commons-jexl3. Compare version 3.3 with other releases, view security scores, and track version history for… (155 words)
- [Maven Central: org.apache.commons:commons-statistics-interval](/content/central/artifact/org-apache-commons/commons-statistics-interval/versions/index.html): Discover commons-statistics-interval in the org.apache.commons namespace. Explore metadata, contributors, the Maven POM file, and more. (41 words)
- [Maven Central: org.slf4j:osgi-over-slf4j](/content/central/artifact/org-slf4j/osgi-over-slf4j/versions/index.html): Discover osgi-over-slf4j in the org.slf4j namespace. Explore metadata, contributors, the Maven POM file, and more. (171 words)
- [Maven Central: org.slf4j:slf4j-jdk-platform-logging](/content/central/artifact/org-slf4j/slf4j-jdk-platform-logging/dependents/index.html): Discover slf4j-jdk-platform-logging in the org.slf4j namespace. Explore metadata, contributors, the Maven POM file, and more. (360 words)
- [Page Not Found - Sonatype Community](/content/community/u/kmlkaur73/index.html) (34 words)
- [Nexus Repository Cloud Release Notes](/content/help/en/2026-nexus-repository-cloud-release-notes-html.html) (2,191 words)
- [Maven Central: org.apache.commons:commons-statistics-bom:1.3](/content/central/artifact/org-apache-commons/commons-statistics-bom/1-3.html): Discover commons-statistics-bom in the org.apache.commons namespace. Explore metadata, contributors, the Maven POM file, and more. (112 words)
- [Component Not Found | Sonatype Guide](/content/guide/component/maven/com-codelry-util-3acapella-api/x-y-z.html): Could not find component data for maven/com.codelry.util:capella-api/x.y.z. This component may not exist in our database or may have been removed. (17 words)
- [org.apache.commons/commons-statistics-bom… | Sonatype Guide](/content/guide/component/maven/org-apache-commons-commons-statistics-bom/1-2.html): Comprehensive security analysis for org.apache.commons/commons-statistics-bom version 1.2. No known vulnerabilities. License: Not Declared. View dependencies,… (57 words)
- [Maven Central: org.slf4j:slf4j-jdk-platform-logging](/content/central/artifact/org-slf4j/slf4j-jdk-platform-logging/versions/index.html): Discover slf4j-jdk-platform-logging in the org.slf4j namespace. Explore metadata, contributors, the Maven POM file, and more. (178 words)
- [Product Information](/content/help/en/product-information-html.html) (414 words)
- [Maven Central: org.eclipse.tycho](/content/central/namespace/org-eclipse-tycho.html): Explore the collection of packages in org.eclipse.tycho (300 words)
- [Guide API Reference](/content/help/en/guide-api-reference-html.html) (348 words)
- [Maven Central: org.apache.commons:commons-statistics-descriptive:1.3](/content/central/artifact/org-apache-commons/commons-statistics-descriptive/1-3.html): Discover commons-statistics-descriptive in the org.apache.commons namespace. Explore metadata, contributors, the Maven POM file, and more. (121 words)
- [Maven Central: org.apache.commons:commons-statistics-interval](/content/central/artifact/org-apache-commons/commons-statistics-interval/index.html): Discover commons-statistics-interval in the org.apache.commons namespace. Explore metadata, contributors, the Maven POM file, and more. (234 words)
- [Maven Central: org.apache.commons:commons-statistics-ranking](/content/central/artifact/org-apache-commons/commons-statistics-ranking/index.html): Discover commons-statistics-ranking in the org.apache.commons namespace. Explore metadata, contributors, the Maven POM file, and more. (246 words)
- [Maven Central: org.apache.commons:commons-parent:98](/content/central/artifact/org-apache-commons/commons-parent/98/index.html): Discover commons-parent in the org.apache.commons namespace. Explore metadata, contributors, the Maven POM file, and more. (4,160 words)
- [Component Not Found | Sonatype Guide](/content/guide/component/maven/com-fasterxml-jackson-core-3ajackson-databind/x-y-z.html): Could not find component data for maven/com.fasterxml.jackson.core:jackson-databind/x.y.z. This component may not exist in our database or may have been remove… (17 words)
- [org.apache.commons/commons-parent 99 | Sonatype Guide](/content/guide/component/maven/org-apache-commons-commons-parent/99/index.html): Comprehensive security analysis for org.apache.commons/commons-parent version 99. No known vulnerabilities. License: Apache-2.0. View dependencies, vulnerabili… (52 words)
- [org.apache.commons/commons-parent 101 | Sonatype Guide](/content/guide/component/maven/org-apache-commons-commons-parent/101/index.html): Comprehensive security analysis for org.apache.commons/commons-parent version 101. No known vulnerabilities. License: Apache-2.0. View dependencies, vulnerabil… (49 words)
- [Maven Central: org.apache.commons:commons-statistics-bom:1.1](/content/central/artifact/org-apache-commons/commons-statistics-bom/1-1.html): Discover commons-statistics-bom in the org.apache.commons namespace. Explore metadata, contributors, the Maven POM file, and more. (114 words)
- [org.slf4j/slf4j-jdk-platform-logging 2.0.18 | Sonatype Guide](/content/guide/component/maven/org-slf4j-slf4j-jdk-platform-logging/2-0-18.html): Comprehensive security analysis for org.slf4j/slf4j-jdk-platform-logging version 2.0.18. No known vulnerabilities. License: MIT. View dependencies, vulnerabili… (56 words)
- [org.apache.commons/commons-jexl3 3.6.3 | Sonatype Guide](/content/guide/component/maven/org-apache-commons-commons-jexl3/3-6-3.html): Comprehensive security analysis for org.apache.commons/commons-jexl3 version 3.6.3. No known vulnerabilities. License: Apache-2.0. View dependencies, vulnerabi… (28 words)
- [Nexus Repository 3.70.x Downloads with OrientDB](/content/help/en/orientdb-downloads-html.html) (215 words)
- [Nexus Repository 2 fails to start with java.lang.OutOfMemoryError: unable to create new native thread – Sonatype Support](/content/support/hc/en-us/articles/213464658-nexus-fails-to-start-with-java-lang-outofmemoryerror-unable-to-create-new-native-thread.html): Nexus Repository 2 officially sunsetted June 30, 2025. Visit my.sonatype.com for archived documentation. Migrate to Sonatype Nexus... (180 words)
- [org.apache.commons/commons-statistics-bom… | Sonatype Guide](/content/guide/component/maven/org-apache-commons-commons-statistics-bom/1-3.html): Comprehensive security analysis for org.apache.commons/commons-statistics-bom version 1.3. No known vulnerabilities. License: Not Declared. View dependencies,… (41 words)
- [Download](/content/help/en/download-html.html) (392 words)
- [Maven Central: org.apache.commons:commons-statistics-inference](/content/central/artifact/org-apache-commons/commons-statistics-inference/dependents/index.html): Discover commons-statistics-inference in the org.apache.commons namespace. Explore metadata, contributors, the Maven POM file, and more. (108 words)
- [org.apache.commons/commons-statistics-infe… | Sonatype Guide](/content/guide/component/maven/org-apache-commons-commons-statistics-inference/1-3.html): Comprehensive security analysis for org.apache.commons/commons-statistics-inference version 1.3. No known vulnerabilities. License: Apache-2.0. View dependenci… (37 words)
- [org.apache.commons/commons-statistics-bom… | Sonatype Guide](/content/guide/component/maven/org-apache-commons-commons-statistics-bom/1-1.html): Comprehensive security analysis for org.apache.commons/commons-statistics-bom version 1.1. No known vulnerabilities. License: Not Declared. View dependencies,… (35 words)
- [Using Guide Personal Access Tokens with OSS Index API Integrations](/content/help/en/using-guide-personal-access-tokens-with-oss-index-api-integrations-html.html) (558 words)
- [org.apache.commons/commons-jexl3 3.7.0 | Sonatype Guide](/content/guide/component/maven/org-apache-commons-commons-jexl3/3-7-0.html): Comprehensive security analysis for org.apache.commons/commons-jexl3 version 3.7.0. No known vulnerabilities. License: Apache-2.0. View dependencies, vulnerabi… (49 words)
- [org.eclipse.tycho/tycho 5.0.3 | Sonatype Guide](/content/guide/component/maven/org-eclipse-tycho-tycho/5-0-3.html): Comprehensive security analysis for org.eclipse.tycho/tycho version 5.0.3. No known vulnerabilities. License: EPL-2.0. View dependencies, vulnerabilities, and… (40 words)
- [OSS Index Migration Steps](/content/help/en/oss-index-migration-steps-html.html) (643 words)
- [OSS Index Migration to Sonatype Guide](/content/help/en/oss-index-migration-to-sonatype-guide-html.html) (915 words)
- [Maven Central: org.apache.commons:commons-parent:99](/content/central/artifact/org-apache-commons/commons-parent/99/index.html): Discover commons-parent in the org.apache.commons namespace. Explore metadata, contributors, the Maven POM file, and more. (4,177 words)
- [8th Annual State of the Software Supply Chain Report](/content/resources/state-of-the-software-supply-chain-2022/introduction/index.html): The 8th Annual State of the Software Supply Chain Report was compiled by Sonatype to help guide you through the rapidly changing landscape of open source. (1,146 words)
- [Maven Central: org.apache.commons:commons-parent:100](/content/central/artifact/org-apache-commons/commons-parent/100/index.html): Discover commons-parent in the org.apache.commons namespace. Explore metadata, contributors, the Maven POM file, and more. (4,149 words)
- [Maven Central: org.apache.commons:commons-statistics-interval](/content/central/artifact/org-apache-commons/commons-statistics-interval/dependents/index.html): Discover commons-statistics-interval in the org.apache.commons namespace. Explore metadata, contributors, the Maven POM file, and more. (16 words)
- [hubfs/ssc/son_sssc-report-2019_jun25-pdf.html](/content/hubfs/ssc/son_sssc-report-2019_jun25-pdf.html) (19,329 words)
- [Maven Central: org.apache.commons:commons-parent:101](/content/central/artifact/org-apache-commons/commons-parent/101/index.html): Discover commons-parent in the org.apache.commons namespace. Explore metadata, contributors, the Maven POM file, and more. (4,152 words)
- [com.fasterxml.jackson.core/jackson-databin… | Sonatype Guide](/content/guide/component/maven/com-fasterxml-jackson-core-jackson-databind/2-10-0.html): Comprehensive security analysis for com.fasterxml.jackson.core/jackson-databind version 2.10.0. Max vulnerability severity: 9.3 CVSS. License: Apache-2.0. View… (32 words)
- [Maven Central: org.apache.commons:commons-parent:102](/content/central/artifact/org-apache-commons/commons-parent/102/index.html): Discover commons-parent in the org.apache.commons namespace. Explore metadata, contributors, the Maven POM file, and more. (4,155 words)
- [Maven Central: org.apache.commons:commons-parent:103](/content/central/artifact/org-apache-commons/commons-parent/103/index.html): Discover commons-parent in the org.apache.commons namespace. Explore metadata, contributors, the Maven POM file, and more. (4,155 words)
- [Manage Guide User Tokens](/content/help/en/manage-guide-user-tokens-html.html) (267 words)
- [ai.platon.pulsar/pulsar-all 4.9.2 | Versio… | Sonatype Guide](/content/guide/component/maven/ai-platon-pulsar-3apulsar-all/4-9-2/versions/index.html): Browse all available versions of ai.platon.pulsar/pulsar-all. Compare version 4.9.2 with other releases, view security scores, and track version history for th… (292 words)
- [How to configure HSTS in Nexus Repository 2 – Sonatype Support](/content/support/hc/en-us/articles/4419229996691-how-to-configure-hsts-in-nexus-repository-2.html): Nexus Repository 2 officially sunsetted June 30, 2025. Visit my.sonatype.com for archived documentation. Migrate to Sonatype Nexus... (228 words)
- [Integrate with Sonatype Guide](/content/help/en/integrate-with-sonatype-guide-html.html) (240 words)
- [Download Archives - Sonatype Nexus Repository 3](/content/help/en/download-archives-repository-manager-3-html.html) (7,825 words)
- [hubfs/ssc/2017-20ssc/2017-20state-20of-20the-20software-20supply-20chain-20report-pdf.html](/content/hubfs/ssc/2017-20ssc/2017-20state-20of-20the-20software-20supply-20chain-20report-pdf.html) (9,778 words)
- [ai.platon.pulsar/pulsar-all 4.8.2 | Versio… | Sonatype Guide](/content/guide/component/maven/ai-platon-pulsar-3apulsar-all/4-8-2/versions/index.html): Browse all available versions of ai.platon.pulsar/pulsar-all. Compare version 4.8.2 with other releases, view security scores, and track version history for th… (235 words)
- [hubfs/white_papers/2015_state_of_the_software_supply_chain_report-pdf.html](/content/hubfs/white_papers/2015_state_of_the_software_supply_chain_report-pdf.html) (11,808 words)
- [ai.platon.pulsar/pulsar-all 4.8.4 | Versio… | Sonatype Guide](/content/guide/component/maven/ai-platon-pulsar-3apulsar-all/4-8-4/versions/index.html): Browse all available versions of ai.platon.pulsar/pulsar-all. Compare version 4.8.4 with other releases, view security scores, and track version history for th… (261 words)
- [hubfs/1-2023-20new-20site-20assets/find-20a-20partner-202023/2018-20state-20of-20the-20software-20supply-20chain-20report-pdf.html](/content/hubfs/1-2023-20new-20site-20assets/find-20a-20partner-202023/2018-20state-20of-20the-20software-20supply-20chain-20report-pdf.html) (11,453 words)
- [hubfs/ssc/son_sssc-report-2020_sept23-pdf.html](/content/hubfs/ssc/son_sssc-report-2020_sept23-pdf.html) (14,074 words)
- [hubfs/q3-202021-state-20of-20the-20software-20supply-20chain-report/sssc-report-2021_0913_pm_2-pdf.html](/content/hubfs/q3-202021-state-20of-20the-20software-20supply-20chain-report/sssc-report-2021_0913_pm_2-pdf.html) (12,171 words)
- [org.fryske-akademy/teidictionaries 5.9 | V… | Sonatype Guide](/content/guide/component/maven/org-fryske-akademy-3ateidictionaries/5-9/versions/index.html): Browse all available versions of org.fryske-akademy/teidictionaries. Compare version 5.9 with other releases, view security scores, and track version history f… (240 words)
- [org.fryske-akademy/teidictionaries 5.1 | V… | Sonatype Guide](/content/guide/component/maven/org-fryske-akademy-3ateidictionaries/5-1/versions/index.html): Browse all available versions of org.fryske-akademy/teidictionaries. Compare version 5.1 with other releases, view security scores, and track version history f… (224 words)
- [org.opengis.cite.teamengine/teamengine-cor… | Sonatype Guide](/content/guide/component/maven/org-opengis-cite-teamengine-3ateamengine-core/5-5/versions/index.html): Browse all available versions of org.opengis.cite.teamengine/teamengine-core. Compare version 5.5 with other releases, view security scores, and track version… (167 words)
- [com.tencent.mna/mnalibrary 1.2.3 | Versions | Sonatype Guide](/content/guide/component/maven/com-tencent-mna-3amnalibrary/1-2-3/versions/index.html): Browse all available versions of com.tencent.mna/mnalibrary. Compare version 1.2.3 with other releases, view security scores, and track version history for thi… (323 words)
- [ca.islandora.alpaca/islandora-indexing-tri… | Sonatype Guide](/content/guide/component/maven/ca-islandora-alpaca-3aislandora-indexing-triplestore/1-0-4/versions/index.html): Browse all available versions of ca.islandora.alpaca/islandora-indexing-triplestore. Compare version 1.0.4 with other releases, view security scores, and track… (168 words)
- [Maven Central: org.eclipse.birt.runtime.3_7_1:org.eclipse.birt.runtime](/content/central/artifact/org-eclipse-birt-runtime-3_7_1/org-eclipse-birt-runtime.html): Discover org.eclipse.birt.runtime in the org.eclipse.birt.runtime.3_7_1 namespace. Explore metadata, contributors, the Maven POM file, and more. (487 words)
- [org.opengis.cite.teamengine/teamengine-cor… | Sonatype Guide](/content/guide/component/maven/org-opengis-cite-teamengine-3ateamengine-core/5-5-2/versions/index.html): Browse all available versions of org.opengis.cite.teamengine/teamengine-core. Compare version 5.5.2 with other releases, view security scores, and track versio… (177 words)
- [Certificates and Secure Connections](/content/help/en/certificates-and-secure-connections-html.html) (4,533 words)
- [How the Sonatype Support Submit a Request Form Works – Sonatype Support](/content/support/hc/en-us/articles/36031044402323-how-the-sonatype-support-submit-a-request-form-works.html): Please read this article carefully - it contains important information about the use of AI when submitting a request to Sonatype Support.... (270 words)
- [Latest Sonatype Nexus Repository topics - Sonatype Community](/content/community/c/nexus-repository/6/l/latest/index.html): Ask questions and follow discussions about Sonatype Nexus Repository. (6,843 words)
- [Product Support Overview – Sonatype Support](/content/support/hc/en-us/sections/203012538-product-support-overview/index.html): Help using https://support.sonatype.com and understanding our product support policies. (67 words)
- [org.sonatype.gradle.plugins/scan-gradle-pl… | Sonatype Guide](/content/guide/component/maven/org-sonatype-gradle-plugins-scan-gradle-plugin/2-5-3.html): Comprehensive security analysis for org.sonatype.gradle.plugins/scan-gradle-plugin version 2.5.3. Max vulnerability severity: 9.8 CVSS. License: Apache-2.0. Vi… (23 words)
- [Nexus Documentation - Nexus IQ Server 1.26 - Sonatype.com](/content/books/sonatype-clm-book/1-26/html/book/clm-server-evaluation-html.html): Control the flow of components throughout your software supply chain. (749 words)
- [Nexus Documentation - Nexus IQ Server 1.26 - Sonatype.com](/content/books/sonatype-clm-book/1-26/html/book/clm-maven-plugin-ide-html.html): Control the flow of components throughout your software supply chain. (857 words)
- [org.opengis.cite.teamengine/teamengine-spi… | Sonatype Guide](/content/guide/component/maven/org-opengis-cite-teamengine-3ateamengine-spi-ctl/5-5/versions/index.html): Browse all available versions of org.opengis.cite.teamengine/teamengine-spi-ctl. Compare version 5.5 with other releases, view security scores, and track versi… (160 words)
- [Keycloak SAML integration with Sonatype Platform – Sonatype Support](/content/support/hc/en-us/articles/1500000976522-keycloak-saml-integration-with-nexus-applications.html): Overview This article outlines how to integrate Keycloak with Nexus Repository 3 Pro and/or Sonatpye IQ Server. The given setup will... (1,774 words)
- [Nexus Documentation - Nexus IQ Server 1.26 - Sonatype.com](/content/books/sonatype-clm-book/1-26/html/book/tags-html.html): Control the flow of components throughout your software supply chain. (985 words)
- [Nexus Documentation - Nexus IQ Server 1.26 - Sonatype.com](/content/books/sonatype-clm-book/1-26/html/book/label-management-html.html): Control the flow of components throughout your software supply chain. (814 words)
- [Maven Central: org.sonatype.gradle.plugins](/content/central/namespace/org-sonatype-gradle-plugins.html): Explore the collection of packages in org.sonatype.gradle.plugins (56 words)
- [Latest Sonatype Learn topics - Sonatype Community](/content/community/c/learn-sonatype/36/l/latest/index.html): A place to discuss Sonatype Learn courses and Learning Paths. Explore our free online course catalog or embark on a Learning Path at Learn.Sonatype.com. (646 words)
- [Maven Central: io.netty:netty-codec-http2](/content/central/artifact/io-netty/netty-codec-http2/index.html): Discover netty-codec-http2 in the io.netty namespace. Explore metadata, contributors, the Maven POM file, and more. (241 words)
- [ai.platon.pulsar/pulsar-all 4.9.5 | Vulner… | Sonatype Guide](/content/guide/component/maven/ai-platon-pulsar-3apulsar-all/4-9-5/vulnerabilities/index.html): Security vulnerabilities and CVE data for ai.platon.pulsar/pulsar-all version 4.9.5. View CVSS scores, exploit details, and remediation guidance for this maven… (58 words)
- [ai.platon.pulsar/pulsar-all 4.9.5 | Sonatype Guide](/content/guide/component/maven/ai-platon-pulsar-3apulsar-all/4-9-5.html): Comprehensive security analysis for ai.platon.pulsar/pulsar-all version 4.9.5. No known vulnerabilities. License: Apache-2.0. View dependencies, vulnerabilitie… (58 words)
- [Schedule Your SBOM Consultation | Sonatype](/content/sbom-consultation/index.html): Schedule a free consultation with Sonatype experts to transform your SBOM strategy into actionable insights for secure software delivery. (395 words)
- [Maven Central: org.apache.logging.log4j:log4j-core](/content/central/artifact/org-apache-logging-log4j/log4j-core/index.html): Discover log4j-core in the org.apache.logging.log4j namespace. Explore metadata, contributors, the Maven POM file, and more. (427 words)
- [Policy Constraints](/content/help/en/policy-constraints-html.html) (2,977 words)
- [org.opengis.cite.teamengine/teamengine-spi… | Sonatype Guide](/content/guide/component/maven/org-opengis-cite-teamengine-teamengine-spi/6-0-0.html): Comprehensive security analysis for org.opengis.cite.teamengine/teamengine-spi version 6.0.0. No known vulnerabilities. License: Apache-2.0. View dependencies,… (44 words)
- [sonatype-2024-0036 | Security Details | Sonatype Guide](/content/guide/vulnerability/sonatype-2024-0036/index.html): Technical security analysis for sonatype-2024-0036. CVSS 7.5 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (73 words)
- [org.opengis.cite.teamengine/teamengine-web… | Sonatype Guide](/content/guide/component/maven/org-opengis-cite-teamengine-teamengine-web/6-0-0.html): Comprehensive security analysis for org.opengis.cite.teamengine/teamengine-web version 6.0.0. Max vulnerability severity: 8.7 CVSS. License: Apache-2.0. View d… (48 words)
- [Nexus Documentation - Nexus IQ Server 1.26 - Sonatype.com](/content/books/sonatype-clm-book/1-26/html/book/accessing-the-report-html.html): Control the flow of components throughout your software supply chain. (343 words)
- [sonatype-2020-1096 | Security Details | Sonatype Guide](/content/guide/vulnerability/sonatype-2020-1096/index.html): Technical security analysis for sonatype-2020-1096. CVSS 10.0 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (78 words)
- [hubfs/1-2023_new_site_assets/executive-20summaries/nis2-checklist-pdf.html](/content/hubfs/1-2023_new_site_assets/executive-20summaries/nis2-checklist-pdf.html) (863 words)
- [Maven Central: org.opengis.cite.teamengine:teamengine-spi](/content/central/artifact/org-opengis-cite-teamengine/teamengine-spi/versions/index.html): Discover teamengine-spi in the org.opengis.cite.teamengine namespace. Explore metadata, contributors, the Maven POM file, and more. (177 words)
- [Nexus Documentation - Nexus IQ Server 1.26 - Sonatype.com](/content/books/sonatype-clm-book/1-26/html/book/idea-using-component-view-html.html): Control the flow of components throughout your software supply chain. (224 words)
- [hubfs/1-2023_new_site_assets/cheat-20sheets/guide-nexus_repository_pro-updated-pdf.html](/content/hubfs/1-2023_new_site_assets/cheat-20sheets/guide-nexus_repository_pro-updated-pdf.html) (1,369 words)
- [Maven Central: org.opengis.cite.teamengine:teamengine-web:6.0.0](/content/central/artifact/org-opengis-cite-teamengine/teamengine-web/6-0-0.html): Discover teamengine-web in the org.opengis.cite.teamengine namespace. Explore metadata, contributors, the Maven POM file, and more. (298 words)
- [Maven Central: org.opengis.cite.teamengine:teamengine-console](/content/central/artifact/org-opengis-cite-teamengine/teamengine-console/versions/index.html): Discover teamengine-console in the org.opengis.cite.teamengine namespace. Explore metadata, contributors, the Maven POM file, and more. (176 words)
- [Nexus Documentation - Nexus IQ Server 1.26 - Sonatype.com](/content/books/sonatype-clm-book/1-26/html/book/sonarqube-configure-html.html): Control the flow of components throughout your software supply chain. (240 words)
- [Sonatype Nexus Repository Manager Community Edition | Download](/content/thanks/repo-community-edition/index.html) (107 words)
- [Component Not Found | Sonatype Guide](/content/guide/component/maven/org-opengis-cite-teamengine-3ateamengine-core/x-y-z.html): Could not find component data for maven/org.opengis.cite.teamengine:teamengine-core/x.y.z. This component may not exist in our database or may have been remove… (17 words)
- [Nexus Documentation - Nexus IQ Server 1.26 - Sonatype.com](/content/books/sonatype-clm-book/1-26/html/book/plugin-selection-html.html): Control the flow of components throughout your software supply chain. (147 words)
- [Nexus Documentation - Nexus IQ Server 1.26 - Sonatype.com](/content/books/sonatype-clm-book/1-26/html/book/proprietary_configuration-html.html): Control the flow of components throughout your software supply chain. (528 words)
- [Maven Central: org.apache.logging.log4j:log4j-api](/content/central/artifact/org-apache-logging-log4j/log4j-api/index.html): Discover log4j-api in the org.apache.logging.log4j namespace. Explore metadata, contributors, the Maven POM file, and more. (268 words)
- [Nexus Documentation - Nexus IQ Server 1.26 - Sonatype.com](/content/books/sonatype-clm-book/1-26/html/book/logging-in-html.html): Control the flow of components throughout your software supply chain. (126 words)
- [sonatype-2025-000924 | Security Details | Sonatype Guide](/content/guide/vulnerability/sonatype-2025-000924/index.html): Technical security analysis for sonatype-2025-000924. CVSS 7.1 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (76 words)
- [Nexus Documentation - Nexus IQ Server 1.26 - Sonatype.com](/content/books/sonatype-clm-book/1-26/html/book/manual-evaluation-html.html): Control the flow of components throughout your software supply chain. (260 words)
- [Nexus Documentation - Nexus IQ Server 1.26 - Sonatype.com](/content/books/sonatype-clm-book/1-26/html/book/sonarqube-clm-app-selection-html.html): Control the flow of components throughout your software supply chain. (98 words)
- [Nexus Documentation - Nexus IQ Server 1.26 - Sonatype.com](/content/books/sonatype-clm-book/1-26/html/book/idea-config-html.html): Control the flow of components throughout your software supply chain. (153 words)
- [Nexus Documentation - Nexus IQ Server 1.26 - Sonatype.com](/content/books/sonatype-clm-book/1-26/html/book/cli-ci-usage-html.html): Control the flow of components throughout your software supply chain. (247 words)
- [Nexus Documentation - Nexus IQ Server 1.26 - Sonatype.com](/content/books/sonatype-clm-book/1-26/html/book/preface-html.html): Control the flow of components throughout your software supply chain. (51 words)
- [sonatype-2022-1140 | Security Details | Sonatype Guide](/content/guide/vulnerability/sonatype-2022-1140/index.html): Technical security analysis for sonatype-2022-1140. CVSS 10.0 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (78 words)
- [sonatype-2024-1970 | Security Details | Sonatype Guide](/content/guide/vulnerability/sonatype-2024-1970/index.html): Technical security analysis for sonatype-2024-1970. CVSS 10.0 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (78 words)
- [Maven Central: org.eclipse.jetty.http2:jetty-http2-common](/content/central/artifact/org-eclipse-jetty-http2/jetty-http2-common/index.html): Discover jetty-http2-common in the org.eclipse.jetty.http2 namespace. Explore metadata, contributors, the Maven POM file, and more. (84 words)
- [com.github.yjpan51020/excel-helper 0.0.1-R… | Sonatype Guide](/content/guide/component/maven/com-github-yjpan51020-3aexcel-helper/0-0-1-release/versions/index.html): Browse all available versions of com.github.yjpan51020/excel-helper. Compare version 0.0.1-RELEASE with other releases, view security scores, and track version… (64 words)
- [Maven Central: org.eclipse.birt.runtime.3_7_1:org.w3c.css.sac:1.3.0](/content/central/artifact/org-eclipse-birt-runtime-3_7_1/org-w3c-css-sac/1-3-0.html): Discover org.w3c.css.sac in the org.eclipse.birt.runtime.3_7_1 namespace. Explore metadata, contributors, the Maven POM file, and more. (100 words)
- [sonatype-2022-1044 | Security Details | Sonatype Guide](/content/guide/vulnerability/sonatype-2022-1044/index.html): Technical security analysis for sonatype-2022-1044. CVSS 10.0 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (68 words)
- [Nexus Documentation - Nexus IQ Server 1.26 - Sonatype.com](/content/books/sonatype-clm-book/1-26/html/book/export-results-html.html): Control the flow of components throughout your software supply chain. (157 words)
- [sonatype-2022-1143 | Security Details | Sonatype Guide](/content/guide/vulnerability/sonatype-2022-1143/index.html): Technical security analysis for sonatype-2022-1143. CVSS 10.0 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (64 words)
- [sonatype-2022-1153 | Security Details | Sonatype Guide](/content/guide/vulnerability/sonatype-2022-1153/index.html): Technical security analysis for sonatype-2022-1153. CVSS 10.0 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (72 words)
- [Nexus Documentation - Nexus IQ Server 1.26 - Sonatype.com](/content/books/sonatype-clm-book/1-26/html/book/review-clm-policy-results-bamboo-html.html): Control the flow of components throughout your software supply chain. (159 words)
- [Maven Central: org.apache.tomcat:tomcat-coyote](/content/central/artifact/org-apache-tomcat/tomcat-coyote/index.html): Discover tomcat-coyote in the org.apache.tomcat namespace. Explore metadata, contributors, the Maven POM file, and more. (199 words)
- [sonatype-2022-1281 | Security Details | Sonatype Guide](/content/guide/vulnerability/sonatype-2022-1281/index.html): Technical security analysis for sonatype-2022-1281. CVSS 10.0 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (55 words)
- [sonatype-2022-0216 | Security Details | Sonatype Guide](/content/guide/vulnerability/sonatype-2022-0216/index.html): Technical security analysis for sonatype-2022-0216. CVSS 7.5 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (56 words)
- [sonatype-2022-0215 | Security Details | Sonatype Guide](/content/guide/vulnerability/sonatype-2022-0215/index.html): Technical security analysis for sonatype-2022-0215. CVSS 7.5 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (69 words)
- [Upgrading Nexus Repository Manager 3 – Sonatype Support](/content/support/hc/en-us/articles/115000350007-upgrading-nexus-repository-manager-3/index.html): This instructions are applicable if you are already running Nexus Repository Manager 3.1.0 or newer installed or upgraded using specific... (415 words)
- [sonatype-2020-0774 | Security Details | Sonatype Guide](/content/guide/vulnerability/sonatype-2020-0774/index.html): Technical security analysis for sonatype-2020-0774. CVSS 10.0 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (61 words)
- [Nexus Documentation - Nexus IQ Server 1.26 - Sonatype.com](/content/books/sonatype-clm-book/1-26/html/book/_removing_a_repository_in_iq_server-html.html): Control the flow of components throughout your software supply chain. (113 words)
- [Maven Central: org.opengis.cite.teamengine:teamengine-web](/content/central/artifact/org-opengis-cite-teamengine/teamengine-web/versions/index.html): Discover teamengine-web in the org.opengis.cite.teamengine namespace. Explore metadata, contributors, the Maven POM file, and more. (16 words)
- [sonatype-2022-1141 | Security Details | Sonatype Guide](/content/guide/vulnerability/sonatype-2022-1141/index.html): Technical security analysis for sonatype-2022-1141. CVSS 10.0 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (47 words)
- [sonatype-2022-2374 | Security Details | Sonatype Guide](/content/guide/vulnerability/sonatype-2022-2374/index.html): Technical security analysis for sonatype-2022-2374. CVSS 10.0 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (61 words)
- [status/history-atom.html](/content/status/history-atom.html) (857 words)
- [Maven Central: org.opengis.cite.teamengine:teamengine-spi:6.0.0](/content/central/artifact/org-opengis-cite-teamengine/teamengine-spi/6-0-0.html): Discover teamengine-spi in the org.opengis.cite.teamengine namespace. Explore metadata, contributors, the Maven POM file, and more. (230 words)
- [Sonatype Status - Incident History](/content/status/history/index.html): Sonatype's Incident and Scheduled Maintenance History (31 words)
- [org.opengis.cite.teamengine/teamengine-spi… | Sonatype Guide](/content/guide/component/maven/org-opengis-cite-teamengine-teamengine-spi-ctl/6-0-0.html): Comprehensive security analysis for org.opengis.cite.teamengine/teamengine-spi-ctl version 6.0.0. No known vulnerabilities. License: Apache-2.0. View dependenc… (37 words)
- [Maven Central: org.eclipse.birt.runtime.3_7_1:org.w3c.css.sac](/content/central/artifact/org-eclipse-birt-runtime-3_7_1/org-w3c-css-sac/dependents/index.html): Discover org.w3c.css.sac in the org.eclipse.birt.runtime.3_7_1 namespace. Explore metadata, contributors, the Maven POM file, and more. (257 words)
- [Maven Central: org.opengis.cite.teamengine:teamengine-spi-ctl:6.0.0](/content/central/artifact/org-opengis-cite-teamengine/teamengine-spi-ctl/6-0-0.html): Discover teamengine-spi-ctl in the org.opengis.cite.teamengine namespace. Explore metadata, contributors, the Maven POM file, and more. (173 words)
- [Maven Central: org.eclipse.birt.runtime.3_7_1:org.w3c.dom.smil](/content/central/artifact/org-eclipse-birt-runtime-3_7_1/org-w3c-dom-smil/dependents/index.html): Discover org.w3c.dom.smil in the org.eclipse.birt.runtime.3_7_1 namespace. Explore metadata, contributors, the Maven POM file, and more. (335 words)
- [Maven Central: org.eclipse.birt.runtime.3_7_1:org.eclipse.osgi](/content/central/artifact/org-eclipse-birt-runtime-3_7_1/org-eclipse-osgi.html): Discover org.eclipse.osgi in the org.eclipse.birt.runtime.3_7_1 namespace. Explore metadata, contributors, the Maven POM file, and more. (99 words)
- [Maven Central: org.opengis.cite.teamengine:teamengine-spi](/content/central/artifact/org-opengis-cite-teamengine/teamengine-spi/dependents/index.html): Discover teamengine-spi in the org.opengis.cite.teamengine namespace. Explore metadata, contributors, the Maven POM file, and more. (229 words)
- [Maven Central: org.opengis.cite.teamengine:teamengine-console:6.0.0](/content/central/artifact/org-opengis-cite-teamengine/teamengine-console/6-0-0.html): Discover teamengine-console in the org.opengis.cite.teamengine namespace. Explore metadata, contributors, the Maven POM file, and more. (184 words)
- [hubfs/1-2023_new_site_assets/cheat-20sheets/sbom_cheat_sheet_rev-041724-pdf.html](/content/hubfs/1-2023_new_site_assets/cheat-20sheets/sbom_cheat_sheet_rev-041724-pdf.html) (457 words)
- [status/history-rss.html](/content/status/history-rss.html) (719 words)
- [CVE-2026-0600 Nexus Repository 3 - Server-Side Request Forgery - 2026-01-13 – Sonatype Support](/content/support/hc/en-us/articles/47928855816595-cve-2026-0600-nexus-repository-3-server-side-request-forgery-2026-01-13.html): Sonatype Nexus Security AdvisoryDate: January 13, 2026Affected Versions: Sonatype Nexus Repository 3.0.0 through * (CE/Pro)Workaround... (843 words)
- [CVE-2017-7503 | Security Details | Sonatype Guide](/content/guide/vulnerability/cve-2017-7503/index.html): Technical security analysis for CVE-2017-7503. CVSS 9.8 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (128 words)
- [Maven Central: org.eclipse.birt.runtime.3_7_1:org.w3c.dom.smil](/content/central/artifact/org-eclipse-birt-runtime-3_7_1/org-w3c-dom-smil.html): Discover org.w3c.dom.smil in the org.eclipse.birt.runtime.3_7_1 namespace. Explore metadata, contributors, the Maven POM file, and more. (92 words)
- [Component Not Found | Sonatype Guide](/content/guide/component/maven/org-fryske-akademy-3ateidictionaries/x-y-z.html): Could not find component data for maven/org.fryske-akademy:teidictionaries/x.y.z. This component may not exist in our database or may have been removed. (17 words)
- [Maven Central: org.eclipse.birt.runtime.3_7_1:org.apache.batik.util](/content/central/artifact/org-eclipse-birt-runtime-3_7_1/org-apache-batik-util/dependents/index.html): Discover org.apache.batik.util in the org.eclipse.birt.runtime.3_7_1 namespace. Explore metadata, contributors, the Maven POM file, and more. (220 words)
- [Maven Central: org.eclipse.birt.runtime.3_7_1:org.apache.batik.util:1.6.0](/content/central/artifact/org-eclipse-birt-runtime-3_7_1/org-apache-batik-util/1-6-0.html): Discover org.apache.batik.util in the org.eclipse.birt.runtime.3_7_1 namespace. Explore metadata, contributors, the Maven POM file, and more. (100 words)
- [LDAP Integration](/content/help/en/ldap-integration-html.html) (1,594 words)
- [org.eclipse.birt.runtime.3_7_1/org.eclipse… | Sonatype Guide](/content/guide/component/maven/org-eclipse-birt-runtime-3_7_1-org-eclipse-datatools-enablement-ibm-db2-luw/1-0-2.html): Comprehensive security analysis for org.eclipse.birt.runtime.3_7_1/org.eclipse.datatools.enablement.ibm.db2.luw version 1.0.2. No known vulnerabilities. Licens… (49 words)
- [Maven Central: org.eclipse.birt.runtime.3_7_1:org.w3c.css.sac](/content/central/artifact/org-eclipse-birt-runtime-3_7_1/org-w3c-css-sac.html): Discover org.w3c.css.sac in the org.eclipse.birt.runtime.3_7_1 namespace. Explore metadata, contributors, the Maven POM file, and more. (92 words)
- [org.eclipse.birt.runtime.3_7_1/org.apache.… | Sonatype Guide](/content/guide/component/maven/org-eclipse-birt-runtime-3_7_1-org-apache-batik-util/1-6-0.html): Comprehensive security analysis for org.eclipse.birt.runtime.3_7_1/org.apache.batik.util version 1.6.0. No known vulnerabilities. License: EPL-1.0. View depend… (37 words)
- [org.eclipse.birt.runtime.3_7_1/org.eclipse… | Sonatype Guide](/content/guide/component/maven/org-eclipse-birt-runtime-3_7_1-org-eclipse-osgi/3-7-1.html): Comprehensive security analysis for org.eclipse.birt.runtime.3_7_1/org.eclipse.osgi version 3.7.1. No known vulnerabilities. License: EPL-1.0. View dependencie… (43 words)
- [Project Lifecycle | Sonatype Open Source Community Handbook](/content/contribute/docs/project-lifecycle/_print/index.html): Engaging with Sonatype Community Projects, We use GitHub Custom Properties to indentify a Project’s Classification within our Community.
Custom Properties Flagship-Project This is a boolean. Where set to true, this indicates the Project has Flagship Status - i.e. it’s popular or something we want to highlight.
Project-Status There are four options to choose from:
Active - the project is being actively maintained Archived - the project is not being maintained Graduated - the project has been superseded by official Sonatype Project The fourth option is to leave this field unset. (116 words)
- [org.opengis.cite.teamengine/teamengine-con… | Sonatype Guide](/content/guide/component/maven/org-opengis-cite-teamengine-teamengine-console/6-0-0.html): Comprehensive security analysis for org.opengis.cite.teamengine/teamengine-console version 6.0.0. No known vulnerabilities. License: Apache-2.0. View dependenc… (38 words)
- [org.eclipse.birt.runtime.3_7_1/org.eclipse… | Sonatype Guide](/content/guide/component/maven/org-eclipse-birt-runtime-3_7_1-org-eclipse-datatools-modelbase-sql-query/1-1-1.html): Comprehensive security analysis for org.eclipse.birt.runtime.3_7_1/org.eclipse.datatools.modelbase.sql.query version 1.1.1. No known vulnerabilities. License:… (35 words)
- [org.eclipse.birt.runtime.3_7_1/org.w3c.dom… | Sonatype Guide](/content/guide/component/maven/org-eclipse-birt-runtime-3_7_1-org-w3c-dom-smil/1-0-0.html): Comprehensive security analysis for org.eclipse.birt.runtime.3_7_1/org.w3c.dom.smil version 1.0.0. No known vulnerabilities. License: EPL-1.0. View dependencie… (43 words)
- [org.eclipse.birt.runtime.3_7_1/org.eclipse… | Sonatype Guide](/content/guide/component/maven/org-eclipse-birt-runtime-3_7_1-org-eclipse-birt-runtime/3-7-1.html): Comprehensive security analysis for org.eclipse.birt.runtime.3_7_1/org.eclipse.birt.runtime version 3.7.1. Max vulnerability severity: 8.8 CVSS. License: EPL-1… (28 words)
- [org.eclipse.birt.runtime.3_7_1/org.eclipse… | Sonatype Guide](/content/guide/component/maven/org-eclipse-birt-runtime-3_7_1-org-eclipse-datatools-connectivity-apache-derby/1-0-102.html): Comprehensive security analysis for org.eclipse.birt.runtime.3_7_1/org.eclipse.datatools.connectivity.apache.derby version 1.0.102. No known vulnerabilities. L… (33 words)
- [org.eclipse.birt.runtime.3_7_1/org.eclipse… | Sonatype Guide](/content/guide/component/maven/org-eclipse-birt-runtime-3_7_1-org-eclipse-emf-ecore/2-7-0.html): Comprehensive security analysis for org.eclipse.birt.runtime.3_7_1/org.eclipse.emf.ecore version 2.7.0. No known vulnerabilities. License: EPL-1.0. View depend… (37 words)
- [Maven Central: org.eclipse.birt.runtime.3_7_1:org.eclipse.datatools.enablement.oda.ws](/content/central/artifact/org-eclipse-birt-runtime-3_7_1/org-eclipse-datatools-enablement-oda-ws.html): Discover org.eclipse.datatools.enablement.oda.ws in the org.eclipse.birt.runtime.3_7_1 namespace. Explore metadata, contributors, the Maven POM file, and more. (88 words)
- [org.eclipse.birt.runtime.3_7_1/org.w3c.css… | Sonatype Guide](/content/guide/component/maven/org-eclipse-birt-runtime-3_7_1-org-w3c-css-sac/1-3-0.html): Comprehensive security analysis for org.eclipse.birt.runtime.3_7_1/org.w3c.css.sac version 1.3.0. No known vulnerabilities. License: EPL-1.0. View dependencies… (24 words)
- [xerces/xmlParserAPIs 2.6.2 | Sonatype Guide](/content/guide/component/maven/xerces-3axmlparserapis/2-6-2.html): Comprehensive security analysis for xerces/xmlParserAPIs version 2.6.2. No known vulnerabilities. License: SAX-PD. View dependencies, vulnerabilities, and deta… (43 words)
- [Maven Central: org.eclipse.birt.runtime.3_7_1:org.eclipse.datatools.enablement.ibm.db2.luw](/content/central/artifact/org-eclipse-birt-runtime-3_7_1/org-eclipse-datatools-enablement-ibm-db2-luw.html): Discover org.eclipse.datatools.enablement.ibm.db2.luw in the org.eclipse.birt.runtime.3_7_1 namespace. Explore metadata, contributors, the Maven POM file, and more. (88 words)
- [Maven Central: org.eclipse.birt.runtime.3_7_1:org.eclipse.datatools.connectivity.apache.derby](/content/central/artifact/org-eclipse-birt-runtime-3_7_1/org-eclipse-datatools-connectivity-apache-derby.html): Discover org.eclipse.datatools.connectivity.apache.derby in the org.eclipse.birt.runtime.3_7_1 namespace. Explore metadata, contributors, the Maven POM file, and more. (86 words)
- [Continuous Monitoring Concepts](/content/help/en/continuous-monitoring-concepts-html.html) (1,494 words)
- [org.eclipse.birt.runtime.3_7_1/org.eclipse… | Sonatype Guide](/content/guide/component/maven/org-eclipse-birt-runtime-3_7_1-org-eclipse-datatools-enablement-oda-ws/1-2-2.html): Comprehensive security analysis for org.eclipse.birt.runtime.3_7_1/org.eclipse.datatools.enablement.oda.ws version 1.2.2. No known vulnerabilities. License: EP… (19 words)
- [CVE-2026-7494 | Security Details | Sonatype Guide](/content/guide/vulnerability/cve-2026-7494/index.html): Technical security analysis for CVE-2026-7494. CVSS 5.3 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (174 words)
- [Nexus Repository 3 Groovy Script development environment setup – Sonatype Support](/content/support/hc/en-us/articles/115015812727-nexus-3-groovy-script-development-environment-setup.html): Note: Groovy scripting is disabled by default for security reasons. Development work on the groovy API was halted, and it will eventually... (629 words)
- [Maven Central: org.opengis.cite.teamengine:teamengine-console](/content/central/artifact/org-opengis-cite-teamengine/teamengine-console/dependents/index.html): Discover teamengine-console in the org.opengis.cite.teamengine namespace. Explore metadata, contributors, the Maven POM file, and more. (20 words)
- [CVE-2026-14646 | Security Details | Sonatype Guide](/content/guide/vulnerability/cve-2026-14646/index.html): Technical security analysis for CVE-2026-14646. CVSS 4.9 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (210 words)
- [Maven Central: org.eclipse.birt.runtime.3_7_1:org.eclipse.datatools.connectivity.apache.derby](/content/central/artifact/org-eclipse-birt-runtime-3_7_1/org-eclipse-datatools-connectivity-apache-derby/dependents/index.html): Discover org.eclipse.datatools.connectivity.apache.derby in the org.eclipse.birt.runtime.3_7_1 namespace. Explore metadata, contributors, the Maven POM file, and more. (48 words)
- [License Threat Groups](/content/help/en/license-threat-groups-html.html) (1,220 words)
- [Sonatype Status - Uptime History](/content/status/uptime/index.html): Sonatype's Uptime History (19 words)
- [CVE-2026-14645 | Security Details | Sonatype Guide](/content/guide/vulnerability/cve-2026-14645/index.html): Technical security analysis for CVE-2026-14645. CVSS 5.1 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (214 words)
- [Maven Central: org.eclipse.birt.runtime.3_7_1:org.eclipse.datatools.enablement.ibm.db2.luw](/content/central/artifact/org-eclipse-birt-runtime-3_7_1/org-eclipse-datatools-enablement-ibm-db2-luw/dependents/index.html): Discover org.eclipse.datatools.enablement.ibm.db2.luw in the org.eclipse.birt.runtime.3_7_1 namespace. Explore metadata, contributors, the Maven POM file, and more. (54 words)
- [Maven Central: org.eclipse.birt.runtime.3_7_1:org.eclipse.datatools.enablement.oda.ws](/content/central/artifact/org-eclipse-birt-runtime-3_7_1/org-eclipse-datatools-enablement-oda-ws/versions/index.html): Discover org.eclipse.datatools.enablement.oda.ws in the org.eclipse.birt.runtime.3_7_1 namespace. Explore metadata, contributors, the Maven POM file, and more. (34 words)
- [Maven Central: org.eclipse.birt.runtime.3_7_1:org.eclipse.datatools.modelbase.sql.query](/content/central/artifact/org-eclipse-birt-runtime-3_7_1/org-eclipse-datatools-modelbase-sql-query.html): Discover org.eclipse.datatools.modelbase.sql.query in the org.eclipse.birt.runtime.3_7_1 namespace. Explore metadata, contributors, the Maven POM file, and more. (86 words)
- [Maven Central: org.eclipse.birt.runtime.3_7_1:org.eclipse.datatools.enablement.oda.ws](/content/central/artifact/org-eclipse-birt-runtime-3_7_1/org-eclipse-datatools-enablement-oda-ws/dependents/index.html): Discover org.eclipse.datatools.enablement.oda.ws in the org.eclipse.birt.runtime.3_7_1 namespace. Explore metadata, contributors, the Maven POM file, and more. (52 words)
- [Maven Central: org.eclipse.birt.runtime.3_7_1:org.eclipse.emf.ecore](/content/central/artifact/org-eclipse-birt-runtime-3_7_1/org-eclipse-emf-ecore.html): Discover org.eclipse.emf.ecore in the org.eclipse.birt.runtime.3_7_1 namespace. Explore metadata, contributors, the Maven POM file, and more. (88 words)
- [Maven Central: org.eclipse.birt.runtime.3_7_1:org.eclipse.datatools.enablement.ibm.db2.luw](/content/central/artifact/org-eclipse-birt-runtime-3_7_1/org-eclipse-datatools-enablement-ibm-db2-luw/versions/index.html): Discover org.eclipse.datatools.enablement.ibm.db2.luw in the org.eclipse.birt.runtime.3_7_1 namespace. Explore metadata, contributors, the Maven POM file, and more. (28 words)
- [Community Roles | Sonatype Open Source Community Handbook](/content/contribute/docs/community_roles/_print/index.html): Engaging with Sonatype Community Projects, Individuals in the following roles are the backbone of our community.
Frequently, individuals will act in different roles at different times, or multiple at once.
For example, a maintainer will frequently act as a contributor and a contributor is likely a regular user of the tools they contribute to.
Click on a role below to learn more about it! (59 words)
- [Maven Central: org.eclipse.birt.runtime.3_7_1:org.eclipse.osgi](/content/central/artifact/org-eclipse-birt-runtime-3_7_1/org-eclipse-osgi/dependents/index.html): Discover org.eclipse.osgi in the org.eclipse.birt.runtime.3_7_1 namespace. Explore metadata, contributors, the Maven POM file, and more. (46 words)
- [Maven Central: org.eclipse.birt.runtime.3_7_1:org.eclipse.osgi](/content/central/artifact/org-eclipse-birt-runtime-3_7_1/org-eclipse-osgi/versions/index.html): Discover org.eclipse.osgi in the org.eclipse.birt.runtime.3_7_1 namespace. Explore metadata, contributors, the Maven POM file, and more. (34 words)
- [CVE-2026-3438 Nexus Repository 3 - Reflected Cross-Site Scripting (XSS) - 2026-04-08 – Sonatype Support](/content/support/hc/en-us/articles/50609137161363-cve-2026-3438-nexus-repository-3-reflected-cross-site-scripting-xss-2026-04-08.html): Sonatype Nexus Security AdvisoryDate: April 8, 2026Affected Versions: All Sonatype Nexus Repository 3.x CE/Pro versions up to and... (371 words)
- [Maven Central: org.eclipse.birt.runtime.3_7_1:org.eclipse.datatools.modelbase.sql.query](/content/central/artifact/org-eclipse-birt-runtime-3_7_1/org-eclipse-datatools-modelbase-sql-query/versions/index.html): Discover org.eclipse.datatools.modelbase.sql.query in the org.eclipse.birt.runtime.3_7_1 namespace. Explore metadata, contributors, the Maven POM file, and more. (28 words)
- [Policy Concepts](/content/help/en/policy-concepts-html.html) (1,470 words)
- [Maven Central: org.eclipse.birt.runtime.3_7_1:org.eclipse.datatools.modelbase.sql.query](/content/central/artifact/org-eclipse-birt-runtime-3_7_1/org-eclipse-datatools-modelbase-sql-query/dependents/index.html): Discover org.eclipse.datatools.modelbase.sql.query in the org.eclipse.birt.runtime.3_7_1 namespace. Explore metadata, contributors, the Maven POM file, and more. (50 words)
- [support/hc/en-us/article_attachments/29414182956051/index.html](/content/support/hc/en-us/article_attachments/29414182956051/index.html) (494 words)
- [How To Guides | Sonatype Open Source Community Handbook](/content/contribute/docs/how-to/_print/index.html): Engaging with Sonatype Community Projects, This section contains some guidance for various scenarios and tool usage. (11 words)
- [CVE-2026-5189 Nexus Repository 3 - Hardcoded Credential in Internal Database Component - 2026-04-15 – Sonatype Support](/content/support/hc/en-us/articles/50817138825491-cve-2026-5189-nexus-repository-3-hardcoded-credential-in-internal-database-component-2026-04-15.html): Sonatype Nexus Security AdvisoryDate: 2026-04-15Affected Versions: All Sonatype Nexus Repository 3.x CE/Pro versions 3.0.0 through... (425 words)
- [Maven Central: org.eclipse.birt.runtime.3_7_1:org.eclipse.emf.ecore](/content/central/artifact/org-eclipse-birt-runtime-3_7_1/org-eclipse-emf-ecore/dependents/index.html): Discover org.eclipse.emf.ecore in the org.eclipse.birt.runtime.3_7_1 namespace. Explore metadata, contributors, the Maven POM file, and more. (46 words)
- [CVE-2024-5083 Nexus Repository 2 - Stored XSS Vulnerability – Sonatype Support](/content/support/hc/en-us/articles/30693989411987/index.html): Sonatype Nexus Security Advisory Date:  November 13, 2024 Affected Versions:  All previous Sonatype Nexus Repository Manager 2.x OSS/Pro... (585 words)
- [Legacy Violations](/content/help/en/legacy-violations-html.html) (1,084 words)
- [Maven Central: org.eclipse.birt.runtime.3_7_1:org.w3c.dom.smil](/content/central/artifact/org-eclipse-birt-runtime-3_7_1/org-w3c-dom-smil/versions/index.html): Discover org.w3c.dom.smil in the org.eclipse.birt.runtime.3_7_1 namespace. Explore metadata, contributors, the Maven POM file, and more. (28 words)
- [Maven Central: org.eclipse.birt.runtime.3_7_1:org.eclipse.emf.ecore](/content/central/artifact/org-eclipse-birt-runtime-3_7_1/org-eclipse-emf-ecore/versions/index.html): Discover org.eclipse.emf.ecore in the org.eclipse.birt.runtime.3_7_1 namespace. Explore metadata, contributors, the Maven POM file, and more. (34 words)
- [Application Management](/content/help/en/application-management-html.html) (813 words)
- [CVE-2026-14504 | Security Details | Sonatype Guide](/content/guide/vulnerability/cve-2026-14504/index.html): Technical security analysis for CVE-2026-14504. CVSS 8.2 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (111 words)
- [CVE-2026-3199 Nexus Repository 3 - Authenticated Remote Code Execution - 2026-04-08 – Sonatype Support](/content/support/hc/en-us/articles/50615414548499-cve-2026-3199-nexus-repository-3-authenticated-remote-code-execution-2026-04-08.html): Sonatype Nexus Security AdvisoryDate: April 8, 2026Affected Versions: Sonatype Nexus Repository 3.22.1 through 3.90.x (CE/Pro)Fixed in... (305 words)
- [InnerSource Repository Configuration](/content/help/en/innersource-repository-configuration-html.html) (882 words)
- [Maven Central: org.eclipse.birt.runtime.3_7_1:org.eclipse.birt.runtime](/content/central/artifact/org-eclipse-birt-runtime-3_7_1/org-eclipse-birt-runtime/dependents/index.html): Discover org.eclipse.birt.runtime in the org.eclipse.birt.runtime.3_7_1 namespace. Explore metadata, contributors, the Maven POM file, and more. (95 words)
- [Maven Central: org.eclipse.birt.runtime.3_7_1:org.eclipse.birt.runtime](/content/central/artifact/org-eclipse-birt-runtime-3_7_1/org-eclipse-birt-runtime/versions/index.html): Discover org.eclipse.birt.runtime in the org.eclipse.birt.runtime.3_7_1 namespace. Explore metadata, contributors, the Maven POM file, and more. (34 words)
- [support/hc/article_attachments/29414182956051/index.html](/content/support/hc/article_attachments/29414182956051/index.html) (338 words)
- [Policy Violation Log](/content/help/en/policy-violation-log-html.html) (819 words)
- [Policy Overrides](/content/help/en/policy-overrides-html.html) (518 words)
- [Under the Hood: Sonatype's Enhanced JavaScript Analysis – Sonatype Support](/content/support/hc/en-us/articles/47423166321555/index.html): OverviewUnlike many of our competitors, Sonatype's JavaScript component analysis does more than a simple scan of component manifest files... (440 words)
- [Manage Organizations](/content/help/en/manage-organizations-html.html) (575 words)
- [Policy Actions](/content/help/en/policy-actions-html.html) (669 words)
- [User Management](/content/help/en/user-management-html.html) (474 words)
- [Page Not Found - Sonatype Community](/content/community/u/shrikant-tadke.html) (34 words)
- [Application Categories](/content/help/en/application-categories-html.html) (722 words)
- [Configuring Policies](/content/help/en/configuring-policies-html.html) (618 words)
- [Continuous Monitoring](/content/help/en/continuous-monitoring-html.html) (433 words)
- [Security Policies](/content/help/en/security-policies-html.html) (478 words)
- [General How To & Maintenance – Sonatype Support](/content/support/hc/en-us/sections/360000027047-general-how-to-maintenance/index.html) (288 words)
- [Repository: What do the "Blob Created", "Blob Updated" and "Last Downloaded" attribute means? – Sonatype Support](/content/support/hc/en-us/articles/34029452416275-repository-what-do-the-blob-created-blob-updated-and-last-downloaded-attribute-means.html): Every asset uploaded to Nexus Repository will provide blob related timestamps via its attributes. These attributes are also used by... (158 words)
- [Installation On-Premises](/content/help/en/installation-on-premises-html.html) (596 words)
- [Public Data Sources for CPE Vulnerabilities](/content/help/en/public-data-sources-html.html) (391 words)
- [Advanced Legal Pack Extended Observed License Detections](/content/help/en/advanced-legal-pack-extended-observed-license-detections-html.html) (119 words)
- [Configuring Base URL](/content/help/en/configuring-base-url-html.html) (186 words)
- [Component Policies](/content/help/en/component-policies-html.html) (395 words)
- [Architecture Policies](/content/help/en/architecture-policies-html.html) (229 words)
- [Logging for HA](/content/help/en/logging-for-ha-html.html) (264 words)
- [Continuous Monitoring](/content/help/en/continuous-monitoring-201455-html.html) (428 words)
- [CPE Matching Experience in SBOM Manager vs. Lifecycle](/content/help/en/cpe-matching-experience-per-solution-390065-html.html) (370 words)
- [Waived Component Upgrades](/content/help/en/waived-component-upgrades-html.html) (195 words)
- [Automatic Source Control](/content/help/en/automatic-source-control-html.html) (114 words)
- [Manual Evaluation](/content/help/en/manual-evaluation-html.html) (102 words)
- [download/nexus/oss/nexus-2-15-2-03-bundle-tar-gz-asc.html](/content/download/nexus/oss/nexus-2-15-2-03-bundle-tar-gz-asc.html) (10 words)
- [download/nexus/oss/nexus-2-15-2-03-bundle-zip-asc.html](/content/download/nexus/oss/nexus-2-15-2-03-bundle-zip-asc.html) (10 words)
- [download/nexus/professional-bundle/nexus-professional-2-15-2-03-bundle-zip-asc.html](/content/download/nexus/professional-bundle/nexus-professional-2-15-2-03-bundle-zip-asc.html) (10 words)
- [Managing](/content/help/en/managing-html.html) (20 words)
- [Maven Central: com.google.guava:guava-tests-jdk5:14.0.1-rc1](/content/central/artifact/com-google-guava/guava-tests-jdk5/14-0-1-rc1.html): Discover guava-tests-jdk5 in the com.google.guava namespace. Explore metadata, contributors, the Maven POM file, and more. (227 words)
- [Sample Data Configuration](/content/help/en/sample-data-configuration-html.html) (132 words)
- [Moving a Nexus Repository 3 Instance to a New Location – Sonatype Support](/content/support/hc/en-us/articles/360010352014-moving-a-nexus-repo-3-instance-to-a-new-location.html): .This article provides best practice and considerations for moving an existing Nexus Repository 3 self-hosted standalone server to a new... (1,052 words)
- [Maven Central: com.google.guava:guava-tests-jdk5:14.0.1](/content/central/artifact/com-google-guava/guava-tests-jdk5/14-0-1.html): Discover guava-tests-jdk5 in the com.google.guava namespace. Explore metadata, contributors, the Maven POM file, and more. (233 words)
- [Maven Central: com.google.guava:guava-tests-jdk5:13.0](/content/central/artifact/com-google-guava/guava-tests-jdk5/13-0.html): Discover guava-tests-jdk5 in the com.google.guava namespace. Explore metadata, contributors, the Maven POM file, and more. (216 words)
- [Maven Central: com.google.guava:guava-tests-jdk5:17.0-rc1](/content/central/artifact/com-google-guava/guava-tests-jdk5/17-0-rc1.html): Discover guava-tests-jdk5 in the com.google.guava namespace. Explore metadata, contributors, the Maven POM file, and more. (241 words)
- [com.google.guava/guava-tests-jdk5 13.0 | Sonatype Guide](/content/guide/component/maven/com-google-guava-guava-tests-jdk5/13-0.html): Comprehensive security analysis for com.google.guava/guava-tests-jdk5 version 13.0. No known vulnerabilities. License: Apache-2.0. View dependencies, vulnerabi… (50 words)
- [Maven Central: com.google.guava:guava-tests-jdk5:16.0](/content/central/artifact/com-google-guava/guava-tests-jdk5/16-0.html): Discover guava-tests-jdk5 in the com.google.guava namespace. Explore metadata, contributors, the Maven POM file, and more. (243 words)
- [com.google.guava/guava-tests-jdk5 16.0-rc1 | Sonatype Guide](/content/guide/component/maven/com-google-guava-guava-tests-jdk5/16-0-rc1.html): Comprehensive security analysis for com.google.guava/guava-tests-jdk5 version 16.0-rc1. No known vulnerabilities. License: Apache-2.0. View dependencies, vulne… (53 words)
- [com.google.guava/guava-tests-jdk5 14.0.1-r… | Sonatype Guide](/content/guide/component/maven/com-google-guava-guava-tests-jdk5/14-0-1-rc1.html): Comprehensive security analysis for com.google.guava/guava-tests-jdk5 version 14.0.1-rc1. No known vulnerabilities. License: Apache-2.0. View dependencies, vul… (38 words)
- [Maven Central: com.google.guava:guava-tests-jdk5:16.0-rc1](/content/central/artifact/com-google-guava/guava-tests-jdk5/16-0-rc1.html): Discover guava-tests-jdk5 in the com.google.guava namespace. Explore metadata, contributors, the Maven POM file, and more. (193 words)
- [com.google.guava/guava-tests-jdk5 16.0 | Sonatype Guide](/content/guide/component/maven/com-google-guava-guava-tests-jdk5/16-0.html): Comprehensive security analysis for com.google.guava/guava-tests-jdk5 version 16.0. No known vulnerabilities. License: Apache-2.0. View dependencies, vulnerabi… (48 words)
- [Maven Central: com.google.guava:guava-tests-jdk5:17.0-rc2](/content/central/artifact/com-google-guava/guava-tests-jdk5/17-0-rc2.html): Discover guava-tests-jdk5 in the com.google.guava namespace. Explore metadata, contributors, the Maven POM file, and more. (197 words)
- [com.google.guava/guava-tests-jdk5 14.0.1 | Sonatype Guide](/content/guide/component/maven/com-google-guava-guava-tests-jdk5/14-0-1.html): Comprehensive security analysis for com.google.guava/guava-tests-jdk5 version 14.0.1. No known vulnerabilities. License: Apache-2.0. View dependencies, vulnera… (48 words)
- [com.google.guava/guava-tests-jdk5 17.0-rc1 | Sonatype Guide](/content/guide/component/maven/com-google-guava-guava-tests-jdk5/17-0-rc1.html): Comprehensive security analysis for com.google.guava/guava-tests-jdk5 version 17.0-rc1. No known vulnerabilities. License: Apache-2.0. View dependencies, vulne… (47 words)
- [com.google.guava/guava-tests-jdk5 17.0-rc2 | Sonatype Guide](/content/guide/component/maven/com-google-guava-guava-tests-jdk5/17-0-rc2.html): Comprehensive security analysis for com.google.guava/guava-tests-jdk5 version 17.0-rc2. No known vulnerabilities. License: Apache-2.0. View dependencies, vulne… (38 words)
- [Page Not Found - Sonatype Community](/content/community/u/bk678v/index.html) (34 words)
- [com.akamai.edgegrid/edgerc-reader 6.0.0-rc… | Sonatype Guide](/content/guide/component/maven/com-akamai-edgegrid-edgerc-reader/6-0-0-rc-1.html): Comprehensive security analysis for com.akamai.edgegrid/edgerc-reader version 6.0.0-rc.1. No known vulnerabilities. License: Apache-2.0. View dependencies, vul… (51 words)
- [com.akamai.edgegrid/edgerc-reader 6.0.1-rc… | Sonatype Guide](/content/guide/component/maven/com-akamai-edgegrid-edgerc-reader/6-0-1-rc-1.html): Comprehensive security analysis for com.akamai.edgegrid/edgerc-reader version 6.0.1-rc.1. No known vulnerabilities. License: Apache-2.0. View dependencies, vul… (48 words)
- [com.akamai.edgegrid/edgerc-reader 6.0.1 | Sonatype Guide](/content/guide/component/maven/com-akamai-edgegrid-edgerc-reader/6-0-1.html): Comprehensive security analysis for com.akamai.edgegrid/edgerc-reader version 6.0.1. No known vulnerabilities. License: Apache-2.0. View dependencies, vulnerab… (47 words)
- [com.akamai.edgegrid/edgerc-reader 5.1.1 | Sonatype Guide](/content/guide/component/maven/com-akamai-edgegrid-edgerc-reader/5-1-1.html): Comprehensive security analysis for com.akamai.edgegrid/edgerc-reader version 5.1.1. No known vulnerabilities. License: Apache-2.0. View dependencies, vulnerab… (44 words)
- [Maven Central: com.akamai.edgegrid:edgerc-reader:5.1.1](/content/central/artifact/com-akamai-edgegrid/edgerc-reader/5-1-1.html): Discover edgerc-reader in the com.akamai.edgegrid namespace. Explore metadata, contributors, the Maven POM file, and more. (100 words)
- [Maven Central: com.akamai.edgegrid:edgerc-reader:6.0.0-rc.1](/content/central/artifact/com-akamai-edgegrid/edgerc-reader/6-0-0-rc-1.html): Discover edgerc-reader in the com.akamai.edgegrid namespace. Explore metadata, contributors, the Maven POM file, and more. (94 words)
- [Maven Central: com.akamai.edgegrid:edgerc-reader:6.0.0](/content/central/artifact/com-akamai-edgegrid/edgerc-reader/6-0-0.html): Discover edgerc-reader in the com.akamai.edgegrid namespace. Explore metadata, contributors, the Maven POM file, and more. (96 words)
- [Maven Central: com.akamai.edgegrid:edgerc-reader:6.0.1-rc.1](/content/central/artifact/com-akamai-edgegrid/edgerc-reader/6-0-1-rc-1.html): Discover edgerc-reader in the com.akamai.edgegrid namespace. Explore metadata, contributors, the Maven POM file, and more. (91 words)
- [com.akamai.edgegrid/edgerc-reader 6.0.0 | Sonatype Guide](/content/guide/component/maven/com-akamai-edgegrid-edgerc-reader/6-0-0.html): Comprehensive security analysis for com.akamai.edgegrid/edgerc-reader version 6.0.0. No known vulnerabilities. License: Apache-2.0. View dependencies, vulnerab… (51 words)
- [Maven Central: com.akamai.edgegrid:edgerc-reader:6.0.1](/content/central/artifact/com-akamai-edgegrid/edgerc-reader/6-0-1.html): Discover edgerc-reader in the com.akamai.edgegrid namespace. Explore metadata, contributors, the Maven POM file, and more. (97 words)
- [Page Not Found - Sonatype Community](/content/community/u/jspencer/index.html) (34 words)
- [Maven Central: com.google.guava:guava-parent](/content/central/artifact/com-google-guava/guava-parent/index.html): Discover guava-parent in the com.google.guava namespace. Explore metadata, contributors, the Maven POM file, and more. (633 words)
- [Page Not Found - Sonatype Community](/content/community/u/fnbrier/index.html) (34 words)
- [org.apache.commons/commons-jexl3 3.6.2 | V… | Sonatype Guide](/content/guide/component/maven/org-apache-commons-3acommons-jexl3/3-6-2/versions/index.html): Browse all available versions of org.apache.commons/commons-jexl3. Compare version 3.6.2 with other releases, view security scores, and track version history f… (172 words)
- [org.apache.commons/commons-configuration2… | Sonatype Guide](/content/guide/component/maven/org-apache-commons-3acommons-configuration2/2-15-1/versions/index.html): Browse all available versions of org.apache.commons/commons-configuration2. Compare version 2.15.1 with other releases, view security scores, and track version… (216 words)
- [Component Not Found | Sonatype Guide](/content/guide/component/maven/org-apache-syncope-core-3asyncope-core-spring/x-y-z.html): Could not find component data for maven/org.apache.syncope.core:syncope-core-spring/x.y.z. This component may not exist in our database or may have been remove… (17 words)
- [org.apache.commons/commons-parent 102 | Ve… | Sonatype Guide](/content/guide/component/maven/org-apache-commons-3acommons-parent/102/versions/index.html): Browse all available versions of org.apache.commons/commons-parent. Compare version 102 with other releases, view security scores, and track version history fo… (106 words)
- [Maven Central: org.apache.syncope.ext.saml2sp4ui](/content/central/namespace/org-apache-syncope-ext-saml2sp4ui.html): Explore the collection of packages in org.apache.syncope.ext.saml2sp4ui (253 words)
- [Maven Central: org.apache.syncope.ext.oidcc4ui:syncope-ext-oidcc4ui-provisioning-api](/content/central/artifact/org-apache-syncope-ext-oidcc4ui/syncope-ext-oidcc4ui-provisioning-api/versions/index.html): Discover syncope-ext-oidcc4ui-provisioning-api in the org.apache.syncope.ext.oidcc4ui namespace. Explore metadata, contributors, the Maven POM file, and more. (171 words)
- [Latest Sonatype Lifecycle & Repository Firewall topics - Sonatype Community](/content/community/c/sonatype-lifecycle-firewall/7/l/latest/index.html): Ask questions and follow discussions about products powered by Sonatype IQ Server: Sonatype Lifecycle and Sonatype Repository Firewall. (5,622 words)
- [Maven Central: org.apache.syncope.ext.saml2sp4ui:syncope-ext-saml2sp4ui-provisioning-api:4.1.2](/content/central/artifact/org-apache-syncope-ext-saml2sp4ui/syncope-ext-saml2sp4ui-provisioning-api/4-1-2.html): Discover syncope-ext-saml2sp4ui-provisioning-api in the org.apache.syncope.ext.saml2sp4ui namespace. Explore metadata, contributors, the Maven POM file, and more. (288 words)
- [org.apache.syncope.core/syncope-core-sprin… | Sonatype Guide](/content/guide/component/maven/org-apache-syncope-core-syncope-core-spring/4-1-2.html): Comprehensive security analysis for org.apache.syncope.core/syncope-core-spring version 4.1.2. No known vulnerabilities. License: Apache-2.0. View dependencies… (41 words)
- [Maven Central: org.apache.commons:commons-statistics-interval:1.3](/content/central/artifact/org-apache-commons/commons-statistics-interval/1-3.html): Discover commons-statistics-interval in the org.apache.commons namespace. Explore metadata, contributors, the Maven POM file, and more. (94 words)
- [Top Sonatype Lifecycle & Repository Firewall topics - Sonatype Community](/content/community/c/sonatype-lifecycle-firewall/7/l/top/index.html): Ask questions and follow discussions about products powered by Sonatype IQ Server: Sonatype Lifecycle and Sonatype Repository Firewall. (1,661 words)
- [Maven Central: org.apache.syncope.core:syncope-core-workflow-api](/content/central/artifact/org-apache-syncope-core/syncope-core-workflow-api/versions/index.html): Discover syncope-core-workflow-api in the org.apache.syncope.core namespace. Explore metadata, contributors, the Maven POM file, and more. (177 words)
- [Component Not Found | Sonatype Guide](/content/guide/component/maven/org-apache-commons-3acommons-parent/x-y-z.html): Could not find component data for maven/org.apache.commons:commons-parent/x.y.z. This component may not exist in our database or may have been removed. (17 words)
- [Maven Central: org.apache.syncope.ext.openfga:syncope-ext-openfga-client](/content/central/artifact/org-apache-syncope-ext-openfga/syncope-ext-openfga-client/versions/index.html): Discover syncope-ext-openfga-client in the org.apache.syncope.ext.openfga namespace. Explore metadata, contributors, the Maven POM file, and more. (179 words)
- [Maven Central: org.apache.syncope.core:syncope-core-spring](/content/central/artifact/org-apache-syncope-core/syncope-core-spring/versions/index.html): Discover syncope-core-spring in the org.apache.syncope.core namespace. Explore metadata, contributors, the Maven POM file, and more. (171 words)
- [Maven Central: com.google.guava:guava-tests-jdk5](/content/central/artifact/com-google-guava/guava-tests-jdk5/index.html): Discover guava-tests-jdk5 in the com.google.guava namespace. Explore metadata, contributors, the Maven POM file, and more. (241 words)
- [Maven Central: org.apache.syncope.ext.oidcc4ui](/content/central/namespace/org-apache-syncope-ext-oidcc4ui.html): Explore the collection of packages in org.apache.syncope.ext.oidcc4ui (271 words)
- [org.apache.commons/commons-statistics-inte… | Sonatype Guide](/content/guide/component/maven/org-apache-commons-3acommons-statistics-interval/1-3/versions/index.html): Browse all available versions of org.apache.commons/commons-statistics-interval. Compare version 1.3 with other releases, view security scores, and track versi… (58 words)
- [Maven Central: org.apache.syncope.ext.saml2sp4ui:syncope-ext-saml2sp4ui-provisioning-api](/content/central/artifact/org-apache-syncope-ext-saml2sp4ui/syncope-ext-saml2sp4ui-provisioning-api/versions/index.html): Discover syncope-ext-saml2sp4ui-provisioning-api in the org.apache.syncope.ext.saml2sp4ui namespace. Explore metadata, contributors, the Maven POM file, and more. (16 words)
- [Maven Central: org.apache.syncope.core:syncope-core-spring:4.1.2](/content/central/artifact/org-apache-syncope-core/syncope-core-spring/4-1-2.html): Discover syncope-core-spring in the org.apache.syncope.core namespace. Explore metadata, contributors, the Maven POM file, and more. (272 words)
- [Maven Central: org.slf4j:slf4j-parent](/content/central/artifact/org-slf4j/slf4j-parent/index.html): Discover slf4j-parent in the org.slf4j namespace. Explore metadata, contributors, the Maven POM file, and more. (424 words)
- [Maven Central: org.apache.syncope.ext.saml2sp4ui:syncope-ext-saml2sp4ui-provisioning-api](/content/central/artifact/org-apache-syncope-ext-saml2sp4ui/syncope-ext-saml2sp4ui-provisioning-api/dependents/index.html): Discover syncope-ext-saml2sp4ui-provisioning-api in the org.apache.syncope.ext.saml2sp4ui namespace. Explore metadata, contributors, the Maven POM file, and more. (14 words)
- [org.apache.syncope.ext.saml2sp4ui/syncope-… | Sonatype Guide](/content/guide/component/maven/org-apache-syncope-ext-saml2sp4ui-syncope-ext-saml2sp4ui-provisioning-api/4-1-2.html): Comprehensive security analysis for org.apache.syncope.ext.saml2sp4ui/syncope-ext-saml2sp4ui-provisioning-api version 4.1.2. No known vulnerabilities. License:… (27 words)
- [Maven Central: org.apache.syncope.ext.openfga:syncope-ext-openfga-client:4.1.2](/content/central/artifact/org-apache-syncope-ext-openfga/syncope-ext-openfga-client/4-1-2.html): Discover syncope-ext-openfga-client in the org.apache.syncope.ext.openfga namespace. Explore metadata, contributors, the Maven POM file, and more. (181 words)
- [org.apache.syncope.ext.openfga/syncope-ext… | Sonatype Guide](/content/guide/component/maven/org-apache-syncope-ext-openfga-syncope-ext-openfga-client/4-1-2.html): Comprehensive security analysis for org.apache.syncope.ext.openfga/syncope-ext-openfga-client version 4.1.2. No known vulnerabilities. License: Apache-2.0. Vie… (53 words)
- [org.apache.syncope.core/syncope-core-workf… | Sonatype Guide](/content/guide/component/maven/org-apache-syncope-core-syncope-core-workflow-api/4-1-2.html): Comprehensive security analysis for org.apache.syncope.core/syncope-core-workflow-api version 4.1.2. No known vulnerabilities. License: Apache-2.0. View depend… (45 words)
- [Maven Central: org.apache.syncope.ext.oidcc4ui:syncope-ext-oidcc4ui-provisioning-api:4.1.2](/content/central/artifact/org-apache-syncope-ext-oidcc4ui/syncope-ext-oidcc4ui-provisioning-api/4-1-2.html): Discover syncope-ext-oidcc4ui-provisioning-api in the org.apache.syncope.ext.oidcc4ui namespace. Explore metadata, contributors, the Maven POM file, and more. (283 words)
- [Maven Central: org.apache.syncope.core:syncope-core-spring](/content/central/artifact/org-apache-syncope-core/syncope-core-spring/dependents/index.html): Discover syncope-core-spring in the org.apache.syncope.core namespace. Explore metadata, contributors, the Maven POM file, and more. (3 words)
- [Component Not Found | Sonatype Guide](/content/guide/component/maven/org-apache-commons-3acommons-statistics-interval/x-y-z.html): Could not find component data for maven/org.apache.commons:commons-statistics-interval/x.y.z. This component may not exist in our database or may have been rem… (17 words)
- [Maven Central: org.apache.syncope.core:syncope-core-workflow-api:4.1.2](/content/central/artifact/org-apache-syncope-core/syncope-core-workflow-api/4-1-2.html): Discover syncope-core-workflow-api in the org.apache.syncope.core namespace. Explore metadata, contributors, the Maven POM file, and more. (146 words)
- [Maven Central: org.apache.syncope.ext.openfga](/content/central/namespace/org-apache-syncope-ext-openfga.html): Explore the collection of packages in org.apache.syncope.ext.openfga (68 words)
- [org.apache.commons/commons-configuration2… | Sonatype Guide](/content/guide/component/maven/org-apache-commons-3acommons-configuration2/2-15-1/vulnerabilities/index.html): Security vulnerabilities and CVE data for org.apache.commons/commons-configuration2 version 2.15.1. View CVSS scores, exploit details, and remediation guidance… (65 words)
- [org.apache.syncope.ext.oidcc4ui/syncope-ex… | Sonatype Guide](/content/guide/component/maven/org-apache-syncope-ext-oidcc4ui-syncope-ext-oidcc4ui-provisioning-api/4-1-2.html): Comprehensive security analysis for org.apache.syncope.ext.oidcc4ui/syncope-ext-oidcc4ui-provisioning-api version 4.1.2. No known vulnerabilities. License: Apa… (56 words)
- [Maven Central: org.apache.syncope.ext.openfga:syncope-ext-openfga-client](/content/central/artifact/org-apache-syncope-ext-openfga/syncope-ext-openfga-client/dependents/index.html): Discover syncope-ext-openfga-client in the org.apache.syncope.ext.openfga namespace. Explore metadata, contributors, the Maven POM file, and more. (46 words)
- [Maven Central: com.google.guava:guava](/content/central/artifact/com-google-guava/guava/index.html): Discover guava in the com.google.guava namespace. Explore metadata, contributors, the Maven POM file, and more. (342 words)
- [Maven Central: com.google.guava:guava-tests](/content/central/artifact/com-google-guava/guava-tests/versions/index.html): Discover guava-tests in the com.google.guava namespace. Explore metadata, contributors, the Maven POM file, and more. (177 words)
- [Maven Central: org.apache.syncope.core:syncope-core-workflow-api](/content/central/artifact/org-apache-syncope-core/syncope-core-workflow-api/dependents/index.html): Discover syncope-core-workflow-api in the org.apache.syncope.core namespace. Explore metadata, contributors, the Maven POM file, and more. (77 words)
- [Maven Central: org.apache.commons:commons-configuration2:2.6](/content/central/artifact/org-apache-commons/commons-configuration2/2-6.html): Discover commons-configuration2 in the org.apache.commons namespace. Explore metadata, contributors, the Maven POM file, and more. (1,026 words)
- [Maven Central: com.google.guava:failureaccess](/content/central/artifact/com-google-guava/failureaccess/index.html): Discover failureaccess in the com.google.guava namespace. Explore metadata, contributors, the Maven POM file, and more. (298 words)
- [com.google.guava/guava-tests-jdk5 17.0 | Sonatype Guide](/content/guide/component/maven/com-google-guava-guava-tests-jdk5/17-0.html): Comprehensive security analysis for com.google.guava/guava-tests-jdk5 version 17.0. No known vulnerabilities. License: Apache-2.0. View dependencies, vulnerabi… (50 words)
- [Maven Central: com.google.guava:guava-tests-jdk5](/content/central/artifact/com-google-guava/guava-tests-jdk5/dependents/index.html): Discover guava-tests-jdk5 in the com.google.guava namespace. Explore metadata, contributors, the Maven POM file, and more. (3 words)
- [Maven Central: com.google.guava:failureaccess](/content/central/artifact/com-google-guava/failureaccess/dependents/index.html): Discover failureaccess in the com.google.guava namespace. Explore metadata, contributors, the Maven POM file, and more. (280 words)
- [Maven Central: com.google.guava:guava](/content/central/artifact/com-google-guava/guava/versions/index.html): Discover guava in the com.google.guava namespace. Explore metadata, contributors, the Maven POM file, and more. (179 words)
- [com.google.guava/guava-tests 23.3-jre | Sonatype Guide](/content/guide/component/maven/com-google-guava-guava-tests/23-3-jre.html): Comprehensive security analysis for com.google.guava/guava-tests version 23.3-jre. No known vulnerabilities. License: Apache-2.0. View dependencies, vulnerabil… (50 words)
- [Maven Central: org.apache.commons:commons-configuration2:2.10.0](/content/central/artifact/org-apache-commons/commons-configuration2/2-10-0.html): Discover commons-configuration2 in the org.apache.commons namespace. Explore metadata, contributors, the Maven POM file, and more. (936 words)
- [com.google.guava/guava-beta-checker 1.0 | Sonatype Guide](/content/guide/component/maven/com-google-guava-guava-beta-checker/1-0.html): Comprehensive security analysis for com.google.guava/guava-beta-checker version 1.0. No known vulnerabilities. License: Apache-2.0. View dependencies, vulnerab… (53 words)
- [Maven Central: com.google.guava:guava-tests](/content/central/artifact/com-google-guava/guava-tests/index.html): Discover guava-tests in the com.google.guava namespace. Explore metadata, contributors, the Maven POM file, and more. (200 words)
- [Maven Central: com.google.guava:guava-gwt](/content/central/artifact/com-google-guava/guava-gwt/versions/index.html): Discover guava-gwt in the com.google.guava namespace. Explore metadata, contributors, the Maven POM file, and more. (171 words)
- [Maven Central: com.google.guava:guava-bom](/content/central/artifact/com-google-guava/guava-bom/versions/index.html): Discover guava-bom in the com.google.guava namespace. Explore metadata, contributors, the Maven POM file, and more. (174 words)
- [Maven Central: com.google.guava:guava-beta-checker](/content/central/artifact/com-google-guava/guava-beta-checker/index.html): Discover guava-beta-checker in the com.google.guava namespace. Explore metadata, contributors, the Maven POM file, and more. (158 words)
- [com.google.guava/listenablefuture 9999.0-e… | Sonatype Guide](/content/guide/component/maven/com-google-guava-listenablefuture/9999-0-empty-to-avoid-conflict-with-guava.html): Comprehensive security analysis for com.google.guava/listenablefuture version 9999.0-empty-to-avoid-conflict-with-guava. No known vulnerabilities. License: Apa… (35 words)
- [Maven Central: com.google.guava:guava-testlib](/content/central/artifact/com-google-guava/guava-testlib/dependents/index.html): Discover guava-testlib in the com.google.guava namespace. Explore metadata, contributors, the Maven POM file, and more. (326 words)
- [Maven Central: com.google.guava:listenablefuture](/content/central/artifact/com-google-guava/listenablefuture/versions/index.html): Discover listenablefuture in the com.google.guava namespace. Explore metadata, contributors, the Maven POM file, and more. (16 words)
- [Maven Central: com.google.guava:listenablefuture](/content/central/artifact/com-google-guava/listenablefuture/dependents/index.html): Discover listenablefuture in the com.google.guava namespace. Explore metadata, contributors, the Maven POM file, and more. (6 words)
- [Maven Central: com.google.guava:guava-testlib](/content/central/artifact/com-google-guava/guava-testlib/versions/index.html): Discover guava-testlib in the com.google.guava namespace. Explore metadata, contributors, the Maven POM file, and more. (159 words)
- [Maven Central: com.google.guava:guava-testlib](/content/central/artifact/com-google-guava/guava-testlib/index.html): Discover guava-testlib in the com.google.guava namespace. Explore metadata, contributors, the Maven POM file, and more. (228 words)
- [Maven Central: com.google.guava:failureaccess](/content/central/artifact/com-google-guava/failureaccess/versions/index.html): Discover failureaccess in the com.google.guava namespace. Explore metadata, contributors, the Maven POM file, and more. (19 words)
- [Component Not Found | Sonatype Guide](/content/guide/component/maven/org-apache-commons-3acommons-configuration2/x-y-z.html): Could not find component data for maven/org.apache.commons:commons-configuration2/x.y.z. This component may not exist in our database or may have been removed. (17 words)
- [Maven Central: org.slf4j:slf4j-parent](/content/central/artifact/org-slf4j/slf4j-parent/versions/index.html): Discover slf4j-parent in the org.slf4j namespace. Explore metadata, contributors, the Maven POM file, and more. (171 words)
- [Maven Central: com.google.guava:listenablefuture](/content/central/artifact/com-google-guava/listenablefuture/index.html): Discover listenablefuture in the com.google.guava namespace. Explore metadata, contributors, the Maven POM file, and more. (9 words)
- [com.google.guava/guava-bom 33.6.0-jre | Sonatype Guide](/content/guide/component/maven/com-google-guava-guava-bom/33-6-0-jre.html): Comprehensive security analysis for com.google.guava/guava-bom version 33.6.0-jre. No known vulnerabilities. License: Apache-2.0. View dependencies, vulnerabil… (54 words)
- [Maven Central: org.apache.commons:commons-configuration2:2.9.0](/content/central/artifact/org-apache-commons/commons-configuration2/2-9-0.html): Discover commons-configuration2 in the org.apache.commons namespace. Explore metadata, contributors, the Maven POM file, and more. (914 words)
- [Maven Central: com.google.guava:guava-parent](/content/central/artifact/com-google-guava/guava-parent/versions/index.html): Discover guava-parent in the com.google.guava namespace. Explore metadata, contributors, the Maven POM file, and more. (172 words)
- [Maven Central: com.google.guava:guava-gwt](/content/central/artifact/com-google-guava/guava-gwt/index.html): Discover guava-gwt in the com.google.guava namespace. Explore metadata, contributors, the Maven POM file, and more. (238 words)
- [com.google.guava/guava-testlib 33.6.0-jre | Sonatype Guide](/content/guide/component/maven/com-google-guava-guava-testlib/33-6-0-jre.html): Comprehensive security analysis for com.google.guava/guava-testlib version 33.6.0-jre. No known vulnerabilities. License: Apache-2.0. View dependencies, vulner… (55 words)
- [com.google.guava/failureaccess 1.0.3 | Sonatype Guide](/content/guide/component/maven/com-google-guava-failureaccess/1-0-3.html): Comprehensive security analysis for com.google.guava/failureaccess version 1.0.3. No known vulnerabilities. License: Apache-2.0. View dependencies, vulnerabili… (52 words)
- [Maven Central: com.google.guava:guava-bom](/content/central/artifact/com-google-guava/guava-bom/index.html): Discover guava-bom in the com.google.guava namespace. Explore metadata, contributors, the Maven POM file, and more. (154 words)
- [com.google.guava/guava-gwt 33.6.0-jre | Sonatype Guide](/content/guide/component/maven/com-google-guava-guava-gwt/33-6-0-jre.html): Comprehensive security analysis for com.google.guava/guava-gwt version 33.6.0-jre. No known vulnerabilities. License: Apache-2.0. View dependencies, vulnerabil… (43 words)
- [Maven Central: com.google.guava:guava-beta-checker](/content/central/artifact/com-google-guava/guava-beta-checker/versions/index.html): Discover guava-beta-checker in the com.google.guava namespace. Explore metadata, contributors, the Maven POM file, and more. (34 words)
- [Maven Central: com.google.guava:guava-tests](/content/central/artifact/com-google-guava/guava-tests/dependents/index.html): Discover guava-tests in the com.google.guava namespace. Explore metadata, contributors, the Maven POM file, and more. (20 words)
- [com.google.guava/guava 33.6.0-jre | Sonatype Guide](/content/guide/component/maven/com-google-guava-guava/33-6-0-jre.html): Comprehensive security analysis for com.google.guava/guava version 33.6.0-jre. No known vulnerabilities. License: Apache-2.0. View dependencies, vulnerabilitie… (56 words)
- [Maven Central: com.google.guava:guava-gwt](/content/central/artifact/com-google-guava/guava-gwt/dependents/index.html): Discover guava-gwt in the com.google.guava namespace. Explore metadata, contributors, the Maven POM file, and more. (3 words)
- [Maven Central: org.slf4j:log4j-over-slf4j](/content/central/artifact/org-slf4j/log4j-over-slf4j/versions/index.html): Discover log4j-over-slf4j in the org.slf4j namespace. Explore metadata, contributors, the Maven POM file, and more. (178 words)
- [Maven Central: com.google.guava:guava-beta-checker](/content/central/artifact/com-google-guava/guava-beta-checker/dependents/index.html): Discover guava-beta-checker in the com.google.guava namespace. Explore metadata, contributors, the Maven POM file, and more. (20 words)
- [Maven Central: com.google.guava:guava](/content/central/artifact/com-google-guava/guava/dependents/index.html): Discover guava in the com.google.guava namespace. Explore metadata, contributors, the Maven POM file, and more. (3 words)
- [Maven Central: org.slf4j:slf4j-jdk14](/content/central/artifact/org-slf4j/slf4j-jdk14/dependents/index.html): Discover slf4j-jdk14 in the org.slf4j namespace. Explore metadata, contributors, the Maven POM file, and more. (203 words)
- [Maven Central: org.slf4j:slf4j-jdk-platform-logging](/content/central/artifact/org-slf4j/slf4j-jdk-platform-logging/index.html): Discover slf4j-jdk-platform-logging in the org.slf4j namespace. Explore metadata, contributors, the Maven POM file, and more. (143 words)
- [org.slf4j/slf4j-parent 2.0.18 | Sonatype Guide](/content/guide/component/maven/org-slf4j-slf4j-parent/2-0-18.html): Comprehensive security analysis for org.slf4j/slf4j-parent version 2.0.18. No known vulnerabilities. License: MIT. View dependencies, vulnerabilities, and deta… (47 words)
- [Maven Central: org.slf4j:slf4j-api](/content/central/artifact/org-slf4j/slf4j-api/versions/index.html): Discover slf4j-api in the org.slf4j namespace. Explore metadata, contributors, the Maven POM file, and more. (177 words)
- [Maven Central: org.slf4j:slf4j-migrator](/content/central/artifact/org-slf4j/slf4j-migrator/versions/index.html): Discover slf4j-migrator in the org.slf4j namespace. Explore metadata, contributors, the Maven POM file, and more. (180 words)
- [Maven Central: org.slf4j:slf4j-jdk14](/content/central/artifact/org-slf4j/slf4j-jdk14/index.html): Discover slf4j-jdk14 in the org.slf4j namespace. Explore metadata, contributors, the Maven POM file, and more. (84 words)
- [Maven Central: org.slf4j:slf4j-api](/content/central/artifact/org-slf4j/slf4j-api/index.html): Discover slf4j-api in the org.slf4j namespace. Explore metadata, contributors, the Maven POM file, and more. (146 words)
- [Maven Central: com.google.guava:guava-bom](/content/central/artifact/com-google-guava/guava-bom/dependents/index.html): Discover guava-bom in the com.google.guava namespace. Explore metadata, contributors, the Maven POM file, and more. (21 words)
- [Maven Central: org.slf4j:slf4j-log4j12](/content/central/artifact/org-slf4j/slf4j-log4j12/versions/index.html): Discover slf4j-log4j12 in the org.slf4j namespace. Explore metadata, contributors, the Maven POM file, and more. (179 words)
- [Maven Central: org.slf4j:slf4j-api](/content/central/artifact/org-slf4j/slf4j-api/dependents/index.html): Discover slf4j-api in the org.slf4j namespace. Explore metadata, contributors, the Maven POM file, and more. (318 words)
- [org.slf4j/slf4j-jdk14 2.0.18 | Sonatype Guide](/content/guide/component/maven/org-slf4j-slf4j-jdk14/2-0-18.html): Comprehensive security analysis for org.slf4j/slf4j-jdk14 version 2.0.18. No known vulnerabilities. License: MIT. View dependencies, vulnerabilities, and detai… (56 words)
- [Maven Central: org.slf4j:slf4j-jdk14](/content/central/artifact/org-slf4j/slf4j-jdk14/versions/index.html): Discover slf4j-jdk14 in the org.slf4j namespace. Explore metadata, contributors, the Maven POM file, and more. (16 words)
- [Maven Central: org.slf4j:log4j-over-slf4j](/content/central/artifact/org-slf4j/log4j-over-slf4j/dependents/index.html): Discover log4j-over-slf4j in the org.slf4j namespace. Explore metadata, contributors, the Maven POM file, and more. (243 words)
- [com.google.guava/guava-parent 33.6.0-jre | Sonatype Guide](/content/guide/component/maven/com-google-guava-guava-parent/33-6-0-jre.html): Comprehensive security analysis for com.google.guava/guava-parent version 33.6.0-jre. No known vulnerabilities. License: Apache-2.0. View dependencies, vulnera… (44 words)
- [Maven Central: org.slf4j:slf4j-nop](/content/central/artifact/org-slf4j/slf4j-nop/versions/index.html): Discover slf4j-nop in the org.slf4j namespace. Explore metadata, contributors, the Maven POM file, and more. (171 words)
- [Maven Central: org.slf4j:slf4j-log4j12](/content/central/artifact/org-slf4j/slf4j-log4j12/dependents/index.html): Discover slf4j-log4j12 in the org.slf4j namespace. Explore metadata, contributors, the Maven POM file, and more. (256 words)
- [org.slf4j/slf4j-migrator 2.0.18 | Sonatype Guide](/content/guide/component/maven/org-slf4j-slf4j-migrator/2-0-18.html): Comprehensive security analysis for org.slf4j/slf4j-migrator version 2.0.18. No known vulnerabilities. License: MIT. View dependencies, vulnerabilities, and de… (55 words)
- [Maven Central: org.apache.commons:commons-statistics-inference:1.1](/content/central/artifact/org-apache-commons/commons-statistics-inference/1-1.html): Discover commons-statistics-inference in the org.apache.commons namespace. Explore metadata, contributors, the Maven POM file, and more. (281 words)
- [org.slf4j/slf4j-api 2.0.18 | Sonatype Guide](/content/guide/component/maven/org-slf4j-slf4j-api/2-0-18.html): Comprehensive security analysis for org.slf4j/slf4j-api version 2.0.18. No known vulnerabilities. License: MIT. View dependencies, vulnerabilities, and detaile… (43 words)
- [Maven Central: com.google.guava:guava-parent](/content/central/artifact/com-google-guava/guava-parent/dependents/index.html): Discover guava-parent in the com.google.guava namespace. Explore metadata, contributors, the Maven POM file, and more. (20 words)
- [org.slf4j/log4j-over-slf4j 2.0.18 | Sonatype Guide](/content/guide/component/maven/org-slf4j-log4j-over-slf4j/2-0-18.html): Comprehensive security analysis for org.slf4j/log4j-over-slf4j version 2.0.18. No known vulnerabilities. License: Apache-2.0. View dependencies, vulnerabilitie… (50 words)
- [Maven Central: org.slf4j:log4j-over-slf4j](/content/central/artifact/org-slf4j/log4j-over-slf4j/index.html): Discover log4j-over-slf4j in the org.slf4j namespace. Explore metadata, contributors, the Maven POM file, and more. (107 words)
- [Maven Central: org.apache.commons:commons-statistics-inference:1.2](/content/central/artifact/org-apache-commons/commons-statistics-inference/1-2.html): Discover commons-statistics-inference in the org.apache.commons namespace. Explore metadata, contributors, the Maven POM file, and more. (159 words)
- [Maven Central: org.apache.commons:commons-configuration2:2.7](/content/central/artifact/org-apache-commons/commons-configuration2/2-7.html): Discover commons-configuration2 in the org.apache.commons namespace. Explore metadata, contributors, the Maven POM file, and more. (703 words)
- [org.slf4j/slf4j-nop 2.0.18 | Sonatype Guide](/content/guide/component/maven/org-slf4j-slf4j-nop/2-0-18.html): Comprehensive security analysis for org.slf4j/slf4j-nop version 2.0.18. No known vulnerabilities. License: MIT. View dependencies, vulnerabilities, and detaile… (55 words)
- [Maven Central: org.slf4j:slf4j-parent](/content/central/artifact/org-slf4j/slf4j-parent/dependents/index.html): Discover slf4j-parent in the org.slf4j namespace. Explore metadata, contributors, the Maven POM file, and more. (20 words)
- [org.apache.commons/commons-statistics-infe… | Sonatype Guide](/content/guide/component/maven/org-apache-commons-commons-statistics-inference/1-1.html): Comprehensive security analysis for org.apache.commons/commons-statistics-inference version 1.1. No known vulnerabilities. License: Apache-2.0. View dependenci… (50 words)
- [Maven Central: org.apache.commons:commons-configuration2:2.10.1](/content/central/artifact/org-apache-commons/commons-configuration2/2-10-1.html): Discover commons-configuration2 in the org.apache.commons namespace. Explore metadata, contributors, the Maven POM file, and more. (639 words)
- [org.slf4j/slf4j-log4j12 2.0.18 | Sonatype Guide](/content/guide/component/maven/org-slf4j-slf4j-log4j12/2-0-18.html): Comprehensive security analysis for org.slf4j/slf4j-log4j12 version 2.0.18. No known vulnerabilities. License: MIT. View dependencies, vulnerabilities, and det… (37 words)
- [org.apache.commons/commons-statistics-infe… | Sonatype Guide](/content/guide/component/maven/org-apache-commons-commons-statistics-inference/1-2.html): Comprehensive security analysis for org.apache.commons/commons-statistics-inference version 1.2. No known vulnerabilities. License: Apache-2.0. View dependenci… (37 words)
- [Maven Central: org.slf4j:slf4j-log4j12](/content/central/artifact/org-slf4j/slf4j-log4j12/index.html): Discover slf4j-log4j12 in the org.slf4j namespace. Explore metadata, contributors, the Maven POM file, and more. (79 words)
- [Maven Central: org.slf4j:slf4j-migrator](/content/central/artifact/org-slf4j/slf4j-migrator/dependents/index.html): Discover slf4j-migrator in the org.slf4j namespace. Explore metadata, contributors, the Maven POM file, and more. (20 words)
- [Maven Central: org.slf4j:slf4j-nop](/content/central/artifact/org-slf4j/slf4j-nop/index.html): Discover slf4j-nop in the org.slf4j namespace. Explore metadata, contributors, the Maven POM file, and more. (90 words)
- [Maven Central: org.apache.commons:commons-configuration2:2.8.0](/content/central/artifact/org-apache-commons/commons-configuration2/2-8-0.html): Discover commons-configuration2 in the org.apache.commons namespace. Explore metadata, contributors, the Maven POM file, and more. (683 words)
- [My Sonatype](/content/my/resources/index.html): Welcome to Sonatype’s Customer Platform. Find the information you need to get the most out of our products. Access technical support, help docs, educational resources, our community forum, and more. (371 words)
- [Maven Central: org.apache.commons:commons-configuration2:2.14.0](/content/central/artifact/org-apache-commons/commons-configuration2/2-14-0.html): Discover commons-configuration2 in the org.apache.commons namespace. Explore metadata, contributors, the Maven POM file, and more. (426 words)
- [My Sonatype - Community](/content/my/community/index-2.html): Welcome to Sonatype’s Customer Platform. Find the information you need to get the most out of our products. Access technical support, help docs, educational resources, our community forum, and more., Engage with peers and experts, ask questions, share best practices, and stay updated on Sonatype developments. Join the conversation today! (188 words)
- [Top Sonatype SBOM Manager topics - Sonatype Community](/content/community/c/sbom-manager/72/l/top/index.html): Ask questions and follow discussions about Sonatype SBOM Manager. (41 words)
- [Third-Party Analysis REST API](/content/help/en/third-party-scan-rest-api-html.html) (1,691 words)
- [My Sonatype - Support](/content/my/classic/support/index.html): Welcome to Sonatype’s Customer Platform. Find the information you need to get the most out of our products. Access technical support, help docs, educational resources, our community forum, and more., Get the assistance you need and connect with our world class support specialists. (76 words)
- [My Sonatype - Learn](/content/my/learn/index.html): Welcome to Sonatype’s Customer Platform. Find the information you need to get the most out of our products. Access technical support, help docs, educational resources, our community forum, and more., Dive into a wealth of resources available on demand! Whether you're seeking courses, guides, or other assets, Sonatype has you covered. Start your journey to success now! (21 words)
- [Latest Sonatype Guide topics - Sonatype Community](/content/community/c/sonatype-guide/73/l/latest/index.html): Discuss Sonatype Guide and the MCP server. Ask questions, get answers, and learn about the latest. (74 words)
- [Sonatype Integrations Version Status](/content/help/en/sonatype-integration-versions-status-html.html): CLM analysis using a Maven plugin, Provide a Azure DevOps pipeline step which will run a policy evaluation against a set of files in the build workspace., Fortify SSC integration, Eclipse IDE plugin for IQ Server, Nexus IQ integration for Intellij IDEA, Visual Studio 2022 Extension, VSCode plugin, Repository for the GitHub Actions Integration (1,685 words)
- [Maven Central: ai.wavemaker.commons:wavemaker-commons-util](/content/central/artifact/ai-wavemaker-commons/wavemaker-commons-util/versions/index.html): Discover wavemaker-commons-util in the ai.wavemaker.commons namespace. Explore metadata, contributors, the Maven POM file, and more. (176 words)
- [Maven Central: org.apache.commons:commons-jexl3:3.2](/content/central/artifact/org-apache-commons/commons-jexl3/3-2.html): Discover commons-jexl3 in the org.apache.commons namespace. Explore metadata, contributors, the Maven POM file, and more. (536 words)
- [Maven Central: com.arcadedb:arcadedb-gremlin:26.7.2](/content/central/artifact/com-arcadedb/arcadedb-gremlin/26-7-2.html): Discover arcadedb-gremlin in the com.arcadedb namespace. Explore metadata, contributors, the Maven POM file, and more. (196 words)
- [Maven Central: com.arcadedb:arcadedb-gremlin:26.6.1](/content/central/artifact/com-arcadedb/arcadedb-gremlin/26-6-1.html): Discover arcadedb-gremlin in the com.arcadedb namespace. Explore metadata, contributors, the Maven POM file, and more. (339 words)
- [Maven Central: org.apache.commons:commons-statistics-inference:1.3](/content/central/artifact/org-apache-commons/commons-statistics-inference/1-3.html): Discover commons-statistics-inference in the org.apache.commons namespace. Explore metadata, contributors, the Maven POM file, and more. (143 words)
- [Maven Central: org.apache.commons:commons-configuration2:2.13.0](/content/central/artifact/org-apache-commons/commons-configuration2/2-13-0.html): Discover commons-configuration2 in the org.apache.commons namespace. Explore metadata, contributors, the Maven POM file, and more. (235 words)
- [Sonatype Guide - Sonatype Community](/content/community/c/sonatype-guide/73/l/top/index.html): Discuss Sonatype Guide and the MCP server. Ask questions, get answers, and learn about the latest. (22 words)
- [Maven Central: ai.wavemaker.commons:wavemaker-commons-util](/content/central/artifact/ai-wavemaker-commons/wavemaker-commons-util/dependents/index.html): Discover wavemaker-commons-util in the ai.wavemaker.commons namespace. Explore metadata, contributors, the Maven POM file, and more. (281 words)
- [Maven Central: com.codelry.util:capella-api:1.2.0](/content/central/artifact/com-codelry-util/capella-api/1-2-0.html): Discover capella-api in the com.codelry.util namespace. Explore metadata, contributors, the Maven POM file, and more. (135 words)
- [Maven Central: org.apache.commons:commons-configuration2:2.11.0](/content/central/artifact/org-apache-commons/commons-configuration2/2-11-0.html): Discover commons-configuration2 in the org.apache.commons namespace. Explore metadata, contributors, the Maven POM file, and more. (258 words)
- [Maven Central: org.apache.commons:commons-jexl3:3.6.1](/content/central/artifact/org-apache-commons/commons-jexl3/3-6-1.html): Discover commons-jexl3 in the org.apache.commons namespace. Explore metadata, contributors, the Maven POM file, and more. (613 words)
- [Maven Central: com.arcadedb:arcadedb-gremlin:26.7.3](/content/central/artifact/com-arcadedb/arcadedb-gremlin/26-7-3.html): Discover arcadedb-gremlin in the com.arcadedb namespace. Explore metadata, contributors, the Maven POM file, and more. (292 words)
- [Maven Central: org.apache.commons:commons-configuration2:2.12.0](/content/central/artifact/org-apache-commons/commons-configuration2/2-12-0.html): Discover commons-configuration2 in the org.apache.commons namespace. Explore metadata, contributors, the Maven POM file, and more. (239 words)
- [Top Community Announcements topics - Sonatype Community](/content/community/c/community-announcements/5/l/top/index.html): A place for updates and information from the Sonatype Community team. New to the Community? Start here. (3,277 words)
- [org.apache.commons/commons-configuration2… | Sonatype Guide](/content/guide/component/maven/org-apache-commons-commons-configuration2/2-6.html): Comprehensive security analysis for org.apache.commons/commons-configuration2 version 2.6. Max vulnerability severity: 10.0 CVSS. License: Apache-2.0. View dep… (36 words)
- [Maven Central: com.arcadedb:arcadedb-gremlin](/content/central/artifact/com-arcadedb/arcadedb-gremlin/versions/index.html): Discover arcadedb-gremlin in the com.arcadedb namespace. Explore metadata, contributors, the Maven POM file, and more. (172 words)
- [Maven Central: eu.vnagy.argotools:argo-junit](/content/central/artifact/eu-vnagy-argotools/argo-junit/index.html): Discover argo-junit in the eu.vnagy.argotools namespace. Explore metadata, contributors, the Maven POM file, and more. (454 words)
- [Maven Central: org.apache.commons:commons-configuration2:2.15.1](/content/central/artifact/org-apache-commons/commons-configuration2/2-15-1.html): Discover commons-configuration2 in the org.apache.commons namespace. Explore metadata, contributors, the Maven POM file, and more. (261 words)
- [org.apache.commons/commons-configuration2… | Sonatype Guide](/content/guide/component/maven/org-apache-commons-commons-configuration2/2-9-0.html): Comprehensive security analysis for org.apache.commons/commons-configuration2 version 2.9.0. Max vulnerability severity: 6.5 CVSS. License: Apache-2.0. View de… (46 words)
- [org.apache.commons/commons-configuration2… | Sonatype Guide](/content/guide/component/maven/org-apache-commons-commons-configuration2/2-8-0.html): Comprehensive security analysis for org.apache.commons/commons-configuration2 version 2.8.0. Max vulnerability severity: 6.5 CVSS. License: Apache-2.0. View de… (32 words)
- [Maven Central: com.arcadedb:arcadedb-gremlin:26.7.1](/content/central/artifact/com-arcadedb/arcadedb-gremlin/26-7-1.html): Discover arcadedb-gremlin in the com.arcadedb namespace. Explore metadata, contributors, the Maven POM file, and more. (185 words)
- [Maven Central: org.apache.commons:commons-configuration2:2.15.0](/content/central/artifact/org-apache-commons/commons-configuration2/2-15-0.html): Discover commons-configuration2 in the org.apache.commons namespace. Explore metadata, contributors, the Maven POM file, and more. (254 words)
- [org.apache.commons/commons-configuration2… | Sonatype Guide](/content/guide/component/maven/org-apache-commons-commons-configuration2/2-10-1.html): Comprehensive security analysis for org.apache.commons/commons-configuration2 version 2.10.1. Max vulnerability severity: 5.3 CVSS. License: Apache-2.0. View d… (59 words)
- [org.apache.commons/commons-configuration2… | Sonatype Guide](/content/guide/component/maven/org-apache-commons-commons-configuration2/2-12-0.html): Comprehensive security analysis for org.apache.commons/commons-configuration2 version 2.12.0. Max vulnerability severity: 5.3 CVSS. License: Apache-2.0. View d… (49 words)
- [org.apache.commons/commons-configuration2… | Sonatype Guide](/content/guide/component/maven/org-apache-commons-commons-configuration2/2-14-0.html): Comprehensive security analysis for org.apache.commons/commons-configuration2 version 2.14.0. Max vulnerability severity: 5.3 CVSS. License: Apache-2.0. View d… (38 words)
- [Maven Central: com.codelry.util:capella-api](/content/central/artifact/com-codelry-util/capella-api/versions/index.html): Discover capella-api in the com.codelry.util namespace. Explore metadata, contributors, the Maven POM file, and more. (132 words)
- [org.apache.commons/commons-configuration2… | Sonatype Guide](/content/guide/component/maven/org-apache-commons-commons-configuration2/2-7.html): Comprehensive security analysis for org.apache.commons/commons-configuration2 version 2.7. Max vulnerability severity: 9.8 CVSS. License: Apache-2.0. View depe… (52 words)
- [Latest Community Announcements topics - Sonatype Community](/content/community/c/community-announcements/5/l/latest/index.html): A place for updates and information from the Sonatype Community team. New to the Community? Start here. (3,307 words)
- [org.apache.commons/commons-configuration2… | Sonatype Guide](/content/guide/component/maven/org-apache-commons-commons-configuration2/2-15-0.html): Comprehensive security analysis for org.apache.commons/commons-configuration2 version 2.15.0. Max vulnerability severity: 2.7 CVSS. License: Apache-2.0. View d… (39 words)
- [Maven Central: commons-codec:commons-codec](/content/central/artifact/commons-codec/commons-codec/index.html): Discover commons-codec in the commons-codec namespace. Explore metadata, contributors, the Maven POM file, and more. (301 words)
- [Maven Central: ai.wavemaker.commons:wavemaker-commons-util:1.0.0.ee-20260711132804](/content/central/artifact/ai-wavemaker-commons/wavemaker-commons-util/1-0-0-ee-20260711132804.html): Discover wavemaker-commons-util in the ai.wavemaker.commons namespace. Explore metadata, contributors, the Maven POM file, and more. (208 words)
- [Maven Central: com.arcadedb](/content/central/namespace/com-arcadedb.html): Explore the collection of packages in com.arcadedb (165 words)
- [com.arcadedb/arcadedb-gremlin 26.7.3 | Sonatype Guide](/content/guide/component/maven/com-arcadedb-arcadedb-gremlin/26-7-3.html): Comprehensive security analysis for com.arcadedb/arcadedb-gremlin version 26.7.3. No known vulnerabilities. License: Apache-2.0. View dependencies, vulnerabili… (55 words)
- [com.arcadedb/arcadedb-gremlin 26.7.1 | Sonatype Guide](/content/guide/component/maven/com-arcadedb-arcadedb-gremlin/26-7-1.html): Comprehensive security analysis for com.arcadedb/arcadedb-gremlin version 26.7.1. No known vulnerabilities. License: Apache-2.0. View dependencies, vulnerabili… (49 words)
- [Maven Central: com.fasterxml.jackson.core:jackson-core](/content/central/artifact/com-fasterxml-jackson-core/jackson-core/index.html): Discover jackson-core in the com.fasterxml.jackson.core namespace. Explore metadata, contributors, the Maven POM file, and more. (318 words)
- [Maven Central: ai.wavemaker.commons:wavemaker-commons-util:1.0.0-20260711132257](/content/central/artifact/ai-wavemaker-commons/wavemaker-commons-util/1-0-0-20260711132257.html): Discover wavemaker-commons-util in the ai.wavemaker.commons namespace. Explore metadata, contributors, the Maven POM file, and more. (205 words)
- [com.akamai.edgegrid/edgerc-reader 6.0.4-RC1 | Sonatype Guide](/content/guide/component/maven/com-akamai-edgegrid-edgerc-reader/6-0-4-rc1.html): Comprehensive security analysis for com.akamai.edgegrid/edgerc-reader version 6.0.4-RC1. No known vulnerabilities. License: Apache-2.0. View dependencies, vuln… (45 words)
- [org.apache.commons/commons-configuration2… | Sonatype Guide](/content/guide/component/maven/org-apache-commons-commons-configuration2/2-13-0.html): Comprehensive security analysis for org.apache.commons/commons-configuration2 version 2.13.0. Max vulnerability severity: 5.3 CVSS. License: Apache-2.0. View d… (51 words)
- [Find and Fix Log4j](/content/help/en/find-and-fix-log4j-html.html) (1,876 words)
- [com.arcadedb/arcadedb-gremlin 26.7.2 | Sonatype Guide](/content/guide/component/maven/com-arcadedb-arcadedb-gremlin/26-7-2.html): Comprehensive security analysis for com.arcadedb/arcadedb-gremlin version 26.7.2. No known vulnerabilities. License: Apache-2.0. View dependencies, vulnerabili… (36 words)
- [com.akamai.edgegrid/edgerc-reader 6.0.4-RC2 | Sonatype Guide](/content/guide/component/maven/com-akamai-edgegrid-edgerc-reader/6-0-4-rc2.html): Comprehensive security analysis for com.akamai.edgegrid/edgerc-reader version 6.0.4-RC2. No known vulnerabilities. License: Apache-2.0. View dependencies, vuln… (41 words)
- [Maven Central: com.arcadedb:arcadedb-gremlin](/content/central/artifact/com-arcadedb/arcadedb-gremlin/dependents/index.html): Discover arcadedb-gremlin in the com.arcadedb namespace. Explore metadata, contributors, the Maven POM file, and more. (3 words)
- [com.arcadedb/arcadedb-gremlin 26.6.1 | Sonatype Guide](/content/guide/component/maven/com-arcadedb-arcadedb-gremlin/26-6-1.html): Comprehensive security analysis for com.arcadedb/arcadedb-gremlin version 26.6.1. No known vulnerabilities. License: Apache-2.0. View dependencies, vulnerabili… (34 words)
- [ai.wavemaker.commons/wavemaker-commons-uti… | Sonatype Guide](/content/guide/component/maven/ai-wavemaker-commons-wavemaker-commons-util/1-0-0-ee-20260711132804.html): Comprehensive security analysis for ai.wavemaker.commons/wavemaker-commons-util version 1.0.0.ee-20260711132804. No known vulnerabilities. License: Apache-2.0.… (60 words)
- [Maven Central: org.apache.commons:commons-jexl3:3.1](/content/central/artifact/org-apache-commons/commons-jexl3/3-1.html): Discover commons-jexl3 in the org.apache.commons namespace. Explore metadata, contributors, the Maven POM file, and more. (489 words)
- [Maven Central: org.apache.syncope.core:syncope-core-provisioning-api](/content/central/artifact/org-apache-syncope-core/syncope-core-provisioning-api/versions/index.html): Discover syncope-core-provisioning-api in the org.apache.syncope.core namespace. Explore metadata, contributors, the Maven POM file, and more. (177 words)
- [org.apache.commons/commons-configuration2… | Sonatype Guide](/content/guide/component/maven/org-apache-commons-commons-configuration2/2-11-0.html): Comprehensive security analysis for org.apache.commons/commons-configuration2 version 2.11.0. Max vulnerability severity: 5.3 CVSS. License: Apache-2.0. View d… (44 words)
- [ai.wavemaker.commons/wavemaker-commons-uti… | Sonatype Guide](/content/guide/component/maven/ai-wavemaker-commons-wavemaker-commons-util/1-0-0-20260711132257.html): Comprehensive security analysis for ai.wavemaker.commons/wavemaker-commons-util version 1.0.0-20260711132257. No known vulnerabilities. License: Apache-2.0. Vi… (47 words)
- [Maven Central: com.akamai.edgegrid](/content/central/namespace/com-akamai-edgegrid.html): Explore the collection of packages in com.akamai.edgegrid (13 words)
- [Maven Central: com.codelry.util](/content/central/namespace/com-codelry-util.html): Explore the collection of packages in com.codelry.util (75 words)
- [Maven Central: org.apache.commons:commons-jexl3:3.4.0](/content/central/artifact/org-apache-commons/commons-jexl3/3-4-0.html): Discover commons-jexl3 in the org.apache.commons namespace. Explore metadata, contributors, the Maven POM file, and more. (324 words)
- [Maven Central: org.apache.syncope.core:syncope-core-persistence-common](/content/central/artifact/org-apache-syncope-core/syncope-core-persistence-common/versions/index.html): Discover syncope-core-persistence-common in the org.apache.syncope.core namespace. Explore metadata, contributors, the Maven POM file, and more. (171 words)
- [Maven Central: com.akamai.edgegrid:edgerc-reader:6.0.4-RC1](/content/central/artifact/com-akamai-edgegrid/edgerc-reader/6-0-4-rc1.html): Discover edgerc-reader in the com.akamai.edgegrid namespace. Explore metadata, contributors, the Maven POM file, and more. (93 words)
- [com.codelry.util/capella-api 1.2.0 | Sonatype Guide](/content/guide/component/maven/com-codelry-util-capella-api/1-2-0.html): Comprehensive security analysis for com.codelry.util/capella-api version 1.2.0. No known vulnerabilities. License: Apache-2.0. View dependencies, vulnerabiliti… (45 words)
- [Maven Central: com.akamai.edgegrid:edgerc-reader:6.0.4-RC2](/content/central/artifact/com-akamai-edgegrid/edgerc-reader/6-0-4-rc2.html): Discover edgerc-reader in the com.akamai.edgegrid namespace. Explore metadata, contributors, the Maven POM file, and more. (92 words)
- [Maven Central: io.mateu.workflow:workflow-maven-plugin:1.0-beta.010](/content/central/artifact/io-mateu-workflow/workflow-maven-plugin/1-0-beta-010.html): Discover workflow-maven-plugin in the io.mateu.workflow namespace. Explore metadata, contributors, the Maven POM file, and more. (193 words)
- [Maven Central: com.fasterxml.jackson.core:jackson-core](/content/central/artifact/com-fasterxml-jackson-core/jackson-core/versions/index.html): Discover jackson-core in the com.fasterxml.jackson.core namespace. Explore metadata, contributors, the Maven POM file, and more. (179 words)
- [Maven Central: io.mateu.workflow:workflow-engine:1.0-beta.010](/content/central/artifact/io-mateu-workflow/workflow-engine/1-0-beta-010.html): Discover workflow-engine in the io.mateu.workflow namespace. Explore metadata, contributors, the Maven POM file, and more. (215 words)
- [Maven Central: com.akamai.edgegrid:edgerc-reader:6.0.4](/content/central/artifact/com-akamai-edgegrid/edgerc-reader/6-0-4.html): Discover edgerc-reader in the com.akamai.edgegrid namespace. Explore metadata, contributors, the Maven POM file, and more. (106 words)
- [Sonatype Platform Cloud-Native Reference Architectures](/content/help/en/sonatype-platform-reference-architectures-html.html) (868 words)
- [Maven Central: org.apache.commons:commons-jexl3:3.3](/content/central/artifact/org-apache-commons/commons-jexl3/3-3.html): Discover commons-jexl3 in the org.apache.commons namespace. Explore metadata, contributors, the Maven POM file, and more. (382 words)
- [Maven Central: com.codelry.util:capella-api](/content/central/artifact/com-codelry-util/capella-api/dependents/index.html): Discover capella-api in the com.codelry.util namespace. Explore metadata, contributors, the Maven POM file, and more. (28 words)
- [com.akamai.edgegrid/edgerc-reader 6.0.4 | Sonatype Guide](/content/guide/component/maven/com-akamai-edgegrid-edgerc-reader/6-0-4.html): Comprehensive security analysis for com.akamai.edgegrid/edgerc-reader version 6.0.4. No known vulnerabilities. License: Apache-2.0. View dependencies, vulnerab… (41 words)
- [com.fasterxml.jackson.core/jackson-core 2.… | Sonatype Guide](/content/guide/component/maven/com-fasterxml-jackson-core-jackson-core/2-22-1.html): Comprehensive security analysis for com.fasterxml.jackson.core/jackson-core version 2.22.1. No known vulnerabilities. License: Apache-2.0. View dependencies, v… (51 words)
- [Maven Central: com.fasterxml.jackson.core:jackson-databind](/content/central/artifact/com-fasterxml-jackson-core/jackson-databind/versions/index.html): Discover jackson-databind in the com.fasterxml.jackson.core namespace. Explore metadata, contributors, the Maven POM file, and more. (171 words)
- [Maven Central: commons-codec:commons-codec](/content/central/artifact/commons-codec/commons-codec/dependents/index.html): Discover commons-codec in the commons-codec namespace. Explore metadata, contributors, the Maven POM file, and more. (235 words)
- [org.apache.syncope.core/syncope-core-persi… | Sonatype Guide](/content/guide/component/maven/org-apache-syncope-core-syncope-core-persistence-common/4-1-2.html): Comprehensive security analysis for org.apache.syncope.core/syncope-core-persistence-common version 4.1.2. No known vulnerabilities. License: Apache-2.0. View… (38 words)
- [com.fasterxml.jackson.core/jackson-annotat… | Sonatype Guide](/content/guide/component/maven/com-fasterxml-jackson-core-jackson-annotations/2-22.html): Comprehensive security analysis for com.fasterxml.jackson.core/jackson-annotations version 2.22. No known vulnerabilities. License: Apache-2.0. View dependenci… (41 words)
- [Maven Central: com.fasterxml.jackson.core:jackson-annotations](/content/central/artifact/com-fasterxml-jackson-core/jackson-annotations/dependents/index.html): Discover jackson-annotations in the com.fasterxml.jackson.core namespace. Explore metadata, contributors, the Maven POM file, and more. (183 words)
- [Maven Central: com.fasterxml.jackson.core:jackson-annotations](/content/central/artifact/com-fasterxml-jackson-core/jackson-annotations/versions/index.html): Discover jackson-annotations in the com.fasterxml.jackson.core namespace. Explore metadata, contributors, the Maven POM file, and more. (16 words)
- [org.apache.syncope.core/syncope-core-persi… | Sonatype Guide](/content/guide/component/maven/org-apache-syncope-core-syncope-core-persistence-common/4-0-7.html): Comprehensive security analysis for org.apache.syncope.core/syncope-core-persistence-common version 4.0.7. No known vulnerabilities. License: Apache-2.0. View… (46 words)
- [Maven Central: org.apache.syncope.core:syncope-core-persistence-common:4.0.7](/content/central/artifact/org-apache-syncope-core/syncope-core-persistence-common/4-0-7.html): Discover syncope-core-persistence-common in the org.apache.syncope.core namespace. Explore metadata, contributors, the Maven POM file, and more. (158 words)
- [Maven Central: commons-codec:commons-codec](/content/central/artifact/commons-codec/commons-codec/versions/index.html): Discover commons-codec in the commons-codec namespace. Explore metadata, contributors, the Maven POM file, and more. (180 words)
- [commons-codec/commons-codec 1.22.0 | Sonatype Guide](/content/guide/component/maven/commons-codec-commons-codec/1-22-0.html): Comprehensive security analysis for commons-codec/commons-codec version 1.22.0. No known vulnerabilities. License: Apache-2.0. View dependencies, vulnerabiliti… (47 words)
- [Maven Central: org.apache.syncope.core](/content/central/namespace/org-apache-syncope-core.html): Explore the collection of packages in org.apache.syncope.core (214 words)
- [Sonatype IQ Server Versions Status](/content/help/en/sonatype-iq-server-versions-status-html.html) (1,555 words)
- [Maven Central: org.apache.syncope.core:syncope-core-provisioning-api:4.0.7](/content/central/artifact/org-apache-syncope-core/syncope-core-provisioning-api/4-0-7.html): Discover syncope-core-provisioning-api in the org.apache.syncope.core namespace. Explore metadata, contributors, the Maven POM file, and more. (182 words)
- [Maven Central: com.fasterxml.jackson.core:jackson-databind](/content/central/artifact/com-fasterxml-jackson-core/jackson-databind/dependents/index.html): Discover jackson-databind in the com.fasterxml.jackson.core namespace. Explore metadata, contributors, the Maven POM file, and more. (214 words)
- [Maven Central: com.akamai.edgegrid:edgerc-reader](/content/central/artifact/com-akamai-edgegrid/edgerc-reader/dependents/index.html): Discover edgerc-reader in the com.akamai.edgegrid namespace. Explore metadata, contributors, the Maven POM file, and more. (20 words)
- [Maven Central: com.fasterxml.jackson.core:jackson-core](/content/central/artifact/com-fasterxml-jackson-core/jackson-core/dependents/index.html): Discover jackson-core in the com.fasterxml.jackson.core namespace. Explore metadata, contributors, the Maven POM file, and more. (274 words)
- [Maven Central: org.apache.syncope.core:syncope-core-persistence-common](/content/central/artifact/org-apache-syncope-core/syncope-core-persistence-common/dependents/index.html): Discover syncope-core-persistence-common in the org.apache.syncope.core namespace. Explore metadata, contributors, the Maven POM file, and more. (181 words)
- [Maven Central: org.apache.commons:commons-statistics-parent](/content/central/artifact/org-apache-commons/commons-statistics-parent/index.html): Discover commons-statistics-parent in the org.apache.commons namespace. Explore metadata, contributors, the Maven POM file, and more. (269 words)
- [Maven Central: com.fasterxml.jackson.core:jackson-databind](/content/central/artifact/com-fasterxml-jackson-core/jackson-databind/index.html): Discover jackson-databind in the com.fasterxml.jackson.core namespace. Explore metadata, contributors, the Maven POM file, and more. (172 words)
- [Maven Central: org.apache.syncope.core:syncope-core-persistence-common:4.1.2](/content/central/artifact/org-apache-syncope-core/syncope-core-persistence-common/4-1-2.html): Discover syncope-core-persistence-common in the org.apache.syncope.core namespace. Explore metadata, contributors, the Maven POM file, and more. (161 words)
- [Maven Central: ai.wavemaker.commons](/content/central/namespace/ai-wavemaker-commons.html): Explore the collection of packages in ai.wavemaker.commons (36 words)
- [Maven Central: io.mateu.workflow:workflow-maven-plugin:1.0-beta.009](/content/central/artifact/io-mateu-workflow/workflow-maven-plugin/1-0-beta-009.html): Discover workflow-maven-plugin in the io.mateu.workflow namespace. Explore metadata, contributors, the Maven POM file, and more. (204 words)
- [org.apache.syncope.core/syncope-core-provi… | Sonatype Guide](/content/guide/component/maven/org-apache-syncope-core-syncope-core-provisioning-api/4-0-7.html): Comprehensive security analysis for org.apache.syncope.core/syncope-core-provisioning-api version 4.0.7. No known vulnerabilities. License: Apache-2.0. View de… (48 words)
- [com.fasterxml.jackson.core/jackson-databin… | Sonatype Guide](/content/guide/component/maven/com-fasterxml-jackson-core-jackson-databind/2-22-1.html): Comprehensive security analysis for com.fasterxml.jackson.core/jackson-databind version 2.22.1. No known vulnerabilities. License: Apache-2.0. View dependencie… (47 words)
- [Maven Central: io.mateu.workflow:workflow-engine](/content/central/artifact/io-mateu-workflow/workflow-engine/versions/index.html): Discover workflow-engine in the io.mateu.workflow namespace. Explore metadata, contributors, the Maven POM file, and more. (151 words)
- [Maven Central: org.apache.commons:commons-jexl3:3.6.0](/content/central/artifact/org-apache-commons/commons-jexl3/3-6-0.html): Discover commons-jexl3 in the org.apache.commons namespace. Explore metadata, contributors, the Maven POM file, and more. (417 words)
- [org.apache.commons/commons-statistics-pare… | Sonatype Guide](/content/guide/component/maven/org-apache-commons-commons-statistics-parent/1-3.html): Comprehensive security analysis for org.apache.commons/commons-statistics-parent version 1.3. No known vulnerabilities.  View dependencies, vulnerabilities, an… (54 words)
- [io.mateu.workflow/workflow-maven-plugin 1.… | Sonatype Guide](/content/guide/component/maven/io-mateu-workflow-workflow-maven-plugin/1-0-beta-009.html): Comprehensive security analysis for io.mateu.workflow/workflow-maven-plugin version 1.0-beta.009. No known vulnerabilities. License: MIT. View dependencies, vu… (49 words)
- [Docker Registry](/content/help/en/docker-registry-html.html) (1,744 words)
- [Maven Central: io.mateu.workflow:workflow-engine:1.0-beta.009](/content/central/artifact/io-mateu-workflow/workflow-engine/1-0-beta-009.html): Discover workflow-engine in the io.mateu.workflow namespace. Explore metadata, contributors, the Maven POM file, and more. (184 words)
- [Maven Central: io.mateu.workflow:rule-runtime:1.0-beta.010](/content/central/artifact/io-mateu-workflow/rule-runtime/1-0-beta-010.html): Discover rule-runtime in the io.mateu.workflow namespace. Explore metadata, contributors, the Maven POM file, and more. (189 words)
- [io.mateu.workflow/workflow-engine 1.0-beta… | Sonatype Guide](/content/guide/component/maven/io-mateu-workflow-workflow-engine/1-0-beta-010.html): Comprehensive security analysis for io.mateu.workflow/workflow-engine version 1.0-beta.010. No known vulnerabilities. License: MIT. View dependencies, vulnerab… (31 words)
- [io.mateu.workflow/workflow-maven-plugin 1.… | Sonatype Guide](/content/guide/component/maven/io-mateu-workflow-workflow-maven-plugin/1-0-beta-010.html): Comprehensive security analysis for io.mateu.workflow/workflow-maven-plugin version 1.0-beta.010. No known vulnerabilities. License: MIT. View dependencies, vu… (45 words)
- [io.mateu.workflow/workflow-engine 1.0-beta… | Sonatype Guide](/content/guide/component/maven/io-mateu-workflow-workflow-engine/1-0-beta-009.html): Comprehensive security analysis for io.mateu.workflow/workflow-engine version 1.0-beta.009. No known vulnerabilities. License: MIT. View dependencies, vulnerab… (55 words)
- [Maven Central: io.mateu.workflow:workflow-engine](/content/central/artifact/io-mateu-workflow/workflow-engine/dependents/index.html): Discover workflow-engine in the io.mateu.workflow namespace. Explore metadata, contributors, the Maven POM file, and more. (3 words)
- [org.apache.commons/commons-jexl3 3.1 | Sonatype Guide](/content/guide/component/maven/org-apache-commons-commons-jexl3/3-1.html): Comprehensive security analysis for org.apache.commons/commons-jexl3 version 3.1. No known vulnerabilities. License: Apache-2.0. View dependencies, vulnerabili… (45 words)
- [Reference: Glossary](/content/help/en/reference-glossary-html.html) (1,988 words)
- [org.apache.commons/commons-statistics-dist… | Sonatype Guide](/content/guide/component/maven/org-apache-commons-commons-statistics-distribution/1-3.html): Comprehensive security analysis for org.apache.commons/commons-statistics-distribution version 1.3. No known vulnerabilities. License: Apache-2.0. View depende… (52 words)
- [io.mateu.workflow/rule-runtime 1.0-beta.010 | Sonatype Guide](/content/guide/component/maven/io-mateu-workflow-rule-runtime/1-0-beta-010.html): Comprehensive security analysis for io.mateu.workflow/rule-runtime version 1.0-beta.010. No known vulnerabilities. License: MIT. View dependencies, vulnerabili… (35 words)
- [org.apache.commons/commons-jexl3 3.2 | Sonatype Guide](/content/guide/component/maven/org-apache-commons-commons-jexl3/3-2.html): Comprehensive security analysis for org.apache.commons/commons-jexl3 version 3.2. No known vulnerabilities. License: Apache-2.0. View dependencies, vulnerabili… (55 words)
- [org.apache.commons/commons-parent 92 | Sonatype Guide](/content/guide/component/maven/org-apache-commons-commons-parent/92/index.html): Comprehensive security analysis for org.apache.commons/commons-parent version 92. No known vulnerabilities. License: Apache-2.0. View dependencies, vulnerabili… (56 words)
- [Maven Central: io.mateu.workflow:workflow-maven-plugin](/content/central/artifact/io-mateu-workflow/workflow-maven-plugin/versions/index.html): Discover workflow-maven-plugin in the io.mateu.workflow namespace. Explore metadata, contributors, the Maven POM file, and more. (60 words)
- [Page Not Found - Sonatype Community](/content/community/u/laurencet/index.html) (34 words)
- [Maven Central: commons-io:commons-io](/content/central/artifact/commons-io/commons-io/index.html): Discover commons-io in the commons-io namespace. Explore metadata, contributors, the Maven POM file, and more. (297 words)
- [Maven Central: io.mateu.workflow:rule-runtime:1.0-beta.009](/content/central/artifact/io-mateu-workflow/rule-runtime/1-0-beta-009.html): Discover rule-runtime in the io.mateu.workflow namespace. Explore metadata, contributors, the Maven POM file, and more. (179 words)
- [Maven Central: org.apache.commons:commons-statistics-distribution](/content/central/artifact/org-apache-commons/commons-statistics-distribution/dependents/index.html): Discover commons-statistics-distribution in the org.apache.commons namespace. Explore metadata, contributors, the Maven POM file, and more. (153 words)
- [commons-io/commons-io 2.22.0 | Sonatype Guide](/content/guide/component/maven/commons-io-commons-io/2-22-0.html): Comprehensive security analysis for commons-io/commons-io version 2.22.0. No known vulnerabilities. License: Apache-2.0. View dependencies, vulnerabilities, an… (42 words)
- [Maven Central: io.mateu.workflow](/content/central/namespace/io-mateu-workflow.html): Explore the collection of packages in io.mateu.workflow (208 words)
- [Maven Central: commons-io:commons-io](/content/central/artifact/commons-io/commons-io/versions/index.html): Discover commons-io in the commons-io namespace. Explore metadata, contributors, the Maven POM file, and more. (16 words)
- [Maven Central: org.apache.commons:commons-jexl3:3.2.1](/content/central/artifact/org-apache-commons/commons-jexl3/3-2-1.html): Discover commons-jexl3 in the org.apache.commons namespace. Explore metadata, contributors, the Maven POM file, and more. (212 words)
- [Maven Central: commons-io:commons-io](/content/central/artifact/commons-io/commons-io/dependents/index.html): Discover commons-io in the commons-io namespace. Explore metadata, contributors, the Maven POM file, and more. (3 words)
- [Maven Central: org.apache.commons:commons-statistics-distribution](/content/central/artifact/org-apache-commons/commons-statistics-distribution/index.html): Discover commons-statistics-distribution in the org.apache.commons namespace. Explore metadata, contributors, the Maven POM file, and more. (119 words)
- [Sonatype Cloud](/content/help/en/sonatype-cloud-html.html) (1,177 words)
- [org.apache.commons/commons-statistics-desc… | Sonatype Guide](/content/guide/component/maven/org-apache-commons-commons-statistics-descriptive/1-3.html): Comprehensive security analysis for org.apache.commons/commons-statistics-descriptive version 1.3. No known vulnerabilities. License: Apache-2.0. View dependen… (39 words)
- [org.apache.commons/commons-jexl3 3.4.0 | Sonatype Guide](/content/guide/component/maven/org-apache-commons-commons-jexl3/3-4-0.html): Comprehensive security analysis for org.apache.commons/commons-jexl3 version 3.4.0. No known vulnerabilities. License: Apache-2.0. View dependencies, vulnerabi… (52 words)
- [Maven Central: io.mateu.workflow:workflow-maven-plugin](/content/central/artifact/io-mateu-workflow/workflow-maven-plugin/dependents/index.html): Discover workflow-maven-plugin in the io.mateu.workflow namespace. Explore metadata, contributors, the Maven POM file, and more. (20 words)
- [Find and Fix React2Shell](/content/help/en/find-and-fix-react2shell-html.html) (1,398 words)
- [org.apache.commons/commons-jexl3 3.2.1 | Sonatype Guide](/content/guide/component/maven/org-apache-commons-commons-jexl3/3-2-1.html): Comprehensive security analysis for org.apache.commons/commons-jexl3 version 3.2.1. No known vulnerabilities. License: Apache-2.0. View dependencies, vulnerabi… (49 words)
- [Maven Central: org.apache.commons:commons-statistics-parent](/content/central/artifact/org-apache-commons/commons-statistics-parent/versions/index.html): Discover commons-statistics-parent in the org.apache.commons namespace. Explore metadata, contributors, the Maven POM file, and more. (72 words)
- [hubfs/1-2023_new_site_assets/executive-20summaries/executivesummary-regulations_compliance-final-06-14-pdf.html](/content/hubfs/1-2023_new_site_assets/executive-20summaries/executivesummary-regulations_compliance-final-06-14-pdf.html) (3,362 words)
- [Analysis](/content/help/en/analysis-html.html) (1,076 words)
- [Research with Sonatype Guide](/content/help/en/research-with-sonatype-guide-html.html) (1,229 words)
- [eu.vnagy.argotools/argo-junit 0.0.10 | Sonatype Guide](/content/guide/component/maven/eu-vnagy-argotools-argo-junit/0-0-10.html): Comprehensive security analysis for eu.vnagy.argotools/argo-junit version 0.0.10. No known vulnerabilities. License: Apache-2.0. View dependencies, vulnerabili… (57 words)
- [io.mateu.workflow/rule-runtime 1.0-beta.009 | Sonatype Guide](/content/guide/component/maven/io-mateu-workflow-rule-runtime/1-0-beta-009.html): Comprehensive security analysis for io.mateu.workflow/rule-runtime version 1.0-beta.009. No known vulnerabilities. License: MIT. View dependencies, vulnerabili… (39 words)
- [Maven Central: org.apache.commons:commons-statistics-descriptive](/content/central/artifact/org-apache-commons/commons-statistics-descriptive/versions/index.html): Discover commons-statistics-descriptive in the org.apache.commons namespace. Explore metadata, contributors, the Maven POM file, and more. (16 words)
- [Maven Central: org.apache.commons:commons-statistics-distribution](/content/central/artifact/org-apache-commons/commons-statistics-distribution/versions/index.html): Discover commons-statistics-distribution in the org.apache.commons namespace. Explore metadata, contributors, the Maven POM file, and more. (69 words)
- [Maven Central: io.mateu.workflow:rule-runtime](/content/central/artifact/io-mateu-workflow/rule-runtime/versions/index.html): Discover rule-runtime in the io.mateu.workflow namespace. Explore metadata, contributors, the Maven POM file, and more. (71 words)
- [org.apache.commons/commons-parent 95 | Sonatype Guide](/content/guide/component/maven/org-apache-commons-commons-parent/95/index.html): Comprehensive security analysis for org.apache.commons/commons-parent version 95. No known vulnerabilities. License: Apache-2.0. View dependencies, vulnerabili… (46 words)
- [org.apache.commons/commons-parent 93 | Sonatype Guide](/content/guide/component/maven/org-apache-commons-commons-parent/93/index.html): Comprehensive security analysis for org.apache.commons/commons-parent version 93. No known vulnerabilities. License: Apache-2.0. View dependencies, vulnerabili… (54 words)
- [Maven Central: eu.vnagy.argotools:argo-junit](/content/central/artifact/eu-vnagy-argotools/argo-junit/versions/index.html): Discover argo-junit in the eu.vnagy.argotools namespace. Explore metadata, contributors, the Maven POM file, and more. (151 words)
- [Maven Central: org.apache.commons:commons-parent:94](/content/central/artifact/org-apache-commons/commons-parent/94/index.html): Discover commons-parent in the org.apache.commons namespace. Explore metadata, contributors, the Maven POM file, and more. (4,121 words)
- [Sonatype Nexus Repository](/content/help/en/sonatype-nexus-repository-html.html) (225 words)
- [org.apache.commons/commons-jexl3 3.3 | Sonatype Guide](/content/guide/component/maven/org-apache-commons-commons-jexl3/3-3.html): Comprehensive security analysis for org.apache.commons/commons-jexl3 version 3.3. No known vulnerabilities. License: Apache-2.0. View dependencies, vulnerabili… (48 words)
- [Maven Central: eu.vnagy.argotools:argo-junit](/content/central/artifact/eu-vnagy-argotools/argo-junit/dependents/index.html): Discover argo-junit in the eu.vnagy.argotools namespace. Explore metadata, contributors, the Maven POM file, and more. (3 words)
- [Maven Central: org.apache.commons:commons-jexl3:3.5.0](/content/central/artifact/org-apache-commons/commons-jexl3/3-5-0.html): Discover commons-jexl3 in the org.apache.commons namespace. Explore metadata, contributors, the Maven POM file, and more. (196 words)
- [org.apache.commons/commons-parent 96 | Sonatype Guide](/content/guide/component/maven/org-apache-commons-commons-parent/96/index.html): Comprehensive security analysis for org.apache.commons/commons-parent version 96. No known vulnerabilities. License: Apache-2.0. View dependencies, vulnerabili… (54 words)
- [Maven Central: org.apache.commons:commons-statistics-parent](/content/central/artifact/org-apache-commons/commons-statistics-parent/dependents/index.html): Discover commons-statistics-parent in the org.apache.commons namespace. Explore metadata, contributors, the Maven POM file, and more. (20 words)
- [Feature Parity with Sonatype Cloud](/content/help/en/feature-parity-with-sonatype-cloud-html.html) (445 words)
- [Maven Central: io.mateu.workflow:rule-runtime](/content/central/artifact/io-mateu-workflow/rule-runtime/dependents/index.html): Discover rule-runtime in the io.mateu.workflow namespace. Explore metadata, contributors, the Maven POM file, and more. (44 words)
- [Sonatype Platform Azure Reference Architectures](/content/help/en/azure-reference-architectures-html.html) (348 words)
- [Maven Central: org.apache.commons:commons-statistics-inference](/content/central/artifact/org-apache-commons/commons-statistics-inference/index.html): Discover commons-statistics-inference in the org.apache.commons namespace. Explore metadata, contributors, the Maven POM file, and more. (148 words)
- [org.apache.commons/commons-jexl3 3.6.0 | Sonatype Guide](/content/guide/component/maven/org-apache-commons-commons-jexl3/3-6-0.html): Comprehensive security analysis for org.apache.commons/commons-jexl3 version 3.6.0. No known vulnerabilities. License: Apache-2.0. View dependencies, vulnerabi… (36 words)
- [org.apache.commons/commons-parent 94 | Sonatype Guide](/content/guide/component/maven/org-apache-commons-commons-parent/94/index.html): Comprehensive security analysis for org.apache.commons/commons-parent version 94. No known vulnerabilities. License: Apache-2.0. View dependencies, vulnerabili… (49 words)
- [org.apache.commons/commons-parent 97 | Sonatype Guide](/content/guide/component/maven/org-apache-commons-commons-parent/97/index.html): Comprehensive security analysis for org.apache.commons/commons-parent version 97. No known vulnerabilities. License: Apache-2.0. View dependencies, vulnerabili… (53 words)
- [Maven Central: org.apache.commons:commons-parent:92](/content/central/artifact/org-apache-commons/commons-parent/92/index.html): Discover commons-parent in the org.apache.commons namespace. Explore metadata, contributors, the Maven POM file, and more. (4,141 words)
- [org.apache.commons/commons-statistics-rank… | Sonatype Guide](/content/guide/component/maven/org-apache-commons-commons-statistics-ranking/1-3.html): Comprehensive security analysis for org.apache.commons/commons-statistics-ranking version 1.3. No known vulnerabilities. License: Apache-2.0. View dependencies… (51 words)
- [Anonymous Access to Sonatype Guide](/content/help/en/anonymous-access-to-sonatype-guide-html.html) (737 words)
- [org.apache.commons/commons-jexl3 3.6.1 | Sonatype Guide](/content/guide/component/maven/org-apache-commons-commons-jexl3/3-6-1.html): Comprehensive security analysis for org.apache.commons/commons-jexl3 version 3.6.1. No known vulnerabilities. License: Apache-2.0. View dependencies, vulnerabi… (46 words)
- [Size L - Sonatype IQ - Azure Cloud-Native Reference Architecture](/content/help/en/iq-l-azure-reference-architecture-html.html) (596 words)
- [org.apache.commons/commons-parent 98 | Sonatype Guide](/content/guide/component/maven/org-apache-commons-commons-parent/98/index.html): Comprehensive security analysis for org.apache.commons/commons-parent version 98. No known vulnerabilities. License: Apache-2.0. View dependencies, vulnerabili… (47 words)
- [Maven Central: org.apache.commons:commons-parent:93](/content/central/artifact/org-apache-commons/commons-parent/93/index.html): Discover commons-parent in the org.apache.commons namespace. Explore metadata, contributors, the Maven POM file, and more. (4,106 words)
- [Sonatype MCP Server](/content/help/en/automate-with-sonatype-guide-html.html) (546 words)
- [Maven Central: org.apache.commons:commons-parent:96](/content/central/artifact/org-apache-commons/commons-parent/96/index.html): Discover commons-parent in the org.apache.commons namespace. Explore metadata, contributors, the Maven POM file, and more. (4,158 words)
- [Management Responsibilities for Sonatype Cloud](/content/help/en/responsibilities-for-sonatype-cloud-html.html) (69 words)
- [Page Not Found - Sonatype Community](/content/community/u/ralph-bolton.html) (34 words)
- [Authentication with Sonatype Cloud](/content/help/en/authentication-with-sonatype-cloud-html.html) (152 words)
- [org.apache.commons/commons-jexl3 3.5.0 | Sonatype Guide](/content/guide/component/maven/org-apache-commons-commons-jexl3/3-5-0.html): Comprehensive security analysis for org.apache.commons/commons-jexl3 version 3.5.0. No known vulnerabilities. License: Apache-2.0. View dependencies, vulnerabi… (170 words)
- [Maven Central: org.apache.commons:commons-statistics-descriptive](/content/central/artifact/org-apache-commons/commons-statistics-descriptive/dependents/index.html): Discover commons-statistics-descriptive in the org.apache.commons namespace. Explore metadata, contributors, the Maven POM file, and more. (69 words)
- [Maven Central: org.apache.commons:commons-statistics-descriptive](/content/central/artifact/org-apache-commons/commons-statistics-descriptive/index.html): Discover commons-statistics-descriptive in the org.apache.commons namespace. Explore metadata, contributors, the Maven POM file, and more. (106 words)
- [IPv6 Readiness Check](/content/help/en/ipv6-readiness-check-html.html) (464 words)
- [User Interface Overview](/content/help/en/user-interface-overview-html.html) (635 words)
- [Understanding the Shai-Hulud npm Worm Attack](/content/help/en/understanding-the-shai-hulud-npm-worm-attack-html.html): Explore our platform (886 words)
- [Sonatype on Responsible Disclosure](/content/help/en/responsible-disclosure-html.html) (557 words)
- [Sonatype Platform GCP Reference Architectures](/content/help/en/gcp-reference-architectures-html.html) (298 words)
- [Size L - Sonatype IQ - GCP Cloud-Native Reference Architecture](/content/help/en/iq-l-gcp-reference-architecture-html.html) (462 words)
- [Size XL - Sonatype IQ - GCP Cloud-Native Reference Architecture](/content/help/en/iq-xl-gcp-reference-architecture-html.html) (484 words)
- [Sonatype IQ Server Feature Status](/content/help/en/sonatype-iq-server-feature-status-html.html) (1,058 words)
- [Getting Started with Sonatype Guide](/content/help/en/getting-started-with-sonatype-guide-html.html) (449 words)
- [Size M - Sonatype IQ - GCP Cloud-Native Reference Architecture](/content/help/en/iq-m-gcp-reference-architecture-html.html) (483 words)
- [Sonatype Security Vulnerabilities](/content/help/en/sonatype-security-vulnerabilities-html.html) (319 words)
- [Size M - Sonatype IQ - Azure Cloud-Native Reference Architecture](/content/help/en/iq-m-azure-reference-architecture-html.html) (533 words)
- [Understanding the recent npm malware attacks](/content/help/en/understanding-the-phantomraven-malware-campaign-html.html): Explore our platform (859 words)
- [Threats in AI/ML Models](/content/help/en/threats-in-ai-ml-models-html.html) (850 words)
- [Nexus Repository 3 Feature Status](/content/help/en/sonatype-nexus-repository-3-feature-status-html.html) (728 words)
- [Maven Central: org.apache.commons:commons-statistics-ranking](/content/central/artifact/org-apache-commons/commons-statistics-ranking/versions/index.html): Discover commons-statistics-ranking in the org.apache.commons namespace. Explore metadata, contributors, the Maven POM file, and more. (61 words)
- [Size XL - Sonatype Nexus Repository - AWS Cloud-Native Reference Architecture](/content/help/en/nexus-repository-xl-aws-reference-architecture-html.html) (613 words)
- [Size L - Sonatype Nexus Repository - AWS Cloud-Native Reference Architecture](/content/help/en/nexus-repository-l-aws-reference-architecture-html.html) (544 words)
- [Size XL - Sonatype IQ - AWS Cloud-Native Reference Architecture](/content/help/en/iq-xl-aws-reference-architecture-html.html) (658 words)
- [Manage Usage and Billing](/content/help/en/manage-usage-and-billing-html.html) (218 words)
- [Size S - Sonatype IQ - Azure Cloud-Native Reference Architecture](/content/help/en/iq-s-azure-reference-architecture-html.html) (509 words)
- [Accessing GUIDE-Sonatype Support](/content/help/en/sonatype-guide-support-html.html) (304 words)
- [Size M - Sonatype Nexus Repository - AWS Cloud-Native Reference Architecture](/content/help/en/nexus-repository-m-aws-reference-architecture-html.html) (567 words)
- [Sonatype Repository Firewall Classic Sunsetting](/content/help/en/sonatype-repository-firewall-classic-sunsetting-html.html) (560 words)
- [Sonatype Guide](/content/help/en/sonatype-guide-html.html) (153 words)
- [Size M - Sonatype IQ - AWS Cloud-Native Reference Architecture](/content/help/en/iq-m-aws-reference-architecture-html.html) (596 words)
- [Struts2 Frequently Asked Questions](/content/help/en/struts2-frequently-asked-questions-html.html) (692 words)
- [Size XS - Sonatype IQ - Azure Cloud-Native Reference Architecture](/content/help/en/iq-xs-azure-reference-architecture-html.html) (562 words)
- [Sonatype Nexus Repository 2 Version Status](/content/help/en/sonatype-nexus-repository-2-version-status-html.html) (558 words)
- [Java Runtime Compatibility Matrix](/content/help/en/java-compatibility-matrix-html.html) (247 words)
- [Size XS - Sonatype IQ - GCP Cloud-Native Reference Architecture](/content/help/en/iq-xs-gcp-reference-architecture-html.html) (530 words)
- [Size L - Sonatype IQ - AWS Cloud-Native Reference Architecture](/content/help/en/iq-l-aws-reference-architecture-html.html) (623 words)
- [Maven Central: eu.vnagy.argotools](/content/central/namespace/eu-vnagy-argotools.html): Explore the collection of packages in eu.vnagy.argotools (64 words)
- [Sonatype Sunsetting Information](/content/help/en/sonatype-sunsetting-information-html.html) (474 words)
- [Size XS - Sonatype Nexus Repository - AWS Cloud-Native Reference Architecture](/content/help/en/nexus-repository-xs-aws-reference-architecture-html.html) (555 words)
- [Maven Central: org.apache.commons:commons-parent:95](/content/central/artifact/org-apache-commons/commons-parent/95/index.html): Discover commons-parent in the org.apache.commons namespace. Explore metadata, contributors, the Maven POM file, and more. (4,162 words)
- [Size XS - Sonatype IQ - AWS Cloud-Native Reference Architecture](/content/help/en/iq-xs-aws-reference-architecture-html.html) (521 words)
- [User Management with Sonatype Cloud](/content/help/en/user-management-with-sonatype-cloud-html.html) (220 words)
- [Proxy Repository for Docker](/content/help/en/proxy-repository-for-docker-html.html) (1,037 words)
- [Product Preview Program](/content/help/en/product-preview-program-html.html) (28 words)
- [Sonatype Malware Data](/content/help/en/sonatype-malware-data-html.html) (657 words)
- [Critical Cleanup Policy Bug Advisory](/content/help/en/critical-cleanup-policy-bug-advisory-html.html) (529 words)
- [Sonatype Nexus Repository 2 Sunsetting Information](/content/help/en/sonatype-nexus-repository-2-sunsetting-information-html.html) (83 words)
- [React2Shell Impact Report](/content/help/en/react2shell-impact-report-html.html) (446 words)
- [Rust / Cargo Repositories](/content/help/en/rust-cargo-html.html) (660 words)
- [Careers & Jobs India Office | Sonatype](/content/company/careers/india/index.html): Join the Sonatype India team! Make an impact as we help secure the world’s software supply chain through AI-first, cloud-native solutions.  (464 words)
- [Clair Application Analysis](/content/help/en/clair-application-analysis-html.html) (254 words)
- [React2Shell Impact Filter in the Security Risk Breakdown Dashboard](/content/help/en/react2shell-impact-filter-html.html) (131 words)
- [Grouping Docker Repositories](/content/help/en/grouping-docker-repositories-html.html) (184 words)
- [Helm Repositories](/content/help/en/helm-repositories-html.html) (164 words)
- [Important Announcements](/content/help/en/important-announcements-html.html) (15 words)
- [org.apache.commons/commons-parent 103 | Sonatype Guide](/content/guide/component/maven/org-apache-commons-commons-parent/103/index.html): Comprehensive security analysis for org.apache.commons/commons-parent version 103. No known vulnerabilities. License: Apache-2.0. View dependencies, vulnerabil… (51 words)
- [Nexus Documentation - Nexus IQ Server 1.26 - Sonatype.com](/content/books/sonatype-clm-book/1-26/html/book/role-management-html.html): Control the flow of components throughout your software supply chain. (2,015 words)
- [How to Configure Nexus Repository 2 to use Active Directory Nested Groups – Sonatype Support](/content/support/hc/en-us/articles/213465598-how-to-configure-nexus-repository-2-to-use-active-directory-nested-groups.html): Visit my.sonatype.com for documentation on Nexus Repository version 2.  Nexus Repository 2 can be configured to make use of Active... (98 words)
- [hubfs/affidavit-agent-20210205-pdf.html](/content/hubfs/affidavit-agent-20210205-pdf.html) (287 words)
- [sonatype-2022-4350 | Security Details | Sonatype Guide](/content/guide/vulnerability/sonatype-2022-4350/index.html): Technical security analysis for sonatype-2022-4350. CVSS 10.0 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (65 words)
- [Nexus Documentation - Nexus IQ Server 1.26 - Sonatype.com](/content/books/sonatype-clm-book/1-26/html/book/component-information-panel-html.html): Control the flow of components throughout your software supply chain. (1,232 words)
- [PowerPoint Presentation](/content/hubfs/ebooks/ebook-20devsecops_v-2-pdf.html) (6,410 words)
- [Nexus Documentation - Nexus IQ Server 1.26 - Sonatype.com](/content/books/sonatype-clm-book/1-26/html/book/_integrating_nexus_repository_manager_2_x_and_iq_server-html.html): Control the flow of components throughout your software supply chain. (2,939 words)
- [hubfs/orientdb-to-postgresql-migration-guide-pdf.html](/content/hubfs/orientdb-to-postgresql-migration-guide-pdf.html) (1,708 words)
- [org.eclipse.jetty/jetty-server 12.1.6 | Ve… | Sonatype Guide](/content/guide/component/maven/org-eclipse-jetty-3ajetty-server/12-1-6/versions/index.html): Browse all available versions of org.eclipse.jetty/jetty-server. Compare version 12.1.6 with other releases, view security scores, and track version history fo… (163 words)
- [How to downgrade from Nexus 3 Pro to Nexus 3 OSS or Community Edition (CE) – Sonatype Support](/content/support/hc/en-us/articles/115015608967-how-to-downgrade-from-nexus-3-pro-to-nexus-3-oss-or-community-edition-ce.html): To downgrade a Nexus Repository Manager (NXRM) 3 PRO instance to OSS or Community Edition (CE):  Go to Administration -> Security... (254 words)
- [hubfs/the-move-to-nexus-repository-cloud-pdf.html](/content/hubfs/the-move-to-nexus-repository-cloud-pdf.html) (1,386 words)
- [ai.platon.pulsar/pulsar-all 4.9.3 | Versio… | Sonatype Guide](/content/guide/component/maven/ai-platon-pulsar-3apulsar-all/4-9-3/versions/index.html): Browse all available versions of ai.platon.pulsar/pulsar-all. Compare version 4.9.3 with other releases, view security scores, and track version history for th… (239 words)
- [dompurify 2.3.10 | Sonatype Guide](/content/guide/component/npm/dompurify/2-3-10.html): Comprehensive security analysis for dompurify version 2.3.10. Max vulnerability severity: 9.8 CVSS. License: Apache-2.0 or MPL-2.0. View dependencies, vulnerab… (50 words)
- [nexus-repository3-orientdb Release Report](/content/hubfs/nexus-repository3-orientdb-release-sbom-pdf.html) (12,066 words)
- [The page you were looking for doesn't exist – Sonatype Support](/content/support/hc/en-us/articles/215716807/index.html) (21 words)
- [Top Sonatype Nexus Repository topics - Sonatype Community](/content/community/c/nexus-repository/6/l/top/index.html): Ask questions and follow discussions about Sonatype Nexus Repository. (8,759 words)
- [Sonatype Product Support FAQ – Sonatype Support](/content/support/hc/en-us/articles/213463608-sonatype-product-support-faq/index.html): . Technical Support Requests How do I create a standard request for product technical support? Authorized support contacts have two... (1,199 words)
- [litellm 1.82.8 | Versions | Sonatype Guide](/content/guide/component/pypi/litellm/1-82-8/versions/index.html): Browse all available versions of litellm. Compare version 1.82.8 with other releases, view security scores, and track version history for this pypi package. (282 words)
- [Nexus Documentation - Nexus IQ Server 1.26 - Sonatype.com](/content/books/sonatype-clm-book/1-26/html/book/cli-html.html): Control the flow of components throughout your software supply chain. (196 words)
- [com.tencent.mna/mnalibrary 1.2.2 | Versions | Sonatype Guide](/content/guide/component/maven/com-tencent-mna-3amnalibrary/1-2-2/versions/index.html): Browse all available versions of com.tencent.mna/mnalibrary. Compare version 1.2.2 with other releases, view security scores, and track version history for thi… (281 words)
- [The Expansion of Software Supply Chain Regulations](/content/resources/state-of-the-software-supply-chain-2022/regulation-standards/index.html): To protect the software supply chain from continuously growing cyber threats, regulations are advancing globally across the public and private sectors. (3,094 words)
- [Nexus Documentation - Nexus IQ Server 1.26 - Sonatype.com](/content/books/sonatype-clm-book/1-26/html/book/main-configuration-html.html): Control the flow of components throughout your software supply chain. (1,639 words)
- [Nexus Documentation - Nexus IQ Server 1.26 - Sonatype.com](/content/books/sonatype-clm-book/1-26/html/book/root-org-intro-html.html): Control the flow of components throughout your software supply chain. (682 words)
- [Wicked Good Development Episode 2: Starting Security Left](/content/blog/wicked-good-development-episode-2/index.html): In today's episode of Wicked Good Development we're tackling the ongoing discussion about shifting security left - on how developers can become empowered.  (5,875 words)
- [The page you were looking for doesn't exist – Sonatype Support](/content/support/hc/en-us/sections/203012688/index.html) (21 words)
- [Nexus Documentation - Nexus IQ Server 1.26 - Sonatype.com](/content/books/sonatype-clm-book/1-26/html/book/installation-configuration-html.html): Control the flow of components throughout your software supply chain. (1,198 words)
- [Nexus Documentation - Nexus IQ Server 1.26 - Sonatype.com](/content/books/sonatype-clm-book/1-26/html/book/requirements-installation-html.html): Control the flow of components throughout your software supply chain. (1,092 words)
- [Nexus IQ Server Documentation](/content/books/sonatype-clm-book/pdf/book-clm-pdf.html) (71,627 words)
- [org.opengis.cite.teamengine/teamengine-spi… | Sonatype Guide](/content/guide/component/maven/org-opengis-cite-teamengine-3ateamengine-spi-ctl/6-0-0-rc2/versions/index.html): Browse all available versions of org.opengis.cite.teamengine/teamengine-spi-ctl. Compare version 6.0.0-RC2 with other releases, view security scores, and track… (209 words)
- [ca.islandora.alpaca/islandora-indexing-tri… | Sonatype Guide](/content/guide/component/maven/ca-islandora-alpaca-3aislandora-indexing-triplestore/1-0-1/versions/index.html): Browse all available versions of ca.islandora.alpaca/islandora-indexing-triplestore. Compare version 1.0.1 with other releases, view security scores, and track… (170 words)
- [Nexus Documentation - Nexus IQ Server 1.26 - Sonatype.com](/content/books/sonatype-clm-book/1-26/html/book/license-threat-groups-html.html): Control the flow of components throughout your software supply chain. (1,165 words)
- [Nexus Documentation - Nexus IQ Server 1.26 - Sonatype.com](/content/books/sonatype-clm-book/1-26/html/book/sonarqube-install-html.html): Control the flow of components throughout your software supply chain. (157 words)
- [Nexus Documentation - Nexus IQ Server 1.26 - Sonatype.com](/content/books/sonatype-clm-book/1-26/html/book/eclipse-clm-migrate-html.html): Control the flow of components throughout your software supply chain. (529 words)
- [Nexus Documentation - Nexus IQ Server 1.26 - Sonatype.com](/content/books/sonatype-clm-book/1-26/html/book/manage-org-app-html.html): Control the flow of components throughout your software supply chain. (110 words)
- [Nexus Documentation - Nexus IQ Server 1.26 - Sonatype.com](/content/books/sonatype-clm-book/1-26/html/book/server-upgrades-html.html): Control the flow of components throughout your software supply chain. (651 words)
- [ai.platon.pulsar/pulsar-all 1.10.15 | Vers… | Sonatype Guide](/content/guide/component/maven/ai-platon-pulsar-3apulsar-all/1-10-15/versions/index.html): Browse all available versions of ai.platon.pulsar/pulsar-all. Compare version 1.10.15 with other releases, view security scores, and track version history for… (237 words)
- [Nexus Documentation - Nexus IQ Server 1.26 - Sonatype.com](/content/books/sonatype-clm-book/1-26/html/book/requirements-solutions-html.html): Control the flow of components throughout your software supply chain. (293 words)
- [The page you were looking for doesn't exist – Sonatype Support](/content/support/entries/23756203-how-do-i-download-and-install-sonatype-clm.html) (21 words)
- [The page you were looking for doesn't exist – Sonatype Support](/content/support/entries/23756203/index.html) (21 words)
- [Nexus Documentation - Nexus IQ Server 1.26 - Sonatype.com](/content/books/sonatype-clm-book/1-26/html/book/index-html.html): Control the flow of components throughout your software supply chain. (168 words)
- [Chapter 6: Running Maven | Maven: The Complete Reference ](/content/maven-complete-reference/running-maven/index.html): Grasp the essentials of running Maven with Chapter 6 of the Maven Definitive Guide by Sonatype. An essential guide to executing Maven projects. (2,946 words)
- [sonatype-2023-1621 | Security Details | Sonatype Guide](/content/guide/vulnerability/sonatype-2023-1621/index.html): Technical security analysis for sonatype-2023-1621. CVSS 6.8 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (68 words)
- [Nexus Documentation - Nexus IQ Server 1.26 - Sonatype.com](/content/books/sonatype-clm-book/1-26/html/book/integrating-jenkins-1-x-html.html): Control the flow of components throughout your software supply chain. (745 words)
- [Nexus Documentation - Nexus IQ Server 1.26 - Sonatype.com](/content/books/sonatype-clm-book/1-26/html/book/idea-install-html.html): Control the flow of components throughout your software supply chain. (98 words)
- [Nexus Documentation - Nexus IQ Server 1.26 - Sonatype.com](/content/books/sonatype-clm-book/1-26/html/book/sonarqube-html.html): Control the flow of components throughout your software supply chain. (345 words)
- [Running Integration Testing with Maven | Sonatype Maven Cookbook](/content/resources/guides/maven-cookbook/integration-testing-with-maven/index.html): Master the art of integration testing with Apache Maven. This chapter equips you with the skills to ensure seamless integration of your components. (1,893 words)
- [Sonatype Air-Gapped Environment-Docv2](/content/hubfs/sonatype-tech-spotlight-sage-whitepaper-pdf.html) (795 words)
- [Nexus Documentation - Nexus IQ Server 1.26 - Sonatype.com](/content/books/sonatype-clm-book/1-26/html/book/basic-policy-management-html.html): Control the flow of components throughout your software supply chain. (134 words)
- [Nexus Documentation - Nexus IQ Server 1.26 - Sonatype.com](/content/books/sonatype-clm-book/1-26/html/book/eclipse-html.html): Control the flow of components throughout your software supply chain. (152 words)
- [Nexus Documentation - Nexus IQ Server 1.26 - Sonatype.com](/content/books/sonatype-clm-book/1-26/html/book/org-app-management-html.html): Control the flow of components throughout your software supply chain. (227 words)
- [Nexus Documentation - Nexus IQ Server 1.26 - Sonatype.com](/content/books/sonatype-clm-book/1-26/html/book/security-html.html): Control the flow of components throughout your software supply chain. (240 words)
- [Nexus Documentation - Nexus IQ Server 1.26 - Sonatype.com](/content/books/sonatype-clm-book/1-26/html/book/rest-api-html.html): Control the flow of components throughout your software supply chain. (166 words)
- [Nexus Documentation - Nexus IQ Server 1.26 - Sonatype.com](/content/books/sonatype-clm-book/1-26/html/book/maven-html.html): Control the flow of components throughout your software supply chain. (375 words)
- [Nexus Documentation - Nexus IQ Server 1.26 - Sonatype.com](/content/books/sonatype-clm-book/1-26/html/book/_inspecting_results-html.html): Control the flow of components throughout your software supply chain. (213 words)
- [Nexus Documentation - Nexus IQ Server 1.26 - Sonatype.com](/content/books/sonatype-clm-book/1-26/html/book/bamboo-html.html): Control the flow of components throughout your software supply chain. (275 words)
- [Nexus Documentation - Nexus IQ Server 1.26 - Sonatype.com](/content/books/sonatype-clm-book/1-26/html/book/server-backup-html.html): Control the flow of components throughout your software supply chain. (140 words)
- [Nexus Documentation - Nexus IQ Server 1.26 - Sonatype.com](/content/books/sonatype-clm-book/1-26/html/book/report-html.html): Control the flow of components throughout your software supply chain. (311 words)
- [Nexus Documentation - Nexus IQ Server 1.26 - Sonatype.com](/content/books/sonatype-clm-book/1-26/html/book/chapter-clm-ide-html.html): Control the flow of components throughout your software supply chain. (255 words)
- [Nexus Documentation - Nexus IQ Server 1.26 - Sonatype.com](/content/books/sonatype-clm-book/1-26/html/book/nexus-repository-html.html): Control the flow of components throughout your software supply chain. (295 words)
- [Nexus Documentation - Nexus IQ Server 1.26 - Sonatype.com](/content/books/sonatype-clm-book/1-26/html/book/hudson-jenkins-html.html): Control the flow of components throughout your software supply chain. (116 words)
- [Nexus Documentation - Nexus IQ Server 1.26 - Sonatype.com](/content/books/sonatype-clm-book/1-26/html/book/chapter-book-use-html.html): Control the flow of components throughout your software supply chain. (375 words)
- [Nexus Documentation - Nexus IQ Server 1.26 - Sonatype.com](/content/books/sonatype-clm-book/1-26/html/book/chapter-clm-ci-html.html): Control the flow of components throughout your software supply chain. (361 words)
- [Nexus Documentation - Nexus IQ Server 1.26 - Sonatype.com](/content/books/sonatype-clm-book/1-26/html/book/webhooks-html.html): Control the flow of components throughout your software supply chain. (126 words)
- [Maven Central: org.opengis.cite.teamengine:teamengine-spi-ctl:5.5](/content/central/artifact/org-opengis-cite-teamengine/teamengine-spi-ctl/5-5.html): Discover teamengine-spi-ctl in the org.opengis.cite.teamengine namespace. Explore metadata, contributors, the Maven POM file, and more. (177 words)
- [Nexus Documentation - Nexus IQ Server 1.26 - Sonatype.com](/content/books/sonatype-clm-book/1-26/html/book/dashboard-html.html): Control the flow of components throughout your software supply chain. (164 words)
- [Nexus Documentation - Nexus IQ Server 1.26 - Sonatype.com](/content/books/sonatype-clm-book/1-26/html/book/chapter-clm-repository-management-html.html): Control the flow of components throughout your software supply chain. (307 words)
- [com.agilejava.docbkx/docbkx-maven-base 2.0… | Sonatype Guide](/content/guide/component/maven/com-agilejava-docbkx-3adocbkx-maven-base/2-0-10/versions/index.html): Browse all available versions of com.agilejava.docbkx/docbkx-maven-base. Compare version 2.0.10 with other releases, view security scores, and track version hi… (162 words)
- [Nexus Documentation - Nexus IQ Server 1.26 - Sonatype.com](/content/books/sonatype-clm-book/1-26/html/book/idea-html.html): Control the flow of components throughout your software supply chain. (67 words)
- [Nexus Documentation - Nexus IQ Server 1.26 - Sonatype.com](/content/books/sonatype-clm-book/1-26/html/book/adv-policy-management-html.html): Control the flow of components throughout your software supply chain. (109 words)
- [Maven Central: ca.islandora.alpaca:islandora-indexing-triplestore:0.6.0](/content/central/artifact/ca-islandora-alpaca/islandora-indexing-triplestore/0-6-0.html): Discover islandora-indexing-triplestore in the ca.islandora.alpaca namespace. Explore metadata, contributors, the Maven POM file, and more. (211 words)
- [sonatype-2023-4000 | Security Details | Sonatype Guide](/content/guide/vulnerability/sonatype-2023-4000/index.html): Technical security analysis for sonatype-2023-4000. CVSS 10.0 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (65 words)
- [Maven Central: org.opengis.cite.teamengine:teamengine-spi-ctl:6.0.0-RC1](/content/central/artifact/org-opengis-cite-teamengine/teamengine-spi-ctl/6-0-0-rc1.html): Discover teamengine-spi-ctl in the org.opengis.cite.teamengine namespace. Explore metadata, contributors, the Maven POM file, and more. (179 words)
- [Maven Central: org.opengis.cite.teamengine:teamengine-spi-ctl:5.6.1](/content/central/artifact/org-opengis-cite-teamengine/teamengine-spi-ctl/5-6-1.html): Discover teamengine-spi-ctl in the org.opengis.cite.teamengine namespace. Explore metadata, contributors, the Maven POM file, and more. (183 words)
- [sonatype-2023-4004 | Security Details | Sonatype Guide](/content/guide/vulnerability/sonatype-2023-4004/index.html): Technical security analysis for sonatype-2023-4004. CVSS 10.0 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (57 words)
- [Malicious 'aptX' Python Package Drops Meterpreter Shell](/content/blog/malicious-aptx-python-package-drops-meterpreter-shell-deletes-netstat.html): Sonatype identified malicious Python packages on the PyPI software registry that carried out multiple nefarious activities. (589 words)
- [sonatype-2022-2788 | Security Details | Sonatype Guide](/content/guide/vulnerability/sonatype-2022-2788/index.html): Technical security analysis for sonatype-2022-2788. CVSS 10.0 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (68 words)
- [Component Not Found | Sonatype Guide](/content/guide/component/maven/org-opengis-cite-teamengine-3ateamengine-spi-ctl/x-y-z.html): Could not find component data for maven/org.opengis.cite.teamengine:teamengine-spi-ctl/x.y.z. This component may not exist in our database or may have been rem… (17 words)
- [Component Not Found | Sonatype Guide](/content/guide/component/pypi/litellm/x-y-z.html): Could not find component data for pypi/litellm/x.y.z. This component may not exist in our database or may have been removed. (17 words)
- [litellm 1.82.8 | Vulnerabilities | Sonatype Guide](/content/guide/component/pypi/litellm/1-82-8/vulnerabilities/index.html): Security vulnerabilities and CVE data for litellm version 1.82.8. View CVSS scores, exploit details, and remediation guidance for this pypi package. (389 words)
- [org.opengis.cite.teamengine/teamengine-spi… | Sonatype Guide](/content/guide/component/maven/org-opengis-cite-teamengine-teamengine-spi-ctl/5-3-1.html): Comprehensive security analysis for org.opengis.cite.teamengine/teamengine-spi-ctl version 5.3.1. No known vulnerabilities. License: Apache-2.0. View dependenc… (52 words)
- [Maven Central: org.opengis.cite.teamengine:teamengine-spi-ctl:5.4](/content/central/artifact/org-opengis-cite-teamengine/teamengine-spi-ctl/5-4.html): Discover teamengine-spi-ctl in the org.opengis.cite.teamengine namespace. Explore metadata, contributors, the Maven POM file, and more. (176 words)
- [org.opengis.cite.teamengine/teamengine-spi… | Sonatype Guide](/content/guide/component/maven/org-opengis-cite-teamengine-teamengine-spi-ctl/5-4-1.html): Comprehensive security analysis for org.opengis.cite.teamengine/teamengine-spi-ctl version 5.4.1. No known vulnerabilities. License: Apache-2.0. View dependenc… (39 words)
- [Maven Central: org.opengis.cite.teamengine:teamengine-spi-ctl:5.3.1](/content/central/artifact/org-opengis-cite-teamengine/teamengine-spi-ctl/5-3-1.html): Discover teamengine-spi-ctl in the org.opengis.cite.teamengine namespace. Explore metadata, contributors, the Maven POM file, and more. (177 words)
- [org.opengis.cite.teamengine/teamengine-spi… | Sonatype Guide](/content/guide/component/maven/org-opengis-cite-teamengine-teamengine-spi-ctl/5-4.html): Comprehensive security analysis for org.opengis.cite.teamengine/teamengine-spi-ctl version 5.4. No known vulnerabilities. License: Apache-2.0. View dependencie… (54 words)
- [Maven Central: org.opengis.cite.teamengine:teamengine-spi-ctl:5.4.1](/content/central/artifact/org-opengis-cite-teamengine/teamengine-spi-ctl/5-4-1.html): Discover teamengine-spi-ctl in the org.opengis.cite.teamengine namespace. Explore metadata, contributors, the Maven POM file, and more. (178 words)
- [sonatype-2022-2769 | Security Details | Sonatype Guide](/content/guide/vulnerability/sonatype-2022-2769/index.html): Technical security analysis for sonatype-2022-2769. CVSS 10.0 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (77 words)
- [Maven Central: ca.islandora.alpaca:islandora-indexing-triplestore:0.7.0](/content/central/artifact/ca-islandora-alpaca/islandora-indexing-triplestore/0-7-0.html): Discover islandora-indexing-triplestore in the ca.islandora.alpaca namespace. Explore metadata, contributors, the Maven POM file, and more. (216 words)
- [Maven Central: org.opengis.cite.teamengine:teamengine-spi-ctl:5.5.2](/content/central/artifact/org-opengis-cite-teamengine/teamengine-spi-ctl/5-5-2.html): Discover teamengine-spi-ctl in the org.opengis.cite.teamengine namespace. Explore metadata, contributors, the Maven POM file, and more. (179 words)
- [org.opengis.cite.teamengine/teamengine-spi… | Sonatype Guide](/content/guide/component/maven/org-opengis-cite-teamengine-teamengine-spi-ctl/5-5-2.html): Comprehensive security analysis for org.opengis.cite.teamengine/teamengine-spi-ctl version 5.5.2. No known vulnerabilities. License: Apache-2.0. View dependenc… (34 words)
- [Maven Central: org.opengis.cite.teamengine:teamengine-spi-ctl:5.5.1](/content/central/artifact/org-opengis-cite-teamengine/teamengine-spi-ctl/5-5-1.html): Discover teamengine-spi-ctl in the org.opengis.cite.teamengine namespace. Explore metadata, contributors, the Maven POM file, and more. (172 words)
- [Maven Central: org.opengis.cite.teamengine:teamengine-core:5.5](/content/central/artifact/org-opengis-cite-teamengine/teamengine-core/5-5.html): Discover teamengine-core in the org.opengis.cite.teamengine namespace. Explore metadata, contributors, the Maven POM file, and more. (249 words)
- [Maven Central: org.opengis.cite.teamengine:teamengine-spi-ctl:5.7](/content/central/artifact/org-opengis-cite-teamengine/teamengine-spi-ctl/5-7.html): Discover teamengine-spi-ctl in the org.opengis.cite.teamengine namespace. Explore metadata, contributors, the Maven POM file, and more. (170 words)
- [org.opengis.cite.teamengine/teamengine-spi… | Sonatype Guide](/content/guide/component/maven/org-opengis-cite-teamengine-teamengine-spi-ctl/5-6-1.html): Comprehensive security analysis for org.opengis.cite.teamengine/teamengine-spi-ctl version 5.6.1. No known vulnerabilities. License: Apache-2.0. View dependenc… (30 words)
- [org.opengis.cite.teamengine/teamengine-spi… | Sonatype Guide](/content/guide/component/maven/org-opengis-cite-teamengine-teamengine-spi-ctl/5-7.html): Comprehensive security analysis for org.opengis.cite.teamengine/teamengine-spi-ctl version 5.7. No known vulnerabilities. License: Apache-2.0. View dependencie… (32 words)
- [org.opengis.cite.teamengine/teamengine-spi… | Sonatype Guide](/content/guide/component/maven/org-opengis-cite-teamengine-teamengine-spi-ctl/6-0-0-rc1.html): Comprehensive security analysis for org.opengis.cite.teamengine/teamengine-spi-ctl version 6.0.0-RC1. No known vulnerabilities. License: Apache-2.0. View depen… (37 words)
- [sonatype-2021-0722 | Security Details | Sonatype Guide](/content/guide/vulnerability/sonatype-2021-0722/index.html): Technical security analysis for sonatype-2021-0722. CVSS 10.0 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (62 words)
- [hubfs/white_papers/ebook-why-endpoint-protection-is-not-enough-pdf.html](/content/hubfs/white_papers/ebook-why-endpoint-protection-is-not-enough-pdf.html) (1,259 words)
- [Chapter 3: Scala and Maven | Sonatype Maven Cookbook](/content/resources/guides/maven-cookbook/scala-and-maven/index.html): Scala and Maven: a powerful duo for modern development. Learn how to streamline your Scala projects using Apache Maven effectively. (1,013 words)
- [com.tencent.mna/mnalibrary 1.2.2 | Vulnera… | Sonatype Guide](/content/guide/component/maven/com-tencent-mna-3amnalibrary/1-2-2/vulnerabilities/index.html): Security vulnerabilities and CVE data for com.tencent.mna/mnalibrary version 1.2.2. View CVSS scores, exploit details, and remediation guidance for this maven… (119 words)
- [Maven Central: org.opengis.cite.teamengine:teamengine-spi-ctl:6.0.0-RC2](/content/central/artifact/org-opengis-cite-teamengine/teamengine-spi-ctl/6-0-0-rc2.html): Discover teamengine-spi-ctl in the org.opengis.cite.teamengine namespace. Explore metadata, contributors, the Maven POM file, and more. (154 words)
- [ai.platon.pulsar/pulsar-all 4.7.14 | Sonatype Guide](/content/guide/component/maven/ai-platon-pulsar-pulsar-all/4-7-14.html): Comprehensive security analysis for ai.platon.pulsar/pulsar-all version 4.7.14. No known vulnerabilities. License: Apache-2.0. View dependencies, vulnerabiliti… (49 words)
- [sonatype-2023-2789 | Security Details | Sonatype Guide](/content/guide/vulnerability/sonatype-2023-2789/index.html): Technical security analysis for sonatype-2023-2789. CVSS 10.0 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (60 words)
- [Making AI Software Development Safe | Sonatype Research](/content/resources/research/making-ai-work-safely/index.html): Sonatype researchers explore how AI models struggle with dependency decisions, risking security exposure without real-time intelligence for safe upgrades. (1,742 words)
- [Component Not Found | Sonatype Guide](/content/guide/component/maven/ca-islandora-alpaca-3aislandora-indexing-triplestore/x-y-z.html): Could not find component data for maven/ca.islandora.alpaca:islandora-indexing-triplestore/x.y.z. This component may not exist in our database or may have been… (17 words)
- [sonatype-2026-001276 | Security Details | Sonatype Guide](/content/guide/vulnerability/sonatype-2026-001276/index.html): Technical security analysis for sonatype-2026-001276. CVSS 7.1 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (62 words)
- [ai.platon.pulsar/pulsar-all 4.8.0 | Sonatype Guide](/content/guide/component/maven/ai-platon-pulsar-pulsar-all/4-8-0.html): Comprehensive security analysis for ai.platon.pulsar/pulsar-all version 4.8.0. No known vulnerabilities. License: Apache-2.0. View dependencies, vulnerabilitie… (58 words)
- [org.opengis.cite.teamengine/teamengine-spi… | Sonatype Guide](/content/guide/component/maven/org-opengis-cite-teamengine-teamengine-spi-ctl/5-5.html): Comprehensive security analysis for org.opengis.cite.teamengine/teamengine-spi-ctl version 5.5. No known vulnerabilities. License: Apache-2.0. View dependencie… (48 words)
- [Maven Central: org.opengis.cite.teamengine:teamengine-core:5.4.1](/content/central/artifact/org-opengis-cite-teamengine/teamengine-core/5-4-1.html): Discover teamengine-core in the org.opengis.cite.teamengine namespace. Explore metadata, contributors, the Maven POM file, and more. (233 words)
- [org.opengis.cite.teamengine/teamengine-spi… | Sonatype Guide](/content/guide/component/maven/org-opengis-cite-teamengine-teamengine-spi-ctl/5-5-1.html): Comprehensive security analysis for org.opengis.cite.teamengine/teamengine-spi-ctl version 5.5.1. No known vulnerabilities. License: Apache-2.0. View dependenc… (26 words)
- [Maven Central: org.opengis.cite.teamengine:teamengine-core:6.0.0-RC1](/content/central/artifact/org-opengis-cite-teamengine/teamengine-core/6-0-0-rc1.html): Discover teamengine-core in the org.opengis.cite.teamengine namespace. Explore metadata, contributors, the Maven POM file, and more. (226 words)
- [Maven Central: org.opengis.cite.teamengine:teamengine-core:5.4](/content/central/artifact/org-opengis-cite-teamengine/teamengine-core/5-4.html): Discover teamengine-core in the org.opengis.cite.teamengine namespace. Explore metadata, contributors, the Maven POM file, and more. (251 words)
- [Maven Central: ca.islandora.alpaca:islandora-indexing-triplestore:1.0.2](/content/central/artifact/ca-islandora-alpaca/islandora-indexing-triplestore/1-0-2.html): Discover islandora-indexing-triplestore in the ca.islandora.alpaca namespace. Explore metadata, contributors, the Maven POM file, and more. (202 words)
- [ai.platon.pulsar/pulsar-all 4.8.2 | Sonatype Guide](/content/guide/component/maven/ai-platon-pulsar-pulsar-all/4-8-2.html): Comprehensive security analysis for ai.platon.pulsar/pulsar-all version 4.8.2. No known vulnerabilities. License: Apache-2.0. View dependencies, vulnerabilitie… (52 words)
- [Component Not Found | Sonatype Guide](/content/guide/component/maven/com-tencent-mna-3amnalibrary/x-y-z.html): Could not find component data for maven/com.tencent.mna:mnalibrary/x.y.z. This component may not exist in our database or may have been removed. (17 words)
- [Maven Central: org.opengis.cite.teamengine:teamengine-core:5.3.1](/content/central/artifact/org-opengis-cite-teamengine/teamengine-core/5-3-1.html): Discover teamengine-core in the org.opengis.cite.teamengine namespace. Explore metadata, contributors, the Maven POM file, and more. (232 words)
- [Maven Central: org.opengis.cite.teamengine:teamengine-core:5.6.1](/content/central/artifact/org-opengis-cite-teamengine/teamengine-core/5-6-1.html): Discover teamengine-core in the org.opengis.cite.teamengine namespace. Explore metadata, contributors, the Maven POM file, and more. (232 words)
- [ai.platon.pulsar/pulsar-all 4.8.4 | Sonatype Guide](/content/guide/component/maven/ai-platon-pulsar-pulsar-all/4-8-4.html): Comprehensive security analysis for ai.platon.pulsar/pulsar-all version 4.8.4. No known vulnerabilities. License: Apache-2.0. View dependencies, vulnerabilitie… (52 words)
- [Maven Central: ca.islandora.alpaca:islandora-indexing-triplestore:1.0.3](/content/central/artifact/ca-islandora-alpaca/islandora-indexing-triplestore/1-0-3.html): Discover islandora-indexing-triplestore in the ca.islandora.alpaca namespace. Explore metadata, contributors, the Maven POM file, and more. (196 words)
- [ai.platon.pulsar/pulsar-all 4.8.1 | Sonatype Guide](/content/guide/component/maven/ai-platon-pulsar-pulsar-all/4-8-1.html): Comprehensive security analysis for ai.platon.pulsar/pulsar-all version 4.8.1. No known vulnerabilities. License: Apache-2.0. View dependencies, vulnerabilitie… (28 words)
- [Maven Central: ai.platon.pulsar:pulsar-all:4.8.2](/content/central/artifact/ai-platon-pulsar/pulsar-all/4-8-2.html): Discover pulsar-all in the ai.platon.pulsar namespace. Explore metadata, contributors, the Maven POM file, and more. (4,045 words)
- [ai.platon.pulsar/pulsar-all 4.9.1 | Sonatype Guide](/content/guide/component/maven/ai-platon-pulsar-pulsar-all/4-9-1.html): Comprehensive security analysis for ai.platon.pulsar/pulsar-all version 4.9.1. No known vulnerabilities. License: Apache-2.0. View dependencies, vulnerabilitie… (45 words)
- [Comparing and Converting SBOM Formats: CycloneDX vs. SPDX](/content/blog/how-to-convert-your-sbom-between-spdx-and-cyclonedx-formats.html): A step-by-step guide on how to convert between SBOM formats using tooling from the official repositories of SPDX and CycloneDX. (1,448 words)
- [org.opengis.cite.teamengine/teamengine-spi… | Sonatype Guide](/content/guide/component/maven/org-opengis-cite-teamengine-teamengine-spi-ctl/5-6.html): Comprehensive security analysis for org.opengis.cite.teamengine/teamengine-spi-ctl version 5.6. No known vulnerabilities. License: Apache-2.0. View dependencie… (31 words)
- [Maven Central: org.opengis.cite.teamengine:teamengine-core:6.0.0](/content/central/artifact/org-opengis-cite-teamengine/teamengine-core/6-0-0.html): Discover teamengine-core in the org.opengis.cite.teamengine namespace. Explore metadata, contributors, the Maven POM file, and more. (246 words)
- [ai.platon.pulsar/pulsar-all 4.9.2 | Sonatype Guide](/content/guide/component/maven/ai-platon-pulsar-pulsar-all/4-9-2.html): Comprehensive security analysis for ai.platon.pulsar/pulsar-all version 4.9.2. No known vulnerabilities. License: Apache-2.0. View dependencies, vulnerabilitie… (54 words)
- [ai.platon.pulsar/pulsar-all 4.9.0 | Sonatype Guide](/content/guide/component/maven/ai-platon-pulsar-pulsar-all/4-9-0.html): Comprehensive security analysis for ai.platon.pulsar/pulsar-all version 4.9.0. No known vulnerabilities. License: Apache-2.0. View dependencies, vulnerabilitie… (16 words)
- [Maven Central: ai.platon.pulsar:pulsar-all:4.9.0](/content/central/artifact/ai-platon-pulsar/pulsar-all/4-9-0.html): Discover pulsar-all in the ai.platon.pulsar namespace. Explore metadata, contributors, the Maven POM file, and more. (7,057 words)
- [ai.platon.pulsar/pulsar-all 4.9.5 | Sonatype Guide](/content/guide/component/maven/ai-platon-pulsar-pulsar-all/4-9-5.html): Comprehensive security analysis for ai.platon.pulsar/pulsar-all version 4.9.5. No known vulnerabilities. License: Apache-2.0. View dependencies, vulnerabilitie… (40 words)
- [Maven Central: org.opengis.cite.teamengine:teamengine-core:5.5.1](/content/central/artifact/org-opengis-cite-teamengine/teamengine-core/5-5-1.html): Discover teamengine-core in the org.opengis.cite.teamengine namespace. Explore metadata, contributors, the Maven POM file, and more. (228 words)
- [Maven Central: org.opengis.cite.teamengine:teamengine-core:5.7](/content/central/artifact/org-opengis-cite-teamengine/teamengine-core/5-7.html): Discover teamengine-core in the org.opengis.cite.teamengine namespace. Explore metadata, contributors, the Maven POM file, and more. (252 words)
- [org.opengis.cite.teamengine/teamengine-cor… | Sonatype Guide](/content/guide/component/maven/org-opengis-cite-teamengine-teamengine-core/5-4.html): Comprehensive security analysis for org.opengis.cite.teamengine/teamengine-core version 5.4. No known vulnerabilities. License: Apache-2.0. View dependencies,… (55 words)
- [Maven Central: ai.platon.pulsar:pulsar-all:4.9.1](/content/central/artifact/ai-platon-pulsar/pulsar-all/4-9-1.html): Discover pulsar-all in the ai.platon.pulsar namespace. Explore metadata, contributors, the Maven POM file, and more. (7,018 words)
- [Maven Central: ca.islandora.alpaca:islandora-indexing-triplestore:1.0.0](/content/central/artifact/ca-islandora-alpaca/islandora-indexing-triplestore/1-0-0.html): Discover islandora-indexing-triplestore in the ca.islandora.alpaca namespace. Explore metadata, contributors, the Maven POM file, and more. (209 words)
- [org.opengis.cite.teamengine/teamengine-cor… | Sonatype Guide](/content/guide/component/maven/org-opengis-cite-teamengine-teamengine-core/5-4-1.html): Comprehensive security analysis for org.opengis.cite.teamengine/teamengine-core version 5.4.1. No known vulnerabilities. License: Apache-2.0. View dependencies… (44 words)
- [org.opengis.cite.teamengine/teamengine-cor… | Sonatype Guide](/content/guide/component/maven/org-opengis-cite-teamengine-teamengine-core/5-3-1.html): Comprehensive security analysis for org.opengis.cite.teamengine/teamengine-core version 5.3.1. No known vulnerabilities. License: Apache-2.0. View dependencies… (42 words)
- [Maven Central: ai.platon.pulsar:pulsar-all:4.9.5](/content/central/artifact/ai-platon-pulsar/pulsar-all/4-9-5.html): Discover pulsar-all in the ai.platon.pulsar namespace. Explore metadata, contributors, the Maven POM file, and more. (3,505 words)
- [Storage Management Best Practices: Expand Storage With Ease](/content/blog/storage-management-best-practices-part-2/index.html): In part 2 of Storage Management Best Practices, we explore the benefits of using Group Blob Store. (1,205 words)
- [org.opengis.cite.teamengine/teamengine-cor… | Sonatype Guide](/content/guide/component/maven/org-opengis-cite-teamengine-teamengine-core/5-5.html): Comprehensive security analysis for org.opengis.cite.teamengine/teamengine-core version 5.5. No known vulnerabilities. License: Apache-2.0. View dependencies,… (58 words)
- [Maven Central: org.opengis.cite.teamengine:teamengine-core:5.5.2](/content/central/artifact/org-opengis-cite-teamengine/teamengine-core/5-5-2.html): Discover teamengine-core in the org.opengis.cite.teamengine namespace. Explore metadata, contributors, the Maven POM file, and more. (251 words)
- [Maven Central: ai.platon.pulsar:pulsar-all:4.9.3](/content/central/artifact/ai-platon-pulsar/pulsar-all/4-9-3.html): Discover pulsar-all in the ai.platon.pulsar namespace. Explore metadata, contributors, the Maven POM file, and more. (5,279 words)
- [Maven Central: org.apache.servicemix.bundles:org.apache.servicemix.bundles.xerces:2.10.0_1](/content/central/artifact/org-apache-servicemix-bundles/org-apache-servicemix-bundles-xerces/2-10-0_1.html): Discover org.apache.servicemix.bundles.xerces in the org.apache.servicemix.bundles namespace. Explore metadata, contributors, the Maven POM file, and more. (172 words)
- [Maven Central: org.opengis.cite.teamengine:teamengine-core:5.6](/content/central/artifact/org-opengis-cite-teamengine/teamengine-core/5-6.html): Discover teamengine-core in the org.opengis.cite.teamengine namespace. Explore metadata, contributors, the Maven POM file, and more. (258 words)
- [Maven Central: ca.islandora.alpaca:islandora-indexing-triplestore:0.7.1](/content/central/artifact/ca-islandora-alpaca/islandora-indexing-triplestore/0-7-1.html): Discover islandora-indexing-triplestore in the ca.islandora.alpaca namespace. Explore metadata, contributors, the Maven POM file, and more. (209 words)
- [ai.platon.pulsar/pulsar-all 4.8.3 | Sonatype Guide](/content/guide/component/maven/ai-platon-pulsar-pulsar-all/4-8-3.html): Comprehensive security analysis for ai.platon.pulsar/pulsar-all version 4.8.3. No known vulnerabilities. License: Apache-2.0. View dependencies, vulnerabilitie… (51 words)
- [org.opengis.cite.teamengine/teamengine-cor… | Sonatype Guide](/content/guide/component/maven/org-opengis-cite-teamengine-teamengine-core/5-6-1.html): Comprehensive security analysis for org.opengis.cite.teamengine/teamengine-core version 5.6.1. No known vulnerabilities. License: Apache-2.0. View dependencies… (43 words)
- [Healthcare Software Supply Chain Management | Sonatype](/content/solutions/healthcare/index.html): Use Sonatype's healthcare software supply chain management tools to develop secure applications that protect patient data.  (805 words)
- [MCP Servers Explained: Enhance AI Contextual Insights | Sonatype](/content/resources/articles/mcp-servers/index.html): Discover how MCP servers connect AI models to real-time data, enhancing accuracy and security in software development. Explore how to leverage MCP servers. (1,757 words)
- [org.opengis.cite.teamengine/teamengine-cor… | Sonatype Guide](/content/guide/component/maven/org-opengis-cite-teamengine-teamengine-core/5-5-2.html): Comprehensive security analysis for org.opengis.cite.teamengine/teamengine-core version 5.5.2. No known vulnerabilities. License: Apache-2.0. View dependencies… (37 words)
- [org.opengis.cite.teamengine/teamengine-cor… | Sonatype Guide](/content/guide/component/maven/org-opengis-cite-teamengine-teamengine-core/5-5-1.html): Comprehensive security analysis for org.opengis.cite.teamengine/teamengine-core version 5.5.1. No known vulnerabilities. License: Apache-2.0. View dependencies… (34 words)
- [Maven Central: org.opengis.cite.teamengine:teamengine-core:6.0.0-RC2](/content/central/artifact/org-opengis-cite-teamengine/teamengine-core/6-0-0-rc2.html): Discover teamengine-core in the org.opengis.cite.teamengine namespace. Explore metadata, contributors, the Maven POM file, and more. (236 words)
- [org.opengis.cite.teamengine/teamengine-cor… | Sonatype Guide](/content/guide/component/maven/org-opengis-cite-teamengine-teamengine-core/5-7.html): Comprehensive security analysis for org.opengis.cite.teamengine/teamengine-core version 5.7. No known vulnerabilities. License: Apache-2.0. View dependencies,… (40 words)
- [org.opengis.cite.teamengine/teamengine-cor… | Sonatype Guide](/content/guide/component/maven/org-opengis-cite-teamengine-teamengine-core/5-6.html): Comprehensive security analysis for org.opengis.cite.teamengine/teamengine-core version 5.6. No known vulnerabilities. License: Apache-2.0. View dependencies,… (42 words)
- [StringJS Typosquat Deploys Discord Infostealer Obfuscated](/content/blog/stringjs-typosquat-caught-with-discord-info-stealer.html): An npm package called 'stringjs_lib' identified by Sonatype this week typosquats the popular npm library 'string' (or StringJS) to ship an obfuscated. (709 words)
- [Maven Central: ai.platon.pulsar:pulsar-all:4.8.0](/content/central/artifact/ai-platon-pulsar/pulsar-all/4-8-0.html): Discover pulsar-all in the ai.platon.pulsar namespace. Explore metadata, contributors, the Maven POM file, and more. (4,049 words)
- [org.opengis.cite.teamengine/teamengine-cor… | Sonatype Guide](/content/guide/component/maven/org-opengis-cite-teamengine-teamengine-core/6-0-0-rc1.html): Comprehensive security analysis for org.opengis.cite.teamengine/teamengine-core version 6.0.0-RC1. No known vulnerabilities. License: Apache-2.0. View dependen… (54 words)
- [ai.platon.pulsar/pulsar-all 4.8.5 | Sonatype Guide](/content/guide/component/maven/ai-platon-pulsar-pulsar-all/4-8-5.html): Comprehensive security analysis for ai.platon.pulsar/pulsar-all version 4.8.5. No known vulnerabilities. License: Apache-2.0. View dependencies, vulnerabilitie… (42 words)
- [Maven Central: ai.platon.pulsar:pulsar-all:4.8.1](/content/central/artifact/ai-platon-pulsar/pulsar-all/4-8-1.html): Discover pulsar-all in the ai.platon.pulsar namespace. Explore metadata, contributors, the Maven POM file, and more. (4,049 words)
- [Maven Central: ca.islandora.alpaca:islandora-indexing-triplestore:1.0.5](/content/central/artifact/ca-islandora-alpaca/islandora-indexing-triplestore/1-0-5.html): Discover islandora-indexing-triplestore in the ca.islandora.alpaca namespace. Explore metadata, contributors, the Maven POM file, and more. (190 words)
- [org.opengis.cite.teamengine/teamengine-cor… | Sonatype Guide](/content/guide/component/maven/org-opengis-cite-teamengine-teamengine-core/6-0-0.html): Comprehensive security analysis for org.opengis.cite.teamengine/teamengine-core version 6.0.0. No known vulnerabilities. License: Apache-2.0. View dependencies… (43 words)
- [org.opengis.cite.teamengine/teamengine-cor… | Sonatype Guide](/content/guide/component/maven/org-opengis-cite-teamengine-teamengine-core/6-0-0-rc2.html): Comprehensive security analysis for org.opengis.cite.teamengine/teamengine-core version 6.0.0-RC2. No known vulnerabilities. License: Apache-2.0. View dependen… (50 words)
- [Maven Central: ai.platon.pulsar:pulsar-all:4.8.3](/content/central/artifact/ai-platon-pulsar/pulsar-all/4-8-3.html): Discover pulsar-all in the ai.platon.pulsar namespace. Explore metadata, contributors, the Maven POM file, and more. (4,049 words)
- [The Science of Compliance: The Importance of DevSecOps | Sonatype](/content/blog/summary-of-the-science-of-compliance-early-code-to-secure-your-node-by-judy-johnson.html): Compliance testing can—and should—be done at all stages of your CI process. Watch your test tool – there can be false positives as well as false negatives. (918 words)
- [Maven Central: activemq:activemq:3.2.4](/content/central/artifact/activemq/activemq/3-2-4.html): Discover activemq in the activemq namespace. Explore metadata, contributors, the Maven POM file, and more. (513 words)
- [Polyfill.io Supply Chain Attack Explained | Sonatype](/content/blog/polyfill-io-supply-chain-attack-hits-100000-websites-all-you-need-to-know.html): The Polyfill.io supply chain attack hit over 100k websites. Learn about this open source attack, its impact, and how to mitigate the security risks. (977 words)
- [Generate PGP Signatures for Maven Projects: A Complete Guide](/content/blog/2010/01/how-to-generate-pgp-signatures-with-maven/index.html): Learn how to generate PGP signatures for your Maven projects using GnuPG and the maven-gpg-plugin to ensure the security of your software artifacts. (1,185 words)
- [ca.islandora.alpaca/islandora-indexing-tri… | Sonatype Guide](/content/guide/component/maven/ca-islandora-alpaca-islandora-indexing-triplestore/0-7-0.html): Comprehensive security analysis for ca.islandora.alpaca/islandora-indexing-triplestore version 0.7.0. No known vulnerabilities. License: MIT. View dependencies… (35 words)
- [Maven Central: ai.platon.pulsar:pulsar-all:4.8.4](/content/central/artifact/ai-platon-pulsar/pulsar-all/4-8-4.html): Discover pulsar-all in the ai.platon.pulsar namespace. Explore metadata, contributors, the Maven POM file, and more. (4,024 words)
- [DevOps Tools, Not Rules | Sonatype](/content/blog/tools-not-rules/index.html): American Express went through a DevOps identity crisis to fully understand how important culture was to making the right tools stick in their organization. (702 words)
- [ca.islandora.alpaca/islandora-indexing-tri… | Sonatype Guide](/content/guide/component/maven/ca-islandora-alpaca-islandora-indexing-triplestore/0-7-1.html): Comprehensive security analysis for ca.islandora.alpaca/islandora-indexing-triplestore version 0.7.1. No known vulnerabilities. License: MIT. View dependencies… (43 words)
- [ca.islandora.alpaca/islandora-indexing-tri… | Sonatype Guide](/content/guide/component/maven/ca-islandora-alpaca-islandora-indexing-triplestore/0-8-0.html): Comprehensive security analysis for ca.islandora.alpaca/islandora-indexing-triplestore version 0.8.0. No known vulnerabilities. License: MIT. View dependencies… (44 words)
- [ca.islandora.alpaca/islandora-indexing-tri… | Sonatype Guide](/content/guide/component/maven/ca-islandora-alpaca-islandora-indexing-triplestore/1-0-0.html): Comprehensive security analysis for ca.islandora.alpaca/islandora-indexing-triplestore version 1.0.0. No known vulnerabilities. License: MIT. View dependencies… (46 words)
- [Maven Central: ai.platon.pulsar:pulsar-all:4.8.5](/content/central/artifact/ai-platon-pulsar/pulsar-all/4-8-5.html): Discover pulsar-all in the ai.platon.pulsar namespace. Explore metadata, contributors, the Maven POM file, and more. (3,963 words)
- [ca.islandora.alpaca/islandora-indexing-tri… | Sonatype Guide](/content/guide/component/maven/ca-islandora-alpaca-islandora-indexing-triplestore/1-0-2.html): Comprehensive security analysis for ca.islandora.alpaca/islandora-indexing-triplestore version 1.0.2. No known vulnerabilities. License: MIT. View dependencies… (59 words)
- [Embedding Ownership: A DevOps Best Practice](/content/blog/embedding-ownership-a-devops-best-practice/index.html): From where I sit in the DevOps community, there is often more focus on dev than on ops. (554 words)
- [ca.islandora.alpaca/islandora-indexing-tri… | Sonatype Guide](/content/guide/component/maven/ca-islandora-alpaca-islandora-indexing-triplestore/1-0-4.html): Comprehensive security analysis for ca.islandora.alpaca/islandora-indexing-triplestore version 1.0.4. No known vulnerabilities. License: MIT. View dependencies… (44 words)
- [Defining Roles for Staging: Sonatype Tips and Tricks](/content/blog/2009/12/nexus-tips-and-tricks-split-staging-deployment-and-promotion-role.html): Learn how to define and assign roles for developers and testers in Sonatype Nexus Repository's staging process with these expert tips and tricks. (608 words)
- [Sonatype’s 2018 Report Reveals Vulnerable OSS Increased 120%](/content/press-releases/sonatypes-2018-state-of-the-software-supply-chain-report.html): Sonatype's 4th Software Supply Chain Report reveals over 300 billion open source downloads in a year. (1,066 words)
- [How to Effectively Backup Sonatype Nexus Repository](/content/blog/2011/06/nexus-tips-and-tricks-backup-nexus/index.html): Learn how to effectively back up your instance of Sonatype Nexus Repository to ensure your essential software artifacts are safe and secure at all times. (1,060 words)
- [Automate and Maintain SBOMs for Better Software Security](/content/blog/automating-and-maintaining-sboms/index.html): Explore strategies for automating software bills of materials (SBOMs) management, focusing on the enhancement of operational efficiency and compliance (865 words)
- [Maven Central: ai.platon.pulsar:pulsar-all:4.9.2](/content/central/artifact/ai-platon-pulsar/pulsar-all/4-9-2.html): Discover pulsar-all in the ai.platon.pulsar namespace. Explore metadata, contributors, the Maven POM file, and more. (7,083 words)
- [Open is Not Costless: Reclaiming Sustainable Infrastructure](/content/blog/open-is-not-costless-reclaiming-sustainable-infrastructure.html): Open source infrastructure is subsidizing private convenience at an industrial scale. It’s time to stop treating public registries like infinite resources. (724 words)
- [DevOps-as-a-Service: Overcoming Challenges in Large Organizations](/content/blog/devops-as-a-service/index.html): DevOp-as-a-Service involves a team and a platform that share the goal of continuously increasing self-service capabilities.
 (877 words)
- [SBOM Best Practices: Tips from Global Technology Leaders](/content/blog/sbom-best-practices-what-global-leaders-are-asking-and-doing.html): Discover the top SBOM questions global leaders are asking, plus best practices to manage risk, scale compliance, and boost software supply chain security. (936 words)
- [Component Not Found | Sonatype Guide](/content/guide/component/maven/ai-platon-pulsar-3apulsar-all/x-y-z.html): Could not find component data for maven/ai.platon.pulsar:pulsar-all/x.y.z. This component may not exist in our database or may have been removed. (17 words)
- [Meet an Open Source Developer: Allie Sierra](/content/blog/meet-an-open-source-developer-allie-sierra/index.html): Allie Sierra, Engineering Manager at Sonatype, discusses her journey and career in open source as part of our series for World Open Source Day 2023.  (1,122 words)
- [Sonatype Learn: Source Control Management (SCM) Onboarding](/content/blog/new-on-sonatype-learn-easy-source-control-management-scm-onboarding.html): Sonatype's latest eLearning course, Easy Source Control Management (SCM) Onboarding, teaches you how to import your SCM repositories into Nexus Lifecycle. (293 words)
- [Explore This Interactive DevSecOps Reference Architecture](/content/blog/take-this-interactive-devsecops-reference-architecture-for-a-test-drive.html): An interactive DevSecOps reference architecture illustrates manual and automated processes, plus interactions between systems, stakeholders, and security. (346 words)
- [Understanding the Risks and Exploits of Java Serialization](/content/blog/java-serialisation-the-gift-that-keeps-on-taking-part-2.html): Part two of our Java serialization series: the unexpected consequences of design and how the data stream can be  compromised. (1,130 words)
- [CocoaPods and Conda Support in Sonatype Nexus Repository](/content/blog/cocoapods-conda-in-nexus-repository/index.html): Nexus Repository Manager, the most widely used universal binary repository manager, now features native format support for CocoaPods and Conda. (649 words)
- [Extracting Android Project Dependencies Using Gradle Tasks](/content/blog/how-to-extract-your-android-projects-dependencies-with-a-gradle-task.html): Nikita Belokopytov explains how to extract your Android project’s dependencies with a Gradle task, for use with Nexus Lifecycle (IQ Server)  (986 words)
- [Being the 'B' in LGBTQIA+](/content/blog/being-the-b-in-lgbtqia/index.html): September 16-23rd is Bisexual Awareness Week (#BiWeek) and Sonatype's Senior Technical Support Engineer, John Kruger, talks about what it's like to be bi.  (647 words)
- [Sonatype Named a Leader in the 2026 Gartner® Magic Quadrant™](/content/press-releases/sonatype-named-a-leader-in-the-2026-gartner-magic-quadrant.html): Sonatype has been recognized as a Leader in the 2026 Gartner Magic Quadrant for Software Supply Chain Security.  (676 words)
- [Maven Central: com.norconex.commons:norconex-commons-lang:1.15.0](/content/central/artifact/com-norconex-commons/norconex-commons-lang/1-15-0.html): Discover norconex-commons-lang in the com.norconex.commons namespace. Explore metadata, contributors, the Maven POM file, and more. (555 words)
- [Zero Day, Now What?](/content/blog/zero-day-now-what/index.html): What a security incident response looks like for users of Nexus Lifecycle. (985 words)
- [Sonatype Launches Nexus Repository Cloud in the AI Era | Sonatype](/content/press-releases/sonatype-launches-nexus-repository-cloud-for-the-gen-ai-era.html): Introducing Nexus Repository Cloud, a fully managed SaaS solution of Sonatype's industry-leading artifact repository manager, enabling enterprise-scale. (619 words)
- [Maven Central: org.opencastproject:opencast-transcription-service-microsoft-azure:15.4](/content/central/artifact/org-opencastproject/opencast-transcription-service-microsoft-azure/15-4.html): Discover opencast-transcription-service-microsoft-azure in the org.opencastproject namespace. Explore metadata, contributors, the Maven POM file, and more. (344 words)
- [Malicious PyPI Packages Compromise Telegram Cache Files](/content/blog/pypi-packages-steal-telegram-cache-files-add-windows-remote-desktop-accounts.html): We analyze Python packages that steal Telegram Desktop client files and set up Remote Desktop access accounts after infecting Windows systems. (587 words)
- [Maven Central: org.apache.servicemix.bundles:org.apache.servicemix.bundles.xerces:2.12.0_1](/content/central/artifact/org-apache-servicemix-bundles/org-apache-servicemix-bundles-xerces/2-12-0_1.html): Discover org.apache.servicemix.bundles.xerces in the org.apache.servicemix.bundles namespace. Explore metadata, contributors, the Maven POM file, and more. (199 words)
- [Sonatype Nexus Repository Now Has Improved Search Interface](/content/blog/2010/08/nexus-1-7-2-now-available-with-improved-search-interface.html): Discover the enhanced search interface in Nexus Repository 1.7.2, making artifact discovery easier and more efficient. Download the latest version today. (780 words)
- [npm Registry Flooded with 748 Movie-Storing Packages](/content/blog/npm-flooded-with-748-packages-that-store-movies/index.html): The Sonatype Security Research team came across 748 packages flooding the npm software registry. (645 words)
- [Maven Central: org.apache.servicemix.bundles:org.apache.servicemix.bundles.xerces:2.12.1_1](/content/central/artifact/org-apache-servicemix-bundles/org-apache-servicemix-bundles-xerces/2-12-1_1.html): Discover org.apache.servicemix.bundles.xerces in the org.apache.servicemix.bundles namespace. Explore metadata, contributors, the Maven POM file, and more. (205 words)
- [The importance of Maven training | Sonatype Blog](/content/blog/2011/01/the-importance-of-maven-training/index.html): Discover the crucial role of Maven training in ensuring smooth project builds and avoiding common pitfalls. Learn how to streamline your dev process. (907 words)
- [IQ API Reference](/content/help/en/iq-api-reference-html.html) (2,288 words)
- [Rust Language Support | Sonatype](/content/products/language-support/rust/index.html): Manage and secure your Rust projects effectively with comprehensive Rust (Cargo) support from Sonatype. (323 words)
- [What Are Open Source Vulnerabilities | Sonatype](/content/resources/articles/what-are-open-source-vulnerabilities/index.html): Learn what open source vulnerabilities are, their impact, and explore tools to reduce your business’s risk exposure.  (1,037 words)
- [DevSecOps: In Time for Security](/content/blog/devsecops-in-time-for-security/index.html): Historically developers have prioritized functional requirements over security when building software, in DevSecOps, that world view changes. (769 words)
- [NVD Overload: A Critical Vulnerability Management Challenge](/content/blog/nvd-overload-unveiling-a-hidden-crisis-in-vulnerability-management.html): Learn about a critical yet underreported issue in the National Vulnerability Database (NVD) that could have global impact for cybersecurity infrastructure (1,152 words)
- [Maven Central: org.opencastproject:opencast-transcription-service-microsoft-azure](/content/central/artifact/org-opencastproject/opencast-transcription-service-microsoft-azure/versions/index.html): Discover opencast-transcription-service-microsoft-azure in the org.opencastproject namespace. Explore metadata, contributors, the Maven POM file, and more. (177 words)
- [Request a Quote of Sonatype Lifecycle](/content/products/sonatype-lifecycle/quote/index.html): Discover how Sonatype Lifecycle can help your team find and fix vulnerabilities fast. Connect with our sales team for a customized quote. (465 words)
- [Enhance SSL Security and Support for HTTP/2 in Maven Central](/content/blog/enhancing-ssl-security-and-http/2-support-for-central/index.html): Enhancing SSL security and adding HTTP/2 support for Maven Central to ensure modern compliance and performance improvements. Learn more on these updates. (354 words)
- [Scala Language Support | Sonatype Support](/content/products/language-support/scala/index.html): Securely manage Scala projects with comprehensive Scala language support from Sonatype to enhance visibility, control dependencies, and enforce governance. (448 words)
- [Lessons Learned From Equifax Testifying to Congress](/content/blog/mr-smith-goes-to-washington-equifax-congress.html): Perspective on what Rick Smith, former Equifax CEO, will say today to Congress this week when he testifies. (427 words)
- [Celebrating the 2025 Sonatype Elevate Awards Finalists](/content/blog/celebrating-the-2025-sonatype-elevate-awards-finalists.html): Meet the 2025 Sonatype Elevate Awards finalists driving innovation, DevSecOps excellence, and secure software practices. (819 words)
- [Component Not Found | Sonatype Guide](/content/guide/component/maven/com-agilejava-docbkx-3adocbkx-maven-base/x-y-z.html): Could not find component data for maven/com.agilejava.docbkx:docbkx-maven-base/x.y.z. This component may not exist in our database or may have been removed. (17 words)
- [Maven Central: org.opencastproject:opencast-transcription-service-microsoft-azure:15.13](/content/central/artifact/org-opencastproject/opencast-transcription-service-microsoft-azure/15-13.html): Discover opencast-transcription-service-microsoft-azure in the org.opencastproject namespace. Explore metadata, contributors, the Maven POM file, and more. (344 words)
- [Docker Image Security for DevSecOps | Sonatype Blog](/content/blog/docker-image-security-for-devsecops/index.html): Learn how to secure Docker containers with essential tips and tools for enhancing security in your DevSecOps pipeline. (672 words)
- [CVE-2020-17479: Validation Bypass (CVE-2019-19507) in `jpv`](/content/blog/cve-2020-17479/index.html): While updating our data for CVE-2020-17479 in JPV, an open-source JSON schema validator, we discovered that the vulnerability could still be exploited. (708 words)
- [ca.islandora.alpaca/islandora-indexing-tri… | Sonatype Guide](/content/guide/component/maven/ca-islandora-alpaca-islandora-indexing-triplestore/1-0-3.html): Comprehensive security analysis for ca.islandora.alpaca/islandora-indexing-triplestore version 1.0.3. No known vulnerabilities. License: MIT. View dependencies… (58 words)
- [OSS Malware: VMware Dependency Confusion and Secrets Management Issues](/content/blog/this-week-in-malware-vmware-secrets-and-security-by-obscurity.html): This week in malware digest for 8th April 2022: VMWare dependency confusion attempt and the importance of secrets management. (481 words)
- [ca.islandora.alpaca/islandora-indexing-tri… | Sonatype Guide](/content/guide/component/maven/ca-islandora-alpaca-islandora-indexing-triplestore/0-6-0.html): Comprehensive security analysis for ca.islandora.alpaca/islandora-indexing-triplestore version 0.6.0. No known vulnerabilities. License: MIT. View dependencies… (59 words)
- [sonatype-2020-1168 | Security Details | Sonatype Guide](/content/guide/vulnerability/sonatype-2020-1168/index.html): Technical security analysis for sonatype-2020-1168. CVSS 10.0 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (80 words)
- [How Lazarus Group Uses Open Source to Attack Developers | Webinar](/content/resources/webinars/lazarus-group-attacks-developers/index.html): Discover how the Lazarus Group exploits open source to launch software supply chain attacks. Learn strategies to mitigate your risk in this webinar., The Lazarus Group — an advanced persistent threat (APT) linked to North Korea — is weaponizing the trust inherent in open source ecosystems like npm and... (246 words)
- [Understand the Cyber Resilience Act: Key Compliance Insights](/content/blog/summer-compliance-webinar-series-understanding-the-cyber-resilience-act.html): Discover what the Cyber Resilience Act (CRA) means for development, innovation, and the importance of software bills of materials (SBOMs) for compliance. (408 words)
- [Sonatype Donates Maven 3.x Eclipse Integration to Hudson](/content/blog/2011/05/sonatype-donates-maven-3-x-integration-eclipse-integration-to-hudson.html): Sonatype donates Maven 3.x and Eclipse integrations to Hudson, enhancing features and inviting community feedback through this webinar. (288 words)
- [Maven Central: xerces:xercesImpl:2.11.0](/content/central/artifact/xerces/xercesimpl/2-11-0.html): Discover xercesImpl in the xerces namespace. Explore metadata, contributors, the Maven POM file, and more. (441 words)
- [Maven Central: xerces:xercesImpl:2.10.0](/content/central/artifact/xerces/xercesimpl/2-10-0.html): Discover xercesImpl in the xerces namespace. Explore metadata, contributors, the Maven POM file, and more. (566 words)
- [Maven Cookbook Foreword | Sonatype Guide](/content/resources/guides/maven-cookbook/foreword/index.html): Explore the Maven Cookbook, featuring insights into development with Apache Maven. (365 words)
- [Maven Central: com.norconex.commons:norconex-commons-lang:1.14.0](/content/central/artifact/com-norconex-commons/norconex-commons-lang/1-14-0.html): Discover norconex-commons-lang in the com.norconex.commons namespace. Explore metadata, contributors, the Maven POM file, and more. (555 words)
- [org.apache.servicemix.bundles/org.apache.s… | Sonatype Guide](/content/guide/component/maven/org-apache-servicemix-bundles-org-apache-servicemix-bundles-xerces/2-9-1_3.html): Comprehensive security analysis for org.apache.servicemix.bundles/org.apache.servicemix.bundles.xerces version 2.9.1_3. Max vulnerability severity: 9.8 CVSS. L… (56 words)
- [ca.islandora.alpaca/islandora-indexing-tri… | Sonatype Guide](/content/guide/component/maven/ca-islandora-alpaca-islandora-indexing-triplestore/1-0-5.html): Comprehensive security analysis for ca.islandora.alpaca/islandora-indexing-triplestore version 1.0.5. No known vulnerabilities. License: MIT. View dependencies… (47 words)
- [Maven Central: org.opencastproject:opencast-transcription-service-microsoft-azure:15.11](/content/central/artifact/org-opencastproject/opencast-transcription-service-microsoft-azure/15-11.html): Discover opencast-transcription-service-microsoft-azure in the org.opencastproject namespace. Explore metadata, contributors, the Maven POM file, and more. (337 words)
- [org.exist-db.thirdparty.xerces/xercesImpl… | Sonatype Guide](/content/guide/component/maven/org-exist-db-thirdparty-xerces-3axercesimpl/2-12-0.html): Comprehensive security analysis for org.exist-db.thirdparty.xerces/xercesImpl version 2.12.0. Max vulnerability severity: 9.8 CVSS. License: Apache-2.0. View d… (42 words)
- [sonatype-2022-1142 | Security Details | Sonatype Guide](/content/guide/vulnerability/sonatype-2022-1142/index.html): Technical security analysis for sonatype-2022-1142. CVSS 10.0 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (62 words)
- [org.apache.servicemix.bundles/org.apache.s… | Sonatype Guide](/content/guide/component/maven/org-apache-servicemix-bundles-org-apache-servicemix-bundles-xerces/2-9-1_1.html): Comprehensive security analysis for org.apache.servicemix.bundles/org.apache.servicemix.bundles.xerces version 2.9.1_1. Max vulnerability severity: 9.8 CVSS. L… (38 words)
- [org.exist-db.thirdparty.xerces/xercesImpl… | Sonatype Guide](/content/guide/component/maven/org-exist-db-thirdparty-xerces-3axercesimpl/2-12-0/vulnerabilities/index.html): Security vulnerabilities and CVE data for org.exist-db.thirdparty.xerces/xercesImpl version 2.12.0. View CVSS scores, exploit details, and remediation guidance… (183 words)
- [Maven Central: org.apache.servicemix.bundles:org.apache.servicemix.bundles.xerces:2.9.1_1](/content/central/artifact/org-apache-servicemix-bundles/org-apache-servicemix-bundles-xerces/2-9-1_1.html): Discover org.apache.servicemix.bundles.xerces in the org.apache.servicemix.bundles namespace. Explore metadata, contributors, the Maven POM file, and more. (164 words)
- [2025 Elevate Awards | Sonatype ](/content/elevate-awards/index.html): The Elevate Awards celebrate leaders, organizations, and teams of bold innovators delivering remarkable results across the SDLC. (309 words)
- [Maven Central: org.apache.servicemix.bundles:org.apache.servicemix.bundles.xerces:2.9.1_3](/content/central/artifact/org-apache-servicemix-bundles/org-apache-servicemix-bundles-xerces/2-9-1_3.html): Discover org.apache.servicemix.bundles.xerces in the org.apache.servicemix.bundles namespace. Explore metadata, contributors, the Maven POM file, and more. (171 words)
- [Maven Central: org.apache.servicemix.bundles:org.apache.servicemix.bundles.xerces:2.9.1_4](/content/central/artifact/org-apache-servicemix-bundles/org-apache-servicemix-bundles-xerces/2-9-1_4.html): Discover org.apache.servicemix.bundles.xerces in the org.apache.servicemix.bundles namespace. Explore metadata, contributors, the Maven POM file, and more. (167 words)
- [Sonatype DepShield Now Protects npm Projects](/content/blog/sonatype-depshield-now-protects-npm-projects/index.html): Sonatype DepShield now supports npm, helping developers quickly identify and fix vulnerabilities in Node.js projects using the OSS Index database.  (307 words)
- [Maven Central: org.opencastproject:opencast-transcription-service-microsoft-azure:15.3](/content/central/artifact/org-opencastproject/opencast-transcription-service-microsoft-azure/15-3.html): Discover opencast-transcription-service-microsoft-azure in the org.opencastproject namespace. Explore metadata, contributors, the Maven POM file, and more. (346 words)
- [Maven Central: org.fryske-akademy:teidictionaries:5.7](/content/central/artifact/org-fryske-akademy/teidictionaries/5-7.html): Discover teidictionaries in the org.fryske-akademy namespace. Explore metadata, contributors, the Maven POM file, and more. (540 words)
- [Maven Central: org.opencastproject:opencast-transcription-service-microsoft-azure:15.5](/content/central/artifact/org-opencastproject/opencast-transcription-service-microsoft-azure/15-5.html): Discover opencast-transcription-service-microsoft-azure in the org.opencastproject namespace. Explore metadata, contributors, the Maven POM file, and more. (346 words)
- [org.apache.servicemix.bundles/org.apache.s… | Sonatype Guide](/content/guide/component/maven/org-apache-servicemix-bundles-org-apache-servicemix-bundles-xerces/2-9-1_4.html): Comprehensive security analysis for org.apache.servicemix.bundles/org.apache.servicemix.bundles.xerces version 2.9.1_4. Max vulnerability severity: 9.8 CVSS. L… (59 words)
- [Maven Central: activemq:activemq:3.2.3](/content/central/artifact/activemq/activemq/3-2-3.html): Discover activemq in the activemq namespace. Explore metadata, contributors, the Maven POM file, and more. (489 words)
- [Maven Central: com.norconex.commons:norconex-commons-lang:1.13.0](/content/central/artifact/com-norconex-commons/norconex-commons-lang/1-13-0.html): Discover norconex-commons-lang in the com.norconex.commons namespace. Explore metadata, contributors, the Maven POM file, and more. (563 words)
- [Get a Quote of Sonatype Nexus Repository + Firewall](/content/products/sonatype-nexus-repository/premium-quote/index.html): Request a quote for Sonatype Nexus Repository and Repository Firewall to enhance your DevOps processes with advanced malware protection. (258 words)
- [Maven Central: org.opencastproject:opencast-transcription-service-microsoft-azure:15.2](/content/central/artifact/org-opencastproject/opencast-transcription-service-microsoft-azure/15-2.html): Discover opencast-transcription-service-microsoft-azure in the org.opencastproject namespace. Explore metadata, contributors, the Maven POM file, and more. (348 words)
- [Maven Central: xerces:xercesImpl:2.6.2-jaxb-1.0.6](/content/central/artifact/xerces/xercesimpl/2-6-2-jaxb-1-0-6.html): Discover xercesImpl in the xerces namespace. Explore metadata, contributors, the Maven POM file, and more. (69 words)
- [org.exist-db.thirdparty.xerces/xercesImpl… | Sonatype Guide](/content/guide/component/maven/org-exist-db-thirdparty-xerces-3axercesimpl/2-12-1/vulnerabilities/index.html): Security vulnerabilities and CVE data for org.exist-db.thirdparty.xerces/xercesImpl version 2.12.1. View CVSS scores, exploit details, and remediation guidance… (165 words)
- [sonatype-2020-1097 | Security Details | Sonatype Guide](/content/guide/vulnerability/sonatype-2020-1097/index.html): Technical security analysis for sonatype-2020-1097. CVSS 10.0 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (61 words)
- [org.apache.servicemix.bundles/org.apache.s… | Sonatype Guide](/content/guide/component/maven/org-apache-servicemix-bundles-org-apache-servicemix-bundles-xerces/2-12-0_1.html): Comprehensive security analysis for org.apache.servicemix.bundles/org.apache.servicemix.bundles.xerces version 2.12.0_1. Max vulnerability severity: 9.8 CVSS.… (52 words)
- [org.apache.servicemix.bundles/org.apache.s… | Sonatype Guide](/content/guide/component/maven/org-apache-servicemix-bundles-org-apache-servicemix-bundles-xerces/2-9-1_5.html): Comprehensive security analysis for org.apache.servicemix.bundles/org.apache.servicemix.bundles.xerces version 2.9.1_5. Max vulnerability severity: 9.8 CVSS. L… (43 words)
- [Optimizing Disk Space for Nexus Repository Manager](/content/blog/2012/01/sizing-nexus-how-much-space-do-you-need/index.html): Learn how to properly size your Nexus repository storage to ensure smooth operations and avoid running out of space during critical releases. (618 words)
- [xerces/xercesImpl 2.7.1 | Sonatype Guide](/content/guide/component/maven/xerces-xercesimpl/2-7-1.html): Comprehensive security analysis for xerces/xercesImpl version 2.7.1. Max vulnerability severity: 9.8 CVSS. License: Not Declared. View dependencies, vulnerabil… (55 words)
- [hubfs/1-2025_website-assets/resource-20files/open-source-malware-best-practices-guide-pdf.html](/content/hubfs/1-2025_website-assets/resource-20files/open-source-malware-best-practices-guide-pdf.html) (763 words)
- [Maven Central: xerces:xercesImpl:2.12.1](/content/central/artifact/xerces/xercesimpl/2-12-1.html): Discover xercesImpl in the xerces namespace. Explore metadata, contributors, the Maven POM file, and more. (428 words)
- [org.exist-db.thirdparty.xerces/xercesImpl… | Sonatype Guide](/content/guide/component/maven/org-exist-db-thirdparty-xerces-3axercesimpl/2-12-2.html): Comprehensive security analysis for org.exist-db.thirdparty.xerces/xercesImpl version 2.12.2. Max vulnerability severity: 9.8 CVSS. License: Apache-2.0. View d… (29 words)
- [org.apache.servicemix.bundles/org.apache.s… | Sonatype Guide](/content/guide/component/maven/org-apache-servicemix-bundles-org-apache-servicemix-bundles-xerces/2-11-0_1.html): Comprehensive security analysis for org.apache.servicemix.bundles/org.apache.servicemix.bundles.xerces version 2.11.0_1. Max vulnerability severity: 9.8 CVSS.… (43 words)
- [Maven Central: xerces:xercesImpl:2.8.1](/content/central/artifact/xerces/xercesimpl/2-8-1.html): Discover xercesImpl in the xerces namespace. Explore metadata, contributors, the Maven POM file, and more. (202 words)
- [xerces/xercesImpl 2.8.1 | Sonatype Guide](/content/guide/component/maven/xerces-xercesimpl/2-8-1.html): Comprehensive security analysis for xerces/xercesImpl version 2.8.1. Max vulnerability severity: 9.8 CVSS. License: Apache-2.0. View dependencies, vulnerabilit… (47 words)
- [xerces/xercesImpl 2.6.2 | Sonatype Guide](/content/guide/component/maven/xerces-xercesimpl/2-6-2.html): Comprehensive security analysis for xerces/xercesImpl version 2.6.2. Max vulnerability severity: 7.5 CVSS. License: Apache-1.1. View dependencies, vulnerabilit… (36 words)
- [xerces/xercesImpl 2.6.2-jaxb-1.0.6 | Sonatype Guide](/content/guide/component/maven/xerces-xercesimpl/2-6-2-jaxb-1-0-6.html): Comprehensive security analysis for xerces/xercesImpl version 2.6.2-jaxb-1.0.6. Max vulnerability severity: 7.5 CVSS. License: Not Declared. View dependencies,… (55 words)
- [Maven Central: xerces:xercesImpl:2.6.2](/content/central/artifact/xerces/xercesimpl/2-6-2.html): Discover xercesImpl in the xerces namespace. Explore metadata, contributors, the Maven POM file, and more. (48 words)
- [Maven Central: org.opencastproject:opencast-transcription-service-microsoft-azure:15.0](/content/central/artifact/org-opencastproject/opencast-transcription-service-microsoft-azure/15-0.html): Discover opencast-transcription-service-microsoft-azure in the org.opencastproject namespace. Explore metadata, contributors, the Maven POM file, and more. (357 words)
- [ai.platon.pulsar/pulsar-all 1.10.14 | Sonatype Guide](/content/guide/component/maven/ai-platon-pulsar-pulsar-all/1-10-14.html): Comprehensive security analysis for ai.platon.pulsar/pulsar-all version 1.10.14. No known vulnerabilities. License: Apache-2.0. View dependencies, vulnerabilit… (50 words)
- [ai.platon.pulsar/pulsar-all 1.10.17 | Sonatype Guide](/content/guide/component/maven/ai-platon-pulsar-pulsar-all/1-10-17.html): Comprehensive security analysis for ai.platon.pulsar/pulsar-all version 1.10.17. No known vulnerabilities. License: Apache-2.0. View dependencies, vulnerabilit… (58 words)
- [xerces/xercesImpl 2.8.0 | Sonatype Guide](/content/guide/component/maven/xerces-xercesimpl/2-8-0.html): Comprehensive security analysis for xerces/xercesImpl version 2.8.0. Max vulnerability severity: 9.8 CVSS. License: Apache-2.0. View dependencies, vulnerabilit… (37 words)
- [Maven Central: org.opencastproject:opencast-transcription-service-microsoft-azure:15.12](/content/central/artifact/org-opencastproject/opencast-transcription-service-microsoft-azure/15-12.html): Discover opencast-transcription-service-microsoft-azure in the org.opencastproject namespace. Explore metadata, contributors, the Maven POM file, and more. (340 words)
- [xerces/xercesImpl 2.9.0 | Sonatype Guide](/content/guide/component/maven/xerces-xercesimpl/2-9-0.html): Comprehensive security analysis for xerces/xercesImpl version 2.9.0. Max vulnerability severity: 9.8 CVSS. License: Apache-2.0. View dependencies, vulnerabilit… (53 words)
- [Maven Central: org.opencastproject:opencast-transcription-service-microsoft-azure:15.10](/content/central/artifact/org-opencastproject/opencast-transcription-service-microsoft-azure/15-10.html): Discover opencast-transcription-service-microsoft-azure in the org.opencastproject namespace. Explore metadata, contributors, the Maven POM file, and more. (337 words)
- [Maven Central: com.agilejava.docbkx:docbkx-maven-base:2.0.16](/content/central/artifact/com-agilejava-docbkx/docbkx-maven-base/2-0-16.html): Discover docbkx-maven-base in the com.agilejava.docbkx namespace. Explore metadata, contributors, the Maven POM file, and more. (188 words)
- [ai.platon.pulsar/pulsar-all 1.10.13 | Sonatype Guide](/content/guide/component/maven/ai-platon-pulsar-pulsar-all/1-10-13.html): Comprehensive security analysis for ai.platon.pulsar/pulsar-all version 1.10.13. No known vulnerabilities. License: Apache-2.0. View dependencies, vulnerabilit… (51 words)
- [org.apache.servicemix.bundles/org.apache.s… | Sonatype Guide](/content/guide/component/maven/org-apache-servicemix-bundles-org-apache-servicemix-bundles-xerces/2-12-1_1.html): Comprehensive security analysis for org.apache.servicemix.bundles/org.apache.servicemix.bundles.xerces version 2.12.1_1. Max vulnerability severity: 9.8 CVSS.… (49 words)
- [org.exist-db.thirdparty.xerces/xercesImpl… | Sonatype Guide](/content/guide/component/maven/org-exist-db-thirdparty-xerces-3axercesimpl/2-12-1.html): Comprehensive security analysis for org.exist-db.thirdparty.xerces/xercesImpl version 2.12.1. Max vulnerability severity: 9.8 CVSS. License: Apache-2.0. View d… (44 words)
- [Maven Central: ai.platon.pulsar:pulsar-all:1.10.16](/content/central/artifact/ai-platon-pulsar/pulsar-all/1-10-16.html): Discover pulsar-all in the ai.platon.pulsar namespace. Explore metadata, contributors, the Maven POM file, and more. (4,470 words)
- [Maven Central: ai.platon.pulsar](/content/central/namespace/ai-platon-pulsar.html): Explore the collection of packages in ai.platon.pulsar (335 words)
- [xerces/xercesImpl 2.10.0 | Sonatype Guide](/content/guide/component/maven/xerces-xercesimpl/2-10-0.html): Comprehensive security analysis for xerces/xercesImpl version 2.10.0. Max vulnerability severity: 9.8 CVSS. License: Apache-2.0. View dependencies, vulnerabili… (41 words)
- [Maven Central: xerces:xercesImpl:2.12.0](/content/central/artifact/xerces/xercesimpl/2-12-0.html): Discover xercesImpl in the xerces namespace. Explore metadata, contributors, the Maven POM file, and more. (414 words)
- [ai.platon.pulsar/pulsar-all 1.10.12 | Sonatype Guide](/content/guide/component/maven/ai-platon-pulsar-pulsar-all/1-10-12.html): Comprehensive security analysis for ai.platon.pulsar/pulsar-all version 1.10.12. No known vulnerabilities. License: Apache-2.0. View dependencies, vulnerabilit… (55 words)
- [Maven Central: xerces:xercesImpl:2.8.0](/content/central/artifact/xerces/xercesimpl/2-8-0.html): Discover xercesImpl in the xerces namespace. Explore metadata, contributors, the Maven POM file, and more. (172 words)
- [org.apache.servicemix.bundles/org.apache.s… | Sonatype Guide](/content/guide/component/maven/org-apache-servicemix-bundles-org-apache-servicemix-bundles-xerces/2-10-0_1.html): Comprehensive security analysis for org.apache.servicemix.bundles/org.apache.servicemix.bundles.xerces version 2.10.0_1. Max vulnerability severity: 9.8 CVSS.… (24 words)
- [Maven Central: org.opencastproject:opencast-transcription-service-microsoft-azure:15.1](/content/central/artifact/org-opencastproject/opencast-transcription-service-microsoft-azure/15-1.html): Discover opencast-transcription-service-microsoft-azure in the org.opencastproject namespace. Explore metadata, contributors, the Maven POM file, and more. (348 words)
- [Maven Central: org.opencastproject](/content/central/namespace/org-opencastproject.html): Explore the collection of packages in org.opencastproject (250 words)
- [org.opencastproject/opencast-transcription… | Sonatype Guide](/content/guide/component/maven/org-opencastproject-opencast-transcription-service-microsoft-azure/15-4.html): Comprehensive security analysis for org.opencastproject/opencast-transcription-service-microsoft-azure version 15.4. No known vulnerabilities. License: ECL-2.0… (49 words)
- [ai.platon.pulsar/pulsar-all 1.10.11 | Sonatype Guide](/content/guide/component/maven/ai-platon-pulsar-pulsar-all/1-10-11.html): Comprehensive security analysis for ai.platon.pulsar/pulsar-all version 1.10.11. No known vulnerabilities. License: Apache-2.0. View dependencies, vulnerabilit… (44 words)
- [ai.platon.pulsar/pulsar-all 1.10.10 | Sonatype Guide](/content/guide/component/maven/ai-platon-pulsar-pulsar-all/1-10-10.html): Comprehensive security analysis for ai.platon.pulsar/pulsar-all version 1.10.10. No known vulnerabilities. License: Apache-2.0. View dependencies, vulnerabilit… (43 words)
- [Maven Central: org.eclipse.birt.runtime.3_7_1:org.w3c.css.sac](/content/central/artifact/org-eclipse-birt-runtime-3_7_1/org-w3c-css-sac/versions/index.html): Discover org.w3c.css.sac in the org.eclipse.birt.runtime.3_7_1 namespace. Explore metadata, contributors, the Maven POM file, and more. (29 words)
- [org.opencastproject/opencast-transcription… | Sonatype Guide](/content/guide/component/maven/org-opencastproject-opencast-transcription-service-microsoft-azure/15-5.html): Comprehensive security analysis for org.opencastproject/opencast-transcription-service-microsoft-azure version 15.5. No known vulnerabilities. License: ECL-2.0… (40 words)
- [org.opencastproject/opencast-transcription… | Sonatype Guide](/content/guide/component/maven/org-opencastproject-opencast-transcription-service-microsoft-azure/15-3.html): Comprehensive security analysis for org.opencastproject/opencast-transcription-service-microsoft-azure version 15.3. No known vulnerabilities. License: ECL-2.0… (53 words)
- [ai.platon.pulsar/pulsar-all 1.10.1 | Sonatype Guide](/content/guide/component/maven/ai-platon-pulsar-pulsar-all/1-10-1.html): Comprehensive security analysis for ai.platon.pulsar/pulsar-all version 1.10.1. No known vulnerabilities. License: Apache-2.0. View dependencies, vulnerabiliti… (37 words)
- [xerces/xercesImpl 2.12.0 | Sonatype Guide](/content/guide/component/maven/xerces-xercesimpl/2-12-0.html): Comprehensive security analysis for xerces/xercesImpl version 2.12.0. Max vulnerability severity: 9.8 CVSS. License: Apache-2.0. View dependencies, vulnerabili… (43 words)
- [Maven Central: ai.platon.pulsar:pulsar-all:1.10.11](/content/central/artifact/ai-platon-pulsar/pulsar-all/1-10-11.html): Discover pulsar-all in the ai.platon.pulsar namespace. Explore metadata, contributors, the Maven POM file, and more. (4,470 words)
- [org.opencastproject/opencast-transcription… | Sonatype Guide](/content/guide/component/maven/org-opencastproject-opencast-transcription-service-microsoft-azure/15-2.html): Comprehensive security analysis for org.opencastproject/opencast-transcription-service-microsoft-azure version 15.2. No known vulnerabilities. License: ECL-2.0… (46 words)
- [Maven Central: org.opengis.cite.teamengine:teamengine-web](/content/central/artifact/org-opengis-cite-teamengine/teamengine-web/dependents/index.html): Discover teamengine-web in the org.opengis.cite.teamengine namespace. Explore metadata, contributors, the Maven POM file, and more. (16 words)
- [ai.platon.pulsar/pulsar-all 1.10.0 | Sonatype Guide](/content/guide/component/maven/ai-platon-pulsar-pulsar-all/1-10-0.html): Comprehensive security analysis for ai.platon.pulsar/pulsar-all version 1.10.0. No known vulnerabilities. License: Apache-2.0. View dependencies, vulnerabiliti… (44 words)
- [org.opencastproject/opencast-transcription… | Sonatype Guide](/content/guide/component/maven/org-opencastproject-opencast-transcription-service-microsoft-azure/15-13.html): Comprehensive security analysis for org.opencastproject/opencast-transcription-service-microsoft-azure version 15.13. No known vulnerabilities. License: ECL-2.… (58 words)
- [Contributing to Sonatype Community Projects | Sonatype Open Source Community Handbook](/content/contribute/docs/_print/index.html): Engaging with Sonatype Community Projects, Wanting to engage with a Sonatype Community Project? This area documents the different ways of engaging with and the standards we expect our Community Projects to operate to. (28 words)
- [Maven Central: xerces:xercesImpl:2.9.0](/content/central/artifact/xerces/xercesimpl/2-9-0.html): Discover xercesImpl in the xerces namespace. Explore metadata, contributors, the Maven POM file, and more. (167 words)
- [Maven Central: xerces:xercesImpl:2.9.1](/content/central/artifact/xerces/xercesimpl/2-9-1.html): Discover xercesImpl in the xerces namespace. Explore metadata, contributors, the Maven POM file, and more. (181 words)
- [org.opencastproject/opencast-transcription… | Sonatype Guide](/content/guide/component/maven/org-opencastproject-opencast-transcription-service-microsoft-azure/15-12.html): Comprehensive security analysis for org.opencastproject/opencast-transcription-service-microsoft-azure version 15.12. No known vulnerabilities. License: ECL-2.… (55 words)
- [ai.platon.pulsar/pulsar-all 1.10.16 | Sonatype Guide](/content/guide/component/maven/ai-platon-pulsar-pulsar-all/1-10-16.html): Comprehensive security analysis for ai.platon.pulsar/pulsar-all version 1.10.16. No known vulnerabilities. License: Apache-2.0. View dependencies, vulnerabilit… (40 words)
- [xerces/xercesImpl 2.12.1 | Sonatype Guide](/content/guide/component/maven/xerces-xercesimpl/2-12-1.html): Comprehensive security analysis for xerces/xercesImpl version 2.12.1. Max vulnerability severity: 9.8 CVSS. License: Apache-2.0. View dependencies, vulnerabili… (37 words)
- [xerces/xercesImpl 2.11.0 | Sonatype Guide](/content/guide/component/maven/xerces-xercesimpl/2-11-0.html): Comprehensive security analysis for xerces/xercesImpl version 2.11.0. Max vulnerability severity: 9.8 CVSS. License: Apache-2.0. View dependencies, vulnerabili… (44 words)
- [Maven Central: org.fryske-akademy:teidictionaries:5.9](/content/central/artifact/org-fryske-akademy/teidictionaries/5-9.html): Discover teidictionaries in the org.fryske-akademy namespace. Explore metadata, contributors, the Maven POM file, and more. (548 words)
- [Maven Central: org.opengis.cite.eclipse.webtools.sse:org.eclipse.wst.xml.xpath2.processor](/content/central/artifact/org-opengis-cite-eclipse-webtools-sse/org-eclipse-wst-xml-xpath2-processor/dependents/index.html): Discover org.eclipse.wst.xml.xpath2.processor in the org.opengis.cite.eclipse.webtools.sse namespace. Explore metadata, contributors, the Maven POM file, and more. (376 words)
- [Maven Central: xerces:xercesImpl:2.7.1](/content/central/artifact/xerces/xercesimpl/2-7-1.html): Discover xercesImpl in the xerces namespace. Explore metadata, contributors, the Maven POM file, and more. (64 words)
- [org.opencastproject/opencast-transcription… | Sonatype Guide](/content/guide/component/maven/org-opencastproject-opencast-transcription-service-microsoft-azure/15-11.html): Comprehensive security analysis for org.opencastproject/opencast-transcription-service-microsoft-azure version 15.11. No known vulnerabilities. License: ECL-2.… (61 words)
- [org.opengis.cite.teamengine/teamengine-cor… | Sonatype Guide](/content/guide/component/maven/org-opengis-cite-teamengine-teamengine-core/4-5.html): Comprehensive security analysis for org.opengis.cite.teamengine/teamengine-core version 4.5. No known vulnerabilities. License: Apache-2.0. View dependencies,… (49 words)
- [Maven Central: org.opengis.cite.teamengine](/content/central/namespace/org-opengis-cite-teamengine.html): Explore the collection of packages in org.opengis.cite.teamengine (373 words)
- [Maven Central: com.agilejava.docbkx:docbkx-maven-base](/content/central/artifact/com-agilejava-docbkx/docbkx-maven-base/versions/index.html): Discover docbkx-maven-base in the com.agilejava.docbkx namespace. Explore metadata, contributors, the Maven POM file, and more. (172 words)
- [org.opencastproject/opencast-transcription… | Sonatype Guide](/content/guide/component/maven/org-opencastproject-opencast-transcription-service-microsoft-azure/15-10.html): Comprehensive security analysis for org.opencastproject/opencast-transcription-service-microsoft-azure version 15.10. No known vulnerabilities. License: ECL-2.… (50 words)
- [Maven Central: com.norconex.commons:norconex-commons-lang](/content/central/artifact/com-norconex-commons/norconex-commons-lang/versions/index.html): Discover norconex-commons-lang in the com.norconex.commons namespace. Explore metadata, contributors, the Maven POM file, and more. (171 words)
- [org.opencastproject/opencast-transcription… | Sonatype Guide](/content/guide/component/maven/org-opencastproject-opencast-transcription-service-microsoft-azure/15-0.html): Comprehensive security analysis for org.opencastproject/opencast-transcription-service-microsoft-azure version 15.0. No known vulnerabilities. License: ECL-2.0… (52 words)
- [org.opencastproject/opencast-transcription… | Sonatype Guide](/content/guide/component/maven/org-opencastproject-opencast-transcription-service-microsoft-azure/15-1.html): Comprehensive security analysis for org.opencastproject/opencast-transcription-service-microsoft-azure version 15.1. No known vulnerabilities. License: ECL-2.0… (55 words)
- [Maven Central: org.jaxsb:runtime](/content/central/artifact/org-jaxsb/runtime/dependents/index.html): Discover runtime in the org.jaxsb namespace. Explore metadata, contributors, the Maven POM file, and more. (491 words)
- [Maven Central: com.agilejava.docbkx:docbkx-maven-base:2.0.15](/content/central/artifact/com-agilejava-docbkx/docbkx-maven-base/2-0-15.html): Discover docbkx-maven-base in the com.agilejava.docbkx namespace. Explore metadata, contributors, the Maven POM file, and more. (180 words)
- [Maven Central: ai.platon.pulsar:pulsar-all:1.10.17](/content/central/artifact/ai-platon-pulsar/pulsar-all/1-10-17.html): Discover pulsar-all in the ai.platon.pulsar namespace. Explore metadata, contributors, the Maven POM file, and more. (4,474 words)
- [Maven Central: com.norconex.commons:norconex-commons-lang:1.15.2](/content/central/artifact/com-norconex-commons/norconex-commons-lang/1-15-2.html): Discover norconex-commons-lang in the com.norconex.commons namespace. Explore metadata, contributors, the Maven POM file, and more. (302 words)
- [Maven Central: org.fryske-akademy:teidictionaries:5.8](/content/central/artifact/org-fryske-akademy/teidictionaries/5-8.html): Discover teidictionaries in the org.fryske-akademy namespace. Explore metadata, contributors, the Maven POM file, and more. (545 words)
- [Maven Central: ai.platon.pulsar:pulsar-all:1.10.15](/content/central/artifact/ai-platon-pulsar/pulsar-all/1-10-15.html): Discover pulsar-all in the ai.platon.pulsar namespace. Explore metadata, contributors, the Maven POM file, and more. (4,474 words)
- [Maven Central: ai.platon.pulsar:pulsar-all:1.10.14](/content/central/artifact/ai-platon-pulsar/pulsar-all/1-10-14.html): Discover pulsar-all in the ai.platon.pulsar namespace. Explore metadata, contributors, the Maven POM file, and more. (4,474 words)
- [Maven Central: com.agilejava.docbkx:docbkx-maven-base:2.0.14](/content/central/artifact/com-agilejava-docbkx/docbkx-maven-base/2-0-14.html): Discover docbkx-maven-base in the com.agilejava.docbkx namespace. Explore metadata, contributors, the Maven POM file, and more. (173 words)
- [Maven Central: activemq:activemq:3.2](/content/central/artifact/activemq/activemq/3-2.html): Discover activemq in the activemq namespace. Explore metadata, contributors, the Maven POM file, and more. (251 words)
- [Maven Central: ai.platon.pulsar:pulsar-all:1.10.13](/content/central/artifact/ai-platon-pulsar/pulsar-all/1-10-13.html): Discover pulsar-all in the ai.platon.pulsar namespace. Explore metadata, contributors, the Maven POM file, and more. (4,474 words)
- [Maven Central: org.opengis.cite.teamengine:teamengine-core:4.5](/content/central/artifact/org-opengis-cite-teamengine/teamengine-core/4-5.html): Discover teamengine-core in the org.opengis.cite.teamengine namespace. Explore metadata, contributors, the Maven POM file, and more. (194 words)
- [Maven Central: ai.platon.pulsar:pulsar-all:1.10.12](/content/central/artifact/ai-platon-pulsar/pulsar-all/1-10-12.html): Discover pulsar-all in the ai.platon.pulsar namespace. Explore metadata, contributors, the Maven POM file, and more. (4,474 words)
- [Maven Central: com.agilejava.docbkx:docbkx-maven-base:2.0.13](/content/central/artifact/com-agilejava-docbkx/docbkx-maven-base/2-0-13.html): Discover docbkx-maven-base in the com.agilejava.docbkx namespace. Explore metadata, contributors, the Maven POM file, and more. (174 words)
- [com.agilejava.docbkx/docbkx-maven-base 2.0… | Sonatype Guide](/content/guide/component/maven/com-agilejava-docbkx-docbkx-maven-base/2-0-13.html): Comprehensive security analysis for com.agilejava.docbkx/docbkx-maven-base version 2.0.13. No known vulnerabilities. License: Apache-2.0. View dependencies, vu… (58 words)
- [Maven Central: io.github.nova-wallet.substrate-sdk-android:core:2.11.5](/content/central/artifact/io-github-nova-wallet-substrate-sdk-android/core/2-11-5.html): Discover core in the io.github.nova-wallet.substrate-sdk-android namespace. Explore metadata, contributors, the Maven POM file, and more. (234 words)
- [org.opengis.cite.eclipse.webtools.sse/org.… | Sonatype Guide](/content/guide/component/maven/org-opengis-cite-eclipse-webtools-sse-org-eclipse-wst-xml-xpath2-processor/1-1-5-738bb7b85d.html): Comprehensive security analysis for org.opengis.cite.eclipse.webtools.sse/org.eclipse.wst.xml.xpath2.processor version 1.1.5-738bb7b85d. No known vulnerabiliti… (18 words)
- [com.agilejava.docbkx/docbkx-maven-base 2.0… | Sonatype Guide](/content/guide/component/maven/com-agilejava-docbkx-docbkx-maven-base/2-0-15.html): Comprehensive security analysis for com.agilejava.docbkx/docbkx-maven-base version 2.0.15. No known vulnerabilities. License: Apache-2.0. View dependencies, vu… (30 words)
- [Page Not Found - Sonatype Community](/content/community/u/bog0alt/index.html) (22 words)
- [Maven Central: ai.platon.pulsar:pulsar-all:1.10.10](/content/central/artifact/ai-platon-pulsar/pulsar-all/1-10-10.html): Discover pulsar-all in the ai.platon.pulsar namespace. Explore metadata, contributors, the Maven POM file, and more. (4,474 words)
- [@fairwords/websocket 1.0.36 | Vulnerabilit… | Sonatype Guide](/content/guide/component/npm/40fairwords-2fwebsocket/1-0-36/vulnerabilities/index.html): Security vulnerabilities and CVE data for @fairwords/websocket version 1.0.36. View CVSS scores, exploit details, and remediation guidance for this npm package. (80 words)
- [org.apache.servicemix.bundles/org.apache.s… | Sonatype Guide](/content/guide/component/maven/org-apache-servicemix-bundles-3aorg-apache-servicemix-bundles-xerces/2-12-2_1/versions/index.html): Browse all available versions of org.apache.servicemix.bundles/org.apache.servicemix.bundles.xerces. Compare version 2.12.2_1 with other releases, view securit… (95 words)
- [Maven Central: org.fryske-akademy:teidictionaries:5.1](/content/central/artifact/org-fryske-akademy/teidictionaries/5-1.html): Discover teidictionaries in the org.fryske-akademy namespace. Explore metadata, contributors, the Maven POM file, and more. (498 words)
- [Maven Central: com.agilejava.docbkx:docbkx-maven-base:2.0.11](/content/central/artifact/com-agilejava-docbkx/docbkx-maven-base/2-0-11.html): Discover docbkx-maven-base in the com.agilejava.docbkx namespace. Explore metadata, contributors, the Maven POM file, and more. (171 words)
- [Maven Central: com.agilejava.docbkx:docbkx-maven-base:2.0.12](/content/central/artifact/com-agilejava-docbkx/docbkx-maven-base/2-0-12.html): Discover docbkx-maven-base in the com.agilejava.docbkx namespace. Explore metadata, contributors, the Maven POM file, and more. (169 words)
- [com.agilejava.docbkx/docbkx-maven-base 2.0… | Sonatype Guide](/content/guide/component/maven/com-agilejava-docbkx-docbkx-maven-base/2-0-11.html): Comprehensive security analysis for com.agilejava.docbkx/docbkx-maven-base version 2.0.11. No known vulnerabilities. License: Apache-2.0. View dependencies, vu… (55 words)
- [com.agilejava.docbkx/docbkx-maven-base 2.0… | Sonatype Guide](/content/guide/component/maven/com-agilejava-docbkx-docbkx-maven-base/2-0-14.html): Comprehensive security analysis for com.agilejava.docbkx/docbkx-maven-base version 2.0.14. No known vulnerabilities. License: Apache-2.0. View dependencies, vu… (26 words)
- [Maven Central: io.github.nova-wallet.substrate-sdk-android:core:2.11.1](/content/central/artifact/io-github-nova-wallet-substrate-sdk-android/core/2-11-1.html): Discover core in the io.github.nova-wallet.substrate-sdk-android namespace. Explore metadata, contributors, the Maven POM file, and more. (239 words)
- [Maven Central: io.github.nova-wallet.substrate-sdk-android:core:2.11.4](/content/central/artifact/io-github-nova-wallet-substrate-sdk-android/core/2-11-4.html): Discover core in the io.github.nova-wallet.substrate-sdk-android namespace. Explore metadata, contributors, the Maven POM file, and more. (234 words)
- [@fairwords/websocket 1.0.37 | Vulnerabilit… | Sonatype Guide](/content/guide/component/npm/40fairwords-2fwebsocket/1-0-37/vulnerabilities/index.html): Security vulnerabilities and CVE data for @fairwords/websocket version 1.0.37. View CVSS scores, exploit details, and remediation guidance for this npm package. (106 words)
- [Maven Central: ai.platon.pulsar:pulsar-all:1.10.1](/content/central/artifact/ai-platon-pulsar/pulsar-all/1-10-1.html): Discover pulsar-all in the ai.platon.pulsar namespace. Explore metadata, contributors, the Maven POM file, and more. (4,432 words)
- [Maven Central: ai.platon.pulsar:pulsar-all](/content/central/artifact/ai-platon-pulsar/pulsar-all/dependents/index.html): Discover pulsar-all in the ai.platon.pulsar namespace. Explore metadata, contributors, the Maven POM file, and more. (20 words)
- [Maven Central: activemq](/content/central/namespace/activemq/index.html): Explore the collection of packages in activemq (251 words)
- [org.jaxsb/runtime 2.1.4 | Sonatype Guide](/content/guide/component/maven/org-jaxsb-runtime/2-1-4.html): Comprehensive security analysis for org.jaxsb/runtime version 2.1.4. No known vulnerabilities. License: MIT. View dependencies, vulnerabilities, and detailed p… (56 words)
- [org.jaxsb/runtime 2.1.5 | Sonatype Guide](/content/guide/component/maven/org-jaxsb-runtime/2-1-5.html): Comprehensive security analysis for org.jaxsb/runtime version 2.1.5. No known vulnerabilities. License: MIT. View dependencies, vulnerabilities, and detailed p… (53 words)
- [sonatype-2026-003508 | Components Impacted | Sonatype Guide](/content/guide/vulnerability/sonatype-2026-003508/components-impacted/index.html): View all components affected by sonatype-2026-003508 (CVSS 8.7). Identify vulnerable packages in your dependencies and find remediation guidance. (128 words)
- [activemq/activemq 3.2.4 | Sonatype Guide](/content/guide/component/maven/activemq-activemq/3-2-4.html): Comprehensive security analysis for activemq/activemq version 3.2.4. Max vulnerability severity: 9.8 CVSS. License: Apache-2.0. View dependencies, vulnerabilit… (41 words)
- [Maven Central: org.opengis.cite.eclipse.webtools.sse:org.eclipse.wst.xml.xpath2.processor:1.1.5-738bb7b85d](/content/central/artifact/org-opengis-cite-eclipse-webtools-sse/org-eclipse-wst-xml-xpath2-processor/1-1-5-738bb7b85d.html): Discover org.eclipse.wst.xml.xpath2.processor in the org.opengis.cite.eclipse.webtools.sse namespace. Explore metadata, contributors, the Maven POM file, and more. (179 words)
- [Maven Central: com.agilejava.docbkx:docbkx-maven-base](/content/central/artifact/com-agilejava-docbkx/docbkx-maven-base/dependents/index.html): Discover docbkx-maven-base in the com.agilejava.docbkx namespace. Explore metadata, contributors, the Maven POM file, and more. (3 words)
- [Maven Central: org.jaxsb:runtime](/content/central/artifact/org-jaxsb/runtime/versions/index.html): Discover runtime in the org.jaxsb namespace. Explore metadata, contributors, the Maven POM file, and more. (16 words)
- [@fairwords/websocket 1.0.36 | Sonatype Guide](/content/guide/component/npm/40fairwords-2fwebsocket/1-0-36.html): Comprehensive security analysis for @fairwords/websocket version 1.0.36. Max vulnerability severity: 7.1 CVSS. License: Apache-2.0. View dependencies, vulnerab… (42 words)
- [Maven Central: io.github.nova-wallet.substrate-sdk-android:core](/content/central/artifact/io-github-nova-wallet-substrate-sdk-android/core/versions/index.html): Discover core in the io.github.nova-wallet.substrate-sdk-android namespace. Explore metadata, contributors, the Maven POM file, and more. (177 words)
- [Maven Central: com.agilejava.docbkx:docbkx-maven-base:2.0.10](/content/central/artifact/com-agilejava-docbkx/docbkx-maven-base/2-0-10.html): Discover docbkx-maven-base in the com.agilejava.docbkx namespace. Explore metadata, contributors, the Maven POM file, and more. (173 words)
- [@fairwords/websocket 1.0.35 | Sonatype Guide](/content/guide/component/npm/40fairwords-2fwebsocket/1-0-35.html): Comprehensive security analysis for @fairwords/websocket version 1.0.35. Max vulnerability severity: 7.1 CVSS. License: Apache-2.0. View dependencies, vulnerab… (29 words)
- [activemq/activemq 3.2.3 | Sonatype Guide](/content/guide/component/maven/activemq-activemq/3-2-3.html): Comprehensive security analysis for activemq/activemq version 3.2.3. Max vulnerability severity: 9.8 CVSS. License: Apache-2.0. View dependencies, vulnerabilit… (52 words)
- [com.agilejava.docbkx/docbkx-maven-base 2.0… | Sonatype Guide](/content/guide/component/maven/com-agilejava-docbkx-docbkx-maven-base/2-0-12.html): Comprehensive security analysis for com.agilejava.docbkx/docbkx-maven-base version 2.0.12. No known vulnerabilities. License: Apache-2.0. View dependencies, vu… (47 words)
- [Maven Central: org.jaxsb:runtime:2.1.5](/content/central/artifact/org-jaxsb/runtime/2-1-5.html): Discover runtime in the org.jaxsb namespace. Explore metadata, contributors, the Maven POM file, and more. (264 words)
- [@fairwords/websocket 1.0.37 | Sonatype Guide](/content/guide/component/npm/40fairwords-2fwebsocket/1-0-37.html): Comprehensive security analysis for @fairwords/websocket version 1.0.37. Max vulnerability severity: 7.1 CVSS. License: Apache-2.0. View dependencies, vulnerab… (26 words)
- [@fairwords/websocket 1.0.38 | Vulnerabilit… | Sonatype Guide](/content/guide/component/npm/40fairwords-2fwebsocket/1-0-38/vulnerabilities/index.html): Security vulnerabilities and CVE data for @fairwords/websocket version 1.0.38. View CVSS scores, exploit details, and remediation guidance for this npm package. (73 words)
- [pgserve 1.1.14 | Versions | Sonatype Guide](/content/guide/component/npm/pgserve/1-1-14/versions/index.html): Browse all available versions of pgserve. Compare version 1.1.14 with other releases, view security scores, and track version history for this npm package. (253 words)
- [Maven Central: com.agilejava.docbkx](/content/central/namespace/com-agilejava-docbkx.html): Explore the collection of packages in com.agilejava.docbkx (20 words)
- [Maven Central: org.opencastproject:opencast-transcription-service-microsoft-azure](/content/central/artifact/org-opencastproject/opencast-transcription-service-microsoft-azure/dependents/index.html): Discover opencast-transcription-service-microsoft-azure in the org.opencastproject namespace. Explore metadata, contributors, the Maven POM file, and more. (39 words)
- [activemq/activemq 3.2 | Sonatype Guide](/content/guide/component/maven/activemq-activemq/3-2.html): Comprehensive security analysis for activemq/activemq version 3.2. Max vulnerability severity: 9.8 CVSS. License: Apache-2.0. View dependencies, vulnerabilitie… (33 words)
- [Maven Central: org.jaxsb](/content/central/namespace/org-jaxsb.html): Explore the collection of packages in org.jaxsb (263 words)
- [Maven Central: ai.platon.pulsar:pulsar-all:1.10.0](/content/central/artifact/ai-platon-pulsar/pulsar-all/1-10-0.html): Discover pulsar-all in the ai.platon.pulsar namespace. Explore metadata, contributors, the Maven POM file, and more. (4,436 words)
- [Maven Central: io.github.nova-wallet.substrate-sdk-android:core:2.11.3](/content/central/artifact/io-github-nova-wallet-substrate-sdk-android/core/2-11-3.html): Discover core in the io.github.nova-wallet.substrate-sdk-android namespace. Explore metadata, contributors, the Maven POM file, and more. (233 words)
- [@fairwords/websocket 1.0.35 | Vulnerabilit… | Sonatype Guide](/content/guide/component/npm/40fairwords-2fwebsocket/1-0-35/vulnerabilities/index.html): Security vulnerabilities and CVE data for @fairwords/websocket version 1.0.35. View CVSS scores, exploit details, and remediation guidance for this npm package. (119 words)
- [@fairwords/websocket 1.0.38 | Sonatype Guide](/content/guide/component/npm/40fairwords-2fwebsocket/1-0-38.html): Comprehensive security analysis for @fairwords/websocket version 1.0.38. Max vulnerability severity: 7.1 CVSS. License: Apache-2.0. View dependencies, vulnerab… (35 words)
- [Maven Central: org.fryske-akademy:teidictionaries:5.4](/content/central/artifact/org-fryske-akademy/teidictionaries/5-4.html): Discover teidictionaries in the org.fryske-akademy namespace. Explore metadata, contributors, the Maven POM file, and more. (521 words)
- [@automagik/genie 4.260422.4 | Versions | Sonatype Guide](/content/guide/component/npm/40automagik-2fgenie/4-260422-4/versions/index.html): Browse all available versions of @automagik/genie. Compare version 4.260422.4 with other releases, view security scores, and track version history for this npm… (279 words)
- [Maven Central: com.tencent.mna:mnalibrary](/content/central/artifact/com-tencent-mna/mnalibrary/versions/index.html): Discover mnalibrary in the com.tencent.mna namespace. Explore metadata, contributors, the Maven POM file, and more. (172 words)
- [Maven Central: org.opengis.cite.eclipse.webtools.sse:org.eclipse.wst.xml.xpath2.processor](/content/central/artifact/org-opengis-cite-eclipse-webtools-sse/org-eclipse-wst-xml-xpath2-processor/versions/index.html): Discover org.eclipse.wst.xml.xpath2.processor in the org.opengis.cite.eclipse.webtools.sse namespace. Explore metadata, contributors, the Maven POM file, and more. (29 words)
- [com.norconex.commons/norconex-commons-lang… | Sonatype Guide](/content/guide/component/maven/com-norconex-commons-norconex-commons-lang/1-15-1.html): Comprehensive security analysis for com.norconex.commons/norconex-commons-lang version 1.15.1. No known vulnerabilities. License: Apache-2.0. View dependencies… (46 words)
- [com.norconex.commons/norconex-commons-lang… | Sonatype Guide](/content/guide/component/maven/com-norconex-commons-norconex-commons-lang/1-15-2.html): Comprehensive security analysis for com.norconex.commons/norconex-commons-lang version 1.15.2. No known vulnerabilities. License: Apache-2.0. View dependencies… (46 words)
- [buffer-utilities 1.0.0 | Versions | Sonatype Guide](/content/guide/component/npm/buffer-utilities/1-0-0/versions/index.html): Browse all available versions of buffer-utilities. Compare version 1.0.0 with other releases, view security scores, and track version history for this npm pack… (73 words)
- [xerces/xercesImpl 2.12.2 | Versions | Sonatype Guide](/content/guide/component/maven/xerces-3axercesimpl/2-12-2/versions/index.html): Browse all available versions of xerces/xercesImpl. Compare version 2.12.2 with other releases, view security scores, and track version history for this maven… (214 words)
- [Maven Central: org.jaxsb:runtime:2.1.4](/content/central/artifact/org-jaxsb/runtime/2-1-4.html): Discover runtime in the org.jaxsb namespace. Explore metadata, contributors, the Maven POM file, and more. (150 words)
- [Maven Central: io.github.nova-wallet.substrate-sdk-android:core:2.11.0](/content/central/artifact/io-github-nova-wallet-substrate-sdk-android/core/2-11-0.html): Discover core in the io.github.nova-wallet.substrate-sdk-android namespace. Explore metadata, contributors, the Maven POM file, and more. (235 words)
- [Maven Central: org.opengis.cite.eclipse.webtools.sse](/content/central/namespace/org-opengis-cite-eclipse-webtools-sse.html): Explore the collection of packages in org.opengis.cite.eclipse.webtools.sse (89 words)
- [Maven Central: org.fryske-akademy:teidictionaries:5.2](/content/central/artifact/org-fryske-akademy/teidictionaries/5-2.html): Discover teidictionaries in the org.fryske-akademy namespace. Explore metadata, contributors, the Maven POM file, and more. (494 words)
- [Maven Central: com.norconex.commons:norconex-commons-lang:1.13.1](/content/central/artifact/com-norconex-commons/norconex-commons-lang/1-13-1.html): Discover norconex-commons-lang in the com.norconex.commons namespace. Explore metadata, contributors, the Maven POM file, and more. (157 words)
- [hubfs/1-2025_website-assets/resource_files/whitepaper_typosquatting/beyond-20typos-20whitepaper-20-20rv9-pdf.html](/content/hubfs/1-2025_website-assets/resource_files/whitepaper_typosquatting/beyond-20typos-20whitepaper-20-20rv9-pdf.html) (2,286 words)
- [com.norconex.commons/norconex-commons-lang… | Sonatype Guide](/content/guide/component/maven/com-norconex-commons-norconex-commons-lang/1-15-0.html): Comprehensive security analysis for com.norconex.commons/norconex-commons-lang version 1.15.0. No known vulnerabilities. License: Apache-2.0. View dependencies… (28 words)
- [Maven Central: io.github.nova-wallet.substrate-sdk-android:core:2.11.2](/content/central/artifact/io-github-nova-wallet-substrate-sdk-android/core/2-11-2.html): Discover core in the io.github.nova-wallet.substrate-sdk-android namespace. Explore metadata, contributors, the Maven POM file, and more. (240 words)
- [Maven Central: com.norconex.commons:norconex-commons-lang:1.15.1](/content/central/artifact/com-norconex-commons/norconex-commons-lang/1-15-1.html): Discover norconex-commons-lang in the com.norconex.commons namespace. Explore metadata, contributors, the Maven POM file, and more. (178 words)
- [com.norconex.commons/norconex-commons-lang… | Sonatype Guide](/content/guide/component/maven/com-norconex-commons-norconex-commons-lang/1-13-0.html): Comprehensive security analysis for com.norconex.commons/norconex-commons-lang version 1.13.0. No known vulnerabilities. License: Apache-2.0. View dependencies… (39 words)
- [Maven Central: ca.islandora.alpaca:islandora-indexing-triplestore:2.0.0](/content/central/artifact/ca-islandora-alpaca/islandora-indexing-triplestore/2-0-0.html): Discover islandora-indexing-triplestore in the ca.islandora.alpaca namespace. Explore metadata, contributors, the Maven POM file, and more. (247 words)
- [Maven Central: io.github.nova-wallet.substrate-sdk-android:core:2.10.0](/content/central/artifact/io-github-nova-wallet-substrate-sdk-android/core/2-10-0.html): Discover core in the io.github.nova-wallet.substrate-sdk-android namespace. Explore metadata, contributors, the Maven POM file, and more. (229 words)
- [com.norconex.commons/norconex-commons-lang… | Sonatype Guide](/content/guide/component/maven/com-norconex-commons-norconex-commons-lang/1-13-1.html): Comprehensive security analysis for com.norconex.commons/norconex-commons-lang version 1.13.1. No known vulnerabilities. License: Apache-2.0. View dependencies… (32 words)
- [Maven Central: com.tencent.mna:mnalibrary:1.2.2](/content/central/artifact/com-tencent-mna/mnalibrary/1-2-2.html): Discover mnalibrary in the com.tencent.mna namespace. Explore metadata, contributors, the Maven POM file, and more. (126 words)
- [Maven Central: ca.islandora.alpaca:islandora-indexing-triplestore:2.2.0](/content/central/artifact/ca-islandora-alpaca/islandora-indexing-triplestore/2-2-0.html): Discover islandora-indexing-triplestore in the ca.islandora.alpaca namespace. Explore metadata, contributors, the Maven POM file, and more. (244 words)
- [Maven Central: com.norconex.commons](/content/central/namespace/com-norconex-commons.html): Explore the collection of packages in com.norconex.commons (192 words)
- [com.norconex.commons/norconex-commons-lang… | Sonatype Guide](/content/guide/component/maven/com-norconex-commons-norconex-commons-lang/1-14-0.html): Comprehensive security analysis for com.norconex.commons/norconex-commons-lang version 1.14.0. No known vulnerabilities. License: Apache-2.0. View dependencies… (48 words)
- [com.tencent.mna/mnalibrary 1.2.4 | Sonatype Guide](/content/guide/component/maven/com-tencent-mna-mnalibrary/1-2-4.html): Comprehensive security analysis for com.tencent.mna/mnalibrary version 1.2.4. Max vulnerability severity: 7.5 CVSS. License: Apache-2.0. View dependencies, vul… (43 words)
- [Maven Central: com.nhncorp.ntaf:ntaf-fitnesse:20091022](/content/central/artifact/com-nhncorp-ntaf/ntaf-fitnesse/20091022/index.html): Discover ntaf-fitnesse in the com.nhncorp.ntaf namespace. Explore metadata, contributors, the Maven POM file, and more. (138 words)
- [io.github.nova-wallet.substrate-sdk-androi… | Sonatype Guide](/content/guide/component/maven/io-github-nova-wallet-substrate-sdk-android-core/2-11-5.html): Comprehensive security analysis for io.github.nova-wallet.substrate-sdk-android/core version 2.11.5. No known vulnerabilities. License: Apache-2.0. View depend… (50 words)
- [io.github.nova-wallet.substrate-sdk-androi… | Sonatype Guide](/content/guide/component/maven/io-github-nova-wallet-substrate-sdk-android-core/2-11-1.html): Comprehensive security analysis for io.github.nova-wallet.substrate-sdk-android/core version 2.11.1. No known vulnerabilities. License: Apache-2.0. View depend… (47 words)
- [Maven Central: org.codelibs.xerces:xercesImpl:2.12.1-sp1](/content/central/artifact/org-codelibs-xerces/xercesimpl/2-12-1-sp1.html): Discover xercesImpl in the org.codelibs.xerces namespace. Explore metadata, contributors, the Maven POM file, and more. (439 words)
- [Maven Central: org.fryske-akademy:teidictionaries:5.3](/content/central/artifact/org-fryske-akademy/teidictionaries/5-3.html): Discover teidictionaries in the org.fryske-akademy namespace. Explore metadata, contributors, the Maven POM file, and more. (431 words)
- [io.github.nova-wallet.substrate-sdk-androi… | Sonatype Guide](/content/guide/component/maven/io-github-nova-wallet-substrate-sdk-android-core/2-11-3.html): Comprehensive security analysis for io.github.nova-wallet.substrate-sdk-android/core version 2.11.3. No known vulnerabilities. License: Apache-2.0. View depend… (43 words)
- [io.github.nova-wallet.substrate-sdk-androi… | Sonatype Guide](/content/guide/component/maven/io-github-nova-wallet-substrate-sdk-android-core/2-11-4.html): Comprehensive security analysis for io.github.nova-wallet.substrate-sdk-android/core version 2.11.4. No known vulnerabilities. License: Apache-2.0. View depend… (45 words)
- [Maven Central: com.github.yjpan51020:excel-helper:0.0.2-RELEASE](/content/central/artifact/com-github-yjpan51020/excel-helper/0-0-2-release.html): Discover excel-helper in the com.github.yjpan51020 namespace. Explore metadata, contributors, the Maven POM file, and more. (103 words)
- [org.opengis.cite.xerces/xercesImpl-xsd11-s… | Sonatype Guide](/content/guide/component/maven/org-opengis-cite-xerces-3axercesimpl-xsd11-shaded/2-12-beta-r1667115/vulnerabilities/index.html): Security vulnerabilities and CVE data for org.opengis.cite.xerces/xercesImpl-xsd11-shaded version 2.12-beta-r1667115. View CVSS scores, exploit details, and re… (87 words)
- [org.opengis.cite.xerces/xercesImpl-xsd11-s… | Sonatype Guide](/content/guide/component/maven/org-opengis-cite-xerces-3axercesimpl-xsd11-shaded/2-12-beta-r1667115/versions/index.html): Browse all available versions of org.opengis.cite.xerces/xercesImpl-xsd11-shaded. Compare version 2.12-beta-r1667115 with other releases, view security scores,… (72 words)
- [io.github.nova-wallet.substrate-sdk-androi… | Sonatype Guide](/content/guide/component/maven/io-github-nova-wallet-substrate-sdk-android-core/2-10-0.html): Comprehensive security analysis for io.github.nova-wallet.substrate-sdk-android/core version 2.10.0. No known vulnerabilities. License: Apache-2.0. View depend… (48 words)
- [io.github.nova-wallet.substrate-sdk-androi… | Sonatype Guide](/content/guide/component/maven/io-github-nova-wallet-substrate-sdk-android-core/2-11-2.html): Comprehensive security analysis for io.github.nova-wallet.substrate-sdk-android/core version 2.11.2. No known vulnerabilities. License: Apache-2.0. View depend… (42 words)
- [Maven Central: org.apache.servicemix.bundles:org.apache.servicemix.bundles.xerces:2.12.2_1](/content/central/artifact/org-apache-servicemix-bundles/org-apache-servicemix-bundles-xerces/2-12-2_1.html): Discover org.apache.servicemix.bundles.xerces in the org.apache.servicemix.bundles namespace. Explore metadata, contributors, the Maven POM file, and more. (209 words)
- [Maven Central: avalon-framework:avalon-framework-impl](/content/central/artifact/avalon-framework/avalon-framework-impl/dependents/index.html): Discover avalon-framework-impl in the avalon-framework namespace. Explore metadata, contributors, the Maven POM file, and more. (330 words)
- [Maven Central: io.github.nova-wallet.substrate-sdk-android](/content/central/namespace/io-github-nova-wallet-substrate-sdk-android.html): Explore the collection of packages in io.github.nova-wallet.substrate-sdk-android (13 words)
- [io.github.nova-wallet.substrate-sdk-androi… | Sonatype Guide](/content/guide/component/maven/io-github-nova-wallet-substrate-sdk-android-core/2-11-0.html): Comprehensive security analysis for io.github.nova-wallet.substrate-sdk-android/core version 2.11.0. No known vulnerabilities. License: Apache-2.0. View depend… (30 words)
- [com.nhncorp.ntaf/ntaf-fitnesse 20091022 | Sonatype Guide](/content/guide/component/maven/com-nhncorp-ntaf-ntaf-fitnesse/20091022/index.html): Comprehensive security analysis for com.nhncorp.ntaf/ntaf-fitnesse version 20091022. Max vulnerability severity: 8.8 CVSS. License: Not Declared. View dependen… (50 words)
- [Maven Central: com.nhncorp.ntaf:ntaf-fitnesse:20090915](/content/central/artifact/com-nhncorp-ntaf/ntaf-fitnesse/20090915/index.html): Discover ntaf-fitnesse in the com.nhncorp.ntaf namespace. Explore metadata, contributors, the Maven POM file, and more. (157 words)
- [Maven Central: com.github.gumtreediff](/content/central/namespace/com-github-gumtreediff.html): Explore the collection of packages in com.github.gumtreediff (327 words)
- [hubfs/the-20ultimate-20sbom-20guide-pdf.html](/content/hubfs/the-20ultimate-20sbom-20guide-pdf.html) (4,914 words)
- [org.opengis.cite.xerces/xercesImpl-xsd11 2… | Sonatype Guide](/content/guide/component/maven/org-opengis-cite-xerces-3axercesimpl-xsd11/2-12-beta-r1667115/versions/index.html): Browse all available versions of org.opengis.cite.xerces/xercesImpl-xsd11. Compare version 2.12-beta-r1667115 with other releases, view security scores, and tr… (92 words)
- [Java Runtime Agent (Experimental)](/content/help/en/java-runtime-agent-html.html) (2,626 words)
- [Maven Central: com.tencent.mna:mnalibrary:1.2.3](/content/central/artifact/com-tencent-mna/mnalibrary/1-2-3.html): Discover mnalibrary in the com.tencent.mna namespace. Explore metadata, contributors, the Maven POM file, and more. (131 words)
- [com.nhncorp.ntaf/ntaf-fitnesse 20090915 | Sonatype Guide](/content/guide/component/maven/com-nhncorp-ntaf-ntaf-fitnesse/20090915/index.html): Comprehensive security analysis for com.nhncorp.ntaf/ntaf-fitnesse version 20090915. Max vulnerability severity: 8.8 CVSS. License: Not Declared. View dependen… (44 words)
- [Page Not Found - Sonatype Community](/content/community/u/akeibler/index.html) (22 words)
- [com.nhncorp.ntaf/ntaf-fitnesse 20090909 | Sonatype Guide](/content/guide/component/maven/com-nhncorp-ntaf-ntaf-fitnesse/20090909/index.html): Comprehensive security analysis for com.nhncorp.ntaf/ntaf-fitnesse version 20090909. Max vulnerability severity: 8.8 CVSS. License: Not Declared. View dependen… (40 words)
- [Component Not Found | Sonatype Guide](/content/guide/component/maven/org-opengis-cite-xerces-3axercesimpl-xsd11-shaded/x-y-z.html): Could not find component data for maven/org.opengis.cite.xerces:xercesImpl-xsd11-shaded/x.y.z. This component may not exist in our database or may have been re… (17 words)
- [Maven Central: castor:castor](/content/central/artifact/castor/castor/versions/index.html): Discover castor in the castor namespace. Explore metadata, contributors, the Maven POM file, and more. (180 words)
- [Maven Central: com.tencent.mna:mnalibrary:1.2.4](/content/central/artifact/com-tencent-mna/mnalibrary/1-2-4.html): Discover mnalibrary in the com.tencent.mna namespace. Explore metadata, contributors, the Maven POM file, and more. (113 words)
- [Maven Central: com.norconex.commons:norconex-commons-lang](/content/central/artifact/com-norconex-commons/norconex-commons-lang/dependents/index.html): Discover norconex-commons-lang in the com.norconex.commons namespace. Explore metadata, contributors, the Maven POM file, and more. (20 words)
- [com.github.yjpan51020/excel-helper 0.0.2-R… | Sonatype Guide](/content/guide/component/maven/com-github-yjpan51020-excel-helper/0-0-2-release.html): Comprehensive security analysis for com.github.yjpan51020/excel-helper version 0.0.2-RELEASE. No known vulnerabilities. License: Apache-2.0. View dependencies,… (45 words)
- [Component Not Found | Sonatype Guide](/content/guide/component/maven/org-opengis-cite-xerces-3axercesimpl-xsd11/x-y-z.html): Could not find component data for maven/org.opengis.cite.xerces:xercesImpl-xsd11/x.y.z. This component may not exist in our database or may have been removed. (17 words)
- [Maven Central: com.nhncorp.ntaf](/content/central/namespace/com-nhncorp-ntaf.html): Explore the collection of packages in com.nhncorp.ntaf (118 words)
- [xerces/xmlParserAPIs 2.6.2 | Versions | Sonatype Guide](/content/guide/component/maven/xerces-3axmlparserapis/2-6-2/versions/index.html): Browse all available versions of xerces/xmlParserAPIs. Compare version 2.6.2 with other releases, view security scores, and track version history for this mave… (91 words)
- [Component Not Found | Sonatype Guide](/content/guide/component/maven/org-codelibs-xerces-3axercesimpl/x-y-z.html): Could not find component data for maven/org.codelibs.xerces:xercesImpl/x.y.z. This component may not exist in our database or may have been removed. (17 words)
- [org.opengis.cite.xerces/xercesImpl-xsd11 2… | Sonatype Guide](/content/guide/component/maven/org-opengis-cite-xerces-3axercesimpl-xsd11/2-12-beta-r1667115/vulnerabilities/index.html): Security vulnerabilities and CVE data for org.opengis.cite.xerces/xercesImpl-xsd11 version 2.12-beta-r1667115. View CVSS scores, exploit details, and remediati… (154 words)
- [Maven Central: com.github.yjpan51020:excel-helper](/content/central/artifact/com-github-yjpan51020/excel-helper/versions/index.html): Discover excel-helper in the com.github.yjpan51020 namespace. Explore metadata, contributors, the Maven POM file, and more. (16 words)
- [Maven Central: com.github.yjpan51020](/content/central/namespace/com-github-yjpan51020.html): Explore the collection of packages in com.github.yjpan51020 (20 words)
- [org.codelibs.xerces/xercesImpl 2.12.1-sp1… | Sonatype Guide](/content/guide/component/maven/org-codelibs-xerces-3axercesimpl/2-12-1-sp1/versions/index.html): Browse all available versions of org.codelibs.xerces/xercesImpl. Compare version 2.12.1-sp1 with other releases, view security scores, and track version histor… (51 words)
- [Maven Central: com.nhncorp.ntaf:ntaf-fitnesse:20090909](/content/central/artifact/com-nhncorp-ntaf/ntaf-fitnesse/20090909/index.html): Discover ntaf-fitnesse in the com.nhncorp.ntaf namespace. Explore metadata, contributors, the Maven POM file, and more. (131 words)
- [org.eclipse.birt.runtime.3_7_1/org.apache.… | Sonatype Guide](/content/guide/component/maven/org-eclipse-birt-runtime-3_7_1-3aorg-apache-xerces/2-9-0/versions/index.html): Browse all available versions of org.eclipse.birt.runtime.3_7_1/org.apache.xerces. Compare version 2.9.0 with other releases, view security scores, and track v… (60 words)
- [org.codelibs.xerces/xercesImpl 2.12.1-sp1… | Sonatype Guide](/content/guide/component/maven/org-codelibs-xerces-3axercesimpl/2-12-1-sp1/vulnerabilities/index.html): Security vulnerabilities and CVE data for org.codelibs.xerces/xercesImpl version 2.12.1-sp1. View CVSS scores, exploit details, and remediation guidance for th… (115 words)
- [Maven Central: com.github.yjpan51020:excel-helper:0.0.1-RELEASE](/content/central/artifact/com-github-yjpan51020/excel-helper/0-0-1-release.html): Discover excel-helper in the com.github.yjpan51020 namespace. Explore metadata, contributors, the Maven POM file, and more. (105 words)
- [com.github.gumtreediff/gen.sax 2.0.0 | Sonatype Guide](/content/guide/component/maven/com-github-gumtreediff-gen-sax/2-0-0.html): Comprehensive security analysis for com.github.gumtreediff/gen.sax version 2.0.0. No known vulnerabilities. License: LGPL-3.0. View dependencies, vulnerabiliti… (56 words)
- [Maven Central: io.github.nova-wallet.substrate-sdk-android:core](/content/central/artifact/io-github-nova-wallet-substrate-sdk-android/core/dependents/index.html): Discover core in the io.github.nova-wallet.substrate-sdk-android namespace. Explore metadata, contributors, the Maven POM file, and more. (66 words)
- [castor/castor 1.0M1 | Sonatype Guide](/content/guide/component/maven/castor-castor/1-0m1.html): Comprehensive security analysis for castor/castor version 1.0M1. Max vulnerability severity: 4.3 CVSS. License: Apache-1.1. View dependencies, vulnerabilities,… (51 words)
- [Nexus Repository Community Edition EULA | Sonatype](/content/dnt/usage/community-edition-eula/index.html) (3,368 words)
- [Maven Central: com.nhncorp.ntaf:ntaf-fitnesse](/content/central/artifact/com-nhncorp-ntaf/ntaf-fitnesse/dependents/index.html): Discover ntaf-fitnesse in the com.nhncorp.ntaf namespace. Explore metadata, contributors, the Maven POM file, and more. (112 words)
- [org.apache.servicemix.bundles/org.apache.s… | Sonatype Guide](/content/guide/component/maven/org-apache-servicemix-bundles-3aorg-apache-servicemix-bundles-xerces/2-12-2_1/vulnerabilities/index.html): Security vulnerabilities and CVE data for org.apache.servicemix.bundles/org.apache.servicemix.bundles.xerces version 2.12.2_1. View CVSS scores, exploit detail… (121 words)
- [xerces/xercesSamples 2.6.2 | Versions | Sonatype Guide](/content/guide/component/maven/xerces-3axercessamples/2-6-2/versions/index.html): Browse all available versions of xerces/xercesSamples. Compare version 2.6.2 with other releases, view security scores, and track version history for this mave… (76 words)
- [Maven Central: com.tencent.mna](/content/central/namespace/com-tencent-mna.html): Explore the collection of packages in com.tencent.mna (53 words)
- [Maven Central: castor:castor](/content/central/artifact/castor/castor/dependents/index.html): Discover castor in the castor namespace. Explore metadata, contributors, the Maven POM file, and more. (3 words)
- [ca.islandora.alpaca/islandora-indexing-tri… | Sonatype Guide](/content/guide/component/maven/ca-islandora-alpaca-islandora-indexing-triplestore/2-2-0.html): Comprehensive security analysis for ca.islandora.alpaca/islandora-indexing-triplestore version 2.2.0. No known vulnerabilities. License: Apache-2.0. View depen… (45 words)
- [Maven Central: castor:castor](/content/central/artifact/castor/castor/index.html): Discover castor in the castor namespace. Explore metadata, contributors, the Maven POM file, and more. (58 words)
- [ca.islandora.alpaca/islandora-indexing-tri… | Sonatype Guide](/content/guide/component/maven/ca-islandora-alpaca-islandora-indexing-triplestore/2-0-0.html): Comprehensive security analysis for ca.islandora.alpaca/islandora-indexing-triplestore version 2.0.0. No known vulnerabilities. License: Apache-2.0. View depen… (55 words)
- [@openwebconcept/theme-owc 1.0.3 | Versions | Sonatype Guide](/content/guide/component/npm/40openwebconcept-2ftheme-owc/1-0-3/versions/index.html): Browse all available versions of @openwebconcept/theme-owc. Compare version 1.0.3 with other releases, view security scores, and track version history for this… (108 words)
- [Maven Central: org.fryske-akademy](/content/central/namespace/org-fryske-akademy.html): Explore the collection of packages in org.fryske-akademy (470 words)
- [Maven Central: com.tencent.mna:mnalibrary](/content/central/artifact/com-tencent-mna/mnalibrary/dependents/index.html): Discover mnalibrary in the com.tencent.mna namespace. Explore metadata, contributors, the Maven POM file, and more. (20 words)
- [@fairwords/loopback-connector-es 1.4.4 | V… | Sonatype Guide](/content/guide/component/npm/40fairwords-2floopback-connector-es/1-4-4/versions/index.html): Browse all available versions of @fairwords/loopback-connector-es. Compare version 1.4.4 with other releases, view security scores, and track version history f… (67 words)
- [avalon-framework/avalon-framework-impl 4.3 | Sonatype Guide](/content/guide/component/maven/avalon-framework-avalon-framework-impl/4-3.html): Comprehensive security analysis for avalon-framework/avalon-framework-impl version 4.3. No known vulnerabilities. License: Apache-2.0. View dependencies, vulne… (57 words)
- [Maven Central: ca.islandora.alpaca](/content/central/namespace/ca-islandora-alpaca.html): Explore the collection of packages in ca.islandora.alpaca (20 words)
- [Maven Central: ca.islandora.alpaca:islandora-indexing-triplestore](/content/central/artifact/ca-islandora-alpaca/islandora-indexing-triplestore/dependents/index.html): Discover islandora-indexing-triplestore in the ca.islandora.alpaca namespace. Explore metadata, contributors, the Maven POM file, and more. (3 words)
- [Component Not Found | Sonatype Guide](/content/guide/component/maven/org-eclipse-birt-runtime-3_7_1-3aorg-apache-xerces/x-y-z.html): Could not find component data for maven/org.eclipse.birt.runtime.3_7_1:org.apache.xerces/x.y.z. This component may not exist in our database or may have been r… (17 words)
- [Policy Evaluation in Source Control Management](/content/help/en/policy-evaluation-in-source-control-management-html.html) (1,995 words)
- [Maven Central: avalon-framework:avalon-framework-impl](/content/central/artifact/avalon-framework/avalon-framework-impl/versions/index.html): Discover avalon-framework-impl in the avalon-framework namespace. Explore metadata, contributors, the Maven POM file, and more. (80 words)
- [Maven Central: com.github.yjpan51020:excel-helper](/content/central/artifact/com-github-yjpan51020/excel-helper/dependents/index.html): Discover excel-helper in the com.github.yjpan51020 namespace. Explore metadata, contributors, the Maven POM file, and more. (20 words)
- [Maven Central: org.opengis.cite.xerces:xercesImpl-xsd11-shaded:2.12-beta-r1667115](/content/central/artifact/org-opengis-cite-xerces/xercesimpl-xsd11-shaded/2-12-beta-r1667115.html): Discover xercesImpl-xsd11-shaded in the org.opengis.cite.xerces namespace. Explore metadata, contributors, the Maven POM file, and more. (284 words)
- [Maven Central: com.github.gumtreediff:gen.sax:2.0.0](/content/central/artifact/com-github-gumtreediff/gen-sax/2-0-0.html): Discover gen.sax in the com.github.gumtreediff namespace. Explore metadata, contributors, the Maven POM file, and more. (92 words)
- [xerces/xercesImpl 2.12.2 | Vulnerabilities | Sonatype Guide](/content/guide/component/maven/xerces-3axercesimpl/2-12-2/vulnerabilities/index.html): Security vulnerabilities and CVE data for xerces/xercesImpl version 2.12.2. View CVSS scores, exploit details, and remediation guidance for this maven package. (104 words)
- [SSL Certificate Guide – Sonatype Support](/content/support/hc/en-us/articles/213465768-ssl-certificate-guide/index.html): Transport Layer Security (TLS) Self-Signed Certificates Self-signed server TLS certificates are useful for testing server TLS... (1,936 words)
- [Maven Central: xerces:xmlParserAPIs:2.6.2](/content/central/artifact/xerces/xmlparserapis/2-6-2.html): Discover xmlParserAPIs in the xerces namespace. Explore metadata, contributors, the Maven POM file, and more. (46 words)
- [Maven Central: org.fryske-akademy:teidictionaries](/content/central/artifact/org-fryske-akademy/teidictionaries/versions/index.html): Discover teidictionaries in the org.fryske-akademy namespace. Explore metadata, contributors, the Maven POM file, and more. (176 words)
- [xerces/xerces 2.4.0 | Versions | Sonatype Guide](/content/guide/component/maven/xerces-3axerces/2-4-0/versions/index.html): Browse all available versions of xerces/xerces. Compare version 2.4.0 with other releases, view security scores, and track version history for this maven packa… (175 words)
- [org.eclipse.birt.runtime.3_7_1/org.apache.… | Sonatype Guide](/content/guide/component/maven/org-eclipse-birt-runtime-3_7_1-3aorg-apache-xerces/2-9-0/vulnerabilities/index.html): Security vulnerabilities and CVE data for org.eclipse.birt.runtime.3_7_1/org.apache.xerces version 2.9.0. View CVSS scores, exploit details, and remediation gu… (83 words)
- [Configure Identity Provider (IdP)](/content/help/en/configure-identity-provider-html.html) (2,674 words)
- [org.fryske-akademy/teidictionaries 5.7 | Sonatype Guide](/content/guide/component/maven/org-fryske-akademy-teidictionaries/5-7.html): Comprehensive security analysis for org.fryske-akademy/teidictionaries version 5.7. No known vulnerabilities. License: Apache-2.0. View dependencies, vulnerabi… (67 words)
- [Maven Central: com.github.gumtreediff:gen.sax](/content/central/artifact/com-github-gumtreediff/gen-sax/versions/index.html): Discover gen.sax in the com.github.gumtreediff namespace. Explore metadata, contributors, the Maven POM file, and more. (30 words)
- [Maven Central: org.opengis.cite](/content/central/namespace/org-opengis-cite.html): Explore the collection of packages in org.opengis.cite (264 words)
- [Project Standards | Sonatype Open Source Community Handbook](/content/contribute/docs/standards/_print/index.html): Engaging with Sonatype Community Projects, This section includes information relating to our Standards that we expect our Community Projects to adhere to. (17 words)
- [Maven Central: castor:castor:1.0M1](/content/central/artifact/castor/castor/1-0m1.html): Discover castor in the castor namespace. Explore metadata, contributors, the Maven POM file, and more. (66 words)
- [Component Not Found | Sonatype Guide](/content/guide/component/maven/org-apache-servicemix-bundles-3aorg-apache-servicemix-bundles-xerces/x-y-z.html): Could not find component data for maven/org.apache.servicemix.bundles:org.apache.servicemix.bundles.xerces/x.y.z. This component may not exist in our database… (17 words)
- [Maven Central: com.github.gumtreediff:gen.sax](/content/central/artifact/com-github-gumtreediff/gen-sax/dependents/index.html): Discover gen.sax in the com.github.gumtreediff namespace. Explore metadata, contributors, the Maven POM file, and more. (49 words)
- [Component Not Found | Sonatype Guide](/content/guide/component/maven/xerces-3axercesimpl/x-y-z.html): Could not find component data for maven/xerces:xercesImpl/x.y.z. This component may not exist in our database or may have been removed. (17 words)
- [org.fryske-akademy/teidictionaries 5.4 | Sonatype Guide](/content/guide/component/maven/org-fryske-akademy-teidictionaries/5-4.html): Comprehensive security analysis for org.fryske-akademy/teidictionaries version 5.4. No known vulnerabilities. License: Apache-2.0. View dependencies, vulnerabi… (51 words)
- [org.fryske-akademy/teidictionaries 5.8 | Sonatype Guide](/content/guide/component/maven/org-fryske-akademy-teidictionaries/5-8.html): Comprehensive security analysis for org.fryske-akademy/teidictionaries version 5.8. No known vulnerabilities. License: Apache-2.0. View dependencies, vulnerabi… (36 words)
- [org.fryske-akademy/teidictionaries 5.1 | Sonatype Guide](/content/guide/component/maven/org-fryske-akademy-teidictionaries/5-1.html): Comprehensive security analysis for org.fryske-akademy/teidictionaries version 5.1. No known vulnerabilities. License: Apache-2.0. View dependencies, vulnerabi… (38 words)
- [xerces/xerces 2.4.0 | Vulnerabilities | Sonatype Guide](/content/guide/component/maven/xerces-3axerces/2-4-0/vulnerabilities/index.html): Security vulnerabilities and CVE data for xerces/xerces version 2.4.0. View CVSS scores, exploit details, and remediation guidance for this maven package. (128 words)
- [Component Not Found | Sonatype Guide](/content/guide/component/maven/xerces-3axmlparserapis/x-y-z.html): Could not find component data for maven/xerces:xmlParserAPIs/x.y.z. This component may not exist in our database or may have been removed. (17 words)
- [repo/repository/sonatype-hosted/pki/rpm-gpg/rpm-gpg-key-sonatype-yum-asc.html](/content/repo/repository/sonatype-hosted/pki/rpm-gpg/rpm-gpg-key-sonatype-yum-asc.html) (49 words)
- [@fairwords/loopback-connector-es 1.4.4 | V… | Sonatype Guide](/content/guide/component/npm/40fairwords-2floopback-connector-es/1-4-4/vulnerabilities/index.html): Security vulnerabilities and CVE data for @fairwords/loopback-connector-es version 1.4.4. View CVSS scores, exploit details, and remediation guidance for this… (83 words)
- [@openwebconcept/theme-owc 1.0.3 | Vulnerab… | Sonatype Guide](/content/guide/component/npm/40openwebconcept-2ftheme-owc/1-0-3/vulnerabilities/index.html): Security vulnerabilities and CVE data for @openwebconcept/theme-owc version 1.0.3. View CVSS scores, exploit details, and remediation guidance for this npm pac… (67 words)
- [sonatype-2025-000042 | Security Details | Sonatype Guide](/content/guide/vulnerability/sonatype-2025-000042/index.html): Technical security analysis for sonatype-2025-000042. CVSS 8.7 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (65 words)
- [@openwebconcept/design-tokens 1.0.3 | Vuln… | Sonatype Guide](/content/guide/component/npm/40openwebconcept-2fdesign-tokens/1-0-3/vulnerabilities/index.html): Security vulnerabilities and CVE data for @openwebconcept/design-tokens version 1.0.3. View CVSS scores, exploit details, and remediation guidance for this npm… (67 words)
- [sonatype-2022-1468 | Security Details | Sonatype Guide](/content/guide/vulnerability/sonatype-2022-1468/index.html): Technical security analysis for sonatype-2022-1468. CVSS 10.0 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (72 words)
- [org.fryske-akademy/teidictionaries 5.2 | Sonatype Guide](/content/guide/component/maven/org-fryske-akademy-teidictionaries/5-2.html): Comprehensive security analysis for org.fryske-akademy/teidictionaries version 5.2. No known vulnerabilities. License: Apache-2.0. View dependencies, vulnerabi… (39 words)
- [Maven Central: avalon-framework](/content/central/namespace/avalon-framework/index.html): Explore the collection of packages in avalon-framework (78 words)
- [Audit Log](/content/help/en/audit-log-html.html) (1,992 words)
- [Maven Central: castor](/content/central/namespace/castor/index.html): Explore the collection of packages in castor (44 words)
- [xerces/xercesSamples 2.6.1 | Sonatype Guide](/content/guide/component/maven/xerces-xercessamples/2-6-1.html): Comprehensive security analysis for xerces/xercesSamples version 2.6.1. No known vulnerabilities. License: Not Declared. View dependencies, vulnerabilities, an… (43 words)
- [xerces/xercesSamples 2.6.0 | Sonatype Guide](/content/guide/component/maven/xerces-xercessamples/2-6-0.html): Comprehensive security analysis for xerces/xercesSamples version 2.6.0. No known vulnerabilities. License: Not Declared. View dependencies, vulnerabilities, an… (36 words)
- [Active Projects | Sonatype Open Source Community Handbook](/content/contribute/projects/active/index.html): Engaging with Sonatype Community Projects, These are our current active Open Source Projects. (8 words)
- [plain-crypto-js 4.2.1 | Sonatype Guide](/content/guide/component/npm/plain-crypto-js/4-2-1.html): Comprehensive security analysis for plain-crypto-js version 4.2.1. Max vulnerability severity: 8.7 CVSS. License: MIT. View dependencies, vulnerabilities, and… (40 words)
- [org.opengis.cite/ets-kml2 0.5 | Sonatype Guide](/content/guide/component/maven/org-opengis-cite-ets-kml2/0-5.html): Comprehensive security analysis for org.opengis.cite/ets-kml2 version 0.5. No known vulnerabilities. License: Apache-2.0. View dependencies, vulnerabilities, a… (38 words)
- [sonatype-2026-001959 | Security Details | Sonatype Guide](/content/guide/vulnerability/sonatype-2026-001959/index.html): Technical security analysis for sonatype-2026-001959. CVSS 7.1 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (67 words)
- [Component Not Found | Sonatype Guide](/content/guide/component/npm/40openwebconcept-2ftheme-owc/x-y-z.html): Could not find component data for npm/@openwebconcept/theme-owc/x.y.z. This component may not exist in our database or may have been removed. (17 words)
- [Maven Central: xerces:xercesSamples:2.5.0](/content/central/artifact/xerces/xercessamples/2-5-0.html): Discover xercesSamples in the xerces namespace. Explore metadata, contributors, the Maven POM file, and more. (45 words)
- [Maven Central: org.opengis.cite.xerces:xercesImpl-xsd11:2.12-beta-r1667115](/content/central/artifact/org-opengis-cite-xerces/xercesimpl-xsd11/2-12-beta-r1667115.html): Discover xercesImpl-xsd11 in the org.opengis.cite.xerces namespace. Explore metadata, contributors, the Maven POM file, and more. (242 words)
- [Component Not Found | Sonatype Guide](/content/guide/component/npm/40automagik-2fgenie/x-y-z.html): Could not find component data for npm/@automagik/genie/x.y.z. This component may not exist in our database or may have been removed. (17 words)
- [Component Not Found | Sonatype Guide](/content/guide/component/npm/40fairwords-2floopback-connector-es/x-y-z.html): Could not find component data for npm/@fairwords/loopback-connector-es/x.y.z. This component may not exist in our database or may have been removed. (17 words)
- [Component Not Found | Sonatype Guide](/content/guide/component/npm/40openwebconcept-2fdesign-tokens/x-y-z.html): Could not find component data for npm/@openwebconcept/design-tokens/x.y.z. This component may not exist in our database or may have been removed. (17 words)
- [Maven Central: xerces:xercesSamples:2.6.0](/content/central/artifact/xerces/xercessamples/2-6-0.html): Discover xercesSamples in the xerces namespace. Explore metadata, contributors, the Maven POM file, and more. (46 words)
- [xerces/xercesSamples 2.2.1 | Sonatype Guide](/content/guide/component/maven/xerces-xercessamples/2-2-1.html): Comprehensive security analysis for xerces/xercesSamples version 2.2.1. No known vulnerabilities. License: Not Declared. View dependencies, vulnerabilities, an… (43 words)
- [Component Not Found | Sonatype Guide](/content/guide/component/maven/xerces-3axercessamples/x-y-z.html): Could not find component data for maven/xerces:xercesSamples/x.y.z. This component may not exist in our database or may have been removed. (17 words)
- [org.fryske-akademy/teidictionaries 5.3 | Sonatype Guide](/content/guide/component/maven/org-fryske-akademy-teidictionaries/5-3.html): Comprehensive security analysis for org.fryske-akademy/teidictionaries version 5.3. No known vulnerabilities. License: Apache-2.0. View dependencies, vulnerabi… (31 words)
- [xerces/xercesSamples 2.5.0 | Sonatype Guide](/content/guide/component/maven/xerces-xercessamples/2-5-0.html): Comprehensive security analysis for xerces/xercesSamples version 2.5.0. No known vulnerabilities. License: Not Declared. View dependencies, vulnerabilities, an… (49 words)
- [Sonatype Software Support Policy 4.3](/content/usage/software-support-policy/index.html): Check out Sonatype Software Support Policy 4.3. Discover how to streamline your software supply chain and mitigate open source risks. (2,077 words)
- [Maven Central: org.fryske-akademy:teidictionaries](/content/central/artifact/org-fryske-akademy/teidictionaries/dependents/index.html): Discover teidictionaries in the org.fryske-akademy namespace. Explore metadata, contributors, the Maven POM file, and more. (108 words)
- [xerces/xercesImpl 2.9.1 | Sonatype Guide](/content/guide/component/maven/xerces-xercesimpl/2-9-1.html): Comprehensive security analysis for xerces/xercesImpl version 2.9.1. Max vulnerability severity: 9.8 CVSS. License: Apache-2.0. View dependencies, vulnerabilit… (56 words)
- [@openwebconcept/design-tokens 1.0.3 | Vers… | Sonatype Guide](/content/guide/component/npm/40openwebconcept-2fdesign-tokens/1-0-3/versions/index.html): Browse all available versions of @openwebconcept/design-tokens. Compare version 1.0.3 with other releases, view security scores, and track version history for… (119 words)
- [Maven Central: org.sonatype.plugins:nxrm3-maven-plugin:1.0.13](/content/central/artifact/org-sonatype-plugins/nxrm3-maven-plugin/1-0-13/versions/index.html): Discover nxrm3-maven-plugin in the org.sonatype.plugins namespace. Explore metadata, contributors, the Maven POM file, and more. (133 words)
- [hubfs/1-2025_website-assets/resource_files/top-205-20cmmc-20gaps-20that-20delay-20certification-pdf.html](/content/hubfs/1-2025_website-assets/resource_files/top-205-20cmmc-20gaps-20that-20delay-20certification-pdf.html) (1,292 words)
- [Release specific upgrade instructions](/content/help/en/release-specific-upgrade-instructions-html.html) (3,076 words)
- [Download and Compatibility](/content/help/en/download-and-compatibility-html.html) (1,036 words)
- [Mastering Dependency Mapping: Essential Guide for Developers](/content/blog/dependency-mapping-a-beginners-guide/index.html): Explore dependency mapping, what it is, the benefits of mapping dependencies, and some tools that make the process easier. (1,592 words)
- [Maven Central: org.opengis.cite:ets-kml2](/content/central/artifact/org-opengis-cite/ets-kml2/versions/index.html): Discover ets-kml2 in the org.opengis.cite namespace. Explore metadata, contributors, the Maven POM file, and more. (47 words)
- [axios 1.14.1 | Sonatype Guide](/content/guide/component/npm/axios/1-14-1.html): Comprehensive security analysis for axios version 1.14.1. Max vulnerability severity: 10.0 CVSS. License: MIT. View dependencies, vulnerabilities, and detailed… (54 words)
- [Auth0 SAML integration with the Sonatype Platform – Sonatype Support](/content/support/hc/en-us/articles/360052183713-auth0-saml-integration-with-nexus-applications.html): Overview This article outlines how to integrate Auth0 with Nexus Repository 3 Pro and/or Sonatype IQ Server. The given setup will... (1,518 words)
- [pgserve 1.1.14 | Vulnerabilities | Sonatype Guide](/content/guide/component/npm/pgserve/1-1-14/vulnerabilities/index.html): Security vulnerabilities and CVE data for pgserve version 1.1.14. View CVSS scores, exploit details, and remediation guidance for this npm package. (70 words)
- [F# Language Support | Sonatype Support](/content/products/language-support/f/index.html): Secure your F# projects with comprehensive dependency management, vulnerability detection, and automated policy enforcement to reduce risks in your SDLC. (458 words)
- [Unlocking Cyber Readiness: The Role of SBOMs in Security](/content/blog/cyber-readiness-and-sboms/index.html): ATARC hosted a webinar “Unlocking Cyber Readiness with SBOMs” on the role of software bills of materials (SBOMs) to enhance cybersecurity frameworks (864 words)
- [Integrations Capability Matrix](/content/help/en/integrations-compatibility-html.html) (471 words)
- [The page you were looking for doesn't exist – Sonatype Support](/content/support/hc/en-us/articles/5932871948691-remediation-recommendations-don-t-load-consistently.html) (21 words)
- [Maven Central: org.opengis.cite:ets-kml2](/content/central/artifact/org-opengis-cite/ets-kml2/dependents/index.html): Discover ets-kml2 in the org.opengis.cite namespace. Explore metadata, contributors, the Maven POM file, and more. (20 words)
- [Maven Central: org.eclipse.birt.runtime.3_7_1:org.apache.xerces:2.9.0](/content/central/artifact/org-eclipse-birt-runtime-3_7_1/org-apache-xerces/2-9-0.html): Discover org.apache.xerces in the org.eclipse.birt.runtime.3_7_1 namespace. Explore metadata, contributors, the Maven POM file, and more. (91 words)
- [Mitigations for CVE-2024-4956 Nexus Repository 3 Vulnerability – Sonatype Support](/content/support/hc/en-us/articles/29412417068819-mitigations-for-cve-2024-4956-nexus-repository-3-vulnerability.html): This article lists mitigation options for Sonatype Repository Nexus 3 Vulnerability CVE-2024-4956.  Option 1: Edit Sonatype Nexus... (265 words)
- [Archived Projects | Sonatype Open Source Community Handbook](/content/contribute/projects/archived/index.html): Engaging with Sonatype Community Projects, These Open Source projects have been retired. (7 words)
- [Maven Central: xerces:xercesSamples:2.2.1](/content/central/artifact/xerces/xercessamples/2-2-1.html): Discover xercesSamples in the xerces namespace. Explore metadata, contributors, the Maven POM file, and more. (47 words)
- [Standard Files | Sonatype Open Source Community Handbook](/content/contribute/docs/standards/repository-contents/index.html): This page outlines a set of required standard files and their contentst that each Project must adhere to.
If you created your GitHub Repository from our Community Template, these files will be created in your repository - you’ll just need to amend content as directed below.
There are a number of files you might think need creating that are not in the Template - see Organization Files. Files YOU should create Code Owners This file must be named CODEOWNERS and be in the ., This page outlines a set of required standard files and their contentst that each Project must adhere to.
If you created your GitHub Repository from our Community Template, these files will be created in your repository - you’ll just need to amend content as directed below.
There are a number of files you might think need creating that are not in the Template - see Organization Files. Files YOU should create Code Owners This file must be named CODEOWNERS and be in the . (378 words)
- [Log4Shell Infographic copy - RV8](/content/hubfs/1-2025_website-assets/resource_files/log4shell-infographic-pdf.html) (119 words)
- [Maven Central: xerces:xercesSamples:2.6.1](/content/central/artifact/xerces/xercessamples/2-6-1.html): Discover xercesSamples in the xerces namespace. Explore metadata, contributors, the Maven POM file, and more. (47 words)
- [Starting a New Project | Sonatype Open Source Community Handbook](/content/contribute/docs/project-lifecycle/new-project/index.html): You can share your idea for a new Project by starting a Discussion here.
Organization Admins can execute the below procedure to create new Project within the Sonatype Open Source Community.
New Project Proposal Prerequisites Ensure you have defined a clear purpose for the new project Maintaniers of the project must have previously contributed to another Sonatype Open Source Project Why? Having contributed previously means you’ll have signed our CLA and understand our Community workflows., You can share your idea for a new Project by starting a Discussion here.
Organization Admins can execute the below procedure to create new Project within the Sonatype Open Source Community.
New Project Proposal Prerequisites Ensure you have defined a clear purpose for the new project Maintaniers of the project must have previously contributed to another Sonatype Open Source Project Why? Having contributed previously means you’ll have signed our CLA and understand our Community workflows. (391 words)
- [Maven Central: xerces:xercesSamples:2.6.2](/content/central/artifact/xerces/xercessamples/2-6-2.html): Discover xercesSamples in the xerces namespace. Explore metadata, contributors, the Maven POM file, and more. (47 words)
- [Running GitHub Actions Locally | Sonatype Open Source Community Handbook](/content/contribute/docs/how-to/testing-github-actions-locally/index.html): You can locally test the GitHub Actions defined in this your project using nektos act.
Setup The first time you run act, it can take a long time (with no output) to download the various Docker goodies. Give it time before deciding it is stuck. Simply run:
act Rancher Desktop on Mac If you are using Rancher Desktop on Mac, you may see errors like this:
% act -j build INFO[0000] Using docker host 'unix:///var/run/docker., You can locally test the GitHub Actions defined in this your project using nektos act.
Setup The first time you run act, it can take a long time (with no output) to download the various Docker goodies. Give it time before deciding it is stuck. Simply run:
act Rancher Desktop on Mac If you are using Rancher Desktop on Mac, you may see errors like this:
% act -j build INFO[0000] Using docker host 'unix:///var/run/docker. (322 words)
- [Dependency Management | Sonatype Open Source Community Handbook](/content/contribute/docs/standards/dependency-management/index.html): We use Sonatype Lifecycle to ensure our Community Projects use only the best open-source dependencies.
Each project should include Sonatype Lifecycle analysis scans during each Pull Request and upon each Release.
You can check out the real world implementation for this handbook - here for Continuous Integration and here for Release.
When implementing your scans, do reference the official Sonatype Lifecycle documentation that relates to the langugages and ecosystems in the project., We use Sonatype Lifecycle to ensure our Community Projects use only the best open-source dependencies.
Each project should include Sonatype Lifecycle analysis scans during each Pull Request and upon each Release.
You can check out the real world implementation for this handbook - here for Continuous Integration and here for Release.
When implementing your scans, do reference the official Sonatype Lifecycle documentation that relates to the langugages and ecosystems in the project. (201 words)
- [Setting Up Organizations on my.sonatype.com](/content/help/en/using-my-sonatype-com-html.html) (1,494 words)
- [Security Advisories – Sonatype Support](/content/support/hc/en-us/sections/203012668-security-advisories/index.html): Important advisories of known security vulnerabilities in Sonatype products. (319 words)
- [Maven Central: xerces:xerces:2.4.0](/content/central/artifact/xerces/xerces/2-4-0.html): Discover xerces in the xerces namespace. Explore metadata, contributors, the Maven POM file, and more. (63 words)
- [License and Features](/content/help/en/licensing-and-features-html.html) (206 words)
- [Configure Hugging Face with Nexus](/content/help/en/configure-hugging-face-with-nexus-html.html) (750 words)
- [Sonatype & NeuVector Unite to Centralize Container Security](/content/press-releases/neuvector/index.html): You can now integrate Sonatype Nexus and NeuVector to get a comprehensive view of all Kubernetes and Container open source risk in one place.  (598 words)
- [Code Quality | Sonatype Open Source Community Handbook](/content/contribute/docs/standards/code-quality/index.html): We require all Sonatype Community Projects to undertake scans by SonarCloud (first party code analysis) and Sonatype Lifecycle (third party dependency analysis) as a minimum.
First Party Code Analysis We utilise SonarCloud’s Automatic Analysis.
Request your project is added to the Sonatype Nexus Community Sonar Cloud instance by reaching out to the Community Maintainers.
Once configured in SonarCloud, analysis will be automatic. You should configure SonarCloud Analysis as a required check for PRs into your main branch., We require all Sonatype Community Projects to undertake scans by SonarCloud (first party code analysis) and Sonatype Lifecycle (third party dependency analysis) as a minimum.
First Party Code Analysis We utilise SonarCloud’s Automatic Analysis.
Request your project is added to the Sonatype Nexus Community Sonar Cloud instance by reaching out to the Community Maintainers.
Once configured in SonarCloud, analysis will be automatic. You should configure SonarCloud Analysis as a required check for PRs into your main branch. (272 words)
- [hubfs/1-2023_new_site_assets/cheat-20sheets/what-is-an-sbom_updated-pdf.html](/content/hubfs/1-2023_new_site_assets/cheat-20sheets/what-is-an-sbom_updated-pdf.html) (429 words)
- [Maven Cookbook Appendix | Sonatype](/content/resources/guides/maven-cookbook/appendix-a/index.html): This chapter of the Maven Cookbook outlines the Creative Commons Attribution-Noncommercial-No Derivative Works license terms.  (1,036 words)
- [GitHub Repository | Sonatype Open Source Community Handbook](/content/contribute/docs/standards/github-repository/index.html): This page documents the configuration that must be applied to each Project’s GitHub Repository.
The use of must and should indicate whether it is a requirement or strong guideline. Any setting not explicitly documented below is not considered part of the standards at the time of publication. General Settings These settings are found under Settings -> General.
Require contributors to sign off on web-based commits must be enabled ✅ Default branch should be named main Features: Wikis should be disabled ❌ Issues must be enabled ✅ Sponsorhips must be disabled ❌ Preserve this repository should be enabled ✅ Discussions should be enabled ✅ Projects should be disbaled ❌ Pull Requests: Allow merge commits should be enabled ✅ Allow squash merging should be enabled ✅ Allow rebase merging should be disabled ❌ Always suggest updating pull request branches should be enabled ✅ Allow auto-merge should be disabled ❌ Automatically delete head branches should be enabled ✅ Code and automation Branches These settings are found under Settings -> Code and automation -> Branches., This page documents the configuration that must be applied to each Project’s GitHub Repository.
The use of must and should indicate whether it is a requirement or strong guideline. Any setting not explicitly documented below is not considered part of the standards at the time of publication. General Settings These settings are found under Settings -> General.
Require contributors to sign off on web-based commits must be enabled ✅ Default branch should be named main Features: Wikis should be disabled ❌ Issues must be enabled ✅ Sponsorhips must be disabled ❌ Preserve this repository should be enabled ✅ Discussions should be enabled ✅ Projects should be disbaled ❌ Pull Requests: Allow merge commits should be enabled ✅ Allow squash merging should be enabled ✅ Allow rebase merging should be disabled ❌ Always suggest updating pull request branches should be enabled ✅ Allow auto-merge should be disabled ❌ Automatically delete head branches should be enabled ✅ Code and automation Branches These settings are found under Settings -> Code and automation -> Branches. (313 words)
- [Component Not Found | Sonatype Guide](/content/guide/component/maven/xerces-3axerces/x-y-z.html): Could not find component data for maven/xerces:xerces/x.y.z. This component may not exist in our database or may have been removed. (17 words)
- [Submitting a Contribution | Sonatype Open Source Community Handbook](/content/contribute/docs/contributing/submitting/index.html): We welcome contributions via Pull Requests to our Community Projects.
Please ensure they meet these guidelines:
Has a clear and singular purpose It is backed by one or more GitHub Issues in the project Has appropriate test coverage for the Pull Requests purpose (if you add or modify functionality, make sure you add tests for this!) Meet the Projects Code Style Convention and Contribution Guidelines (see CONTRIBUTING.md in the specific Project) If you haven’t yet, please review the requirements for contributors., We welcome contributions via Pull Requests to our Community Projects.
Please ensure they meet these guidelines:
Has a clear and singular purpose It is backed by one or more GitHub Issues in the project Has appropriate test coverage for the Pull Requests purpose (if you add or modify functionality, make sure you add tests for this!) Meet the Projects Code Style Convention and Contribution Guidelines (see CONTRIBUTING.md in the specific Project) If you haven’t yet, please review the requirements for contributors. (166 words)
- [Activating a Project | Sonatype Open Source Community Handbook](/content/contribute/docs/project-lifecycle/activation/index.html): Projects within our Community may occasionally transition between states, such as moving from an unset or archived status to active. This process ensures projects are thoughtfully evaluated and meet the standards required for active maintenance.
Activating a Project To activate a project, follow these steps:
1. Review the Project Assess the project’s relevance, dependencies, and community interest. This includes:
Consider recent issues, pull requests, or community engagement Review alignment with current Community goals, as applicable Confirm the project’s compliance with Community Project Standards 2., Projects within our Community may occasionally transition between states, such as moving from an unset or archived status to active. This process ensures projects are thoughtfully evaluated and meet the standards required for active maintenance.
Activating a Project To activate a project, follow these steps:
1. Review the Project Assess the project’s relevance, dependencies, and community interest. This includes:
Consider recent issues, pull requests, or community engagement Review alignment with current Community goals, as applicable Confirm the project’s compliance with Community Project Standards 2. (280 words)
- [Project Contributor | Sonatype Open Source Community Handbook](/content/contribute/docs/community_roles/contributor/index.html): A Project Contributor plays a pivotal role in shaping the project through code, documentation, or design. Whether fixing bugs, implementing features, or enhancing the user experience—contributors bring fresh perspectives and energy. Their work supports the project’s evolution, bridging the gap between the project’s goals and the community’s needs.
This role does not require any permissions on the GitHub Project.
How to Become a Contributor You can be a Contributor by opening a Pull Request following our guidelines on submitting a contribution., A Project Contributor plays a pivotal role in shaping the project through code, documentation, or design. Whether fixing bugs, implementing features, or enhancing the user experience—contributors bring fresh perspectives and energy. Their work supports the project’s evolution, bridging the gap between the project’s goals and the community’s needs.
This role does not require any permissions on the GitHub Project.
How to Become a Contributor You can be a Contributor by opening a Pull Request following our guidelines on submitting a contribution. (224 words)
- [Project Maintainer | Sonatype Open Source Community Handbook](/content/contribute/docs/community_roles/maintainer/index.html): The Project Maintainer is the backbone of a project’s success, balancing technical leadership with community engagement. They curate contributions, ensure code quality, and manage project direction. With an eye for detail and a commitment to the project’s vision, maintainers foster an inclusive and collaborative environment, enabling consistent growth and innovation.
Each project has a GitHub Team which contains it’s maintainers. It is named @sonatype-nexus-community/[PROJECT] - e.g. @sonatype-nexus-community/the-cla.
Project Maintainers are also Code Owners for the respective project - thus the CODEOWNERS file for the project should include the above team., The Project Maintainer is the backbone of a project’s success, balancing technical leadership with community engagement. They curate contributions, ensure code quality, and manage project direction. With an eye for detail and a commitment to the project’s vision, maintainers foster an inclusive and collaborative environment, enabling consistent growth and innovation.
Each project has a GitHub Team which contains it’s maintainers. It is named @sonatype-nexus-community/[PROJECT] - e.g. @sonatype-nexus-community/the-cla.
Project Maintainers are also Code Owners for the respective project - thus the CODEOWNERS file for the project should include the above team. (178 words)
- [Graduation Process | Sonatype Open Source Community Handbook](/content/contribute/docs/project-lifecycle/graduation-process/index.html): For some of our Community Projects, there comes a time where Sonatype officially supports the features or functions provided by a Community Project. In these situations we mark the Community Project as Graduated by following the below process.
Graduation Preparation Project Graduation Proposal For the sake of historical context and community insight, a GitHub Issue should be created to explain the reasoning and expectations for graduation. This is benefitial even in cases where community engagement is low., For some of our Community Projects, there comes a time where Sonatype officially supports the features or functions provided by a Community Project. In these situations we mark the Community Project as Graduated by following the below process.
Graduation Preparation Project Graduation Proposal For the sake of historical context and community insight, a GitHub Issue should be created to explain the reasoning and expectations for graduation. This is benefitial even in cases where community engagement is low. (230 words)
- [Creating a Maven Plugin That Executes Only Once Per Build](/content/blog/2009/05/how-to-make-a-plugin-run-once-during-a-build/index.html): With it's default behavior, Maven runs a plugin invocation for each project in a multi-module build. (767 words)
- [Announcing Sonatype Nexus Repository Beta | Sonatype Blog](/content/blog/2008/11/announcing-nexus-maven-repository-manager-pro-beta/index.html): Discover new features in Sonatype Nexus Repository's beta release, including enhanced staging, procurement, LDAP authentication, and repository proxying. (1,060 words)
- [Improving Open Source Security | Sonatype Customer Story](/content/customer-stories/improving-open-source-security/index.html): Learn how one organization improved open source security and developer efficiency with Sonatype Lifecycle, achieving a 70% reduction in research time. (940 words)
- [Project User | Sonatype Open Source Community Handbook](/content/contribute/docs/community_roles/user/index.html): A Project User engages with the project primarily by utilizing its features, following the guidelines set forth in its license. While they may not contribute directly, their usage helps validate the project’s relevance and functionality, providing passive feedback through adoption and interaction with the software.
Feedback may be provided by users through the form of GitHub Issues or Discussions, depending on the preference of the project.
This role does not require any permissions on the GitHub Project., A Project User engages with the project primarily by utilizing its features, following the guidelines set forth in its license. While they may not contribute directly, their usage helps validate the project’s relevance and functionality, providing passive feedback through adoption and interaction with the software.
Feedback may be provided by users through the form of GitHub Issues or Discussions, depending on the preference of the project.
This role does not require any permissions on the GitHub Project. (81 words)
- [Project Lifecycle | Sonatype Open Source Community Handbook](/content/contribute/docs/project-lifecycle/index.html): Engaging with Sonatype Community Projects, We use GitHub Custom Properties to indentify a Project’s Classification within our Community.
Custom Properties Flagship-Project This is a boolean. Where set to true, this indicates the Project has Flagship Status - i.e. it’s popular or something we want to highlight.
Project-Status There are four options to choose from:
Active - the project is being actively maintained Archived - the project is not being maintained Graduated - the project has been superseded by official Sonatype Project The fourth option is to leave this field unset. (116 words)
- [Secrets Management | Sonatype Open Source Community Handbook](/content/contribute/docs/standards/secrets-management/index.html): We currently use GitHub Secrets for our Open Source Community projects.
This is great but currently has one known drawback - PRs from Forks cannot access our secrets and as such Continous Integration GitHub Workflows will fail., We currently use GitHub Secrets for our Open Source Community projects.
This is great but currently has one known drawback - PRs from Forks cannot access our secrets and as such Continous Integration GitHub Workflows will fail. (37 words)
- [Organization Admin | Sonatype Open Source Community Handbook](/content/contribute/docs/community_roles/admin/index.html): The Organization Administrators serve as the strategic overseers of our GitHub organization, responsible for governance, permissions, and maintaining the integrity of the repository ecosystem. Their role ensures seamless collaboration, safeguards project resources, and provides stewardship over organizational assets — ensuring the community’s long-term sustainability and security.
How to Become an Organization Admin Organization Admins are selected from the Sonatype OSPO and are entrusted with the responsibility of overseeing the GitHub organization’s logistics., The Organization Administrators serve as the strategic overseers of our GitHub organization, responsible for governance, permissions, and maintaining the integrity of the repository ecosystem. Their role ensures seamless collaboration, safeguards project resources, and provides stewardship over organizational assets — ensuring the community’s long-term sustainability and security.
How to Become an Organization Admin Organization Admins are selected from the Sonatype OSPO and are entrusted with the responsibility of overseeing the GitHub organization’s logistics. (155 words)
- [CI Tooling | Sonatype Open Source Community Handbook](/content/contribute/docs/standards/ci-tooling/index.html): The accepted standard is to use GitHub Actions for all automated Build, Test, CI and Release functions.
Historically, CircleCI was used, but projects must now make the migration to GitHub Actions as of September 2024., The accepted standard is to use GitHub Actions for all automated Build, Test, CI and Release functions.
Historically, CircleCI was used, but projects must now make the migration to GitHub Actions as of September 2024. (35 words)
- [Discussing Ideas | Sonatype Open Source Community Handbook](/content/contribute/docs/contributing/discussing-ideas/index.html): Ideas are great! 💡 We welcome input from any project users.
If you want to raise one, or join the discussion, we recommend all projects use GitHub Discussions.
Please make sure you follow our Code of Conduct at all times., Ideas are great! 💡 We welcome input from any project users.
If you want to raise one, or join the discussion, we recommend all projects use GitHub Discussions.
Please make sure you follow our Code of Conduct at all times. (40 words)
- [CVE-2026-0600 | Security Details | Sonatype Guide](/content/guide/vulnerability/cve-2026-0600/index.html): Technical security analysis for CVE-2026-0600. CVSS 6.2 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (181 words)
- [How To Guides | Sonatype Open Source Community Handbook](/content/contribute/docs/how-to/index.html): Engaging with Sonatype Community Projects, This section contains some guidance for various scenarios and tool usage. (11 words)
- [CVE-2026-5189 | Security Details | Sonatype Guide](/content/guide/vulnerability/cve-2026-5189/index.html): Technical security analysis for CVE-2026-5189. CVSS 9.2 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (156 words)
- [Community Roles | Sonatype Open Source Community Handbook](/content/contribute/docs/community_roles/index.html): Engaging with Sonatype Community Projects, Individuals in the following roles are the backbone of our community.
Frequently, individuals will act in different roles at different times, or multiple at once.
For example, a maintainer will frequently act as a contributor and a contributor is likely a regular user of the tools they contribute to.
Click on a role below to learn more about it! (59 words)
- [CVE-2026-3048 | Security Details | Sonatype Guide](/content/guide/vulnerability/cve-2026-3048/index.html): Technical security analysis for CVE-2026-3048. CVSS 5.1 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (141 words)
- [Hugging Face CLI Usage](/content/help/en/hugging-face-cli-usage-html.html) (242 words)
- [CVE-2024-4956 Nexus Repository 3  - Path Traversal - 2024-05-16 – Sonatype Support](/content/support/hc/en-us/articles/29416509323923-cve-2024-4956-nexus-repository-3-path-traversal-2024-05-16.html): Sonatype Nexus Security Advisory Date:  May 16, 2024 Affected Versions:  All previous Sonatype Nexus Repository 3.x OSS/Pro versions up... (503 words)
- [CVE-2026-3199 | Security Details | Sonatype Guide](/content/guide/vulnerability/cve-2026-3199/index.html): Technical security analysis for CVE-2026-3199. CVSS 9.4 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (137 words)
- [download/clm/scanner/nexus-iq-cli-2-13-1-01-windows-x86_64-zip-sha256.html](/content/download/clm/scanner/nexus-iq-cli-2-13-1-01-windows-x86_64-zip-sha256.html) (1 words)
- [CVE-2026-14504 Nexus Repository 3 - Authorization Bypass in Component Upload API - 2026-07-14 – Sonatype Support](/content/support/hc/en-us/articles/53137654741907-cve-2026-14504-nexus-repository-3-authorization-bypass-in-component-upload-api-2026-07-14.html): Sonatype Nexus Security AdvisoryDate: July 14, 2026Affected Versions: All previous Sonatype Nexus Repository 3 CE/Pro versions with... (676 words)
- [CVE-2026-3438 | Security Details | Sonatype Guide](/content/guide/vulnerability/cve-2026-3438/index.html): Technical security analysis for CVE-2026-3438. CVSS 5.1 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (134 words)
- [download/clm/scanner/nexus-iq-cli-2-13-1-01-osx-x86_64-pkg-md5.html](/content/download/clm/scanner/nexus-iq-cli-2-13-1-01-osx-x86_64-pkg-md5.html) (121 words)
- [CVE-2026-11403 Nexus Repository 3 - Insufficient Entropy in API Key Generation - 2026-07-14 – Sonatype Support](/content/support/hc/en-us/articles/52347011450515-cve-2026-11403-nexus-repository-3-insufficient-entropy-in-api-key-generation-2026-07-14.html): Sonatype Nexus Security AdvisoryDate: July 14, 2026Affected Versions: All Sonatype Nexus Repository 3.x CE/Pro versions before... (493 words)
- [Create a Hugging Face Repository](/content/help/en/create-a-hugging-face-repository-html.html) (226 words)
- [Using S3 as a File Store for Self-Hosted IQ Server](/content/help/en/s3-for-self-hosted-iq-server-html.html) (1,365 words)
- [Submit a request – Sonatype Support](/content/support/hc/en-us/requests/new/index.html) (424 words)
- [CVE-2026-10741 Nexus Repository 3 - Incorrect Authorization - 2026-06-17 – Sonatype Support](/content/support/hc/en-us/articles/52341191736851-cve-2026-10741-nexus-repository-3-incorrect-authorization-2026-06-17.html): Sonatype Nexus Security AdvisoryDate: June 17th, 2026Affected Versions: All Sonatype Nexus Repository 3.x versions from 3.1.0 through... (278 words)
- [Troubleshooting Eclipse Jetty SSL Certificates – Sonatype Support](/content/support/hc/en-us/articles/225023368-troubleshooting-eclipse-jetty-ssl-certificates.html): Problem You have received a RSA certificate from your organization to enable HTTPS within Sonatype Nexus Repository 2 & 3 or Sonatype... (833 words)
- [download/clm/ci/bamboo/nexus-iq-bamboo-plugin-4-5-1-01-obr-asc.html](/content/download/clm/ci/bamboo/nexus-iq-bamboo-plugin-4-5-1-01-obr-asc.html) (10 words)
- [download/clm/scanner/nexus-iq-cli-2-13-1-01-osx-x86_64-pkg-sha512.html](/content/download/clm/scanner/nexus-iq-cli-2-13-1-01-osx-x86_64-pkg-sha512.html) (1 words)
- [CI and CLI Integrations](/content/help/en/ci-and-cli-integrations-html.html) (879 words)
- [IQ Server System Requirements](/content/help/en/system-requirements-html.html) (1,433 words)
- [CVE-2026-10748 Nexus Repository 3 - Remote Code Execution - 2026-06-16 – Sonatype Support](/content/support/hc/en-us/articles/52335766035603-cve-2026-10748-nexus-repository-3-remote-code-execution-2026-06-16.html): Sonatype Nexus Security AdvisoryDate: June 16, 2026Affected Versions: All Sonatype Nexus Repository 3.x CE/Pro versions before... (388 words)
- [download/clm/scanner/nexus-iq-cli-2-13-1-01-linux-aarch_64-tgz-sha256.html](/content/download/clm/scanner/nexus-iq-cli-2-13-1-01-linux-aarch_64-tgz-sha256.html) (106 words)
- [download/clm/scanner/nexus-iq-cli-2-13-1-01-osx-aarch_64-pkg-sha512.html](/content/download/clm/scanner/nexus-iq-cli-2-13-1-01-osx-aarch_64-pkg-sha512.html) (1 words)
- [Announcements – Sonatype Support](/content/support/hc/en-us/categories/201980768-announcements/index.html) (116 words)
- [download/clm/scanner/nexus-iq-cli-2-13-1-01-linux-x86_64-tgz-sha512.html](/content/download/clm/scanner/nexus-iq-cli-2-13-1-01-linux-x86_64-tgz-sha512.html) (1 words)
- [download/integrations/jenkins/nexus-jenkins-plugin-3-34-2-01-hpi-asc.html](/content/download/integrations/jenkins/nexus-jenkins-plugin-3-34-2-01-hpi-asc.html) (10 words)
- [CVE-2026-7494 Nexus Repository 3 - SSRF in SSL Certificate Retrieval - 2026-07-14 – Sonatype Support](/content/support/hc/en-us/articles/53126069518227-cve-2026-7494-nexus-repository-3-ssrf-in-ssl-certificate-retrieval-2026-07-14.html): Sonatype Nexus Security AdvisoryDate: July 14, 2026Affected Versions: Sonatype Nexus Repository 3 CE/Pro versions 3.0.0 up to and... (365 words)
- [download/clm/scanner/nexus-iq-cli-2-13-1-01-linux-x86_64-tgz-sha1.html](/content/download/clm/scanner/nexus-iq-cli-2-13-1-01-linux-x86_64-tgz-sha1.html) (79 words)
- [download/clm/scanner/nexus-iq-cli-2-13-1-01-osx-aarch_64-pkg-sha256.html](/content/download/clm/scanner/nexus-iq-cli-2-13-1-01-osx-aarch_64-pkg-sha256.html) (1 words)
- [download/clm/scanner/nexus-iq-cli-2-13-1-01-linux-aarch_64-tgz-sha512.html](/content/download/clm/scanner/nexus-iq-cli-2-13-1-01-linux-aarch_64-tgz-sha512.html) (1 words)
- [download/clm/scanner/nexus-iq-cli-2-13-1-01-linux-x86_64-tgz-sha256.html](/content/download/clm/scanner/nexus-iq-cli-2-13-1-01-linux-x86_64-tgz-sha256.html) (1 words)
- [CVE-2026-3048 Nexus Repository 3 - Improper LDAP Referral Handling - 2026-05-11 – Sonatype Support](/content/support/hc/en-us/articles/51591695462675-cve-2026-3048-nexus-repository-3-improper-ldap-referral-handling-2026-05-11.html): Sonatype Nexus Security AdvisoryDate: 2026-05-11Affected Versions: Sonatype Nexus Repository 3.0.0 through 3.91.x (CE/Pro)Fixed in... (407 words)
- [CVE-2026-14645 Nexus Repository 3 - Webhook SSRF - 2026-07-14 – Sonatype Support](/content/support/hc/en-us/articles/53158843564179-cve-2026-14645-nexus-repository-3-webhook-ssrf-2026-07-14.html): Sonatype Nexus Security AdvisoryDate: July 14, 2026Affected Versions: All previous Sonatype Nexus Repository 3 CE/Pro versions up to and... (375 words)
- [CVE-2026-14646 Nexus Repository 3 - SSRF via HTTP Redirect - 2026-07-14 – Sonatype Support](/content/support/hc/en-us/articles/53165019641363-cve-2026-14646-nexus-repository-3-ssrf-via-http-redirect-2026-07-14.html): Sonatype Nexus Security AdvisoryDate: July 14, 2026Affected Versions: All Sonatype Nexus Repository 3 CE/Pro versions from 3.0.0 up to... (414 words)
- [Integrating Microsoft Entra ID (formerly Azure AD) with Sonatype Platform using OpenID Connect – Sonatype Support](/content/support/hc/en-us/articles/46996248298387-integrating-microsoft-entra-id-formerly-azure-ad-with-sonatype-platform-using-openid-connect.html): .OverviewThis article describes how to integrate Microsoft Entra ID with Sonatype Nexus Repository and Sonatype Lifecycle using OpenID... (1,022 words)
- [CVE-2026-3329 Nexus Repository 3 - Authentication Handling Issue - 2026-06-11 – Sonatype Support](/content/support/hc/en-us/articles/52482870409491-cve-2026-3329-nexus-repository-3-authentication-handling-issue-2026-06-11.html): Sonatype Nexus Security AdvisoryDate: June 11th, 2026Affected Versions: All Sonatype Nexus Repository versions from 3.0.0 up to and... (445 words)
- [CVE-2024-5764 | Security Details | Sonatype Guide](/content/guide/vulnerability/cve-2024-5764/index.html): Technical security analysis for CVE-2024-5764. CVSS 6.5 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (220 words)
- [CVE-2026-7308 Nexus Repository 3 - Stored Cross-Site Scripting (XSS) - 2026-05-11 – Sonatype Support](/content/support/hc/en-us/articles/51592065985939-cve-2026-7308-nexus-repository-3-stored-cross-site-scripting-xss-2026-05-11.html): Sonatype Nexus Security AdvisoryDate: 2026-05-11Affected Versions: Sonatype Nexus Repository 3.6.0 through 3.91.x (CE/Pro)Fixed in... (451 words)
- [My Sonatype - Innovate | Advocate Program](/content/my/innovate/index.html): Welcome to Sonatype’s Customer Platform. Find the information you need to get the most out of our products. Access technical support, help docs, educational resources, our community forum, and more., This program is designed for innovative Sonatype customers, to help you accelerate your time-to-value with Sonatype solutions and understand the best practices that underpin them. And—most importantly— it’s your chance to connect and collaborate with other Sonatype customers! (276 words)
- [How to scan Android Projects with Lifecycle IQ Server – Sonatype Support](/content/support/hc/en-us/articles/360000387687/index.html): .OverviewOur ideal scan target is a post-build, production-like artifact. When we perform an evaluation, we traverse the contents of the... (835 words)
- [download/clm/scanner/nexus-iq-cli-2-13-1-01-linux_musl-x86_64-tgz-sha256.html](/content/download/clm/scanner/nexus-iq-cli-2-13-1-01-linux_musl-x86_64-tgz-sha256.html) (1 words)
- [download/clm/scanner/nexus-iq-cli-2-13-1-01-linux_musl-x86_64-tgz-sha512.html](/content/download/clm/scanner/nexus-iq-cli-2-13-1-01-linux_musl-x86_64-tgz-sha512.html) (1 words)
- [sonatype-2022-3546 | Security Details | Sonatype Guide](/content/guide/vulnerability/sonatype-2022-3546/index.html): Technical security analysis for sonatype-2022-3546. CVSS 10.0 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (61 words)
- [Eclipse Jetty Changes in Nexus Repository 2.15.0 – Sonatype Support](/content/support/hc/en-us/articles/4417117321619-eclipse-jetty-changes-in-repository-2-15-0.html): . Nexus Repository 2 officially sunsetted June 30, 2025. Visit my.sonatype.com for archived documentation. Migrate to Sonatype Nexus... (1,224 words)
- [My Sonatype - Software Supply Chain Maturity Survey](/content/my/ssc-maturity-survey/index.html): Welcome to Sonatype’s Customer Platform. Find the information you need to get the most out of our products. Access technical support, help docs, educational resources, our community forum, and more., Improve your secure development practices by first understanding where you are now. (115 words)
- [sonatype-2024-3214 | Security Details | Sonatype Guide](/content/guide/vulnerability/sonatype-2024-3214/index.html): Technical security analysis for sonatype-2024-3214. CVSS 7.1 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (74 words)
- [Master EULA](/content/dnt/usage/master-eula/index.html) (1,694 words)
- [Upgrade the IQ Server](/content/help/en/upgrading-the-iq-server-html.html) (966 words)
- [How to re-encrypt credentials with custom key in kubernetes deployed nexus HA – Sonatype Support](/content/support/hc/en-us/articles/43534207547923-how-to-re-encrypt-credentials-with-custom-key-in-kubernetes-deployed-nexus-ha.html): . Overview:From version 3.73 nexus provides option to use custom key for encrypting sensitive details, like credentials. Our doc link has... (783 words)
- [Operational Menu](/content/help/en/operational-menu-html.html) (890 words)
- [my.sonatype.com](/content/help/en/my-sonatype-com-html.html) (579 words)
- [CVE-2021-40143 Nexus Repository 3 - HTTP Header Injection - 2021-09-01 – Sonatype Support](/content/support/hc/en-us/articles/4405941762579/index.html): Date: September 1, 2021 Affected Versions: Nexus Repository 3 versions up to and including 3.33.1 Fixed in Version: Nexus Repository 3... (405 words)
- [hubfs/1-2023-20new-20site-20assets/cheat-20sheets/sbom-20401-preparing-20audits-20-20sentence-20case-pdf.html](/content/hubfs/1-2023-20new-20site-20assets/cheat-20sheets/sbom-20401-preparing-20audits-20-20sentence-20case-pdf.html) (571 words)
- [Advanced Legal Pack Quickstart](/content/help/en/advanced-legal-pack-quickstart-html.html) (711 words)
- [Reference Policies](/content/help/en/reference-policies-html.html) (940 words)
- [hubfs/1-2023_new_site_assets/cheat-20sheets/sbom-20401-preparing-20audits-pdf.html](/content/hubfs/1-2023_new_site_assets/cheat-20sheets/sbom-20401-preparing-20audits-pdf.html) (571 words)
- [Phase 3 - Removing Risk](/content/help/en/phase-3-removing-risk-html.html) (364 words)
- [The page you were looking for doesn't exist – Sonatype Support](/content/support/hc/en-us/articles/1500000415082-cve-2020-29436-nexus-repository-manager-3-xml-external-entities-injection-2020-12-15.html) (21 words)
- [sonatype-2022-3475 | Security Details | Sonatype Guide](/content/guide/vulnerability/sonatype-2022-3475/index.html): Technical security analysis for sonatype-2022-3475. CVSS 10.0 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (46 words)
- [Scripting Nexus Repository 3 – Sonatype Support](/content/support/hc/en-us/articles/360045220393/index.html): Article Contents  Feature Summary Default Script Settings Nexus Repository 3.21.2 and Newer Default Script Settings Nexus Repository... (760 words)
- [Migrating IQ Server from H2 to PostgreSQL](/content/help/en/iq-migration-to-postgresql-html.html) (659 words)
- [Integrating Keycloak with Sonatype Platform using OpenID Connect (OIDC) – Sonatype Support](/content/support/hc/en-us/articles/47814909115539-integrating-keycloak-with-sonatype-platform-using-openid-connect-oidc.html): OverviewThis article describes how to integrate Keycloak with the Sonatype Platform (Nexus Repository and Lifecycle) using OpenID Connect... (1,006 words)
- [Golden PR for Azure DevOps](/content/help/en/golden-pr-for-azure-devops-html.html) (187 words)
- [hubfs/ssc/2023-20sonatype-209th-20annual-20state-20of-20the-20software-20supply-20chain-20update-pdf.html](/content/hubfs/ssc/2023-20sonatype-209th-20annual-20state-20of-20the-20software-20supply-20chain-20update-pdf.html) (20,671 words)
- [Bitbucket Code Insights](/content/help/en/bitbucket-code-insights-html.html) (251 words)
- [Policy Notifications](/content/help/en/policy-notifications-html.html) (584 words)
- [Golden PR for Bitbucket](/content/help/en/golden-pr-for-bitbucket-html.html) (183 words)
- [My Sonatype | Customer Platform](/content/my/solutions/index.html): Welcome to Sonatype’s Customer Platform. Find the information you need to get the most out of our products. Access technical support, help docs, educational resources, our community forum, and more., Welcome to Sonatype's Customer Platform. Find the information you need to get the most out of our products. Access technical support, help docs, educational resources, our community forum, and more. (174 words)
- [Run IQ Server as a Service](/content/help/en/run-iq-server-as-a-service-html.html) (420 words)
- [How to Change an OKTA SAML User's Username in the Sonatype Nexus Repository – Sonatype Support](/content/support/hc/en-us/articles/37962513311123-how-to-change-an-okta-saml-user-s-username-in-the-sonatype-nexus-repository.html): . Overview This article demonstrates how to change an OKTA SAML User's username in the Sonatype Nexus Repository.  1.) Before making... (328 words)
- [Configuring Outbound Traffic](/content/help/en/configuring-outbound-traffic-html.html) (439 words)
- [API Reference](/content/help/en/api-reference-landing-page-html.html) (87 words)
- [Install self-hosted IQ Server](/content/help/en/install-self-hosted-iq-server-html.html) (629 words)
- [External Database Configuration](/content/help/en/external-database-configuration-html.html) (532 words)
- [Network Access for Sonatype IQ Cloud](/content/help/en/network-access-for-iq-cloud-html.html) (294 words)
- [Golden PR for GitLab](/content/help/en/golden-pr-for-gitlab-html.html) (183 words)
- [IQ Server Directory and Files](/content/help/en/iq-server-directory-and-files-html.html) (414 words)
- [Manual Self-Hosted High Availability IQ Server Deployment](/content/help/en/manual-self-hosted-iq-ha-deployment-html.html) (615 words)
- [Golden PR for GitHub](/content/help/en/golden-pr-for-github-html.html) (186 words)
- [General How To & Maintenance – Sonatype Support](/content/support/hc/en-us/sections/360001917793-general-how-to-maintenance/index.html) (404 words)
- [Automatic Applications](/content/help/en/automatic-application-html.html) (200 words)
- [hubfs/whitepaper-20text-20documents-20/nexus_lifecycle_champion_workshop_sept20-pdf.html](/content/hubfs/whitepaper-20text-20documents-20/nexus_lifecycle_champion_workshop_sept20-pdf.html) (524 words)
- [Policy Evaluation with Nexus IQ for SCM](/content/help/en/policy-evaluation-with-sonatype-for-scm-html.html) (142 words)
- [Product License](/content/help/en/product-license-html.html) (331 words)
- [IQ Server Download Archives](/content/help/en/download-archives-iq-server-cli-html.html) (1,927 words)
- [Maven Central: it.burning:cron-expression-descriptor](/content/central/artifact/it-burning/cron-expression-descriptor/index.html): Discover cron-expression-descriptor in the it.burning namespace. Explore metadata, contributors, the Maven POM file, and more. (91 words)
- [Estimating Heap Sizes](/content/help/en/estimating-heap-sizes-html.html) (187 words)
- [Sonatype’s User-based License Model FAQ – Sonatype Support](/content/support/hc/en-us/articles/213464168-sonatype-nexus-license-faq/index.html): This article is provided for informational purposes and is not intended as a legal document.Your legal agreement with Sonatype has... (335 words)
- [Investigating Blob Store and Repository Size and Space Usage – Sonatype Support](/content/support/hc/en-us/articles/115009519847-investigating-blobstore-space-usage/index.html): .When working with repositories and blob stores, you may want to have some insight into how the storage space is being used.This article... (1,679 words)
- [How to resolve Nexus Repo 3 "Unable to authenticate" when running "npm login" with valid credentials – Sonatype Support](/content/support/hc/en-us/articles/39120720691987-how-to-resolve-nexus-repo-3-unable-to-authenticate-when-running-npm-login-with-valid-credentials.html): Overview You may encounter an "Unable to authenticate" error when attempting to run `npm login`, even though you've... (248 words)
- [Understanding the CPU information reported in a Nexus Repo 3 support zip – Sonatype Support](/content/support/hc/en-us/articles/42129848269587-understanding-the-cpu-information-reported-in-a-nexus-repo-3-support-zip.html): Overview A few CPU-related values are reported in a Nexus Repo Manager support's ./info/jmx.json file:  AvailableProcessors... (190 words)
- [Repository - Sonatype Nexus Repository](/content/central/repository/maven-snapshots/index.html) (31 words)
- [Repository: How to enable Nexus 2 URL paths in Nexus 3. – Sonatype Support](/content/support/hc/en-us/articles/39325029843219-repository-how-to-enable-nexus-2-url-paths-in-nexus-3.html): After migrating from Nexus 2 to Nexus 3, you may notice that the default URL path to a repository is something like below:... (124 words)
- [Accessing the OrientDB Console – Sonatype Support](/content/support/hc/en-us/articles/115002930827-accessing-the-orientdb-console/index.html): . What is the OrientDB Console? Sonatype Nexus Repository 3 (NXRM) can use several OrientDB databases. In very specific circumstances,... (539 words)
- [Understanding "Verify Connection" Results for the Nexus Repository – IQ Server Integration – Sonatype Support](/content/support/hc/en-us/articles/50124419848211-understanding-verify-connection-results-for-the-nexus-repository-iq-server-integration.html): OverviewWhen configuring the IQ Server integration in Nexus Repository(nexus-repository-3-pro-setup) and clicking Verify Connection, the... (497 words)
- [How to re-encrypt credentials with custom key in kubernetes deployed nexus HA – Sonatype Support](/content/support/hc/en-us/articles/43534222205075-how-to-re-encrypt-credentials-with-custom-key-in-kubernetes-deployed-nexus-ha.html): . Overview:From version 3.73 nexus provides option to use custom key for encrypting sensitive details, like credentials. Our doc link has... (784 words)
- [Sonatype Nexus Repository | Upgrade to Pro](/content/products/sonatype-nexus-repo/oss-upgrade/index.html): Upgrade to Sonatype Nexus Repository Pro for enhanced scalability, HA, and robust support. Contact us to learn more about all the benefits of Pro. (395 words)
- [How to install Nexus Pro standalone instance using Sonatype nxrm-ha helm chart – Sonatype Support](/content/support/hc/en-us/articles/35673180613651-how-to-install-nexus-pro-standalone-instance-using-sonatype-nxrm-ha-helm-chart.html): Overview: Sonatype have deprecated the standalone helm3 charts to deploy nexus 3 instances as newer nexus HA helm charts were introduced.... (517 words)
- [Understanding Eclipse Jetty 9.4 Thread Allocation – Sonatype Support](/content/support/hc/en-us/articles/360000744687-understanding-eclipse-jetty-9-4-8-thread-allocation.html): . The following article attempts to explain via sample log messages and code references from Jetty 9.4.8, the default connector thread... (605 words)
- [How to configure NFS persistent volumes for nexus repo HA on prem deployments. – Sonatype Support](/content/support/hc/en-us/articles/30408918405523-how-to-configure-nfs-persistent-volumes-for-nexus-repo-ha-on-prem-deployments.html): .   Overview   Nexus HA deployments require shared storage for blobstores. Generally on cloud deployments we recommend to use Cloud... (504 words)
- [The page you were looking for doesn't exist – Sonatype Support](/content/support/hc/en-us/articles/222159808-how-to-upgrade-repository-manager-3-0-0-m7-to-3-0-0-final.html) (21 words)
- [How to Determine the Location of the Nexus Repository 3 Data Directory – Sonatype Support](/content/support/hc/en-us/articles/218707647/index.html): Determine Your Nexus Repository 3 Data Directory From Install Files Go to the install directory of Nexus Repository created using the... (262 words)
- [How to install Nexus Pro using Nexus Operator in OpenShift – Sonatype Support](/content/support/hc/en-us/articles/4757606085523-how-to-install-nexus-pro-using-nexus-operator-in-openshift.html): NOTE: This operator would be deprecated soon with a new Operator supporting external database. The steps in this Article are Legacy now. ... (365 words)
- [Install / Upgrade and Compatibility – Sonatype Support](/content/support/hc/en-us/sections/204911768-install-upgrade-and-compatibility/index.html) (258 words)
- [cryptography 49.0.0 | Versions | Sonatype Guide](/content/guide/component/pypi/cryptography/49-0-0/versions/index.html): Browse all available versions of cryptography. Compare version 49.0.0 with other releases, view security scores, and track version history for this pypi packag… (290 words)
- [Configuration and Data Directory Changes for Nexus Repository Manager 3.1.0 – Sonatype Support](/content/support/hc/en-us/articles/231749327/index.html): With the release of Nexus Repository 3.1, the repository manager consists of a new default file structure simplifying the work needed to... (209 words)
- [Best Practices for Upgrading Nexus Repository 3 – Sonatype Support](/content/support/hc/en-us/articles/24148134771987-best-practices-for-upgrading-nexus-repository-3.html): The best practices for upgrading Nexus Repository 3 are as follows:   Review all release notes up to the version you are upgrading to for... (286 words)
- [Check Non-AWS S3 Storage Compatibility before Upgrading to Nexus Repo 3.87+ – Sonatype Support](/content/support/hc/en-us/articles/47449225519251-check-non-aws-s3-storage-compatibility-before-upgrading-to-nexus-repo-3-87.html): OverviewThis article explains important compatibility considerations when upgrading Nexus Repository to version 3.87+ with non‑AWS... (415 words)
- [How to resolve file blob store path warnings when upgrading to Nexus Repository 3.29 or later – Sonatype Support](/content/support/hc/en-us/articles/360060497633-how-to-resolve-file-blob-store-path-warnings-when-upgrading-to-nexus-repository-3-29-or-later.html): As referenced in the 'Bug Fixes' section of the Nexus Repository 3.29 release notes, additional validation has been added to the file... (377 words)
- [How to Migrate Repository Config Not Content From Nexus Repository 2 to Nexus Repository 3 – Sonatype Support](/content/support/hc/en-us/articles/43411387909267-how-to-migrate-repository-config-not-content-from-nexus-repository-2-to-nexus-repository-3.html): .This is an advanced feature that should only be considered when all other options have been excluded.When using the migration wizard to... (393 words)
- [Repository Manager 2 – Sonatype Support](/content/support/hc/en-us/sections/36571362541459-repository-manager-2/index.html): Visit help.sonatype.com for documentation on Repository Manager 2. (26 words)
- [Optimizing Nexus Repository 2 Disk IO Performance – Sonatype Support](/content/support/hc/en-us/articles/213465258-optimizing-nexus-disk-io-performance/index.html): Nexus Repository 2 officially sunsetted June 30, 2025. Visit my.sonatype.com for archived documentation. Migrate to Sonatype Nexus... (438 words)
- [Nexus HA deployment on EKS fails with CrashLoopBackOff – Sonatype Support](/content/support/hc/en-us/articles/31346886096531-nexus-ha-deployment-on-eks-fails-with-crashloopbackoff.html): OVERVIEW: Nexus HA deployments on EKS cluster using Sonatype's helm chart requires per node local storage for work directory contents.... (339 words)
- [How to configure a proxy repository to maven.oracle.com – Sonatype Support](/content/support/hc/en-us/articles/213465728/index.html): Nexus Repository 2 officially sunsetted June 30, 2025. Visit my.sonatype.com for archived documentation. Migrate to Sonatype Nexus... (282 words)
- [What do all of the search/index related scheduled tasks do and when should I schedule them? – Sonatype Support](/content/support/hc/en-us/articles/213465468/index.html): Nexus Repository 2 officially sunsetted June 30, 2025. Visit my.sonatype.com for archived documentation. Migrate to Sonatype Nexus... (318 words)
- [How can I create private repositories in Nexus Repository? – Sonatype Support](/content/support/hc/en-us/articles/221279107/index.html): Privileges in Nexus Repository group repositories are transitive, any privilege granted to a group repository is also applied to all of... (422 words)
- [Skipping Blob Repository Mismatch Task Processing During Upgrade to 3.90.3 or Later – Sonatype Support](/content/support/hc/en-us/articles/50620344264339-skipping-blob-repository-mismatch-task-processing-during-upgrade-to-3-90-3-or-later.html): OverviewStarting in Nexus Repository 3.90.3, a skip option is available for the BlobRepositoryMismatchTask (... (516 words)
- [Contact Us About Nexus Repository | Sonatype](/content/products/sonatype-nexus/contact-us/index.html): Take your repository to the next level with Sonatype Nexus Repository Pro and get high availability, universal format support, and secure authentication. (113 words)
- [CVE-2026-0601 Nexus Repository 3 - Cross-Site Scripting - 2026-01-13 – Sonatype Support](/content/support/hc/en-us/articles/47934334375955-cve-2026-0601-nexus-repository-3-cross-site-scripting-2026-01-13.html): Sonatype Nexus Security AdvisoryDate: January 13, 2026Affected Versions: Sonatype Nexus Repository 3.82.0 through 3.87.1 (CE/Pro)Fixed in... (414 words)
- [Optimizing OrientDB Database Memory  – Sonatype Support](/content/support/hc/en-us/articles/115007093447/index.html): Understanding Embedded OrientDB Database Memory Nexus Repository 3 embeds several OrientDB databases. These databases utilize what is... (799 words)
- [What to Do When the OrientDB is Out of Disk Space – Sonatype Support](/content/support/hc/en-us/articles/360000052388/index.html): Symptoms If the disk hosting OrientDB runs out of disk space, you will see errors similar to the following in the nexus.log:... (256 words)
- [How to Unpack the Nexus Repository 3 Distribution Archives – Sonatype Support](/content/support/hc/en-us/articles/231740007/index.html): Unpacking the Distribution Archives Non-Destructively The distribution archives are designed to be unpacked from the command line such... (108 words)
- [CVE-2022-27907 Nexus Repository 3 - Server Side Request Forgery (SSRF) - 2022-03-30 – Sonatype Support](/content/support/hc/en-us/articles/5011047953555/index.html): Date: March 30, 2022 Affected Versions: Nexus Repository 3 versions up to and including 3.37.3 Fixed in Version: Nexus Repository 3... (328 words)
- [CVE-2021-43961 Nexus Repository 3 - HTML Injection - 2022-03-02 – Sonatype Support](/content/support/hc/en-us/articles/4412183372307/index.html): Date: March 02, 2022 Affected Versions: Nexus Repository 3 versions up to and including 3.37.3 Fixed in Version: Nexus Repository 3... (396 words)
- [What to Do When the Blobstore is Out of Disk Space – Sonatype Support](/content/support/hc/en-us/articles/360000096228/index.html): Symptoms When the blobstore runs out of disk space, you will notice errors in the nexus.log similar to the following, depending on the... (132 words)
- [The page you were looking for doesn't exist – Sonatype Support](/content/support/hc/en-us/articles/4408801690515/index.html) (21 words)
- [CVE-2026-65608 | Security Details | Sonatype Guide](/content/guide/vulnerability/cve-2026-65608/index.html): Technical security analysis for CVE-2026-65608. CVSS 8.7 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (240 words)
- [The page you were looking for doesn't exist – Sonatype Support](/content/support/hc/en-us/articles/4409326330003/index.html) (21 words)
- [Scheduler health check fails after migrating to external DB – Sonatype Support](/content/support/hc/en-us/articles/29297774137491-scheduler-health-check-fails-after-migrating-to-external-db.html): ENVIRONMENT: When nexus starting post DB migration to external DB, scheduler may fail to start system tasks to recreate search index and... (419 words)
- [DockerHub and Quay.io returning 429 due to rate limits – Sonatype Support](/content/support/hc/en-us/articles/32093607704723-dockerhub-and-quay-io-returning-429-due-to-rate-limits.html): quay.io returning 429 and rate limits: Redhat owns quay.io, and this page explains under what conditions that quay.io can return limits.... (582 words)
- [sonatype-2026-005077 | Security Details | Sonatype Guide](/content/guide/vulnerability/sonatype-2026-005077/index.html): Technical security analysis for sonatype-2026-005077. CVSS 8.5 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (70 words)
- [Advanced Option to Cleanup Unused Docker Layers in a Repository That Are Referenced in Another Repository – Sonatype Support](/content/support/hc/en-us/articles/22490107929619/index.html): Problem The standard task named "Docker - Delete unused manifests and images" has an intentional design restriction. When the... (484 words)
- [sonatype-2026-005079 | Security Details | Sonatype Guide](/content/guide/vulnerability/sonatype-2026-005079/index.html): Technical security analysis for sonatype-2026-005079. CVSS 4.9 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (79 words)
- [sonatype-2026-005076 | Security Details | Sonatype Guide](/content/guide/vulnerability/sonatype-2026-005076/index.html): Technical security analysis for sonatype-2026-005076. CVSS 7.7 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (64 words)
- [sonatype-2026-005078 | Security Details | Sonatype Guide](/content/guide/vulnerability/sonatype-2026-005078/index.html): Technical security analysis for sonatype-2026-005078. CVSS 7.0 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (80 words)
- [sonatype-2026-005067 | Security Details | Sonatype Guide](/content/guide/vulnerability/sonatype-2026-005067/index.html): Technical security analysis for sonatype-2026-005067. CVSS 4.3 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (80 words)
- [sonatype-2026-005068 | Security Details | Sonatype Guide](/content/guide/vulnerability/sonatype-2026-005068/index.html): Technical security analysis for sonatype-2026-005068. CVSS 7.6 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (68 words)
- [sonatype-2026-005070 | Security Details | Sonatype Guide](/content/guide/vulnerability/sonatype-2026-005070/index.html): Technical security analysis for sonatype-2026-005070. CVSS 5.3 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (76 words)
- [CVE-2021-34553 Nexus Repository 3 - Directory Traversal - 2021-06-17 – Sonatype Support](/content/support/hc/en-us/articles/4402433828371/index.html): Date: June 17, 2021 Affected Versions: Nexus Repository 3 versions up to and including 3.30.1 Fixed in Version: Nexus Repository 3... (413 words)
- [sonatype-2026-005071 | Security Details | Sonatype Guide](/content/guide/vulnerability/sonatype-2026-005071/index.html): Technical security analysis for sonatype-2026-005071. CVSS 4.9 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (56 words)
- [sonatype-2026-005073 | Security Details | Sonatype Guide](/content/guide/vulnerability/sonatype-2026-005073/index.html): Technical security analysis for sonatype-2026-005073. CVSS 5.7 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (83 words)
- [CVE-2026-16767 | Security Details | Sonatype Guide](/content/guide/vulnerability/cve-2026-16767/index.html): Technical security analysis for CVE-2026-16767. CVSS 6.5 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (189 words)
- [sonatype-2026-005072 | Security Details | Sonatype Guide](/content/guide/vulnerability/sonatype-2026-005072/index.html): Technical security analysis for sonatype-2026-005072. CVSS 4.3 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (71 words)
- [sonatype-2026-005075 | Security Details | Sonatype Guide](/content/guide/vulnerability/sonatype-2026-005075/index.html): Technical security analysis for sonatype-2026-005075. CVSS 8.5 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (75 words)
- [sonatype-2026-005080 | Security Details | Sonatype Guide](/content/guide/vulnerability/sonatype-2026-005080/index.html): Technical security analysis for sonatype-2026-005080. CVSS 7.5 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (71 words)
- [sonatype-2026-005082 | Security Details | Sonatype Guide](/content/guide/vulnerability/sonatype-2026-005082/index.html): Technical security analysis for sonatype-2026-005082. CVSS 7.1 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (70 words)
- [Failed Upgrade to Sonatype Nexus Repository 3.73.0 due to IllegalBlockSizeException last block incomplete in decryption – Sonatype Support](/content/support/hc/en-us/articles/35148783422611-failed-upgrade-to-sonatype-nexus-repository-3-73-0-due-to-illegalblocksizeexception-last-block-incomplete-in-decryption.html): . Problem  For a limited set of users, upgrading to Sonatype Nexus Repository 3.73.0 may fail due to... (486 words)
- [sonatype-2026-005083 | Security Details | Sonatype Guide](/content/guide/vulnerability/sonatype-2026-005083/index.html): Technical security analysis for sonatype-2026-005083. CVSS 7.7 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (71 words)
- [sonatype-2026-005085 | Security Details | Sonatype Guide](/content/guide/vulnerability/sonatype-2026-005085/index.html): Technical security analysis for sonatype-2026-005085. CVSS 5.9 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (75 words)
- [CVE-2026-59933 | Security Details | Sonatype Guide](/content/guide/vulnerability/cve-2026-59933/index.html): Technical security analysis for CVE-2026-59933. CVSS 7.5 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (72 words)
- [Troubleshooting the "BlobStoreException: Failed to start blob store with new configuration" Error When Using Azure Blob Storage – Sonatype Support](/content/support/hc/en-us/articles/35122556021523-troubleshooting-the-blobstoreexception-failed-to-start-blob-store-with-new-configuration-error-when-using-azure-blob-storage.html): Problem Creating or updating an Azure blob Store may have the below issue when migrating from a non-Azure blob store to an Azure blob... (257 words)
- [CVE-2021-29158 Nexus Repository Manager 3 - Sensitive Information Disclosure - 2021-04-22 – Sonatype Support](/content/support/hc/en-us/articles/1500006126462/index.html): Date: April 22nd, 2021 Affected Versions:   Nexus Repository Manager 3 Pro versions up to and including 3.30.0  Fixed in Version:  Nexus... (412 words)
- [CVE-2021-30635 Nexus Repository Manager 3 - Directory Traversal - 2021-04-22 – Sonatype Support](/content/support/hc/en-us/articles/1500006879561/index.html): Date: April 22, 2021 Affected Versions: Nexus Repository Manager 3 versions up to and including 3.30.0 Fixed in Version: Nexus Repository... (425 words)
- [sonatype-2026-005069 | Security Details | Sonatype Guide](/content/guide/vulnerability/sonatype-2026-005069/index.html): Technical security analysis for sonatype-2026-005069. CVSS 9.0 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (68 words)
- [CVE-2024-56675 | Security Details | Sonatype Guide](/content/guide/vulnerability/cve-2024-56675/index.html): Technical security analysis for CVE-2024-56675. CVSS 7.8 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (187 words)
- [sonatype-2026-005086 | Security Details | Sonatype Guide](/content/guide/vulnerability/sonatype-2026-005086/index.html): Technical security analysis for sonatype-2026-005086. CVSS 7.5 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (65 words)
- [How to reset node and deployment IDs after cloning a Nexus Repository 3 H2 based instance – Sonatype Support](/content/support/hc/en-us/articles/48250494001171-how-to-reset-node-and-deployment-ids-after-cloning-a-nexus-repository-3-h2-based-instance.html): SummaryWhen a Nexus Repository 3 instance using the embedded H2 database is cloned (for example, to create a test or proof-of-value... (1,125 words)
- [sonatype-2026-005074 | Security Details | Sonatype Guide](/content/guide/vulnerability/sonatype-2026-005074/index.html): Technical security analysis for sonatype-2026-005074. CVSS 9.6 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (71 words)
- [Redirecting HTTP requests to HTTPS in Nexus Repository 3 – Sonatype Support](/content/support/hc/en-us/articles/39479210802195-redirecting-http-requests-to-https-in-nexus-repository-3.html): .ProblemNexus Repository Does Not Start if Referencing jetty-http-redirect-to-https.xmlOn upgrade, it may be noticed that Nexus... (431 words)
- [CVE-2026-16763 | Security Details | Sonatype Guide](/content/guide/vulnerability/cve-2026-16763/index.html): Technical security analysis for CVE-2026-16763. CVSS 5.3 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (210 words)
- [Component Not Found | Sonatype Guide](/content/guide/component/pypi/cryptography/x-y-z.html): Could not find component data for pypi/cryptography/x.y.z. This component may not exist in our database or may have been removed. (17 words)
- [Nexus Repository 3 database migration fails due to PSQLException value too long for type character varying(250) – Sonatype Support](/content/support/hc/en-us/articles/38440697905939-nexus-repository-3-database-migration-fails-due-to-psqlexception-value-too-long-for-type-character-varying-250.html): Problem  When running the Nexus Repository nxrm-db-migrator tool to migrate from one database to another, the migration process may... (321 words)
- [Migrating from Legacy HA-C – Sonatype Support](/content/support/hc/en-us/articles/44146407877395-migrating-from-legacy-ha-c/index.html): The Nexus Repository feature, High Availability Clustering (HA-C) has been sunsetted and is out of support. Use the following... (237 words)
- [Repository: Troubleshooting Artifact Download Failures – Sonatype Support](/content/support/hc/en-us/articles/23865666617747-repository-troubleshooting-artifact-download-failures.html): . Problem You receive 404 responses when trying to retrieve artifacts from a repository, but you know the artifact is present in Nexus... (508 words)
- [How to fix "Request URI ... does not match SAML request destination ..." issues with Nexus 3 – Sonatype Support](/content/support/hc/en-us/articles/39413898127891-how-to-fix-request-uri-does-not-match-saml-request-destination-issues-with-nexus-3.html): Problem  You've set up your Nexus instance to use a SAML IdP, but can't login to Nexus. Symptoms  After successfully logging into the... (173 words)
- [Nexus Repository 3 requests fail with FileAlreadyExistsException or NoSuchFileException under file blobstore content/tmp directory – Sonatype Support](/content/support/hc/en-us/articles/38463167177235-nexus-repository-3-requests-fail-with-filealreadyexistsexception-or-nosuchfileexception-under-file-blobstore-content-tmp-directory.html): Problem  Build requests may fail randomly uploading or downloading a file from a repository backed with a file based blobstore. The HTTP... (194 words)
- [Creating blobstore with non AWS S3 object stores may fail with newer Nexus versions – Sonatype Support](/content/support/hc/en-us/articles/32139872295315-creating-blobstore-with-non-aws-s3-object-stores-may-fail-with-newer-nexus-versions.html): Overview Nexus Repository Manager supports fully S3 compatible storage for blobstore. Newer versions of nexus would check for bucket... (153 words)
- [Docker repositories in Nexus Repository 3.77.0 respond with 500 Server error when receiving X-Forwarded-Port header – Sonatype Support](/content/support/hc/en-us/articles/38268693109267-docker-repositories-in-nexus-repository-3-77-0-respond-with-500-server-error-when-receiving-x-forwarded-port-header.html): . Problem After upgrading to Nexus Repo 3.77.0, once working docker repositories now respond to docker clients with a 500 Server Error ... (226 words)
- [Repository: Troubleshooting "PKIX path building failed" from proxy repository remote with https – Sonatype Support](/content/support/hc/en-us/articles/23781539530387-repository-troubleshooting-pkix-path-building-failed-from-proxy-repository-remote-with-https.html): Symptoms The Status of one or more of your proxy repositories that have a remote URL starting with https is: In service - Remote... (278 words)
- [Troubleshooting "authenticated registries require a credential-provider" error for Cargo Repositories – Sonatype Support](/content/support/hc/en-us/articles/40361731066387-troubleshooting-authenticated-registries-require-a-credential-provider-error-for-cargo-repositories.html): Problem  When attempting to build a Cargo project or download a Cargo package from a Cargo repository that permits anonymous access and... (149 words)
- [Generate Java thread dumps for Nexus 3 on Linux system – Sonatype Support](/content/support/hc/en-us/articles/50229882047635-generate-java-thread-dumps-for-nexus-3-on-linux-system.html): To troubleshoot various performance issues, sometimes investigating multiple Java thread dumps is necessary. The method for generating... (246 words)
- [Repository browse doesn't work for users with restricted read access – Sonatype Support](/content/support/hc/en-us/articles/23575521366931-repository-browse-doesn-t-work-for-users-with-restricted-read-access.html): Problem:  You've restricted read access to a repository by using a content selector that matches a particular path in the repository such... (186 words)
- [Handling Stale npm Metadata in Nexus Repository After Registry Package Deletions – Sonatype Support](/content/support/hc/en-us/articles/44588764417171-handling-stale-npm-metadata-in-nexus-repository-after-registry-package-deletions.html): .OverviewIn rare cases, the official npm Registry (https://registry.npmjs.org) may delete package tarballs that violate their policies (... (584 words)
- [Repos appear empty after a Nexus Repository upgrade/migration – Sonatype Support](/content/support/hc/en-us/articles/39123053819411-repos-appear-empty-after-a-nexus-repository-upgrade-migration.html): Problem  You have just completed a major upgrade or migration from OrientDB to PostgreSQL, and are attempting to evaluate the success by... (122 words)
- [Nexus Repo: Cleanup Policies with a "+" regex token show zero result in the CSV preview – Sonatype Support](/content/support/hc/en-us/articles/43434754414099-nexus-repo-cleanup-policies-with-a-regex-token-show-zero-result-in-the-csv-preview.html): Problem A cleanup policies provide asset matcher regexes for selecting components to remove. However, regexes containing a valid + token... (73 words)
- [Proxying the Iron Bank Docker Registry – Sonatype Support](/content/support/hc/en-us/articles/40818750031123-proxying-the-iron-bank-docker-registry.html): Sonatype does not officially provide instructions to proxy the Iron Bank docker registry (registry1.dso.mil). However, an enterprising... (143 words)
- [How to increase Jetty thread pool size for a Nexus Repository running in a container – Sonatype Support](/content/support/hc/en-us/articles/43441955866259-how-to-increase-jetty-thread-pool-size-for-a-nexus-repository-running-in-a-container.html): To increase the Jetty thread pool size for a Nexus Repository running in a container, you need to modify the jetty.xml configuration file... (197 words)
- [UI Upload Redirects to 404 or Authentication Prompt After Component Upload – Sonatype Support](/content/support/hc/en-us/articles/41646260743315-ui-upload-redirects-to-404-or-authentication-prompt-after-component-upload.html): Problem  After uploading a component via the Nexus Repository Manager UI, users may encounter the following unexpected behavior:   Before... (180 words)
- [Viewing Routing Rules in Nexus Repository 3 Causes 404 Not Found – Sonatype Support](/content/support/hc/en-us/articles/43413385384211-viewing-routing-rules-in-nexus-repository-3-causes-404-not-found.html): ProblemWhen clicking on a routing rule Nexus Repository 3 to edit or view its configuration, the UI reports a 404 not found error... (170 words)
- [Why does the dashboard Total Components count change after upgrade? – Sonatype Support](/content/support/hc/en-us/articles/42055103380243-why-does-the-dashboard-total-components-count-change-after-upgrade.html): Problem  After an upgrade, the Total Components count in the dashboard is significantly reduced.  This can lead to concern that the... (141 words)
- [Badges - Sonatype Community](/content/community/badges/index.html) (293 words)
- [Maven Central: org.sonatype:maven-policy-demo:1.0.0](/content/central/artifact/org-sonatype/maven-policy-demo/1-0-0.html): Discover maven-policy-demo in the org.sonatype namespace. Explore metadata, contributors, the Maven POM file, and more. (260 words)
- [Troubleshooting "Can't obtain quarantine status" Error with Nexus Firewall for Docker – Sonatype Support](/content/support/hc/en-us/articles/44873876945811-troubleshooting-can-t-obtain-quarantine-status-error-with-nexus-firewall-for-docker.html): ProblemAfter upgrading to Nexus Repository Manager (NXRM) 3.83.0+ and Nexus IQ Server 194+, Docker pull requests may fail if both of the... (246 words)
- [How to troubleshoot when Nexus Repository suddenly crashed or is not responding? – Sonatype Support](/content/support/hc/en-us/articles/43632854386963-how-to-troubleshoot-when-nexus-repository-suddenly-crashed-or-is-not-responding.html): If your Nexus instance suddenly crashes or not responding, the following troubleshooting steps are recommended to help diagnostic the... (373 words)
- [Troubleshooting Nexus db migrator error due to JCE cannot authenticate the provider BC – Sonatype Support](/content/support/hc/en-us/articles/47251041817235-troubleshooting-nexus-db-migrator-error-due-to-jce-cannot-authenticate-the-provider-bc.html): ProblemWhen running the Nexus Database Migrator utility to migrate OrientDB/H2 database to Postgresql or OrientDB to H2, the migrator... (248 words)
- [Troubleshooting Nexus db migrator error due to JCE cannot authenticate the provider BC – Sonatype Support](/content/support/hc/en-us/articles/47251027234835-troubleshooting-nexus-db-migrator-error-due-to-jce-cannot-authenticate-the-provider-bc.html): ProblemWhen running the Nexus Database Migrator utility to migrate OrientDB/H2 database to Postgresql or OrientDB to H2, the migrator... (248 words)
- [Nexus Repository UI Hangs Initializing due to 500 Error on extdirect-prod.js – Sonatype Support](/content/support/hc/en-us/articles/46521582679699-nexus-repository-ui-hangs-initializing-due-to-500-error-on-extdirect-prod-js.html): Symptoms The Nexus Repository UI hangs on "Initializing..." and never loads. In browser developer tools (Network tab), the... (325 words)
- [propcache 0.5.2 | Sonatype Guide](/content/guide/component/pypi/propcache/0-5-2.html): Comprehensive security analysis for propcache version 0.5.2. No known vulnerabilities. License: Apache-2.0. View dependencies, vulnerabilities, and detailed pa… (46 words)
- [org.apache.commons/commons-lang3 3.20.0 | Sonatype Guide](/content/guide/component/maven/org-apache-commons-3acommons-lang3/3-20-0.html): Comprehensive security analysis for org.apache.commons/commons-lang3 version 3.20.0. No known vulnerabilities. License: Apache-2.0. View dependencies, vulnerab… (42 words)
- [SQLAlchemy 2.0.51 | Sonatype Guide](/content/guide/component/pypi/sqlalchemy/2-0-51.html): Comprehensive security analysis for SQLAlchemy version 2.0.51. Max vulnerability severity: 7.5 CVSS. License: MIT. View dependencies, vulnerabilities, and deta… (46 words)
- [com.fasterxml.jackson.core/jackson-annotat… | Sonatype Guide](/content/guide/component/maven/com-fasterxml-jackson-core-3ajackson-annotations/2-22.html): Comprehensive security analysis for com.fasterxml.jackson.core/jackson-annotations version 2.22. No known vulnerabilities. License: Apache-2.0. View dependenci… (52 words)
- [org.slf4j/slf4j-api 2.0.18 | Sonatype Guide](/content/guide/component/maven/org-slf4j-3aslf4j-api/2-0-18.html): Comprehensive security analysis for org.slf4j/slf4j-api version 2.0.18. No known vulnerabilities. License: MIT. View dependencies, vulnerabilities, and detaile… (51 words)
- [pydantic-core 2.34.1 | Sonatype Guide](/content/guide/component/pypi/pydantic-core/2-34-1.html): Comprehensive security analysis for pydantic-core version 2.34.1. No known vulnerabilities. License: MIT. View dependencies, vulnerabilities, and detailed pack… (55 words)
- [rpds-py 2026.6.3 | Sonatype Guide](/content/guide/component/pypi/rpds-py/2026-6-3.html): Comprehensive security analysis for rpds-py version 2026.6.3. No known vulnerabilities. License: MIT. View dependencies, vulnerabilities, and detailed package… (45 words)
- [Latest Community Announcements/Welcome topics - Sonatype Community](/content/community/c/community-announcements/welcome/48/l/latest/index.html): Welcome to the Sonatype Community! We’re glad you’re here. Introduce yourself here and tell us a little more about you by starting a new topic in this category. (87 words)
- [wrapt 2.2.2 | Sonatype Guide](/content/guide/component/pypi/wrapt/2-2-2.html): Comprehensive security analysis for wrapt version 2.2.2. No known vulnerabilities. License: BSD-2-Clause. View dependencies, vulnerabilities, and detailed pack… (45 words)
- [pillow 12.3.0 | Sonatype Guide](/content/guide/component/pypi/pillow/12-3-0.html): Comprehensive security analysis for pillow version 12.3.0. No known vulnerabilities. License: MIT-CMU. View dependencies, vulnerabilities, and detailed package… (46 words)
- [aiohttp 3.14.3 | Sonatype Guide](/content/guide/component/pypi/aiohttp/3-14-3.html): Comprehensive security analysis for aiohttp version 3.14.3. No known vulnerabilities. License: Apache-2.0. View dependencies, vulnerabilities, and detailed pac… (33 words)
- [org.netbeans.external/org-apache-commons-l… | Sonatype Guide](/content/guide/component/maven/org-netbeans-external-3aorg-apache-commons-lang/release113/index.html): Comprehensive security analysis for org.netbeans.external/org-apache-commons-lang version RELEASE113. Max vulnerability severity: 6.9 CVSS. License: Apache-2.0… (46 words)
- [multidict 6.7.1 | Sonatype Guide](/content/guide/component/pypi/multidict/6-7-1.html): Comprehensive security analysis for multidict version 6.7.1. No known vulnerabilities. License: Apache-2.0. View dependencies, vulnerabilities, and detailed pa… (49 words)
- [pandas 3.0.5 | Sonatype Guide](/content/guide/component/pypi/pandas/3-0-5.html): Comprehensive security analysis for pandas version 3.0.5. Max vulnerability severity: 9.8 CVSS. License: Apache-2.0. View dependencies, vulnerabilities, and de… (29 words)
- [lxml 6.1.1 | Sonatype Guide](/content/guide/component/pypi/lxml/6-1-1.html): Comprehensive security analysis for lxml version 6.1.1. No known vulnerabilities. License: BSD-3-Clause. View dependencies, vulnerabilities, and detailed packa… (55 words)
- [Top Community Announcements/Welcome topics - Sonatype Community](/content/community/c/community-announcements/welcome/48/l/top/index.html): Welcome to the Sonatype Community! We’re glad you’re here. Introduce yourself here and tell us a little more about you by starting a new topic in this category. (38 words)
- [Page Not Found - Sonatype Community](/content/community/u/esdras-page.html) (34 words)
- [frozenlist 1.8.0 | Sonatype Guide](/content/guide/component/pypi/frozenlist/1-8-0.html): Comprehensive security analysis for frozenlist version 1.8.0. No known vulnerabilities. License: Apache-2.0. View dependencies, vulnerabilities, and detailed p… (46 words)
- [com.fasterxml.jackson.core/jackson-core 2.… | Sonatype Guide](/content/guide/component/maven/com-fasterxml-jackson-core-3ajackson-core/2-22-1.html): Comprehensive security analysis for com.fasterxml.jackson.core/jackson-core version 2.22.1. No known vulnerabilities. License: Apache-2.0. View dependencies, v… (50 words)
- [yarl 1.24.5 | Sonatype Guide](/content/guide/component/pypi/yarl/1-24-5.html): Comprehensive security analysis for yarl version 1.24.5. No known vulnerabilities. License: Apache-2.0. View dependencies, vulnerabilities, and detailed packag… (48 words)
- [numpy 2.5.1 | Sonatype Guide](/content/guide/component/pypi/numpy/2-5-1.html): Comprehensive security analysis for numpy version 2.5.1. Max vulnerability severity: 5.4 CVSS. License: 0BSD. View dependencies, vulnerabilities, and detailed… (31 words)
- [How to Update Sonatype Lifecycle IQ Server License Threat Groups – Sonatype Support](/content/support/hc/en-us/articles/4418674692883-how-to-update-sonatype-lifecycle-iq-server-license-threat-groups.html): The License Threat Group Updater tool is an officially supported product feature.The Sonatype Data Team releases updates to License... (795 words)
- [Page Not Found - Sonatype Community](/content/community/u/u-maurer.html) (34 words)
- [Sonatype Nexus Repository – Sonatype Support](/content/support/hc/en-us/categories/202673428-sonatype-nexus-repository/index.html): Visit help.sonatype.com for documentation on Sonatype Nexus Repository. (296 words)
- [Sonatype Lifecycle – Sonatype Support](/content/support/hc/en-us/categories/201980778-sonatype-lifecycle/index.html): Visit help.sonatype.com for documentation on Sonatype Lifecycle. (225 words)
- [Page Not Found - Sonatype Community](/content/community/g/sonatype-customer/index.html) (155 words)
- [IQ Server v205 may reject HTTPS requests with 400 Invalid SNI – Sonatype Support](/content/support/hc/en-us/articles/53720404438291-iq-server-v205-may-reject-https-requests-with-400-invalid-sni.html): Why this behavior existsThe stricter validation helps ensure that HTTPS requests are being sent to the intended server. By verifying that... (266 words)
- [Lifecycle: After upgrading to v186, dashboard displays "internal error" and NullPointerException is reported in the logs – Sonatype Support](/content/support/hc/en-us/articles/38044974507027-lifecycle-after-upgrading-to-v186-dashboard-displays-internal-error-and-nullpointerexception-is-reported-in-the-logs.html): After upgrading to Lifecycle version 186, when accessing the dashboard in the UI, you may observe the following internal error:  And the... (166 words)
- [Latest Sonatype Learn topics - Sonatype Community](/content/community/c/learn-sonatype/36/index.html): A place to discuss Sonatype Learn courses and Learning Paths. Explore our free online course catalog or embark on a Learning Path at Learn.Sonatype.com. (655 words)
- [Install / Upgrade and Compatibility – Sonatype Support](/content/support/hc/en-us/sections/203012568-install-upgrade-and-compatibility/index.html) (55 words)
- [Page Not Found - Sonatype Community](/content/community/u/dgriffin/index.html) (34 words)
- [Sonatype Integration – Sonatype Support](/content/support/hc/en-us/categories/36567786687251-sonatype-integration/index.html): Visit help.sonatype.com for documentation on Sonatype Integration. (71 words)
- [Legacy Products/Features – Sonatype Support](/content/support/hc/en-us/categories/36567621597715-legacy-products-features/index.html) (23 words)
- [Page Not Found - Sonatype Community](/content/community/u/joshua-richards.html) (34 words)
- [Sonatype Container – Sonatype Support](/content/support/hc/en-us/categories/36567795492115-sonatype-container/index.html): Visit Sonatype Container documentation (16 words)
- [Sonatype SBOM Manager – Sonatype Support](/content/support/hc/en-us/categories/36567851428883-sonatype-sbom-manager/index.html): Visit help.sonatype.com for documentation on Sonatype SBOM Manager. (24 words)
- [Page Not Found - Sonatype Community](/content/community/u/monir_miloudi/index.html) (34 words)
- [Sonatype Guide – Sonatype Support](/content/support/hc/en-us/categories/47334012338323-sonatype-guide/index.html): Support for Sonatype Guide (17 words)
- [Working with Support – Sonatype Support](/content/support/hc/en-us/categories/36567573275539-working-with-support/index.html) (52 words)
- [Sonatype Repository Firewall – Sonatype Support](/content/support/hc/en-us/categories/36567737332371-sonatype-repository-firewall/index.html): Visit help.sonatype.com for documentation on Sonatype Repository Firewall. (67 words)
- [Maven Central: com.google.guava:guava-tests-jdk5:17.0](/content/central/artifact/com-google-guava/guava-tests-jdk5/17-0.html): Discover guava-tests-jdk5 in the com.google.guava namespace. Explore metadata, contributors, the Maven POM file, and more. (245 words)
- [Latest Sonatype Lifecycle & Repository Firewall/Best Practices topics - Sonatype Community](/content/community/c/sonatype-lifecycle-firewall/best-practices/56/index.html): A place to discover and discuss best practices for using products powered by Sonatype IQ Server: Sonatype Lifecycle, Sonatype Repository Firewall, and more. (377 words)
- [Page Not Found - Sonatype Community](/content/community/u/rseddon/index.html) (34 words)
- [Resolving "Certificates do not conform to algorithm constraints" issue in Nexus Repository – Sonatype Support](/content/support/hc/en-us/articles/38472679439379-resolving-certificates-do-not-conform-to-algorithm-constraints-issue-in-nexus-repository.html): . Problem  When configuring a Nexus Repository instance, you may encounter the following error in the nexus.log file: Certificates do not... (747 words)
- [Latest Community Announcements/News topics - Sonatype Community](/content/community/c/community-announcements/news/49/index.html): Use this category to explore & discuss news from the Sonatype Community. (285 words)
- [Latest Office Hours topics - Sonatype Community](/content/community/c/office-hours/45/index.html): Attend a recent Office Hours call? Post follow-up questions and continue discussions here. (377 words)
- [Page Not Found - Sonatype Community](/content/community/u/mpiggott/index.html) (34 words)
- [Latest Sonatype Exchange topics - Sonatype Community](/content/community/c/exchange/33/index.html): A place where Community-developed plugins, examples, and documentation can be shared for the whole world to use and enjoy! Learn more. (959 words)
- [Maven Central: eu.vnagy.argotools:argo-junit:0.0.10](/content/central/artifact/eu-vnagy-argotools/argo-junit/0-0-10.html): Discover argo-junit in the eu.vnagy.argotools namespace. Explore metadata, contributors, the Maven POM file, and more. (465 words)
- [Latest Sonatype Nexus Repository/Best Practices topics - Sonatype Community](/content/community/c/nexus-repository/best-practices/55/l/latest/index.html): A place to discover and discuss best practices for using Sonatype Nexus Repository. (1,232 words)
- [Latest Sonatype Lifecycle & Repository Firewall topics - Sonatype Community](/content/community/c/sonatype-lifecycle-firewall/7/index.html): Ask questions and follow discussions about products powered by Sonatype IQ Server: Sonatype Lifecycle and Sonatype Repository Firewall. (5,514 words)
- [Maven Central: com.google.guava:guava-tests-jdk5](/content/central/artifact/com-google-guava/guava-tests-jdk5/versions/index.html): Discover guava-tests-jdk5 in the com.google.guava namespace. Explore metadata, contributors, the Maven POM file, and more. (119 words)
- [Maven Central: org.apache.syncope.ext.oidcc4ui:syncope-ext-oidcc4ui-provisioning-api](/content/central/artifact/org-apache-syncope-ext-oidcc4ui/syncope-ext-oidcc4ui-provisioning-api/dependents/index.html): Discover syncope-ext-oidcc4ui-provisioning-api in the org.apache.syncope.ext.oidcc4ui namespace. Explore metadata, contributors, the Maven POM file, and more. (3 words)
- [My Sonatype | Customer Platform](/content/my/classic/index.html): Welcome to Sonatype’s Customer Platform. Find the information you need to get the most out of our products. Access technical support, help docs, educational resources, our community forum, and more., Welcome to Sonatype's Customer Platform. Find the information you need to get the most out of our products. Access technical support, help docs, educational resources, our community forum, and more. (512 words)
- [Maven Central: com.akamai.edgegrid:edgerc-reader](/content/central/artifact/com-akamai-edgegrid/edgerc-reader/versions/index.html): Discover edgerc-reader in the com.akamai.edgegrid namespace. Explore metadata, contributors, the Maven POM file, and more. (179 words)
- [Latest Sonatype Exchange/Sonatype Exchange Discussion topics - Sonatype Community](/content/community/c/exchange/exchange-discussion/46/index.html): Questions or thoughts about what you find on the Exchange? Start a conversation here. (160 words)
- [org.apache.commons/commons-parent 100 | Sonatype Guide](/content/guide/component/maven/org-apache-commons-commons-parent/100/index.html): Comprehensive security analysis for org.apache.commons/commons-parent version 100. No known vulnerabilities.  View dependencies, vulnerabilities, and detailed… (40 words)
- [Maven Central: org.apache.commons:commons-jexl3:3.6.4](/content/central/artifact/org-apache-commons/commons-jexl3/3-6-4.html): Discover commons-jexl3 in the org.apache.commons namespace. Explore metadata, contributors, the Maven POM file, and more. (325 words)
- [Maven Central: org.slf4j:slf4j-migrator](/content/central/artifact/org-slf4j/slf4j-migrator/index.html): Discover slf4j-migrator in the org.slf4j namespace. Explore metadata, contributors, the Maven POM file, and more. (76 words)
- [Maven Central: org.apache.commons:commons-jexl3](/content/central/artifact/org-apache-commons/commons-jexl3/index.html): Discover commons-jexl3 in the org.apache.commons namespace. Explore metadata, contributors, the Maven POM file, and more. (605 words)
- [Sonatype Community](/content/community/categories/index.html) (215 words)
- [org.apache.commons/commons-jexl3 3.6.2 | Sonatype Guide](/content/guide/component/maven/org-apache-commons-commons-jexl3/3-6-2.html): Comprehensive security analysis for org.apache.commons/commons-jexl3 version 3.6.2. No known vulnerabilities. License: Apache-2.0. View dependencies, vulnerabi… (58 words)
- [Latest Community Announcements topics - Sonatype Community](/content/community/c/community-announcements/5/index.html): A place for updates and information from the Sonatype Community team. New to the Community? Start here. (3,307 words)
- [org.apache.commons/commons-parent 102 | Sonatype Guide](/content/guide/component/maven/org-apache-commons-commons-parent/102/index.html): Comprehensive security analysis for org.apache.commons/commons-parent version 102. No known vulnerabilities. License: Apache-2.0. View dependencies, vulnerabil… (56 words)
- [org.apache.commons/commons-statistics-inte… | Sonatype Guide](/content/guide/component/maven/org-apache-commons-commons-statistics-interval/1-3.html): Comprehensive security analysis for org.apache.commons/commons-statistics-interval version 1.3. No known vulnerabilities. License: Apache-2.0. View dependencie… (35 words)
- [Maven Central: org.apache.syncope.core:syncope-core-provisioning-api](/content/central/artifact/org-apache-syncope-core/syncope-core-provisioning-api/dependents/index.html): Discover syncope-core-provisioning-api in the org.apache.syncope.core namespace. Explore metadata, contributors, the Maven POM file, and more. (164 words)
- [org.apache.commons/commons-configuration2… | Sonatype Guide](/content/guide/component/maven/org-apache-commons-commons-configuration2/2-15-1.html): Comprehensive security analysis for org.apache.commons/commons-configuration2 version 2.15.1. Max vulnerability severity: 2.7 CVSS. License: Apache-2.0. View d… (47 words)
- [Maven Central: com.google.guava](/content/central/namespace/com-google-guava.html): Explore the collection of packages in com.google.guava (410 words)
- [Maven Central: org.apache.commons:commons-statistics-bom:1.2](/content/central/artifact/org-apache-commons/commons-statistics-bom/1-2.html): Discover commons-statistics-bom in the org.apache.commons namespace. Explore metadata, contributors, the Maven POM file, and more. (107 words)
- [Maven Central: org.slf4j](/content/central/namespace/org-slf4j.html): Explore the collection of packages in org.slf4j (287 words)
- [org.apache.commons/commons-jexl3 3.6.4 | Sonatype Guide](/content/guide/component/maven/org-apache-commons-commons-jexl3/3-6-4.html): Comprehensive security analysis for org.apache.commons/commons-jexl3 version 3.6.4. No known vulnerabilities. License: Apache-2.0. View dependencies, vulnerabi… (43 words)
- [Maven Central: org.apache.commons:commons-statistics-inference](/content/central/artifact/org-apache-commons/commons-statistics-inference/versions/index.html): Discover commons-statistics-inference in the org.apache.commons namespace. Explore metadata, contributors, the Maven POM file, and more. (61 words)
- [My Sonatype | Customer Platform](/content/my/labs/index.html): Welcome to Sonatype’s Customer Platform. Find the information you need to get the most out of our products. Access technical support, help docs, educational resources, our community forum, and more., Welcome to Sonatype's Customer Platform. Find the information you need to get the most out of our products. Access technical support, help docs, educational resources, our community forum, and more. (21 words)
- [Latest Sonatype Guide topics - Sonatype Community](/content/community/c/sonatype-guide/73/index.html): Discuss Sonatype Guide and the MCP server. Ask questions, get answers, and learn about the latest. (82 words)
- [Top topics - Sonatype Community](/content/community/top/index.html) (2,613 words)
- [Maven Central: org.apache.commons:commons-statistics-ranking](/content/central/artifact/org-apache-commons/commons-statistics-ranking/dependents/index.html): Discover commons-statistics-ranking in the org.apache.commons namespace. Explore metadata, contributors, the Maven POM file, and more. (40 words)
- [Maven Central: org.apache.commons:commons-parent:97](/content/central/artifact/org-apache-commons/commons-parent/97/index.html): Discover commons-parent in the org.apache.commons namespace. Explore metadata, contributors, the Maven POM file, and more. (4,162 words)
- [Maven Central: org.apache.commons:commons-configuration2](/content/central/artifact/org-apache-commons/commons-configuration2/versions/index.html): Discover commons-configuration2 in the org.apache.commons namespace. Explore metadata, contributors, the Maven POM file, and more. (177 words)
- [Maven Central: org.apache.commons:commons-configuration2](/content/central/artifact/org-apache-commons/commons-configuration2/dependents/index.html): Discover commons-configuration2 in the org.apache.commons namespace. Explore metadata, contributors, the Maven POM file, and more. (297 words)
- [Nexus Repository Cloud Bug Fixes](/content/help/en/2026-nexus-repository-cloud-bug-fixes-html.html) (10,275 words)
- [Maven Central: org.apache.commons:commons-jexl3](/content/central/artifact/org-apache-commons/commons-jexl3/dependents/index.html): Discover commons-jexl3 in the org.apache.commons namespace. Explore metadata, contributors, the Maven POM file, and more. (334 words)
- [Maven Central: com.fasterxml.jackson.core](/content/central/namespace/com-fasterxml-jackson-core.html): Explore the collection of packages in com.fasterxml.jackson.core (117 words)
- [Maven Central: commons-codec](/content/central/namespace/commons-codec/index.html): Explore the collection of packages in commons-codec (90 words)
- [Maven Central: org.apache.commons:commons-parent](/content/central/artifact/org-apache-commons/commons-parent/versions/index.html): Discover commons-parent in the org.apache.commons namespace. Explore metadata, contributors, the Maven POM file, and more. (176 words)
- [Maven Central: commons-io](/content/central/namespace/commons-io/index.html): Explore the collection of packages in commons-io (73 words)
- [Maven Central: org.apache.commons](/content/central/namespace/org-apache-commons.html): Explore the collection of packages in org.apache.commons (283 words)
- [Maven Central: org.apache.commons:commons-jexl3](/content/central/artifact/org-apache-commons/commons-jexl3/versions/index.html): Discover commons-jexl3 in the org.apache.commons namespace. Explore metadata, contributors, the Maven POM file, and more. (179 words)
- [Maven Central: org.apache.commons:commons-statistics-bom](/content/central/artifact/org-apache-commons/commons-statistics-bom/index.html): Discover commons-statistics-bom in the org.apache.commons namespace. Explore metadata, contributors, the Maven POM file, and more. (113 words)
- [Maven Central: org.apache.commons:commons-statistics-bom](/content/central/artifact/org-apache-commons/commons-statistics-bom/versions/index.html): Discover commons-statistics-bom in the org.apache.commons namespace. Explore metadata, contributors, the Maven POM file, and more. (55 words)
- [Maven Central: org.apache.commons:commons-configuration2](/content/central/artifact/org-apache-commons/commons-configuration2/index.html): Discover commons-configuration2 in the org.apache.commons namespace. Explore metadata, contributors, the Maven POM file, and more. (257 words)
- [Optimize Maven POM: Refactor & Manage | Sonatype](/content/resources/guides/maven-by-example/optimizing-and-refactoring-poms/index.html): Learn how to optimize and refactor Maven POM files. Discover Maven dependency management best practices to reduce duplication and software complexity today. (3,650 words)
- [Maven Central: com.fasterxml.jackson.core:jackson-databind:2.10.0](/content/central/artifact/com-fasterxml-jackson-core/jackson-databind/2-10-0.html): Discover jackson-databind in the com.fasterxml.jackson.core namespace. Explore metadata, contributors, the Maven POM file, and more. (238 words)
- [Page Not Found - Sonatype Community](/content/community/g/sonatype-employees/index.html) (153 words)
- [Maven Central: org.eclipse.tycho:tycho](/content/central/artifact/org-eclipse-tycho/tycho/index.html): Discover tycho in the org.eclipse.tycho namespace. Explore metadata, contributors, the Maven POM file, and more. (764 words)
- [sonatype-2026-003429 | Sonatype Research | Sonatype Guide](/content/guide/vulnerability/sonatype-2026-003429/sonatype-research/index.html): Expert security research for sonatype-2026-003429 by Sonatype. In-depth analysis, proof-of-concept details, and actionable remediation guidance from security r… (299 words)
- [Maven Central: org.apache.commons:commons-statistics-bom](/content/central/artifact/org-apache-commons/commons-statistics-bom/dependents/index.html): Discover commons-statistics-bom in the org.apache.commons namespace. Explore metadata, contributors, the Maven POM file, and more. (18 words)
- [Using Maven Archetypes | Maven: The Complete Reference ](/content/maven-complete-reference/using-maven-archetypes/index.html): Explore Maven Archetypes with Chapter 12 of the Maven Definitive Guide by Sonatype. An essential guide to project templating and creation. (2,963 words)
- [Maven Central: org.apache.commons:commons-parent](/content/central/artifact/org-apache-commons/commons-parent/index.html): Discover commons-parent in the org.apache.commons namespace. Explore metadata, contributors, the Maven POM file, and more. (4,155 words)
- [Maven Central: org.apache.commons:commons-parent](/content/central/artifact/org-apache-commons/commons-parent/dependents/index.html): Discover commons-parent in the org.apache.commons namespace. Explore metadata, contributors, the Maven POM file, and more. (20 words)
- [hubfs/comprehensive-comparison-guide-sonatype-vs-jfrog-pdf.html](/content/hubfs/comprehensive-comparison-guide-sonatype-vs-jfrog-pdf.html) (1,459 words)
- [Explore NIST SP 800-218 and CISA Attestation Requirements](/content/resources/guides/stay-compliant-nist-sp-800-218-cisa-requirements/index.html): Stay compliant with NIST SP 800-218 and CISA requirements. Discover how Sonatype enhances software supply chain security and can help you comply. (3,367 words)
- [hubfs/1-2023_new_site_assets/executive-20summaries/eu_cyber_resilience_act-exec_summary-pdf.html](/content/hubfs/1-2023_new_site_assets/executive-20summaries/eu_cyber_resilience_act-exec_summary-pdf.html) (2,114 words)
- [hubfs/government-20intervention-2c-20the-20rise-20of-20sbom-20and-20the-20evolution-20of-20software-20supply-20chain-20security-pdf.html](/content/hubfs/government-20intervention-2c-20the-20rise-20of-20sbom-20and-20the-20evolution-20of-20software-20supply-20chain-20security-pdf.html) (2,216 words)
- [Search](/content/help/search-html.html) (846 words)
- [Nexus Documentation - Nexus IQ Server 1.26 - Sonatype.com](/content/books/sonatype-clm-book/1-26/html/book/quick-start-fw-html.html): Control the flow of components throughout your software supply chain. (1,847 words)
- [hubfs/1-2025_website-assets/resource_files/the-20engineering-20leaders-20guide-20to-20developer-20productivity-20-1-pdf.html](/content/hubfs/1-2025_website-assets/resource_files/the-20engineering-20leaders-20guide-20to-20developer-20productivity-20-1-pdf.html) (2,945 words)
- [Trust Center - sonatype](/content/trust/faq/index.html): Trust is foundational to the success of our business. Trust = Transparency + Accountability. We strive for transparency through clear communication across functions and levels. We hold ourselves accountable for the promise we make to our employees, investors, and customers.

To earn your trust, we share our security and compliance programs with you. We continuously evolve with the ever-changing world around us to safely manage the confidentiality, integrity, and availability of not only Sonatype's but also the customers' data and services that we manage.

Security at Sonatype | Bug Bounty Program | Security Advisories (168 words)
- [sonatype-2026-003581 | Sonatype Research | Sonatype Guide](/content/guide/vulnerability/sonatype-2026-003581/sonatype-research/index.html): Expert security research for sonatype-2026-003581 by Sonatype. In-depth analysis, proof-of-concept details, and actionable remediation guidance from security r… (209 words)
- [Secure Your SDLC with DoD Zero Trust Architecture | Sonatype](/content/blog/how-does-securing-the-software-supply-chain-fit-the-dod-cio-zero-trust-architecture.html): Curious how the DoD Zero Trust Architecture relates to secure development and protecting your software supply chain? We're breaking that down for you.  (1,657 words)
- [How to reset a forgotten admin password in Sonatype Nexus Repository 3 – Sonatype Support](/content/support/hc/en-us/articles/213467158-how-to-reset-a-forgotten-admin-password-in-nexus-3-x.html): .Sonatype Nexus Repository 3 includes a default 'admin' Administrator user account.Versions before 3.17.0 had the default password of... (774 words)
- [Trust Center - sonatype](/content/trust/resources/index.html): Trust is foundational to the success of our business. Trust = Transparency + Accountability. We strive for transparency through clear communication across functions and levels. We hold ourselves accountable for the promise we make to our employees, investors, and customers.

To earn your trust, we share our security and compliance programs with you. We continuously evolve with the ever-changing world around us to safely manage the confidentiality, integrity, and availability of not only Sonatype's but also the customers' data and services that we manage.

Security at Sonatype | Bug Bounty Program | Security Advisories (625 words)
- [hubfs/1-2023_new_site_assets/executive-20summaries/executivesummary-nis2_compliance-updated_6-18-pdf.html](/content/hubfs/1-2023_new_site_assets/executive-20summaries/executivesummary-nis2_compliance-updated_6-18-pdf.html) (1,433 words)
- [Trust Center - sonatype](/content/trust/controls/index.html): Trust is foundational to the success of our business. Trust = Transparency + Accountability. We strive for transparency through clear communication across functions and levels. We hold ourselves accountable for the promise we make to our employees, investors, and customers.

To earn your trust, we share our security and compliance programs with you. We continuously evolve with the ever-changing world around us to safely manage the confidentiality, integrity, and availability of not only Sonatype's but also the customers' data and services that we manage.

Security at Sonatype | Bug Bounty Program | Security Advisories (568 words)
- [Sonatype Inc. | California Privacy Notice](/content/ccpa/index.html): Learn how Sonatype complies with the CCPA and how it affects your privacy. 🔒 Visit our page now and discover more. #CCPA #Privacy (1,698 words)
- [Latest Sonatype Nexus Repository topics - Sonatype Community](/content/community/c/nexus-repository/6/index.html): Ask questions and follow discussions about Sonatype Nexus Repository. (5,947 words)
- [Trust Center - sonatype](/content/trust/media/index.html): Trust is foundational to the success of our business. Trust = Transparency + Accountability. We strive for transparency through clear communication across functions and levels. We hold ourselves accountable for the promise we make to our employees, investors, and customers.

To earn your trust, we share our security and compliance programs with you. We continuously evolve with the ever-changing world around us to safely manage the confidentiality, integrity, and availability of not only Sonatype's but also the customers' data and services that we manage.

Security at Sonatype | Bug Bounty Program | Security Advisories (155 words)
- [sonatype-2024-2066 | Security Details | Sonatype Guide](/content/guide/vulnerability/sonatype-2024-2066/index.html): Technical security analysis for sonatype-2024-2066. CVSS 7.1 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (189 words)
- [The Importance of Namespacing in Open Source Repositories](/content/blog/why-namespacing-matters-in-public-open-source-repositories.html): Sonatype's CTO explains why the Central Repository has always required namespacing and why all public open source repositories should too. (1,879 words)
- [Latest topics - Sonatype Community](/content/community/latest/index.html) (4,475 words)
- [Software Supply Chain Security and Management | Sonatype](/content/solutions/software-supply-chain-security/index.html): Sonatype's advanced software supply chain security tools help you manage risks, ensure compliance, and accelerate innovation without compromising security. (1,175 words)
- [hubfs/1-2023_new_site_assets/cheat-20sheets/101-20best-20practices-20for-20dev-20teams-pdf.html](/content/hubfs/1-2023_new_site_assets/cheat-20sheets/101-20best-20practices-20for-20dev-20teams-pdf.html) (789 words)
- [Malicious Python Packages Mimic 'Requests' Library](/content/blog/ransomware-in-a-pypi-sonatype-spots-requests-typosquat.html): Sonatype has spotted multiple typosquats of the popular Python library, 'requests' that contain ransomware scripts. (1,271 words)
- [Nexus Documentation - Nexus IQ Server 1.26 - Sonatype.com](/content/books/sonatype-clm-book/1-26/html/book/quick-start-lc-html.html): Control the flow of components throughout your software supply chain. (1,123 words)
- [Critical Risks in Nexus Repository | Upgrade Your Repository Now](/content/products/sonatype-nexus-repository/postgresql-upgrade/index.html): Migrate to the cloud or upgrade to PostgreSQL today to eliminate critical security risks in your instance of Sonatype Nexus Repository. (613 words)
- [sonatype-2020-1058 | Security Details | Sonatype Guide](/content/guide/vulnerability/sonatype-2020-1058/index.html): Technical security analysis for sonatype-2020-1058. CVSS 9.8 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (73 words)
- [hubfs/ebooks/ahc_guide-pdf.html](/content/hubfs/ebooks/ahc_guide-pdf.html) (613 words)
- [Maven Central: org.sonatype.gradle.plugins:scan-gradle-plugin:2.5.3](/content/central/artifact/org-sonatype-gradle-plugins/scan-gradle-plugin/2-5-3.html): Discover scan-gradle-plugin in the org.sonatype.gradle.plugins namespace. Explore metadata, contributors, the Maven POM file, and more. (131 words)
- [CVE-2019-13354: strong_password embedded malicious code](/content/blog/cve-2019-13354-strong-password/index.html): In this month's Nexus Intelligence Insights, we're covering CVE-2019-13354: strong_password, an embedded malicious code vulnerability in RubyGems.

 (792 words)
- [sonatype-2022-1754 | Security Details | Sonatype Guide](/content/guide/vulnerability/sonatype-2022-1754/index.html): Technical security analysis for sonatype-2022-1754. CVSS 10.0 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (63 words)
- [2026-Q1: Webinar - Evolution of Open Source Malware](/content/resources/webinars/evolution-open-source-malware/index.html): Explore tactics attackers are using to target software supply chains. Join experts as they analyze real-world threats and strategies from the latest SSCR findings.,  (117 words)
- [Second Coming of Shai-Hulud: Attackers Innovate on npm | Sonatype](/content/blog/the-second-coming-of-shai-hulud-attackers-innovating-on-npm.html): Sha1-Hulud returns to npm with automated, self-replicating malware and pipeline persistence. Sonatype details the campaign and how to stay protected. (851 words)
- [200+ Cryptomining Packages Found in npm and PyPI Registries](/content/blog/more-than-200-cryptominers-flood-npm-and-pypi-registry.html): More than 200 malicious packages have flooded npm and PyPI registries to install cryptominers on Linux hosts. (800 words)
- [Sonatype Inc. | Cookie Policy](/content/usage/cookies-notice/index.html) (713 words)
- [Keeping Your Sonatype Nexus Repository Clean Just Got Easier](/content/blog/keeping-your-sonatype-nexus-repositories-clean-just-got-easier.html): New clean up policies are now available in Sonatype Nexus Repository 3.14, including support for Docker. (632 words)
- [The Essential Duo: SBOM Management and SCA Security](/content/blog/the-essential-duo-of-sca-and-sbom-management/index.html): Explore software composition analysis (SCA) and software bill of materials (SBOM) management and why both help fortify software projects against threats (949 words)
- [hubfs/1-2025_website-assets/resource-20files/decoding-swft-how-dods-software-fast-track-redefines-secure-acquisition-pdf.html](/content/hubfs/1-2025_website-assets/resource-20files/decoding-swft-how-dods-software-fast-track-redefines-secure-acquisition-pdf.html) (2,019 words)
- [CVE-2019-3773: Critical XXE Vulnerability in Spring Web](/content/blog/cve-2019-3773-spring-web-services-xml-external-entity-injection-xxe.html): This Nexus Intelligence Insight covers CVE-2019-3773: cross site scripting vulnerabilities in Spring Web Services XML External Entity Injection (XXE).

 (622 words)
- [Open Source Observations From RSA](/content/blog/2014/03/open-source-observations-from-rsa/index.html): Explore insights from RSA on open source security in application development. See why effective management and automated policies should be adopted by organizations. (558 words)
- [sonatype-2022-3346 | Security Details | Sonatype Guide](/content/guide/vulnerability/sonatype-2022-3346/index.html): Technical security analysis for sonatype-2022-3346. CVSS 10.0 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (59 words)
- [sonatype-2018-0076 | Security Details | Sonatype Guide](/content/guide/vulnerability/sonatype-2018-0076/index.html): Technical security analysis for sonatype-2018-0076. CVSS 6.5 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (75 words)
- [Best Practices to Secure Open Source Projects Using SBOMs](/content/blog/how-to-use-sboms-to-root-out-project-vulnerabilities.html): The second entry in Sonatype's series for Security Slam explores how your project can benefit from the use of a software bill of materials (SBOM). (1,162 words)
- [The Importance of Sustainable Open Source Infrastructure](/content/blog/from-abuse-to-alignment-why-we-need-sustainable-open-source-infrastructure.html): Learn why we need sustainable open source infrastructure for ecosystem sustainability. Discover the stewardship to keep Maven Central infrastructure strong. (1,001 words)
- [Repo Hijacking: Is the Popular npm Package qr.js Still Safe?](/content/blog/researcher-takes-over-qr-js-via-repo-hijacking-is-the-npm-package-safe.html): Analyzing a live incident of repo jacking that affects the GitHub repository of the popular ‘qr.js’ library. (974 words)
- [sonatype-2024-0529 | Security Details | Sonatype Guide](/content/guide/vulnerability/sonatype-2024-0529/index.html): Technical security analysis for sonatype-2024-0529. CVSS 8.6 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (62 words)
- [Maximize Software Security: How SBOMs Enhance SCA Strategies](/content/blog/how-sboms-drive-a-smarter-sca-strategy/index.html): Discover how combining software composition analysis (SCA) with software bills of materials (SBOMs) creates more resilient software supply chains. (1,020 words)
- [CVE-2026-29000 | Sonatype Research | Sonatype Guide](/content/guide/vulnerability/cve-2026-29000/sonatype-research/index.html): Expert security research for CVE-2026-29000 by Sonatype. In-depth analysis, proof-of-concept details, and actionable remediation guidance from security researc… (191 words)
- [Apache Maven 2.2.1 Released: New Features Explained](/content/blog/2009/08/maven-221-released/index.html): This is a bugfix release meant to address some critical regressions in Maven 2.2. (1,136 words)
- [Addressing Maven Problems on the JBoss Wiki: Part 3 Insights](/content/blog/2009/12/response-to-maven-problems-on-the-jboss-wiki-part-three.html): Explore Maven issues from the JBoss wiki, discussing POM model changes, build configuration, and dependency management challenges in part 3 of this series. (1,388 words)
- [Sonatype Board Member Ann Winblad Talks DevOps & Open Source](/content/blog/sonatype-board-member-ann-winblad-talks-devops-and-open-source-on-cnbc.html): Ann Winblad discusses the growth of open source, DevOps, and enterprise software and the critical role of they play in modern software development. (334 words)
- [Secure Your SDLC with Open Source Risk Management | Sonatype](/content/blog/open-source-risk-management/index.html): Explore open source risk management as the identification and mitigation of security, compliance, and operational risks with using open source software (1,425 words)
- [Maven Archetypes and Nexus: There is no faster way](/content/blog/2010/01/maven-archetypes-and-nexus-there-is-no-faster-way/index.html): Discover how Maven Archetypes and Nexus streamline the process of starting new projects, making it easier than ever to get up and running with frameworks. (493 words)
- [Speed Up Maven Builds: An Approach to Dependency Management](/content/blog/2012/08/download-it-all-at-once-a-maven-idea/index.html): Streamline your Maven builds by downloading all dependencies at once. Learn how to minimize build times and optimize efficiency with this approach. (1,200 words)
- [SEBI Cyber Resilience Framework Compliance Guide | Sonatype](/content/resources/guides/sebi-cyber-resilience-framework/index.html): Learn how to comply with SEBI's Cyber Resilience Framework, while enhancing your defense against evolving open source threats.  (2,524 words)
- [Exploring Nexus Repository: The Role of a Repository Manager](/content/blog/nexus-repository-3-what-is-a-repository-manager/index.html): What is a repository manager?  This Nexus video series covers the basics. (473 words)
- [Three Days of DevSecOps: Lessons From Equifax | Sonatype](/content/blog/three-days-of-devsecops-lessons-from-equifax/index.html): In 2017, one might have considered "three days" to be the new normal for lead time for changes in DevSecOps. In 2018, that window closed to "one second". (541 words)
- [High Availability and Component Analysis in Nexus Repository](/content/press-releases/nexus-repository-pro-ha/index.html): Sonatype, the leader in software supply chain automation, today introduced the latest version of Nexus Repository Pro. (651 words)
- [hubfs/ssc/software_supply_chain_inforgraphic-pdf.html](/content/hubfs/ssc/software_supply_chain_inforgraphic-pdf.html) (344 words)
- [Sonatype Software Development Tools](/content/solutions/software-developers/index.html): Create software faster with Sonatype's free and premium software developer tools design to improve developer productivity. Get started now!
 (781 words)
- [Nexus Repository: A Private Docker Registry on Kubernetes](/content/blog/kubernetes-recipe-sonatype-nexus-3-as-a-private-docker-registry.html): With Sonatype Nexus 3 we can easily get private docker registry for Kubernetes cluster, npm and maven registry for applications. (694 words)
- [Eficode and Sonatype Partner for Secure Development](/content/press-releases/eficode-and-sonatype-partner/index.html): Eficode announced a partnership with Sonatype to bring open source governance to its rapidly-growing customer base.  (702 words)
- [Java Serialization - The Gift That Keeps on Taking (Part 3)](/content/blog/java-serialisation-the-gift-that-keeps-on-taking-part-3.html): Part 3 of our issues with Java serialisation shares a deep dive into gadget chains and denial of service attacks. (1,156 words)
- [This Week in Malware - Over 100 Packages Discovered | Sonatype](/content/blog/this-week-in-malware-oct-07-22/index.html): This week in malware, we discovered and analyzed more than 100 packages flagged as malicious, suspicious, or dependency confusion attacks in npm and PyPI. (348 words)
- [CocoaPods Dependency Management | Sonatype Package Support](/content/products/language-support/cocoapods/index.html): Manage your CocoaPods dependencies with Sonatype. Enhance security and improve build efficiency for your Swift and Objective-C applications. (395 words)
- [Dept. of Homeland Security: Top 10 Exploited Vulnerabilities](/content/blog/department-of-homeland-security-cybersecurity-top-10-vulnerabilities-still-being-exploited.html): DHS CISA lists Apache Struts as a top vulnerability. Yet, evidence shows it is still being downloaded - on average, by 10,000 organizations a month.
 (697 words)
- [DevOps Table Stakes: The Minimum Amount Required to Play the Game](/content/blog/devops-table-stakes-the-minimum-amount-required-to-play-the-game.html): At the 2019 Nexus User Conference Aaron Rinehart talked about DevOps table stakes—what's necessary to even come to the table and play the game these days. (1,031 words)
- [Securing the Software Supply Chain in Air-Gapped Environments](/content/resources/webinars/securing-the-ssc-airgapped/index.html): Join Sonatype to learn how to secure software supply chains in air-gapped environments, ensuring compliance and operational continuity without internet connectivity.,  (117 words)
- [The Importance of SCA in Open Source Security | Sonatype](/content/blog/why-software-composition-analysis-is-essential-for-open-source-security.html): Explore best practices for software composition analysis (SCA) and open source security to strengthen your software supply chain (770 words)
- [Boost Developer Productivity with Sonatype Tools](/content/solutions/developer-productivity/index.html): Explore strategies and solutions to increase developer productivity — so your team can build faster, safer software. (1,033 words)
- [Enhance Development Security: Lessons from Log4j and Beyond](/content/blog/protecting-your-development-environment-lessons-from-log4j-and-beyond.html): Explore malicious and vulnerable components, drawing lessons from past incidents and outlining proactive measures to safeguard your software supply chain. (859 words)
- [hubfs/wp_effects-ai-developers-pdf.html](/content/hubfs/wp_effects-ai-developers-pdf.html) (2,930 words)
- [This Week in Malware - Ongoing Dependency Confusion | Sonatype](/content/blog/this-week-in-malware-sep-9-2022/index.html): This week in malware, Sonatype's automated malware detection systems have spotted over four dozen dependency confusion candidates. (326 words)
- [hubfs/1-2025_website-assets/sscr_2025/sscr_2026_final-pdf.html](/content/hubfs/1-2025_website-assets/sscr_2025/sscr_2026_final-pdf.html) (17,527 words)
- [Sonatype Fully Automates Container Security | Sonatype](/content/press-releases/sonatype-fully-automates-container-security/index.html): Sonatype is fully automating container security via an open API that makes it easy for third-party container scanners to integrate with Nexus Lifecycle.  (470 words)
- [Decade of Open Source: Insights & Future Security Strategies](/content/blog/wrapping-up-a-decade-of-insights-from-the-state-of-the-software-supply-chain.html): Explore Sonatype’s 10th annual State of the Software Supply Chain. Discover trends, risks, and strategies to secure open source and foster innovation. (753 words)
- [Nexus Documentation - Nexus IQ Server 1.26 - Sonatype.com](/content/books/sonatype-clm-book/1-26/html/book/chapter-requirements-html.html): Control the flow of components throughout your software supply chain. (96 words)
- [Nexus Documentation - Nexus IQ Server 1.26 - Sonatype.com](/content/books/sonatype-clm-book/1-26/html/book/server-setup-html.html): Control the flow of components throughout your software supply chain. (249 words)
- [BNY Mellon | Pershing Upgrades DevOps Culture | Sonatype](/content/customer-stories/bny-mellon-pershing-upgrades-devops-culture/index.html): See how Sonatype Lifecycle brought BNY Mellon, pushing a competitive advantage through DevOps  transformation and open source component usage. (1,612 words)
- [Enhancing Software Security with CISA's Latest SBOM Guidance](/content/blog/securing-your-software-supply-chain-with-cisas-new-sbom-guidance.html): Strengthen your software supply chain with CISA's SBOM guidance. Discover SBOM best practices to reduce vulnerabilities and navigate regulatory compliance. (785 words)
- [Secure Your SDLC with Sonatype and GitHub Integration](/content/blog/secure-your-software-supply-chain-with-the-sonatype-and-github-integration.html): See how the Sonatype and GitHub integration empowers software supply chain security. Automate dependency management and protect against advanced threats. (592 words)
- [What Is Software Dependency Management?](/content/blog/what-is-package-dependency-management/index.html): Dependency management is an essential DevOps practice. Learn what dependency management is and its role in secure and efficient software development. (1,053 words)
- [Time for Full Open Source Disclosure](/content/blog/2014/09/open-source-disclosure/index.html): We are not the first industry to face this challenge. But many are convinced our problem is much smaller than it really is or that it does not exist. (983 words)
- [Sonatype Names Finalists for 2024 Elevate Awards | Sonatype](/content/press-releases/sonatype-names-finalists-for-2024-elevate-awards/index.html): Sonatype announces 2024 Elevate Awards Finalists recognizing global teams and leaders that are driving software supply chain innovation. (355 words)
- [Downloading Artifacts from Nexus with Bash: A Simple Guide](/content/blog/2011/01/downloading-artifacts-from-nexus-with-bash/index.html): Learn how to efficiently download artifacts from Nexus using a simple bash script to streamline your software deployment process. (841 words)
- [Implementing DevSecOps With 1,162 Apps](/content/blog/implementing-devsecops-with-1162-apps/index.html): True DevSecOps includes breaking builds when vulnerable open source is found. But, implementing that level of precision is not an easy task. (663 words)
- [CLM Customer Impressions](/content/blog/2013/04/clm-customer-impressions/index.html): Early adopters of CLM share their positive experiences, highlighting its simplicity, policy enforcement, and seamless integration with existing security tools. (680 words)
- [The Open Source Vulnerability That Keeps on Giving](/content/blog/heartbleed-the-open-source-vulnerability-that-keeps-on-giving-and-taking.html): Heartbleed is taking £100,000 from the council more than three years after the fact. (412 words)
- [Nexus Documentation - Nexus IQ Server 1.26 - Sonatype.com](/content/books/sonatype-clm-book/1-26/html/book/chapter-downloads-html.html): Control the flow of components throughout your software supply chain. (92 words)
- [ChatGPT Leak: Unfixed Redis Race Condition Vulnerability](/content/blog/openai-data-leak-and-redis-race-condition-vulnerability-that-remains-unfixed.html): Last week's OpenAI payment data and chat history leak involved a Race Condition vulnerability in an open source component, Redis.  (1,067 words)
- [Evaluate Open Source Components Before Use | Development Tip](/content/blog/2011/10/evaluate-open-source-components-before-use-open-source-development-tip-5.html): Evaluate Open Source Components Before Use: Open Source Development Tip #5 (443 words)
- [A Time for Federal Software Supply Chain Management](/content/blog/2014/12/cyber-supply-chain-managemnt-part-3/index.html): [Part 3] Code, Cars, and Congress: A Time for Cyber Supply Chain Management (850 words)
- [New Dependency Management Frontier Improves Developer Speed](/content/blog/advanced-development-pack/index.html): Sonatype's Advanced Development Pack will fundamentally change how teams manage code dependencies. (1,191 words)
- [Securing Supply Chains in Federal Environments with Sonatype SAGE](/content/resources/whitepapers/securing-your-ssc-federal/index.html): Secure and modernize your software delivery in disconnected environments. (124 words)
- [System Hardening with Ansible: Automate Security for DevOps](/content/blog/system-hardening-with-ansible/index.html): At the recent All Day DevOps conference, Akash Mahajan, a Founder/Director at Appsecco, discussed how to harden your system’s security with Ansible. (692 words)
- [Sonatype Users Reveal the Benefits of Automated DevSecOps](/content/blog/sonatype-users-reveal-the-benefits-of-automated-devsecops.html): IT Central Station gathered unbiased reviews for Sonatype Nexus Lifecycle and Nexus Repository to find out what users had to say about these DevSecOps products. 
 (1,039 words)
- [Meet an Open Source Contributor: Amy Keibler](/content/blog/meet-an-open-source-contributor-amy-keibler/index.html): Meet Amy Keibler, one of the incredible open source contributors at Sonatype. Learn more about her journey and what she loves about open source. (722 words)
- [AI/LLM in the Financial Services Industry  | Sonatype Webinar](/content/resources/webinars/ai-in-financial-services/index.html): Discover how financial services can harness AI and large language models for innovation while managing risks and regulations in our on-demand webinar., Artificial Intelligence is rapidly moving from a niche concept to a mainstream tool within financial services, fundamentally changing the Software Devel... (262 words)
- [Going to DevOps Enterprise Summit London With an Open Mindset](/content/blog/learning-in-the-modern-enterprise-going-to-devops-enterprise-summit-london-with-an-open-mindset.html): Join Mirco Hering at the DevOps Enterprise Summit in London to discover new industry insights, broaden your horizons, and connect with industry experts. (478 words)
- [Software Supply Chain Attacks: Lessons Beyond Supermicro](/content/blog/is-supermicro-real-who-cares-supply-chain-attacks-are-happening-and-its-time-to-talk-about-it.html): Technology supply chain attacks are happening in the wild, and whether or not the Supermicro story is real, it should be a wake-up call for all of us.  (734 words)
- [hubfs/1-2025_website-assets/resource_files/the-secure-repository-blueprint-pdf.html](/content/hubfs/1-2025_website-assets/resource_files/the-secure-repository-blueprint-pdf.html) (2,639 words)
- [JBoss Switches to Sonatype Nexus Repository | Sonatype Blog](/content/blog/2010/04/jboss-switches-to-nexus-professional/index.html): JBoss transitions to Sonatype Nexus Repository, improving repository management and artifact quality for developers. Discover the benefits this blog. (881 words)
- [Nexus Enhances Component Management with New Security Features](/content/blog/2012/11/nexus-bolsters-component-management-capabilities/index.html): Discover how Sonatype Nexus Repository's new features enhance component management, security, and licensing to improve integration and lifecycle management. (541 words)
- [A Non-Programmer's Introduction to the Software Supply Chain](/content/blog/non-programmer-introduction-to-the-software-supply-chain.html): Connecting the larger use by the software industry of component programs to something most people have on their machine right now: The Electron Framework. (691 words)
- [Understand NuGet for Java Developers: Bridging .NET and Java](/content/blog/2012/02/what-is-nuget-for-java-developers/index.html): Discover how Nexus Professional 2.0 supports NuGet, bridging the gap between Java and .NET development through efficient management of binary artifacts. (1,091 words)
- [UK Government to Step Up Supply Chain Security Following EO 14028](/content/blog/uk-government-to-step-up-supply-chain-security-following-us-presidential-executive-order-on-cybersecurity.html): UK enhances supply chain security to combat rising cyber threats. Find out more about new regulations and the need for comprehensive software audits. (1,386 words)
- [How The Unicorn Project Aligns With The Phoenix Project](/content/blog/how-the-unicorn-project-aligns-with-the-phoenix-project.html): In this podcast Gene Kim, author of The Phoenix Project, discusses his new book, The Unicorn Project. (468 words)
- [Rust Rising: Exploring the Ecosystem | Sonatype Webinar](/content/resources/webinars/devops-downloads/rust-rising/index.html): Explore expert insights on navigating Rust's evolving ecosystem and making informed decisions for productivity and success in this on-demand webinar., We look into Rust's rise that has sparked a vibrant ecosystem, but navigating its landscape requires thoughtful exploration. In this panel discussion, i... (247 words)
- [DepShield App to Democratize Open Source Governance | Sonatype](/content/press-releases/sonatype-launches-depshield-app-to-democratize-open-source-governance.html): Introducing DepShield, a Github application enabling free open source governance for developers by Sonatype. (435 words)
- [Pin the Snapshot dependency versions in your POM | Sonatype Blog](/content/blog/2007/08/pin-the-snapshot-dependency-versions-in-your-pom/index.html): Learn how to pin snapshot dependency versions in your pom.xml to ensure stability in your Maven projects with a simple plugin. (350 words)
- [The Landscape of Open Source Supply Chain Attacks: Part 3](/content/blog/the-shifting-landscape-of-open-source-supply-chain-attacks-part-3.html): Brian Fox shares insights on who’s responsible for the security of software supply chains, and how orgs can minimize impact on efficiency and speed. (2,366 words)
- [Securing Financial Institutions Against DORA ICT Risk](/content/blog/dora-ict-risk-management-framework-what-to-know/index.html): Explore the DORA ICT Risk Management Framework and how it mandates open source analysis as a basic security requirement for financial institutions (557 words)
- [101 Articles | Empowering Software Supply Chain Management](/content/resources/articles/index.html): Sonatype is empowering software supply chain management exploration. Learn more about key concepts and terminology that impact your code security.  (96 words)
- [Meet Richard Panman: Values Champion](/content/blog/meet-richard-panman-values-champion/index.html): Meet Richard Panman, Sonatype Customer Outcomes Manager, and a peer-nominated Values Champion. (2,745 words)
- [Sonatype Firewall Now Supports JFrog Artifactory](/content/blog/sonatype-repository-firewall-now-supports-artifactory-customers.html): Artifactory customers can now protect their perimeter from risky open source with Sonatype Repository Firewall. (250 words)
- [C and C++ Language Support | Sonatype Support](/content/products/language-support/c/index.html): Enhance C and C++ development with Sonatype's security and risk governance solutions, ensuring safer builds and faster delivery. Explore C and C++ support. (471 words)
- [Scan Your Application for Security and Licensing Issues](/content/blog/2012/07/insight-application-health-check-scan-your-application-for-security-and-licensing-issues-in-minutes.html): Insight Application Health Check: Scan Your Application for Security and Licensing Issues in Minutes (535 words)
- [Unveiling a Full Software Supply Chain Management Platform](/content/press-releases/sonatype-unveils-full-spectrum-software-supply-chain-management-platform.html): Gain full control of your cloud-native development with Sonatype, covering all aspects from open source to containerized code. (870 words)
- [Writing plugins for Nexus (Part 2) | Sonatype Blog](/content/blog/2009/07/writing-plugins-for-nexus-part-2/index.html): Learn how to seamlessly transition and develop Nexus plugins with our detailed guide on creating and managing plugins in the evolving Nexus environment. (3,266 words)
- [Why Including Repositories in POM Files Is Problematic](/content/blog/2009/02/why-putting-repositories-in-your-poms-is-a-bad-idea.html): Discover why defining repositories in your POMs can complicate builds and learn best practices for managing dependencies effectively in Maven projects. (880 words)
- [Comparing Sonatype Nexus Repository to Everyone Else](/content/blog/automated-enforcement-the-not-so-subtle-difference-between-sonatype-nexus-and-everyone-else.html): Only Sonatype delivers open source intelligence that is precise enough to enable automated enforcement of policies across the DevOps pipeline. (931 words)
- [I want to write really insecure code today | Sonatype Blog](/content/blog/2013/05/i-want-to-write-really-insecure-code-today/index.html): Discover how developers write secure code efficiently with the right tools and insights from our Security at the Speed of Development webinar. (460 words)
- [Build Better Code Using Sonatype's Integrations With Atlassian](/content/blog/build-better-code-using-sonatypes-integrations-with-atlassian.html): Using Atlassian's improved Bitbucket PR experience and VS Code integration, you can bring information from Jira Software right into SCM and IDE. 
 (416 words)
- [Nexus Documentation - Nexus IQ Server 1.26 - Sonatype.com](/content/books/sonatype-clm-book/1-26/html/book/integrating-jenkins-2-x-html.html): Control the flow of components throughout your software supply chain. (870 words)
- [Maven: The Integration Bridge for Modern Enterprise Development](/content/blog/2009/05/maven-integration-and-distributed-open-innovation/index.html): Discover how Maven bridges various technologies, driving open innovation and simplifying integration for developers through essential plugins and support. (934 words)
- [Gartner goes development-centric | Sonatype Blog](/content/blog/2014/09/gartner-goes-development-centric/index.html): Gartner emphasizes the importance of development-centric open source governance to manage risks and maximize ROI in IT solutions. Learn key strategies. (273 words)
- [What Does DevOps Maturity Tell Us About Security Maturity?](/content/blog/devopsmaturity/index.html): In March 2018 alone, IT Governance counted 20,836,531 records leaked (and that’s only in the news!), including hacks at the NHS and the National Lottery.  (864 words)
- [Sonatype Expands Open Source Malware Protection | Sonatype](/content/press-releases/sonatype-expands-open-source-malware-protection/index.html): Sonatype enhances Repository Firewall, integrating with Zscaler to block open source malware across developer workflows and enterprise environments. (985 words)
- [Improving DevSecOps at the GSA | Sonatype Blog](/content/blog/improving-devsecops-at-the-gsa/index.html): The General Service Administration shares how it adopted devops practices interagency in this presentation, The Journey to Government DevOps. (430 words)
- [Nexus Live, October 2014 - Gene Kim, Josh Corman, TheNEXUS](/content/blog/2014/10/nexus-live-october-2014-gene-kim-josh-corman-thenexus.html): Catch up with Gene Kim and Josh Corman on the latest updates for the DevOps Enterprise Summit and the Nexus community site in this broadcast. (134 words)
- [Customer Success Stories | Sonatype](/content/customer-stories/index.html): Explore how enterprises around the world enhance security and innovation with Sonatype's tools for AI management and open source security. (182 words)
- [Explore New Features in Sonatype Nexus Repository 1.8.0.1](/content/blog/2010/11/nexus-1-8-0-1-functionality-and-fixes/index.html): Discover new features in Sonatype Nexus Repository 1.8.0.1, including enhanced metadata handling, S3 repository improvements, and concurrent access resolutions. (400 words)
- [sonatype-2024-1783 | Security Details | Sonatype Guide](/content/guide/vulnerability/sonatype-2024-1783/index.html): Technical security analysis for sonatype-2024-1783. CVSS 10.0 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (159 words)
- [Minimize Development Risk with Better Repository Management](/content/blog/repository-management-its-not-just-for-the-jvm/index.html): Mykel Alvis (@mykelalvis) of Array Consulting urges developers to use a caching, and preferably security-scanning, artifact repository. Here's why. (299 words)
- [This Week: Killing Windows Defender With an npm Package](/content/blog/this-week-in-malware-killing-windows-defender-with-an-npm-package.html): This Week in Malware we discuss a malicious npm package that disables Windows Defender before dropping a trojan, and ongoing dependency confusion findings. (407 words)
- [Procure Secure Components Faster and Manage Risk Better](/content/blog/oss-for-enterprise/index.html): The CI ecosystem is large and complex, especially at a company like Discover. (728 words)
- [Software Supply Chain Best Practices: Future-Proofing With SCA](/content/blog/future-proofing-your-software-supply-chain-with-sca-best-practices.html): Learn software supply chain best practices and how Software Composition Analysis (SCA) helps reduce open source risk through automation and prioritization. (1,875 words)
- [sonatype-2026-002817 | Sonatype Research | Sonatype Guide](/content/guide/vulnerability/sonatype-2026-002817/sonatype-research/index.html): Expert security research for sonatype-2026-002817 by Sonatype. In-depth analysis, proof-of-concept details, and actionable remediation guidance from security r… (150 words)
- [How Al Tools are Changing the Game | Sonatype Webinar](/content/resources/webinars/ai-ml-tools-change-the-game/index.html): Discover how AI tools are reshaping software supply chain security. In this webinar, Sonatype experts share how to keep your SDLC secure from emerging threats., Uncover Hidden Risks in Your Software Supply Chain—Before They Strike. 

The rapid adoption of AI/ML is revolutionizing innovation, but it’s also creati... (223 words)
- [Sonatype Success Story | Trilliant](/content/customer-stories/trilliant-and-sonatype-lifecycle/index.html): See how Trilliant is using Sonatype Lifecycle to quickly identify and remediate application security risks. (1,764 words)
- [Find a Sonatype Partner | Sonatype Partner Program](/content/partner/find-a-partner/index.html): Explore Sonatype's partner ecosystem and learn more about the cloud, community, global system integrator, alliance, and technology partners we work with. (322 words)
- [Maven Central + Sonatype | Securing the Largest Java Repository](/content/products/maven-central-repository/index.html): Discover Maven Central, the largest Java repository, stewarded by Sonatype for over 20 years.  (586 words)
- [Sonatype Advanced Legal Pack Demo](/content/request-a-sonatype-advanced-legal-pack-demo/index.html): Book a demo of Advanced Legal Pack to enhance compliance, streamline processes, and significantly reduce legal review time across your SDLC. (172 words)
- [Wicked Good Development: The Secret Life of Maven Central](/content/blog/secret-life-of-maven-central/index.html): Joel Orlina, an Engineering Manager at Sonatype, joins Kadi to share his insights on the previously unknown history of Maven Central., In this episode, Joel Orlina joins Kadi Grigg to provide insights and knowledge on “The Secret Life of Maven Central,” his talk given at Devoxx UK and OpenSFF Day. Joel sheds light on the previously unknown history of Maven Central and how it works under the covers. He also discusses how the Central team addresses critical security risks like dependency confusion and how it responded to security events such as Log4Shell, and most importantly, how you can get involved.
Check out the resources from today's episode here.  (6,845 words)
- [Why Your Enterprise Needs a Binary Repository Manager](/content/blog/why-do-i-need-a-binary-repository-manager/index.html): Binary repository managers are vital to the modern software development lifecycle. Learn what they are and why you shouldn’t store binary artifacts in Git. (694 words)
- [What is Application Lifecycle Management (ALM)? | Sonatype](/content/resources/articles/what-is-alm/index.html): Learn about Application Lifecycle Management (ALM), its pivotal stages, benefits & the difference from SDLC. Delve into its modern role and future trends. (2,163 words)
- [hubfs/securing-federal-applications-wp-pdf.html](/content/hubfs/securing-federal-applications-wp-pdf.html) (2,503 words)
- [Decoding SWFT: How It Redefines Secure Acquisition | Sonatype](/content/resources/whitepapers/decoding-swft/index.html): Discover how the DoD's Software Fast Track (SWFT) initiative revolutionizes software security and learn how Sonatype can help you seamlessly adopt SWFT. (1,806 words)
- [sonatype-2023-3911 | Security Details | Sonatype Guide](/content/guide/vulnerability/sonatype-2023-3911/index.html): Technical security analysis for sonatype-2023-3911. CVSS 10.0 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (138 words)
- [hubfs/1-2025_website-assets/resource_files/risk-20management-20framework-20-20whitepaper-pdf.html](/content/hubfs/1-2025_website-assets/resource_files/risk-20management-20framework-20-20whitepaper-pdf.html) (1,522 words)
- [hubfs/1-2023_new_site_assets/executive-20summaries/sonatype-ism-executive-summary_rv7-pdf.html](/content/hubfs/1-2023_new_site_assets/executive-20summaries/sonatype-ism-executive-summary_rv7-pdf.html) (1,492 words)
- [hubfs/unpickling-pytorch-whitepaper-pdf.html](/content/hubfs/unpickling-pytorch-whitepaper-pdf.html) (2,086 words)
- [org.opengis.cite.teamengine/teamengine-spi… | Sonatype Guide](/content/guide/component/maven/org-opengis-cite-teamengine-teamengine-spi-ctl/6-0-0-rc2.html): Comprehensive security analysis for org.opengis.cite.teamengine/teamengine-spi-ctl version 6.0.0-RC2. No known vulnerabilities. License: Apache-2.0. View depen… (37 words)
- [And Then, Our CEO Won Entrepreneur of the Year](/content/blog/and-then-our-ceo-won-entrepreneur-of-the-year/index.html): Wayne Jackson, Sonatype’s CEO, was named an EY Entrepreneur Of The Year in the Cybersecurity category. (370 words)
- [Sonatype Intelligence: CVE-2017-5662 - Cross-Site Scripting](/content/blog/nexus-intelligence-insights-cve-2017-5662-cross-site-scriptingxss/0-0/index.html): Nexus Intelligence Insights - CVE-2017-5662 - Cross-Site Scripting (XSS) (693 words)
- [sonatype-2022-0723 | Security Details | Sonatype Guide](/content/guide/vulnerability/sonatype-2022-0723/index.html): Technical security analysis for sonatype-2022-0723. CVSS 10.0 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (71 words)
- [sonatype-2022-0706 | Security Details | Sonatype Guide](/content/guide/vulnerability/sonatype-2022-0706/index.html): Technical security analysis for sonatype-2022-0706. CVSS 10.0 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (60 words)
- [hubfs/preparation-key-to-mitigating-the-business-impact-of-malware-attacks-pdf.html](/content/hubfs/preparation-key-to-mitigating-the-business-impact-of-malware-attacks-pdf.html) (1,704 words)
- [Strengthening Software Supply Chains: Why Grafeas Is a Great Idea](/content/blog/strengthening-software-supply-chains-for-everyone-why-grafeas-is-a-great-idea.html): In keeping with our commitment to open innovation — Sonatype is excited to add unique value to the Grafeas community so organizations everywhere. (609 words)
- [sonatype-2026-001357 | Security Details | Sonatype Guide](/content/guide/vulnerability/sonatype-2026-001357/index.html): Technical security analysis for sonatype-2026-001357. CVSS 7.1 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (77 words)
- [litellm 1.82.8 | Sonatype Guide](/content/guide/component/pypi/litellm/1-82-8.html): Comprehensive security analysis for litellm version 1.82.8. Max vulnerability severity: 9.8 CVSS. License: MIT. View dependencies, vulnerabilities, and detaile… (45 words)
- [npm Packages Found Exfiltrating Kubernetes Config & SSH Keys](/content/blog/npm-packages-caught-exfiltrating-kubernetes-config-ssh-keys.html): Sonatype tracks an ongoing campaign that uses npm packages to retrieve and exfiltrate Kubernetes configuration and SSH keys to an external server (749 words)
- [What Is Grounding? Why AI Coding Assistants Need Better Intelligence](/content/blog/what-is-grounding-why-ai-coding-assistants-need-better-intelligence.html): Grounding gives AI coding assistants real-time software supply chain intelligence, helping developers choose dependencies and avoid vulnerable packages. (918 words)
- [hubfs/sonatype-20lp-202021/images/sssc-report-2021_0913_pm_2-pdf.html](/content/hubfs/sonatype-20lp-202021/images/sssc-report-2021_0913_pm_2-pdf.html) (12,646 words)
- [Code and congress: A time for cyber supply chain management](/content/blog/2014/12/cyber-supply-chain-management-part1/index.html): Explore the importance of software supply chain management and transparency in software development in this blog. (1,097 words)
- [Project Quality Metrics 2022 Analysis](/content/resources/state-of-the-software-supply-chain-2022/project-quality-metrics/index.html): Measuring the quality of open source projects continues to evolve. Sonatype examines the link between security risk and project quality measurements. (3,317 words)
- [Auditing SBOMs: Enhancing Software Security and Compliance](/content/blog/how-to-audit-sboms-for-enhanced-software-security/index.html): Explore how to audit SBOMs for enhanced software security. Learn to integrate SBOMs effectively into your development workflows and enhance compliance. (594 words)
- [sonatype-2021-1696 | Security Details | Sonatype Guide](/content/guide/vulnerability/sonatype-2021-1696/index.html): Technical security analysis for sonatype-2021-1696. CVSS 10.0 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (88 words)
- [sonatype-2022-2481 | Security Details | Sonatype Guide](/content/guide/vulnerability/sonatype-2022-2481/index.html): Technical security analysis for sonatype-2022-2481. CVSS 10.0 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (69 words)
- [sonatype-2022-1504 | Security Details | Sonatype Guide](/content/guide/vulnerability/sonatype-2022-1504/index.html): Technical security analysis for sonatype-2022-1504. CVSS 10.0 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (63 words)
- [sonatype-2025-000440 | Security Details | Sonatype Guide](/content/guide/vulnerability/sonatype-2025-000440/index.html): Technical security analysis for sonatype-2025-000440. CVSS 8.7 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (74 words)
- [sonatype-2026-001275 | Security Details | Sonatype Guide](/content/guide/vulnerability/sonatype-2026-001275/index.html): Technical security analysis for sonatype-2026-001275. CVSS 7.1 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (78 words)
- [Strategies to Secure Multi-Environment Deployments](/content/blog/securing-multi-environment-deployments-cloud-on-premise-and-air-gapped.html): Strengthen security across deployments with automation, centralized policies, and SBOM management. Secure your multi-environment software today. (1,162 words)
- [sonatype-2023-3913 | Security Details | Sonatype Guide](/content/guide/vulnerability/sonatype-2023-3913/index.html): Technical security analysis for sonatype-2023-3913. CVSS 10.0 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (93 words)
- [The Landscape of Open Source Supply Chain Attacks: Part 2](/content/blog/the-shifting-landscape-of-open-source-supply-chain-attacks-part-2.html): Sonatype's Brian Fox delves into how bad actors and cybercriminals are attacking the software supply chain, and how cyberattacks continue to evolve.  (2,321 words)
- [Walmart Adopts Sonatype Nexus, OneOps, Jenkins, Kubernetes](/content/blog/walmart-integrates-nexus-oneops-jenkins-kubernetes-into-distribution-center-management-system.html): Walmart Integrates Sonatype Nexus, OneOps, CloudBees Jenkins, Kubernetes into Distribution Center Management System. (157 words)
- [Apache Struts2 Critical File Vulnerability: CVE-2024-53677](/content/blog/cve-2024-53677-a-critical-file-upload-vulnerability-in-apache-struts2.html): Learn how to address CVE-2024-53677, a critical Apache Struts2 vulnerability. Discover mitigation steps to secure your software supply chain. (635 words)
- [sonatype-2022-1497 | Security Details | Sonatype Guide](/content/guide/vulnerability/sonatype-2022-1497/index.html): Technical security analysis for sonatype-2022-1497. CVSS 10.0 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (47 words)
- [Malware Insights: Malicious Rust Crate and Colors Typosquats](/content/blog/this-week-in-malware-may-13th-edition/index.html): Malicious Rust crate 'rustdecimal' discovered on crates.io, targeting Linux and macOS users. New 'colors' typosquats also identified, targeting Discord users. (885 words)
- [Navigating Open Source Growth | Sonatype Blog](/content/blog/2014/11/the-billion-club/index.html): Last year, the Central Repository served over 13 billion download requests. Explore usage and predictions on how many requests will be managed.  (559 words)
- [Access npm Packages After Securing Sonatype Nexus Repository](/content/blog/how-to-access-npm-packages-after-securing-sonatype-nexus.html): Here are the steps necessary to secure packages, like npm, on the Sonatype Nexus Repository Manager.  (693 words)
- [It Pays to Discover Sonatype](/content/blog/it-pays-to-discover-sonatype/index.html): Karthik Loganathan and Giri Rao of Discover explain how the financial services company benefits from Sonatype's open source license management platform.  (702 words)
- [Chapter 5: Ruby and Maven | Sonatype Maven Cookbook](/content/resources/guides/maven-cookbook/ruby-and-maven/index.html): Unleash the potential of Ruby and Apache Maven. Learn the ropes of managing Ruby projects effortlessly with Maven in this insightful chapter. (1,304 words)
- [sonatype-2021-1472 | Security Details | Sonatype Guide](/content/guide/vulnerability/sonatype-2021-1472/index.html): Technical security analysis for sonatype-2021-1472. CVSS 10.0 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (72 words)
- [ai.platon.pulsar/pulsar-all 4.9.3 | Sonatype Guide](/content/guide/component/maven/ai-platon-pulsar-pulsar-all/4-9-3.html): Comprehensive security analysis for ai.platon.pulsar/pulsar-all version 4.9.3. No known vulnerabilities. License: Apache-2.0. View dependencies, vulnerabilitie… (53 words)
- [Optimal Sonatype Nexus Repository Configuration | Sonatype Blog](/content/blog/2009/06/optimal-nexus-repository-configuration/index.html): Learn how to optimally configure Sonatype Nexus Repository for multiple teams, balancing scalability, ease of management, and ensuring security. (869 words)
- [Maven Central: org.opengis.cite.teamengine:teamengine-spi-ctl](/content/central/artifact/org-opengis-cite-teamengine/teamengine-spi-ctl/versions/index.html): Discover teamengine-spi-ctl in the org.opengis.cite.teamengine namespace. Explore metadata, contributors, the Maven POM file, and more. (179 words)
- [Sonatype Reveals Data Breaches are Catalysts for DevSecOps](/content/press-releases/sonatype-survey-reveals-massive-data-breaches/index.html): Sonatype, the leader in automated open source governance, published findings from its 5th annual DevSecOps Community Survey of 2,076 IT professionals. (816 words)
- [Enabling Access Logging in Sonatype Nexus Repository 1.3.6](/content/blog/2009/09/access-logging-in-nexus-136/index.html): Learn how to enable access logging in Sonatype Nexus Repository 1.3.6 by using customized Jetty configurations for improved monitoring and maintenance. (404 words)
- [Maven Central: ca.islandora.alpaca:islandora-indexing-triplestore:1.0.4](/content/central/artifact/ca-islandora-alpaca/islandora-indexing-triplestore/1-0-4.html): Discover islandora-indexing-triplestore in the ca.islandora.alpaca namespace. Explore metadata, contributors, the Maven POM file, and more. (192 words)
- [400+ npm Packages Target Azure, Uber, Airbnb Developers](/content/blog/this-week-in-malware-400-npm-packages-target-azure-uber-airbnb-developers.html): Over 400 malicious npm packages targeted Azure, Uber, and Airbnb developers. Learn how Sonatype blocks threats to secure your software supply chain. (863 words)
- [Maven Central: ca.islandora.alpaca:islandora-indexing-triplestore:0.8.0](/content/central/artifact/ca-islandora-alpaca/islandora-indexing-triplestore/0-8-0.html): Discover islandora-indexing-triplestore in the ca.islandora.alpaca namespace. Explore metadata, contributors, the Maven POM file, and more. (212 words)
- [AI Technologies | The Future of Innovation & Efficiency](/content/blog/core-ai-technology-and-the-foundation-of-future-innovations-get-gartner-report.html): Explore key AI technologies driving innovation—causal AI, self-supervised learning, and AI-optimized hardware. Download the Gartner report for insights. (453 words)
- [Shift Left: Operationalizing Security Controls via DevSecOps](/content/blog/security-program-to-shift-left-operationalizing-security-controls-via-devsecops.html): Map the automation opportunities into your software development lifecycle as part of coordinated strategies to shift security left.  (826 words)
- [House Oversight: Equifax Open Source Breach Was Preventable](/content/blog/house-oversight-report-equifax-open-source-breach-was-entirely-preventable.html): Equifax is not alone. In the last decade, there have been thousands of companies that have suffered the exact same, easily preventable, mistake. (445 words)
- [sonatype-2021-1473 | Security Details | Sonatype Guide](/content/guide/vulnerability/sonatype-2021-1473/index.html): Technical security analysis for sonatype-2021-1473. CVSS 10.0 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (74 words)
- [Two Years of Flexmojos: Exploring Versions 3.6 and 4.0 Pre-Alpha](/content/blog/2010/03/flexmojos-two-years-later/index.html): Celebrating two years of Flexmojos with new releases, enhanced feature. functionality, and support for the latest Flex and AIR development within Apache Maven. (401 words)
- [What is DevOps and What Isn't | Sonatype](/content/resources/articles/what-is-devops/index.html): DevOps accelerates innovation through collaboration and frequent releases. (2,480 words)
- [Maven Central: ca.islandora.alpaca:islandora-indexing-triplestore:1.0.1](/content/central/artifact/ca-islandora-alpaca/islandora-indexing-triplestore/1-0-1.html): Discover islandora-indexing-triplestore in the ca.islandora.alpaca namespace. Explore metadata, contributors, the Maven POM file, and more. (209 words)
- [How AI Is Transforming Development and Supply Chain Security](/content/state-of-the-software-supply-chain/2023/ai-in-software-development/index.html): Explore 'AI in Software Development': the impact of AI and ML on the industry. (1,614 words)
- [Flexibility in Maven 3.x: Exploring Polyglot and ModelReaders](/content/blog/2009/11/maven-3x-paving-the-desire-lines-part-two/index.html): Discover the advancements in Maven 3.x, focusing on ModelReader and Polyglot Maven, and learn how to create your custom ModelReader implementation.

 (1,283 words)
- [How to Manage OSS Forges Using Sonatype Nexus Repository](/content/blog/2010/01/managing-oss-forges-with-nexus/index.html): Learn the best practices for managing large OSS repositories using Sonatype Nexus Repository, including configuration, security, and automation tips. (1,978 words)
- [Browsing Javadocs and Archives Made Easy with Nexus Repository 1.5.0](/content/blog/2010/02/browse-javadoc-150/index.html): Explore how Sonatype Nexus Repository 1.5.0 simplifies browsing Javadocs, archives, and sources from the repository, enhancing your development workflow. (703 words)
- [hubfs/1-2025_website-assets/resource_files/article_sonatype-20guide-20best-20practices-20for-20nexus-20repository-20-20rv11-pdf.html](/content/hubfs/1-2025_website-assets/resource_files/article_sonatype-20guide-20best-20practices-20for-20nexus-20repository-20-20rv11-pdf.html) (1,203 words)
- [Sonatype Announces Integration with Buy with AWS Marketplace](/content/press-releases/sonatype-announces-integration-with-buy-with-aws-offering.html): Sonatype announced its integration with Buy with AWS, a new feature now available through AWS Marketplace.  (464 words)
- [ca.islandora.alpaca/islandora-indexing-tri… | Sonatype Guide](/content/guide/component/maven/ca-islandora-alpaca-islandora-indexing-triplestore/1-0-1.html): Comprehensive security analysis for ca.islandora.alpaca/islandora-indexing-triplestore version 1.0.1. No known vulnerabilities. License: MIT. View dependencies… (40 words)
- [Cybersecurity Awareness Month: Strengthen Digital Defenses](/content/blog/cybersecurity-awareness-month-building-a-safer-digital-world-together.html): October is Cybersecurity Awareness Month. Explore cybersecurity, future regulations, women in cybersecurity, SBOMs, and secure development practices. (481 words)
- [FDA: DevSecOps and Nobody Dies](/content/blog/devsecops-and-the-fda/index.html): Cybersecurity risks in medical devices are nothing new.  The FDA calls for new vigilance on cybersecurity within medical devices. (499 words)
- [New PyPI Cryptomining Malware Discovered by Sonatype](/content/blog/sonatype-catches-new-pypi-cryptomining-malware-via-automated-detection.html): New malicious typosquatting packages infiltrating the PyPI repository identified that secretly pull in cryptominers.  (1,024 words)
- [Seamless Sonatype Nexus Repository Upgrade: A User Success Story](/content/blog/2012/04/when-you-run-nexus-it-just-works/index.html): Discover how a seamless upgrade experience with Sonatype Nexus Repository showcases its ease of administration and reliability. (269 words)
- [Unveiling npm Manifest Confusion: Risks and Solutions](/content/blog/npm-manifest-confusion-what-is-it-and-do-you-really-need-to-worry-about-it.html): Manifest confusion becomes problematic in development environments without effective DevSecOps workflows and tooling in place. Learn what to look out for. (913 words)
- [Nexus Repository Achieves Certification in Red Hat OpenShift](/content/blog/nexus-repository-now-certified-in-red-hat-openshift-1.html): Discover how Nexus Repository's certification in Red Hat OpenShift enhances DevOps pipelines with improved security, efficiency, and agility. (735 words)
- [Sonatype Recognized in the Gartner Magic Quadrant for SSSC](/content/resources/whitepapers/5-steps-to-secure-your-ai-supply-chain/index.html): Discover how to secure your AI supply chain with Gartner's insights. Strengthen security, improve visibility, and reduce risks with practical strategies from industry leaders. (256 words)
- [Migrating from Artifactory to Nexus: Ning's Success Story](/content/blog/2010/01/moving-nings-development-infrastructure-from-artifactory-to-nexus-professional.html): Ning's migration from Artifactory to Sonatype Nexus improved repository management, enhanced security, and streamlined artifact handling. (855 words)
- [Are You Impacted by Struts2: Free Application Health Check](/content/blog/application-health-check-free-tool-to-see-if-youre-impacted-by-the-struts2.html): Find out in less than 5 minutes if your apps contain OSS components with known vulnerabilities by using the freely downloadable Application Health Check. (545 words)
- [Federal Technology Trends 2025: A Retrospective | Sonatype](/content/blog/2025-federal-retrospective-the-year-of-resilient-innovation.html): Explore 2025 federal technology trends as government agencies shift from planning to executing resilient IT modernization and innovation at scale. Read more! (1,310 words)
- [What Are SBOM Standards and Formats? | Sonatype](/content/blog/what-are-sbom-standards-and-formats/index.html): Explore SBOM standards and formats like CycloneDX, SPDX, and SWID. Learn how they boost transparency, security, and compliance in software supply chains. (1,302 words)
- [hubfs/1-2023_new_site_assets/cheat-20sheets/roadmap-checklist-infographic-pdf.html](/content/hubfs/1-2023_new_site_assets/cheat-20sheets/roadmap-checklist-infographic-pdf.html) (450 words)
- [Sonatype Nexus Repository Deployment Guidelines](/content/blog/2014/12/nexus-pro-deployment-guidelines/index.html): Explore the advantages of moving from Nexus OSS to Sonatype Nexus Repository Pro. Discover deployment guidelines for Sonatype Nexus Repository.  (147 words)
- [Defend Your SDLC From Open Source Malware | Sonatype Whitepaper](/content/resources/whitepapers/defend-sdlc-from-open-source-malware/index.html): Learn how to defend your software development lifecycle from open source malware with proactive strategies and best practices from Sonatype. (122 words)
- [Enhance Apache Log4j Security with SBOM and VDR Integration](/content/blog/sbom-vdr-and-maven-transforming-the-apache-logging-experience-to-a-common-pattern.html): CycloneDX Maven Plugin helps publish software bills of materials (SBOMs) and vulnerability disclosure reports (VDRs) and benefits open source projects (879 words)
- [How Manufacturing Practices Improve Open Source Consumption](/content/blog/how-manufacturing-best-practices-can-improve-open-source-consumption-and-software-supply-chains.html): Explore Sonatype's research paper developed in partnership with the Atlantic Council on software supply chain best practices for open source consumption (1,062 words)
- [How to Become an Open Source Contributor](/content/blog/becoming-a-new-contributor-to-open-source-software/index.html): There is no perfect recipe for getting involved with an OSS community, but there are some things you can do to help you get past the barriers to entry. (831 words)
- [AppSec EU 2017 Belfast – What to Expect](/content/blog/appsec-eu-2017-belfast-what-to-expect/index.html): In mid-May I’ll be joining the organizing team of AppSec EU 2017 in Belfast for a week of security and DevOps sessions.  (93 words)
- [Maven Central: ai.platon.pulsar:pulsar-all:4.7.14](/content/central/artifact/ai-platon-pulsar/pulsar-all/4-7-14.html): Discover pulsar-all in the ai.platon.pulsar namespace. Explore metadata, contributors, the Maven POM file, and more. (4,045 words)
- [New Ecosystems in Sonatype Lifecycle and Firewall](/content/blog/new-ecosystems-in-sonatype-lifecycle-and-repository-firewall.html): New ecosystems added to Sonatype Lifecycle and Repository Firewall: Alpine, Bower, Cargo, CocoaPods, Conda, Conan, Composer, CRAN, Debian, Drupal & rpm. 
 (349 words)
- [Wicked Good Development: Issues with Open Source Licensing](/content/blog/wicked-good-development-the-struggle-with-open-source-licensing.html): Filipp Kofman and Adam Such talk best practices for handling open source licensing and how beneficial it can be for managing dependencies. 
, In this episode, Kadi and guest co-host, Dariush Griffin, sit down with Filipp Kofman (Partner, Davis Wright Tremaine LLC) and Adam Such (Solutions Architect, Sonatype) to discuss struggles with open source licensing.
There’s not always a clear-cut answer on the best way to handle open source licensing, especially when it comes to managing your dependencies. Topics of discussion include ideas from legal and development perspectives, the struggles they face, and best practices for working together to reach mutually beneficial goals.
Tune in for the full conversation and check out the resources from this episode here. (6,590 words)
- [Migrating from JCenter/Bintray to Maven Central | Sonatype](/content/blog/what-publishers-need-to-know-about-migrating-from-jcenter/bintray-to-the-central-repository/index.html): A step-by-step guide publishers can follow to easily migrate from Bintray/JCenter to The Central Repository  (1,280 words)
- [Endress+Hauser and the Sonatype Platform | Sonatype](/content/customer-stories/endress-hauser-and-the-sonatype-platform/index.html): See how Endress Hauser uses Sonatype Lifecycle to remove at-risk open source components before they reach production. (678 words)
- [Sonatype Discovers Two Malicious npm Packages](/content/blog/sonatype-discovers-two-malicious-npm-packages/index.html): Malicious npm packages sbx-mask and touch-adv steal credentials via maintainer account takeover, exposing secrets from developer and CI/CD environments. (1,000 words)
- [White House Executive Order on U.S. Software Supply Chains](/content/blog/white-house-executive-order-software-supply-chains/index.html): Following recent SolarWinds attacks on multiple government agencies, US President Biden calls for comprehensive reviews of software supply chains. (667 words)
- [Explore npm search changes | Sonatype Blog](/content/blog/npm-search-changes/index.html): Npm updated its search API, affecting Sonatype Nexus Repository users. Discover how these changes enhance search functionality and what it means for you. (245 words)
- [How to Navigate DevOps Principles: Analyzing Shift Left](/content/blog/how-to-navigate-devops-principles-analyzing-shift-left-and-secure-right.html): Explore Shift Left and Secure Right, what are their core principles to achieve high-quality, secure software and how they align with DevOps and DevSecOps (1,243 words)
- [Kaseya Ransomware: A Software Supply Chain Attack or Not?](/content/blog/kaseya-ransomware-supply-chain/index.html): As companies scramble to address and resolve this devastating attack, we look at what makes
a supply chain and what it takes to address upstream attacks. (958 words)
- [Automatiza La Seguridad y Enfócate En Desarrollar ](/content/resources/webinars/zivra-webinar-es/index.html) (283 words)
- [Part 1, the Internet of Everything: Code, Cars, and More](/content/blog/2014/07/way-software-is-made/index.html): Just like automobile manufacturers, software “manufacturers” need to apply supply chain management principles for both efficiency and quality. (814 words)
- [Sonatype Relocates Headquarters to Maryland](/content/blog/2010/09/sonatype-headquarters-moves-to-maryland/index.html): Sonatype relocates its headquarters from Silicon Valley to Maryland, appointing Wayne Jackson as the new CEO to leverage the region's strategic location. (263 words)
- [Maven Central: org.apache.servicemix.bundles:org.apache.servicemix.bundles.xerces:2.9.1_5](/content/central/artifact/org-apache-servicemix-bundles/org-apache-servicemix-bundles-xerces/2-9-1_5.html): Discover org.apache.servicemix.bundles.xerces in the org.apache.servicemix.bundles namespace. Explore metadata, contributors, the Maven POM file, and more. (182 words)
- [Sonatype Automated Deployments With Atlassian Bitbucket Pipelines](/content/blog/sonatype-automated-deployments-with-atlassian-bitbucket-pipelines.html): With the release of Atlassian’s new Bitbucket Pipelines, you can now configure your project to have continuous builds performed in the cloud easily. (320 words)
- [Sonatype Lifecycle and Azure DevOps Integration](/content/products/integrations/azure-devops/index.html): Integrate Sonatype with Azure DevOps to automate open source risk management, enforce policies, and enhance security throughout your CI/CD workflows. (380 words)
- [Compare Sonatype to Leading Software Supply Chain Security Tools](/content/compare/index.html): Discover how Sonatype leads in software supply chain security with advanced automation and intelligence. Compare against Sonatype competitors. (817 words)
- [Securing Development Infrastructure in Software Security](/content/blog/securing-development-infrastructure-a-new-frontier-in-software-supply-chain-security.html): Discover strategies and proactive measures to secure your development infrastructure against sophisticated software supply chain attacks. Get started today (1,012 words)
- [Releases are Forever? | Sonatype Blog](/content/blog/2012/01/releases-are-forever/index.html): Learn when to delete old releases from your repository to save on storage costs and when to retain them for stability and rollback capabilities. (466 words)
- [Enhance Software Security with SLSA and Sonatype | Blog](/content/blog/what-goes-great-with-slsa-sonatype/index.html): Learn about seamless compatibility between SLSA and Sonatype products, highlighting the powerful synergy that can enhance your software security efforts (1,413 words)
- [hubfs/dora-20compliance-20checklist-20-20final-pdf.html](/content/hubfs/dora-20compliance-20checklist-20-20final-pdf.html) (406 words)
- [com.tencent.mna/mnalibrary 1.2.2 | Sonatype Guide](/content/guide/component/maven/com-tencent-mna-mnalibrary/1-2-2.html): Comprehensive security analysis for com.tencent.mna/mnalibrary version 1.2.2. Max vulnerability severity: 7.5 CVSS. License: Apache-2.0. View dependencies, vul… (44 words)
- [Sonatype Nexus Repository 3.5: Introducing Yum Proxy Support](/content/blog/nexus-repository-manager-3-5.html): Sonatype Nexus Repository 3.5 now supports Yum proxy repositories and enhances the upgrade process for Firewall-enabled repositories.  (290 words)
- [The Most Underutilized Policy Type in Sonatype Lifecycle | Sonatype](/content/blog/the-most-underutilized-policy-type-in-lifecycle/index.html): Software supply chain policies in the IQ server for architects to enforce design contracts. (612 words)
- [The Importance of Having an Open Source Policy](/content/blog/importanceofopensourcepolicy/index.html): In 2017, 57% of DevSecOps Community Survey participants confirmed they had an open source policy. In 2018 this has risen to 64% - but 35% still ignore it. (892 words)
- [Sonatype Nexus Repository 1.1 Released | Sonatype Blog](/content/blog/2008/11/nexus-maven-repository-manager-11-released/index.html): Sonatype Nexus Repository 1.1 introduces architecture improvements, plugin support, and user experience enhancements. Download the latest version. (404 words)
- [Optimizing Maven Builds for Continuous Integration Success](/content/blog/2009/01/maven-continuous-integration-best-practices/index.html): Optimize your Maven builds in CI with these tips, including snapshot deployment, repository isolation, and regular purging for efficient development. (853 words)
- [hubfs/wsj-20-20companies-20still-20downloading-20flaw-20that-20led-20to-20equifax-20breach-pdf.html](/content/hubfs/wsj-20-20companies-20still-20downloading-20flaw-20that-20led-20to-20equifax-20breach-pdf.html) (624 words)
- [Sonatype Nexus Repository: Release 1.9-M1 Now Available](/content/blog/2010/12/nexus-1-9-m1-milestone-1-released/index.html): Explore the release of Sonatype Nexus Repository 1.9-M1, featuring improved performance and a new security framework for better developer experiences. (400 words)
- [Sonatype Success Story | USPTO](/content/customer-stories/uspto/index.html): Sonatype helps enable the United States Patent and Trademark Office (USPTO) to be more productive, secure, and innovative. (911 words)
- [Maven Central: ai.platon.pulsar:pulsar-all](/content/central/artifact/ai-platon-pulsar/pulsar-all/versions/index.html): Discover pulsar-all in the ai.platon.pulsar namespace. Explore metadata, contributors, the Maven POM file, and more. (172 words)
- [CVE-2019-0232: Apache Tomcat Remote Code Execution](/content/blog/nexus-intelligence-insights-cve-2019-0232-apache-tomcat-cgi-servlet-remote-code-execution.html): Learn about a very popular component used by developers worldwide. Say hello to CVE-2019-0232, a remote code execution vulnerability. (651 words)
- [Maven Central: org.apache.servicemix.bundles:org.apache.servicemix.bundles.xerces:2.11.0_1](/content/central/artifact/org-apache-servicemix-bundles/org-apache-servicemix-bundles-xerces/2-11-0_1.html): Discover org.apache.servicemix.bundles.xerces in the org.apache.servicemix.bundles namespace. Explore metadata, contributors, the Maven POM file, and more. (189 words)
- [Sonatype Achieves AWS Security Competency Status | Sonatype](/content/press-releases/sonatype-achieves-aws-security-competency-status/index.html): The AWS Security Competency status recognizes that Sonatype has expertise in delivering comprehensive security solutions for modern software development. (367 words)
- [Maven Central: org.opengis.cite.teamengine:teamengine-spi-ctl](/content/central/artifact/org-opengis-cite-teamengine/teamengine-spi-ctl/dependents/index.html): Discover teamengine-spi-ctl in the org.opengis.cite.teamengine namespace. Explore metadata, contributors, the Maven POM file, and more. (45 words)
- [Customer Success Story - travel audience | Sonatype Nexus](/content/customer-stories/travel-audience-and-sonatype/index.html): See how Travel Audience uses Sonatype Nexus Repository on top of Google cloud as a DevOps pipeline solution. (836 words)
- [A Path Towards Secure and Maintainable Open Source Software](/content/blog/a-clear-path-forward-toward-more-secure-and-maintainable-open-source-software.html): Sonatype CTO shares thoughts following conversations, led by OpenSSF, where industry and government came together to discuss securing open source software.  (1,895 words)
- [Maven Central: com.nhncorp.ntaf:ntaf-fitnesse](/content/central/artifact/com-nhncorp-ntaf/ntaf-fitnesse/versions/index.html): Discover ntaf-fitnesse in the com.nhncorp.ntaf namespace. Explore metadata, contributors, the Maven POM file, and more. (19 words)
- [hubfs/1-2023_new_site_assets/find-20a-20partner-202023/2018-20state-20of-20the-20software-20supply-20chain-20report-pdf.html](/content/hubfs/1-2023_new_site_assets/find-20a-20partner-202023/2018-20state-20of-20the-20software-20supply-20chain-20report-pdf.html) (11,453 words)
- [Wicked Good Development Episode 16: Ted Neward's Philosophy 101](/content/blog/wicked-good-ted-newards-philosophy-101/index.html): Ted Neward discusses philosophy and software development with Steve Poole, Kadi Grigg, and Omar Torres., What does philosophy have to do with software development? More than you might think! In this episode, hosts Kadi and Omar sit down with Technologist, Ted Neward and Developer Advocate, Steve Poole to discuss how philosophy is at the heart of everything. Ted provides great insight as to how his background has influenced his outlook on software development and why developers should be asking themselves the hard questions. As Ted puts it, “It is the hard questions that are usually the good ones that will lead you to a positive outcome.”
Check out the resources from today's episode here.  (9,568 words)
- [Making Sure Our Users Don't Zip-Slip and Fall](/content/blog/making-sure-our-users-dont-zip-slip-and-fall/index.html): Sonatype has provided The Central Repository for over a decade and we take security of the users very seriously. (590 words)
- [Securing Federal Applications at DevOps Speed | Sonatype](/content/resources/whitepapers/four-strategies-for-securing-federal-applications-at-devops-speed.html): Secure your applications at the speed of DevOps by empowering developers to shift left. Download our whitepaper to learn more.  (93 words)
- [Software Compliance Checklist | Sonatype Guide](/content/resources/guides/software-journey-checklist/index.html): Learn how to get started on your software compliance journey with detailed checklist to help improve your risk management.  (425 words)
- [Open Source Malware: Defend Your Software Supply Chains | Sonatype](/content/resources/webinars/defending-against-open-source-malware/index.html): Discover expert strategies to defend your software supply chain from open source malware in this webinar. Watch now to strengthen your SDLC security., As organizations deepen their reliance on open source software, evolving security threats are reshaping the landscape at an unprecedented pace.

Threat ... (284 words)
- [Top questions answered when selecting OSS components](/content/blog/2012/05/selecting-oss-components-three-questions-answered-by-nexus-pro.html): Learn how to select the best OSS components by considering install base, security vulnerabilities, and OSS license compatibility. (428 words)
- [Maven Central: org.opengis.cite.teamengine:teamengine-core](/content/central/artifact/org-opengis-cite-teamengine/teamengine-core/versions/index.html): Discover teamengine-core in the org.opengis.cite.teamengine namespace. Explore metadata, contributors, the Maven POM file, and more. (176 words)
- [Ground AI Coding Assistants for Secure Software Development](/content/resources/videos/ground-ai-coding-assistants/index.html): Learn why AI coding assistants need real-time dependency intelligence to reduce software supply chain risk, improve dependency security, and build safer software. (465 words)
- [How to Establish an Open Source Program Office](/content/blog/how-to-establish-an-open-source-program-office/index.html): Develop an open source software program office to streamline use and compliance. By aligning goals with success metrics, the value of the office is clear. (767 words)
- [Maven Central: org.eclipse.birt.runtime.3_7_1:org.eclipse.datatools.connectivity.apache.derby](/content/central/artifact/org-eclipse-birt-runtime-3_7_1/org-eclipse-datatools-connectivity-apache-derby/versions/index.html): Discover org.eclipse.datatools.connectivity.apache.derby in the org.eclipse.birt.runtime.3_7_1 namespace. Explore metadata, contributors, the Maven POM file, and more. (23 words)
- [Stay Ahead of Security Flaws in Your Production Apps](/content/blog/2011/10/will-you-know-when-a-security-flaw-is-found-in-a-production-app.html): Stay ahead of security risks in production apps with Sonatype Insight, which monitors open source components and alerts you to vulnerabilities. (614 words)
- [Equifax Was 100% Preventable, But 18,000 Others At Risk](/content/blog/equifax-was-100-preventable-by-18000-others-at-risk.html): Equifax breach was preventable, but 18,000 other companies remain at risk due to unpatched vulnerabilities in software components like Apache Struts. (392 words)
- [Rust Language Adoption: Balancing Performance and Memory](/content/blog/exploring-rust-language-adoption/index.html): Discover how the Rust programming language addresses critical software challenges with memory safety and high performance, reshaping software development. (792 words)
- [What is Software Application Security Testing (SAST)? | Sonatype](/content/resources/articles/what-is-sast/index.html): Static Application Security Testing (SAST) has become an increasingly important part of the AppSec journey, let's explore the meaning and benefits of SAST. (1,790 words)
- [9 Reasons to Implement a Repository Manager with Sonatype](/content/blog/2008/11/nine-reasons-to-use-a-repository-manager-sonatype-nexus.html): Discover 9 reasons to use Sonatype Nexus Repository Manager, from speeding up builds to saving bandwidth and improving stability in your dev process. (1,616 words)
- [Component Not Found | Sonatype Guide](/content/guide/component/maven/com-github-yjpan51020-3aexcel-helper/x-y-z.html): Could not find component data for maven/com.github.yjpan51020:excel-helper/x.y.z. This component may not exist in our database or may have been removed. (17 words)
- [Sonatype Nexus Repository Cloud Migration Made Easy | Sonatype](/content/products/sonatype-nexus-repository/cloud-migration/index.html): Seamlessly migrate to Sonatype Nexus Repository Cloud with expert guidance from a dedicated Migration Specialist who is with you every step of the way. (683 words)
- [Safeguarding OSS with Lessons from the Bootstrap-sass Hack](/content/blog/corrupting-the-software-supply-chain-lessons-from-the-bootstrap-sass-hack.html): Open source software faces increasing threats from bad actors. Learn crucial lessons from the bootstrap-sass hack to safeguard your software supply chain. (468 words)
- [Sonatype Completes Goldman Sachs $30 Million Financing](/content/press-releases/30-million-financing-goldman-sachs/index.html): Sonatype, the company dedicated to helping deliver higher quality software even faster, today announced the completion of a $30 million equity and debt. (363 words)
- [Find and Fix CVE-2023-50164 - Remote Code Execution (RCE) Vulnerability in Apache Struts 2 – Sonatype Support](/content/support/hc/en-us/articles/24152434781587-find-and-fix-cve-2023-50164-remote-code-execution-rce-vulnerability-in-apache-struts-2.html): . NOTE: This is an ongoing situation. This article is regularly updated with the latest information.   About CVE-2023-50164 In December... (1,868 words)
- [Exploring The LLM Dependency Trap | Sonatype](/content/blog/the-llm-dependency-trap/index.html): AI accelerates software development but also hides a new threat of insecure, outdated software dependencies chosen by large language models (LLMs). (753 words)
- [Sonatype Research Labs | Open Source Threat Research](/content/sonatype-research-labs/index.html): Explore Sonatype Research Labs for the latest human-verified  research, precise vulnerability attribution, malware analysis, and remediation-ready intelligence. (691 words)
- [Book Update: Repository Management With Nexus](/content/blog/2014/06/book-update-repository-management-with-nexus/index.html): Update on Nexus 2.8: Comprehensive search added to the 'Repository Management with Nexus' documentation, making it easier to navigate.  (110 words)
- [Maven Central: ca.islandora.alpaca:islandora-indexing-triplestore](/content/central/artifact/ca-islandora-alpaca/islandora-indexing-triplestore/versions/index.html): Discover islandora-indexing-triplestore in the ca.islandora.alpaca namespace. Explore metadata, contributors, the Maven POM file, and more. (172 words)
- [Announcing 2025 Elevate Award Winners & Finalists | Sonatype](/content/press-releases/sonatype-announces-2025-elevate-award-winners/index.html): Sonatype announces the 2025 Elevate Awards winners, celebrating global leaders leading the charge in DevSecOps innovation and fostering collaboration. (516 words)
- [Maven 2.0.9 Release: Information on Maven Plugin Versions](/content/blog/2008/04/maven-209-released/index.html): Learn about the latest updates in Maven 2.0.9, including default plugin version specifications and tips for managing plugin versions effectively. (1,306 words)
- [Sonatype Expands Exec Team with Cybersecurity & OS Experts](/content/press-releases/sonatype-expands-executive-team/index.html): Brooke Motta joins Sonatype as VP Sales and Shawn Basak joins as VP Strategic Programs. (369 words)
- [Securing the Software Supply Chain: A Federal Imperative for 2026](/content/blog/securing-the-software-supply-chain-a-federal-imperative-for-2026.html): Discover how software supply chain security is now a federal imperative. Continuous visibility and control are now mission-critical. (1,087 words)
- [Bank Reduces Critical Vulnerabilities | Sonatype Case Study](/content/customer-stories/german-bank-reduces-vulnerabilities/index.html): Discover how a leading German bank transformed its software development and achieved a 99% reduction in critical vulnerabilities with Sonatype.  (766 words)
- [Is Cyber Liability Insurance a Moral Hazard in the US?](/content/blog/is-cyber-liability-insurance-a-moral-hazard-in-the-us.html): Sonatype CTO and co-founder, Brian Fox, shares his thoughts on the developing role of cyber liability insurance  in software supply chain management. (1,523 words)
- [Leveling Up: How to Improve Your ACSC Recommended Maturity Model](/content/blog/improve-acsc-recommended-maturity-model/index.html): ACSC, the Australian Cyber Security Center, has three DevSecOps maturity models. Here's how your organization can move up levels in the Essential Eight.  (594 words)
- [The State of Global Software Regulation | Sonatype Webinar](/content/resources/webinars/state-of-global-software-compliance/index.html): Explore the evolving global software compliance landscape and learn how organizations can adapt to new regulatory trends without impacting developer speed., Join Sonatype's Field CTO, Ilkka Turunen and, Eddie Knight, Sonatype’s OSPO Manager and a leader in CNCF, OpenSSF, and FINOS, for a 45-minute deep dive ... (353 words)
- [Wicked Good Development: Devoxx Poland Developer Conference](/content/blog/poland-developer-conference-recap/index.html): Kadi and Steve talk with Devoxx Poland Developer Conference speakers about their key takeaways and experiences at the Krakow event. (6,018 words)
- [Biden’s Cybersecurity Executive Order Fuels Seismic Changes](/content/press-releases/executive-order-fuels-software-development-changes/index.html): Sonatype study reveals significant shifts in software development practices due to the Cybersecurity Executive Order. (977 words)
- [com.agilejava.docbkx/docbkx-maven-base 2.0… | Sonatype Guide](/content/guide/component/maven/com-agilejava-docbkx-docbkx-maven-base/2-0-10.html): Comprehensive security analysis for com.agilejava.docbkx/docbkx-maven-base version 2.0.10. No known vulnerabilities. License: Apache-2.0. View dependencies, vu… (60 words)
- [ai.platon.pulsar/pulsar-all 1.10.15 | Sonatype Guide](/content/guide/component/maven/ai-platon-pulsar-pulsar-all/1-10-15.html): Comprehensive security analysis for ai.platon.pulsar/pulsar-all version 1.10.15. No known vulnerabilities. License: Apache-2.0. View dependencies, vulnerabilit… (39 words)
- [Maven Central: org.eclipse.birt.runtime.3_7_1:org.apache.batik.util](/content/central/artifact/org-eclipse-birt-runtime-3_7_1/org-apache-batik-util.html): Discover org.apache.batik.util in the org.eclipse.birt.runtime.3_7_1 namespace. Explore metadata, contributors, the Maven POM file, and more. (110 words)
- [80% of the Largest US and European Banks Deploy Sonatype](/content/press-releases/largest-banks-deploy-sonatype/index.html): 80 Percent of the Largest US and European Banks Deploy Sonatype to Address Growing Software Security Threat (543 words)
- [Streamline Open Source Security with Automated SCA Tools](/content/blog/streamline-sca-with-sonatype-build-safe-automation/index.html): See how new automation in Sonatype Lifecycle reduces toil, cuts risk, and delivers zero-effort fixes to shrink backlogs and accelerate software delivery. (760 words)
- [Is Sonatype Auditor Right for Your Applications? | Sonatype](/content/blog/considering-nexus-auditor-you-should-but-know-these-things-first.html): Nexus Auditor, in the right use case, is a solid, cost-effective solution. Is Nexus Auditor the solution for you? Maybe, maybe not. Here's how to find out. (802 words)
- [Pharmacy Leader Protects Consumer Data | Sonatype](/content/customer-stories/pharmacy-leader-mitigates-risk/index.html): See how a leading pharmacy organization protects their consumer data against cybersecurity risks with Sonatype Lifecycle and Sonatype Repository Firewall. (340 words)
- [Maven Central: org.opengis.cite.teamengine:teamengine-core](/content/central/artifact/org-opengis-cite-teamengine/teamengine-core/dependents/index.html): Discover teamengine-core in the org.opengis.cite.teamengine namespace. Explore metadata, contributors, the Maven POM file, and more. (207 words)
- [DevOps Leadership Series: Gov Does DevOps](/content/blog/2015/05/devops-leadership-series-gov-does-devops/index.html): This past week, I had the opportunity to catch up with some more industry thought leaders at the DevOpsDays DC event in our nation’s capital. (352 words)
- [Maven Central: org.exist-db.thirdparty.xerces:xercesImpl:2.12.2](/content/central/artifact/org-exist-db-thirdparty-xerces/xercesimpl/2-12-2.html): Discover xercesImpl in the org.exist-db.thirdparty.xerces namespace. Explore metadata, contributors, the Maven POM file, and more. (589 words)
- [Component Not Found | Sonatype Guide](/content/guide/component/npm/buffer-utilities/x-y-z.html): Could not find component data for npm/buffer-utilities/x.y.z. This component may not exist in our database or may have been removed. (17 words)
- [New policy grandfathering: Automating open source governance](/content/blog/new-policy-grandfathering-automating-open-source-governance-at-your-own-pace.html): New policy grandfathering feature lets you automate open source governance at your own pace by "grandfathering" non-critical policy violations. (415 words)
- [Sonatype Unveils Artificial Intelligence Component Detection](/content/blog/sonatype-unveils-state-of-the-art-artificial-intelligence-component-detection.html): Sonatype introduces AI Component Detection, empowering development teams to manage AI/ML risks while accelerating innovation and maintaining security. (750 words)
- [Streamline Maven Projects: Dependency Grouping Techniques](/content/blog/2009/10/maven-tips-and-tricks-grouping-dependencies/index.html): Learn how to efficiently manage Maven dependencies by grouping related ones together, simplifying project configurations and reducing redundancy. (619 words)
- [Effective Tools for Software Composition Analysis (SCA)](/content/blog/software-composition-analysis-tools/index.html): Better developer tools for the software supply chain mean a faster, more effective team. (804 words)
- [The Shift Toward Unified Platforms in Application Security | Sonatype](/content/blog/the-shift-toward-unified-platforms-in-application-security.html): Application security is evolving toward unified platforms. Learn how consolidation, ASPM, and supply chain security drive smarter, scalable AppSec. (770 words)
- [Maven Central: org.eclipse.birt.runtime.3_7_1:org.apache.batik.util](/content/central/artifact/org-eclipse-birt-runtime-3_7_1/org-apache-batik-util/versions/index.html): Discover org.apache.batik.util in the org.eclipse.birt.runtime.3_7_1 namespace. Explore metadata, contributors, the Maven POM file, and more. (35 words)
- [Maven Central: xerces:xercesImpl:2.12.2](/content/central/artifact/xerces/xercesimpl/2-12-2.html): Discover xercesImpl in the xerces namespace. Explore metadata, contributors, the Maven POM file, and more. (421 words)
- [Validate Sigstore Signatures in Central Publisher Portal](/content/blog/central-publisher-portal-now-validates-sigstore-signatures.html): Central Publisher Portal now validates Sigstore signatures, strengthening software supply chain security. (598 words)
- [com.github.yjpan51020/excel-helper 0.0.1-R… | Sonatype Guide](/content/guide/component/maven/com-github-yjpan51020-excel-helper/0-0-1-release.html): Comprehensive security analysis for com.github.yjpan51020/excel-helper version 0.0.1-RELEASE. No known vulnerabilities. License: Apache-2.0. View dependencies,… (46 words)
- [Researchers Say Development Velocity Is a Good Thing](/content/blog/state-of-the-software-supply-chain-2019-podcast/index.html): Organizations with DevOps culture produce high frequency release schedules and stronger MTTU (mean time to update) response scores, to the benefit of all. (460 words)
- [Preparing for EU CRA Compliance: Steps for Development Teams](/content/blog/start-building-your-cra-compliance-strategy-now/index.html): Learn how the EU Cyber Resilience Act (CRA) will improve cybersecurity, its key compliance elements, and how Sonatype can help ensure you’re ready. (609 words)
- [Oil & Gas Giant Boosts Development Security with Sonatype ](/content/customer-stories/oil-and-gas-giant-boosts-security/index.html): Learn how an oil and gas giant boosts development security with Sonatype Lifecycle  (764 words)
- [Empowering Developers with Threat Modeling | Sonatype Success Story](/content/customer-stories/it-services-threat-modeling/index.html): A German IT services leader enhances developer productivity and security by integrating gamified threat modeling and automation, while shifting security left. (689 words)
- [sonatype-2026-004261 | Security Details | Sonatype Guide](/content/guide/vulnerability/sonatype-2026-004261/index.html): Technical security analysis for sonatype-2026-004261. CVSS 9.3 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (96 words)
- [Software AG Secures CI/CD Pipelines | Sonatype](/content/customer-stories/software-ag/index.html): Read how Software AG maintains legal compliance and a secure CI/CD development cycle with Sonatype Lifecycle, a leading SCA tool.  (428 words)
- [Sonatype Unveils Industry-First AI Software Composition Analysis](/content/press-releases/sonatype-unveils-industry-first-ai-sca/index.html): Sonatype's new end-to-end AI Software Composition Analysis (AI SCA) capabilities enable enterprises to harness the full potential of AI.  (691 words)
- [Assess Open Source Software Security: Explore Strategies](/content/blog/assessing-your-open-source-software-security-efficacy.html): Assess your open source software security strategy. Learn how to manage dependencies, enforce security policies, and mitigate software supply chain risks. (715 words)
- [org.fryske-akademy/teidictionaries 5.9 | Sonatype Guide](/content/guide/component/maven/org-fryske-akademy-teidictionaries/5-9.html): Comprehensive security analysis for org.fryske-akademy/teidictionaries version 5.9. No known vulnerabilities. License: Apache-2.0. View dependencies, vulnerabi… (34 words)
- [Building Maven Central Search: Leveraging Solr and AJAX](/content/blog/2011/06/maven-central-search-architecture-overview/index.html): Discover how we leveraged Apache Solr and ajax-solr to build a flexible, scalable search interface for Maven Central, enhancing user experience and performance. (866 words)
- [Securing Repository Credentials with Nexus User Tokens](/content/blog/2012/08/securing-repository-credentials-with-nexus-pro-user-tokens.html): Learn how Nexus Professional enhances credential security with User Tokens, offering a safer alternative to plaintext passwords in Maven Settings. (510 words)
- [hubfs/1-2025_website-assets/resource_files/safeguarding-20the-20software-20supply-20chain-20best-20practices-20for-20nexus-20repository-pdf.html](/content/hubfs/1-2025_website-assets/resource_files/safeguarding-20the-20software-20supply-20chain-20best-20practices-20for-20nexus-20repository-pdf.html) (1,690 words)
- [OpenShift Integration | Secure Software with Sonatype Tools](/content/products/integrations/openshift/index.html): Accelerate secure software delivery with the Sonatype and OpenShift integration, enabling streamlined artifact management and policy enforcement. (480 words)
- [Maven Central: avalon-framework:avalon-framework-impl:4.3](/content/central/artifact/avalon-framework/avalon-framework-impl/4-3.html): Discover avalon-framework-impl in the avalon-framework namespace. Explore metadata, contributors, the Maven POM file, and more. (109 words)
- [Maven Central: activemq:activemq](/content/central/artifact/activemq/activemq/dependents/index.html): Discover activemq in the activemq namespace. Explore metadata, contributors, the Maven POM file, and more. (20 words)
- [Enhancements to Maven Central | Sonatype Blog](/content/blog/2011/03/enhancements-to-maven-central/index.html): Enhancements to Maven Central improve reliability with virtual servers and redundant internet connections, providing faster stable access for users. (497 words)
- [Sonatype for Azure DevOps](/content/help/en/sonatype-for-azure-devops-html.html): Provide a Azure DevOps pipeline step which will run a policy evaluation against a set of files in the build workspace., Provide a Azure DevOps pipeline step which will run a policy evaluation against a set of files in the build workspace. (2,692 words)
- [sonatype-2020-0784 | Security Details | Sonatype Guide](/content/guide/vulnerability/sonatype-2020-0784/index.html): Technical security analysis for sonatype-2020-0784. CVSS 9.1 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (62 words)
- [sonatype-2020-0781 | Security Details | Sonatype Guide](/content/guide/vulnerability/sonatype-2020-0781/index.html): Technical security analysis for sonatype-2020-0781. CVSS 9.1 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (68 words)
- [CI/CD Pipelines - Sonatype for GitLab CI](/content/help/en/ci-cd-pipelines-sonatype-for-gitlab-ci-html.html) (3,733 words)
- [Sonatype Adds Automated Container Analysis to Nexus Lifecycle](/content/press-releases/container-analysis-lifecycle-pr/index.html): Sonatype, the leader in software supply chain automation, announced that it has incorporated Lifecycle Container Analysis (LCA) into its popular Nexus. (396 words)
- [Maven Central: org.eclipse.birt.runtime.3_7_1](/content/central/namespace/org-eclipse-birt-runtime-3_7_1.html): Explore the collection of packages in org.eclipse.birt.runtime.3_7_1 (295 words)
- [sonatype-2026-004261 | Sonatype Research | Sonatype Guide](/content/guide/vulnerability/sonatype-2026-004261/sonatype-research/index.html): Expert security research for sonatype-2026-004261 by Sonatype. In-depth analysis, proof-of-concept details, and actionable remediation guidance from security r… (140 words)
- [Sonatype Nexus Repository + Atlassian Crowd Plugin](/content/blog/2009/02/nexus-crowd-plugin-introduction/index.html): Discover how the Nexus Crowd Plugin integrates Atlassian's Crowd for enhanced user authentication and management in Sonatype Nexus Repository. Explore its benefits. (482 words)
- [org.exist-db.thirdparty.xerces/xercesImpl… | Sonatype Guide](/content/guide/component/maven/org-exist-db-thirdparty-xerces-3axercesimpl/2-12-2/vulnerabilities/index.html): Security vulnerabilities and CVE data for org.exist-db.thirdparty.xerces/xercesImpl version 2.12.2. View CVSS scores, exploit details, and remediation guidance… (156 words)
- [Sonatype, Continuous Delivery, and DevOps: Slideshow Gallery](/content/blog/2015/01/nexus-continuous-delivery-and-devops-slideshow-gallery.html): Explore our new slideshow gallery featuring top presentations on continuous delivery and DevOps, showcasing best practices, tool chains, and advice. (236 words)
- [sonatype-2023-3387 | Security Details | Sonatype Guide](/content/guide/vulnerability/sonatype-2023-3387/index.html): Technical security analysis for sonatype-2023-3387. CVSS 10.0 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (75 words)
- [Open Source Malware vs. Vulnerabilities | Video](/content/resources/videos/open-source-malware-vs-vulnerabilities/index.html): Learn the difference between open source malware and vulnerabilities and how you can protect your software supply chain from these threats.  (48 words)
- [sonatype-2026-001623 | Security Details | Sonatype Guide](/content/guide/vulnerability/sonatype-2026-001623/index.html): Technical security analysis for sonatype-2026-001623. CVSS 8.6 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (70 words)
- [Microsoft Word - OMM_US-#77152595-v5-DMCA_Takedown_Notice_-_Sonatype.docx](/content/hubfs/dmca-20takedown-20notice-20-20list-20of-20infringing-20content-pdf.html) (2,098 words)
- [org.exist-db.thirdparty.xerces/xercesImpl… | Sonatype Guide](/content/guide/component/maven/org-exist-db-thirdparty-xerces-3axercesimpl/2-12-2/versions/index.html): Browse all available versions of org.exist-db.thirdparty.xerces/xercesImpl. Compare version 2.12.2 with other releases, view security scores, and track version… (131 words)
- [Maven Central: org.opengis.cite.xerces:xercesImpl-xsd11-shaded](/content/central/artifact/org-opengis-cite-xerces/xercesimpl-xsd11-shaded/index.html): Discover xercesImpl-xsd11-shaded in the org.opengis.cite.xerces namespace. Explore metadata, contributors, the Maven POM file, and more. (287 words)
- [Maven Central: org.apache.servicemix.bundles:org.apache.servicemix.bundles.xerces](/content/central/artifact/org-apache-servicemix-bundles/org-apache-servicemix-bundles-xerces/versions/index.html): Discover org.apache.servicemix.bundles.xerces in the org.apache.servicemix.bundles namespace. Explore metadata, contributors, the Maven POM file, and more. (132 words)
- [hubfs/1-2025_website-assets/resource_files/nexus-lifecycle-developer-workshop-2026-pdf.html](/content/hubfs/1-2025_website-assets/resource_files/nexus-lifecycle-developer-workshop-2026-pdf.html) (555 words)
- [Maven Central: xerces:xercesImpl](/content/central/artifact/xerces/xercesimpl/index.html): Discover xercesImpl in the xerces namespace. Explore metadata, contributors, the Maven POM file, and more. (415 words)
- [Maven Central: xerces:xercesImpl](/content/central/artifact/xerces/xercesimpl/versions/index.html): Discover xercesImpl in the xerces namespace. Explore metadata, contributors, the Maven POM file, and more. (178 words)
- [Maven Central: xerces:xercesImpl](/content/central/artifact/xerces/xercesimpl/dependents/index.html): Discover xercesImpl in the xerces namespace. Explore metadata, contributors, the Maven POM file, and more. (289 words)
- [Maven Central: org.apache.servicemix.bundles:org.apache.servicemix.bundles.xerces](/content/central/artifact/org-apache-servicemix-bundles/org-apache-servicemix-bundles-xerces/dependents/index.html): Discover org.apache.servicemix.bundles.xerces in the org.apache.servicemix.bundles namespace. Explore metadata, contributors, the Maven POM file, and more. (257 words)
- [Maven Central: org.opengis.cite.xerces:xercesImpl-xsd11](/content/central/artifact/org-opengis-cite-xerces/xercesimpl-xsd11/dependents/index.html): Discover xercesImpl-xsd11 in the org.opengis.cite.xerces namespace. Explore metadata, contributors, the Maven POM file, and more. (299 words)
- [Maven Central: xerces:xmlParserAPIs](/content/central/artifact/xerces/xmlparserapis/dependents/index.html): Discover xmlParserAPIs in the xerces namespace. Explore metadata, contributors, the Maven POM file, and more. (473 words)
- [hubfs/white_papers/how-north-korea-backed-lazarus-group-is-weaponizing-open-source-whitepaper-pdf.html](/content/hubfs/white_papers/how-north-korea-backed-lazarus-group-is-weaponizing-open-source-whitepaper-pdf.html) (1,123 words)
- [@fairwords/websocket 1.0.39 | Versions | Sonatype Guide](/content/guide/component/npm/40fairwords-2fwebsocket/1-0-39/versions/index.html): Browse all available versions of @fairwords/websocket. Compare version 1.0.39 with other releases, view security scores, and track version history for this npm… (128 words)
- [sonatype-2026-000542 | Security Details | Sonatype Guide](/content/guide/vulnerability/sonatype-2026-000542/index.html): Technical security analysis for sonatype-2026-000542. CVSS 9.3 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (118 words)
- [sonatype-2024-1561 | Security Details | Sonatype Guide](/content/guide/vulnerability/sonatype-2024-1561/index.html): Technical security analysis for sonatype-2024-1561. CVSS 9.8 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (82 words)
- [PostgreSQL Index Corruption - "duplicate key violation" errors – Sonatype Support](/content/support/hc/en-us/articles/30128530242835-postgresql-index-corruption-duplicate-key-violation-errors.html): .Sonatype has become aware of a PostgreSQL issue which can cause database indexes to stop functioning correctly.   This problem is... (461 words)
- [Component Not Found | Sonatype Guide](/content/guide/component/maven/org-exist-db-thirdparty-xerces-3axercesimpl/x-y-z.html): Could not find component data for maven/org.exist-db.thirdparty.xerces:xercesImpl/x.y.z. This component may not exist in our database or may have been removed. (17 words)
- [sonatype-2022-2696 | Security Details | Sonatype Guide](/content/guide/vulnerability/sonatype-2022-2696/index.html): Technical security analysis for sonatype-2022-2696. CVSS 10.0 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (50 words)
- [buffer-utilities 1.0.0 | Vulnerabilities | Sonatype Guide](/content/guide/component/npm/buffer-utilities/1-0-0/vulnerabilities/index.html): Security vulnerabilities and CVE data for buffer-utilities version 1.0.0. View CVSS scores, exploit details, and remediation guidance for this npm package. (59 words)
- [IQ Server vulnerability information contains the Root Cause – Sonatype Support](/content/support/hc/en-us/articles/218118947-iq-server-vulnerability-information-contains-the-root-cause.html): Every week, a pretty common question comes our way. "Why is component X vulnerable; I don't use X."   The direct answer is... (177 words)
- [hubfs/1-2025_website-assets/resource_files/nexus-lifecycle-policy-workshop-2026-pdf.html](/content/hubfs/1-2025_website-assets/resource_files/nexus-lifecycle-policy-workshop-2026-pdf.html) (586 words)
- [Maven Central: org.eclipse.birt.runtime.3_7_1:org.apache.xerces](/content/central/artifact/org-eclipse-birt-runtime-3_7_1/org-apache-xerces/dependents/index.html): Discover org.apache.xerces in the org.eclipse.birt.runtime.3_7_1 namespace. Explore metadata, contributors, the Maven POM file, and more. (362 words)
- [Our Community Projects | Sonatype Open Source Community Handbook](/content/contribute/projects/index.html): Engaging with Sonatype Community Projects, Here are all our Open Source projects. (7 words)
- [org.opengis.cite.xerces/xercesImpl-xsd11 2… | Sonatype Guide](/content/guide/component/maven/org-opengis-cite-xerces-xercesimpl-xsd11/2-12-beta-r1667115.html): Comprehensive security analysis for org.opengis.cite.xerces/xercesImpl-xsd11 version 2.12-beta-r1667115. Max vulnerability severity: 9.8 CVSS. License: Apache-… (32 words)
- [org.codelibs.xerces/xercesImpl 2.12.1-sp1 | Sonatype Guide](/content/guide/component/maven/org-codelibs-xerces-xercesimpl/2-12-1-sp1.html): Comprehensive security analysis for org.codelibs.xerces/xercesImpl version 2.12.1-sp1. Max vulnerability severity: 9.8 CVSS. License: Apache-2.0. View dependen… (49 words)
- [hubfs/1-2025_website-assets/resource_files/sonatype-lifecycle-champion-workshop-1-2026-pdf.html](/content/hubfs/1-2025_website-assets/resource_files/sonatype-lifecycle-champion-workshop-1-2026-pdf.html) (633 words)
- [sonatype-2026-003558 | Security Details | Sonatype Guide](/content/guide/vulnerability/sonatype-2026-003558/index.html): Technical security analysis for sonatype-2026-003558. CVSS 8.7 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (78 words)
- [hubfs/1-2025_website-assets/resource_files/nexus-repo-hands-on-training-2026-pdf.html](/content/hubfs/1-2025_website-assets/resource_files/nexus-repo-hands-on-training-2026-pdf.html) (574 words)
- [Notable Integrations Changes](/content/help/en/notable-integrations-changes-html.html) (5,245 words)
- [Maven Central: org.codelibs.xerces:xercesImpl](/content/central/artifact/org-codelibs-xerces/xercesimpl/versions/index.html): Discover xercesImpl in the org.codelibs.xerces namespace. Explore metadata, contributors, the Maven POM file, and more. (19 words)
- [Maven Central: org.opengis.cite.xerces](/content/central/namespace/org-opengis-cite-xerces.html): Explore the collection of packages in org.opengis.cite.xerces (13 words)
- [Maven Central: org.codelibs.xerces:xercesImpl](/content/central/artifact/org-codelibs-xerces/xercesimpl/dependents/index.html): Discover xercesImpl in the org.codelibs.xerces namespace. Explore metadata, contributors, the Maven POM file, and more. (3 words)
- [Maven Central: org.opengis.cite.xerces:xercesImpl-xsd11](/content/central/artifact/org-opengis-cite-xerces/xercesimpl-xsd11/index.html): Discover xercesImpl-xsd11 in the org.opengis.cite.xerces namespace. Explore metadata, contributors, the Maven POM file, and more. (234 words)
- [Maven Central: xerces:xerces](/content/central/artifact/xerces/xerces/dependents/index.html): Discover xerces in the xerces namespace. Explore metadata, contributors, the Maven POM file, and more. (351 words)
- [Maven Central: org.codelibs.xerces:xercesImpl](/content/central/artifact/org-codelibs-xerces/xercesimpl/index.html): Discover xercesImpl in the org.codelibs.xerces namespace. Explore metadata, contributors, the Maven POM file, and more. (475 words)
- [codehaus.org Repositories Should Be Removed From Your Nexus Repository Instance – Sonatype Support](/content/support/hc/en-us/articles/217611787-codehaus-org-repositories-should-be-removed-from-your-nexus-repository-instance.html): Visit my.sonatype.com for documentation on Nexus Repository version 2. Any Maven 2 proxy repository with a remote URL that includes the... (285 words)
- [org.eclipse.birt.runtime.3_7_1/org.apache.… | Sonatype Guide](/content/guide/component/maven/org-eclipse-birt-runtime-3_7_1-org-apache-xerces/2-9-0.html): Comprehensive security analysis for org.eclipse.birt.runtime.3_7_1/org.apache.xerces version 2.9.0. Max vulnerability severity: 9.8 CVSS. License: EPL-1.0. Vie… (41 words)
- [org.apache.servicemix.bundles/org.apache.s… | Sonatype Guide](/content/guide/component/maven/org-apache-servicemix-bundles-org-apache-servicemix-bundles-xerces/2-12-2_1.html): Comprehensive security analysis for org.apache.servicemix.bundles/org.apache.servicemix.bundles.xerces version 2.12.2_1. Max vulnerability severity: 9.8 CVSS.… (30 words)
- [Announcements – Sonatype Support](/content/support/hc/en-us/sections/203012528-announcements/index.html): General announcements to the community from the Sonatype Support team. (60 words)
- [Maven Central: org.exist-db.thirdparty.xerces:xercesImpl](/content/central/artifact/org-exist-db-thirdparty-xerces/xercesimpl/versions/index.html): Discover xercesImpl in the org.exist-db.thirdparty.xerces namespace. Explore metadata, contributors, the Maven POM file, and more. (16 words)
- [Sonatype CLM for Maven](/content/help/en/sonatype-clm-for-maven-html.html): CLM analysis using a Maven plugin (2,806 words)
- [Maven Central: org.apache.servicemix.bundles](/content/central/namespace/org-apache-servicemix-bundles.html): Explore the collection of packages in org.apache.servicemix.bundles (20 words)
- [Maven Central: org.codelibs.xerces](/content/central/namespace/org-codelibs-xerces.html): Explore the collection of packages in org.codelibs.xerces (20 words)
- [sonatype-2024-013290 | Security Details | Sonatype Guide](/content/guide/vulnerability/sonatype-2024-013290/index.html): Technical security analysis for sonatype-2024-013290. CVSS 8.7 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (72 words)
- [xerces/xercesImpl 2.12.2 | Sonatype Guide](/content/guide/component/maven/xerces-xercesimpl/2-12-2.html): Comprehensive security analysis for xerces/xercesImpl version 2.12.2. Max vulnerability severity: 9.8 CVSS. License: Apache-2.0. View dependencies, vulnerabili… (46 words)
- [Maven Central: org.exist-db.thirdparty.xerces:xercesImpl](/content/central/artifact/org-exist-db-thirdparty-xerces/xercesimpl/index.html): Discover xercesImpl in the org.exist-db.thirdparty.xerces namespace. Explore metadata, contributors, the Maven POM file, and more. (373 words)
- [xerces/xmlParserAPIs 2.6.2 | Sonatype Guide](/content/guide/component/maven/xerces-xmlparserapis/2-6-2.html): Comprehensive security analysis for xerces/xmlParserAPIs version 2.6.2. No known vulnerabilities. License: SAX-PD. View dependencies, vulnerabilities, and deta… (44 words)
- [Beyond Typosquatting Attacks: Naming-Variant Threats | Sonatype](/content/resources/research/beyond-typosquatting-attacks/index.html): Discover how attackers use naming variants to compromise open source ecosystems with the shift from typosquatting to sophisticated brandjacking tactics. (2,022 words)
- [Maven Central: org.exist-db.thirdparty.xerces:xercesImpl](/content/central/artifact/org-exist-db-thirdparty-xerces/xercesimpl/dependents/index.html): Discover xercesImpl in the org.exist-db.thirdparty.xerces namespace. Explore metadata, contributors, the Maven POM file, and more. (145 words)
- [Maven Central: xerces:xerces](/content/central/artifact/xerces/xerces/versions/index.html): Discover xerces in the xerces namespace. Explore metadata, contributors, the Maven POM file, and more. (19 words)
- [@fairwords/loopback-connector-es 1.4.4 | Sonatype Guide](/content/guide/component/npm/40fairwords-2floopback-connector-es/1-4-4.html): Comprehensive security analysis for @fairwords/loopback-connector-es version 1.4.4. Max vulnerability severity: 7.1 CVSS. License: MIT. View dependencies, vuln… (48 words)
- [xerces/xercesSamples 2.6.2 | Sonatype Guide](/content/guide/component/maven/xerces-xercessamples/2-6-2.html): Comprehensive security analysis for xerces/xercesSamples version 2.6.2. No known vulnerabilities. License: Not Declared. View dependencies, vulnerabilities, an… (32 words)
- [Maven Central: xerces:xercesSamples](/content/central/artifact/xerces/xercessamples/dependents/index.html): Discover xercesSamples in the xerces namespace. Explore metadata, contributors, the Maven POM file, and more. (3 words)
- [Sonatype GitHub Actions](/content/help/en/sonatype-github-actions-html.html): Repository for the GitHub Actions Integration, Repository for the GitHub Actions Integration (2,355 words)
- [Maven Central: org.opengis.cite.xerces:xercesImpl-xsd11-shaded](/content/central/artifact/org-opengis-cite-xerces/xercesimpl-xsd11-shaded/dependents/index.html): Discover xercesImpl-xsd11-shaded in the org.opengis.cite.xerces namespace. Explore metadata, contributors, the Maven POM file, and more. (55 words)
- [Maven Central: xerces:xmlParserAPIs](/content/central/artifact/xerces/xmlparserapis/index.html): Discover xmlParserAPIs in the xerces namespace. Explore metadata, contributors, the Maven POM file, and more. (8 words)
- [sonatype-2022-1467 | Security Details | Sonatype Guide](/content/guide/vulnerability/sonatype-2022-1467/index.html): Technical security analysis for sonatype-2022-1467. CVSS 10.0 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (73 words)
- [Struts2 vulnerabilities: Who is responsible? | Sonatype Blog](/content/blog/struts2-vulnerabilities-who-is-responsible/index.html): Equifax's data breach sparks a debate on Struts2 vulnerabilities and responsibility — open source creators or users? Explore insights in this discussion. (200 words)
- [Maven Central: org.opengis.cite.xerces:xercesImpl-xsd11](/content/central/artifact/org-opengis-cite-xerces/xercesimpl-xsd11/versions/index.html): Discover xercesImpl-xsd11 in the org.opengis.cite.xerces namespace. Explore metadata, contributors, the Maven POM file, and more. (32 words)
- [Maven Central: org.opengis.cite.xerces:xercesImpl-xsd11-shaded](/content/central/artifact/org-opengis-cite-xerces/xercesimpl-xsd11-shaded/versions/index.html): Discover xercesImpl-xsd11-shaded in the org.opengis.cite.xerces namespace. Explore metadata, contributors, the Maven POM file, and more. (34 words)
- [@fairwords/websocket 1.0.39 | Vulnerabilit… | Sonatype Guide](/content/guide/component/npm/40fairwords-2fwebsocket/1-0-39/vulnerabilities/index.html): Security vulnerabilities and CVE data for @fairwords/websocket version 1.0.39. View CVSS scores, exploit details, and remediation guidance for this npm package. (130 words)
- [Open Source Vulnerabilities: Persistent Risks and Insights](/content/whitepapers/the-persistence-of-open-source-vulnerabilities/index.html): Explore the ongoing risks of open source vulnerabilities, including Log4j, including the challenges in managing dependency hygiene and OSS security. (3,009 words)
- [Maven Central: org.eclipse.birt.runtime.3_7_1:org.apache.xerces](/content/central/artifact/org-eclipse-birt-runtime-3_7_1/org-apache-xerces.html): Discover org.apache.xerces in the org.eclipse.birt.runtime.3_7_1 namespace. Explore metadata, contributors, the Maven POM file, and more. (86 words)
- [hubfs/1-2023_new_site_assets/cheat-20sheets/sbom-6_things_to_do_right_now-pdf.html](/content/hubfs/1-2023_new_site_assets/cheat-20sheets/sbom-6_things_to_do_right_now-pdf.html) (1,091 words)
- [Maven Central: Api Doc](/content/central/api-doc/index.html): Explore and test our API effortlessly with comprehensive documentation for seamless integration. (32 words)
- [hubfs/white_papers/son-wp-globalregulations-cheatsheet-v3-pdf.html](/content/hubfs/white_papers/son-wp-globalregulations-cheatsheet-v3-pdf.html) (971 words)
- [Maven Central: org.exist-db.thirdparty.xerces](/content/central/namespace/org-exist-db-thirdparty-xerces.html): Explore the collection of packages in org.exist-db.thirdparty.xerces (279 words)
- [Maven Central: xerces](/content/central/namespace/xerces/index.html): Explore the collection of packages in xerces (295 words)
- [Component Not Found | Sonatype Guide](/content/guide/component/npm/40fairwords-2fwebsocket/x-y-z.html): Could not find component data for npm/@fairwords/websocket/x.y.z. This component may not exist in our database or may have been removed. (17 words)
- [Maven Central: xerces:xercesSamples](/content/central/artifact/xerces/xercessamples/versions/index.html): Discover xercesSamples in the xerces namespace. Explore metadata, contributors, the Maven POM file, and more. (80 words)
- [Building Eclipse Plugins With Maven: Tycho | Sonatype Blog](/content/blog/2008/11/building-eclipse-plugins-with-maven-tycho/index.html): Learn how to build Eclipse plugins with Maven using Tycho, an essential tool for bridging Maven and OSGi for streamlined plugin development. (1,293 words)
- [hubfs/son_nexusfirewall_infographics_2019_aug8-pdf.html](/content/hubfs/son_nexusfirewall_infographics_2019_aug8-pdf.html) (306 words)
- [@openwebconcept/design-tokens 1.0.3 | Sonatype Guide](/content/guide/component/npm/40openwebconcept-2fdesign-tokens/1-0-3.html): Comprehensive security analysis for @openwebconcept/design-tokens version 1.0.3. Max vulnerability severity: 8.6 CVSS. License: See-License-Clause. View depend… (42 words)
- [hubfs/1-2023_new_site_assets/executive-20summaries/digital_operational_resilience_act-exec_summary_5-14-final-pdf.html](/content/hubfs/1-2023_new_site_assets/executive-20summaries/digital_operational_resilience_act-exec_summary_5-14-final-pdf.html) (862 words)
- [Maven Central: org.eclipse.birt.runtime.3_7_1:org.apache.xerces](/content/central/artifact/org-eclipse-birt-runtime-3_7_1/org-apache-xerces/versions/index.html): Discover org.apache.xerces in the org.eclipse.birt.runtime.3_7_1 namespace. Explore metadata, contributors, the Maven POM file, and more. (28 words)
- [xerces/xerces 2.4.0 | Sonatype Guide](/content/guide/component/maven/xerces-xerces/2-4-0.html): Comprehensive security analysis for xerces/xerces version 2.4.0. Max vulnerability severity: 7.5 CVSS. License: Apache-1.1. View dependencies, vulnerabilities,… (41 words)
- [Maven Central: xerces:xercesImpl:2.9.1](/content/central/artifact/xerces/xercesimpl/2-9-1/26smo-true/index.html): Discover xercesImpl in the xerces namespace. Explore metadata, contributors, the Maven POM file, and more. (173 words)
- [@automagik/genie 4.260422.4 | Sonatype Guide](/content/guide/component/npm/40automagik-2fgenie/4-260422-4.html): Comprehensive security analysis for @automagik/genie version 4.260422.4. No known vulnerabilities. License: Not Declared. View dependencies, vulnerabilities, a… (37 words)
- [Maven Central: xerces:xercesSamples](/content/central/artifact/xerces/xercessamples/index.html): Discover xercesSamples in the xerces namespace. Explore metadata, contributors, the Maven POM file, and more. (57 words)
- [hubfs/white_papers/guide-to-ai-regulations-in-software-development-pdf.html](/content/hubfs/white_papers/guide-to-ai-regulations-in-software-development-pdf.html) (1,782 words)
- [sonatype-2024-011383 | Security Details | Sonatype Guide](/content/guide/vulnerability/sonatype-2024-011383/index.html): Technical security analysis for sonatype-2024-011383. CVSS 8.7 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (67 words)
- [hubfs/nzism-compliance-guide-pdf.html](/content/hubfs/nzism-compliance-guide-pdf.html) (545 words)
- [Maven Central: Partners: HeroDevs](/content/central/partners/eol/herodevs/index.html): HeroDevs specializes in providing zero-day security patches for EOL OSS components, including widely used libraries and frameworks no longer maintained by the community. (259 words)
- [Maven Central: xerces:xercesImpl:2.11.0](/content/central/artifact/xerces/xercesimpl/2-11-0/26smo-true/index.html): Discover xercesImpl in the xerces namespace. Explore metadata, contributors, the Maven POM file, and more. (9 words)
- [Flagship Projects | Sonatype Open Source Community Handbook](/content/contribute/projects/flagship/index.html): Engaging with Sonatype Community Projects, These are our Flagship Open Source projects. (7 words)
- [Maven Central: xerces:xerces](/content/central/artifact/xerces/xerces/index.html): Discover xerces in the xerces namespace. Explore metadata, contributors, the Maven POM file, and more. (58 words)
- [Maven Central: Partners](/content/central/partners/index-2.html): Our partnerships enhance the open source ecosystem by providing developers with trusted commercial support options while maintaining the integrity and accessibility of open source software. (235 words)
- [Mavenizing the AppEngine SDK | Sonatype Blog](/content/blog/2009/04/mavenizing-the-appengine-sdk/index.html): Jason van Zyl shares his experience Mavenizing the AppEngine SDK, highlighting challenges and solutions to streamline the process for all Maven users. (701 words)
- [Installation and Configuration - Sonatype for Azure DevOps](/content/help/en/installation-and-configuration-sonatype-for-azure-devops-html.html) (2,382 words)
- [hubfs/whitepaper-20text-20documents-20/son_nexusfirewall_infographicsfinal-pdf.html](/content/hubfs/whitepaper-20text-20documents-20/son_nexusfirewall_infographicsfinal-pdf.html) (325 words)
- [Component Not Found | Sonatype Guide](/content/guide/component/undefined/40common-stack-2fgenerate-plugin/9-0-6-alpha-1.html): Could not find component data for undefined/@common-stack/generate-plugin/9.0.6-alpha.1. This component may not exist in our database or may have been removed. (17 words)
- [Reporting Issues or Bugs | Sonatype Open Source Community Handbook](/content/contribute/docs/contributing/reporting-issues/index.html): While many of these open source efforts are supported by contributors from Sonatype, these Open Source Projects are not officially supported through Sonatype’s commercial support channels.
Please review the latest pull requests, issues, and commits to understand a projects readiness for contribution and use.
DO file suggestions and requests on the project in question using GitHub Issues, so that the community can pitch in and maintainers can easily find your input., While many of these open source efforts are supported by contributors from Sonatype, these Open Source Projects are not officially supported through Sonatype’s commercial support channels.
Please review the latest pull requests, issues, and commits to understand a projects readiness for contribution and use.
DO file suggestions and requests on the project in question using GitHub Issues, so that the community can pitch in and maintainers can easily find your input. (144 words)
- [Component Not Found | Sonatype Guide](/content/guide/component/undefined/40common-stack-2fgenerate-plugin/9-0-5-alpha-0.html): Could not find component data for undefined/@common-stack/generate-plugin/9.0.5-alpha.0. This component may not exist in our database or may have been removed. (17 words)
- [Understanding and Securing Your Software Supply Chain](/content/blog/software-supply-chain-a-definition-and-introductory-guide.html): Take a closer look at the software supply chain, including what it contains, why it’s important, and how to protect it from vulnerabilities. (1,401 words)
- [Project Standards | Sonatype Open Source Community Handbook](/content/contribute/docs/standards/index.html): Engaging with Sonatype Community Projects, This section includes information relating to our Standards that we expect our Community Projects to adhere to. (17 words)
- [Graduated Projects | Sonatype Open Source Community Handbook](/content/contribute/projects/graduated/index.html): Engaging with Sonatype Community Projects, These Open Source projects have graduated to become official Sonatype Product! (11 words)
- [Component Not Found | Sonatype Guide](/content/guide/component/undefined/40common-stack-2fgenerate-plugin/9-0-6-alpha-0.html): Could not find component data for undefined/@common-stack/generate-plugin/9.0.6-alpha.0. This component may not exist in our database or may have been removed. (17 words)
- [Component Not Found | Sonatype Guide](/content/guide/component/undefined/40common-stack-2fgenerate-plugin/9-0-5-alpha-5.html): Could not find component data for undefined/@common-stack/generate-plugin/9.0.5-alpha.5. This component may not exist in our database or may have been removed. (17 words)
- [@openwebconcept/theme-owc 1.0.3 | Sonatype Guide](/content/guide/component/npm/40openwebconcept-2ftheme-owc/1-0-3.html): Comprehensive security analysis for @openwebconcept/theme-owc version 1.0.3. Max vulnerability severity: 8.6 CVSS. License: See-License-Clause. View dependenci… (51 words)
- [Component Not Found | Sonatype Guide](/content/guide/component/undefined/40common-stack-2fgenerate-plugin/9-0-5-alpha-3.html): Could not find component data for undefined/@common-stack/generate-plugin/9.0.5-alpha.3. This component may not exist in our database or may have been removed. (17 words)
- [Component Not Found | Sonatype Guide](/content/guide/component/undefined/40common-stack-2fgenerate-plugin/9-0-5-alpha-2.html): Could not find component data for undefined/@common-stack/generate-plugin/9.0.5-alpha.2. This component may not exist in our database or may have been removed. (17 words)
- [Component Not Found | Sonatype Guide](/content/guide/component/undefined/40common-stack-2fgenerate-plugin/9-0-5-alpha-4.html): Could not find component data for undefined/@common-stack/generate-plugin/9.0.5-alpha.4. This component may not exist in our database or may have been removed. (17 words)
- [Fake Solana Packages Target Crypto Devs, Abuse Slack & ImgBB](/content/blog/npm-packages-target-solana-devs-drop-keylogging-trojans.html): Malicious npm packages targeting Solana crypto developers are leveraging Slack and ImgBB for data theft. Learn how to protect your development environment. (788 words)
- [Component Not Found | Sonatype Guide](/content/guide/component/undefined/40common-stack-2fgenerate-plugin/9-0-5-alpha-1.html): Could not find component data for undefined/@common-stack/generate-plugin/9.0.5-alpha.1. This component may not exist in our database or may have been removed. (17 words)
- [Component Not Found | Sonatype Guide](/content/guide/component/undefined/40common-stack-2fgenerate-plugin/9-0-4-alpha-1.html): Could not find component data for undefined/@common-stack/generate-plugin/9.0.4-alpha.1. This component may not exist in our database or may have been removed. (17 words)
- [pgserve 1.1.14 | Sonatype Guide](/content/guide/component/npm/pgserve/1-1-14.html): Comprehensive security analysis for pgserve version 1.1.14. Max vulnerability severity: 8.6 CVSS. License: MIT. View dependencies, vulnerabilities, and detaile… (26 words)
- [Component Not Found | Sonatype Guide](/content/guide/component/undefined/40common-stack-2fgenerate-plugin/9-0-2-alpha-21.html): Could not find component data for undefined/@common-stack/generate-plugin/9.0.2-alpha.21. This component may not exist in our database or may have been removed. (17 words)
- [Component Not Found | Sonatype Guide](/content/guide/component/undefined/40common-stack-2fgenerate-plugin/9-0-4-alpha-0.html): Could not find component data for undefined/@common-stack/generate-plugin/9.0.4-alpha.0. This component may not exist in our database or may have been removed. (17 words)
- [Component Not Found | Sonatype Guide](/content/guide/component/undefined/40common-stack-2fgenerate-plugin/9-0-2-alpha-24.html): Could not find component data for undefined/@common-stack/generate-plugin/9.0.2-alpha.24. This component may not exist in our database or may have been removed. (17 words)
- [sonatype-2026-001153 | Sonatype Research | Sonatype Guide](/content/guide/vulnerability/sonatype-2026-001153/sonatype-research/index.html): Expert security research for sonatype-2026-001153 by Sonatype. In-depth analysis, proof-of-concept details, and actionable remediation guidance from security r… (138 words)
- [Component Not Found | Sonatype Guide](/content/guide/component/undefined/40common-stack-2fgenerate-plugin/9-0-2-alpha-23.html): Could not find component data for undefined/@common-stack/generate-plugin/9.0.2-alpha.23. This component may not exist in our database or may have been removed. (17 words)
- [sonatype-2024-011414 | Security Details | Sonatype Guide](/content/guide/vulnerability/sonatype-2024-011414/index.html): Technical security analysis for sonatype-2024-011414. CVSS 8.6 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (69 words)
- [Secure Nexus Repository Setup & LDAP Integration | Sonatype](/content/blog/setting-up-a-secure-private-sonatype-nexus-repository.html): Learn how to configure a secure Nexus repository setup. This guide covers private Nexus repository best practices and nexus repository LDAP integration steps. (987 words)
- [Component Not Found | Sonatype Guide](/content/guide/component/undefined/40common-stack-2fgenerate-plugin/9-0-2-alpha-22.html): Could not find component data for undefined/@common-stack/generate-plugin/9.0.2-alpha.22. This component may not exist in our database or may have been removed. (17 words)
- [Backing Up Sonatype Nexus Repository Configuration and Artifacts](/content/blog/2010/01/how-to-backup-sonatype-nexus-configuration-and-repository-artifacts.html): Learn how to effectively back up Sonatype Nexus Repository configurations, artifacts, and binaries to ensure the safety and integrity of your development data. (1,276 words)
- [Reachability Analysis with Jenkins](/content/help/en/reachability-analysis-with-jenkins-html.html) (2,961 words)
- [Experimenting With the Nexus Welcome Page](/content/blog/experimenting-with-the-nexus-welcome-page/index.html): The welcome page in Nexus Repository is a hosted service that gives access to timely updates and resources to help with your work.  (659 words)
- [Sonatype Platform Plugin for Jenkins - Nexus Repository](/content/help/en/nexus-platform-plugin-for-jenkins-html.html) (1,757 words)
- [sonatype-2023-0001 | Security Details | Sonatype Guide](/content/guide/vulnerability/sonatype-2023-0001/index.html): Technical security analysis for sonatype-2023-0001. CVSS 10.0 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (58 words)
- [sonatype-2026-003808 | Security Details | Sonatype Guide](/content/guide/vulnerability/sonatype-2026-003808/index.html): Technical security analysis for sonatype-2026-003808. CVSS 8.7 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (75 words)
- [sonatype-2018-0622 | Security Details | Sonatype Guide](/content/guide/vulnerability/sonatype-2018-0622/index.html): Technical security analysis for sonatype-2018-0622. CVSS 7.5 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (66 words)
- [Sonatype for IDEA](/content/help/en/iq-for-idea-html.html): Nexus IQ integration for Intellij IDEA, Nexus IQ integration for Intellij IDEA (2,562 words)
- [Q1 2026 Open Source Malware Index: Adaptive Attacks Exploit Trust](/content/blog/q1-2026-open-source-malware-index/index.html): Open source malware is evolving. Attackers abuse trusted packages, workflows, and dependencies to deliver credential theft and supply chain attacks. (1,126 words)
- [Optimizing Hudson Build Farms: Overcoming Windows Integration Issues](/content/blog/2009/02/the-hudson-build-farm-experience-volume-ii/index.html): Explore the Hudson-based build farm integration with Windows. Navigate advice on remote maintenance details: SSH, Terminal Services, and VNC solutions. (2,252 words)
- [Reference Platform: Kompose, OpenShift, and Helm](/content/blog/nexus-reference-platform-kompose-openshift-and-helm.html): Exploring the migration from docker compose to kubernetes, openshift, and helm for the nexus reference platform. (701 words)
- [sonatype-2026-003775 | Sonatype Research | Sonatype Guide](/content/guide/vulnerability/sonatype-2026-003775/sonatype-research/index.html): Expert security research for sonatype-2026-003775 by Sonatype. In-depth analysis, proof-of-concept details, and actionable remediation guidance from security r… (142 words)
- [Trust and Courage Are Essential for Team Culture | Sonatype](/content/blog/trust-and-courage-are-essential-to-a-strong-team-culture.html): A healthy work culture is invaluable. I think that the Sonatype culture has two main ingredients: trust and courage.  (1,348 words)
- [Transform Software Compliance With AI SBOM Management | Sonatype](/content/blog/transforming-software-compliance-with-ai-sbom-management.html): Learn how AI automates SBOM management to simplify compliance, strengthen software security, and ensure mission-ready transparency. (869 words)
- [Contributing to a Project | Sonatype Open Source Community Handbook](/content/contribute/docs/contributing/index.html): Engaging with Sonatype Community Projects, We thank you in advance for contributing to our Open Source Community!
Contributions come is all shapes and sizes - and we welcome them all. We ask that for the benefit of the wider community the following guidelines are followed depending on the contribution you wish to make.
💡Want to discuss an idea?
Read our guide on discussions and ideas here.
🪲 Want to report a bug or issue?
Read our guide on issue reporting here. (111 words)
- [Sonatype for Jira Data Center](/content/help/en/sonatype-for-jira-data-center-html.html) (1,833 words)
- [Contributing to Sonatype Community Projects | Sonatype Open Source Community Handbook](/content/contribute/docs/index.html): Engaging with Sonatype Community Projects, Wanting to engage with a Sonatype Community Project? This area documents the different ways of engaging with and the standards we expect our Community Projects to operate to. (28 words)
- [ Java at 30: Evolution, Enterprise Java & History | Sonatype](/content/blog/java-at-30-from-portable-promise-to-critical-infrastructure.html): Sonatype CTO Brian Fox reflects on Java's evolution, its 30-year history, deep ties to open source, and what the future holds for enterprise. Read the blog! (1,424 words)
- [hubfs/survey_devsecops_2023-pdf.html](/content/hubfs/survey_devsecops_2023-pdf.html) (9,215 words)
- [sonatype-2026-001153 | Security Details | Sonatype Guide](/content/guide/vulnerability/sonatype-2026-001153/index.html): Technical security analysis for sonatype-2026-001153. CVSS 8.7 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (64 words)
- [Top Malicious npm Packages Targeting Open Source Projects](/content/blog/open-source-attacks-on-the-rise-top-8-malicious-packages-found-in-npm.html): We're rounding up the top 8 malicious cyber attacks on npm that Sonatype has discovered with its next-gen open source security and malware detection tool.  (577 words)
- [IQ Server Configuration](/content/help/en/iq-server-configuration-html.html) (1,772 words)
- [Sonatype for Eclipse](/content/help/en/iq-for-eclipse-html.html): Eclipse IDE plugin for IQ Server, Eclipse IDE plugin for IQ Server (2,295 words)
- [Continuous Integration with Jenkins, Nexus, and SonarQube](/content/blog/continuous-integration-in-pipeline-as-code-environment-with-jenkins-jacoco-nexus-and-sonarqube.html): The setup for a Continuous integration pipeline... this is for mavenized Spring boot build with JaCoCo coverage reports and Sonar metrics. (703 words)
- [Sonatype for Fortify SSC](/content/help/en/sonatype-fortify-ssc-html.html): Fortify SSC integration, Fortify SSC integration (2,382 words)
- [Handling Conflicting OSS Licenses with Insight | Sonatype](/content/blog/2012/05/how-does-insight-handle-conflicting-oss-licenses/index.html): Learn how Insight and Sonatype Nexus Repository handle conflicting and invalid OSS licenses to ensure compliance and reduce risks in your dev process. (812 words)
- [Scaling Secure Swift Development with Sonatype Nexus Repository](/content/blog/power-secure-swift-development-at-scale-with-sonatype-nexus-repository.html): Scale Swift development securely with Sonatype Nexus Repository, adding governance, reliability, and control to Swift Package Manager workflows. (758 words)
- [Sonatype for Bamboo Data Center](/content/help/en/sonatype-for-bamboo-data-center-html.html) (1,897 words)
- [NIS2 Readiness: Key Steps for EU Cybersecurity Compliance](/content/blog/nis2-readiness-ensure-compliance-with-the-eu-cybersecurity-directive.html): Learn about the European Union's updated cybersecurity legislation, NIS2, which will take effect soon, and how the Sonatype platform can help. (641 words)
- [sonatype-2025-001329 | Security Details | Sonatype Guide](/content/guide/vulnerability/sonatype-2025-001329/index.html): Technical security analysis for sonatype-2025-001329. CVSS 7.1 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (78 words)
- [Misused Maven Terms Defined | Sonatype Blog](/content/blog/2008/05/misused-maven-terms-defined/index.html): Understand commonly misused Maven terms like reactor, sibling POMs, and Super POM to streamline your Maven projects. Learn best practices. (688 words)
- [Sonatype Recognized on Best Places to Work Lists | Sonatype](/content/press-releases/sonatype-named-to-best-workplace-lists/index.html): Sonatype ranks among the top 50 in Glassdoor's Private Cloud Computing Companies and Washingtonian Magazine's Great Workplaces. (537 words)
- [Explore Cryptic 'reverse shell' Lurking in PyPI Packages](/content/blog/can-you-spot-this-cryptic-reverse-shell-found-in-pypi-packages.html): Sonatype has discovered 3 malicious PyPI packages this week—two of which hide a reverse shell in plain sight. (782 words)
- [What's in Maven 3.0 for Plugin Authors?](/content/blog/2010/11/whats-in-maven-3-0-for-plugin-authors/index.html): Discover the key updates in Maven 3.0 including new annotations, dependency handling, thread safety features, and improvements in class loader hierarchy. (890 words)
- [Exploring How DevSecOps Practices Lead to Happy Developers](/content/press-releases/sonatype-research-devsecops-in-financial-services/index.html): Discover how mature DevSecOps practices boost developer happiness and security in the Financial Services industry, according to Sonatype's latest survey. (616 words)
- [Navigating New Federal SBOM Requirements for Cyber-Readiness](/content/blog/cyber-readiness-and-changing-federal-government-sbom-requirements.html): Upcoming regulatory changes are coming to go from software transparency to better address cyber-readiness at the Federal level and beyond. (1,121 words)
- [Request a Quote of Sonatype Guide](/content/products/sonatype-guide/quote/index.html): Get a customized quote for Sonatype Guide. Explore what our Enterprise edition can do for your team. Speak with a representative today. (194 words)
- [Sonatype for ServiceNow](/content/help/en/sonatype-for-servicenow-html.html) (2,409 words)
- [Gartner: You Must Assess Overall Software Health and Welfare](/content/blog/gartner-you-must-assess-overall-software-health-and-welfare.html): Gartner reports that mature organizations are expanding open-source management to include health assessment by default. (940 words)
- [SCM Features Technical Overview](/content/help/en/scm-features-technical-overview-html.html) (2,758 words)
- [SBOM Manager API](/content/help/en/sbom-manager-api-html.html) (1,803 words)
- [GDPR Compliance? Lessons Learned from Equifax](/content/blog/gdpr-compliance-why-the-best-defense-is-a-great-offense.html): The lesson from Equifax is simple. Cyber risk management has less to do with perimeter defense, and more to do with open source governance and app hygiene. (479 words)
- [Malicious Code vs. Vulnerabilities | Sonatype Podcast](/content/resources/podcasts/malicious-code-vs-vulnerabilities/index.html): Learn how malware differs from vulnerabilities, why malicious code demands urgent action, and how automation helps teams prioritize real risk. (814 words)
- [This Week in Malware - Almost 100 Packages | Sonatype](/content/blog/this-week-in-malware-sept-16-22/index.html): This week in malware Sonatype discovered and analyzed over seven dozen packages flagged as malicious, suspicious, or dependency confusion attacks.
 (320 words)
- [Sonatype Nexus Repository 3.0 FAQs Asked and Answered](/content/blog/nexus-repository-3-0-qa.html): Nexus Repository 3.0 has hit the streets and is now available to all for free. What's changed? Check out the most frequently asked questions and see.  (1,376 words)
- [The AI Race Is Becoming a Remediation Race](/content/blog/the-ai-race-is-becoming-a-remediation-race/index.html): AI is making vulnerability discovery faster than ever. Learn why the next challenge is remediation and open source repair at scale in the entire ecosystem. (957 words)
- [Sonatype Container Security](/content/help/en/sonatype-container-security-html.html) (1,836 words)
- [How DevSecOps is Transforming Application Security](/content/blog/how-devsecops-is-transforming-the-application-security-profession.html): How the simultaneous "need for speed" and "quest for control" is not only driving organizations to embrace DevSecOps -- but is also revamping what it even. (792 words)
- [Foreword | Sonatype Blog](/content/blog/2008/04/foreword/index.html): Brian Fox shares his journey from a career in enterprise software development to becoming a key player in the Maven community and co-founding Sonatype. (778 words)
- [DevSecOps at Emerasoft: Sonatype Lifecycle and F5-Advanced WAF](/content/blog/emerasoft-and-lifecycle/index.html): Ugo Ciracì discusses Emerasoft's journey to DevSecOps, and how Nexus Lifecycle helped fully automate their CI/CD pipeline. (780 words)
- [On International Women's Day, I Honor My Grandma's Nudge](/content/blog/iwd19-1/index.html): In honor of International Women's Day, Sonatype is launching a 10-week series on the women who have inspired us and the women we look up to. (795 words)
- [Sonatype Launches Software Supply Chain Platform in AWS](/content/press-releases/sonatype-launches-end-to-end-software-supply-chain-security-platform-availability-in-aws-marketplace.html): Sonatype introduces Sonatype SBOM Manager & Nexus Repository in AWS Marketplace for secure software supply chain & artifact management with ease.  (788 words)
- [Sonatype Platform Features: New Capabilities & Product Names](/content/blog/explore-a-refreshed-sonatype-platform-new-features-new-product-names.html): Explore the latest Sonatype Platform features: new product names, improved security, and DevSecOps capabilities built for software supply chain security. (554 words)
- [The Golden Repo Is Not the Answer, the Golden Policy Is](/content/blog/2013/10/golden-repository/index.html): Discover why a golden policy is more effective than a golden repository for component governance, and learn how to implement it with Sonatype Nexus Repository. (610 words)
- [What Are The Best SBOM Tools? | Sonatype](/content/compare/best-sbom-tools/index.html): Discover the best software bill of materials (SBOM) tools. Understand key features for SBOM management, vulnerability assessment, and SBOM compliance. (1,546 words)
- [Exploring The Department of Defense DevSecOps Transformation](/content/blog/department-of-defense-devsecops-journey/index.html): The DevSecOps stack is open source and open to the public. Everything is infrastructure as code and can run on any environment, leveraging Kubernetes.
 (660 words)
- [How to Streamline Open Source with Sonatype Nexus Repository](/content/blog/2009/11/nexus-as-open-source-infrastructure-user-sign-up/index.html): Discover how Sonatype Nexus Repository facilitates agile, scalable open source infrastructure with its new user-driven sign-up feature. (1,047 words)
- [Process Oriented Design (POD) to Increase the Dependability](/content/blog/increasing-the-dependability-of-devops-processes/index.html): A Process Oriented Design helps DevOps teams create robust software with less downtime risk. Dr. Ingo Weber, an Australian research scientist, explains. (702 words)
- [Understanding and Preventing Dependency Confusion Attacks](/content/blog/are-you-still-wondering-about-dependency-confusion-attacks.html): Despite positive legislation and standards, open source software supply chains remain vulnerable to Dependency Confusion attacks. Learn more. (949 words)
- [The Essential Elements of an SBOM for Software Security](/content/blog/what-are-the-elements-of-an-sbom/index.html): Discover what exactly makes up an SBOM and why generating and managing SBOMs helps level up your cybersecurity and better secure your software (1,374 words)
- [Apache Servers Under Attack: Urgent Need for Prompt Patching](/content/blog/apache-servers-actively-exploited-in-wild-importance-of-prompt-patching.html): New apache vulnerability exploited in the wild is the result of an incomplete path normalization logic  (975 words)
- [Adding Native Container Scanning to Sonatype Lifecycle](/content/press-releases/native-container-analysis/index.html): Sonatype, the leader in automated open source governance •  Sonatype Adds Native Container Scanning to Nexus Lifecycle (556 words)
- [Exploring the Federal Government's Response to Log4j](/content/blog/how-much-should-the-federal-government-worry-about-log4j.html): As the world worries about Log4j exploit, we look at how the US Federal Government is responding - and how worried it should be about this vulnerability.  (1,357 words)
- [Top 5 CMMC Gaps That Delay Certification | Sonatype](/content/resources/whitepapers/cmmc-certification-gaps/index.html): Identify and close critical CMMC compliance gaps with expert insights from Sonatype. Learn what delays certification and what you can do to become compliant. (1,186 words)
- [Deloitte Names Sonatype in the Technology Fast 500](/content/blog/deloitte-names-sonatype-in-technology-fast-500-for-fourth-consecutive-year.html): Sonatype ranks in Deloitte's Technology Fast 500™ for a fourth year. Recognized as a top 30 company in the D.C. area, this award follows several others.
  (457 words)
- [Red Hat Cloud Services npm Packages Hijacked](/content/blog/red-hat-cloud-services-npm-packages-hijacked/index.html): Hijacked Red Hat npm packages delivered install-time malware that stole credentials, spread via trusted workflows, and exposed developer environments. (990 words)
- [Sonatype Contributes Nexus JavaScript Support to OS Community](/content/press-releases/sonatype-contributes-nexus-javascript-support-to-open-source-community.html): Sonatype, the leader in open source governance and DevSecOps automation, announced the contribution of its JavaScript support for Nexus Repository to the. (310 words)
- [Flaws vs. Bugs](/content/blog/2013/09/flaws-vs-bugs/index.html): Distinguishing between security flaws and bugs is crucial for effective software development. Learn why fixing flaws is as important as fixing bugs to stay secure. (627 words)
- [What is an SBOM? | Sonatype Guide](/content/resources/guides/what-is-an-sbom-cheat-sheet/index.html): Beyond its use as an inventory of components, an SBOM provides transparency that is crucial for identifying security vulnerabilities and managing risks. (414 words)
- [Trusting Third-Party Code That Can't Be Trusted](/content/blog/2014/07/trusting-third-party-code-that-cant-be-trusted/index.html): Paul Roberts (@paulfroberts) at InfoWorld recently shared his perspective on “5 big security mistakes coders make”. (495 words)
- [Sonatype for GitLab CI](/content/help/en/sonatype-for-gitlab-ci-html.html) (1,874 words)
- [HTTPS Support Launching Now](/content/blog/2014/08/https-support-launching-now/index.html): It is live! Within an extremely short turnaround time the Sonatype Operations team has coordinated certificates and other setup with our excellent CDN. (309 words)
- [Reachability Analysis with Bamboo](/content/help/en/reachability-analysis-with-bamboo-html.html) (1,807 words)
- [Setting Up Integration Tests in Maven Using the Failsafe Plugin](/content/blog/2009/06/integration-tests-with-maven-part-1-failsafe-plugin.html): Learn how to set up integration tests in Maven using the Failsafe plugin. Get detailed step-by-step instructions with simple application examples. Learn More. (619 words)
- [Automated remediation](/content/help/en/automated-pull-requests-html.html) (1,355 words)
- [Netmask Flaw and PHP Git Server Hack Expose Millions](/content/blog/netmask-flaw-leaves-millions-vulnerable-while-a-php-git-server-is-hacked-in-software-supply-chain-attack.html): Critical vulnerabilities exposed in netmask and PHP Git server highlight escalating threats in software supply chains. Learn how to mitigate the risks. (985 words)
- [We're used to the axe grinding | Sonatype blog](/content/blog/2009/05/were-used-to-the-axe-grinding/index.html): Maven criticism often reveals user frustration, not tool flaws. Embrace learning and community involvement to unlock Maven’s potential. (1,248 words)
- [GitHub App Authentication for SCM Integration](/content/help/en/github-app-authentication-for-scm-integration-html.html) (1,644 words)
- [In Other News | Sonatype Blog](/content/blog/2009/11/in-other-news/index.html): Discover the latest updates on Sonatype contributions in our weekly roundup, featuring insights on automated testing and Groovy support in Maven POM files. (361 words)
- [Sonatype Innovate: Real Peer Connections in Software Security](/content/blog/sonatype-innovate-real-peer-connections-real-product-influence-real-recognition.html): Join Sonatype Innovate to connect with DevSecOps peers, share real-world insights, and gain recognition in software supply chain security. (643 words)
- [How to Prevent Maven from Downloading Excessive Dependencies](/content/blog/2011/04/how-not-to-download-the-internet/index.html): Learn how to manage Maven dependencies effectively to avoid excessive downloads and streamline your build process with smart practices. (754 words)
- [Scale Developer Security With Expanded Sonatype Platform Features](/content/blog/scale-developer-security-with-expanded-nexus-platform-features.html): New Nexus platform features make it easier for developers to scale security and block open source vulnerabilities from entering the software supply chain. (978 words)
- [Sonatype Hosts Global Gatherings of DevSecOps Leaders](/content/blog/sonatype-hosts-global-gatherings-of-devsecops-leaders-and-innovators.html): October is dedicated to intimate gatherings of DevSecOps professionals, thought leaders, and decision makers in cities across North America and Europe. 
 (855 words)
- [Developer Insights on Maven and Selenium in Weekly Roundup](/content/blog/2009/11/18-on-other-news/index.html): Weekly roundup of posts featuring Maven, Nexus, and Sonatype projects, including insights on Selenium, Scala, and Hibernate Shards.  (268 words)
- [Nexus REST API: Documentation and Browser Tools Explained](/content/blog/2012/07/learning-the-nexus-rest-api-read-the-docs-or-fire-up-a-browser.html): Discover how to effectively use and integrate Nexus REST API by accessing detailed documentation and utilizing browser tools for seamless automation. (615 words)
- [Sonatype Platform Plugin for Jenkins - Lifecycle](/content/help/en/sonatype-platform-plugin-for-jenkins-html.html) (1,613 words)
- [Sonatype for Visual Studio 2022](/content/help/en/sonatype-for-visual-studio-2022-html.html): Visual Studio 2022 Extension, Visual Studio 2022 Extension (1,300 words)
- [Easily Move Artifacts Between Sonatype Nexus Repositories](/content/blog/2010/04/nexus-tip-moving-artifacts-between-sonatype-nexus-repositories.html): Sonatype Nexus Tip: Moving Artifacts Between Sonatype Nexus Repositories (459 words)
- [Upcoming Sonatype Events for Innovators](/content/resources/upcoming-events/index.html): Forge new professional relationships and exchange knowledge at an upcoming event. Register for a variety of in-person or virtual events hosted by experts.
 (157 words)
- [Academy Software Foundation: Hollywood Embraces Open Source](/content/blog/hollywood-formalizes-support-for-open-source-in-filmmaking.html): The Academy of Motion Picture Arts & Sciences teamed up with the Linux Foundation to form the Academy Software Foundation (ASWF), to increase the quality and. (824 words)
- [Pull Request Commenting](/content/help/en/pull-request-commenting-html.html) (1,332 words)
- [Sonatype for Jira Cloud](/content/help/en/sonatype-for-jira-cloud-html.html) (1,386 words)
- [SPDX Application Analysis](/content/help/en/spdx-application-analysis-html.html) (937 words)
- [AI and the Future of Open Source Security  | Sonatype Webinar](/content/resources/webinars/ai-sscr-authors-panel/index.html): Discover the impact AI-assisted development has on the future of open source security in our webinar featuring strategies for secure software development., The software supply chain is evolving faster than ever, shaped by rapid advancements in technology, growing regulatory demands, and the increasing sophi... (226 words)
- [Policy Waiver Request REST API](/content/help/en/policy-waiver-request-rest-api-html.html) (1,602 words)
- [Firewall APIs](/content/help/en/firewall-apis-html.html) (1,286 words)
- [Creating an OSS Policy: Considerations and Best Practices](/content/blog/what-to-consider-when-crafting-your-oss-policy/index.html): Building a plan for using open source software in your company means less confusion and risk. Find out what to consider for your business. (906 words)
- [Enhancing Docker Security with Sonatype Nexus Repository](/content/blog/developing-with-docker-and-sonatype/index.html): Strengthen your Docker development environment with Sonatype Nexus Repository to boost security, manage dependencies, and streamline container workflows. (727 words)
- [Open Source Software Efficiency & OSS Optimization | Sonatype](/content/blog/optimizing-efficiency-and-reducing-waste-in-open-source-software-management.html): Learn strategies to boost open source software efficiency, from OSS optimization to reducing software waste and streamlining security workflows across ecosystems. (758 words)
- [Nexus Repository Maven Plugin](/content/help/en/nexus-repository-maven-plugin-html.html) (1,019 words)
- [CycloneDX REST API](/content/help/en/cyclonedx-rest-api-html.html) (1,270 words)
- [Sonatype Integrations](/content/help/en/sonatype-integrations-html.html) (354 words)
- [Source Control Configuration](/content/help/en/source-control-configuration-html.html) (878 words)
- [Automated Pull Requests with Gradle](/content/help/en/automated-pull-requests-with-gradle-html.html) (445 words)
- [Exploring Maven 3.0 Project Model and Mixins | Sonatype](/content/blog/2008/11/maven-project-model/index.html): Explore how Maven 3.0's project model and mixin support revolutionize project builds with linear inheritance, simplifying complex dependency management. (420 words)
- [Firewall for Docker](/content/help/en/firewall-for-docker-html.html) (1,809 words)
- [Sonatype: Fighting COVID-19 Together](/content/blog/fighting-covid-19-together/index.html): Sonatype is providing free Nexus software to qualifying organizations working to develop innovative software solutions to help fight COVID-19. (249 words)
- [React2Shell Uncovered: What the Critical RCE Means | Sonatype Webinar](/content/resources/webinars/react2shell-what-you-must-do/index.html): Learn about the critical React2Shell vulnerability that allows remote code execution and discover essential steps to protect your applications in our on-demand webinar., In December 2025, the security community uncovered a devastating flaw in React Server Components - React2Shell. This vulnerability (CVE-2025-55182 / CVE... (172 words)
- [Priorities REST API](/content/help/en/priorities-rest-api-html.html) (766 words)
- [Easy SCM Onboarding](/content/help/en/easy-scm-onboarding-html.html) (644 words)
- [SOF Week Lunch and Learn: Securing Your Software Portfolio at Machine Scale](/content/event/sof-week-lunch-learn-2026/index.html) (170 words)
- [Streamlining Developer Onboarding with Maven Studio for Eclipse](/content/blog/2010/07/the-elephant-in-the-room-developer-onboarding/index.html): Streamline developer onboarding with Maven Studio for Eclipse and reduce setup time from days to minutes. Learn how Sonatype enhances efficiency. (764 words)
- [repo/repository/sonatype-hosted/pki/deb-gpg/gpg-key-sonatype-apt-hosted-asc.html](/content/repo/repository/sonatype-hosted/pki/deb-gpg/gpg-key-sonatype-apt-hosted-asc.html) (21 words)
- [download/clm/scanner/nexus-iq-cli-2-13-1-01-windows-x86_64-zip-sha512.html](/content/download/clm/scanner/nexus-iq-cli-2-13-1-01-windows-x86_64-zip-sha512.html) (1 words)
- [Installation and Configuration - Sonatype for Bamboo Data Center](/content/help/en/installation-and-configuration-sonatype-for-bamboo-data-center-html.html) (882 words)
- [download/clm/scanner/nexus-iq-cli-2-13-1-01-osx-x86_64-pkg-sha256.html](/content/download/clm/scanner/nexus-iq-cli-2-13-1-01-osx-x86_64-pkg-sha256.html) (1 words)
- [PHP and Composer Package Support | Sonatype Support](/content/products/language-support/php-and-composer/index.html): Securely manage PHP dependencies with full Composer and PHP support across the Sonatype Platform. Explore details on using PHP and Composer with Sonatype. (448 words)
- [Continuous Risk Profile](/content/help/en/continuous-risk-profile-html.html) (881 words)
- [CI Components - Sonatype for GitLab CI](/content/help/en/ci-components-sonatype-for-gitlab-ci-html.html) (922 words)
- [Sonatype and Cloud Native Computing Foundation Partner](/content/press-releases/sonatype-and-cloud-native-computing-foundation-partner.html): Join Sonatype and The Cloud Native Computing Foundation® for the first virtual Security Slam to bolster open source security. (476 words)
- [Bitbucket Data Center Configuration](/content/help/en/bitbucket-configuration-html.html) (202 words)
- [Azure DevOps Configuration](/content/help/en/azure-devops-configuration-html.html) (365 words)
- [Maven Guide Split into Two Comprehensive Books | Sonatype](/content/blog/2010/01/maven-the-definitive-guide-split-into-two-books/index.html): Explore everything you need to know about Maven in Sonatype's Maven by Example and Maven Cookbook.  (345 words)
- [Reachability Analysis](/content/help/en/reachability-analysis-html.html) (1,037 words)
- [GitHub Configuration](/content/help/en/github-configuration-html.html) (405 words)
- [SBOM Manager Advanced Search View](/content/help/en/sbom-search-html.html) (1,164 words)
- [Installation and Configuration - Sonatype Platform Plugin for Jenkins](/content/help/en/installation-and-configuration-sonatype-platform-plugin-for-jenkins-html.html) (482 words)
- [Accelerating Dependency Management  | Sonatype Webinar](/content/resources/webinars/devops-downloads/dependency-management/index.html): Learn how to accelerate dependency management in this webinar with practical ways to streamline development workflows and enhance software stability.,  (93 words)
- [Sonatype IQ CLI With Bundled JDK](/content/help/en/sonatype-iq-cli-with-bundled-jdk-html.html) (356 words)
- [2024 Notable Integrations Bug Fixes](/content/help/en/2024-notable-integrations-bug-fixes-html.html) (918 words)
- [Firewall Webhook Event Types](/content/help/en/firewall-webhook-event-types-html.html) (1,092 words)
- [Sonatype Deployments | Run Anywhere](/content/products/deployments/index.html): Discover flexible deployment options with Sonatype, enabling secure software development in the cloud, self-hosted, or air-gapped environments. (450 words)
- [Automated Pull Requests in npm](/content/help/en/automated-pull-requests-in-npm-html.html) (430 words)
- [Predicting Future Requirements and Standards](/content/resources/videos/sbom-501-future-requirements-and-standards/index.html): Stephen Magill, Sonatype’s VP of Product Innovation shares predictions on software development requirements and standards including a focus on SBOMs. (37 words)
- [Understanding Sparse Checkout for SCM Scanning](/content/help/en/sparse-checkout-file-types-html.html) (569 words)
- [SBOM Component Details View](/content/help/en/sbom-component-details-view-html.html) (1,023 words)
- [Software Bill of Materials (SBOM)](/content/help/en/software-bill-of-materials-sbom-html.html) (1,635 words)
- [Bitbucket Cloud Configuration](/content/help/en/bitbucket-cloud-configuration-html.html) (403 words)
- [Reachability Analysis with Gitlab CI](/content/help/en/reachability-analysis-with-gitlab-ci-html.html) (856 words)
- [CycloneDX Application Analysis](/content/help/en/cyclonedx-html.html) (1,497 words)
- [Automated PRs for InnerSource Components](/content/help/en/automated-prs-for-innersource-html.html) (313 words)
- [Sonatype Container Deployment - Lifecycle](/content/help/en/container-deployments-html.html) (400 words)
- [Role Management](/content/help/en/role-management-html.html) (2,638 words)
- [GitLab Configuration](/content/help/en/gitlab-configuration-html.html) (217 words)
- [Sonatype Container Deployment - Nexus Repository](/content/help/en/cloud-deployments-html.html) (616 words)
- [Priorities View](/content/help/en/priorities-view-html.html) (1,260 words)
- [SBOM Bill of Material View](/content/help/en/sbom-bill-of-material-view-html.html) (1,130 words)
- [Automated Pull Requests in Maven](/content/help/en/automated-pull-requests-in-maven-html.html) (129 words)
- [Integration of IQ Webhook with Fortify SSC Sync Service](/content/help/en/integration-of-iq-webhook-with-fortify-ssc-sync-service-html.html) (368 words)
- [Automated Source Control Feedback](/content/help/en/automated-source-control-feedback-html.html) (291 words)
- [Instant Risk Profile](/content/help/en/instant-risk-profile-html.html) (283 words)
- [Automated Pull Requests in Go](/content/help/en/automated-pull-requests-in-go-html.html) (134 words)
- [Reachability Analysis with Sonatype for Azure DevOps](/content/help/en/reachability-analysis-with-sonatype-for-azure-devops-html.html) (731 words)
- [Creating a Lifecycle Remediation Plan](/content/help/en/creating-a-lifecycle-remediation-plan-html.html) (2,298 words)
- [2024 Release Notes](/content/help/en/iq-2024-release-notes-html.html) (5,061 words)
- [Sonatype for SCM](/content/help/en/sonatype-for-scm-html.html) (526 words)
- [Vulnerability Custom Attributes REST API](/content/help/en/vulnerability-custom-attributes-rest-api-html.html) (1,553 words)
- [SBOM Continuous Monitoring](/content/help/en/sbom-continuous-monitoring-html.html) (675 words)
- [Waiver Management](/content/help/en/firewall-waiver-management-html.html) (1,429 words)
- [SBOM VEX Workflow](/content/help/en/sbom-vex-workflow-html.html) (729 words)
- [2026 Notable Integrations Bug Fixes](/content/help/en/2026-notable-integrations-bug-fixes-html.html) (637 words)
- [2025 Notable Integrations Bug Fixes](/content/help/en/2025-notable-integrations-bug-fixes-html.html) (906 words)
- [Policy Waiver REST API](/content/help/en/policy-waiver-rest-api-html.html) (1,598 words)
- [REST APIs](/content/help/en/rest-apis-307236-html.html) (679 words)
- [Passing CLI parameters from a file](/content/help/en/passing-cli-parameters-from-a-file-html.html) (111 words)
- [Reachability Analysis with Sonatype for GitHub Actions](/content/help/en/reachability-analysis-with-sonatype-for-github-actions-html.html) (514 words)
- [Malware Threat Landscape](/content/help/en/malware-threat-landscape-html.html) (1,018 words)
- [Create PRs from Priorities View](/content/help/en/create-prs-from-priorities-view-html.html) (683 words)
- [Component Remediation REST API](/content/help/en/component-remediation-rest-api-html.html) (1,958 words)
- [Example Scan Result File](/content/help/en/example-scan-result-file-html.html) (234 words)
- [Using the Sonatype CLI with a CI Server](/content/help/en/using-the-sonatype-cli-with-a-ci-server-html.html) (182 words)
- [Using Automatic application creation with the CLI](/content/help/en/automatic-application-with-the-cli-html.html) (274 words)
- [Developer Dashboard](/content/help/en/developer-dashboard-html.html) (517 words)
- [CLI error messages](/content/help/en/cli-error-messages-html.html) (134 words)
- [Malware Defense Evaluate API](/content/help/en/malware-defense-evaluate-api-html.html) (608 words)
- [Integrate Firewall with Zscaler](/content/help/en/zscaler-html.html) (982 words)
- [Firewall Success Metrics](/content/help/en/firewall-success-metrics-html.html) (1,223 words)
- [Quarantine REST API](/content/help/en/quarantine-rest-api-html.html) (477 words)
- [Repository Results REST API](/content/help/en/repository-results-rest-api-285699-html.html) (533 words)
- [Component Change Monitoring API](/content/help/en/component-change-monitoring-api-html.html) (626 words)
- [Importing SBOMs](/content/help/en/sbom-import-html.html) (874 words)
- [Golden Versions](/content/help/en/golden-versions-and-prs-html.html) (511 words)
- [Namespace Confusion Protection](/content/help/en/namespace-confusion-protection-html.html) (1,274 words)
- [Webhook Payload](/content/help/en/webhook-payload-html.html) (689 words)
- [Firewall Malware Insights](/content/help/en/firewall-malware-html.html) (968 words)
- [Vulnerability Details REST API](/content/help/en/vulnerability-details-rest-api-html.html) (1,903 words)
- [Bulk Waivers](/content/help/en/firewall-bulk-waivers-html.html) (1,005 words)
- [Sonatype Developer](/content/help/en/sonatype-developer-html.html) (298 words)
- [SBOM Manager Legal View](/content/help/en/sbom-legal-html.html) (713 words)
- [Firewall Quarantine](/content/help/en/firewall-quarantine-html.html) (1,050 words)
- [JFrog Artifactory Setup](/content/help/en/jfrog-artifactory-setup-html.html) (1,063 words)
- [Bulk Waivers API](/content/help/en/bulk-waivers-api-html.html) (451 words)
- [Sonatype Repository Firewall](/content/help/en/repository-firewall-html.html) (597 words)
- [Container Waivers API](/content/help/en/container-waivers-api-html.html) (395 words)
- [Policy Compliant Component Selection](/content/help/en/policy-compliant-component-selection-html.html) (744 words)
- [Requested Waivers](/content/help/en/firewall-request-waivers-html.html) (659 words)
- [Search Examples](/content/help/en/search-examples-215924-html.html) (379 words)
- [General Lifecycle Best Practices](/content/help/en/general-lifecycle-best-practices-html.html) (1,266 words)
- [View Waivers from the Priorities View](/content/help/en/view-waivers-from-the-priorities-view-html.html) (139 words)
- [Secure Webhook Deliveries](/content/help/en/secure-webhook-deliveries-html.html) (651 words)
- [Remediation Best Practices](/content/help/en/remediation-best-practices-html.html) (1,140 words)
- [Prioritization Algorithm](/content/help/en/prioritization-algorithm-html.html) (203 words)
- [Source Control REST API](/content/help/en/source-control-rest-api-html.html) (1,976 words)
- [Repository Results View](/content/help/en/repository-results-view-html.html) (948 words)
- [Product Information and Downloads](/content/help/en/developer-product-information-html.html) (87 words)
- [Getting Started with Firewall Pro](/content/help/en/getting-started-with-firewall-pro-html.html) (722 words)
- [SBOM Manager Dashboard View](/content/help/en/sbom-dashboard-view-html.html) (213 words)
- [Repository Firewall Pro](/content/help/en/repository-firewall-pro-html.html) (348 words)
- [Automatic Quarantine Release](/content/help/en/automatic-quarantine-release-html.html) (576 words)
- [Repository Firewall Best Practices](/content/help/en/repository-firewall-best-practices-html.html) (662 words)
- [Sonatype Developer Release Notes](/content/help/en/sonatype-developer-release-notes-html.html) (21 words)
- [Configuring Multi-threaded Continuous Monitoring for Sonatype Lifecycle](/content/help/en/configuring-multi-threaded-continuous-monitoring-for-sonatype-lifecycle-html.html) (1,141 words)
- [Product Information and Downloads](/content/help/en/sbom-manager-product-information-html.html) (92 words)
- [Namespace Confusion API](/content/help/en/namespace-confusion-api-html.html) (226 words)
- [Getting Started](/content/help/en/sbom-getting-started-html.html) (363 words)
- [2025 Release Notes](/content/help/en/sonatype-iq-server-2025-release-notes-html.html) (3,550 words)
- [Webhooks](/content/help/en/webhooks-616383-html.html) (304 words)
- [Webhooks Concepts: IQ Server and Slack Integration](/content/help/en/webhooks-concepts-iq-server-and-slack-integration-html.html) (2,147 words)
- [SBOM Manager Applications View](/content/help/en/sbom-applications-html.html) (144 words)
- [SBOM Manager Organizations View](/content/help/en/sbom-organizations-view-html.html) (248 words)
- [Firewall Navigation](/content/help/en/firewall-navigation-html.html) (802 words)
- [Configuration REST API](/content/help/en/configuration-rest-api-html.html) (2,030 words)
- [Firewall for Artifactory Configuration](/content/help/en/jfrog-artifactory-plugin-configuration-html.html) (418 words)
- [Preparing to Run npm Application Analysis](/content/help/en/preparing-to-run-npm-application-analysis-html.html) (948 words)
- [Cascade Component Re-evaluation API](/content/help/en/cascade-component-re-evaluation-api-html.html) (355 words)
- [Repository Firewall Hashing](/content/help/en/repository-firewall-hashing-html.html) (306 words)
- [Repository: How to Correct Microsoft IdP SAML Metadata for Nexus Applications – Sonatype Support](/content/support/hc/en-us/articles/360045687854/index.html): When uploading SAML metadata from a Microsoft Identity Provider (IdP) e.g. Azure AD or ADFS to either Nexus Repository Manager 3 (NXRM 3)... (143 words)
- [Sonatype SBOM Manager](/content/help/en/sonatype-sbom-manager-html.html) (241 words)
- [Waiver Expiration Notifications](/content/help/en/firewall-waiver-expiration-notifications-html.html) (408 words)
- [Guide to Removing Malware](/content/help/en/guide-to-removing-malware-html.html) (368 words)
- [Renew Waiver](/content/help/en/firewall-renew-waiver-html.html) (420 words)
- [Firewall Dashboard](/content/help/en/firewall-dashboard-html.html) (576 words)
- [Transitive Waivers REST API](/content/help/en/transitive-waivers-rest-api-html.html) (819 words)
- [Python Application Analysis](/content/help/en/python-application-analysis-html.html) (900 words)
- [Data Management and Storage Best Practices](/content/help/en/data-management-and-storage-best-practices-html.html) (782 words)
- [SBOM Manager Release Notes](/content/help/en/sbom-manager-release-notes-html.html) (22 words)
- [Uninstalling the Firewall for Artifactory Plugin](/content/help/en/uninstalling-the-firewall-for-artifactory-plugin-html.html) (137 words)
- [Firewall Configuration for Nexus Repository](/content/help/en/firewall-configuration-for-nexus-repository-html.html) (350 words)
- [Java Application Analysis](/content/help/en/java-application-analysis-html.html) (1,013 words)
- [Lifecycle Webhooks Events Types](/content/help/en/lifecycle-webhooks-events-types-html.html) (709 words)
- [Quarantined Component View](/content/help/en/quarantined-component-view-html.html) (469 words)
- [Policy Violation REST API](/content/help/en/policy-violation-rest-api-html.html) (1,145 words)
- [Firewall Pro Dashboard](/content/help/en/firewall-pro-dashboard-html.html) (210 words)
- [Custom Quarantine Messages](/content/help/en/custom-quarantine-messages-html.html) (206 words)
- [Configure Webhooks](/content/help/en/configure-webhook-html.html) (224 words)
- [JFrog Artifactory Plugin Configuration REST API](/content/help/en/jfrog-artifactory-plugin-configuration-rest-api-html.html) (294 words)
- [Getting Started with Repository Firewall Cloud](/content/help/en/getting-started-with-repository-firewall-cloud-html.html) (543 words)
- [Upgrading Firewall for Artifactory plugin](/content/help/en/upgrading-firewall-for-artifactory-plugin-html.html) (107 words)
- [Firewall Audit and Quarantine Capability](/content/help/en/firewall-audit-and-quarantine-capability-html.html) (305 words)
- [Firewall Pro Release Notes](/content/help/en/firewall-pro-release-notes-html.html) (218 words)
- [SPDX REST API](/content/help/en/spdx-rest-api-html.html) (576 words)
- [hubfs/whitepaper-20text-20documents-20/nexus_lifecycle_policy_workshop_sept20-pdf.html](/content/hubfs/whitepaper-20text-20documents-20/nexus_lifecycle_policy_workshop_sept20-pdf.html) (444 words)
- [Backup and Restore Best Practices](/content/help/en/backup-and-restore-best-practices-html.html) (399 words)
- [Create Webhooks](/content/help/en/create-webhooks-html.html) (46 words)
- [Getting Started with Self-Hosted Repository Firewall](/content/help/en/repository-firewall-getting-started-html.html) (281 words)
- [Source Control Integration Best Practices](/content/help/en/source-control-integration-best-practices-html.html) (531 words)
- [Entra ID (FKA Azure AD) SAML Integration with Sonatype Platform – Sonatype Support](/content/support/hc/en-us/articles/4402929272851-azure-ad-saml-integration-with-nexus-applications.html): Overview This article outlines how to integrate Azure AD with Nexus Repository Pro 3 (NXRM 3) and/or Sonatype IQ Server for SAML SSO.... (1,902 words)
- [Reference Policy Best Practices](/content/help/en/reference-policy-best-practices-html.html) (583 words)
- [Threats in AI/ML Models](/content/help/en/threats-in-ai-ml-models-315000-html.html) (851 words)
- [Product Information and Downloads](/content/help/en/firewall-product-information-html.html) (152 words)
- [Nexus Repository 3 Pro Setup](/content/help/en/nexus-repository-3-pro-setup-html.html) (175 words)
- [Go Application Analysis](/content/help/en/go-application-analysis-html.html) (836 words)
- [SAML Integration](/content/help/en/saml-integration-html.html) (1,357 words)
- [Firewall Results in Nexus Repository](/content/help/en/firewall-results-in-nexus-repository-html.html) (231 words)
- [Continuous Monitoring Best Practices](/content/help/en/continuous-monitoring-best-practices-html.html) (442 words)
- [Swift Application Analysis](/content/help/en/swift-application-analysis-html.html) (390 words)
- [Waiver Best Practices](/content/help/en/waiver-best-practices-html.html) (450 words)
- [Guidelines for Using Lifecycle with SBOMs for Monitoring](/content/help/en/guidelines-for-using-lifecycle-with-sboms-for-monitoring-html.html) (256 words)
- [Project Initiation (1st month)](/content/help/en/project-initiation-1st-month-html.html) (491 words)
- [Hierarchy and Inheritance Best Practices](/content/help/en/hierarchy-and-inheritance-best-practices-html.html) (677 words)
- [InnerSource Best Practices](/content/help/en/innersource-best-practices-html.html) (537 words)
- [Signatures REST API](/content/help/en/signatures-rest-api-html.html) (575 words)
- [Hugging Face Model Analysis](/content/help/en/hugging-face-model-analysis-html.html) (518 words)
- [Zero-Day Vulnerability Best Practices](/content/help/en/zero-day-vulnerability-best-practices-html.html) (259 words)
- [Software Bill of Materials Best Practices](/content/help/en/software-bill-of-materials-best-practices-html.html) (484 words)
- [Onboarding Applications Best Practices](/content/help/en/onboarding-applications-best-practices-html.html) (479 words)
- [Example Waiver Workflows](/content/help/en/example-waiver-workflows-html.html) (525 words)
- [Component Labels REST API](/content/help/en/component-labels-rest-api-html.html) (984 words)
- [Legal Risk Trends](/content/help/en/legal-risk-trends-html.html) (1,990 words)
- [Waivers Explorer](/content/help/en/waivers-explorer-html.html) (1,946 words)
- [npm Application Analysis](/content/help/en/npm-application-analysis-html.html) (652 words)
- [Copyrights REST API](/content/help/en/copyrights-rest-api-html.html) (290 words)
- [Auto Policy Waiver REST API](/content/help/en/auto-policy-waiver-rest-api-html.html) (828 words)
- [Vulnerability Analysis Details REST API](/content/help/en/vulnerability-analysis-details-rest-api-html.html) (435 words)
- [Component Details Page](/content/help/en/component-details-page-html.html) (2,582 words)
- [Legal REST API](/content/help/en/legal-rest-api-html.html) (434 words)
- [Vulnerability Group REST API](/content/help/en/vulnerability-group-rest-api-html.html) (531 words)
- [Role REST API](/content/help/en/role-rest-api-html.html) (734 words)
- [Ruby Application Analysis](/content/help/en/ruby-application-analysis-html.html) (267 words)
- [Dart and Flutter Analysis](/content/help/en/dart-and-flutter-analysis-html.html) (341 words)
- [Similar Waivers REST API](/content/help/en/similar-waivers-rest-api-html.html) (749 words)
- [Promote Scan REST API](/content/help/en/promote-scan-rest-api-html.html) (884 words)
- [Policy Enforcement Best Practices](/content/help/en/policy-enforcement-best-practices-html.html) (358 words)
- [Docker Image Analysis](/content/help/en/docker-image-analysis-html.html) (556 words)
- [Legacy Violations Best Practices](/content/help/en/legacy-violations-best-practices-html.html) (311 words)
- [Steps for Performing npm Application Analysis](/content/help/en/steps-for-performing-npm-application-analysis-html.html) (223 words)
- [ALP Dashboard REST APIs](/content/help/en/alp-dashboard-rest-apis-html.html) (294 words)
- [Lifecycle Deployment Best Practices](/content/help/en/lifecycle-deployment-best-practices-html.html) (206 words)
- [Project Commencement (1st year)](/content/help/en/project-commencement-1st-year-html.html) (183 words)
- [Project Pilot (first 2 months)](/content/help/en/project-pilot-first-2-months-html.html) (360 words)
- [Conda Application Analysis](/content/help/en/conda-application-analysis-html.html) (417 words)
- [User Token REST API](/content/help/en/user-token-rest-api-html.html) (820 words)
- [Repository Results REST API](/content/help/en/repository-results-rest-api-html.html) (533 words)
- [Obligations REST API](/content/help/en/obligations-rest-api-html.html) (237 words)
- [Call Flow Analysis REST API](/content/help/en/call-flow-analysis-rest-api-html.html) (405 words)
- [Role Membership and Mapping APIs](/content/help/en/role-membership-mapping-apis-504598-html.html) (580 words)
- [Latest Central Repository topics - Sonatype Community](/content/community/c/central-repository/60/l/latest/index.html): Ask questions and follow discussions about Central Repository. (531 words)
- [Lifecycle Best Practices](/content/help/en/lifecycle-best-practices-html.html) (128 words)
- [Exclude Auto Policy Waiver REST API](/content/help/en/exclude-auto-policy-waiver-rest-api-html.html) (696 words)
- [Yum Analysis](/content/help/en/yum-analysis-html.html) (122 words)
- [Lifecycle Webhooks](/content/help/en/lifecycle-webhooks-html.html) (609 words)
- [Component Evaluation REST API](/content/help/en/component-evaluation-rest-api-html.html) (1,135 words)
- [Objective-C Application Analysis](/content/help/en/objective-c-application-analysis-html.html) (320 words)
- [Cleanup Policies](/content/help/en/cleanup-policies-html.html) (2,554 words)
- [Security Risk Breakdown](/content/help/en/security-risk-breakdown-html.html) (2,165 words)
- [CI Configuration REST API](/content/help/en/ci-configuration-rest-api-html.html) (994 words)
- [PHP Application Analysis](/content/help/en/php-application-analysis-html.html) (182 words)
- [SAML REST API](/content/help/en/saml-rest-api-html.html) (895 words)
- [Applicable Waivers REST API](/content/help/en/applicable-waivers-rest-api-html.html) (789 words)
- [Success Metrics](/content/help/en/success-metrics-html.html) (1,939 words)
- [Application REST API](/content/help/en/application-rest-api-html.html) (1,357 words)
- [Component Search REST API](/content/help/en/component-search-rest-api-html.html) (900 words)
- [License Overrides REST API](/content/help/en/license-override-rest-api-html.html) (438 words)
- [Source Link REST API](/content/help/en/source-link-rest-api-html.html) (99 words)
- [R (CRAN) Application Analysis](/content/help/en/r-cran-application-analysis-html.html) (127 words)
- [Rust Application Analysis](/content/help/en/rust-application-analysis-html.html) (102 words)
- [User REST API](/content/help/en/user-rest-api-html.html) (509 words)
- [Attributions REST API](/content/help/en/attributions-rest-api-html.html) (154 words)
- [Source Control Configuration REST API](/content/help/en/source-control-configuration-rest-api-html.html) (622 words)
- [Stale Waivers REST API](/content/help/en/stale-waivers-rest-api-html.html) (816 words)
- [2022 Release Notes](/content/help/en/iq-2022-release-notes-html.html) (3,936 words)
- [Data Retention Policy REST API](/content/help/en/data-retention-policy-rest-api-html.html) (919 words)
- [Policy Export REST API](/content/help/en/policy-export-rest-api-html.html) (1,064 words)
- [Source Control Evaluation REST API](/content/help/en/source-control-evaluation-rest-api-html.html) (334 words)
- [User Token Expiration Configuration REST API](/content/help/en/user-token-expiration-configuration-rest-api-html.html) (339 words)
- [Track Resolved Issues](/content/help/en/track-resolved-issues-html.html) (2,330 words)
- [Component Waivers REST API](/content/help/en/component-waivers-rest-api-html.html) (497 words)
- [Component Details REST API](/content/help/en/component-details-rest-api-html.html) (540 words)
- [Success Metrics: Program Health](/content/help/en/success-metrics-program-health-html.html) (1,243 words)
- [Waiver Reason REST API](/content/help/en/waiver-reason-rest-api-html.html) (158 words)
- [2021 Release Notes](/content/help/en/iq-2021-release-notes-html.html) (2,481 words)
- [Advanced Search](/content/help/en/advanced-search-html.html) (1,127 words)
- [Okta SAML integration with the Sonatype Platform – Sonatype Support](/content/support/hc/en-us/articles/1500001294962-okta-saml-integration-with-nexus-applications.html): Overview This article outlines how to integrate Okta with Nexus Repository Pro 3 (NXRM 3) and/or Sonatype IQ Server. The given setup will... (1,602 words)
- [Cross-Stage Policy Violation REST API](/content/help/en/cross-stage-policy-violation-rest-api-html.html) (489 words)
- [Mail REST API](/content/help/en/mail-rest-api-html.html) (735 words)
- [Sonatype IQ Server 205 Release Notes](/content/help/en/sonatype-iq-server-205-release-notes-html.html) (2,719 words)
- [Automated Waivers](/content/help/en/automated-waivers-html.html) (1,650 words)
- [Experimental APIs](/content/help/en/experimental-apis-html.html) (175 words)
- [Golden Fixes Dashboard](/content/help/en/golden-fixes-dashboard-html.html) (1,519 words)
- [Config YAML](/content/help/en/config-yaml-html.html) (1,407 words)
- [Security Vulnerability Override API](/content/help/en/security-vulnerability-override-api-html.html) (218 words)
- [Maven Repositories](/content/help/en/maven-repositories-html.html) (3,809 words)
- [OIDC Configuration REST API](/content/help/en/oidc-configuration-rest-api-html.html) (375 words)
- [Top Central Repository topics - Sonatype Community](/content/community/c/central-repository/60/l/top/index.html): Ask questions and follow discussions about Central Repository. (513 words)
- [IQ API Reference](/content/help/en/iq-api-reference-338492-html.html) (305 words)
- [Authorization and Authentication Concepts](/content/help/en/authorization-and-authentication-concepts-html.html) (2,044 words)
- [Reviewing a Report](/content/help/en/reviewing-a-report-html.html) (1,594 words)
- [Component Claim REST API](/content/help/en/component-claim-rest-api-html.html) (519 words)
- [Feature Configuration REST API](/content/help/en/feature-configuration-rest-api-html.html) (419 words)
- [Reverse Proxy Authentication Configuration REST API](/content/help/en/reverse-proxy-authentication-configuration-rest-api-html.html) (257 words)
- [Component Versions REST API](/content/help/en/component-versions-rest-api-html.html) (360 words)
- [Manifest Evaluation REST API](/content/help/en/manifest-evaluation-rest-api-html.html) (286 words)
- [InnerSource Insight](/content/help/en/innersource-insight-html.html) (1,017 words)
- [Sonatype IQ Server 192 Release Notes](/content/help/en/sonatype-iq-server-192-release-notes-html.html) (1,692 words)
- [HTTP Proxy Server Configuration REST API](/content/help/en/http-proxy-server-configuration-rest-api-html.html) (517 words)
- [Best Practices](/content/help/en/best-practices-dashboard-html.html) (1,253 words)
- [Organizations REST API](/content/help/en/organizations-rest-api-html.html) (693 words)
- [2020 Release Notes](/content/help/en/iq-2020-release-notes-html.html) (3,081 words)
- [Stack Divergence](/content/help/en/stack-divergence-html.html) (1,080 words)
- [JIRA Configuration REST API](/content/help/en/jira-configuration-rest-api-html.html) (479 words)
- [Supply Chain Monitoring](/content/help/en/supply-chain-monitoring-html.html) (757 words)
- [OpenSearch for On-Prem](/content/help/en/opensearch-for-on-prem-html.html) (667 words)
- [Role Membership and Mapping APIs](/content/help/en/role-membership-mapping-apis-html.html) (575 words)
- [High Availability in Amazon Web Services](/content/help/en/option-3-high-availability-deployment-in-amazon-web-services-aws-html.html) (4,702 words)
- [Success Metrics: Remediation Ops](/content/help/en/success-metrics-remediation-ops-html.html) (871 words)
- [Atlassian Crowd REST API](/content/help/en/atlassian-crowd-rest-api-html.html) (416 words)
- [Application Categories REST API](/content/help/en/application-categories-rest-api-html.html) (410 words)
- [Enterprise Reporting](/content/help/en/data-insights-html.html) (1,176 words)
- [Advanced Search REST API](/content/help/en/advanced-search-rest-api-html.html) (631 words)
- [Component Information Panel](/content/help/en/component-information-panel-html.html) (1,392 words)
- [Scan Health Configuration REST API](/content/help/en/scan-health-configuration-rest-api-html.html) (539 words)
- [OIDC/OAuth2 Configuration](/content/help/en/oidc-oauth2-configuration-504596-html.html) (356 words)
- [Machine Learning AI](/content/help/en/machine-learning-ai-html.html) (643 words)
- [CPE Matching REST API](/content/help/en/cpe-matching-rest-api-html.html) (203 words)
- [Product License REST API](/content/help/en/product-license-rest-api-html.html) (153 words)
- [REST APIs](/content/help/en/rest-apis-html.html) (679 words)
- [Audit Log REST API](/content/help/en/audit-log-rest-api-html.html) (257 words)
- [HeroDevs End of Life Components](/content/help/en/herodevs-end-of-life-components-html.html) (596 words)
- [Mythos Readiness](/content/help/en/mythos-readiness-html.html) (597 words)
- [third-party-code/index.html](/content/third-party-code/index.html) (11 words)
- [Search API](/content/help/en/search-api-html.html) (1,066 words)
- [AI Models Usage](/content/help/en/ai-models-usage-html.html) (576 words)
- [CVE-2024-5082 Nexus Repository 2 - Remote Code Execution – Sonatype Support](/content/support/hc/en-us/articles/30694125380755/index.html): Sonatype Nexus Security Advisory Date:  November 13, 2024 Affected Versions:  All previous Sonatype Nexus Repository Manager 2.x OSS/Pro... (653 words)
- [Component End-of-Life](/content/help/en/component-end-of-life-html.html) (651 words)
- [Waivers](/content/help/en/waivers-html.html) (1,591 words)
- [Search Examples](/content/help/en/search-examples-html.html) (379 words)
- [Re-evaluating a Report](/content/help/en/re-evaluating-a-report-html.html) (547 words)
- [Sonatype IQ Server 189 Release Notes](/content/help/en/sonatype-iq-server-189-release-notes-html.html) (1,404 words)
- [Sonatype IQ Server 186 Release Notes](/content/help/en/sonatype-iq-server-186-release-notes-html.html) (1,395 words)
- [Component License Information](/content/help/en/component-license-information-html.html) (724 words)
- [Administration Best Practices](/content/help/en/administration-best-practices-html.html) (1,439 words)
- [Vulnerability Lookup](/content/help/en/vulnerability-lookup-html.html) (378 words)
- [User Tokens](/content/help/en/iq-server-user-tokens-html.html) (823 words)
- [Sonatype IQ Server 203 - 203.3 Release Notes](/content/help/en/sonatype-iq-server-203-release-notes-html.html) (1,885 words)
- [Proprietary Component Configuration](/content/help/en/proprietary-component-configuration-html.html) (832 words)
- [Scan Reports](/content/help/en/scan-reports-html.html) (380 words)
- [Sonatype IQ Server 187 Release Notes](/content/help/en/sonatype-iq-server-187-release-notes-html.html) (1,068 words)
- [Waiver Management](/content/help/en/waiver-tasks-html.html) (1,035 words)
- [Bulk Waivers](/content/help/en/bulk-waivers-html.html) (774 words)
- [Sonatype IQ Server 202 - 202.1 Release Notes](/content/help/en/sonatype-iq-server-202-release-notes-html.html) (1,302 words)
- [Component Identification](/content/help/en/component-identification-html.html) (726 words)
- [View Latest Evaluations](/content/help/en/latest-evaluations-html.html) (176 words)
- [Requested Waivers](/content/help/en/requested-waivers-html.html) (721 words)
- [Assigning Component Labels](/content/help/en/assigning-component-labels-html.html) (196 words)
- [Components API](/content/help/en/components-api-html.html) (1,069 words)
- [Configure NuGet With Nexus](/content/help/en/configure-nuget-with-nexus-html.html) (1,547 words)
- [Sonatype IQ Server 204 Release Notes](/content/help/en/sonatype-iq-server-204-release-notes-html.html) (1,076 words)
- [Options Dropdown](/content/help/en/options-dropdown-html.html) (261 words)
- [PDF Report](/content/help/en/pdf-report-html.html) (311 words)
- [Automating](/content/help/en/automating-html.html) (30 words)
- [Tasks API](/content/help/en/tasks-api-html.html) (805 words)
- [Configure PyPI with Nexus](/content/help/en/configure-pypi-with-nexus-html.html) (1,557 words)
- [Claiming a Component](/content/help/en/claiming-a-component-html.html) (355 words)
- [Sonatype IQ Server 193 Release Notes](/content/help/en/sonatype-iq-server-193-release-notes-html.html) (1,003 words)
- [Lifecycle Dashboard](/content/help/en/lifecycle-dashboard-html.html) (764 words)
- [Sonatype IQ Server 194 Release Notes](/content/help/en/sonatype-iq-server-194-release-notes-html.html) (1,169 words)
- [Sonatype IQ Server 197 Release Notes](/content/help/en/sonatype-iq-server-197-release-notes-html.html) (1,220 words)
- [Sonatype IQ Server 199 Release Notes](/content/help/en/sonatype-iq-server-199-release-notes-html.html) (784 words)
- [Accessing the Report](/content/help/en/accessing-the-report-html.html) (427 words)
- [Transitive Violation Waivers for InnerSource](/content/help/en/transitive-violation-waivers-for-innersource-components-html.html) (356 words)
- [Dependency Tree](/content/help/en/dependency-tree-html.html) (213 words)
- [Sonatype IQ Server 196 Release Notes](/content/help/en/sonatype-iq-server-196-release-notes-html.html) (1,159 words)
- [OCI CLI Usage](/content/help/en/oci-cli-usage-html.html) (851 words)
- [OIDC/OAuth2 Configuration](/content/help/en/oidc-oauth2-configuration-html.html) (352 words)
- [Sonatype IQ Server 201 Release Notes](/content/help/en/sonatype-iq-server-201-release-notes-html.html) (817 words)
- [Create a Terraform Repository](/content/help/en/create-a-terraform-repository-html.html) (911 words)
- [Configure Swift with Nexus](/content/help/en/configure-spm-registry-html.html) (1,064 words)
- [Sonatype IQ Server 198 Release Notes](/content/help/en/sonatype-iq-server-198-release-notes-html.html) (907 words)
- [download/nexus/professional-bundle/nexus-professional-2-15-2-03-bundle-zip-md5.html](/content/download/nexus/professional-bundle/nexus-professional-2-15-2-03-bundle-zip-md5.html) (91 words)
- [Examples of Waiver Scoping](/content/help/en/examples-of-waiver-scoping-html.html) (400 words)
- [Similar Waivers](/content/help/en/similar-waivers-html.html) (301 words)
- [Atlassian Crowd Integration Configuration](/content/help/en/atlassian-crowd-integration-configuration-html.html) (300 words)
- [Application Composition Report](/content/help/en/application-composition-report-html.html) (48 words)
- [Sonatype IQ Server Release Notes](/content/help/en/iq-server-release-notes-html.html) (300 words)
- [Role-Based Access Control](/content/help/en/role-based-access-control-html.html) (605 words)
- [GPG signatures for Yum](/content/help/en/gpg-signatures-for-yum-proxy-group-html.html) (1,365 words)
- [Component Labels](/content/help/en/component-labels-html.html) (618 words)
- [Examples](/content/help/en/examples-html.html) (545 words)
- [IQ Server Realms](/content/help/en/iq-server-realms-html.html) (189 words)
- [Configuration API](/content/help/en/configuration-api-html.html) (522 words)
- [Exporting Waiver Data](/content/help/en/export-waiver-data-html.html) (301 words)
- [Proxying RHEL Yum Repositories](/content/help/en/proxying-rhel-yum-repositories-html.html) (1,145 words)
- [Export Violation Data](/content/help/en/export-violation-data-html.html) (233 words)
- [Dashboard Filters](/content/help/en/dashboard-filters-html.html) (332 words)
- [Repository Manager 2](/content/help/en/repository-manager-2-html.html) (311 words)
- [Export Applications Data](/content/help/en/export-application-data-html.html) (116 words)
- [Script API](/content/help/en/script-api-html.html) (609 words)
- [Status API](/content/help/en/status-api-html.html) (399 words)
- [Sonatype IQ Server 200 Release Notes](/content/help/en/sonatype-iq-server-200-release-notes-html.html) (710 words)
- [Export Component Data](/content/help/en/export-component-data-html.html) (123 words)
- [User Tokens API](/content/help/en/user-tokens-api-html.html) (359 words)
- [Logging](/content/help/en/logging-html.html) (1,492 words)
- [Reporting](/content/help/en/reporting-html.html) (73 words)
- [Phase 1 - Installation and Configuration](/content/help/en/phase-1-installation-and-configuration-html.html) (374 words)
- [Yum Repositories](/content/help/en/yum-repositories-html.html) (1,283 words)
- [Example Headers And Payloads](/content/help/en/example-headers-and-payloads-html.html) (625 words)
- [Sonatype Repository Firewall API](/content/help/en/sonatype-repository-firewall-api-html.html) (548 words)
- [Security Management API](/content/help/en/security-management-api-html.html) (734 words)
- [Cleanup Policies API](/content/help/en/cleanup-policies-api-html.html) (630 words)
- [Infrastructure-based Best Practices](/content/help/en/infrastructure-based-best-practices-html.html) (634 words)
- [Managing and Running Scripts](/content/help/en/managing-and-running-scripts-html.html) (410 words)
- [Resetting the Admin Account Password and Roles](/content/help/en/resetting-the-admin-account-password-and-roles-html.html) (67 words)
- [Repositories API](/content/help/en/repositories-api-html.html) (513 words)
- [Writing Scripts](/content/help/en/writing-scripts-html.html) (414 words)
- [Support for a New Repository Format](/content/help/en/support-for-a-new-repository-format-html.html) (813 words)
- [R Repositories](/content/help/en/r-repositories-html.html) (842 words)
- [Bundle Development](/content/help/en/bundle-development-html.html) (1,166 words)
- [HTTP Configuration API](/content/help/en/http-configuration-api-html.html) (326 words)
- [Install Self-Hosted Nexus Repository](/content/help/en/install-nexus-repository-html.html) (1,729 words)
- [SAML](/content/help/en/saml-html.html) (1,834 words)
- [Configure Terraform with Nexus](/content/help/en/configure-registry-html.html) (485 words)
- [RubyGems Repositories](/content/help/en/rubygems-repositories-html.html) (1,083 words)
- [Log Management API](/content/help/en/log-management-api-html.html) (335 words)
- [Shadow Download Best Practices](/content/help/en/shadow-download-best-practices-html.html) (397 words)
- [Data Repair Tasks](/content/help/en/verify-and-repair-data-consistency-tasks-html.html) (2,458 words)
- [Capabilities API](/content/help/en/capabilities-api-html.html) (434 words)
- [Tasks](/content/help/en/tasks-html.html) (2,630 words)
- [Nexus Repository Best Practices](/content/help/en/nexus-repository-best-practices-html.html) (74 words)
- [Read-Only API](/content/help/en/read-only-api-html.html) (328 words)
- [NuGet CLI Usage](/content/help/en/nuget-cli-usage-html.html) (838 words)
- [Component Lifecycle Best Practices](/content/help/en/component-lifecycle-best-practices-html.html) (160 words)
- [Lifecycle API](/content/help/en/lifecycle-api-html.html) (333 words)
- [Nodes API](/content/help/en/nodes-api-html.html) (240 words)
- [Support API](/content/help/en/support-api-html.html) (85 words)
- [Create a Swift Repository](/content/help/en/create-a-swift-repository-html.html) (420 words)
- [Automation](/content/help/en/automation-html.html) (718 words)
- [Create a PyPI Repository](/content/help/en/create-a-pypi-repository-html.html) (468 words)
- [Create a NuGet Repository](/content/help/en/create-a-nuget-repository-html.html) (819 words)
- [Service Metrics Data API](/content/help/en/service-metrics-data-api-html.html) (154 words)
- [Licensing API](/content/help/en/licensing-api-html.html) (140 words)
- [Pagination](/content/help/en/pagination-html.html) (319 words)
- [Content Selectors and Docker](/content/help/en/content-selectors-and-docker-html.html) (832 words)
- [Swift CLI Usage](/content/help/en/swift-cli-usage-html.html) (274 words)
- [Nexus Repository API Reference](/content/help/en/api-reference-html.html) (95 words)
- [Self-Hosted Nexus Repository Feature Matrix](/content/help/en/nexus-repository-feature-matrix-html.html) (339 words)
- [EULA REST API](/content/help/en/eula-rest-api-html.html) (267 words)
- [Single-Node Cloud Resilient Deployment Using Azure](/content/help/en/single-node-cloud-resilient-deployment-example-using-azure-html.html) (2,928 words)
- [npm Security](/content/help/en/npm-security-html.html) (684 words)
- [APT Repositories](/content/help/en/apt-repositories-html.html) (1,391 words)
- [PyPI Repositories](/content/help/en/pypi-repositories-html.html) (351 words)
- [Terraform CLI Usage](/content/help/en/cli-usage-and-options-html.html) (385 words)
- [npm Registry](/content/help/en/npm-registry-html.html) (692 words)
- [Working With HMAC Payloads](/content/help/en/working-with-hmac-payloads-html.html) (167 words)
- [Create an OCI Repository](/content/help/en/create-an-oci-repository-html.html) (426 words)
- [Create a Pub Repository](/content/help/en/create-a-pub-repository-html.html) (311 words)
- [Privileges](/content/help/en/privileges-html.html) (2,097 words)
- [Enabling A Global Webhook Capability](/content/help/en/enabling-a-global-webhook-capability-html.html) (183 words)
- [Configure Pub with Nexus](/content/help/en/configure-pub-with-nexus-html.html) (322 words)
- [Conan Repositories](/content/help/en/conan-repositories-html.html) (1,190 words)
- [Email API](/content/help/en/email-api-html.html) (86 words)
- [Download artifacts using URI](/content/help/en/download-artifacts-using-uri-html.html) (65 words)
- [Searching for Components](/content/help/en/searching-for-components-html.html) (1,728 words)
- [Enabling A Repository Webhook Capability](/content/help/en/enabling-a-repository-webhook-capability-html.html) (175 words)
- [Pub CLI Usage](/content/help/en/pub-cli-usage-html.html) (285 words)
- [Bower Repositories](/content/help/en/bower-repositories-html.html) (1,257 words)
- [Configure OCI Repository](/content/help/en/configure-oci-repository-html.html) (444 words)
- [p2 Repositories](/content/help/en/p2-repositories-html.html) (404 words)
- [Docker Reverse Proxy Strategies](/content/help/en/docker-repository-reverse-proxy-strategies-html.html) (716 words)
- [Create a Helm Repository](/content/help/en/create-a-helm-repository-html.html) (463 words)
- [Blob Store API](/content/help/en/blob-store-api-html.html) (84 words)
- [Webhooks](/content/help/en/webhooks-html.html) (133 words)
- [Repository Import](/content/help/en/repository-import-html.html) (1,270 words)
- [Staging Concepts](/content/help/en/staging-concepts-html.html) (2,274 words)
- [Helm CLI Usage](/content/help/en/helm-cli-usage-html.html) (329 words)
- [Tagging](/content/help/en/tagging-html.html) (1,461 words)
- [npm audit](/content/help/en/npm-audit-html.html) (356 words)
- [Repository Manager Concepts](/content/help/en/repository-manager-concepts-html.html) (2,046 words)
- [High Availability Deployment in Azure](/content/help/en/option-4-high-availability-deployment-in-azure-html.html) (2,998 words)
- [Docker Authentication](/content/help/en/docker-authentication-html.html) (681 words)
- [Configuring npm](/content/help/en/configuring-npm-html.html) (227 words)
- [Pub or Flutter Repositories](/content/help/en/pub-repositories-html.html) (184 words)
- [Re-encryption in Nexus Repository](/content/help/en/re-encryption-in-nexus-repository-html.html) (1,536 words)
- [Download Cataloged Versions Only for Proxied Repositories](/content/help/en/download-cataloged-versions-only-for-proxied-repositories-html.html) (198 words)
- [Create a Go Repository](/content/help/en/create-a-go-repository-html.html) (418 words)
- [Configure Helm with Nexus](/content/help/en/configure-helm-with-nexus-html.html) (111 words)
- [Configure Conda with Nexus](/content/help/en/configure-conda-with-nexus-html.html) (651 words)
- [Ansible CLI Usage](/content/help/en/ansible-cli-usage-html.html) (383 words)
- [Pulling Images](/content/help/en/pulling-images-html.html) (289 words)
- [Pushing Images](/content/help/en/pushing-images-html.html) (367 words)
- [LDAP](/content/help/en/ldap-html.html) (2,097 words)
- [Configure Ansible with Nexus](/content/help/en/configure-ansible-with-nexus-html.html) (370 words)
- [Configurable Repository Fields](/content/help/en/configurable-repository-fields-html.html) (1,744 words)
- [Git LFS Repositories](/content/help/en/git-lfs-repositories-html.html) (461 words)
- [Configuring the Runtime Environment](/content/help/en/configuring-the-runtime-environment-html.html) (2,210 words)
- [Go CLI Usage](/content/help/en/go-cli-usage-html.html) (206 words)
- [Blob Stores](/content/help/en/blob-stores-html.html) (1,901 words)
- [Policy-Compliant Component Selection for npm](/content/help/en/policy-compliant-component-selection-for-npm-html.html) (106 words)
- [Create an Alpine Repository](/content/help/en/create-an-alpine-repository-html.html) (506 words)
- [AWS Simple Storage Service (S3)](/content/help/en/aws-simple-storage-service-s3-html.html) (1,688 words)
- [Deprecating npm Packages](/content/help/en/deprecating-npm-packages-html.html) (160 words)
- [Alpine CLI Usage](/content/help/en/alpine-cli-usage-html.html) (343 words)
- [Configure Go with Nexus](/content/help/en/configure-go-with-nexus-html.html) (249 words)
- [Sonatype for VS Code](/content/help/en/sonatype-for-vs-code-html.html): VSCode plugin, VSCode plugin (1,811 words)
- [Slow search performance with Postgres after upgrading to Nexus Repository 3.44.0+ in HA Preview – Sonatype Support](/content/support/hc/en-us/articles/12607156575507-slow-search-performance-with-postgres-after-upgrading-to-nexus-repository-3-44-0-in-ha-preview.html): From release 3.44.0 onwards, Nexus Repository 3 instances that use Postgres will require the pg_trgm (trigram) module to be installed... (437 words)
- [Staging](/content/help/en/staging-html.html) (1,138 words)
- [Go Repositories](/content/help/en/go-repositories-html.html) (295 words)
- [Docker Content Trust](/content/help/en/docker-content-trust-html.html) (270 words)
- [Create a Conda Repository](/content/help/en/create-a-conda-repository-html.html) (350 words)
- [Deployment in Google Cloud](/content/help/en/deploy-nexus-repository-to-google-cloud-html.html) (2,617 words)
- [SQL Search](/content/help/en/sql-search-html.html) (895 words)
- [Rolling Upgrades in High Availability](/content/help/en/nexus-repository-zero-downtime-upgrades-html.html) (1,223 words)
- [Create an Ansible Repository](/content/help/en/create-an-ansible-repository-html.html) (381 words)
- [Usage Metrics](/content/help/en/usage-metrics-html.html) (808 words)
- [How Components are Defined within Nexus Repository](/content/help/en/nexus-repository-component-definitions-html.html) (832 words)
- [Hosted Repository for Docker](/content/help/en/hosted-repository-for-docker-html.html) (159 words)
- [Migrating to a New Database](/content/help/en/migrating-to-a-new-database-html.html) (2,007 words)
- [Uploading Components](/content/help/en/uploading-components-html.html) (497 words)
- [Conda CLI Usage](/content/help/en/conda-cli-usage-html.html) (431 words)
- [CocoaPods Repositories](/content/help/en/cocoapods-repositories-html.html) (538 words)
- [Change Repository Blob Store](/content/help/en/change-repository-blob-store-html.html) (828 words)
- [Composer Repositories](/content/help/en/composer-repositories-html.html) (332 words)
- [Foreign Layers](/content/help/en/foreign-layers-html.html) (208 words)
- [License Management](/content/help/en/license-management-html.html) (1,261 words)
- [Pushing Images to a Group Repository](/content/help/en/pushing-images-to-a-group-repository-html.html) (135 words)
- [Content Replication](/content/help/en/content-replication-html.html) (883 words)
- [Docker Subdomain Connector](/content/help/en/docker-subdomain-connector-html.html) (261 words)
- [Browsing Repositories](/content/help/en/browsing-repositories-html.html) (516 words)
- [Usage Metrics for Nexus Repository Manager 2 (NXRM2)](/content/help/en/usage-metrics-for-nexus-repository-manager-2-nxrm2-html.html) (549 words)
- [Upgrading Nexus Repository in a Kubernetes Environment](/content/help/en/upgrading-nexus-repository-in-an-ha-environment-html.html) (590 words)
- [Configure Alpine with Nexus](/content/help/en/configure-alpine-with-nexus-html.html) (232 words)
- [Searching](/content/help/en/searching-html.html) (140 words)
- [Conda Repositories](/content/help/en/conda-repositories-html.html) (189 words)
- [User Tokens](/content/help/en/user-tokens-html.html) (1,421 words)
- [How to Configure HTTPS Protocols Used By Nexus Repository – Sonatype Support](/content/support/hc/en-us/articles/213465098/index.html): . Nexus Repository 2 officially sunsetted June 30, 2025. Visit my.sonatype.com for archived documentation. Migrate to Sonatype Nexus... (1,289 words)
- [Latest Central Repository topics - Sonatype Community](/content/community/c/central-repository/60/index.html): Ask questions and follow discussions about Central Repository. (531 words)
- [Migrating User Tokens from LDAP to SAML](/content/help/en/migrating-from-ldap-to-saml-html.html) (853 words)
- [Reset the Admin Password](/content/help/en/reset-the-admin-password-html.html) (882 words)
- [Understanding Your Usage](/content/help/en/understanding-your-usage-html.html) (396 words)
- [User Interface Overview](/content/help/en/user-interface-overview-162157-html.html) (399 words)
- [Component IQ](/content/help/en/component-iq-html.html) (136 words)
- [Capabilities](/content/help/en/capabilities-html.html) (581 words)
- [Ansible Repositories](/content/help/en/ansible-repositories-html.html) (174 words)
- [Viewing Asset Information](/content/help/en/viewing-asset-information-html.html) (399 words)
- [Install Nexus Repository with a PostgreSQL Database](/content/help/en/install-nexus-repository-with-a-postgresql-database-html.html) (1,539 words)
- [Viewing Component Information](/content/help/en/viewing-component-information-html.html) (396 words)
- [OpenID Connect](/content/help/en/openid-connect-html.html) (1,235 words)
- [Recovery Mode](/content/help/en/recovery-mode-html.html) (717 words)
- [Content Selectors](/content/help/en/content-selectors-html.html) (1,218 words)
- [Single-Node Cloud Resilient Deployment Example Using Google Cloud](/content/help/en/resilient-nexus-repository-deployment-to-google-cloud-html.html) (2,544 words)
- [Viewing Tags](/content/help/en/viewing-tags-html.html) (86 words)
- [Routing Rules](/content/help/en/routing-rules-html.html) (477 words)
- [Repository Health Check](/content/help/en/repository-health-check-html.html) (876 words)
- [Malware Risk](/content/help/en/malware-risk-html.html) (1,034 words)
- [Status Checks](/content/help/en/status-checks-html.html) (543 words)
- [Nexus One User Interface Overview](/content/help/en/nexus-one-user-interface-overview-html.html) (415 words)
- [Repository Export](/content/help/en/repository-export-html.html) (520 words)
- [Using Nexus Repository](/content/help/en/using-nexus-repository-html.html) (157 words)
- [How to Upgrade Nexus Repository 3.0.2 to 3.1.0 or Later – Sonatype Support](/content/support/hc/en-us/articles/231723267/index.html): These instructions are applicable if you are running Nexus Repository 3.0.0, 3.0.1, or 3.0.2.If you are upgrading from version 3.1.0 or... (272 words)
- [Working with Your User Profile](/content/help/en/working-with-your-user-profile-html.html) (137 words)
- [HTTP Request and Proxy Settings](/content/help/en/http-request-and-proxy-settings-html.html) (792 words)
- [Content Replication Use Cases](/content/help/en/content-replication-use-cases-html.html) (586 words)
- [Support Features](/content/help/en/support-features-html.html) (302 words)
- [Usage-Based Consumption Guide for Self-Hosted Nexus Repository Deployments](/content/help/en/usage-based-consumption-guide-for-self-hosted-html.html) (1,732 words)
- [Prometheus](/content/help/en/prometheus-html.html) (169 words)
- [Configure Crowd Integration](/content/help/en/configure-crowd-integration-html.html) (826 words)
- [Google Cloud Blob Store](/content/help/en/google-cloud-blob-store-html.html) (653 words)
- [Repository Actions](/content/help/en/repository-actions-html.html) (261 words)
- [Sonatype Nexus Repository System Requirements](/content/help/en/sonatype-nexus-repository-system-requirements-html.html) (1,663 words)
- [Upgrading to Nexus Repository 3.71.0 and Beyond](/content/help/en/upgrading-to-nexus-repository-3-71-0-and-beyond-html.html) (1,112 words)
- [Data Store](/content/help/en/data-store-html.html) (533 words)
- [Auditing](/content/help/en/auditing-html.html) (378 words)
- [Upgrade Wizard](/content/help/en/nexus-repository-3-upgrade-wizard-html.html) (1,294 words)
- [Nexus Repository FIPS 140-3 Compliance](/content/help/en/nexus-repository-fips-140-3-compliance-html.html) (1,351 words)
- [Repository Management](/content/help/en/repository-management-html.html) (398 words)
- [Azure Blob Store](/content/help/en/azure-blob-store-html.html) (528 words)
- [Authentication Attempt Rate Limiting](/content/help/en/authentication-attempt-rate-limiting-html.html) (322 words)
- [Upgrade Wizard Instructions](/content/help/en/upgrade-wizard-instructions-html.html) (1,124 words)
- [Nodes](/content/help/en/nodes-html.html) (243 words)
- [Feature Equivalency Matrix](/content/help/en/feature-equivalency-matrix-html.html) (498 words)
- [Support](/content/help/en/support-html.html) (1,173 words)
- [Sonatype Nexus Repository 3.91.0 - 3.91.1 Release Notes](/content/help/en/sonatype-nexus-repository-3-91-0-release-notes-html.html) (3,410 words)
- [System Information](/content/help/en/system-information-html.html) (83 words)
- [sonatype-2020-0196 | Security Details | Sonatype Guide](/content/guide/vulnerability/sonatype-2020-0196/index.html): Technical security analysis for sonatype-2020-0196. CVSS 10.0 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (2,234 words)
- [UI Settings Capability](/content/help/en/ui-settings-capability-html.html) (234 words)
- [Upgrading Staging](/content/help/en/upgrading-staging-html.html) (1,439 words)
- [Install Nexus Repository on OpenShift](/content/help/en/install-nexus-repository-on-openshift-html.html) (1,098 words)
- [Realms](/content/help/en/realms-html.html) (588 words)
- [Single-Node Cloud Resilient Deployment Using AWS](/content/help/en/single-node-cloud-resilient-deployment-example-using-aws-html.html) (1,676 words)
- [Upgrade from Nexus Repository 2](/content/help/en/upgrade-from-nexus-repository-2-html.html) (1,402 words)
- [Authentication via Remote User Token](/content/help/en/authentication-via-remote-user-token-html.html) (555 words)
- [Base URL Capability](/content/help/en/base-url-capability-html.html) (134 words)
- [Upgrading an H2 Database from 1.x to 2.x](/content/help/en/upgrade-h2-html.html) (693 words)
- [Branding Capability](/content/help/en/branding-capability-html.html) (83 words)
- [Roles](/content/help/en/roles-html.html) (817 words)
- [IP Allow List](/content/help/en/ip-allow-list-html.html) (616 words)
- [OrientDB to Self-Hosted PostgreSQL Migration](/content/help/en/orientdb-to-self-hosted-postgresql-migration-html.html) (560 words)
- [Migrating to a Resilient Deployment](/content/help/en/migrating-to-a-resilient-deployment-html.html) (519 words)
- [Users](/content/help/en/users-html.html) (756 words)
- [Single Data Center On-Premises Resilient Deployment Example Using Kubernetes](/content/help/en/single-data-center-on-premises-deployment-example-using-kubernetes-html.html) (1,252 words)
- [Atlassian Crowd Support](/content/help/en/atlassian-crowd-support-html.html) (135 words)
- [Migrating to an HA Deployment from a Legacy HA-C or a Resilient Deployment](/content/help/en/migrating-to-an-ha-deployment-from-a-legacy-ha-c-or-resilient-deployment-html.html) (418 words)
- [Nexus Repository Upgrade Paths](/content/help/en/nexus-repository-upgrade-paths-html.html) (783 words)
- [Migrating from Local Authentication to SAML](/content/help/en/migrating-from-local-authentication-to-saml-html.html) (147 words)
- [Access Control](/content/help/en/access-control-html.html) (781 words)
- [Operational Behaviour](/content/help/en/migrator-operational-behaviour-html.html) (584 words)
- [Local Authentication](/content/help/en/local-authentication-html.html) (152 words)
- [Upgrade Nexus Repository](/content/help/en/upgrade-nexus-repository-html.html) (1,032 words)
- [Migrate to Nexus Repository from Artifactory](/content/help/en/migrating-to-nexus-repository-from-artifactory-html.html) (586 words)
- [Upgrade Nexus Repository Java Version](/content/help/en/upgrade-nexus-repository-java-version-html.html) (391 words)
- [Getting Started with Nexus Repository Cloud](/content/help/en/nexus-repository-cloud-html.html) (2,052 words)
- [Sonatype Nexus Repository 3.88.0 Release Notes](/content/help/en/sonatype-nexus-repository-3-88-0-release-notes-html.html) (3,143 words)
- [Authentication](/content/help/en/authentication-html.html) (253 words)
- [Anonymous Access](/content/help/en/anonymous-access-html.html) (290 words)
- [Page Not Found - Sonatype Community](/content/community/u/mmartz/index.html) (34 words)
- [Community Edition Onboarding](/content/help/en/ce-onboarding-html.html) (890 words)
- [Run Behind a Reverse Proxy](/content/help/en/run-behind-a-reverse-proxy-html.html) (843 words)
- [AWS PrivateLink for Nexus Repository Cloud](/content/help/en/aws-privatelink-for-nexus-repository-cloud-html.html) (1,479 words)
- [Configuring Service Accounts and User Tokens - Nexus Repository Cloud](/content/help/en/configuring-service-accounts-and-user-tokens-nexus-repository-cloud-html.html) (1,141 words)
- [Configure the Migrator](/content/help/en/configure-the-migrator-html.html) (628 words)
- [Instance Migrator](/content/help/en/instance-migrator-html.html) (724 words)
- [Changes during the Upgrade Process](/content/help/en/changes-during-the-upgrade-process-html.html) (744 words)
- [Scaling with Proxy Nodes](/content/help/en/scaling-with-proxy-nodes-html.html) (1,539 words)
- [Run The Migrator](/content/help/en/run-the-migrator-html.html) (480 words)
- [Storage Planning](/content/help/en/storage-planning-html.html) (1,136 words)
- [Backup and Restore in Amazon Web Services](/content/help/en/backup-and-restore-in-amazon-web-services-html.html) (792 words)
- [Cross-Region Disaster Recovery](/content/help/en/cross-region-disaster-recovery-html.html) (1,808 words)
- [2023 Release Notes](/content/help/en/2023-release-notes-html.html) (1,818 words)
- [Restoring a Database Backup After Migration](/content/help/en/restoring-a-backup-html.html) (114 words)
- [Controlling Database Migrator Logging](/content/help/en/controlling-database-migrator-logging-html.html) (331 words)
- [Default Role](/content/help/en/default-role-html.html) (105 words)
- [2021 Release Notes](/content/help/en/2021-release-notes-html.html) (963 words)
- [Nexus Repository Database](/content/help/en/database-options-html.html) (935 words)
- [What to Choose - Instance Migrator or Database Migrator](/content/help/en/what-to-choose-instance-migrator-or-database-migrator-html.html) (605 words)
- [Securing Nexus Repository](/content/help/en/securing-nexus-repository-manager-html.html) (779 words)
- [Moving from a High Availability Deployment to a Single Instance](/content/help/en/moving-from-a-high-availability-deployment-to-a-single-instance-html.html) (114 words)
- [Nexus Repository Administration](/content/help/en/nexus-repository-administration-html.html) (107 words)
- [Sonatype Nexus Repository 3.90.0 - 3.90.4 Release Notes](/content/help/en/sonatype-nexus-repository-3-90-0-release-notes-html.html) (3,137 words)
- [Migrating to Shared Blob Storage](/content/help/en/migrating-to-shared-blob-storage-html.html) (176 words)
- [Sonatype Nexus Repository 3.93.0 - 3.93.2 Release Notes](/content/help/en/sonatype-nexus-repository-3-93-0-release-notes-html.html) (2,982 words)
- [sonatype-2026-005081 | Security Details | Sonatype Guide](/content/guide/vulnerability/sonatype-2026-005081/index.html): Technical security analysis for sonatype-2026-005081. CVSS 8.8 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (68 words)
- [Retry Limit Configuration](/content/help/en/retry-limit-configuration-html.html) (245 words)
- [Nexus Repository 3.38.0 - 3.38.1 Release Notes](/content/help/en/nexus-repository-3-38-0-3-38-1-release-notes-html.html) (1,286 words)
- [Reverting Back to OrientDB](/content/help/en/reverting-back-to-orientdb-html.html) (170 words)
- [Prepare a Backup](/content/help/en/prepare-a-backup-html.html) (712 words)
- [Storage Guide](/content/help/en/storage-guide-html.html) (435 words)
- [Email Server Configuration](/content/help/en/email-server-configuration-html.html) (479 words)
- [Directories](/content/help/en/directories-html.html) (372 words)
- [Determining Current Database](/content/help/en/determining-current-database-html.html) (85 words)
- [Nexus Repository Professional Features](/content/help/en/nexus-repository-pro-features-html.html) (1,630 words)
- [Deployment Pattern Library](/content/help/en/deployment-pattern-library-html.html) (1,003 words)
- [CVE-2021-29159 Nexus Repository Manager 3 - Cross Site Scripting XSS – Sonatype Support](/content/support/hc/en-us/articles/1500005031082/index.html): Sonatype Nexus Security Advisory: Date: April 22, 2021 Affected Versions: All Nexus Repository Manager 3 OSS/Pro versions between 3.23... (511 words)
- [Post-Deployment Steps for HA](/content/help/en/post-deployment-steps-for-ha-html.html) (407 words)
- [Keeping Disk Usage Low](/content/help/en/keeping-disk-usage-low-html.html) (301 words)
- [Configure the Backup Task](/content/help/en/configure-and-run-the-backup-task-html.html) (206 words)
- [Manual High Availability Deployment](/content/help/en/option-1-manual-high-availability-deployment-html.html) (504 words)
- [Restore an H2 Database](/content/help/en/restore-an-h2-database-html.html) (183 words)
- [Sonatype Nexus Repository 3.70.0 - 3.70.5 Release Notes](/content/help/en/sonatype-nexus-repository-3-70-0-release-notes-html.html) (1,880 words)
- [Backup and Restore](/content/help/en/backup-and-restore-html.html) (158 words)
- [Using Replicated Blob Stores](/content/help/en/using-replicated-blob-stores-html.html) (211 words)
- [Star Pattern](/content/help/en/star-pattern-html.html) (322 words)
- [Nexus Repository vs. IQ Server High Availability](/content/help/en/sonatype-nexus-repository-high-availability-vs-sonatype-iq-server-high-availability-html.html) (285 words)
- [High Availability Deployment](/content/help/en/high-availability-deployment-html.html) (452 words)
- [Predictable S3 Bucket URLs for Nexus Repository Cloud](/content/help/en/predictable-s3-bucket-urls-html.html) (307 words)
- [Nexus Repository 3.37.0 - 3.37.3 Release Notes](/content/help/en/nexus-repository-3-37-0-3-37-3-release-notes-html.html) (919 words)
- [Validating Your HA Deployment](/content/help/en/validating-your-ha-deployment-html.html) (313 words)
- [Bi-Directional Proxying](/content/help/en/bi-directional-proxying-html.html) (211 words)
- [Scaling with Proxies](/content/help/en/scaling-with-proxies-html.html) (199 words)
- [Sonatype Nexus Repository 3.61.0 Release Notes](/content/help/en/sonatype-nexus-repository-3-61-0-release-notes-html.html) (1,056 words)
- [2022 Release Notes](/content/help/en/2022-release-notes-html.html) (795 words)
- [Nexus Repository 3.29.0 - 3.29.2 Release Notes](/content/help/en/nexus-repository-3-29-0-3-29-2-release-notes-html.html) (838 words)
- [Migrate Nexus Repository Clustered Deployments to Use External Secrets Operator](/content/help/en/migrate-to-use-external-secrets-operator-html.html) (93 words)
- [Nexus Repository 3.33.0 - 3.33.1 Release Notes](/content/help/en/nexus-repository-3-33-0-3-33-1-release-notes-html.html) (380 words)
- [2024 Release Notes](/content/help/en/2024-release-notes-html.html) (1,606 words)
- [Sonatype Nexus Repository 3.89.0 Release Notes](/content/help/en/sonatype-nexus-repository-3-89-0-release-notes-html.html) (2,729 words)
- [Sonatype Nexus Repository 3.86.0 - 3.86.2 Release Notes](/content/help/en/sonatype-nexus-repository-3-86-0-release-notes-html.html) (1,602 words)
- [Sonatype Guide | Open Source Security Intelligence & Vulnerability Database](/content/guide/api/index.html): Search open source components and vulnerabilities with AI-powered security intelligence. Get real-time upgrade recommendations, CVSS scores, and license analysis for safer software development. (870 words)
- [Sonatype Nexus Repository 3.92.0 - 3.92.3 Release Notes](/content/help/en/sonatype-nexus-repository-3-92-0-release-notes-html.html) (2,362 words)
- [Nexus Repository Memory Overview](/content/help/en/nexus-repository-memory-overview-html.html) (472 words)
- [Content Replication Pattern](/content/help/en/content-replication-pattern-html.html) (177 words)
- [Combination Active/Active High Availability + Disaster Recovery Site](/content/help/en/combination-active-active-high-availability-disaster-recovery-site-html.html) (200 words)
- [Disaster Recovery Site](/content/help/en/disaster-recovery-site-html.html) (125 words)
- [Cloud Active/Passive Resiliency](/content/help/en/cloud-active-passive-resiliency-html.html) (107 words)
- [Planning Your Implementation](/content/help/en/planning-your-implementation-html.html) (296 words)
- [Combination Active/Active High Availability + Disaster Recovery Site + Federated Repositories](/content/help/en/combination-active-active-high-availability-disaster-recovery-site-federated-repositories-html.html) (152 words)
- [Federated Repositories](/content/help/en/federated-repositories-html.html) (214 words)
- [Sonatype Nexus Repository 3.62.0 Release Notes](/content/help/en/sonatype-nexus-repository-3-62-0-release-notes-html.html) (1,372 words)
- [Sonatype Nexus Repository 3.48.0 Release Notes](/content/help/en/sonatype-nexus-repository-3-48-0-release-notes-html.html) (634 words)
- [Installing the Trigram Module](/content/help/en/installing-the-trigram-module-html.html) (93 words)
- [Adjusting the File Handle Limits](/content/help/en/adjusting-file-handle-limits-html.html) (374 words)
- [Requirements for High Availability](/content/help/en/system-requirements-for-high-availability-deployments-html.html) (486 words)
- [Nexus Repository 3.39.0 Release Notes](/content/help/en/nexus-repository-3-39-0-release-notes-html.html) (846 words)
- [Backup/Same-Site Restore](/content/help/en/backup-same-site-restore-html.html) (191 words)
- [Nexus Repository 3.41.0 - 3.41.1 Release Notes](/content/help/en/nexus-repository-3-41-0-3-41-1-release-notes-html.html) (813 words)
- [Nexus Repository 3.36.0 Release Notes](/content/help/en/nexus-repository-3-36-0-release-notes-html.html) (652 words)
- [Nexus Repository 3.31.0 - 3.31.1 Release Notes](/content/help/en/nexus-repository-3-31-0-3-31-1-release-notes-html.html) (544 words)
- [Nexus Repository 3.44.0 Release Notes](/content/help/en/nexus-repository-3-44-0-release-notes-html.html) (481 words)
- [On-Prem Active/Passive Resiliency](/content/help/en/on-prem-active-passive-resiliency-html.html) (114 words)
- [Cloud High Availability](/content/help/en/cloud-active-active-high-availability-html.html) (89 words)
- [Nexus Repository 3.30.0 - 3.30.1 Release Notes](/content/help/en/nexus-repository-3-30-0-3-30-1-release-notes-html.html) (368 words)
- [Nexus Repository 3.40.0 - 3.40.1 Release Notes](/content/help/en/nexus-repository-3-40-0-3-40-1-release-notes-html.html) (471 words)
- [Advanced Database Memory Tuning](/content/help/en/advanced-database-memory-tuning-html.html) (278 words)
- [Repository Size Calculation Performance Data](/content/help/en/repository-size-calculation-performance-data-html.html) (224 words)
- [On-Prem Active/Active High Availability](/content/help/en/on-prem-active-active-high-availability-html.html) (88 words)
- [hubfs/1-2023_new_site_assets/sscr/8th-annual-sscr-digital-0206-20update-pdf.html](/content/hubfs/1-2023_new_site_assets/sscr/8th-annual-sscr-digital-0206-20update-pdf.html) (2,125 words)
- [Nexus Repository 3.35.0 Release Notes](/content/help/en/nexus-repository-3-35-0-release-notes-html.html) (556 words)
- [Vulnerabilities | Sonatype Guide | Sonatype Guide](/content/guide/vulnerabilities/index.html): Search and browse security vulnerabilities and CVEs. Get detailed security intelligence, CVSS scores, and remediation guidance with Sonatype Guide. (435 words)
- [Sonatype Nexus Repository 3.79.0 - 3.79.1 Release Notes](/content/help/en/sonatype-nexus-repository-3-79-0-release-notes-html.html) (1,398 words)
- [Nexus Repository Telemetry](/content/help/en/nexus-repository-telemetry-html.html) (269 words)
- [Sonatype Nexus Repository 3.53.0 - 3.53.1 Release Notes](/content/help/en/sonatype-nexus-repository-3-53-0-3-53-1-release-notes-html.html) (1,224 words)
- [Recalculate Blob Store Storage Task Performance Testing](/content/help/en/recalculate-blob-store-storage-performance-testing-html.html) (228 words)
- [Sonatype Nexus Repository 3.68.0 - 3.68.1 Release Notes](/content/help/en/sonatype-nexus-repository-3-68-0-release-notes-html.html) (1,094 words)
- [Adjust the PostgreSQL Max Connections](/content/help/en/postgresql-max-connections-html.html) (167 words)
- [Troubleshooting – Sonatype Support](/content/support/hc/en-us/sections/203012768-troubleshooting/index.html): Nexus Repository Manager 3 specific troubleshooting articles. (348 words)
- [cryptography 49.0.0 | Sonatype Guide](/content/guide/component/pypi/cryptography/49-0-0.html): Comprehensive security analysis for cryptography version 49.0.0. No known vulnerabilities. License: Apache-2.0 or BSD-3-Clause. View dependencies, vulnerabilit… (38 words)
- [Nexus Repository 3.32.0 - 3.32.1 Release Notes](/content/help/en/nexus-repository-3-32-0-3-32-1-release-notes-html.html) (238 words)
- [Nexus Repository 3.43.0 Release Notes](/content/help/en/nexus-repository-3-43-0-release-notes-html.html) (379 words)
- [Performance Data](/content/help/en/nexus-repository-performance-data-html.html) (49 words)
- [Sonatype Nexus Repository 3.83.0 - 3.83.2 Release Notes](/content/help/en/sonatype-nexus-repository-3-83-0-release-notes-html.html) (1,449 words)
- [Sonatype Nexus Repository 3.80.0 Release Notes](/content/help/en/sonatype-nexus-repository-3-80-0-release-notes-html.html) (1,517 words)
- [Nexus Repository 3.42.0 Release Notes](/content/help/en/nexus-repository-3-42-0-release-notes-html.html) (319 words)
- [Sonatype Nexus Repository 3.94.0 Release Notes](/content/help/en/sonatype-nexus-repository-3-94-0-release-notes-html.html) (1,436 words)
- [Nexus Repository 3.47.0 - 3.47.1 Release Notes](/content/help/en/nexus-repository-3-47-0-3-47-1-release-notes-html.html) (395 words)
- [Sonatype Nexus Repository 3.65.0 Release Notes](/content/help/en/sonatype-nexus-repository-3-65-0-release-notes-html.html) (986 words)
- [Nexus Repository 3.45.0 - 3.45.1 Release Notes](/content/help/en/nexus-repository-3-45-0-3-45-1-release-notes-html.html) (327 words)
- [Sonatype Nexus Repository 3.69.0 Release Notes](/content/help/en/sonatype-nexus-repository-3-69-0-release-notes-html.html) (903 words)
- [Sonatype Nexus Repository 3.85.0 - 3.85.1 Release Notes](/content/help/en/sonatype-nexus-repository-3-85-0-release-notes-html.html) (1,186 words)
- [Sonatype Nexus Repository 3.67.0 - 3.67.1 Release Notes](/content/help/en/sonatype-nexus-repository-3-67-0-release-notes-html.html) (640 words)
- [Sonatype Nexus Repository 3.63.0 Release Notes](/content/help/en/sonatype-nexus-repository-3-63-0-release-notes-html.html) (659 words)
- [Sonatype Nexus Repository 3.74.0 Release Notes](/content/help/en/sonatype-nexus-repository-3-74-0-release-notes-html.html) (1,015 words)
- [Sonatype Nexus Repository 3.54.0 - 3.54.1 Release Notes](/content/help/en/sonatype-nexus-repository-3-54-0-3-54-1-release-notes-html.html) (829 words)
- [Nexus Repository 3.46.0 Release Notes](/content/help/en/nexus-repository-3-46-0-release-notes-html.html) (311 words)
- [MCP Server | Sonatype Guide | Sonatype Guide](/content/guide/mcp/index.html): Make AI-assisted coding easier with Sonatype's MCP server. Get cloud-hosted dependency intelligence in your IDE. Ensure security and quality at the source. (587 words)
- [Sonatype Nexus Repository 3.77.0 - 3.77.2 Release Notes](/content/help/en/sonatype-nexus-repository-3-77-0-release-notes-html.html) (1,070 words)
- [Sonatype Nexus Repository 3.57.0 - 3.57.1 Release Notes](/content/help/en/sonatype-nexus-repository-3-57-0-3-57-1-release-notes-html.html) (764 words)
- [Sonatype Nexus Repository 3.60.0 Release Notes](/content/help/en/sonatype-nexus-repository-3-60-0-release-notes-html.html) (511 words)
- [Sonatype Nexus Repository 3.72.0 Release Notes](/content/help/en/sonatype-nexus-repository-3-72-0-release-notes-html.html) (780 words)
- [Find and Fix Springshell](/content/help/en/find-and-fix-springshell-html.html) (1,637 words)
- [Sonatype Nexus Repository 3.59.0 Release Notes](/content/help/en/sonatype-nexus-repository-3-59-0-release-notes-html.html) (717 words)
- [hubfs/1-2025_website-assets/resource_files/whitepaper_attacking_assembly_line/attacking-assembly-line-pdf.html](/content/hubfs/1-2025_website-assets/resource_files/whitepaper_attacking_assembly_line/attacking-assembly-line-pdf.html) (2,386 words)
- [Sonatype Nexus Repository 3.51.0 Release Notes](/content/help/en/sonatype-nexus-repository-3-51-0-release-notes-html.html) (405 words)
- [Sonatype Nexus Repository 3.66.0 Release Notes](/content/help/en/sonatype-nexus-repository-3-66-0-release-notes-html.html) (886 words)
- [Sonatype Nexus Repository 3.52.0 Release Notes](/content/help/en/sonatype-nexus-repository-3-52-0-release-notes-html.html) (167 words)
- [Sonatype Nexus Repository 3.84.0 - 3.84.2 Release Notes](/content/help/en/sonatype-nexus-repository-3-84-0-release-notes-html.html) (825 words)
- [Sonatype Nexus Repository 3.75.0 - 3.75.1 Release Notes](/content/help/en/sonatype-nexus-repository-3-75-0-release-notes-html.html) (711 words)
- [Sonatype Nexus Repository 3.55.0 Release Notes](/content/help/en/sonatype-nexus-repository-3-55-0-release-notes-html.html) (436 words)
- [Sonatype Nexus Repository 3.81.0 - 3.81.1 Release Notes](/content/help/en/sonatype-nexus-repository-3-81-0-release-notes-html.html) (893 words)
- [Sonatype Nexus Repository 3.76.0 - 3.76.1 Release Notes](/content/help/en/sonatype-nexus-repository-3-76-0-release-notes-html.html) (713 words)
- [Using Self-Signed Certificates with Nexus Repository and Docker Daemon – Sonatype Support](/content/support/hc/en-us/articles/217542177-using-self-signed-certificates-with-nexus-repository-manager-and-docker-daemon.html): .  Background A private Docker registry such as Nexus Repository 3 will require authentication from your users in order to publish Docker... (758 words)
- [Sonatype Nexus Repository 3.58.0 - 3.58.1 Release Notes](/content/help/en/sonatype-nexus-repository-3-58-0-3-58-1-release-notes-html.html) (573 words)
- [Sonatype Nexus Repository 3.64.0 Release Notes](/content/help/en/sonatype-nexus-repository-3-64-0-release-notes-html.html) (609 words)
- [2026 Self-Hosted Nexus Repository Release Notes](/content/help/en/nexus-repository-2026-release-notes-html.html) (671 words)
- [hubfs/1-2023-20new-20site-20assets/sscr/8th-annual-sscr-digital-0206-20update-pdf.html](/content/hubfs/1-2023-20new-20site-20assets/sscr/8th-annual-sscr-digital-0206-20update-pdf.html) (1,420 words)
- [Sonatype Nexus Repository 3.56.0 Release Notes](/content/help/en/sonatype-nexus-repository-3-56-0-release-notes-html.html) (307 words)
- [Sonatype Guide Pricing and Plans | Sonatype Guide](/content/guide/pricing/index.html): Explore Sonatype Guide plans. Start free with 500 credits. Scale effortlessly with package research, vulnerability analysis, and MCP integration. (100 words)
- [Sonatype Nexus Repository 3.82.0 - 3.82.1 Release Notes](/content/help/en/sonatype-nexus-repository-3-82-0-release-notes-html.html) (806 words)
- [Latest Community Announcements/Welcome topics - Sonatype Community](/content/community/c/community-announcements/welcome/48/index.html): Welcome to the Sonatype Community! We’re glad you’re here. Introduce yourself here and tell us a little more about you by starting a new topic in this category. (96 words)
- [Components | Sonatype Guide | Sonatype Guide](/content/guide/components/index.html): Search and browse open source components across all ecosystems. View quality metrics, security scores, and licensing information with Sonatype Guide. (4,694 words)
- [Release Integrity](/content/help/en/release-integrity-html.html) (691 words)
- [Latest Sonatype Nexus Repository/Best Practices topics - Sonatype Community](/content/community/c/nexus-repository/best-practices/55/index.html): A place to discover and discuss best practices for using Sonatype Nexus Repository. (1,232 words)
- [Latest Sonatype Labs topics - Sonatype Community](/content/community/c/sonatype-labs/32/index.html): Ask questions and discuss Sonatype Labs experimental features, including Data Insights. (94 words)
- [Size S - Sonatype IQ - GCP Cloud-Native Reference Architecture](/content/help/en/iq-s-gcp-reference-architecture-html.html) (494 words)
- [Size S - Sonatype Nexus Repository - AWS Cloud-Native Reference Architecture](/content/help/en/nexus-repository-s-aws-reference-architecture-html.html) (490 words)
- [Size S - Sonatype IQ - AWS Cloud-Native Reference Architecture](/content/help/en/iq-s-aws-reference-architecture-html.html) (545 words)
- [Sonatype Support](/content/support/hc/en-us/index.html) (155 words)
- [Sonatype JFrog Artifactory Migration Services](/content/hubfs/1-2025_website-assets/professional-20services-20datasheets/sonatype-20jfrog-20artifactory-20migration-20services-20datasheet-pdf.html) (548 words)
- [Sonatype Auditor Sunsetting](/content/help/en/sonatype-auditor-sunsetting-html.html) (139 words)
- [Sonatype IQ Cloud Migration Services](/content/hubfs/1-2025_website-assets/professional-20services-20datasheets/sonatype-20iq-20cloud-20migration-20services-20datasheet-pdf.html) (533 words)
- [Sonatype Repo Cloud Migration Services](/content/hubfs/1-2025_website-assets/professional-20services-20datasheets/sonatype-20repo-20cloud-20migration-20services-20datasheet-pdf.html) (553 words)
- [Sonatype Nexus Repository Advanced Deployment](/content/hubfs/1-2025_website-assets/professional-20services-20datasheets/sonatype-20nexus-20repository-20advanced-20deployment-20datasheet-pdf.html) (486 words)
- [CVE-2026-22795 | Security Details | Sonatype Guide](/content/guide/vulnerability/cve-2026-22795/index.html): Technical security analysis for CVE-2026-22795. CVSS 5.5 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (267 words)
- [CVE-2025-69420 | Security Details | Sonatype Guide](/content/guide/vulnerability/cve-2025-69420/index.html): Technical security analysis for CVE-2025-69420. CVSS 7.5 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (250 words)
- [Advanced Deployment Datasheets - Updated](/content/hubfs/1-2025_website-assets/professional-20services-20datasheets/sonatype-20lifecycle-20firewall-20advanced-20deployment-20datasheet-pdf.html) (493 words)
- [CVE-2025-69421 | Security Details | Sonatype Guide](/content/guide/vulnerability/cve-2025-69421/index.html): Technical security analysis for CVE-2025-69421. CVSS 7.5 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (196 words)
- [Sonatype LC/FW Optimization Assessment](/content/hubfs/1-2025_website-assets/professional-20services-20datasheets/sonatype-20lifecycle-repository-20firewall-20optimization-20assessment-20datasheet-pdf.html) (440 words)
- [Sonatype Nexus Repository Optimization Assessment](/content/hubfs/1-2025_website-assets/professional-20services-20datasheets/sonatype-20nexus-20repository-20optimization-20assessment-20datasheet-pdf.html) (489 words)
- [What Are the Best SCA Tools? | Sonatype Comparison](/content/compare/best-sca-tools/index.html): What are the best SCA tools? Learn how to select the best software composition analysis solution and see how Sonatype Lifecycle stacks up.  (2,256 words)
- [Events Term and Conditions – Sonatype](/content/events-terms-and-conditions/index.html): Our Terms and conditions for events to ensure a smooth and successful experience. 📝 Visit our page now and learn more. (2,155 words)
- [Android Application Development | Maven: Complete Reference](/content/maven-complete-reference/android-application-development-with-maven/index.html): Delve into Android Application Development with Maven in Chapter 14 of the Maven Definitive Guide by Sonatype. (3,867 words)
- [Book a Demo of Sonatype Firewall](/content/request-a-demo-firewall/index.html): Stop malicious open source components from entering the SDLC. Book a demo to see how Sonatype Firewall can keep your code safe from threats. (164 words)
- [sonatype-2020-1222 | Security Details | Sonatype Guide](/content/guide/vulnerability/sonatype-2020-1222/index.html): Technical security analysis for sonatype-2020-1222. CVSS 10.0 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (63 words)
- [Malware Monthly: Insights into Malicious Packages & Attacks](/content/blog/malware-monthly-december-2022/index.html): Discover the latest findings on malicious packages in software registries from December 2022, including detailed analyses of new tactics used by attackers. (1,352 words)
- [2026 State of the Software Supply Chain Report | Sonatype](/content/state-of-the-software-supply-chain/introduction/index.html): Explore the software supply chain landscape, emphasizing the need for responsible open source consumption, enhanced security, and transparency. (950 words)
- [OSS Security: A Guide to Open Source Software Risk | Sonatype](/content/blog/a-guide-for-open-source-software-oss-security/index.html): Learn how to evaluate OSS security risks, from open source vulnerabilities and dependency management to SBOMs, SCA tools, and software supply chain security. (2,084 words)
- [See Sonatype SBOM Manager in Action | Sonatype Demo](/content/request-a-demo-sbom-manager/index.html): Streamline SBOM governance with Sonatype SBOM Manager. Request a demo to discover how to manage SBOMs efficiently to meet regulatory compliance. (181 words)
- [How to Secure Jackson-Databind Deserialization Vulnerability](/content/blog/jackson-databind-the-end-of-the-blacklist/index.html): Our October Nexus Intelligence Insight takes a second look at a popular component that's both a blessing and a curse to developers - jackson-databind.  (706 words)
- [DevOps Pioneers Navigate Organizational Transformation](/content/blog/devops-pioneers-navigate-organizational-transformation.html): Read about Sonatype’s DevOps Download webinar with Gene Kim who discusses how DevOps pioneers are catalyzing significant shifts within organizations (769 words)
- [Best Practices to Harness AI in Software Supply Chains](/content/blog/build-smarter-with-ai-and-your-software-supply-chain.html): Manage open source AI/ML models using proven software supply chain principles. Learn best practices for governance and risk in AI-driven development. (1,045 words)
- [hubfs/1-2023-20new-20site-20assets/cheat-20sheets/cra-20checklist-20infographic-pdf.html](/content/hubfs/1-2023-20new-20site-20assets/cheat-20sheets/cra-20checklist-20infographic-pdf.html) (626 words)
- [Manage Dependencies with Sonatype's MCP Server | Sonatype](/content/products/sonatype-mcp-server/index.html): Enhance your AI coding with Sonatype Guide's MCP server, ensuring secure, compliant dependencies for faster and more reliable software development. (833 words)
- [What Is Dependency Confusion in the Federal Sector?](/content/blog/what-is-dependency-confusion-and-why-does-it-matter-in-the-federal-sector.html): Developers in the federal space are not immune from dependency confusion attacks. (1,631 words)
- [Sonatype Nexus Repository vs. JFrog Artifactory | Guide](/content/resources/guides/sonatype-vs-jfrog/index.html): Compare Sonatype Nexus Repository and JFrog Artifactory head-to-head. Discover why Nexus Repository is the favorite among developers. (1,105 words)
- [What is a Software Supply Chain? | Sonatype](/content/resources/articles/what-is-software-supply-chain/index.html): Learn how software supply chains work, the risks of software supply chain security vulnerabilities, and how to manage software dependencies securely.  (1,263 words)
- [NuGet Repositories](/content/help/en/nuget-repositories-html.html) (293 words)
- [Sign Up for Sonatype Guide | Sonatype Guide](/content/guide/register/index.html): Create your free Sonatype Guide account. Get 500 credits, package research, vulnerability analysis, MCP integration, and API access. No credit card required. (52 words)
- [Why You Need a Software Bill of Materials More Than Ever](/content/blog/why-you-need-a-software-bill-of-materials-more-than-ever.html): Enterprises need to know what components are in their software at all times. If you don't have a software bill of materials, you're already behind.  (1,095 words)
- [The First Mile of Trusted AI Development | Sonatype](/content/blog/the-first-mile-of-trusted-ai-development/index.html): Sonatype Guide is the new intelligence layer for modern development, built for both humans and AI. (1,240 words)
- [hubfs/1-2023_new_site_assets/cheat-20sheets/cra-20checklist-20infographic-pdf.html](/content/hubfs/1-2023_new_site_assets/cheat-20sheets/cra-20checklist-20infographic-pdf.html) (497 words)
- [Optimizing Software Dependency Management for Better Results](/content/blog/dependency-management-versions-choice-and-the-software-supply-chain.html): The components that software developers rely upon are moving forward, but effective software supply chain management is more than being up to date. (871 words)
- [Malware Monthly: Insights on Software Supply Chain Attacks](/content/blog/malware-monthly-november-2022/index.html): Stay ahead of software threats and uncover the latest malicious packages and security vulnerabilities in software registries with insights from Sonatype. (832 words)
- [Struts2 Exploited Again. Did Anyone Bother to Tell You?](/content/blog/2017-struts2-vulnerability-exploit-speed-matters/index.html): Stay informed about the latest Struts2 RCE vulnerability and learn how to stay protected with Sonatype's advanced detection and remediation tools. (1,118 words)
- [LLM Embedding Security: Vector Database Risks | Sonatype](/content/blog/llm-vector-and-embedding-risks-and-how-to-defend-against-them.html): Understand LLM embedding security risks, from AI data leakage to vector database vulnerabilities, and learn how to protect your software supply chain. (859 words)
- [Using Webhooks to Integrate Lifecycle With Red Hat Quay](/content/blog/using-webhooks-to-integrate-with-quay-part-2/index.html): How to add security to your CI/CD pipeline quickly with Nexus Lifecycle, Red Hat Quay, and Twistlock, all without disrupting ongoing development. (714 words)
- [Malware and vulnerabilities analogies  | Sonatype Guide](/content/resources/guides/analogies-and-metaphors-in-securing-software/index.html): Learn the difference between malware and vulnerabilities through analogies and metaphors that clarify complex cybersecurity topics. (881 words)
- [Two New RubyGems Laced with Cryptocurrency-Stealing Malware](/content/blog/rubygems-laced-with-bitcoin-stealing-malware/index.html): Two RubyGems with cryptocurrency-stealing malware were removed, highlighting the growing threat of software supply chain attacks in 2020. (1,098 words)
- [The 3 Ways of DevOps: A Framework for Transformation](/content/blog/principle-based-devops-frameworks-three-ways/index.html): Explore the DevOps Three Ways framework: Flow, Feedback, and Continuous Learning. Learn DevOps principles to accelerate and improve software delivery. (823 words)
- [Accelerate Software Delivery with the DoD's SWFT Initiative](/content/blog/dod-ready-software-embracing-the-swft-initiative-with-confidence.html): Learn how the Department of Defense's new initiative is reshaping software delivery and how Sonatype helps teams stay agile, compliant, and secure. (1,020 words)
- [npm Package Could Have Brought Down Cloudflare's Entire CDN](/content/blog/this-npm-package-could-have-brought-down-cloudflares-entire-cdn-and-millions-of-websites.html): Cloudflare has patched a critical vulnerability in its open source content delivery network, CDNJS, that threatened security, integrity, and availability. (848 words)
- [Simplifying Sonatype Platform Setup with Docker Compose](/content/blog/docker-compose-for-nexus-platform/index.html): Tutorial on how to use docker compose to run Sonatype's solutions in containers. (872 words)
- [2024 State of the SSC Report | Best Practices](/content/state-of-the-software-supply-chain/2024/best-practices/index.html): Approach open source consumption with diligence by leveraging the right tools, processes, and best practices to manage risk.  (1,463 words)
- [Sonatype Partners with SVA System Vertrieb Alexander GmbH](/content/press-releases/sonatype-partners-with-sva-system-vertrieb-alexander-gmbh.html): Sonatype partners with SVA to help enterprises build vital open source security programs, mitigate risk and build software more securely
 (675 words)
- [Octopus Scanner Malware Compromises OSS Projects on GitHub](/content/blog/octopus-scanner-compromises-26-oss-projects-on-github.html): The Octopus Scanner malware compromised 26 open source projects hosted on GitHub in a new form of software supply chain attack targeting NetBeans projects. (951 words)
- [Keep Software Dependencies Secure with Sonatype Lifecycle](/content/blog/keeping-third-party-dependencies-in-check-with-nexus.html): Sonatype's Nexus Lifecycle (IQ Server) helps teams with big ambitions better manage their third-party dependencies. (686 words)
- [Explore Software Security at Scale with Sonatype | Success Story](/content/customer-stories/software-innovation-and-security-at-scale/index.html): Sonatype Lifecycle transformed a major financial organization's application security, achieving 3x faster onboarding, 335% more scans, and reduced risk. (1,163 words)
- [What Do Log4Shell and a Global Pandemic Have in Common?](/content/blog/log4shell-and-a-global-pandemic-have-in-common/index.html): A look at development through the lens of weddings, including long-term planning, contingencies, and disasters.  A video talk from this years DEVOXX. (859 words)
- [Sonatype Introduces AI/ML Component Detection | Sonatype](/content/press-releases/sonatype-introduces-cutting-edge-ai/ml-component-detection/index.html): Sonatype introduces first-of-its-kind AI/ML component detection, revolutionizing software development. Explore how to gain control over AI/ML components. (671 words)
- [PyPI Package Targets Windows With NullRAT Info-Stealer](/content/blog/quoi-feur-from-meme-to-malware-pypi-package-targets-windows-with-nullrat-info-stealer.html): A malicious PyPI package called ‘feur’ was caught by Sonatype’s automated malware detection systems (631 words)
- [Happy Developers Are the Key to Secure Financial Software](/content/blog/money-doesnt-buy-happiness-but-happy-developers-protect-money.html): Developers in mature DevOps practices are 1.2x happier than their grumpy peers in the financial sector. This impacts software security, and your wallet. (885 words)
- [Maven by Example: A Multi-Module Project | Sonatype Guide](/content/resources/guides/maven-by-example/multi-module-project/index.html): Learn to create a multi-module Maven project utilizing best practices for project organization and dependencies. (1,761 words)
- [DevOps At the US Patent and Trademark Office](/content/blog/devops-at-the-us-patent-and-trademark-office/index.html): The US Patent and Trademark Office's Fee Processing Next Generation (FPNG) is an example of a government agency moving to a devops development environment. (843 words)
- [TPG Leads $80 Million Investment in Sonatype | Sonatype](/content/press-releases/tpg-leads-80-million-investment-in-sonatype/index.html): Sonatype secures an $80 million investment led by TPG to boost global growth, enhance automated open source governance, and expand its Nexus platform. (571 words)
- [SBOM Best Practices for Development Teams | Sonatype Guide](/content/resources/guides/sbom-best-practices-for-development-teams/index.html): Adopt best practices for integrating SBOMs into your SDLC, ensuring security, compliance, and efficient management of software dependencies. (805 words)
- [Identify Vulnerable Components Using Sonatype Lifecycle](/content/blog/how-to-find-out-applications-that-have-a-given-component.html): Using the REST API from Nexus Lifecycle to identify new vulnerable components across your application portfolio. (321 words)
- [Using SBOMs to Power SCA | Sonatype Webinar](/content/resources/webinars/using-sboms-to-power-sca/index.html): Discover how to enhance software supply chain security by transforming SBOMs into dynamic assets that improve governance without impacting developer speed., Engineering teams face immense pressure to innovate faster while maintaining security across complex software supply chains. Static Software Bill of Mat... (298 words)
- [The Hidden National Security Threat Inside AI-Driven Software](/content/blog/the-hidden-national-security-threat-inside-ai-driven-software.html): Secure AI adoption in federal systems starts with software transparency. Learn why SBOMs and continuous governance are essential for mission assurance. (1,481 words)
- [Upgrade Sonatype Nexus Repository for Versions 3.68.1 - 3.70.x](/content/products/sonatype-nexus-repository/upgrade/3-68-0-to-3-70-x.html): This version of Nexus Repository is being sunset. Upgrade to a supported version for more capabilities, improved security, and better ecosystem support.  (707 words)
- [Cyber Resilience Act: User's Guide to Compliance | Sonatype](/content/resources/guides/eu-cyber-resilience-act-guide/index.html): Discover how Sonatype helps meet EU Cyber Resilience Act requirements, enhancing cybersecurity for digital products through vulnerability management. (2,013 words)
- [Sonatype Delivers Premium OSS Controls to GitHub Users](/content/press-releases/github-premium-controls/index.html): Sonatype enhances GitHub with six new Nexus integrations for superior open source health data. (648 words)
- [AI Is Forcing a New Open Source Security Model](/content/blog/ai-is-forcing-a-new-open-source-security-model/index.html): AI is accelerating vulnerability discovery. Learn why the next phase of open source security depends on remediation and secure software distribution. (947 words)
- [Sonatype Survey Finds DevSecOps is Government Top Priority](/content/press-releases/sonatype-survey-finds-devsecops-is-a-top-priority-in-government.html): Nearly Half of Government Coders with Mature DevOps Practices Say Security is a Top Concern
 (681 words)
- [ Explore NIST’s Secure Software Development Framework](/content/blog/getting-started-with-the-secure-software-development-framework-ssdf.html): Discover how to get started with the Secure Software Development Framework (SSDF), what it contains, and why should you leverage it (1,390 words)
- [Addressing Organizational Overconsumption in Maven Central](/content/blog/beyond-ips-addressing-organizational-overconsumption-in-maven-central.html): Maven Central faces unsustainable overuse by some organizations. Learn how Sonatype is addressing it and how to reduce your impact with best practices. (870 words)
- [Sonatype Warns Additional Breaches Loom Post-Equifax | Sonatype](/content/press-releases/sonatype-warns-additional-breaches-loom-post-equifax.html): Sonatype, released new data on organizations that have downloaded vulnerable versions of the Struts2 component exploited in the massive breach at Equifax. (582 words)
- [Accelerate Development with Sonatype APIs](/content/resources/community/apis/index.html): Automate and enhance your software supply chain with Sonatype APIs for seamless integration, improved workflows, and governance throughout your SDLC. (612 words)
- [Sonatype Nexus: The Future of DevOps and Dependency Management](/content/blog/nexus-on-the-ascent/index.html): Preferred 2:1 over JFrog Artifactory, Nexus Repository  is stronger and more forward-thinking than ever. (937 words)
- [Sonatype and HackerOne Partner to Make Open Source Safer](/content/press-releases/sonatype-and-hackerone-team-up-to-make-open-source-safer.html): Sonatype and HackerOne introduce The Central Security Project, uniting ethical hackers and open source for streamlined vulnerability resolution. (828 words)
- [Data Behind CVE-2017-8046: The Same OSS Problem Occurs Twice](/content/blog/fooled-twice-by-the-same-open-source-problem-shame-on-you.html): Organizations keep software applications safe, not by chance, but by preparation. (488 words)
- [2026 State of the Software Supply Chain Report | Download](/content/state-of-the-software-supply-chain/2026/thank-you/index.html): Download the latest report on the software supply chain and explore past reports to gain valuable insights. (25 words)
- [DevSecOps Elite and Their Reference Architecture](/content/blog/devsecops-elite-and-their-reference-architecture/index.html): Derek Weeks and DJ Schleen provide insights into the practices and toolsets used by DevSecOps professionals. Watch their DevOps World presentations here. (539 words)
- [Azure DevOps Integration Enhances Sonatype Lifecycle](/content/blog/azure-devops-integration-now-available-sonatype-lifecycle.html): In addition to our existing integration with the GitHub, GitLab, and Bitbucket services, Sonatype Lifecycle now integrates into Azure DevOps. (810 words)
- [Open Source Development Survey: Making Results Matter](/content/blog/2014/04/2014-open-source-survey/index.html): Join the conversation on open source development and security practices by participating in this year's survey. Share your insights and win some prizes! (315 words)
- [Optimize Your Builds: The Importance of Proxying Maven Central](/content/blog/2012/01/a-simple-reminder-for-mavengradleivy-users-proxy-central.html): Optimize Maven, Gradle, or Ivy builds by using a local repository manager like Nexus to reduce load on Maven Central and enhance build efficiency. (803 words)
- [Sonatype Research Labs Marks 15 Years of Open Source Intelligence](/content/press-releases/sonatype-research-labs-marks-15-years-of-intelligence.html): Sonatype marks 15 years of open source intelligence with new findings on AI-driven software supply chain attacks and the Attacking the Assembly Line report. (425 words)
- [GitHub Integration With Sonatype Lifecycle](/content/blog/github-integration-with-nexus-lifecycle/index.html): Discover the new GitHub, Jenkins, and Sonatype Lifecycle integration, now available on Nexus Exchange, built by Sonatype's innovative development team. (114 words)
- [How Rube Goldberg Cartoons Relate to Inefficient Build Systems](/content/blog/2012/02/what-do-cartoons-have-to-do-with-build-systems/index.html): Exploring how Rube Goldberg's cartoons illustrate the complexity and inefficiency in build systems and how Nexus can simplify these processes. (1,073 words)
- [AI Component Analysis in Software Supply Chain Security](/content/blog/how-sonatype-leads-in-ai-component-analysis-for-supply-chain-security.html): Discover how Sonatype leads in AI component analysis to secure open source AI models, libraries, and the software supply chain in the Forrester Wave. (799 words)
- [Easily Scale Up with Docker Subdomain Routing | Sonatype](/content/blog/scale-up-your-enterprise-with-docker-subdomain-routing.html): A new feature in Nexus Repository Pro gives unique host names to Docker instances without having to create and maintain a port listing.  (299 words)
- [Open Source Security Solutions | Sonatype](/content/solutions/open-source-security/index.html): Protect your SDLC with Sonatype's automated open source security solutions that help you detect vulnerabilities, defend against malware, and mitigate risk. (1,081 words)
- [Introducing the Nexus Remote Repository Browsing Plugin](/content/blog/2010/01/meet-the-nexus-remote-repository-browsing-plugin/index.html): Discover the new Nexus plugin that allows seamless remote repository browsing directly within the Nexus UI, enhancing user experience and accessibility. (581 words)
- [Containerize Your Excitement: Sonatype Nexus Repository 3 Release](/content/blog/2015/09/3-milestone-5-release/index.html): The Sonatype team is pleased to announce the arrival of the Nexus 3 Milestone 5 release, which features new functionality for hosting and proxying. (390 words)
- [Riot Games Shares Its Chef Cookbook for Nexus](/content/blog/2014/11/riot-games-shares-its-chef-cookbook-for-nexus/index.html): Riot Games shares its Chef cookbook for automating artifact uploads into Sonatype Nexus Repository, enhancing global deployment efficiency. (246 words)
- [Chapter 15: Settings Details | Maven: The Complete Reference](/content/maven-complete-reference/settings-details/index.html): Explore the detailed settings of Maven in Chapter 15 of the Maven Definitive Guide by Sonatype. A deep dive into configurations and user-level settings. (2,293 words)
- [Pharmaceutical Leader Eliminates Tech Debt | Sonatype](/content/customer-stories/pharmaceutical-leader-eliminates-tech-debt/index.html): Explore how a leading pharmaceutical company eliminated its backlog of vulnerabilities and set expectations around acceptable levels of tech debt. (313 words)
- [Secure Dependencies: Sonatype Lifecycle's Automated Pull Requests](/content/blog/github-pull-requests/index.html): Sonatype is the world’s premier provider of open source health and hygiene data. Now, it's bringing that data to GitHub with 6 new Nexus integrations. (492 words)
- [What is Shift Left? | Sonatype](/content/resources/articles/what-is-shift-left/index.html): Learn about Shift Left in DevOps, a strategy that boosts development speed, stability, and innovation through early code quality testing in the SDLC. (910 words)
- [Maven Tips: Creating an OSGi project with Maven | Sonatype](/content/blog/2009/09/maven-tips-and-tricks-creating-an-osgi-project-with-maven.html): Quickly create and manage OSGi projects using the Maven PAX plugin and Apache Felix runtime environment with this comprehensive guide. (1,040 words)
- [Prioritize Open Source Vulnerabilities with Reachability](/content/blog/prioritizing-open-source-vulnerabilities-is-reachability-useful.html): Good software composition analysis (SCA) can reduce open source risk, but poor results slows development. Can prioritization based on reachability help? (1,405 words)
- [Federal Software Security: Awareness to Assurance | Sonatype](/content/blog/from-awareness-to-assurance-in-federal-software-development.html): Discover how federal agencies can advance from cybersecurity awareness to assurance, securing federal software through automation and trusted SBOMs. Read here! (1,018 words)
- [Secure Connectivity: Artifactory and Archiva Now Supported](/content/blog/2013/01/secure-central-connectivity-artifactory-archiva-now-supported.html): Secure your repository with SSL connectivity for Artifactory and Archiva, safeguarding your development components and enhancing security across Maven Central. (281 words)
- [Sonatype Bolsters Exec Team with Former IBM Cloud Manager](/content/press-releases/bill-karpovich-joins-sonatype/index.html): Sonatype, the leader in automated open source governance and DevSecOps •  Bill Karpovich named SVP of strategy and corporate development. (465 words)
- [The Fact is Your DevOps Processes Have Gone Horribly Wrong](/content/blog/theres-no-nice-way-to-say-this-your-devops-has-gone-horribly-wrong.html): DevOps enables teams to go faster. However, it doesn’t guarantee a desirable outcome. Communication is still extremely important. (578 words)
- [Sonatype Exceeds $100M in ARR, Names First President | Sonatype](/content/press-releases/sonatype-exceeds-100m-in-arr-names-first-president/index.html): Sonatype surpasses a pivotal revenue milestone and welcomes Alex Berry as its first president.    (789 words)
- [Common cybersecurity acronyms explained](/content/blog/common-security-acronyms-explained/index.html): SAST, DAST, CSA, OSSM, SCA? What do these software security acronyms mean? Learn exactly what they do and their role in enterprise software security. (2,275 words)
- [Top Maven How-Tos for Developers from Sonatype](/content/blog/2011/07/the-best-maven-how-tos-from-the-sonatype-blog/index.html): Discover essential Maven best practices and how-tos from Sonatype's archives to enhance your development workflow and optimize your use of Maven tools. (660 words)
- [How to Search the Maven Repository | Sonatype Blog](/content/blog/2008/11/searching-the-maven-repository/index.html): Learn how to search for dependencies in the Maven repository using Sonatype's Nexus installation to streamline your development process. (314 words)
- [Sonatype Learn: Explore Self-Service Educational Materials](/content/blog/the-new-sonatype-learn-self-service-educational-materials-where-and-when-you-need-them.html): Explore the new Sonatype Learn website with updated courses, videos, and self-service educational materials for DevOps and Sonatype product training (355 words)
- [What is CVE: Importance, Structure, and Limits | Sonatype](/content/resources/articles/what-is-cve/index.html): Explore CVE, the global standard for identifying software vulnerabilities. Understand its role in enhancing cybersecurity. (1,138 words)
- [Malware Wrap-up: 135 Packages Target npm and PyPI Registries](/content/blog/this-week-in-malware-sept-30-22/index.html): This week in malware, we discovered and analyzed 135 packages flagged as malicious, suspicious, or dependency confusion attacks in npm and PyPI registries. (374 words)
- [Secure Containers in Your Supply Chain with Docker | Sonatype Webinar](/content/resources/webinars/secure-container-supply-chain/index.html): Learn how to enhance container security and streamline build pipelines with insights from experts at Docker and Sonatype. Watch the webinar to learn more., As containers power modern applications, ensuring every image is secure and compliant is critical. In this webinar, discover how the Sonatype Repository... (218 words)
- [Struts2 Vulnerability Cracks Equifax | Sonatype](/content/blog/struts2-vulnerability-cracks-equifax/index.html): Equifax breach of 143 million consumer records linked to Struts2 open source vulnerability. (468 words)
- [Neglecting Application Security Is A Risk You Can't Afford](/content/blog/2012/03/todays-security-brief-application-security-is-widely-neglected-by-some-surprising-companies.html): Today's Security Brief: Application security is widely neglected (by some surprising companies) (301 words)
- [Hidden Costs of Open Source Tooling: Why Free Isn't Free](/content/blog/free-isnt-free-the-hidden-costs-of-tooling-decisions-in-open-source-infrastructure.html): See how inefficient use of public infrastructure by common build tools creates hidden costs and risks for your organization. Learn how to build better. (1,485 words)
- [Microsoft and GitHub: Open Source's Future is Brighter Than Ever](/content/blog/microsoft-and-github-open-sources-future-is-brighter-than-ever.html): With Microsoft’s resources behind a great company like GitHub, the future of secure, quality open source looks brighter than ever. (467 words)
- [hubfs/the-20risks-20and-20rewards-20of-20generative-20ai-20in-20software-20development-pdf.html](/content/hubfs/the-20risks-20and-20rewards-20of-20generative-20ai-20in-20software-20development-pdf.html) (861 words)
- [GitHub ID Hijacking: Exploring The Go-Bindata Incident](/content/blog/hijacking-of-a-known-github-id-go-bindata/index.html): the creator of go-bindata deleted their @github account and someone else created a new account under the same name (566 words)
- [Explore Sonatype Integrations with Gradle](/content/products/integrations/gradle/index.html): Enhance your Gradle projects with Sonatype integrations for secure dependency management, artifact publishing, and automated vulnerability scanning. (512 words)
- [This Week in Malware - Show Me Your Secrets | Sonatype](/content/blog/this-week-in-malware-tell-me-your-secrets/index.html): These Python packages not only exfiltrate your secrets—AWS credentials and environment variables but rather upload these to a publicly exposed endpoint. (400 words)
- [NIS2 User's Guide to Compliance](/content/resources/guides/nis2-compliance/index.html): Learn how the NIS2 Directive will improve cybersecurity, learn about its key compliance elements, and how Sonatype can help ensure you’re ready. (1,395 words)
- [Customizing Sonatype IQ Server with Docker Compose](/content/blog/docker-compose-for-nexus-platform-part2/index.html): Learn how to customize Sonatype IQ Server using Docker Compose to streamline your development workflow and enhance your DevOps practices. (640 words)
- [What is Software Supply Chain (Really)? | Sonatype Podcast](/content/resources/podcasts/what-is-software-supply-chain-really/index.html): Explore the critical role of software supply chains in modern development, the risks of open source, and strategies to enhance security in this podcast. (886 words)
- [Sonatype Announces Enhanced Maven Central Experience | Sonatype](/content/press-releases/sonatype-announces-enhanced-maven-central-experience.html): Sonatype unveils a streamlined interface and new features for the Maven Central Repository to drive developer innovation.  (511 words)
- [Enhancing CI/CD Pipelines with Sonatype and Bitbucket Code](/content/blog/continuously-improve-cicd-with-nexus-lifecycle-and-bitbucket-code-insights.html): Developers using the Nexus platform integrated with Code Insights know when a change introduces risk, with contextual feedback for the individual branch. (349 words)
- [PGP vs. Sigstore: Code Signing Tools at Maven Central](/content/blog/pgp-vs-sigstore-a-recap-of-the-match-at-maven-central.html): We put code-signing tools PGP and sigstore in a head-to-head match with Maven Central users to find a winner. The results may surprise you.   (1,408 words)
- [Enhance Software Quality with Sonatype Firewall](/content/blog/2016/02/legos-death-stars/index.html): Why do you need Nexus Firewall? Because 1 in 15 open source components you download include known security vulnerabilities. (832 words)
- [DevSecOps Without Compromise](/content/blog/devsecops-without-compromise/index.html): Oliver Milke of Cloudogu provides tips to strengthen your DevSecOps toolchain. He also points out two potential weaknesses that might lurk inside, too.  (428 words)
- [Regulate to Innovate Video Series | Sonatype](/content/regulate-to-innovate-video-series/index.html): Explore the latest in regulations and compliance in our Regulate to Innovate video series.  (199 words)
- [Three Approaches to User Management in Nexus | Sonatype Blog](/content/blog/2010/01/three-approaches-to-user-management-in-nexus/index.html): Explore 3 approaches to user management in Nexus with seamless integration with LDAP, Crowd, and Active Directory for efficient authentication. (1,407 words)
- [Learn About Our Terms of Service | Sonatype](/content/terms-of-service/index.html): At Sonatype, Inc., we respect the privacy rights of our online visitors and recognize the importance of protecting the information we collect about you. (3,302 words)
- [Searching with Sonatype Nexus REST API: Groovy | Sonatype](/content/blog/2008/11/searching-with-the-sonatype-nexus-rest-api-groovy/index.html): Learn how to search repositories in Sonatype Nexus using Groovy scripts and the Nexus REST API. Discover scripting techniques for efficient searches. (700 words)
- [Best Practices Insights for Authentication & Authorization](/content/blog/best-practices-for-authentication-and-authorization-yoshiyuki-tabatas-keynote-at-addo.html): Explore best practices for implementing authentication and authorization and learn practical strategies for securing your cloud-native applications. (559 words)
- [New Year, New CVE: Diving Into 'node-forge' (CVE-2022-0122)](/content/blog/new-year-new-cve-a-deep-dive-into-the-node-forge-cve-2022-0122.html): There's no better way to kick off the new year than with an analysis of an open source vulnerability affecting the popular node-forge component on npm. (979 words)
- [Wicked Good Development Episode 26: Tom Cools](/content/blog/wicked-good-development-tom-cools/index.html): Kadi and guest co-host Theresa Mammarella sit down with open source contributor, Tom Cools, to talk about his journey.
, Today we are celebrating World Open Source Day: A day of celebration of the hard work and dedication done in the open source community and an opportunity to come together and share knowledge and experiences. At Wicked Good Development we thank open source maintainers and contributors for their endless pursuit of showcasing the power of open collaboration for the advancement of technology.
In this episode, Kadi and guest co-host Theresa Mammarella invite open-source contributor, Tom Cools, to share his journey in the world of open source. Sit back and relax as we talk through why he got involved in the community, what his first project was, and best practices to make projects more accessible for new contributors.
Tune in for the full conversation and check out the resources from this episode here.  (6,026 words)
- [Part 3, the Internet of Everything: Code, Cars, and More](/content/blog/2014/07/bad-parts-bad-software/index.html): In part two of my blog 'A Closer Look at Today's Software Supply Chain', I discussed why human-speed supply chain management can’t keep pace with today’s. (648 words)
- [Sonatype Repository Firewall Product Tour](/content/resources/product-tours/repository-firewall/index.html): Discover how Sonatype Repository Firewall secures your software supply chain by blocking malicious components from entering your SDLC. Watch product tour. (101 words)
- [New in m2e 0.12.1 - Maven 3.0.2, Async HTTP Client](/content/blog/2011/01/new-in-the-m2e-0-12-1-release-maven-3-0-2-async-http-client.html): The new m2e 0.12.1 release features Maven 3.0.2 and an updated Async HTTP Client, improving feature functionality for corporate environments. Learn more. (97 words)
- [Sonatype Privacy Policy | Sonatype](/content/privacy-policy/index.html): Sonatype's privacy policy covers all domains and subdomains, detailing our use of your personal information. (3,857 words)
- [A Home for the Central Repository](/content/blog/2014/03/a-home-for-the-central-repository/index.html): Discover Maven Central Repository's role as the premier destination for Java components, enhancing open source project publishing with reliability and integrity. (437 words)
- [Sonatype Celebrates February 3, 2022 as World Open Source Day](/content/blog/sonatype-celebrates-february-3rd-2022-as-world-open-source-day.html): We declare  February 3rd World Open Source day. Why? Our roots lie firmly in Open Source and we want to celebrate maintainers across the world & give back (807 words)
- [Government Asks: What's in Your Software?](/content/blog/government-asks-whats-in-your-software/index.html): Top performing development organizations embrace supply chain management best practices, including use of a Software Bill of Materials (BOM). (984 words)
- [Linux and Mac Malware Disguised as Browserify npm Package](/content/blog/damaging-linux-mac-malware-bundled-within-browserify-npm-brandjack-attempt.html): New malware exists in a brandjacking npm package called web-browserify that imitates the legitimate browserify component
 (1,237 words)
- [Choosing the Right SBOM Standard: SPDX vs. CycloneDX](/content/blog/comparing-sbom-standards-spdx-vs-cyclonedx-vs-swid.html): Do you know which format for generating a software bill of materials (SBOM) is the best option for your organization? A look at the two leading standards. (1,397 words)
- [Streamlining Compliance: How Compliance As Code Simplifies the Process](/content/blog/compliance-as-code/index.html): Compliance is a growing consideration for application security and must be managed.  (857 words)
- [What Is Cybersecurity? | A Sonatype Guide to Protection](/content/resources/articles/what-is-cybersecurity/index.html): Learn what cybersecurity is, its importance, common threats, and best practices to protect digital assets. An essential guide for organizations. (1,818 words)
- [CrowdStrike Incident: Lessons on Digital Resilience](/content/blog/whats-happening-with-the-crowdstrike-incident-when-a-software-update-turns-into-a-cyber-crisis.html): The Crowdstrike incident, when a routine update caused failures across worldwide systems, is a reminder of the fragile interconnectedness of our world.
 (775 words)
- [Master InnerSource: Explore Sonatype's InnerSource Insight](/content/blog/take-control-of-your-innersource-components-with-innersource-insight.html): InnerSource Insight, an industry-first capability, makes it easier and safer for developers to use components developed by others in their organization.
 (1,315 words)
- [Are you using a Leiningen repository manager | Sonatype blog](/content/blog/2012/04/are-you-using-a-leiningen-repository-manager/index.html): Discover how to streamline your Clojure projects with the Leiningen integration with Nexus. Explore efficient dependency management in this detailed guide. (823 words)
- [Sonatype Security Advisories | CVE Disclosures & Research](/content/security-advisories/index.html): Access the latest security advisories and CVE disclosures from the Sonatype Research team. Explore findings and stay updated on theses vulnerabilities.  (509 words)
- [CVE-2017-17461: Uncovering a Critical ReDoS Vulnerability](/content/blog/cve-2017-17461-vulnerable-or-not/index.html): Discover the importance of vulnerability detection with Sonatype's in-depth research, focusing on the re-evaluation and resolution of CVE-2017-17461. (900 words)
- [Managing Open Source Risks with HeroDevs EOL Dashboard](/content/blog/managing-open-source-software-risks-with-the-herodevs-eol-dashboard.html): Manage open source EOL risk with Sonatype Lifecycle and the HeroDevs dashboard. Gain visibility into unsupported dependencies and safer remediation paths. (1,002 words)
- [Introducing GoNexus: Enhancing Reliability for Go Developers](/content/blog/announcing-gonexus/index.html): GoNexus helps developers run reliable and reproducible builds. It follows our tools, Nancy, Goalie, NXRM OSS, and DepShield used in the Go community. (469 words)
- [Sonatype Guide MCP + Microsoft Copilot Demo | Video](/content/resources/videos/sonatype-guide-and-microsoft-copilot/index.html): See how Sonatype Guide MCP enhances Microsoft Copilot with real-time open source intelligence to recommend secure, trusted dependency versions automatically.
 (522 words)
- [Sonatype Nexus Repository Integration with CloudBees Jenkins](/content/press-releases/cloudbees-integration/index.html): Sonatype, the leader in software supply chain automation, announced the availability of a new plug-in for the CloudBees Jenkins 2 platform that further. (355 words)
- [A Guide to Deploying and Owning DevSecOps in Government](/content/blog/safer-software-sooner-devsecops-in-government/index.html): Explore how federal agencies are leading the way in integrating DevSecOps to enhance software security, quality, and performance in government projects. (388 words)
- [Despite What Some Vendors Say, Please Don't Ignore Log4j](/content/blog/despite-what-some-vendors-say-please-dont-ignore-log4j.html): Ignoring Log4j and recommending that high-risk open source vulnerabilities be left in application code isn't just irresponsible, it's dangerous.  (1,268 words)
- [Log4Shell Exploit: Understand the Impact of CVE-2021-44228](/content/blog/why-did-log4shell-set-the-internet-on-fire/index.html): What the download numbers tell us about the impact of the critical vulnerability CVE-2021-44228 (902 words)
- [When AI Writes Code, Who Governs the Dependencies?](/content/blog/when-ai-writes-code-who-governs-the-dependencies/index.html): AI coding tools accelerate development but introduce dependency risks. Learn how real-time intelligence helps secure AI-driven software supply chains. (1,106 words)
- [Google Guava shows strong growth in April | Sonatype Blog](/content/blog/2012/05/google-guava-shows-strong-growth-in-april/index.html): Google Guava's demand surged in April 2012, highlighting its growing popularity among essential Java utility libraries. Discover more about this trend. (353 words)
- [What Is Container Security, and How Can You Boost Yours?](/content/blog/what-is-container-security-and-how-can-you-boost-yours.html): In this blog post, we take an in-depth look at container security, including ways to boost security and how Sonatype's container security tools can help. (1,590 words)
- [Revolutionizing Software Development: Frank Roe's Insights](/content/blog/revolutionizing-software-development-frank-roes-keynote-at-addo.html): Explore the critical balance between AI efficiency and human insight in software development at All Day DevOps (ADDO). (494 words)
- [PyCharm and Sonatype Integration](/content/products/integrations/pycharm/index.html): Use Sonatype tools with PyCharm to enhance Python development by managing risks and accessing approved components directly within your coding environment. (392 words)
- [Listen to Brian Fox Discuss Maven 3 on BasementCoders.com](/content/blog/2010/08/listen-to-brian-fox-discuss-maven-3-on-basementcoders-com.html): Brian Fox discusses Maven 3's upcoming features, his journey with Apache Maven, and its comparisons to Ant on BasementCoders.com.  (223 words)
- [Weaponizing Open Source Through Job Recruiting | Sonatype](/content/blog/weaponizing-open-source-through-job-recruiting/index.html): There have been troubling new reports of threat actors weaponizing open source to target employee machines at technology companies, governments, and more. (1,560 words)
- [Exploring SBOM Manager's New Features | Sonatype Webinar](/content/resources/webinars/sbom-manager-new-features/index.html): Discover the latest features of Sonatype SBOM Manager and how they will enhance SBOM analysis and compliance. See the new capabilities during this webinar., Discover the Latest Innovations in SBOM Management (86 words)
- [Open source governance starts with visibility | Sonatype Blog](/content/blog/you-cant-manage-what-you-cant-see-open-source-governance-starts-with-visibility.html): Open source governance needs visibility to manage vulnerabilities. Learn from Equifax's breach and start identifying your open source components today. (328 words)
- [Maven by Example now available as an ePub | Sonatype Blog](/content/blog/2010/08/maven-by-example-now-available-as-an-epub/index.html): Learn everything you need to know about Maven Central in our ebook Maven by Example, which is now available as an ePub. Read our blog to learn more.  (303 words)
- [Maximize Security: Understand the Impact of Security Testing](/content/blog/the-impact-of-security-testing-on-an-organization/index.html): Choosing the right security testing tools is hard, but this guide through IAST, DAST, SAST, and SCA will make it easier for your organization. (2,325 words)
- [Exploring the Nexus OSS Switch to the Eclipse Public License](/content/blog/2012/06/nexus-oss-switched-to-the-eclipse-public-license-a-clarification-and-an-observation.html): Nexus OSS switched to the Eclipse Public License: A Clarification and an Observation (643 words)
- [Sonatype Adds Open Source Component Visibility to HP Fortify](/content/press-releases/sonatype-adds-visibility-hp-fortify/index.html): Sonatype Adds 3rd Party & Open Source Component Visibility to HP Fortify on Demand 
Provides Customers Unprecedented Software Application Security (553 words)
- [Nexus Indexer 2.0: Save Bandwidth with Incremental Downloading](/content/blog/2009/05/nexus-indexer-20-incremental-downloading/index.html): Discover how Nexus Indexer 2.0's incremental downloading can drastically reduce bandwidth costs while managing and retrieving Maven repository indexes efficiently. (675 words)
- [Software Assurance | 2026 Software Supply Chain Report](/content/state-of-the-software-supply-chain/2026/software-compliance/index.html): Global software regulations are reshaping software assurance and compliance. Learn how SBOMs and transparency impact the software supply chain. (3,320 words)
- [New in Nexus Repository: More Formats and Stronger Operations](/content/blog/q1-updates-in-nexus-repository-more-formats-stronger-operations-and-a-better-day-to-day-experience.html): Sonatype Nexus Repository updates add Terraform and Swift support, simplify operations, and improve security and automation for modern software delivery. (1,040 words)
- [Sonatype Achieves SOC 2 Certification | Sonatype](/content/blog/sonatype-now-soc2-certified/index.html): To help continue to build confidence in our services and tools, Sonatype has achieved a widely-sought security credential. (396 words)
- [Simplified Policy Management with Sonatype Nexus Repository](/content/blog/2013/09/policy-hierarchy-inheritance-simplified-policy-management.html): Simplify policy management with Sonatype's latest 1.6 release, featuring enhanced policy hierarchy, inheritance, and a revamped UI for better usability. (506 words)
- [Exploring How Kubernetes Enables DevOps | Sonatype](/content/blog/10-ways-kubernetes-enables-devops/index.html): Discover how Kubernetes enhances DevOps with automation, infrastructure consistency, and seamless collaboration, paving the way for better DevOps practices. (893 words)
- [What is a Source Code Repository | Sonatype](/content/resources/articles/what-are-code-repositories/index.html): Learn how a source code repository can help dev teams organize code, collaborate, and track changes to improve software development workflows.

 (1,004 words)
- [Integrating Nexus Indexer API: Advanced Search Techniques](/content/blog/2009/06/nexus-indexer-api-part-2/index.html): Learn how to integrate the Nexus Indexer API for efficient artifact searching and grouping in your applications. Explore coding examples and practical tips. (1,466 words)
- [Outpace Open Source Malware | Sonatype Webinar](/content/resources/webinars/outpace-malware/index.html): Learn how to protect your software supply chain from open source malware with effective security measures in this insightful webinar discussion., Malware authors are evolving faster than ever, exploiting automation gaps in legacy SCA tools. Relying on outdated CVE databases is no longer enough to ... (210 words)
- [New Dashboard Helps Build a Business Case for DevSecOps](/content/blog/success-metrics/index.html): Discover how Sonatype's new Success Metrics dashboard helps you measure and demonstrate the impact of DevSecOps practices in your organization. (294 words)
- [sonatype-2022-3060 | Security Details | Sonatype Guide](/content/guide/vulnerability/sonatype-2022-3060/index.html): Technical security analysis for sonatype-2022-3060. CVSS 10.0 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (65 words)
- [Deploying DevOps in Government: The Second Time Is the Charm](/content/blog/deploying-devops-in-government-the-second-time-is-the-charm.html): Getting buy-in from a government agency to change anything, is not an easy task. (1,022 words)
- [The Risks and Rewards of AI Survey Report | Sonatype](/content/resources/whitepapers/report-ai-in-software-development/index.html): Discover how generative AI is transforming software development, with insights on its adoption and security concerns. Download the whitepaper. (205 words)
- [How to Build a Software Supply Chain Security Playbook](/content/blog/how-to-build-a-software-supply-chain-security-playbook.html): Learn how to build a software supply chain security playbook with stronger dependency governance, secure pipelines, and zero-trust development practices. (798 words)
- [Top 8 Malicious Packages Recently Found on PyPI | Sonatype](/content/blog/top-8-malicious-attacks-recently-found-on-pypi/index.html): Eight malicious attacks on PyPI recently caught our Security Research Team's eye. Get the details about the actions and motivations of the attackers.  (2,079 words)
- [Cigniti Technologies Announces Partnership with Sonatype](/content/press-releases/cigniti-technologies-announces-partnership-with-sonatype.html): Cigniti Technologies and Sonatype team up to automate open source security throughout the software development lifecycle. (592 words)
- [PSA: Your Build Is Leaking (and How to Stop It) | Sonatype](/content/blog/2012/02/public-service-announcement-your-build-is-leaking-and-how-to-stop-it.html): Public Service Announcement: Your build is leaking (and how to stop it) (1,117 words)
- [Read the Sonatype Newsletter | Sonatype Blog](/content/blog/2009/04/read-the-sonatype-newsletter/index.html): Stay updated with Sonatype's latest news, product releases, and open source projects by reading our April 2009 newsletter and following us on Twitter. (176 words)
- [Set Up Nexus Repository as a Windows Docker Container Registry](/content/blog/setting-up-sonatype-nexus-3-as-your-windows-docker-container-registry.html): My customer uses Sonatype Nexus as their artifact repository for all kinds of packages and also for Docker Containers.  (708 words)
- [5 Things You Need to Know About Open Source Components](/content/blog/2014/06/5-things-you-need-to-know-about-open-source-components.html): You can't get away from it. Thousands of open source components are being used in every industry, every day, to quickly build and deploy applications. (918 words)
- [Adaptavist Offers Enterprise DevSecOps Solution Partnership](/content/press-releases/adaptavist-partnership/index.html): Sonatype has announced a new partnership with Adaptavist to help further expand the Nexus footprint.  (549 words)
- [Sonatype CEO on the Future of the Software Supply Chain](/content/blog/sonatype-ceo-on-the-future-of-the-software-supply-chain.html): Sonatype's CEO Wayne Jackson talked about Maven, the software supply chain, and speed vs. security no longer being at odds, at the 2020 Nexus User Conference.  (1,186 words)
- [Securing Your IT Supply Chain: Key Insights and Strategies](/content/blog/2012/10/it-supply-chain-will-yours-be-compromised/index.html): Protect your IT supply chain from vulnerabilities. Learn strategies for securing software components and fostering team collaboration in this insightful blog. (1,020 words)
- [Delivering on a promise: Free Nexus training | Sonatype blog](/content/blog/2014/12/our-promise-free-nexus-training/index.html): Learn to configure and use Smart Proxy with Nexus Professional in our free training series. Join us for continuous updates and training modules. (340 words)
- [Wicked Good Development: Devnexus Reflections & Convos](/content/blog/wicked-good-development-dev-nexus-part-3/index.html): This week, we finish up our round table discussion on Devnexus 2022 and interview two more developers who contribute to the open source community. , This episode is three fold as we finish up the roundtable discussion on Devnexus 2022 and we get a chance to interview two more developers who contribute to the open source community. We connect with Luis Majano, CEO of Ortus Solutions and long-time computer engineer, about putting in the open source work. From using a 70/30 ratio to dedicate time building open source in between client work to getting the next generation involved in maintaining minor code fixes first-hand, hear how the level of work put in makes the difference in professional open source. We also learn with Grace Jansen, Developer Advocate at IBM, about how the preservation of open source collaboration will be the guiding light to pushing technology forward. Hear how her unique background in Biology gives her insight into methodologies and behaviors when it comes to responsiveness and resiliency.
Check out the resources from today's episode here. (5,890 words)
- [Hygiene for Open Source Is Now a PCI Requirement | Sonatype](/content/blog/hygiene-for-open-source-softwareis-now-a-pci-requirement.html): PCI’s new Secure SLC outlines security requirements to ensure payment software protects the integrity and confidentiality of payment transactions. (470 words)
- [Violations Detailed View Coming to Sonatype IQ Server | Sonatype](/content/blog/violationsdetail/index.html): In the coming months, the Nexus Lifecycle team will be implementing a new page in IQ Server, providing details on a particular policy violation. (641 words)
- [How to Become an OSS Champion](/content/blog/how-to-become-an-oss-champion/index.html): Sonatyper Fernando Cremer shows leaders how to champion open source use in modern software production. Here are his recommendations to drive adoption. (736 words)
- [Sonatype Lifecycle: Auto Waivers Product Tour](/content/resources/product-tours/lifecycle-auto-waivers/index.html): Discover how Sonatype Lifecycle automates waivers to streamline review cycles. Watch product tour now or book a personalized demo today. (31 words)
- [New Product Capabilities for Software Supply Chain Security](/content/blog/enhancing-software-supply-chain-security-new-sonatype-product-capabilities.html): Sonatype announces the latest enhancements for Sonatype Repository Firewall, Sonatype Nexus Repository, and Sonatype Lifecycle. (563 words)
- [Sonatype Adds End-to-End Security for PyPI Packages | Sonatype](/content/press-releases/sonatype-adds-end-to-end-security-for-pypi-packages.html): Nexus Lifecycle's new release simplifies PyPI package management for Python teams, enhancing security against third-party risks. (324 words)
- [State of the Software Supply Chain 9th Edition](/content/state-of-the-software-supply-chain/about-the-report/index.html): The 9th Annual State of the Software Supply Chain Report was made possible thanks to a tremendous effort put forth by many team members at Sonatype. (409 words)
- [Who Really Wrote healthcare.gov?](/content/blog/2013/12/healthcare-gov/index.html): Exploring the hidden risks of open source software and proposing solutions to ensure supply chain integrity for safer software development. (960 words)
- [The Evolution of Open Source Malware: From Volume to Trust Abuse](/content/blog/the-evolution-of-open-source-malware-from-volume-to-trust-abuse.html): Open source malware is evolving from volume to trust abuse, targeting developers and pipelines. Learn how to detect and stop threats earlier in the SDLC. (976 words)
- [Why Does Security Matter for DevOps?](/content/blog/why-security-matters-for-devops/index.html): Caroline Wong (@CarolineWMWong) explains why organizations that use DevOps are 2X more likely to succeed than peers. 

 (816 words)
- [The 2014 Survey: Marked By an Industry Shockwave](/content/blog/2014/06/opening-letter-2014-survey/index.html): Wow! What an amazing turnout we had for our 4th annual survey: 3,353 participants this year brings us to over 11,000 participants in the four years we’ve. (525 words)
- [Protect Your Software Supply Chain with Firewall](/content/blog/sonatype-repository-firewall-is-an-easy-solution-for-a-big-problem.html): Discover Sonatype Repository Firewall's AI-driven protection for SDLCs, blocking malicious components and ensuring a more secure software supply chain.
 (1,083 words)
- [Sonatype Lifecycle and Firewall Now Available in the Cloud](/content/blog/sonatype-lifecycle-and-firewall-now-available-in-the-cloud.html): Sonatype’s new cloud offer means customers looking to scale and secure their software development lifecycle can do so with less maintenance and infrastructure. (637 words)
- [Inail + Sonatype Success Story | Sonatype](/content/customer-stories/inail/index.html): See how Inail leverages the Sonatype platform to minimize risks associated with using open source libraries. (337 words)
- [Anonymous Access in Sonatype Nexus Repository Is Not a Zero-Day](/content/blog/anonymous-access-in-nexus-repository-manager/index.html): A researcher contacted us about an issue in Nexus Repository, stemming from user access settings. (484 words)
- [AWS + Sonatype Partnership | Sonatype](/content/partners/aws-sonatype-nexus-lifecycle-sonatype/index.html): Accelerate secure software development on AWS with Sonatype's solutions, ensuring quality code and proactive risk management throughout your supply chain. (385 words)
- [Bryan Batty von der Bloomberg Industry Group, Teil 4](/content/blog/bloomberg-industry-german4/index.html): Bryan Batty von der Bloomberg Industry Group erklärt, weshalb er sich für die Sonatype-Plattform entschieden hat und wie er damit die Governance. (1,009 words)
- [Wicked Good Development: New National Cybersecurity Strategy](/content/blog/wicked-good-development-white-house-unveils-new-national-cybersecurity-strategy.html): Sonatype's Jeff Wayman sits down with Co-founder and CTO, Brian Fox, to discuss the details of the 2023 Biden-Harris National Cybersecurity Strategy.
, On March 2, 2023 the Biden-Harris administration made a historic move with the release of the National Cybersecurity Strategy. This is the first time the US government has taken a stance on product liability with regard to software.
In this episode, Jeff Wayman–Conduit of Goodness at Sonatype–takes the mic to speak with Sonatype’s Co-founder and CTO, Brian Fox. Listen in as they break down important details of this historic new strategy, its meaning, and how it impacts you and your organization.
Check out the resources for this episode on the blog.  (6,029 words)
- [Simplified Artifact Management Tools | Sonatype](/content/solutions/artifact-management/index.html): Sonatype makes artifact management easy. Learn more about artifact management and how Sonatype supports end-to-end artifact management. (1,031 words)
- [Analyzing Python Malware: A Guide to Malware Analysis](/content/blog/intro-to-malware-analysis-analyzing-python-malware/index.html): Understanding malware analysis and the process of researching security vulnerabilities is the first step toward implementing best practices. (2,153 words)
- [Unwrapping the Struts2 Vulnerability | Sonatype Webinar](/content/resources/webinars/unwrapping-struts2-vulnerability/index.html): Explore the Struts2 vulnerability and learn proactive defense strategies to manage open source vulnerabilities. Tune in for expert insights from Sonatype., While many developers are preparing for a much needed holiday break, yet another remote code execution vulnerability in Apache’s Struts2 Framework has b... (205 words)
- [The Emerging Role of the ALM Architect in IT Governance](/content/blog/2012/04/an-emerging-role-in-it-governance-the-alm-architect.html): Exploring the emerging role of the ALM Architect in IT governance, and how it centralizes decision-making in application lifecycle management. (968 words)
- [Dart Language Support | Sonatype](/content/products/language-support/dart/index.html): Build secure applications in Dart and Flutter leveraging Sonatype's tools for vulnerability management, policy enforcement, and automated governance. (373 words)
- [Security by Design: The Benefits of Building Quality In](/content/blog/security-by-design-the-benefits-of-building-quality-in.html): Helping modern development organizations manage open source components, so they can improve the quality, security, and speed of software supply chains.  (257 words)
- [Sonatype Nexus Repository Installs Double in 18 Months](/content/press-releases/repo-installs-double-press-release/index.html): With 5 times more installs than any other repository manager, Nexus is the industry standard for accelerating continuous software delivery and DevOps (408 words)
- [Sonatype Joins AWS ISV Accelerate Program | Sonatype](/content/press-releases/sonatype-joins-aws-isv-accelerate-program/index.html): Sonatype has joined the Amazon Web Services (AWS) Independent Software Vendor (ISV) Accelerate Program. (466 words)
- [The Overview Effect: Transforming Development Perspectives](/content/blog/the-overview-effect-two-decades-of-unique-perspective.html): Learn about how astronauts and the overview effect relate to Sonatype's ongoing mission to lead and transform software security and compliance (1,710 words)
- [Software Supply Chain Readiness: Unmanned Aircraft Systems](/content/blog/securing-the-skies-software-supply-chain-readiness-for-unmanned-aircraft-systems.html): Learn how federal agencies use SBOMs, dependency management, and AI-driven tools to strengthen defense missions and ensure mission-ready resilience. (1,113 words)
- [Guide to Choosing Between Nexus and Nexus Professional](/content/blog/2010/05/nexus-or-nexus-professional-which-one-is-right-for-you.html): Discover the key differences between Nexus and Nexus Professional to choose the right Maven artifact repository manager for your software development needs. (607 words)
- [Maven Shell Introduction: How to Speed Up Your Builds | Sonatype](/content/blog/2010/03/introduction-to-maven-shell/index.html): Discover the efficiency of Maven Shell, a CLI tool that speeds up builds by loading project information and plugins into a single JVM instance. Learn More. (270 words)
- [Inside a 176-Package npm Campaign Built to Beat Your Internal Dependencies](/content/blog/inside-a-176-package-npm-campaign-built-to-beat-your-internal-dependencies.html): A 176-package npm malware campaign used dependency confusion and install-time scripts to steal credentials and compromise developer and CI/CD environments. (889 words)
- [Code Quality Checks: Tools to Improve Your Software | Sonatype](/content/blog/improving-code-quality-with-automation/index.html): Learn which code quality checks matter most and discover the code quality tools that make software quality improvement a repeatable process. See how Sonatype helps. (749 words)
- [Manage p2 Packages Securely | Sonatype Support](/content/products/language-support/p2/index.html): Manage and distribute Eclipse p2 components securely with Sonatype Nexus Repository, enabling increased ecosystem support for development teams. (362 words)
- [Leading a DevOps Team at a Fortune 100 Company](/content/blog/leading-a-devops-team-at-a-fortune-100-company/index.html): Uldis Karlovs-Karlovskis works at Accenture Latvia. Accenture is a global consulting giant, employing 400,000 with teams and clients across the globe. (881 words)
- [Another SolarWinds? New Software Supply Chain Attack on 3CX](/content/blog/another-solarwinds-the-latest-software-supply-chain-attack-on-3cx.html): Get insights on the recent 3CX software supply chain attack and the growing importance of effective dependency management to protect against cyberattacks. (733 words)
- [All Things Maven: A Discussion With Brian Fox](/content/blog/all-things-maven/index.html): In this episode, hear the history of Maven Central, war stories, how Minecraft DDoSed the service, and plans for the future of Maven and Java 9.Special (110 words)
- [Sonatype Intelligence CVE-2019-15753: OpenStack (os-vif)](/content/blog/nexus-intelligence-insights-cve-2019-15753/index.html): In this month's Nexus Intelligence Insights, we're covering CVE-2019-15753: a MAC address aging vulnerability that opens up the potential for a DoS and. (980 words)
- [New Shai-Hulud Miasma Wave Hits Hundreds of npm Packages](/content/blog/new-shai-hulud-miasma-wave-hits-hundreds-of-npm-packages.html): A new Shai-Hulud Miasma wave hijacked trusted npm packages to steal credentials, abuse install-time execution, and spread through developer environments. (1,325 words)
- [What the 2026 Software Supply Chain Report Reveals About Regulation](/content/blog/what-the-2026-state-of-the-software-supply-chain-report-reveals-about-regulation.html): Sonatype's State of the Software Supply Chain Report shows regulation shifting from guidance to enforcement, and why compliance must move into the SDLC. (866 words)
- [How to Easily Identify Conda Vulnerabilities Using Sonatype Jake](/content/blog/how-to-easily-identify-conda-vulnerabilities-using-sonatype-jake.html): Jake, a free tool, identifies vulnerabilities in a Conda environment. It's simple to use, saves time, and empowers you to develop Python projects faster. (1,365 words)
- [Apache Struts2 Vulnerability Downloaded 387K+ Times Last Week](/content/blog/years-old-apache-struts2-vulnerability-downloaded-325k-times-in-the-past-week.html): AI-discovered Apache Struts vulnerability CVE-2025-68493 is still widely used, with over 380,000 downloads of vulnerable versions in just one week. (1,042 words)
- [How to Integrate Aether in Maven 3 Plugins for Dependency Resolution](/content/blog/2011/01/how-to-use-aether-in-maven-plugins/index.html): Learn how to leverage Aether in Maven 3 plugins for efficient dependency resolution with practical insights and real-life code examples from Benjamin Bentmann. (573 words)
- [Managing Nexus API Using Jenkins X](/content/blog/managing-nexus-api-using-jenkins-x/index.html): Steve Boardwell demonstrates how to create custom repositories in your Jenkins X managed Nexus server, and what is possible with the Nexus scripting API. (916 words)
- [Building Trusted AI Development With Antigravity and Sonatype Guide](/content/blog/building-trusted-ai-development-with-antigravity-and-sonatype-guide.html): Learn how Antigravity and Sonatype Guide give AI agents real-time dependency intelligence to make secure, trustworthy decisions at scale. (823 words)
- [AI Risk Management Framework for Federal Security | Sonatype](/content/blog/from-models-to-missions-applying-the-ai-rmf-to-federal-software-supply-chains.html): Learn how federal agencies can apply the AI risk management framework (NIST AI RMF) to secure software supply chains and ensure trustworthy AI adoption. (1,117 words)
- [Sonatype Named DevOps Dozen Winner for Best DevSecOps Solution](/content/blog/sonatype-named-devops-dozen-winner-for-best-devsecops-solution.html): Sonatype wins the 2026 DevOps Dozen for Best DevSecOps Solution, proving why AI-driven SCA and AI governance are essential to modern DevSecOps. (806 words)
- [Now Available: m2eclipse 0.10.0 | Sonatype Blog](/content/blog/2010/02/now-available-m2eclipse-0-10-0/index.html): Discover the latest release of m2eclipse 0.10.0, featuring enhanced stability, Maven 3.0 integration, and improved performance.  (734 words)
- [Nexus Holds the Top Market Share, the Data Speaks for Itself](/content/blog/2014/06/nexus_preferred_product/index.html): RebelLabs recently put out their Java Tools and Technologies Landscape report and we were very pleased to see Nexus chosen as the repository manager of. (575 words)
- [Nexus Repository 3.20 Install, Admin Login, and Port Change](/content/blog/sonatype-nexus-3-2-installation-admin-login-and-port-change-video.html): This five minute Nexus Repository installation video covers all the tidbits, from login via admin to changing the port.  (361 words)
- [Properties and Filtering | Maven: The Complete Reference](/content/maven-complete-reference/properties-and-resource-filtering/index.html): Learn about properties and resource filtering in Maven with Chapter 9 of the Maven Definitive Guide by Sonatype. (718 words)
- [Follow Sonatype on Twitter | Sonatype Blog](/content/blog/2009/09/follow-sonatype-on-twitter/index.html): Stay updated with the latest news, how-tos, and updates from Sonatype’s experts by following their Twitter accounts. Learn more in this blog. (81 words)
- [Accelerate Productivity, Digital Value Streams, & DevSecOps](/content/blog/accelerating-productivity-digital-value-streams-and-devsecops-during-covid-19.html): In the pilot episode of DevOps and Drinks from IDC, Reuben Athaide from Standard Charter Bank shares his views on how COVID-19 is changing DevSecOps.   (388 words)
- [Maven by Example: Appendix | Sonatype Guide](/content/resources/guides/maven-by-example/license-and-copyright/index.html): Explore Creative Commons guidelines and trademark information for Maven by Example. (492 words)
- [DevOps for Small Organizations: Lessons From Ed](/content/blog/devops-for-small-organizations-lessons-from-ed/index.html): Explore Ed Ruiz's journey to modernize their membership structure at ASPPH through DevOps with an approach to culture, automation, measurement and sharing. (624 words)
- [Optimizing VMware for Efficient Hudson Build Farms | Sonatype](/content/blog/2009/02/the-hudson-build-farm-experience-volume-iii/index.html): Insights from managing a Hudson-based build farm on VMware ESXi. Explore resource allocation, build efficiency, and time synchronization for performance. (1,738 words)
- [Software success at Fannie Mae is paved with DevOps-native tools](/content/blog/the-road-to-software-success-at-fannie-mae-is-paved-with-devops-native-tools.html): Fannie Mae is a great example of how large enterprises can become better innovators by transforming from waterfall-native to DevOps-native development. (414 words)
- [US Energy and Commerce Committee: 6 Strategies for Modern Risks](/content/blog/house-oversight-committee-6-strategies-for-modern-cybersecurity-risks.html): On December 12th, the Subcommittee on oversight and investigations released an additional report identifying the core strategies organizations can take. (1,120 words)
- [PyPI Package 'ctx' and PHP Library 'phpass' Compromised](/content/blog/pypi-package-ctx-compromised-are-you-at-risk/index.html): Popular Python package 'ctx' that is downloaded over 22,000 times weekly on PyPI registry has been compromised and now steals environment variables. (557 words)
- [Sonatype Lifecycle and Jira Integrations | Sonatype](/content/products/integrations/jira/index.html): Remediate vulnerabilities and policy violations faster with the Sonatype Lifecycle integration with Jira that enables automated issue creation.  (575 words)
- [From Good to Great with Software Composition Analysis (SCA)](/content/blog/how-software-composition-analysis-sca-can-help-you-go-from-good-to-great.html): Learn how SCA tools automate the identification of vulnerabilities, manage software licenses, and provide full visibility into your software supply chain. (1,898 words)
- [Understanding Havij: A Tool for SQL Injection Testing](/content/blog/2012/04/know-the-enemy-havij-automated-sql-injection/index.html): Learn about Havij, an automated SQL injection tool, and how to protect your applications from SQL injection attacks with best practices and tools. (331 words)
- [Protecting Containers to Secure Your Business | Sonatype](/content/blog/containers-are-just-another-piece-of-the-puzzle/index.html): Saying - let's start using containers - isn't a solution. It's just a piece of a much larger puzzle. Learn more. (1,034 words)
- [Meet an Open Source Developer: A.J. Brown](/content/blog/meet-an-open-source-developer-a-j-brown.html): A.J. Brown, a Principal Engineer at Sonatype, discusses his journey and career in open source as part of our series for World Open Source Day 2023.  (1,256 words)
- [Protect Your Dev Environment from Vulnerable Components](/content/resources/webinars/devops-downloads/mitigate-open-source-vulnerabilities/index.html): Learn how to safeguard your development environment from evolving open source vulnerabilities with actionable strategies from Sonatype experts. Watch Now.,  (154 words)
- [Wicked Good Development Episode 6: The Logic of Code Quality](/content/blog/wicked-good-development-the-logic-of-code-quality/index.html): Wicked Good Development is defining code quality, how to measure it, and the best time to involve quality checks in the development process.
, Write code so good you don’t need documentation to go along with it. Achieving code quality that is measurable, efficient, and scalable across even the leanest development teams can feel like a stunt. Yet, the costs of growing tech debt make setting a standard a no-brainer. From defining code quality, how to measure it, and the best time to involve quality checks in the development process, join a comprehensive talk on the logic of high code quality.
Coming straight from Sonatype in-house industry experts Product Manager Rohan Bhaumik, Developer Advocate Sal Kimmich, and VP of product innovation Stephen Magill.
Check out the resources from today's episode here.  (5,840 words)
- [Explore Two More Reasons Why Sonatype's Future Is Bright](/content/blog/tish-long-and-steve-hills-two-more-reasons-why-sonatypes-future-is-bright.html): World class executive talent -- Tish Long and Steve Hills -- join Sonatype board of directors. (287 words)
- [The OWASP ZAP HUD | Sonatype Blog](/content/blog/the-owasp-zap-hud/index.html): ZAP is an open-source web application scanner and OWASP flagship project. Learn about OWASP ZAP and how it can identify vulnerabilities in this blog. (779 words)
- [Announcing the 2022 Sonatype Elevate Award Winners](/content/press-releases/2022-sonatype-elevate-award-winners/index.html): Commerzbank AG, ABN Amro Bank NV, and Instinet were among those recognized as software supply chain innovators at Sonatype's 2022 Elevate Awards  (422 words)
- [Why We Chose the GPL for Sonatype Nexus Repository | Blog](/content/blog/2010/01/why-we-chose-the-gpl-for-nexus/index.html): Why Sonatype chose GPL for Nexus Repository, emphasizing open collaboration, sustainable development, and strategic licensing to foster involvement. (1,500 words)
- [Streamlining Apache Portals Releases with Nexus Staging Suite](/content/blog/2010/01/apache-portals-simplifies-releases-with-nexus-staging-suite.html): Discover how Apache Portals improved their release management by adopting the Nexus Staging Suite, simplifying project management. (525 words)
- [Benefits of a Repository Manager: Caching and Collaborating](/content/blog/2010/08/benefits-of-a-repository-manager-part-ii-caching-and-collaborating.html): Discover how a repository manager can enhance your development cycle by caching artifacts locally and improving collaboration across development teams. (1,115 words)
- [Software Supply Chain Management | Sonatype Guide](/content/resources/software-supply-chain-management/index.html): Explore the essentials of software supply chain management in this comprehensive guide breaking down critical aspects of a software supply chain.
 (240 words)
- [Sonatype Recognized as Leading Provider of SCA | Sonatype](/content/press-releases/sonatype-recognized-as-leading-provider-of-sca/index.html): Forrester Research’s new Now Tech: Software Composition Analysis, Q1 2019 recognizes Sonatype as one of five “large” SCA Specialists.
 (506 words)
- [Codecov Breach: An Undetected Software Supply Chain Attack](/content/blog/what-you-need-to-know-about-the-codecov-incident-a-supply-chain-attack-gone-undetected-for-2-months.html): A new software supply chain attack on software testing firm Codecov highlights why developers to take an active role in protecting their systems.  (1,364 words)
- [Did You Wake Up to a Java Deserialization Vulnerability Alert?](/content/blog/2015/11/java-deserialization-vulnerability/index.html): Stay ahead of Java deserialization vulnerabilities with Sonatype's proactive alert system and effective remediation strategies. Learn more in this blog.  (1,096 words)
- [Application Security Solutions That Accelerate Review Cycles](/content/solutions/appsec-professionals/index.html): Reduce open source and licensing risk with automated application security software that accelerates security reviews and eliminates rework. (868 words)
- [Explore New Ecosystems Available Sonatype Lifecycle](/content/blog/new-ecosystems-available-in-nexus-lifecycle/index.html): Create and contextually enforce custom security, license, and architectural policies across the SDLC. Nexus Lifecycle now includes C/C++, PHP, and Ruby.  (404 words)
- [Over Five Dozen More Malicious Packages Discovered | Sonatype](/content/blog/this-week-in-malware-sept-23-22/index.html): This week in malware we discovered and analyzed over five dozen packages flagged as malicious, suspicious, or dependency confusion attacks. (300 words)
- [Developing an Ansible Role for Sonatype Nexus Repository v3.x](/content/blog/developing-an-ansible-role-for-sonatype-nexus-repository-manager-v3-x.html): This article explains how to automate the installation as well as configuration of Sonatype Nexus Repository Manager version 3.x with Ansible. (1,489 words)
- [Sonatype Launches New OSS Index: Free Vulnerability Data](/content/press-releases/sonatype-launches-new-and-enhanced-open-source-software-index.html): Sonatype unveils an updated OSS Index for free access to information on open source vulnerabilities. (440 words)
- [Inevitable: Earthquakes and Exploits](/content/blog/inevitable-earthquakes-and-exploits/index.html): Earthquakes and open source vulnerabilities are both inevitable, unpredictable, and can be catastrophic. (724 words)
- [Navigating the Challenges of Shadow AI in Modern Business](/content/blog/taming-the-wild-west-of-shadow-ai/index.html): Shadow AI blends innovation with risk. Learn how to manage its impact, ensure security, and harness its potential with the right governance strategies. (802 words)
- [Eclipse Integration with Sonatype Lifecycle](/content/products/integrations/eclipse/index.html): Get Sonatype's powerful software composition analysis capabilities directly into your Eclipse IDE instance to reduce open source risks during development. (467 words)
- [What is Apache Maven? Build Tool Overview | Sonatype](/content/maven-complete-reference/introducing-apache-maven/index.html): What is Apache Maven? Get a complete Apache Maven overview and learn how this build tool functions to improve software development lifecycle management. (3,646 words)
- [Modernizing Federal DevSecOps for CMMC and Beyond](/content/blog/modernizing-federal-devsecops-for-cmmc-and-beyond/index.html): Learn how CMMC 2.0 drives modern DevSecOps, embedding trust, automation, and compliance-ready-by-design practices across federal software systems. (1,358 words)
- [Log4j 2.17.1 Fixes Vulnerability: Should You Be Concerned?](/content/blog/log4j-another-code-execution-bug-should-you-worry/index.html): News of another possible open source vulnerability connected to Log4j raised eyebrows.  A look at the issue, it's disclosure, and our response. (1,291 words)
- [Developer Productivity for Engineering Leaders | Sonatype](/content/resources/whitepapers/engineering-leaders-guide-developer-productivity/index.html): Improve developer productivity by securing your software supply chain. Learn how to measure engineering productivity metrics and automate dependency management. (2,424 words)
- [The Critical Importance of OSS License Compliance](/content/blog/gartner-the-crucial-role-of-oss-license-compliance/index.html): Gartner's SCA recommendations include deep understanding of OSS licensing. Operating without license compliance, intentionally or not, invites peril.  
 (789 words)
- [Twilio-npm Package is Brandjacking Malware in Disguise](/content/blog/twilio-npm-is-brandjacking-malware-in-disguise/index.html): Sonatype’s Release Integrity, malicious code detection service, discovers twilio-npm` is brandjacking malware in disguise.  (1,014 words)
- [DevSecOps Leadership Forum: 500 Innovators Unite](/content/blog/devsecops-leadership-forum-500-innovators-learning-from-shared-experiences.html): This is a recap of experiences and insights shared at the 2020 DevSecOps Leadership Forum. On demand recordings of the event are now available for free. (990 words)
- [2025 Sonatype Elevate Awards: Submissions Now Open](/content/blog/elevate-your-organizations-success-submissions-now-open-for-the-2025-sonatype-elevate-awards.html): Submissions are open for the 2025 Sonatype Elevate Awards. Celebrate your organization's innovation and share your success story with the global community. (390 words)
- [Nexus Repository Recognized as a Red Hat OpenShift Solution](/content/press-releases/nexus-certified-red-hat-openshift-solution/index.html): Sonatype, the leader in software supply chain automation, today announced that it has containerized and certified its Nexus Repository to run on Red Hat. (488 words)
- [hubfs/understanding-20open-20source-20risk-pdf.html](/content/hubfs/understanding-20open-20source-20risk-pdf.html) (1,913 words)
- [2020 Software Supply Chain Report Reveals New Benchmarks](/content/press-releases/2020-sscr-new-speed-and-security-benchmarks/index.html): Discover insights from 1.5 trillion open source downloads in Sonatype's 6th Software Supply Chain Report. (661 words)
- [Best Practices for Managing Software Supply Chain Security](/content/blog/best-practices-for-managing-and-supercharging-your-software-supply-chain.html): Sonatype and Forrester talk the latest research related to software supply chain management and provide insights on best practices from DevSecOps leaders. (256 words)
- [Integrating Nexus Indexer API: Packing and Updating Explained](/content/blog/2009/09/nexus-indexer-api-part-3/index.html): Learn how to integrate and utilize the Nexus Indexer API for indexing, searching, packing, and updating binary repository indexes in your application. (859 words)
- [Malware Reaches 845K Packages | Sonatype OSS Malware Index](/content/press-releases/q2-2025-open-source-malware-index/index.html): Sonatype's Q2 2025 Open Source Malware Index reveals a 188% surge in malware targeting developers, emphasizing the need for proactive security measures. (734 words)
- [Setting Up a Private Docker Registry with Nexus Repository](/content/blog/setting-up-a-docker-private-registry-with-authentication-using-nexus-and-nginx.html): This article shows how you can set up a Docker Private Registry with authentication and SSL using Nexus Repository OSS. (754 words)
- [Explore Sonatype's Response to CISA's Secure by Design](/content/blog/a-demand-for-real-consequences-sonatypes-response-to-cisas-secure-by-design.html): Sonatype's founder and CTO Brian Fox discusses more stringent enforcement mechanisms to encourage wider adoption of secure development practices (1,953 words)
- [Best Practices for Repository Firewall | Sonatype Webinar](/content/resources/webinars/firewall-best-practices/index.html): Learn best practices to enhance repository protection and prevent malicious components from entering your SDLC. Watch now to fine tune Repository Firewall., Software security vulnerabilities can compromise your entire software supply chain. But with the right strategies in place, you can stop these risks at ... (221 words)
- [Unmasking Open Source Malware: Insights from ADDO Keynote](/content/blog/unmasking-the-invisible-threat-ilkka-turunens-keynote-at-addo.html): Discover how open source malware is silently infiltrating software supply chains at the world's largest DevOps event, All Day DevOps (ADDO) (395 words)
- [Build Promotion with Nexus Professional | Sonatype Blog](/content/blog/2010/08/temporary-staging-and-promotion-with-nexus-professional.html): Join our free webinar on Build Promotion with Nexus Professional to learn how to manage and promote software artifacts efficiently. Register now! (320 words)
- [US Congress Addresses Cyber Security Crisis | Sonatype](/content/press-releases/congress-intervenes-cyber-security/index.html): Developers Can Immediately Check Federal Software Applications for Open Source Vulnerabilities (617 words)
- [EclipseMagazine Interview on Maven Ecosystem with Sonatype](/content/blog/2010/03/eclipsemagazine-interview-with-jason-van-zyl/index.html): Explore the future of Maven, including Maven 3.0 features, backward compatibility, Polyglot Maven, and improvements in Nexus Repository. (2,898 words)
- [Sonatype and Bamboo: Improving Your Builds](/content/blog/2015/03/sonatype-integrates-bamboo/index.html): Sonatype now provides native Atlassian Bamboo support to improve the quality of your build outputs. (495 words)
- [How Sonatype's Container Scanning Protects You From Zero-Days](/content/blog/how-sonatypes-container-scanning-protects-you-from-zero-days.html): Go beyond basic container scanning. Detect zero-days, block malware, and secure dependencies with real-time intelligence and policy enforcement. (950 words)
- [A Decade of Change: Insights from the 2024 SSC Report](/content/blog/a-decade-of-transformation-the-10th-annual-state-of-the-software-supply-chain.html): Gain insights into open source security, emerging DevSecOps trends, and practical strategies to secure your software supply chain at All Day DevOps. (570 words)
- [Maven and Nexus Tips and Tricks Roundup | Sonatype Blog](/content/blog/2010/01/2009-tips-and-tricks-roundup/index.html): Explore essential Maven and Nexus tips for optimizing dependencies, staging roles, encrypting passwords, using GitHub, and more.  (912 words)
- [Roblox and Fortnite Spam Floods PyPI, NuGet, and npm](/content/blog/npm-pypi-nuget-flooded-by-roblox-and-fortnite-spam-what-draws-oss-attackers-to-gamers.html): Spammers flood PyPI, NuGet and npm with bogus Roblox and Fortnite spam, as open source attacks leveraging gaming platforms continue to increase. (954 words)
- [npm Package Found Disabling Windows Defender to Drop Trojan](/content/blog/malicious-npm-package-disables-windows-defender-antivirus.html): npm package 'flame-vali' makes multiple attempts to disable Windows Defender on the infected system before downloading a cryptominer. (472 words)
- [New Learning Module for Maven Repository Configuration](/content/blog/customer-education-get-up-to-speed-with-maven-repository-configuration-in-our-new-learning-module.html): New learning module to install and configure a maven repository with Nexus Repository 3. (437 words)
- [They Sent 300 Employees to a DevOps Conference](/content/blog/i-cant-go-to-that-devops-conference/index.html): The story of what led Derek Weeks and Mark Miller to found the All Day DevOps conference last year. (523 words)
- [Meet the Developers Behind Sonatype’s Malware Detection](/content/blog/meet-the-developers-behind-sonatypes-automated-malware-detection-system-securing-open-source-supply-chains.html): Meet the principal software engineers behind Sonatype's automated malware detection system, Release Integrity. 
 (696 words)
- [How to Add Additional Source Folders to Your Maven Build](/content/blog/2008/05/adding-additional-source-folders-to-your-maven-build.html): Learn how to easily add additional source folders to your Maven build using the build-helper-maven-plugin for efficient project management. (411 words)
- [Best Practices for Tools That Depend on Central Maven Repository](/content/blog/2008/12/maintain-an-essential-public-resource-the-central-maven-repository.html): Ensure responsible use of the Central Maven Repository by setting User-Agent headers, avoiding scraping, and minimizing 404 requests. (687 words)
- [SSL Connectivity Underway for All Central Repository Users](/content/blog/2014/07/ssl-connectivity-for-central/index.html): We’ve had quite a bit of public scrutiny recently over how we’ve chosen to provide SSL access to Central for the last two years. (1,010 words)
- [2024 Software Supply Chain Report | Scale of Open Source](/content/state-of-the-software-supply-chain/2024/scale/index.html): The growth of open source is a signal for innovation. Dive into open source adoption research to understand the state of the software supply chain.  (1,606 words)
- [Strengthen Financial Resilience: Navigating DORA Compliance](/content/blog/building-resilience-and-dora-compliance-lessons-gaps-whats-next.html): Explore key lessons and tools for DORA compliance, from automation to SBOMs, and learn how to build resilient, secure financial systems. (795 words)
- [Axios Compromise Explained | Sonatype Video](/content/resources/videos/axios-explained/index.html): Learn how a supply chain attack compromised Axios, highlighting the importance of verifying software dependencies and acting swiftly to mitigate risks. (135 words)
- [Sonatype Password Security: Trillion Trillion Trillion Centuries](/content/blog/2012/03/insights-password-security-is-a-trillion-trillion-trillion-centuries-secure-enough.html): Explore the security of passwords and application keys with Sonatype's tools, ensuring robust protection against brute force attacks. Discover effective protection. (415 words)
- [Enhance Nexus Repository with OSGi Bundle Repository Support](/content/blog/2009/07/nexus-pro-support-for-osgi-bundle-repositories/index.html): Discover how Sonatype Nexus Repository 1.3.5 supports OSGi Bundle Repositories, enhancing your ability to manage and deploy OSGi bundles with ease. (862 words)
- [Breaking Bad: DevOpsSec to DevSecOps](/content/blog/breaking-bad-devopssec-to-devsecops/index.html): Sean Davis (@seanasaservice) guides us through DevSecOps from a holistic view, using the television show Breaking Bad as the basis for our exploration.  (1,196 words)
- [Maven Central: New Design and Safety Features for Developers](/content/blog/new-design-new-features-maven-central-improvements-for-developers.html): Hosted by Sonatype, Maven Central has a refreshed interface and new features to improve the developer experience. (563 words)
- [Sonatype Grand Opening of India Innovation Hub in Hyderabad](/content/press-releases/grand-opening-of-india-innovation-hub/index.html): Sonatype opens its India Innovation Hub in Hyderabad, marking a significant step in global expansion. Learn more about this milestone event. (847 words)
- [Enhancing System Resiliency with Observability Insights](/content/blog/addo-session-building-observability-to-increase-resiliency.html): Discover how observability boosts system resiliency in a session from Sonatype's All Day DevOps event. Learn to detect and diagnose system failures early. (405 words)
- [New in Sonatype Nexus Repository 3.25: Switching to NuGet V3](/content/blog/new-in-nexus-repository-3-25.html): Nexus Repository 3.25 is live! It provides complete support for NuGet V3 repositories, including new Group repos and gives access to the updated V3 API. (602 words)
- [Explore Maven Settings Password Encryption Feature | Sonatype](/content/blog/2009/02/new-feature-maven-settings-password-encryption/index.html): Discover how Maven's new password encryption feature secures your settings.xml file, ensuring safer storage and handling of credentials. Explore best practices. (877 words)
- [GitLab: Instant, Inline, Indispensable Developer Insights](/content/blog/gitlab-instant-inline-indispensable-developer-insights.html): Nexus Lifecycle now gives you instant, inline, indispensable insights on your GitLab MRs to speed development, shift security left, and improve innovation.
 (657 words)
- [Explore Spring, Maven, and Nexus Best Practices | Sonatype](/content/blog/2009/12/spring-maven-nexus-best-practices/index.html): Discover best practices for managing Spring 3 artifacts in Maven using Sonatype Nexus Repository to streamline repository management for efficient builds. (321 words)
- [The State of Rust Adoption | Sonatype Webinar](/content/resources/webinars/devops-downloads/state-of-rust-adoption/index.html): Explore the benefits and challenges of Rust adoption in software development through expert insights and practical perspectives in our on-demand webinar., Rust has rapidly evolved from a niche language to a powerful tool embraced by millions of developers worldwide. With its user base growing to an impress... (260 words)
- [2025 Security Industry Predictions: Embracing Change](/content/blog/2025-predictions-industry/index.html): What’s next for tech in 2025? Experts predict AI-driven threats, industry consolidation, and a shift in how developers build and secure software. (607 words)
- [Sonatype Adds Native Helm Support to Nexus Repository](/content/press-releases/sonatype-adds-native-helm-support/index.html): Sonatype adds native support for Helm, and by extension Kubernetes, in both Nexus Repository Pro and our free version Nexus Repository OSS. (589 words)
- [Optimizing Software Supply Chains with Nexus Repository](/content/blog/nexus-repository-a-strategic-guide-from-git-to-governance.html): This guide explains the marketplace of source code management and git repos, application-level building and binary repos, and open source governance.  (1,366 words)
- [How to Browse Javadoc for Dependencies in Eclipse (m2eclipse)](/content/blog/2008/10/browsing-javadoc-for-dependencies-in-eclipse-m2eclipse.html): Learn how to easily browse Javadoc in Eclipse using m2eclipse, simplifying the process of accessing documentation for your Maven dependencies. (435 words)
- [Global Defense Provider Accelerates Development | Sonatype](/content/customer-stories/global-defense-provider-accelerates-development/index.html): Read case study on how a defense company increased release velocity with automated security processes (495 words)
- [A Deep Dive into Open Source Security Measures | Sonatype](/content/state-of-the-software-supply-chain/2023/open-source-security-practices/index.html): Explore OpenSSF's insights on security in open source. Analyze Security Scorecard data, trends, and the evolution in Java & JavaScript ecosystems (1,464 words)
- [Best Practices to Enhance Software Supply Chain Security](/content/blog/from-risks-to-resilience-best-practices-for-software-supply-chain-security.html): Explore best practices for software supply chain risks. Learn how to select open source components, mitigate vulnerabilities, and defend against malware. (743 words)
- [Meet an Open Source Contributor: Paul Horton](/content/blog/meet-an-open-source-contributor-paul-horton/index.html): Meet Paul Horton, one of the incredible open source contributors at Sonatype. Learn more about why he thinks more people should focus on Python.  (517 words)
- [Automated Dependency Management Tools | Sonatype](/content/solutions/dependency-management/index.html): Streamline software development with Sonatype's automated dependency management tools, mitigating risk effectively without slowing down workflows. (1,094 words)
- [CloudBees and Sonatype Launch DevOps Express Initiative](/content/press-releases/devops-express/index.html): Sonatype launches DevOps Express for easy access to integrated DevOps solutions. (506 words)
- [Software Supply Chain Threat Landscape | Sonatype Webinar](/content/resources/webinars/software-supply-chain-threat-landscapes/index.html): Explore the evolving software supply chain threat landscape and learn how to adapt security strategies to combat emerging risks in your organization., Modern day software relies heavily on open source coding components. Software supply chain attacks have increased an average 742% per year over the last... (234 words)
- [5 Ways Your Organization Benefits From DevSecOps](/content/blog/5-practical-ways-your-organization-benefits-from-devsecops.html): It's important to understand why DevSecOps matters in this day and age of security breaches and what the pragmatic benefits are for your organization. (1,062 words)
- [Sonatype Release Identifies OSS Risk & Resolution Remedies](/content/press-releases/determine-oss-risk/index.html): An Industry First, Developers Can Now Avoid Security Risks Without Missing Business-Critical Software Delivery Deadlines (765 words)
- [Nexus and Maven Highlights: Insights from October 2009](/content/blog/2009/10/13-in-other-new/index.html): Weekly roundup of blog posts featuring Sonatype, Maven, and Nexus projects, highlighting integration tips, tools, and personal developer experiences. (309 words)
- [Explore Nexus Plugin API | Sonatype Blog](/content/blog/2009/01/nexus-plugin-api/index.html): The Nexus Plugin API enhances Sonatype Nexus Repository with customizable plugins, providing powerful new features and flexibility for developers.  (802 words)
- [JSR330 Support: Hudson Plugins, Meet Dependency Injection](/content/blog/2011/03/hudson-plugins-meet-dependency-injection-jsr330-support-now-available.html): Hudson Plugins, Meet Dependency Injection: JSR330 Support Now Available (660 words)
- [Modernize DoD Software Procurement: Role of SBOMs in SWFT](/content/blog/understanding-swft-the-latest-effort-to-modernize-dod-software-procurement.html): Explore the DoD's SWFT initiative to accelerate software procurement. See how SBOMs are central to the future of cybersecurity and compliance. (1,146 words)
- [Optimizing Dependency Management in the Evolving Landscape](/content/state-of-the-software-supply-chain/2023/modernizing-open-source-dependency-management/index.html): Chapter 3: Dive into open source dependency management. Despite progress, 96% of vulnerable downloads in 2023 were avoidable. Who's responsible? (3,795 words)
- [Intuit's DevSecOps: War Games, Gamification, and Culture Hacking](/content/blog/intuits-devsecops-war-games-gamification-and-culture-hacking.html): Sit down with Shannon Lietz, Ian Allison, and Scott Kennedy from Intuit to learn about Rugged DevOps (some call in DevSecOps).  (3,926 words)
- [World Open Source Day: What We Learned](/content/blog/world-open-source-day-what-we-learned/index.html): We celebrated Feb 3rd as World Open Source Day at Sonatype last week by highlighting our incredible maintainers, contributors, and the open source projects. (422 words)
- [Managing OSS Licenses: Avoiding Risks with Sonatype Lifecycle](/content/blog/operating-without-an-oss-license-that-could-be-dangerous.html): The intent of OSS licensing is to to make sure software can remain open source and freely used. (835 words)
- [Request for Comments: CARE and Maven Central](/content/blog/request-for-comments-care-and-maven-central/index.html): Explore the proposed Maven Central CARE program for trusted remediation without breaking dependency management. (1,634 words)
- [Nexus OSS Meets NuGet](/content/blog/2014/09/nexus-oss-meets-nuget/index.html): The NuGet package manager has become the standard for developing software on the Microsoft platform which includes. (539 words)
- [Announcing the Winners of the Sonatype 2022 Elevate Awards](/content/blog/congratulations-to-the-sonatype-2022-elevate-awards-winners.html): Commerzbank AG, ABN Amro Bank NV, and Instinet are among the winners of the 2022 Sonatype Elevate Awards. (449 words)
- [Top Tips to Consider When Evaluating OSS Logistics Solutions](/content/blog/2015/02/oss-logistics/index.html): The overreliance on open source components has created new challenges for managing the speed, cost, and risks of continuous delivery in today's software. (1,119 words)
- [Sonatype and Fugue Partner to Shift Cloud Security Left](/content/press-releases/sonatype-and-fugue/index.html): Sonatype and Fugue are partnering to deliver the first infrastructure-as-code (IaC) solution that shifts cloud security left into the developer workflow. (782 words)
- [Unveiling the Trillion Dollar Engine of Innovation | ADDO](/content/blog/unveiling-the-trillion-dollar-engine-of-innovation-manuel-hoffmanns-keynote-at-addo.html): Explore the hidden trillion-dollar value of open source software at All Day DevOps (ADDO).  Learn how open source fuels technology and the global economy. (533 words)
- [Sonatype Lifecycle Enhancements Deliver Faster Remediation](/content/blog/new-nexus-lifecycle-enhancements-deliver-faster-remediation-experience.html): Prevent development hazards with new Nexus Lifecycle features to quickly compare versions, avoid vulnerabilities, and evaluate open source licenses. (681 words)
- [Empowering Developers with Automated Time-Based Waivers](/content/blog/empowering-developers-security-self-serve-and-automated-time-based-waivers.html): Tyro recently empowered their developers to build more secure software by instituting time-based waivers. (1,096 words)
- [Sonatype Spots CursedGrabber Packages in New Malware Campaign](/content/blog/cursedgrabber-strikes-again-sonatype-spots-new-malware-campaign-against-software-supply-chains.html): Sonatype has determined those behind the CursedGrabber Discord malware family, have published a new malware campaign against software supply chains (533 words)
- [Nexus vs Artifactory | Sonatype vs JFrog Comparison | Sonatype](/content/compare/sonatype-nexus-versus-jfrog-artifactory/index.html): Comparing Nexus vs Artifactory? See a head-to-head analysis of Sonatype vs JFrog on features, pricing, and security to choose the best artifact repository. (1,722 words)
- [How Organizations are Preparing for the Realities of AI-Driven Development ](/content/resources/webinars/preparing-for-ai-realities/index.html): Discover how organizations are leveraging AI for software development, modernization, and security in our upcoming webinar. Join experts for practical insights on AI-driven practices.,  (146 words)
- [Terraform Support | Sonatype Language and Package Support](/content/products/language-support/terraform/index.html): Manage Terraform providers and modules seamlessly with Sonatype Nexus Repository, enhancing reliability, control, and performance in your workflows. (570 words)
- [New Sonatype Scan Gradle Plugin: Secure Your Dependencies](/content/blog/new-sonatype-scan-gradle-plugin/index.html): The newest free plugin in the Sontaype toolbox is a Gradle plugin to scan, evaluate, and audit Gradle project dependencies. It is available now on GitHub. (585 words)
- [Secure Your Golang Dependencies with Nancy for Docker](/content/blog/nancy-on-a-boat-announcing-nancy-for-docker/index.html): Nancy checks for vulnerabilities in your Golang dependencies, powered by Sonatype OSS Index. docker-nancy wraps the nancy executable in a Docker image. (142 words)
- [Mastering Dependency Scanning: Mitigate Open Source Risks](/content/blog/rule-over-your-dependencies-and-scan-at-your-own-open-source-risk.html): A good way to make sure that your organization's vulnerabilities don't go unnoticed is conducting regular scans of open source used in your environments. (1,027 words)
- [Why Dependency Confusion Attacks Persist | Sonatype](/content/blog/why-are-dependency-confusion-attacks-not-going-away.html): Sonatype has caught more than 63,000 suspicious packages, the majority of which are dependency confusion candidates. Why are these attacks not going away? (764 words)
- [20 Essential DevSecOps Reference Architectures | Sonatype](/content/blog/start-with-devsecops-reference-architectures/index.html): Sixty-five percent of people are visual learners. Here, 20 DevSecOps reference architectures to help people start or improve their DevSecOps journey.
 (499 words)
- [Optimizing DevOps with Containers: Considerations for Success](/content/blog/container-considerations-on-your-devops-journey/index.html): Container Considerations on Your DevOps Journey.  A review of Chris Morgan's keynote session from All Day DevOps. (550 words)
- [How to Get Started With Sonatype Nexus Repository OSS](/content/blog/how-to-get-started-with-sonatype-nexus-repository-manager-oss.html): Repository managers play an important role in software development. Learn how to use Sonatype Nexus Repository Manager OSS to optimize package storage.  (1,239 words)
- [Chapter 6: Web Development | Sonatype Maven Cookbook](/content/resources/guides/maven-cookbook/web-development/index.html): Maven for Web Development: Simplify your web projects with Apache Maven. Explore best practices for frontend and backend development in this chapter. (646 words)
- [Letitia Long & Steve Hills Join Sonatype Board of Directors](/content/press-releases/letitia-long-and-steve-hills-join-sonatype-board-of-directors.html): Sonatype, the leader in automated open source governance •  Letitia Long and Steve Hills join Sonatype's board as independent directors. (549 words)
- [Nexus Support Team Answers Questions on Repository Management](/content/blog/qa-with-the-nexus-support-team/index.html): The Nexus Support Team answers questions and suggests solutions on the Nexus User List. Each Friday, we provide the ones we found most interesting.. (489 words)
- [40 DevSecOps Reference Architectures to Learn From](/content/blog/40-devsecops-reference-architectures-for-you/index.html): Scaling DevSecOps is no easy feat. There are so many ways to automate security across the SDLC, that it can become overwhelming quickly. (233 words)
- [Software Supply Chain Management: An Introduction | Sonatype](/content/resources/software-supply-chain-management-an-introduction/index.html): Explore the importance of software supply chain management in this guide, and learn how  innovation and security are evolving the software landscape. (1,604 words)
- [Vulnerability Management Tools: Detect & Remediate Software Risk](/content/solutions/vulnerability-management-tools/index.html): Automate vulnerability detection, prioritization, and remediation with Sonatype. Mitigate open source security risks to protect your applications. (873 words)
- [Golden Pull Requests: Automated Remediation, No Breaking Changes](/content/blog/golden-pull-requests-automating-trusted-remediation-without-breaking-builds.html): Golden Pull Requests automate dependency fixes, delivering policy-compliant, non-breaking upgrades that reduce risk and improve DevSecOps remediation. (1,292 words)
- [hubfs/from_reactive_to_proactive-pdf.html](/content/hubfs/from_reactive_to_proactive-pdf.html) (3,803 words)
- [Introducing Sonatype DepShield: Free for GitHub Developers](/content/blog/introducing-sonatype-depshield-free-for-github-developers.html): Today, Sonatype announced Sonatype DepShield, a new GitHub application that enables developers to experience basic open source governance, free of charge.  (313 words)
- [How to Upskill Your Team With Kubernetes](/content/blog/how-to-upskill-your-team-with-kubernetes/index.html): How we got everyone through the Certified Kubernetes Administrator (CKA) training and you can, too. (989 words)
- [Counterfeit npm Packages Targeting Developers | Sonatype](/content/blog/counterfeit-eslint-and-node-types-libraries-downloaded-thousands-of-times-abuse-pastebin.html): Fake npm packages mimicking ESLint and Node libraries expose serious npm security risks. Learn how these malicious packages threaten your software supply chain. (789 words)
- [Understanding Scala: The Language Powering Twitter and LinkedIn](/content/blog/2012/02/technology-focus-what-is-scala/index.html): Discover Scala's unique advantages in programming, its role in big data, and why it's favored by tech companies for parallel and concurrent systems. (743 words)
- [2025 Predictions: Navigating Compliance & Cyber Regulations](/content/blog/2025-predictions-regulations/index.html): Discover 2025 cybersecurity predictions: how regulations will reshape global compliance, impact software supply chains, and make cybersecurity a priority. (661 words)
- [Unboxing Guardrails for AI-Generated Code | Sonatype Webinar](/content/resources/webinars/unboxing-guardrails-for-ai-generated-code/index.html): Discover how to safely use AI-generated code in your software supply chain. Explore best practices and guardrails to put in place during this webinar. , AI coding assistants are transforming software development, helping teams move faster than ever. But speed often comes at a cost: vulnerable or low-qual... (277 words)
- [HID Global's 3 Pillars for Application Security | Sonatype](/content/blog/hid-globals-three-pillars-of-operational-security/index.html): The foundations of security at HID Global are a balanced set of tools, policies, and expertise.  A look back at a DevSecOps Leadership Forums talks in Paris. (1,065 words)
- [Streamline PCI DSS 4.0 Transition with Sonatype SBOM Manager](/content/blog/preparing-for-pci-dss-4-0-how-sonatype-sbom-manager-can-streamline-and-accelerate-your-transition.html): Prepare for PCI DSS 4.0 with Sonatype SBOM Manager. Streamline compliance, enhance security, and meet key requirements before the March 2025 deadline. (839 words)
- [Modernizing Nexus Repository: Moving Beyond OrientDB](/content/blog/modernizing-nexus-repository-moving-beyond-orientdb.html): OrientDB support is sunset in Nexus Repository. Learn why migrating to PostgreSQL or Nexus Repository Cloud is critical for security and performance. (524 words)
- [What is Network Perimeter Protection? | Sonatype](/content/resources/articles/network-perimeter-protection/index.html): Learn how to protect your software development lifecycle from open source malware with effective strategies for enhanced network perimeter protection. (1,576 words)
- [Critical Java Vulnerability in pac4j: CVE-2026-29000 Explained](/content/blog/pac4j-cve-2026-29000-sonatype-finds-19-additional-packages.html): Sonatype research reveals the broader impact of pac4j CVE-2026-29000, affecting 19 packages and tens of thousands of vulnerable downloads. (965 words)
- [Alexa: What's the future of cybersecurity? | Sonatype Blog](/content/blog/whats-the-future-of-cyber-security/index.html): Explore the future of cybersecurity and the critical need for securing the software supply chain against vulnerabilities and cyberattacks. (1,247 words)
- [Sonatype's Webinar Series: Future Cybersecurity Requirements](/content/blog/webinar-series-future-of-cybersecurity-requirements.html): Explore the future of cybersecurity requirements as experts discuss key regulations like NIS2, DORA, and the Cyber Resilience Act and how to comply. (518 words)
- [Deploy to Sonatype Nexus Repository with Maven | Sonatype](/content/blog/maven-deploy-to-sonatype-nexus-repository/index.html): Learn how to deploy to Sonatype Nexus Repository using the Maven deploy plugin. Follow this guide to successfully deploy artifacts to Nexus in your project. (823 words)
- [CVE-2025-13158 | Sonatype Security Advisory](/content/security-advisories/cve-2025-13158/index.html): Critical prototype pollution vulnerability in apidoc-core allows remote attackers to alter JavaScript object prototypes, risking DoS and application integrity. (140 words)
- [Contrasting Nexus and Artifactory | Sonatype Blog](/content/blog/2009/01/contrasting-nexus-and-artifactory/index.html): Compare Nexus and Artifactory repository managers, focusing on network protocols, storage methods, and performance. Explore which solution is best for you. (1,298 words)
- [Cybersecurity Liability | SEC Charges Against Solarwinds](/content/blog/how-the-sec-charges-against-solarwinds-highlight-the-cybersecurity-liability-of-software-companies.html): Read about how the Securities and Exchange Commission charged SolarWinds and its chief information security officer for violating federal securities laws (1,083 words)
- [CVE-2021-22114: Spring-Integration-Zip Path Traversal](/content/blog/deep-diving-into-cve-2021-22114-spring-integration-zip-path-traversal.html): We take a deep dive into CVE-2021-22114, which is causing problems for the second time.  (567 words)
- [Sonatype H2 Product Roadmap Webinar](/content/resources/webinars/customer-roadmap-h2-2026/index.html) (196 words)
- [SBOM: Securing Your Software Supply Chain  | Sonatype Webinar](/content/resources/webinars/2024-gartner-analyst-webinar/index.html): Discover how to secure your software supply chain with SBOMs. Learn about emerging regulations and strategies to enhance your security approach in this webinar., Watch exclusive session featuring Gartner Expert, Aaron Lord, as he discusses the critical need to strengthen your software supply chains. 

The industr... (216 words)
- [How to Contribute to the Maven Books | Sonatype Blog](/content/blog/2010/02/how-to-contribute-to-the-maven-books/index.html): Learn how to contribute to the Maven book with a step-by-step guide, including accessing source code and generating HTML and PDF formats using Maven. (217 words)
- [What is the Software Development Life Cycle (SDLC Stages)](/content/resources/articles/guide-to-software-development-life-cycle/index.html): Explore the advantages and challenges of the Software Development Life Cycle (SDLC) plus best practices for effective software development and maintenance. (1,164 words)
- [How to Respond to the Hijacked eslint-scope Packages](/content/blog/3-steps-to-deal-with-the-aftermath-of-the-highjacked-eslint-scope-package.html): Yesterday at noon BST a new github issue was opened in the popular eslint repository on github. (702 words)
- [Optimizing Security and Efficiency with Sonatype Lifecycle](/content/blog/sonatype-lifecycle-best-practices-getting-started-and-managing-sboms.html): Sonatype Lifecycle enables you to control known and unknown risks by automating and optimizing the security and management of software supply chains. (1,018 words)
- [Critical Vulnerability in Bouncy Castle: CVE-2018-5382](/content/blog/cve-2018-2018-5382-bouncycastle-information-exposure.html): In this month's Nexus Intelligence Insights, we're covering CVE-2018-5382: Information exposure in the bouncycastle component

 (776 words)
- [Sonatype Unveils Nexus Platform with a Focus on Innovation](/content/press-releases/sonatype-unveils-nexus-platform/index.html): Sonatype today introduced the Nexus software platform designed to help IT organizations deliver higher quality software, even faster. (532 words)
- [Nexus Intelligence Idenifies Hidden JS Vulnerabilities](/content/press-releases/sonatypes-highlights-hidden-javascript-vulnerabilities.html): Discover DepShield by Sonatype: a free GitHub app for streamlined open source governance in DevSecOps. (346 words)
- [Simplify Cybersecurity: The OWASP Vulnerability Management](/content/blog/going-online-with-the-owasp-vulnerability-management-guide-working-group.html): The OWASP Vulnerability Management Guide (OVMG) project seeks to simplify vulnerability management into repeatable and scalable cycles.
 (1,061 words)
- [How to Access Maven Central with REST API | Sonatype](/content/blog/2011/06/you-dont-need-a-browser-to-use-maven-central/index.html): Learn how to use Maven Central's REST-style API for programmatic searches without a web browser. Unlock capabilities for efficient artifact management. (534 words)
- [Rust in the Enterprise | Sonatype Webinar](/content/resources/webinars/devops-downloads/rust-in-the-enterprise/index.html): Explore best practices for Rust adoption in enterprises in this webinar focused on governance, risk, and maintainability with insights from industry experts., As Rust gains traction in enterprise environments, ensuring security and scalability becomes paramount. In our final episode in this three part Rust ser... (239 words)
- [Women in Cybersecurity: Career Advice & Insights | Sonatype](/content/blog/a-decade-as-a-woman-in-cybersecurity-what-i-wish-i-had-known.html): Explore cybersecurity career advice from a Senior Security Researcher. Learn about women in tech security and get reflections on navigating the industry. (988 words)
- [Secure Coding with OWASP Security Knowledge Framework](/content/blog/owasp-security-knowledge-framework/index.html): OWASP's security knowledge framework (SKF) is a method to help web and app developers establish best practices at each stage of product development.  (891 words)
- [Mapping the JavaScript Genome for DevOps](/content/blog/mapping-the-javascript-genome-for-devops/index.html): High performing organizations use DevOps principles to boost productivity, streamline software supply chains, and improve quality.  
 (1,513 words)
- [Understanding the OWASP Top 10: Essential Web Security Risks](/content/blog/what-is-owasp/index.html): Discover the significance of OWASP in cybersecurity – What is OWASP and why it is vital for developers and organizations? Dive deeper with Sonatype. (1,530 words)
- [Selecting OSS Software: 10 Questions for Nexus Repository](/content/blog/2010/01/10-questions/index.html): Selecting OSS Software: 10 questions answered for Sonatype Nexus Repository (1,900 words)
- [Securing Financial Services from Malware Threats | Sonatype](/content/resources/webinars/securing-finserv-from-malware/index.html): Learn how to combat malware threats in financial services with practical strategies for early detection. Start building a resilient software supply chain., Malware attacks in financial services have surged 156% in 2024, with thousands of new threats emerging every 60 days. With the increasing reliance on op... (210 words)
- [Faker npm Library Gets New Home After Dev Quits | Sonatype](/content/blog/faker-npm-library-gets-new-home/index.html): New maintainers have taken over the popular Faker npm library. See what this open source maintainer change means for developers across the npm ecosystem. (618 words)
- [Streamline Dependency Management: Sonatype IQ with Webpack](/content/blog/using-nexus-iq-server-with-webpack/index.html): We realize that these challenges are not unique to our own development. For that reason, we released the webpack plugin to our FOSS community repo. (739 words)
- [Request a Quote of Sonatype Nexus Repository](/content/products/sonatype-nexus-repository/quote/index.html): Discover how Sonatype Nexus Repository can help you accelerate development. Connect with our sales team for a customized quote today. (323 words)
- [Government Intervention in Software Supply Chain Security](/content/resources/whitepapers/2023-sbom-survey-report/index.html): Discover how the Cybersecurity Executive Order is driving enterprises to adopt SBOMs for enhanced software supply chain security. Download the whitepaper. (272 words)
- [Open Source Risks: Security & Supply Chain Guide | Sonatype](/content/resources/guides/understand-open-source-risks/index.html): Understand open source security risks to defend against software supply chain attacks. This guide provides a complete overview of the risks facing developers. (2,052 words)
- [DevSecOps Community Survey: Meet the Winner](/content/blog/2019survey-winner/index.html): Meet one of the winners from the DevSecOps Community Survey: Brian McClung, Director of Deployment and Integration at Ericsson. (469 words)
- [Bladeroid Malware: npm Packages Spread Crypto-Stealer](/content/blog/npm-packages-caught-spreading-bladeroid-info-stealer.html): Sonatype has identified multiple open source packages that infect npm developers with a Windows info-stealer and crypto-stealer called Bladeroid (870 words)
- [All Day DevOps Conference: Bringing DevOps to the World](/content/blog/all-day-devops-conference-and-cfp/index.html): November 15, 2016 will see the first truly global, online DevOps Conference: All Day DevOps.  15 hours, 15 time zones, 54 sessions, 3 keynotes. (718 words)
- [CVE-2025-1889 | Sonatype Security Advisory](/content/security-advisories/cve-2025-1889/index.html): Explore CVE-2025-1889 disclosed by the Sonatype Research Team. Picklescan versions before 0.0.22 may miss malicious pickle files in PyTorch models. (516 words)
- [Automating the automation tools at Capital One | Sonatype Blog](/content/blog/how-capital-one-automates-automation-tools/index.html): At ADDO, George Parris gave a talk, entitled Meta Infrastructure as Code: How Capital One Automates our Automation Tools with an Immutable Jenkins. (635 words)
- [VMware VSphere Dependency Confusion Thwarted by Sonatype](/content/blog/vmware-vsphere-dependency-confusion-attempt-caught-by-sonatype.html): Sonatype's automated malware detection bots flagged a suspicious dependency that has the same name as a real package used by VMware VSphere SDK developers. (1,091 words)
- [Use Sonatype for DevOps and Put the Puppet in a Box](/content/blog/2012/09/dont-do-it-wrong-put-that-puppet-in-a-box-and-use-nexus-for-devops.html): Optimize DevOps by using Sonatype Nexus to streamline deployment and maintain clear boundaries between development and operations for efficient automation. (1,220 words)
- [How to Design Teams to Bridge the Security Gap](/content/blog/bridge-the-security-gap/index.html): Even if you work for a large organization, chances are that you could memorize the names of all the security folks working in IT. (1,800 words)
- [Sonatype's Commitment to Customers and Employees During COVID-19](/content/blog/sonatypes-commitment-to-customers-and-employees-during-covid-19.html): Sonatype reaffirms its commitment to customer success and employee safety during COVID-19, ensuring business continuity through robust remote operations. (525 words)
- [DevOps Culture: The Neuroscience of Behavior](/content/blog/devops-culture-the-neuroscience-of-behavior/index.html): Helen Beal of Ranger4 takes a look at how the brain works, and what that means for cultural transformation. This is your brain on DevOps.  (661 words)
- [The Future of Dependency Management in an AI-Driven SDLC | Sonatype](/content/blog/the-future-of-dependency-management-in-an-ai-driven-sdlc.html): AI accelerates development but also dependency risk. See why the future of dependency management requires autonomous, policy-driven security. (1,106 words)
- [Nexus 2.3 Now Available: Includes Support for Yum](/content/blog/2013/01/nexus-2-3-now-available-includes-support-for-yum/index.html): Discover the new features in Nexus 2.3, including Yum support and enhanced search capabilities, to streamline your development lifecycle. (364 words)
- [Sonatype Pricing & Nexus Repository Plans | Sonatype](/content/products/pricing/index.html): Find the perfect Sonatype pricing plan for your needs. Compare features for Nexus Repository, Lifecycle, and Firewall to start building securely today. (732 words)
- [Is Your Company Prepared for Software Liability Regulations?](/content/blog/make-sure-your-company-is-prepared-for-evolving-liability-regulations.html): Organizations should understand changes to liability and government regulation, and have the proper tools in place to protect their software supply chains. (2,383 words)
- [Building a Mythos-Ready Software Supply Chain](/content/resources/webinars/building-mythos-ready-ssc/index.html) (155 words)
- [Maven 3.0: Resolving Core Issues + Enhancing Build Processes](/content/blog/2009/11/maven-30-new-and-improved-formula/index.html): Discover the improved Maven 3.0, addressing critical bugs from Maven 2.x, enhancing multi-module project builds with better reliability and performance. (343 words)
- [ServiceNow and Sonatype Integration | Sonatype](/content/products/integrations/servicenow/index.html): Integrate Sonatype Lifecycle with ServiceNow to enhance vulnerability management, streamline remediation, and improve collaboration across your teams. (245 words)
- [Nexus Repository Manager 2 is End-of-Life | Sonatype](/content/products/sonatype-nexus-repository/upgrade/version-2/index.html): Upgrade to Nexus Repository Manager 3 for enhanced features, improved scalability, and modern security. (1,076 words)
- [$3M Cryptocurrency Heist Stemmed from a Malicious GitHub Commit](/content/blog/3-million-cryptocurrency-heist-malicious-github-commit.html): Cryptocurrency site loses funds after supply chain attack.  A look at what happened, this time due to poor Git security policy. (744 words)
- [Initiatives in Security: Growth of Regulations & Standards](/content/state-of-the-software-supply-chain/2023/expansion-of-regulations/index.html): Uncover the global drive for software supply chain regulations led by the EU and US, addressing cybersecurity threats. (3,858 words)
- [What Is Mythos and How Much Risk Does It Create? | Sonatype](/content/resources/podcasts/what-is-mythos/index.html): Learn how Anthropic's Mythos AI found a 27-year-old OpenBSD flaw, what it means for security teams, and the future of AI-driven risk. (720 words)
- [Software Supply Chain Management: What is SSC? | Sonatype](/content/resources/software-supply-chain-management-part-1-what-is-a-software-supply-chain.html): Explore the complexities of software supply chains in this guide that draws parallels to manufacturing. See how quality and supplier choices impact DevOps. (1,111 words)
- [Sonatype Nexus Repository Is Rising Above the Swamp](/content/blog/sonatype-nexus-is-rising-above-the-swamp/index.html): With Vista by our side, Sonatype's direction is clear, and Nexus is rising above JFrog Artifactory.  We invite you to test the Nexus difference.  (716 words)
- [Introducing a Free Nexus Repository Community Edition](/content/blog/sonatype-nexus-repository-community-edition/index.html): Sonatype Nexus Repository has a new Community Edition and updated usage limits to enhance reliability, scalability, and support for modern development. (976 words)
- [New in Nexus Repository: Enhanced Support and New Features](/content/blog/nexus-repository-rising-say-hello-to-the-new-pro/index.html): Upgrade to Nexus Repository Pro 3, now with active-active high availability.  Build the best software using precise component intelligence. (500 words)
- [Nexus Repository 2.1: Fueled by Unicorns With Jet Packs](/content/blog/2012/09/nexus-2-1-fueled-by-gun-toting-unicorns-with-jet-packs.html): Discover the efforts behind Sonatype Nexus Repository 2.1 and how it sets the standard for artifact repository management. Download Community Edition free. (75 words)
- [Why the World's Vulnerability Index Cannot Keep Up](/content/blog/why-the-worlds-vulnerability-index-cannot-keep-up/index.html): Sonatype's 2025 research shows CVE/NVD gaps in coverage, accuracy, and speed. Learn why indexing falls short and how real-time intelligence can help. (720 words)
- [CMMC Readiness Assessment Results](/content/cmmc-readiness-assessment-results/index.html) (307 words)
- [The ultimate Java build system | Sonatype blog](/content/blog/2009/05/the-ulitimate-java-build-system/index.html): Discover the ultimate Java build system integrating Maven, Subversion, Hudson, Nexus, and Sonar for seamless enterprise software development.  (296 words)
- [Sonatype Achieves Record Growth and Expands Leadership Team](/content/press-releases/sonatype-achieves-record-growth-expands-leadership-team.html): Sonatype exceeds H1 2022 financial goals and welcomes a new CRO and world-renowned board member, as the company looks toward even greater growth in H2  (668 words)
- [hubfs/1-2025_website-assets/resource_files/beyond-20the-20sbom-20seo-20whitepaper-pdf.html](/content/hubfs/1-2025_website-assets/resource_files/beyond-20the-20sbom-20seo-20whitepaper-pdf.html) (2,011 words)
- [Sonatype Nexus Repository and Helm for CI/CD | How-To Guide](/content/blog/how-to-use-nexus-repository-and-helm-for-ci/cd/index.html): Helm is the first and the most popular package manager for Kubernetes. Here's how to combine it with Nexus Repository to secure your CI/CD pipeline. (1,447 words)
- [Why Software Supply Hygiene Matters: Exploring a Legal Case](/content/blog/the-curios-case-of-a-german-smartphone-why-software-supply-hygiene-matters.html): We live our lives with license agreements that make software vendors immune to liability -- but are things about to change?  (423 words)
- [Cheeseburger Risk: Not for the Faint of Heart](/content/blog/2014/05/cheeseburger-risk/index.html): If you had a heart attack, would you stop eating cheeseburgers? For most people, the answer is “No”. (722 words)
- [Why Developer Experience Is the Foundation of DevSecOps Success](/content/blog/why-developer-experience-is-the-foundation-of-devsecops-success.html): Developer experience drives DevSecOps success. Learn how prioritization, automation, and workflows help teams reduce noise and fix vulnerabilities faster. (885 words)
- [Solventum’s Journey to Standardizing the Software Supply Chain](/content/resources/webinars/solventums-journey/index.html): Discover how Solventum standardized its software supply chain, enhancing collaboration and governance while driving organic adoption of essential tools.,  (183 words)
- [DevSecOps Essentials: Integrating Security into the SDLC](/content/blog/devsecops-a-beginners-guide/index.html): Explore the fundamentals of DevSecOps, its principles, practices, and the shift it represents in security within the software development life cycle (1,327 words)
- [The Mythos AI Vulnerability Storm: What to Do Next](/content/blog/the-mythos-ai-vulnerability-storm-what-to-do-next/index.html): The Mythos AI vulnerability storm is accelerating exploits at machine speed. Learn how to secure your software supply chain against rising AI-driven risk. (930 words)
- [Proxying Conda Repositories with Sonatype Nexus Repository](/content/blog/proxy-a-conda-repository-using-nexus-repo/index.html): Conda is popular with data scientists because they can take advantage of Python's flexibility while using existing C and Fortran models and libraries. (305 words)
- [Software Supply Chain Security Inside and Out | Sonatype](/content/blog/supply-chain-security-inside-and-out/index.html): Every organization needs to safeguard their SDLC. Take a look at two key aspects of ensuring external and internal security for your software supply chain. (636 words)
- [We're Bringing Sexy Back, Sonatype Hits the Catwalk](/content/blog/2014/06/open-source-new-sexy/index.html): Enthusiasm for securing the software supply chain is growing in both conversation and practice. (504 words)
- [Explore Sonatype Nexus Security Advisory | Sonatype Blog](/content/blog/2014/01/sonatype-nexus-security-advisory/index.html): Sonatype Nexus Security Advisory alerts users to a critical vulnerability in versions 2.7.0 and earlier, urging immediate patching to prevent attacks. (1,302 words)
- [Request a Quote of Sonatype Firewall](/content/products/sonatype-firewall/quote/index.html): Discover how Sonatype Firewall can block malicious packages before they ever reach your repository. Connect with our sales team for a customized quote. (313 words)
- [Malware Monthly: Exploring Open Source Threats and Cyber Risks](/content/blog/malware-monthly-february-2023/index.html): The February 2023 edition of Malware Monthly shares insights into copycat information stealers, malware linked to video game mods, and more.  (1,323 words)
- [Explore CISA's 2025 SBOM Minimum Elements | Federal Agencies](/content/blog/what-federal-agencies-need-to-know-about-cisas-2025-sbom-minimum-elements.html): CISA's 2025 SBOM Minimum Elements help agencies strengthen supply chain security, streamline compliance, and manage risk proactively. (1,290 words)
- [Sonatype Expands its Executive Team Following a Great 2018](/content/press-releases/sonatype-expands-its-executive-team-following-an-outstanding-2018.html): Sonatype grows leadership team for faster global expansion and innovation after a 67% new business boost in 2018. (777 words)
- [Sonatype and CyberRes Fortify Expand Partnership | Sonatype News](/content/press-releases/sonatype-and-cyberres-fortify-expand-partnership/index.html): Sonatype announced an expanded partnership with CyberRes, a Micro Focus line of business, to provide a complete application security solution. 
 (653 words)
- [Testing Nexus With Selenium: A Lesson in Complex UI Testing](/content/blog/2009/10/selenium-part-2/index.html): Master complex UI testing with Selenium by tackling specific challenges of ExtJS in Nexus. Learn how to simplify test creation with Page Object Pattern. (1,344 words)
- [Mitigating Zero-Day Vulnerabilities: Guide for DevOps Teams](/content/blog/zero-day-vulnerabilities-a-beginners-guide/index.html): Zero-day vulnerabilities emphasize the need for quick, effective response and vigilant security in CI/CD environments to mitigate evolving threats. (1,035 words)
- [Malicious PyTorch Lightning Packages Found on PyPI](/content/blog/malicious-pytorch-lightning-packages-found-on-pypi/index.html): Malicious PyTorch Lightning versions stole credentials and spread via compromised releases, highlighting risks of trusted packages. (972 words)
- [Defend Against Trojan Unicode Attacks | Firewall](/content/blog/how-to-protect-yourself-against-trojan-source-unicode-attacks-with-nexus-firewall.html): A new kind of attack, Trojan Source, hides vulnerabilities in plain sight of open source code. Protect your development teams with Nexus Firewall. (709 words)
- [DevSecOps Goes Mainstream](/content/blog/devsecops-goes-mainstream/index.html): Traditional security techniques using ownership and control rather than trust will not work in the digital world. (362 words)
- [Announcing Keynote Speakers for 9th Annual ADDO | Sonatype](/content/press-releases/sonatype-announces-keynote-speakers-for-9th-annual-all-day-devops.html): Industry panel to reveal 10th Annual State of the Software Supply Chain Report along with keynotes from AWS, SmartBear, and Harvard at All Day DevOps.  (614 words)
- [Maven IDE and Eclipse: A New Era of Seamless Integration](/content/blog/2011/01/maven-ide-the-year-of-maven-eclipse-2/index.html): Explore the integration of Maven with Eclipse, promising enhanced development tools and robust infrastructure, driven by Sonatype's dedicated efforts. (1,435 words)
- [SANDWORM_MODE: Rise of Adaptive Supply Chain Worms in Ecosystems](/content/blog/sandworm_mode-the-rise-of-adaptive-supply-chain-worms.html): Adaptive npm malware SANDWORM_MODE shows how attackers exploit artificial intelligence (AI) tooling and pipelines to spread software supply chain worms. (1,317 words)
- [Sonatype Launches New Partner Acceleration Program](/content/press-releases/sonatype-launches-new-partner-acceleration-program/index.html): Sonatype announces a new Partner Acceleration Program, offering partners a wider range of benefits and increased go-to-market value. (659 words)
- [Integrating SBOMs into Your Software Development Life Cycle](/content/blog/how-to-integrate-sboms-into-the-software-development-life-cycle.html): Discover strategies for incorporating software bills of materials (SBOMs) into your software development life cycle (SDLC) (1,057 words)
- [Upgrade Nexus Repository for Versions 3.71.0 through 3.77.x](/content/products/sonatype-nexus-repository/upgrade/3-71-0-to-3-77-x.html): Unlock enhanced features in the latest Nexus Repository version. Upgrade for expanded support and security enhancements to future-proof your workflows. (490 words)
- [Sonatype Earns AWS DevOps Competency Status | Sonatype](/content/press-releases/sonatype-earns-aws-devops-competency-status/index.html): Sonatype has achieved Amazon Web Services (AWS) DevOps Competency status and  expanded its AWS Marketplace presence with Sonatype Lifecycle SaaS. (467 words)
- [Using Sonatype Nexus Repository 3: Docker Images | Sonatype](/content/blog/using-sonatype-nexus-repository-3-part-3-docker-images.html): This is the third and last part of a series of posts on Sonatype Nexus 3 and how to use it as repository for several technologies.  (773 words)
- [Sonatype Nexus Repository Docker Installation Guide](/content/blog/sonatype-nexus-installation-using-docker/index.html): Learn how to complete a Sonatype Nexus Repository installation using Docker. A step-by-step guide for setting up your container registry. (381 words)
- [Discord Patches Critical Electron Bugs Amid Rising Attacks](/content/blog/discord-squashes-critical-electron-bugs-open-source-attacks-continue-to-grow.html): Discord recently patched a set of critical vulns that could allow a skilled attacker to gain Remote Code Execution privileges on the users’ Desktop app.
 (1,277 words)
- [2024 State of the Software Supply Chain | Optimizing Efficiency](/content/state-of-the-software-supply-chain/2024/optimization/index.html): Learn how to change your open source consumption behaviors to optimize risk mitigation efforts and reduce waste. (2,707 words)
- [Maven by Example: Introducing Apache Maven | Sonatype Guide](/content/resources/guides/maven-by-example/introducing-apache-maven/index.html): Discover how Apache Maven simplifies project management and build processes through conventions, plugins, and a common interface. (3,584 words)
- [Integrating Maven 3 with Sonar | Sonatype](/content/blog/2010/08/maven-3-and-sonar/index.html): Learn how to integrate Maven 3 with Sonar effortlessly, ensuring seamless project analysis and continuous delivery. Follow our step-by-step guidaince. (332 words)
- [Application Security Needs to Be Redefined to Stay Relevant](/content/blog/2013/07/application-security-needs-to-be-redefined-to-stay-relevant.html): Redefining application security is crucial in the age of DevOps. Discover how integrating security into the entire software lifecycle improves agility. (1,285 words)
- [Secure Your AI/ML Pipelines Against Shadow Risks | Sonatype](/content/solutions/shadow-risks/index.html): Detect malicious models, stop shadow downloads, enforce AI governance, and maintain AI‑inclusive SBOMs to protect against malicious AI components.
 (747 words)
- [Sonatype Named to JMP Securities’ Top 50 Private Companies](/content/press-releases/sonatype-jmp-securities-top-50/index.html): Sonatype named to JMP Securities’ Top 50 List of Hottest Privately Held Companies for its innovative approach in transforming software development. (264 words)
- [Building Open Source Management into Software Development](/content/blog/2011/11/build-open-source-management-into-software-development-open-source-development-tip-8.html): Build Open Source Management into Software Development: Open Source Development Tip #8 (450 words)
- [Fintech Leader Maximizes Security | Sonatype Success Story](/content/customer-stories/fintech-leader-maximizes-security/index.html): See how Sonatype helped a fintech leader improve their software supply chain security and reduce critical and high severity vulnerabilities by 80% (871 words)
- [Maven Central Repository Traffic: Using S3 | Sonatype Blog](/content/blog/2008/12/central-maven-repository-taffic-using-s3/index.html): Optimizing Maven Central traffic with Amazon S3 led to significant performance improvements and cost savings, enhancing availability and response times. (1,425 words)
- [How to Use Nancy to Improve Your Go Application Security](/content/blog/how-to-use-nancy-to-improve-your-go-application-security.html): Nancy, as you may know by reputation, is a detective. She uses Sonatype's OSS Index to check for vulnerabilities in your Go dependencies. (1,631 words)
- [Sonatype Named Agile Code Development Market IDC Innovator](/content/press-releases/sonatype-named-idc-innovator/index.html): Sonatype named an IDC Innovator in the agile code development market by International Data Corporation (IDC). (377 words)
- [Nexus Reaches 50,000](/content/blog/2015/02/nexus-reaches-50000/index.html): Active Nexus instances have grown 100% within the past 18 months. Just awesome. And, YOU, our user community made it happen. (673 words)
- [Now Playing: Grails 1.1b2 with Improved Maven Support](/content/blog/2008/12/now-playing-grails-11b2-with-improved-maven-support.html): Discover the new features in Grails 1.1 Beta 2, including improved Maven support. Learn about the relationship between Groovy and Java development. (364 words)
- [Reinventing Wheels and Opportunity Cost | Why You Need Nexus](/content/blog/2012/06/reinventing-wheels-and-opportunity-cost-or-why-you-need-to-use-nexus.html): Reinventing Wheels and Opportunity Cost (or Why you Need to use Nexus) (1,279 words)
- [How a Software Bill of Materials Uncovers Known Vulnerabilities](/content/blog/2015/04/the-two-minute-open-source-risk-assessment/index.html): Discover how a software bill of materials (SBOM) can quickly identify vulnerabilities and license risks in your applications. (543 words)
- [Secure, Reliable Terraform At Scale With Sonatype Nexus Repository](/content/blog/secure-reliable-terraform-at-scale-with-sonatype-nexus-repository.html): Secure and scale Terraform with Sonatype Nexus Repository, adding governance, reliability, and control to providers and modules without changing workflows. (1,084 words)
- [Maven 3.0-alpha-3 Released | Sonatype Blog](/content/blog/2009/11/maven-30-alpha-3-released/index.html): Maven 3.0-alpha-3 released, offering improved performance, stability, and new features for better integration and usability. Explore the advancements. (779 words)
- [Sonatype Brings NuGet Component Management to .NET Community](/content/press-releases/nuget-component-management/index.html): Nexus OSS to improve build performance and application security for millions of developers (465 words)
- [Hear no evil, see no evil, deploy no evil | Sonatype blog](/content/blog/2014/08/deploy-no-evil/index.html): Explore why testing software, especially software that includes open source components, is crucial for reliability and security. (693 words)
- [Enhancing Maven Central: Improving Quality and Accelerating Access](/content/blog/2010/01/nexus-oss-ecosystem/index.html): Enhancing Maven Central with Nexus to improve artifact quality, streamline processes, and support a polyglot ecosystem for better developer experience. (1,873 words)
- [The Effects of AI on Developers | Sonatype Whitepaper](/content/resources/whitepapers/effects-of-ai-on-devs/index.html): Explore the impact of generative AI on software developers, addressing concerns while highlighting its potential to enhance workflows and code quality.  (165 words)
- [Gitpaste-12: Exploits on GitHub, Attacked Linux Servers](/content/blog/gitpaste-12/index.html): Gitpaste-12, a worming botnet, is extremely versatile in its advanced capabilities as it leverages trustworthy sites like GitHub and Pastebin to host it. (980 words)
- [Integrating Nexus Indexer API: Indexing Maven Repositories Made Easy](/content/blog/2009/06/nexus-indexer-api-part-1/index.html): Integrate Nexus Indexer API into your application for efficient artifact search and indexing. Learn about indexing with code examples in this detailed guide. (1,011 words)
- [The 2021 State of the Software Supply Chain Report](/content/resources/whitepapers/2021-state-of-the-software-supply-chain-report-2021.html): 2021 Software Supply Chain Report: Insights from 100k applications and 4 million open source migrations. (167 words)
- [Cybersecurity Predictions 2025: AI Malware Trends | Sonatype](/content/blog/2025-predictions-threats/index.html): Explore 2025 cybersecurity predictions from experts, like AI malware trends, open source risks, and future threats to help you prepare for what's ahead. (677 words)
- [450 Packages and Phishing Campaign against PyPI Maintainers](/content/blog/this-week-in-malware-aug-26-22/index.html): This week Sonatype discovered and analyzed 450 packages flagged as malicious, suspicious, or dependency confusion attacks.
 (860 words)
- [Sonatype Advanced Legal Pack | Sonatype](/content/products/advanced-legal-pack/index.html): Streamline open source license compliance with automated reporting and actionable insights using Sonatype's Advanced Legal Pack, reducing legal risk., Explore our platform (798 words)
- [Malicious Roblox and Discord Token Stealers Found on PyPI](/content/blog/malicious-roblox-cookie-and-discord-token-stealers-hit-pypi-repository.html): Four malicious PyPI packages including 'xss,' 'Easyfuncsys,' were found by Sonatype on PyPI repository. (809 words)
- [DevSecOps Maturity Model: Complete Security Practices Guide](/content/blog/devsecops-maturity-model-a-beginners-guide/index.html): Explore the concept of a maturity model within the context of DevSecOps which serves as a guide to fortify security practices within software development. (1,352 words)
- [DevOps Research Reveals Private Sector Attitude on AppSec](/content/press-releases/appsec-in-government/index.html): Sonatype, the leader in software supply chain automation, today announced the government results of its 2017 DevSecOps Community Survey. (583 words)
- [DevOps Express: How it happened and why we did it | Sonatype Blog](/content/blog/devops-express-how-it-happened-and-why-we-did-it/index.html): Sonatype, the leader in software supply chain automation, announced the launch of DevOps Express, a one-of-a-kind industry initiative that simplifies. (748 words)
- [Sonatype  + GitLab | Better Together](/content/sonatype-and-gitlab/index.html): Learn how GitLab and Sonatype offer developers the world’s best software supply chain security with the DevOps tools you already have in place.

 (1,432 words)
- [Block Vulnerable Open Source Artifacts | Repository Firewall](/content/blog/step-by-step-block-and-quarantine-vulnerable-open-source-components-and-artifacts-with-nexus-firewall.html): Learn to block and quarantine vulnerable open source components using Sonatype Repository Firewall with our new video guides. Access free training and resources. (218 words)
- [DevSecOps: Better Software, Faster](/content/blog/2016/01/rugged-devops-solving-big-problems/index.html): 1 in 16 open source and third-party components downloaded last year included a known vulnerability. (653 words)
- [OWASP Top 10: Navigating AI Risks in Application Security](/content/blog/owasp-top-10-application-security-meets-ai-risk/index.html): The updated OWASP Top 10 highlights how insecure design, open source dependencies, and AI-driven development amplify application risk. (1,013 words)
- [Rubyists Rejoice: Sonatype Nexus Repository Support RubyGems](/content/blog/2014/12/nexus-support-rubygems/index.html): Sonatype Nexus Repository 2.11 now supports RubyGems, making gem management easier and more efficient with proxy and hosted repository capabilities. (808 words)
- [Exploring the 9th State of the Software Supply Chain Report](/content/blog/introducing-our-9th-annual-state-of-the-software-supply-chain-report.html): Sonatype announces the arrival of our 9th annual State of the Software Supply Chain report that explores open source security, industry trends, and more. (982 words)
- [Sonatype CEO on DevOps Maturity and DevSecOps Beginnings](/content/blog/devops-in-the-3rd-inning-devsecops-in-the-1st-says-sonatype-ceo.html): The global software supply chain is keeping the hitter honest, to use a baseball analogy. The state of open source is moving to anticipate growing speed. (621 words)
- [DevOps Research Reveals New Attitude on Application Security](/content/press-releases/devsecops-survey-press-release/index.html): Sonatype, the leader in automated open source governance •  Sonatype announces the results of its 2017 DevSecOps Community Survey. (562 words)
- [Micro Focus Extends Partnership with Sonatype | Sonatype](/content/press-releases/micro-focus-extends-partnership-with-sonatype/index.html): Sonatype and Micro Focus announced an expanded strategic partnership to provide more enterprises with best-in-class open source governance and security.  (604 words)
- [Federal DevSecOps Leaders: It's Time to Join the Conversation](/content/blog/federal-devsecops-leaders-its-time-to-join-the-conversation.html): The DevSecOps Government Leadership Forum, typically hosted in Washington, D.C., will be hosted online so government leaders everywhere can participate.  (586 words)
- [Why DevOps Advocates Are Implementing Shift Left Testing](/content/blog/why-devops-recommends-shift-left-testing/index.html): Modern DevOps strongly recommends Shift Left testing. Discover best practices for applying a Shift Left strategy to software development and security. (1,329 words)
- [Releasing the 2016 State of the Software Supply Chain Report](/content/press-releases/ssc-press-release/index.html): Sonatype, the leader in software supply chain automation, today announced the release of its second annual State of the Software Supply Chain report. (663 words)
- [Securing Software Supply Chains: U.S. Government Guidelines](/content/blog/u-s-governments-guidelines-for-securing-software-suppliers.html): Sonatype breaks down the software supply chain best practices for suppliers that were recently released by the ESF Software Supply Chain Working Panel. (1,550 words)
- [Chapter 7: Unit Testing with Maven | Sonatype Maven Cookbook](/content/resources/guides/maven-cookbook/unit-testing-with-maven/index.html): Elevate your testing game with Maven. This chapter covers everything you need to know about unit testing using Apache Maven. (3,281 words)
- [The Central Repository Supports Sailors from Bintray | Blog](/content/blog/the-central-repository-stands-to-support-sailors-from-bintray-how-to-migrate.html): Read our practical guide for Bintray users migrating to the Central Repository to follow and ensure that use and distribution of open source components. (1,226 words)
- [Overcome New Docker Hub Rate Limits with Nexus Repository](/content/blog/nexus-repository-helps-developers-overcome-new-docker-hub-rate-limits.html): Sonatype Nexus Repository helps developers navigate Docker Hub's new rate limits by providing a free and efficient container registry solution. (955 words)
- [DevOps Radio Podcast: The Story Behind All Day DevOps](/content/blog/devops-radio-podcast-the-story-behind-all-day-devops.html): In 2016, Derek Weeks, Mark Miller and the team at Sonatype created a live online conference, All Day DevOps. (431 words)
- [Q2 2026 Open Source Malware Index](/content/blog/q2-2026-open-source-malware-index-attackers-abuse-developer-trust.html): Q2 2026 saw attackers abuse trusted packages, maintainers, and dependencies, showing the need for earlier, context-driven software supply chain security. (1,322 words)
- [Wicked Good Development: State of the Software Supply Chain](/content/blog/wicked-good-development-key-takeaways-from-the-state-of-the-software-supply-chain-report.html): Jump into to these four bonus episodes to find highlights and critical takeaway's from Sonatype's 8th Annual State of the Software Supply Chain Report. (529 words)
- [Compromised litellm PyPI Package Exposes AI Systems](/content/blog/compromised-litellm-pypi-package-delivers-multi-stage-credential-stealer.html): Compromised litellm PyPI versions delivered a multi-stage credential stealer, exposing AI pipelines and cloud secrets in a targeted supply chain attack. (1,265 words)
- [Sonatype Launches the Nexus Exchange with 30 Integrations](/content/press-releases/nexus-exchange-pr/index.html): Sonatype, the leader in software supply chain automation, today launched the Nexus Exchange and announced new Nexus platform integrations with CloudBees,. (472 words)
- [Deploying Third-Party JARs to Maven Repositories with Ease](/content/blog/2008/11/adding-a-jar-to-a-maven-repository-with-sonatype-nexus.html): Deploying 3rd-party JARs to Maven repositories with Sonatype Nexus Repository. (1,008 words)
- [How to Create a Nexus Plugin Using m2eclipse in Eclipse](/content/blog/2010/01/writing-a-nexus-plugin-using-m2eclipse/index.html): Explore how to create a Nexus plugin using m2eclipse for Eclipse. Get easy-to-follow instructions from setup to deployment with available Maven configurations. (742 words)
- [Sonatype a Recognized Cybersecurity, DevOps Tech Titan](/content/blog/sonatype-a-recognized-cybersecurity-tech-titan/index.html): Sonatype brings home a Washingtonian Tech Titan, and Cybersecurity Leadership awards at the start of 2019's final quarter.  (443 words)
- [Spring4Shell: Understanding the Impact and Response](/content/blog/spring4shell-by-the-numbers/index.html): Spring4Shell, a new 0-day RCE, is not quite as bad as Log4shell but has a wide blast radius. We dive into the numbers on how the world is fixing the issue. (1,110 words)
- [Comparing npm Audit vs AuditJS for JavaScript Projects](/content/blog/compare-npm-audit-versus-auditjs/index.html): AuditJS is a free tool leveraging Sonatype's OSS Index. OSSI exposes a ReST API aggregating several security vulnerability feeds including CVE, CWE and NVD.  (1,155 words)
- [What I Learned From DevSecOps Leaders in a High-Tech World](/content/blog/what-i-learned-from-devsecops-leaders-in-a-high-tech-world.html): DevSecOps leaders from FISERV, Sirius XM, NBC Universal, OneTrust, Estée Lauder, PointClickCare, and Micro Focus, share how DevSecOps adoptions is adding value. (1,004 words)
- [Detecting Snapshot Versions in Maven Projects | Sonatype](/content/blog/2008/05/maven-code-how-to-detect-if-you-have-a-snapshot-version.html): Learn how to detect if an artifact is a snapshot version in Maven using a simple regular expression check. Save time with this quick guide by Brian Fox. (354 words)
- [Update CVE-2019-7238 in Sonatype Nexus Repository](/content/blog/cve-2019-7238-in-nexus-repository-manager-3/index.html): In late December of 2018 researchers Rico from Tencent Security Yunding Lab and Voidfyoo from Chaitin Tech responsibly disclosed a critical vulnerability in. (208 words)
- [26% Acknowledge a Web Application Breach in 2019](/content/blog/26-acknowledge-a-web-application-breach-in-2019/index.html): Following news that a hacker breached 16 sites via security vulnerabilities within web applications, we're sharing new insight from the 2019 DevSecOps. (590 words)
- [Creditreform and Sonatype Lifecycle | Sonatype](/content/customer-stories/creditreform-and-sonatype-lifecycle/index.html): See how Sonatype Lifecycle helps Creditreform monitor open source consumption to provide international credit risk management. (619 words)
- [Developers are the New Security Perimeter | Shadow Downloads](/content/blog/shadow-downloads-how-developers-have-become-the-new-perimeter.html): Shadow downloads bypass security controls and expose organizations to malicious open source packages. Learn how developers are the new security perimeter. (903 words)
- [Sonatype Nexus Launches into Mesosphere DC/OS | Sonatype](/content/press-releases/sonatype-mesosphere/index.html): Sonatype, the leader in software supply chain automation, today announced that its Nexus Repository has received certification to run in Mesosphere DC/OS. (449 words)
- [When Cyber Attack Meets Heart Attack | Sonatype Blog](/content/blog/when-cyber-attack-meets-heart-attack/index.html): When medical devices like pacemakers face cyber threats, lives are at risk. Learn about secure by design and its importance in safeguarding patients. (619 words)
- [Pipeline Security: Open Source Malware Prevention | Sonatype](/content/blog/closing-the-gaps-protecting-your-pipeline-from-open-source-malware.html): Open source malware is growing fast. Learn why traditional defenses fail and how to strengthen pipeline security through OSS malware prevention at the source. (807 words)
- [DevOps Made of Steel](/content/blog/devops-made-of-steel/index.html): Security Analysts spoke at Sonatype's ELEVATE 2021, sharing their DevOps story and where Nexus Repository and Nexus Lifecycle fit into the journey. (750 words)
- [Explore DORA Compliance Lessons Learned | Sonatype Webinar](/content/resources/webinars/dora-compliance-lessons-learned/index.html): Explore lessons learned around Digital Operational Resilience Act (DORA) compliance and how organizations are implementing security to meet requirements.,  (81 words)
- [A Year of Providing Free Maven Repository Hosting | Sonatype Blog](/content/blog/2009/11/a-year-of-providing-free-maven-repository-hosting/index.html): Celebrating a year of providing free Maven repository hosting for open source projects with reliable and efficient artifact syncing. (354 words)
- [AI and Malware: Infiltrating Software Development Teams](/content/blog/ai-malware-and-the-rise-of-software-development-infiltration.html): Nation-state actors infiltrate development teams with AI and malware. Learn why securing software means securing the people who build it. (871 words)
- [DevOps success is contingent on shifting left | Sonatype blog](/content/blog/2013/09/devops-success-is-contingent-on-shifting-left/index.html): Learn how shifting left in DevOps enhances security, reduces costs, and improves software delivery. Explore effective strategies in this blog. (596 words)
- [Illicit PyPI Packages 'Netfetcher' & 'Pyfetcher' on Windows](/content/blog/pyfetcher-netfetch-drop-netflix-checker-on-windows/index.html): Malicious PyPI packages "netfetcher" and "pyfetcher" impersonate legitimate libraries to target Windows users with undetectable malware. (770 words)
- [Chevy and DevOps: What the Wi-Fi?](/content/blog/2015/02/chevy-and-devops/index.html): I'm sure you saw it too. During the Super Bowl, Chevy Trucks announced that they were adding 4G LTE wi-fi. How cool. I want that (and so would my kids). (503 words)
- [sonatype-2022-1501 | Security Details | Sonatype Guide](/content/guide/vulnerability/sonatype-2022-1501/index.html): Technical security analysis for sonatype-2022-1501. CVSS 10.0 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (73 words)
- [How AI Governance Reduces Risk in Software Supply Chain Security](/content/blog/ai-governance-and-risk-in-securing-software-supply-chains.html): Explore AI governance and risk in software supply chains, from visibility and regulations to AIBOMs, DevSecOps, and automation for secure adoption. (1,493 words)
- [Nexus Pro and OSS 2.0.6 Now Available with Security Fixes](/content/blog/2012/06/nexus-pro-and-nexus-oss-2-0-6-now-available-stability-and-security-fixes.html): Nexus Pro and Nexus OSS 2.0.6 Now Available: Stability and Security Fixes (216 words)
- [Smart Teams Use Atlassian and Sonatype to Plan Development Work](/content/blog/smart-teams-use-atlassian-and-sonatype-to-plan-development-work.html): Shift open source governance into daily ticketing workflows. Teams can quickly assess risk and plan code fixes using Nexus Lifecycle and Jira Software. (637 words)
- [Sonatype Integrations for Your DevOps Toolchain | Sonatype](/content/products/integrations/index.html): Explore Sonatype integrations. Our platform works with your existing CI/CD, IDE, and DevOps tools to deliver seamless software supply chain security. (152 words)
- [Sonatype Partners with ADDO to Educate 36K+ IT Professionals](/content/press-releases/sonatype-addo-2019/index.html): In conjunction with All Day DevOps,  Sonatype will help educate over 36,000 IT Professionals.  (647 words)
- [The Secure Repository Blueprint for Pipeline Security | Sonatype](/content/resources/guides/secure-repository-architecture-blueprint/index.html): Learn how a secure repository architecture protects the software supply chain, including repository firewalls, policy-as-code, and release integrity. (2,714 words)
- [Blue By Default](/content/blog/blue-by-default/index.html): Aubrey Stearn (@auberryberry) explains DevOps security approach Blue by Default. Security practices move prior to testing and delivery to ensure focus.  (567 words)
- [Up Next: Nexus Support for Yum Repositories | Sonatype Blog](/content/blog/2012/09/up-next-nexus-support-for-yum-repositories/index.html): Discover how the upcoming Nexus OSS release will support Yum repositories, enhancing continuous delivery with seamless RPM deployment and management. (659 words)
- [The Dot Zero Conundrum: A New Frontier of Secure Open Source](/content/blog/next-generation-nexus-intelligence/index.html): Sonatype is combining a new type of behavioral analysis with machine learning and proprietary data, creating early malware warning capabilities. (966 words)
- [Streamlining Flexmojos Integration Testing with Maven Verifier](/content/blog/2009/10/integration-tests-with-maven-part-3-case-study-flexmojos.html): Discover how to effectively implement integration tests for Flexmojos using Maven. Gain helpful tips to ensure stability with automated testing strategies. (1,317 words)
- [RebelLabs Java Survey: Developers Love Nexus Repository](/content/blog/2014/06/rebellabs-survey-nexus/index.html): Another informative and well-presented RebelLabs survey has hit the streets. (370 words)
- [Securing Software Supply Chains and Dependency Confusion](/content/blog/securing-software-supply-chains-and-dependency-confusion-an-industry-perspective.html): We sat down with experts from The Linux Foundation, Atlantic Council and Sonatype's own CTO to discuss recent software supply chain attacks, dependency. (7,299 words)
- [Wicked Good Development: Fall 2022 Maven Central Updates](/content/blog/wicked-good-fall-2022-maven-central-updates/index.html): Get the latest Maven Central updates, how we're addressing pain points, and the latest features that make Maven more unified and powerful than before. , This session features Brian Fox (CTO and Co-Founder), Joel Orlina (Engineering Manager, Maven), Jason Swank (Director of Engineering, Technical Operations) and Lakshmi Mohandas (Senior Product Manager). Listen in as they discuss Maven Central's relationship with Sonatype, its pain points and how we are addressing them, and the latest updates that make Maven more unified and powerful than before.

Check out the resources from today's episode here. (4,074 words)
- [The Path of DevOps Enlightenment for Infosec | Sonatype Blog](/content/blog/the-path-of-devops-enlightenment-for-infosec/index.html): Can security rise to the demands of DevOps? Discover how DevSecOps can transform security practices, emphasizing culture, collaboration, and innovation.  (644 words)
- [Secure the Federal Software Supply Chain in 2026](/content/resources/webinars/securing-the-ssc-dgi/index.html): Learn strategies for securing the federal software supply chain, reducing risk, and aligning with frameworks like CMMC 2.0 and NIST SP 800-218 in this webinar., As cyber threats intensify and software supply chains grow more complex, federal agencies and contractors must modernize how they secure software.

In t... (125 words)
- [About Sonatype | Our Company & Mission | Sonatype](/content/company/index.html): Learn about Sonatype and our mission to transform AI and open source development. Discover how we help enterprises innovate with AI and secure their SDLC. (613 words)
- [February News: Updates on Maven and Sonatype Contributions](/content/blog/2010/02/03-in-other-news/index.html): Discover how developers are leveraging Maven, Nexus, and other Sonatype tools for enhanced project management and development efficiency. (384 words)
- [Krungsri (Bank of Ayudhya) and Sonatype | Customer Success Story](/content/customer-stories/krungsri/index.html): Explore how Krungsri enhanced open source governance with Sonatype Lifecycle, while streamlining developer productivity with fewer false positives. (604 words)
- [Policy and Advanced Component Search With Sonatype Lifecycle](/content/blog/smarter-policy-and-advanced-component-search/index.html): New features improve your software supply chain management tools with flexible controls, intelligent search, and better software project onboarding. (775 words)
- [Jason van Zyl talks to How Software is Built | Sonatype Blog](/content/blog/2010/06/jason-van-zyl-talks-to-how-software-is-built/index.html): Jason van Zyl discusses the benefits of using Apache Maven and its structured approach in software development. (552 words)
- [Corporation waits until the software flaw trends on Twitter](/content/blog/2013/05/they-wait-until-the-software-flaw-trends-on-twitter.html): Explore why companies delay fixing software flaws until they trend on social media and how Sonatype CLM helps streamline the resolution process. (420 words)
- [New Software Supply Chain Management Enhancements | Sonatype](/content/press-releases/new-enhancements-for-software-supply-chain-management.html): Sonatype has unveiled new product capabilities and refined product names as part of a strengthened software supply chain management platform.  (600 words)
- [State of SBOM: Emerging Standards and Global Regulations](/content/blog/addo-session-the-state-of-sbom-whats-coming-in-standards-and-regulations.html): Explore how software bills of materials (SBOMs) help secure software supply chains and are essential for compliance and business operations worldwide. (456 words)
- [Request a Private Offer with AWS | Sonatype](/content/request-a-private-aws-offer/index.html): Request a customized private offer with AWS Marketplace and enhance your software supply chain security with Sonatype, trusted by 15 million+ developers. (68 words)
- [DevSecOps: Embracing Automation While Letting Go of Tradition](/content/blog/devsecops-embracing-automation-while-letting-go-of-tradition.html): The awesome thing about careers in technology is that you constantly have to be on your front foot. In DevSecOps, this means scaling security at new velocities. (683 words)
- [Improving Build Time of Java Builds on OpenShift](/content/blog/improving-build-time-of-java-builds-on-openshift/index.html): I will guide you through the process of speeding up Java Maven based builds, and will explain other options that can be taken to the ones that I’ll be showing.  (2,299 words)
- [Skeleton Key](/content/blog/2014/09/skeleton-key/index.html): A skeleton key is capable of opening any lock regardless of make or type. Do you know anyone who has one? I do. Lots of them. (480 words)
- [Enhancing Search Features in Sonatype Nexus Repository 3.14](/content/blog/search-improvements-coming-to-nexus-repository-manager-3.html): Explore Sonatype Nexus Repository search enhancements, including relevance-based sorting, wildcard searches, and improved snapshot results for Maven users. (600 words)
- [Vista acquires a majority interest in Sonatype | Sonatype Blog](/content/blog/vista-acquires-a-majority-interest-in-sonatype/index.html): Vista Equity Partners acquires a majority interest in Sonatype, helping enhance our mission to improve software supply chain management. (576 words)
- [Wait! Wait! Don't pwn me! from Black Hat 2014 | Sonatype Blog](/content/blog/2014/08/wait-wait-dont-pwn-me-from-black-hat-2014/index.html): Join Mark Miller at Black Hat 2014 for Wait! Wait! Don't Pwn Me! — a fun OWASP security quiz. Test your knowledge and explore security insights. (118 words)
- [The Time Saved by Blocking Malicious Components | Sonatype](/content/resources/whitepapers/2023-firewall-whitepaper/index.html): Don’t DIY your own firewall. Learn how Sonatype Repository Firewall enables you to be proactive about security by blocking malicious components early. (150 words)
- [Running Nexus and Hudson on Amazon EC2: A Quick Start Guide](/content/blog/2009/06/nexus-open-source-and-hudson-on-ec2/index.html): Set up Nexus and Hudson on Amazon EC2 effortlessly with our step-by-step guide to creating a secure and efficient build server. (551 words)
- [Open Source License Management in Finance | Sonatype](/content/blog/manage-open-source-licenses-in-financial-services/index.html): Learn about open source license management for financial services, including license compliance, OSS governance, and tools to streamline risk mitigation. (834 words)
- [JavaScript Scanning Now Available in JetBrains IDEs](/content/blog/javascript-scanning-supported-jetbrains-ides-intellij-idea-webstorm.html): The Sonatype Nexus platform now evaluates and analyzes Javascript/Node components directly in IntelliJ IDEA. (320 words)
- [AI Development Security Risks & Governance | Sonatype](/content/blog/autonomous-development-and-ai-speed-vs-security.html): Learn how to strengthen AI development security: managing autonomous development risks, AI governance, safer dependencies, and controlled AI autonomy. (963 words)
- [Secure By Design: Preparing for GDPR Should Begin With Software](/content/blog/secure-by-design-preparing-for-gdpr-should-begin-with-software.html): To ensure GDPR compliance, appropriate safeguards must be put in place across the entire software lifecycle.  (975 words)
- [Private npm Registry in Nexus Repository | Sonatype](/content/blog/custom-node-module-management-using-private-npm-registry-configured-in-nexus-repository.html): Learn how to configure a private npm registry in Nexus Repository. Follow this guide for npm registry nexus setup to publish and consume custom Node.js modules. (1,497 words)
- [Sonatype Firewall Blocks 101K+ Malicious Packages](/content/blog/the-magic-behind-over-101000-malicious-packages/index.html): A look at how Sonatype software is protecting development teams and software with the industry-leading tools.  (808 words)
- [An Innovator's Journey: Eight Interviews](/content/blog/an-innovators-journey-8-interviews/index.html): Explore real stories from DevOps practitioners transforming collaboration in software innovation. Discover their journeys, challenges, and lasting impacts. (267 words)
- [Sonatype Wins Award for Best Open Source DevOps Tool](/content/blog/sonatype-named-best-open-source-devops-tool/index.html): Sonatype wins Best Open Source DevOps Tool at Computing's 2018 DevOps Excellence Awards, celebrating innovation and support for 10 mm+ developers. (194 words)
- [Who Is Nigel Simpson? Lessons of Open Source Governance](/content/blog/2014/10/who-is-nigel-simpson-lessons-of-open-source-governance.html): Learn how Nigel Simpson led the creation of an effective open source governance policy at a major media company, ensuring security and compliance. (199 words)
- [npm Malware Mines Cryptocurrency on Multiple OS Platforms](/content/blog/newly-found-npm-malware-mines-cryptocurrency-on-windows-linux-macos-devices.html): Sonatype’s automated malware detection system has caught multiple malicious packages on the npm registry this month. (687 words)
- [Software Development in the UK Falls 28% in Wake of COVID-19](/content/press-releases/software-development-in-the-uk-falls/index.html): Sonatype’s research measured open source software download requests by country from The Central Repository during a 15-month period, January to April 2020. (649 words)
- [How to Stop Malware in the Software Supply Chain | Sonatype](/content/blog/the-hidden-threat-tackling-malware-in-your-software-supply-chain.html): Open source malware is on the rise. Learn how to detect threats, comply with federal mandates, and proactively secure your software supply chain. (1,000 words)
- [Sonatype Expands OS Community Support with Key Partnerships](/content/press-releases/sonatype-expands-support-for-oss-communities/index.html): Sonatype partners with key open source foundations to bolster and protect open source ecosystems. (743 words)
- [Sonatype Hosts 30k Professionals at All Day DevOps 2017](/content/press-releases/all-day-devops-press-release/index.html): Sonatype announced today that it is hosting more than 30,000 global attendees at All Day DevOps 2017, the largest virtual DevOps conference in the world. (556 words)
- [Open Source, Open Infrastructure, and the Space Between](/content/blog/open-source-open-infrastructure-and-the-space-between.html): Learn how Maven Central is evolving to support community publishing and meeting demands of modern infrastructure and commercial-scale software delivery. (1,344 words)
- [Bryson Koehler, Equifax CTO, Discusses Data Security Future](/content/blog/bryson-koehler-equifax-cto-discusses-the-road-ahead.html): Equifax is creating a customer driven platform that includes security automation and data privacy, all while building transparency into the process. (340 words)
- [Exploring SBOM VEX Annotations | Video](/content/resources/videos/sbom-vex/index.html): Learn everything you need to know about SBOM VEX annotations and the value they offer in your SBOM management.  (31 words)
- [A DevSecOps Maturity Model in Seven Words](/content/blog/a-devsecops-maturity-model-in-7-words/index.html): Inspired by a conversation I had with Navin Vembar about a DevSecOps Maturity Model his organization developed at the U.S. (157 words)
- [New Beta REST API for Sonatype Nexus Repository: A Deep Dive](/content/blog/nexus-repository-new-beta-rest-api-for-content/index.html): Discover Sonatype Nexus Repository's new beta REST API for accessing and managing components with ease. Explore features and use cases. Get started today. (514 words)
- [Enhancing DevSecOps: Sonatype Firewall Adds PyPI Support](/content/blog/nexus-firewall-grows-with-support-for-pypi/index.html): Sonatype’s Nexus Firewall enables development teams to evaluate every PyPI package they download from public repositories for license, security, & other risks  (656 words)
- [Nexus and Maven Highlights: Exploring Developer Insights](/content/blog/2009/11/11-in-other-news/index.html): Weekly roundup of blog posts on Nexus and Maven projects, featuring insights from developers and practical tips for enhancing your development workflows. (357 words)
- [Insights from 9th State of the Software Supply Chain Report | Sonatype](/content/resources/webinars/9th-annual-state-of-the-software-supply-chain-report.html): Explore key trends from the 9th Annual State of the Software Supply Chain Report. Tune into this webinar with exclusive insights from Sonatype's Brian Fox., In this webinar, Brian Fox, Co-Founder and CTO, Sonatype will present results from our 9th Annual State of the Software Supply Chain report, which answe... (149 words)
- [Sonatype CTO Joins Cyber Panel on Financial Compliance](/content/blog/sonatype-cto-appointed-to-cyber-resilience-experts-panel-amidst-growing-financial-compliance-demands.html): Sonatype's Brian Fox was appointed to a cybersecurity panel that will guide financial institutions in tackling open source risks and improving compliance. (589 words)
- [Exploring Insights on DevSecOps and Container Security](/content/blog/numbersdontlie/index.html): Container Security is quickly becoming a segment ripe for standardization and simplification. (955 words)
- [Tech Companies Are Peak DevSecOps Performers | Sonatype](/content/press-releases/sonatype-finds-tech-companies-are-peak-devsecops-performers.html): Happy Developers Automate Security Twice as Often as their Unhappy Peers, Showing Link between Security Best Practices and Work Culture (655 words)
- [Why Diversity Shouldn't Be a Vanity Project](/content/blog/why-diversity-shouldnt-be-a-vanity-project/index.html): Lani Rosales makes an overt call for more women speakers in technology. What motivated her, and why is this important? She explains in a recent podcast. (389 words)
- [5,000+ Dependency Confusion Copycats Flooded PyPI and npm](/content/blog/pypi-and-npm-flooded-with-over-5000-dependency-confusion-copycats.html): Both PyPi and npm are being inundated with malicious dependency confusion packages. (685 words)
- [Sonatype Nexus Repository vs. Cloudsmith | Compare Repositories](/content/compare/cloudsmith-vs-sonatype/index.html): Compare the differences between Sonatype Nexus Repository and Cloudsmith. Explore how Sonatype offers superior scale and flexibility for growing teams.
, Explore our platform (1,016 words)
- [Nexus 2.11.1 - Why It's Time to Upgrade](/content/blog/2014/12/nexus-2-11-1-why-its-time-to-upgrade/index.html): Upgrade to Nexus 2.11.1 now for essential security fixes and new features. Ensure your repository manager is up-to-date and secure with the latest release. (469 words)
- [Docker Registry Support | Sonatype](/content/products/language-support/docker/index.html): Manage and secure your Docker container images efficiently with Sonatype's advanced solutions, featuring proxy support, compliance, and malware detection. (699 words)
- [Compare Sonatype vs. Snyk Solutions | Sonatype Comparison](/content/compare/snyk-versus-sonatype-nexus/index.html): Find and fix vulnerabilities with Sonatype before they *sneak* by....
Read more about Sonatype's superior feature set to Snyk. 
 (1,472 words)
- [NPM Hijackers Takeover of 'coa' and 'rc' Libraries](/content/blog/npm-hijackers-at-it-again-popular-coa-and-rc-open-source-libraries-taken-over-to-spread-malware.html): Npm coa and rc packages were hijacked, via an account takeover, again highlighting the need to protect your open source software supply chains. (1,162 words)
- [DevSecOps: Integrating Automated Security Controls](/content/blog/devsecops-integrating-automated-security-controls/index.html): Learn how to seamlessly integrate automated security controls into your DevSecOps workflows without disrupting development efficiency. (623 words)
- [Get Log4j Usage Insights with Sonatype Nexus Repository](/content/blog/new-nexus-repository-visualizer-provides-insights-into-log4j-usage.html): Vulnerable Log4j components are still in active use. New functionality available for Sonatype's Nexus Repository monitors and helps address these issues. (784 words)
- [Enhancing Software Security with SCA and SAST Tools](/content/blog/sca-and-sast-what-do-they-do-and-how-can-they-help-developers-like-you.html): SCA and SAST tools help DevSecOps teams and application developers to improve software security together. Learn what SCA and SAST do and why you need both. (1,122 words)
- [Explore The Hidden Threat of Malicious OSS Components](/content/blog/uncovering-the-invisible-threat-why-your-network-may-still-be-at-risk.html): Learn about new attack vectors and the distinction between legitimate open source components with vulnerabilities and intentionally malicious components (1,012 words)
- [Workflow Automation: Publishing Artifacts to Sonatype Nexus Repository Using Jenkins Pipelines](/content/blog/workflow-automation-publishing-artifacts-to-sonatype-nexus-using-jenkins-pipelines.html): Use Sonatype Nexus Repository to create an automated workflow to build, store, organize, and monitor the compiled Maven artifacts through a CI server. (1,038 words)
- [5 Essential Tools to Automate Your SBOM Creation Process](/content/blog/5-tools-to-automate-sbom-creation/index.html): A look at five different SBOM tools that can be integrated into your development workflow to automatically generate a software bill of materials. (1,095 words)
- [Sonatype Releases Nexus Repository 3.0](/content/blog/sonatype-releases-nexus-repository-3-0.html): Sonatype’s Nexus Repository now offers the first, completely free, repository manager supporting the world’s most popular component formats. (571 words)
- [Maven by Example: A Simple Web Application | Sonatype Guide](/content/resources/guides/maven-by-example/simple-web-application/index.html): Learn to create a simple web application using Maven and Jetty, including adding servlets and dependencies for efficient web development. (1,508 words)
- [(CVE-2018-11776): Another New Apache Struts Vulnerability](/content/blog/deja-vu-all-over-again-another-new-apache-struts-vulnerability-cve-2018-11776.html): Another remote code execution vulnerability in Apache’s Struts2 Framework was disclosed on August 22, 2018. (585 words)
- [Vulnerability Management | 2026 Software Supply Chain Report](/content/state-of-the-software-supply-chain/2026/vulnerability-management/index.html): Why vulnerability management breaks down as open source vulnerabilities persist. Learn how data gaps, consumption habits, and EOL software compound risk. (3,601 words)
- [Essential Documents for New Contributors to OSS Projects](/content/blog/open-source-best-practices-key-documents-to-help-welcome-new-contributors-to-your-project.html): This series of blog posts on best practices for open source maintainers was created in partnership with CNCF for Sonatype's Security Slam event. (985 words)
- [How to build a RAP application with Tycho | Sonatype Blog](/content/blog/2011/01/how-to-build-a-rap-application-with-tycho/index.html): Learn how to build a RAP application using Tycho, with insights and practical examples from Holger Staudacher’s experience at EclipseSource. (228 words)
- [A More Secure Web Needs Developers, Defenders, Advocates, and OSS](/content/blog/a-more-secure-web-needs-developers-defenders-advocates-and-oss.html): The largest gathering of Infosec professionals met in Washington, D.C. to discuss the future of web security. Open source software is at the core of it.
 (495 words)
- [Introducing Sonatype CLM: Secure Component Lifecycle Management](/content/blog/2013/04/announcing-sonatype-clm-component-lifecycle-management.html): Introducing Sonatype CLM, a comprehensive solution for managing the entire component lifecycle, ensuring fast, secure, and compliant software development. (531 words)
- [Sonatype Channel Partner Program Sees Triple Digit Growth](/content/press-releases/sonatype-channel-partner-program-sees-triple-digit-growth-in-emea.html): Barrier Networks, 9th Bit Consulting, Emerasoft, Swordfish Security, and Eficode honored at Sonatype's Fourth Annual EMEA Partner Summit in Amsterdam. (579 words)
- [Grounded AI Agents | 2026 Sonatype Software Supply Chain Report](/content/state-of-the-software-supply-chain/2026/ai-agents/index.html): Learn how AI agents grounded in real-time intelligence prevent hallucinations, reduce supply chain risk, and govern secure dependency upgrades at scale. (1,399 words)
- [A Newcomer's Perspective: Software Supply Chains](/content/blog/2015/07/a-newcomers-perspective-software-supply-chains/index.html): I was astonished to see that many, if not all, of the core Supply Chain Management principles have yet to be or are just starting to be applied to the. (920 words)
- [What is Post-Quantum Cryptography (PQC)? | Sonatype](/content/resources/articles/what-is-post-quantum-cryptography/index.html): An introduction to Post-Quantum Cryptography and why it’s crucial for a secure digital future. (1,235 words)
- [Software Development Study Reveals Software Creation is Broken](/content/press-releases/the-way-the-world-creates-software-press-release/index.html): Sonatype released the results of an extensive study of the software development practices of 106,000 organizations representing 17 billion requests for. (918 words)
- [Free Software, But No Free Lunch](/content/blog/free-software-but-no-free-lunch/index.html): Today's threat surface is the software itself. How can Fortune 100 companies and others protect themselves? One security practice is counterintuitive.  (432 words)
- [Hugging Face Models and LLM Support | Sonatype](/content/products/language-support/hugging-face/index.html): Manage and govern your AI usage with confidence. Sonatype supports Hugging Face models and LLMs across our platform so you can build fast and secure. (370 words)
- [Dependency Management in Software Development | Sonatype](/content/blog/embracing-dependency-management-in-software-development.html): Learn how dependency management in software development works, and how software composition analysis (SCA) helps teams manage dependencies at scale. (835 words)
- [Sonatype Collaborates With ADDO & IT Pros Working From Home](/content/press-releases/all-day-devops-to-connect-it-pros-virtually/index.html): ADDO Spring Break is an event connecting work-from-home DevOps practitioners around the globe. The 10-hour conference starts at 6 am ET on April 17, 2020.  (815 words)
- [Why LLMs Make Terrible Databases and Why That Matters for Trusted AI](/content/blog/why-llms-make-terrible-databases-and-why-that-matters-for-trusted-ai.html): Discover how LLMs are powerful reasoning engines, but not databases. Learn why grounding AI in real-time data is essential for trusted systems. (1,145 words)
- [Effortlessly Deploy Sonatype Platform with NGINX and Docker](/content/blog/running-the-nexus-platform-behind-nginx-using-docker.html): How to run your Sonatype Nexus platform as Docker containers in cloud environments to power your devsecops abilities. (722 words)
- [sonatype-2022-3360 | Security Details | Sonatype Guide](/content/guide/vulnerability/sonatype-2022-3360/index.html): Technical security analysis for sonatype-2022-3360. CVSS 10.0 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (67 words)
- [Vor Security Brings OSS Index to Sonatype | Sonatype Blog](/content/blog/vor-security-brings-ossindex-to-sonatype/index.html): Sonatype integrates Vor Security's OSS Index to enhance vulnerability coverage and open source security innovation for the broader community. (640 words)
- [DevSecOps: Overcoming the Culture of No's With Chaos](/content/blog/automating-security-in-devops-combating-nos-with-chaos.html): Automating Security in DevOps: Combating No’s with Chaos.  A exploration of DevSecOps practices. (685 words)
- [Lessons in Complex UI Testing | Testing Nexus with Selenium](/content/blog/2009/10/selenium-part-3/index.html): Learn how to effectively mock complex application states with Selenium for robust UI testing in Nexus. Discover techniques to streamline tests. (1,059 words)
- [DevSecOps Leadership Forum: Revolutionizing Financial Services](/content/blog/devsecops-leadership-forum-revolutionizing-financial-services.html): Sonatype's DevSecOps Leadership Forum gathered Financial Services experts to discuss revolutionizing the industry through DevSecOps automation. (421 words)
- [Full Lifecycle Container Security](/content/blog/full-lifecycle-container-security/index.html): As containers become a greater part of the DevOps pipeline, securing them is top of mind. (745 words)
- [Chapter 4: The Build Lifecycle | Maven: Complete Reference ](/content/maven-complete-reference/build-lifecycle/index.html): Discover the Maven Build Lifecycle in Chapter 4 of the Maven Definitive Guide by Sonatype. A comprehensive understanding of build phases, goals, and tasks. (2,221 words)
- [Sonatype's Wayne Jackson Named '18 Entrepreneur of The Year](/content/press-releases/wayne-jackson-named-ey-entrepreneur-of-the-year-2018-mid-atlantic-region.html): Sonatype CEO Wayne Jackson wins EY Entrepreneur Of The Year® 2018 Award in Cybersecurity. (619 words)
- [sonatype-2026-003926 | Security Details | Sonatype Guide](/content/guide/vulnerability/sonatype-2026-003926/index.html): Technical security analysis for sonatype-2026-003926. CVSS 8.7 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (65 words)
- [Software Security & Regulations for Medical Devices | Video](/content/resources/videos/dime-regulations/index.html): Learn how to leverage SBOMs and be compliant with U.S. regulations for medical devices in our Regulate to Innovate video series. (41 words)
- [Fake VS Code Extension on npm Uses ScreenConnect as Spyware](/content/blog/fake-vs-code-extension-on-npm-uses-altered-screenconnect-utility-as-spyware.html): A fake 'Truffle for VS Code' npm package delivers stealthy malware via a ScreenConnect installer. Learn how it evades detection and threatens developers. (735 words)
- [Leadership Lessons: Adapting to an All-Remote Workforce](/content/blog/leadership-lessons-adapting-to-an-all-remote-workforce.html): COVID-19 demands more people work remotely. This All Day DevOps Spring Break keynote presentation explores the ways leaders must adapt. (603 words)
- [Malicious npm Packages Exploit Popular 'colors' Library](/content/blog/remember-npm-library-colors-theres-no-such-thing-as-colors-2-0.html): Alongside the popular 'colors' library on npm come unwanted malicious typosquats called 'colors-2.0', 'colors-3.0, 'colorsss', and so on. (725 words)
- [Washington Magazine Ranks Sonatype on Best Places to Work](/content/blog/washingtonian-glassdoor-batteryventures/index.html): Sonatype has been named one of the 50 Highest Rated Private Cloud Computing Companies on Glassdoor by Washington Magazine, Battery Ventures. (501 words)
- [Can Sonatype Nexus Repository Scale? | Sonatype Blog](/content/blog/2012/04/how-can-we-prove-that-nexus-can-scale/index.html): Discover how Nexus Repository effortlessly scales to support developers with modest hardware requirements, ensuring high performance and reliability. (948 words)
- [Sonatype Appoints Bhagwat Swaroop as CEO | Sonatype](/content/press-releases/sonatype-appoints-bhagwat-swaroop-as-ceo/index.html): Sonatype appoints Bhagwat Swaroop to Chief Executive Officer as Wayne Jackson transitions to Executive Chairman. (655 words)
- [Why DevOps Success Requires More Than X-Ray Vision](/content/blog/why-devops-success-requires-more-than-x-ray-vision/index.html): For high performance DevOps teams wanting to achieve greater levels of velocity, a new era of superpowers is needed to design in quality from the start.  (977 words)
- [Use JSON? Well You'd Better Not Be Evil | Sonatype Blog](/content/blog/2012/03/use-json-well-youd-better-not-be-evil/index.html): Uncover the hidden legal complexities of using JSON with its don't be evil clause and the implications for developers and compliance. (677 words)
- [Sonatype  + GitHub | Better Together](/content/github-and-sonatype/index.html): Learn how GitHub and Sonatype offer developers the world’s best software supply chain security with the DevOps tools you already have in place.

 (779 words)
- [DiMe Society Partnership | Sonatype](/content/dime-society-partner/index.html): Secure your software supply chain and drive digital health transformation with Sonatype and the Digital Medicine Society. Learn more about the partnership. (289 words)
- [Supply Chain Levels for Software Artifacts (SLSA) | Sonatype](/content/resources/articles/slsa/index.html): Explore SLSA, a security framework designed to protect software supply chains from a spectrum of evolving threats. Learn how secures the architecture. (712 words)
- [Disrupt Yourself or Be Disrupted](/content/blog/disrupt-yourself-or-be-disrupted/index.html): You must continuously innovate to remain competitive. Researcher David Robinson has some tips to guide your experiments and harness new ideas. (455 words)
- [How to Retrieve Documentation for Maven Plugins | Sonatype](/content/blog/2010/12/retrieving-a-plugins-documentation/index.html): Learn how to retrieve detailed documentation for Maven plugins, including information on older versions, using various methods directly within Maven itself. (576 words)
- [White House National Cybersecurity Strategy: Landmark Action](/content/blog/white-house-national-cybersecurity-strategy-landmark-action-for-a-critical-threat.html): The Biden administration announced a new, historic National Cybersecurity Strategy calling for cybersecurity liability and increased investment. (1,355 words)
- [This Week in Malware - Over 70 Packages Discovered | Sonatype](/content/blog/this-week-in-malware-oct-28-22/index.html): This week, we discovered and analyzed six dozen packages flagged as malicious, suspicious, or dependency confusion attacks in npm and PyPI registries. (311 words)
- [A Simply Brilliant Way to Improve the Security Pipeline](/content/blog/a-simply-brilliant-way-to-improve-the-security-pipeline.html): Kaiser Permanente's Xin Xu shares how his team eliminates vulnerable libraries before they ever enter the DevOps pipeline, using Nexus.  (398 words)
- [How to Manage Third-Party SNAPSHOT Dependencies in Maven](/content/blog/2009/01/best-practices-for-releasing-with-3rd-party-snapshot-dependencies.html): Tips to release Maven artifacts with third-party SNAPSHOT dependencies, emphasizing resolution strategies and proper handling to ensure stable builds. (1,199 words)
- [Efficiently Scanning for Log4j Vulnerabilities | Sonatype](/content/blog/how-large-organizations-can-easily-scan-for-log4j-vulnerabilities.html): Large orgs looking for the Log4j vulnerability in 1000s of apps, can be more effective and efficient with Nexus Lifecycle and Easy SCM Onboarding. (680 words)
- [Communicating Software Compliance to the C-Suite: A Framework](/content/resources/whitepapers/software-compliance-c-suite-framework/index.html): Learn how to turn SBOM and supply chain data into continuous software compliance monitoring and executive-ready risk insights for the C-suite in this guide!
 (1,984 words)
- [Storage Management Best Practices: Part 1 - Components in Motion](/content/blog/storage-management-components-in-motion/index.html): New in Nexus Repository 3.26, users now have an effective way to migrate components between two or more Nexus Repository instances. (564 words)
- [Introducing a Better Way to Learn Sonatype Products](/content/blog/a-better-way-to-learn-sonatype-products/index.html): Sonatype Learn is a new education portal that provides an engaging way to broaden and deepen your Sonatype skills. Access this material anytime, anywhere. (590 words)
- [PyPI Cheese Shop Malware Software Supply Chain Risk](/content/blog/pypi-cheese-shop-malware-illustrates-software-supply-chain-risk-vector.html): Malicious actors circumvented the PyPI package repo manager, a classic case demonstrating why understanding open source code dependencies is critical.  (721 words)
- [Malware Wrap-up: npm Backdoors, Bugs, Mystery Placeholders](/content/blog/this-week-in-malware-april-29th-edition/index.html): Learn about malware as we discuss malicious packages with backdoors and hidden Discord stealers, a serious npm bug that allowed for maintainer tampering. (919 words)
- [How to Publish Private npm Packages to Sonatype Nexus Repository](/content/blog/publishing-private-npm-packages-to-nexus/index.html): From DRY principle, sharing code within an organization, and keeping code secure, there are many reasons you may want to publish private NPM packages to Nexus. (735 words)
- [Multi Module Maven Project: Enterprise Example | Sonatype](/content/resources/guides/maven-by-example/multi-module-enterprise-project/index.html): Explore a multi module maven project example for enterprise structures. Learn how to integrate Spring and Hibernate to build robust command-line applications. (9,590 words)
- [Enhanced Support for Python in Sonatype Lifecycle](/content/blog/enhanced-support-for-python-in-nexus-lifecycle/index.html): Nexus Lifecycle includes extended support for Python, bringing intelligence to Python developers and security teams across every phase of the SDLC. (301 words)
- [Accelerate DevOps With Sonatype's Multi-Product AWS Offering](/content/blog/accelerate-devops-with-sonatypes-multi-product-aws-offering.html): Learn how Sonatype's multi-product AWS Marketplace solution combines Nexus Repository and Repository Firewall to streamline and secure development. (585 words)
- [Sonatype’s Platform Reveals 232% ROI and 20% Reduced Risk](/content/press-releases/study-on-sonatype-nexus-platform-reveals-232-roi/index.html): Study shows Sonatype's Nexus Platform delivers 232% ROI, reduces breach risks, and saves $14,000 per developer annually. (392 words)
- [Exploring The Power of SBOMs: Regulations Looming | Sonatype](/content/resources/webinars/sboms-with-aws-opentext/index.html): Industry leaders explore how to navigate regulatory pressures and enhance software security through effective SBOM management and audit readiness., With tightening global regulations, including U.S. CISA attestation requirements and the EU Cyber Resilience Act, SBOMs are essential for compliance and... (161 words)
- [Swordfish Security & Sonatype Help Russians Combat OSS Risk](/content/press-releases/russian-enterprises-turn-to-swordfish-security/index.html): Swordfish Security attains Platinum Partner Certification with Sonatype to expand Nexus in Russia. (562 words)
- [Prototype Pollution Vulnerability in express-fileupload](/content/blog/how-can-adversaries-exploit-npm-modules/index.html): August's Nexus Intelligence Insight looks at the NodeJS component express-fileupload which now has a critical Prototype Pollution vulnerability.
 (945 words)
- [Let Your Voice Be Heard: Take the DevSecOps Community Survey](/content/blog/dso-survey-launch-2019/index.html): We just launched the 2019 DevSecOps Community Survey and want to hear about your experiences. Fill out the survey and let your voice be heard.
 (533 words)
- [Solution Provider Partners | Sonatype](/content/partners/solution-provider-partners/index.html): Join our solution provider partner program and offer the best in open source security to your customers. Learn about becoming a Sonatype partner today. (391 words)
- [CMMC Software Supply Chain Readiness Assessment](/content/resources/cmmc-assessment/index.html): Assess your organization's CMMC compliance readiness with a free evaluation. Identify gaps in SBOM generation, open source risk, and software traceability. (316 words)
- [Mitigating Risks with Open Source AI Governance | Sonatype](/content/blog/governing-open-source-and-ai-in-mitigating-modern-risks-in-software-development.html): Harness AI without hidden liabilities. Learn the governance strategies CTOs need to manage open source AI risks and secure the software supply chain. (1,032 words)
- [Mitigating the Business Impact of Malware Attacks | Sonatype](/content/resources/whitepapers/mitigating-the-impact-of-malware-attacks/index.html): Learn how to mitigate malware attacks and secure your software supply chain in this whitepaper with insights into the rise of open source malware. (142 words)
- [Modern SCA Best Practices for Faster Risk Reduction | Sonatype](/content/resources/webinars/sca-best-practices/index.html): Join our webinar to discover SCA best practices for effective risk reduction, including insights on reachability, automated fixes, and integrated security. (106 words)
- [Security and Customer Protection at Sonatype | Sonatype](/content/security-at-sonatype/index.html): Empower your software teams with precise open source intelligence and avoid cyber risks. Learn about Sonatype's security practices and approach. (798 words)
- [Manage and Eliminate Technical Debt for Increased Innovation](/content/blog/manage-and-eliminate-technical-debt/index.html): Understanding technical debt is critical to better understanding, and securing, your software supply chain. (1,540 words)
- [Insights on Hosted Repositories Capacity in Nexus OSS](/content/blog/how-many-hosted-repositories-can-nexus-oss-support/index.html): Discover the scalability of Nexus OSS and get insights from Sonatype's CTO, Brian Fox, on managing hosted repositories effectively. (385 words)
- [A Sort of a Homecoming - Why I Joined Sonatype](/content/blog/starting-at-sonatype-is-sort-of-a-homecoming/index.html): The open source and supply chain problem facing the industry is one of the reasons why I joined Sonatype. I can make an impact evangelizing DevSecOps. (492 words)
- [ AI Risks in Finance | Sonatype Webinar](/content/resources/webinars/unexpected-ai-risks-in-finance/index.html): Explore the emerging AI risks in software development for financial services organizations. Industry experts navigate the impact of AI in this webinar.,  (104 words)
- [Sonatype + Muse: How Improved Code Quality Complements SAST](/content/blog/sonatype-muse-how-improved-code-quality-compliments-enterprise-sast.html): MuseDev, Sonatype's innovative code analysis platform, is highly complementary to enterprise SAST tools like Fortify that surface a wide breadth of deep. (631 words)
- [Request a Quote of Sonatype SBOM Manager](/content/products/sonatype-sbom-manager/quote/index.html): Discover how Sonatype SBOM Manager can help you manage SBOM compliance requirements. Connect with our sales team for a customized quote. (150 words)
- [Fintech Giant Solves Dependency Management at Scale | Sonatype](/content/customer-stories/fintech-dependency-management/index.html): Learn how this leading fintech company saved $21 million through process automation. (197 words)
- [Sonatype Guide | AI Dependency Management & Intelligence](/content/products/sonatype-guide/index.html): Improve AI-assisted code quality with intelligent dependency management and real-time open source insights powered by Sonatype Guide. Get started for free., Explore our platform (721 words)
- [Lessons Learned from the FOSS/PLG Journey at Sonatype](/content/blog/10-years-and-10000-hours-the-foss/plg-journey-at-sonatype/index.html): Sonatype has spent the past 10 years engineering and delivering a variety of tools and services to help the global open source community accelerate the. (1,363 words)
- [Sonatype Training Courses and Self-Paced Guides | Sonatype](/content/blog/learn-about-sonatype-products-with-new-self-paced-guides-and-courses.html): Enroll in Sonatype training courses to master the Sonatype platform. Access self-paced Sonatype product training and Nexus Repository training. (509 words)
- [Trojanized PyPI Package Imitates a Popular Python Server Library](/content/blog/trojanized-pypi-package-imitates-a-popular-python-server-library.html): A trojanized PyPI component 'aiohttp-socks5' has been identified by Sonatype's automated malware detection system, imitating the real 'aiohttp-socks' lib. (1,018 words)
- [Sonatype AI/ML Governance Product Tour](/content/resources/product-tours/ai-ml/index.html): Explore Sonatype's AI/ML capabilities in this product tour. See how you can effectively build with AI/ML and govern its usage.  (36 words)
- [Sonatype Recognized in 2023 Gartner Magic Quadrant for AST](/content/press-releases/sonatype-named-to-2023-gartner-magic-quadrant/index.html): Sonatype has been recognized on the 2023 Gartner Magic Quadrant for Application Security Testing (AST) for its strong reputation in the SCA space.
 (660 words)
- [Caroling through the Season: The Sounds of the 4shells](/content/blog/caroling-through-the-season-the-sounds-of-the-4shells.html): As 2022 wraps up, we wanted to take a moment not only to reflect on Log4j but also on the other two “4shell” vulnerabilities that were disclosed.  (1,041 words)
- [The Path Forward for the Sonatype Platform | Sonatype](/content/blog/the-path-forward-for-the-nexus-platform/index.html): We’re seeing double and triple digit growth across usage, Nexus Repo instances, Nexus Repo scans, and daily apps under management. What comes next?
 (517 words)
- [Sonatype + Gosu Language Support | Sonatype](/content/products/language-support/gosu/index.html): Manage and secure your Gosu language dependencies throughout the SDLC with Sonatype's software development tools. Learn more about supported features. (523 words)
- [Maven and GitHub Integration: A Guide for New Projects](/content/blog/2009/09/maven-tips-and-tricks-using-github/index.html): Learn how to connect a Maven project to GitHub, import it, and configure SCM for automated release operations. Get step-by-step instructions in this guide. (1,479 words)
- [Embracing the AI Revolution: Navigating the Impact on Developers](/content/blog/embracing-the-ai-revolution-navigating-the-impact-on-developers.html): Explore Sonatype's whitepaper, The Effects of AI on Developers, highlighting the challenges, opportunities, and transformative effects generative AI. (720 words)
- [Maven and Nexus Updates: Developer Community Highlights](/content/blog/2009/12/04-in-other-news/index.html): Discover the latest updates on Nexus, Maven, and Sonatype projects, featuring insights, tutorials, and releases from the developer community in this blog. (783 words)
- [Stay Current on the Latest Sonatype News | Sonatype](/content/company/media/index.html): Stay informed with Sonatype's latest news on cybersecurity, open source trends, and AI development insights. Explore Sonatype's media coverage for rich insights. (259 words)
- [Navigating Complex OSS Licensing: Lessons from Meteor and MongoDB](/content/blog/2012/05/when-licenses-meet-reality-the-result-is-often-confusing.html): Navigating the complexities of open source software licenses can be challenging, especially when conflicting licenses interact. Explore how to resolve them. (444 words)
- [RubyGems and Ruby Support | Sonatype Ecosystem Support](/content/products/language-support/rubygems-and-ruby/index.html): Securely manage Ruby projects using Sonatype's tools for governance and open source security with full support for Ruby and RubyGems.  (471 words)
- [March Malware Monthly: Info-Stealers, Reverse Shells, and Data Leaks](/content/blog/malware-monthly-march-2023/index.html): March 2023's Malware Monthly dives into a series of information stealers uploaded to the PyPI registry, the latest OpenAI data leak, and more.  (2,033 words)
- [To Succeed, DevSecOps Must Actually Include DevOps | Sonatype](/content/blog/to-succeed-devsecops-must-actually-include-devops/index.html): Before implementing any DevSecOps tools, you have to embrace that DevSecOps is disruptive to the entire security tool landscape. (866 words)
- [Securing LLM Outputs: Strategies for Safe AI Integration](/content/blog/insecure-llm-output-handling-and-how-to-build-safe-defenses.html): Improper LLM output handling can lead to code injection, data leaks, and compliance failures. Learn how to validate and secure LLM outputs with Sonatype. (805 words)
- [Security Isn't Just for AppSec: Why Developers Must Care](/content/blog/2012/02/whatever-weve-got-security-people-for-that/index.html): Developers must prioritize security in their code as modern attacks are multi-faceted and complex, impacting system-level and application vulnerabilities. (1,178 words)
- [Dogfooding Nexus](/content/blog/2015/03/dogfooding-nexus/index.html): How does Sonatype use Nexus to support our development efforts? Well, our development team is about to tell you. (317 words)
- [Maven Central: Addressing the Tragedy of the Commons](/content/blog/maven-central-and-the-tragedy-of-the-commons/index.html): Maven Central is experiencing a tragedy of the commons situation in which 83% of its total bandwidth is being consumed by just 1% of the IP addresses. (795 words)
- [Sonatype Wins Awards for Product Excellence and Innovation](/content/press-releases/sonatype-wins-multiple-awards-for-product-excellence-and-innovation.html): Sonatype has been recognized as a 2022 Frost & Sullivan Technology Innovation Leader, NVTC Cyber Company of the Year, and more. 

 (678 words)
- [Sonatype Firewall for Malicious Code Protection | Sonatype](/content/products/sonatype-repository-firewall/index.html): Sonatype Firewall blocks malicious code and packages before they enter your software supply chain. Protect your repositories and builds., Explore our platform (538 words)
- [JavaScript and npm Package Support | Sonatype Support](/content/products/language-support/javascript-and-npm/index.html): Streamline builds with Sonatype support for Javascript and npm, enabling better dependency management, vulnerability scans, and private registry hosting. (414 words)
- [Using Sonatype Nexus Repository 3: npm Packages | Sonatype](/content/blog/using-sonatype-nexus-repository-3-part-2-npm-packages.html): This is the second part of a series of posts on Sonatype Nexus 3 and how to use it as repository for several technologies. (716 words)
- [Special Character Encoding Properties in Maven | Sonatype](/content/blog/2009/11/special-character-encoding-properties/index.html): Optimize character encoding in Maven for improved readability and portability. Learn best practices and how to configure encoding for plugins efficiently. (386 words)
- [PyPI Malicious Packages: 1K+ Flood the Registry | Sonatype](/content/blog/attacker-floods-pypi-with-450-malicious-packages-that-drop-windows-trojan-via-dropbox.html): A threat actor infiltrated the PyPI registry with thousands of malicious packages in a coordinated Python supply chain attack targeting developers with malware. (451 words)
- [Ensuring Compliance with Open Source License Management](/content/blog/open-source-software-license-management/index.html): Your developers use open source software, and lots of it. To comply with OSS license requirements, you need open source license management tools. (1,094 words)
- [The Open Source Software Index Is BOSS | Sonatype](/content/blog/the-open-source-software-index-is-boss-heres-why/index.html): Dharmesh Thakker from Battery Ventures unveiled the Battery Open-Source Software Index.  Beyond it's clever name, the index is BOSS for four reasons. (927 words)
- [From a Commodore 64 to DevSecOps](/content/blog/from-a-commodore-64-to-devsecops/index.html): He started his enlightenment when his career path led him to a place called DevSecOps - that is, DevOps where security plays a more integral role. (600 words)
- [Developing with Flexmojos | Maven: The Complete Reference](/content/maven-complete-reference/developing-with-flexmojos/index.html): Get acquainted with Flexmojos in Maven with Chapter 13 of the Maven Definitive Guide by Sonatype. Your guide to building Flex applications. (633 words)
- [npm Malware Exfiltrates Windows SAM, Amazon EC2 Credentials](/content/blog/this-week-in-malware-npm-malware-exfiltrates-windows-sam-amazon-ec2-credentials.html): Malicious packages caught this week exfiltrate Amazon EC2, Windows SAM credentials, and launch malicious executables. (606 words)
- [DevOps: The Blue Ocean Tide Is Rising](/content/blog/devops-the-blue-ocean-tide-is-rising/index.html): The market for DevOps and DevSecOps automation is super hot.  Here's why. (522 words)
- [Free Sonatype Nexus Repository Download](/content/products/sonatype-nexus-oss-download/index.html): Manage all your components in Sonatype Nexus Repository Community Edition – the world's #1 binary artifact repository. Get your free Nexus download today. (545 words)
- [easy-day-js Targets Mastra, Dependency Attacks Grow](/content/blog/easy-day-js-targets-mastra-dependency-attacks-grow/index.html): The easy-day-js npm campaign compromised trusted Mastra packages, exposing developer systems and highlighting growing risks from malicious dependencies. (800 words)
- [Understanding Application-Level Package Managers | Guide](/content/blog/how-do-application-level-package-managers-work/index.html): Managing dependencies is a complex task. As Sam Boyer explains, “It’s not the algorithmic side that makes [application-level package managers] hard.” (1,312 words)
- [New in Sonatype Nexus Repository 1.6: Key Features and Updates](/content/blog/2010/04/whats-new-in-nexus-1-6/index.html): Discover the key updates and features in Sonatype Nexus Repository 1.6, including enhanced auto-blocking, new staging configurations, and REST APIs. (1,253 words)
- [How to Upskill Your DevOps](/content/blog/how-to-upskill-your-devops/index.html): Become T-shaped. No matter what role we're in—whether it's security, operations, or software delivery—we must understand the breadth of skills needed.  (995 words)
- [Automating Open Source Dependency Management | Sonatype](/content/blog/the-impact-of-automating-open-source-dependency-management.html): Learn about the automation benefits of software dependency management from the experience of developers working in a heavily regulated industry (1,141 words)
- [DevSecOps: Eat Carrots, Not Cupcakes](/content/blog/devsecops-eat-carrots-not-cupcakes/index.html): In DevSecOps, security automation is more strategic than ever and key to survival. (731 words)
- [hubfs/securing-20your-20software-20supply-20chain-20brief-pdf.html](/content/hubfs/securing-20your-20software-20supply-20chain-20brief-pdf.html) (1,902 words)
- [Master Plexus Container: A Guide to Dependency Injection](/content/blog/2009/05/plexus-container-five-minute-tutorial/index.html): Learn how to create and inject components using Plexus Container with Maven with info on interfaces, implementations, and dependency injection techniques. (1,100 words)
- [Nexus Repository Manager Expands OSS Coverage | Sonatype](/content/press-releases/sonatypes-nexus-repository-manager-expands-oss-coverage.html): Sonatype's Nexus Repository Manager expands with CocoaPods, Conda, and APT, following a 40% YoY growth. (547 words)
- [Securing Vulnerabilities in Jenkins Pipelines | Sonatype](/content/blog/identifying-security-vulnerabilities-inside-a-jenkins-pipeline.html): Justin Young (@whyjustin) demonstrates how a malicious component can access your connected network - and how to identify that component inside Jenkins.  (498 words)
- [Chapter 10: Repository Management | Sonatype Maven Cookbook](/content/resources/guides/maven-cookbook/repository-management/index.html): Optimize your repository management using Apache Maven. This chapter explores techniques to efficiently manage artifacts and dependencies. (1,739 words)
- [Publishing Your Open Source Artifacts to the Central Repository](/content/blog/2009/06/publishing-your-artifacts-to-the-central-maven-repository.html): Publishing your artifacts to the Central Repository is now easier with Sonatype's streamlined process, enhancing repository metadata quality. (580 words)
- [How Kredi Kayıt Bürosu Protects It's SDLC | Sonatype](/content/customer-stories/kkb-prioritizes-security-in-development/index.html): Explore how Sonatype Lifecycle helped the Kredi Kayıt Bürosu protect its entire software development lifecycle (SDLC) from open source vulnerabilities. (1,068 words)
- [Crypto Enthusiasts Flood npm with 281,000 Fake Packages](/content/blog/crypto-enthusiasts-flood-npm-with-281000-bogus-packages-overnight.html): Crypto enthusiasts flooded software registries like npm and PyPI with thousands of bogus packages that add no functional value. (976 words)
- [In the Dark About Software Supply Chain Vulnerabilities](/content/blog/in-the-dark-about-software-supply-chain-vulnerabilities.html): The Barium attacks, revealed earlier this month, highlight new, pervasive tactics that are exceptionally dangerous. 
 (605 words)
- [Harness the Power of Open Source AI | Sonatype](/content/solutions/open-source-ai/index.html): Gain control and visibility over your open source AI usage with Sonatype's end-to-end AI Software Composition Analysis (SCA)., Explore our platform (1,777 words)
- [Sonatype Closes $30 Million Financing](/content/blog/2016/02/sonatype-closes-30-million-financing/index.html): Sonatype secures $30 million financing to enhance its software supply chain automation tools, driving improvements in software security and speed. (809 words)
- [Brazen DNS-Based Attack: Hacker Steals $12,000 in Bitcoin](/content/blog/2013/03/hacker-steals-12000-worth-of-bitcoins-in-brazen-dns-based-attack.html): Bitcoin brokerage Bitinstant suffers a $12,000 theft in a daring DNS-based attack. Learn how hackers utilized social engineering to breach security protocols. (45 words)
- [How SBOMs Drive a Stronger SCA Strategy | Sonatype Webinar](/content/resources/webinars/how-sboms-drive-sca-strategy-webinar/index.html): Discover how to operationalize SBOM data for deeper software visibility and smarter security decisions. Transform your SCA strategy insights from this webinar., Generating a Software Bill of Materials (SBOM) is often seen as a compliance checkbox—but what comes next? To truly secure the software supply chain, or... (156 words)
- [FlexMojos Focus on 0.5 Maven Book Release | Sonatype](/content/blog/2009/05/flexmojos-chapter-focus-of-05-maven-book-release/index.html): FlexMojos chapter highlighted in Maven book's 0.5 release. Learn about updates, documentation options, and upcoming features.  (427 words)
- [From Chaos to Control: Establish an OSPO for Strategic Governance](/content/blog/from-chaos-to-control-establishing-an-ospo-for-strategic-governance.html): Discover how an Open Source Program Office (OSPO) brings governance, security, and strategy to open source, turning risk into business advantage. (667 words)
- [2016 State of Software Supply Chain Report Insights | Sonatype](/content/blog/the-2016-state-of-software-supply-chain-report/index.html): Sonatype’s 2nd Annual Report on Accelerating Software Innovation and Security (408 words)
- [The Magic of a Remote Organization | Sonatype Blog](/content/blog/the-magic-of-a-remote-organization/index.html): The fully remote org model gives us significant competitive benefits and has been a major factor in putting Sonatype on a path to an IPO. (2,756 words)
- [Sonatype Eliminates Pain of Reporting OSS Vulnerabilities](/content/blog/centralsecurityproject/index.html): Sonatype has teamed up with HackerOne to build The Central Security Project, a pioneering program that brings together the ethical hacker and open source. (820 words)
- [What are the Key Changes in Software Liability | Sonatype Article](/content/resources/articles/key-changes-in-software-liability/index.html): Customer agreements used to provide a buffer against software liability for data breaches and other data-related risks. However, this is changing. (4,018 words)
- [Sonatype + Zscaler Internet Access Integration | Sonatype](/content/products/integrations/zscaler/index.html): Enhance edge security by integrating Zscaler ZIA with Sonatype to block open source malware and protect your software supply chain effectively. (554 words)
- [DevOps Intelligence Changes the Game](/content/blog/devops-intelligence-changes-the-game/index.html): Many IT teams that are transforming to DevOps have yet to take the next step. (802 words)
- [Ken D'Auria's DevSecOps Journey at The Hartford Innovator](/content/blog/nexus-innovator-ken-dauria-proves-practice-and-theory.html): Ken D'Auria, Director of Engineering at The Hartford, describes a four-part DevSecOps evolution familiar to others building secure applications.  (1,088 words)
- [Outpace Malware: Secure Software with Real-Time Protection](/content/blog/outpace-malware-build-faster-and-secure-software-with-real-time-protection.html): Open source malware bypasses CVEs and traditional scans. Discover how real-time detection stops malicious packages at the edge of your supply chain. (1,076 words)
- [How Delta Air Lines Rolled Out Nexus Across the Enterprise](/content/blog/rolling-out-nexus-in-a-large-organization/index.html): What does it take to roll-out Nexus in a large organization? Not just any organization, an international one such as Delta Airlines. (710 words)
- [npm Chalk and Debug Packages Compromised | Sonatype](/content/blog/npm-chalk-and-debug-packages-hit-in-software-supply-chain-attack.html): Learn about the npm chalk and debug widespread software supply chain attack, highlighting risks and the need for better SBOM and SCA practices. (1,148 words)
- [From Burping to Flying - Red Teaming With Sonatype At Intuit](/content/blog/from-burping-to-flying-red-teaming-with-nexus-at-intuit.html): Security is too important to leave out of DevOps. Learn why, and how to unite the two, from Shannon Lietz's 2018 Nexus User Conference session.  (727 words)
- [Sonatype Named in 2023 Gartner Magic Quadrant for AST](/content/blog/sonatype-named-to-the-2023-gartner-mq-for-application-security-testing.html): Sonatype is named to the 2023 Gartner Magic Quadrant for Application Security Testing (AST).  (936 words)
- [Open Source Revolution at BNP Paribas Personal Finance](/content/customer-stories/bnp-personal-finance-open-source-revolution/index.html): Read how the Sonatype Platform is transforming the way BNP Paribas Personal Finance builds secure software using open source. (879 words)
- [Enhancing Hudson with JSR-330: Simplifying Developer Workflow](/content/blog/2011/02/guicing-up-hudson-making-life-easier-for-developers-with-jsr-330.html): JSR-330 integration in Hudson enhances plugin development, boosts performance, and sets the stage for future interoperability and modularity improvements. (612 words)
- [Guide to Vulnerability Management | Sonatype 101 Article](/content/resources/articles/vulnerability-management/index.html): Explore effective threat and vulnerability management strategies to enhance software security, comply with industry regulations, and mitigate your risk. (871 words)
- [Breaking Organizational Silos for Better Application Security](/content/blog/breaking-silos-for-security/index.html): Security depends on collaboration and communication.  Our recent Elevate talk breaks down pillars, structure, and suggestions for organizational silos. (745 words)
- [New npm PoC Packages Exploit Dependency Confusion | Sonatype](/content/blog/new-npm-poc-packages-target-paypal-zettle-airbnb-developers.html): Sonatype identified npm packages that exploit dependency confusion, named after internal dependencies purportedly used by PayPal Zettle and Airbnb (485 words)
- [How Achievers Transformed DevOps with Sonatype](/content/blog/nexus-innovator-david-radford-grant-of-achievers/index.html): Months of outages. Sure, support was available -- if the boss agreed to pay 10x more. Here's how one man fixed both issues using Nexus Repo Pro. (1,181 words)
- [Improving Test Coverage Reports for Integration Tests with Maven](/content/blog/2009/06/integration-tests-with-maven-part-2-test-coverage-reports.html): Learn how to measure unit and integration test coverage using Maven and EMMA. Get step by step instructions to help enhance your Java project's testing process. (615 words)
- [Chapter 11: Writing Plugins | Maven: The Complete Reference ](/content/maven-complete-reference/writing-plugins/index.html): Dive into plugin development with Chapter 11 of the Maven Definitive Guide by Sonatype. Essential for extending Maven functionalities. (1,056 words)
- [Sonatype and Package Registry Leaders Unite on OS Sustainability](/content/press-releases/sonatype-and-package-registry-leaders-unite/index.html): Sonatype joins the Linux Foundation's Sustaining Package Registries Working Group to tackle sustainability challenges facing open source package registries. (578 words)
- [Open Source Malware Trends: Q1 2025 Malware Index | Sonatype](/content/blog/open-source-malware-index-q1-2025/index.html): Explore Q1 2025 open source malware trends: OSS threats, data exfiltration attacks targeting crypto, and how Sonatype stops malware before it reaches your builds. (875 words)
- [CMMC 2.0 in Action: Operationalizing Secure Software Practices Across the Defense Industrial Base](/content/blog/cmmc-2-0-in-action-operationalizing-secure-software-practices-across-the-defense-industrial-base.html): CMMC 2.0 enforcement starts soon. Learn how defense contractors can operationalize compliance with automation, SBOMs, and secure DevSecOps. (1,157 words)
- [Grounded Intelligence Ensures Safe AI Software Development](/content/blog/grounded-intelligence-is-key-to-safe-ai-software-development-at-scale.html): AI coding tools still hallucinate on dependency decisions. Learn how real-time grounding eliminates errors and enables more reliable software development. (627 words)
- [Overcoming Common Myths About Continuous Delivery](/content/blog/continuous-delivery-no-excuses/index.html): Any organization thats results aren’t achieved when you adopt practices but don’t implement the culture.  The road to continuous delivery. (854 words)
- [Sonatype Announces 2024 Elevate Awards Winners | Sonatype](/content/press-releases/sonatype-announces-2024-elevate-awards-winners/index.html): Sonatype announced winners of the 2024 Elevate Awards and recognized nine global organizations for advancing software innovation.
 (363 words)
- [The People Behind Sonatype: Sue Jasmin](/content/blog/employee-spotlight-sue-jasmin/index.html): The Director of Agile Coaching at Sonatype, Sue narrated her journey through various industries, and what brought her to Sonatype. (1,477 words)
- [New Official Maven Central Repository in Europe | Sonatype Blog](/content/blog/2010/10/new-official-maven-central-repository-in-europe/index.html): Sonatype improves Maven Central for European developers with a new UK repository, enhancing artifact validation, security, and reliability. (5,035 words)
- [Beta version of Nexus Book ePub now available | Sonatype Blog](/content/blog/2010/05/beta-version-of-nexus-book-epub-now-available/index.html): Download the beta ePub version of the Nexus Book and provide feedback on usability for various eBook readers. Explore the future of open source. (369 words)
- [A Perspective on Sonatype's Road to Continuous Delivery](/content/blog/sonatypes-road-to-continuous-delivery-our-product-owners-perspective.html): Sonatype's engineering team discusses their journey to continuous delivery sharing lessons learned, best practices and opportunities for improvement. (212 words)
- [Sonatype + IntelliJ IDEA Integration for SCA Capabilities](/content/products/integrations/intellij-idea/index.html): Enhance workflows with Sonatype's IntelliJ IDEA integration, enabling real-time scanning, policy enforcement, and actionable SCA insights within your IDE. (457 words)
- [Migrating from Plexus to Guice: Crafting a Guice Bean Extension Layer](/content/blog/2010/01/from-plexus-to-guice-3-creating-a-guice-bean-extension-layer.html): Explore how to use Guice for bean injection. Transition smoothly from Plexus to Guice with practical examples, detailed technical information, and insights. (1,940 words)
- [Advanced Maven Reactor Options for Multi-Module Builds](/content/blog/2009/10/maven-tips-and-tricks-advanced-reactor-options/index.html): Learn about advanced Maven Reactor options to manage and build multi-module projects, enhancing your development workflow and reducing build times. (793 words)
- [Explore New Policy-Oriented Reports in Sonatype Lifecycle](/content/blog/policy-oriented-reporting-with-nexus-lifecycle/index.html): The new version our Application Composition Report now includes policy violations at the center of the report, allowing you to quickly identify and act on. (308 words)
- [Promise Theory and DevOps | Sonatype Blog](/content/blog/promise-theory-and-devops/index.html): Mark Burgess is a theoretical physicist, but in his talk at the 2016 ADDO conference, he talked more about economics & human interactives than physics. (700 words)
- [Sonatype Nexus Repository 2.1.2: New Enhancements Released](/content/blog/2012/08/nexus-2-1-2-update-available-now-minor-features-and-fixes-for-both-oss-and-pro.html): Nexus 2.1.2 Update Available Now: Minor Features and Fixes for both OSS and Pro (197 words)
- [Does Nexus support Ant + Ivy builds? Yes it does | Sonatype Blog](/content/blog/2012/06/does-nexus-pro-support-ant-ivy-builds-yes-it-does/index.html): Learn how to configure Ant + Ivy builds with Nexus Repository to manage dependencies. Download the evaluation guide for easy setup and integration tips. (200 words)
- [Sonatype and Red Hat Clair Integration | Sonatype Documentation](/content/products/integrations/red-hat-clair/index.html): Enhance container security with the Sonatype and Red Hat Clair integration. Automate vulnerability scanning and assess risk across applications easily. (433 words)
- [Contact Us Your Software Supply Chain Experts | Sonatype](/content/contactus/index.html): Get in touch with Sonatype today. Our open source and AI experts are available to help secure your software supply chain.  (109 words)
- [New Sonatype Nexus Repository 1.5.0: LDAP, Archive Browsing, Javadoc](/content/blog/2010/01/announcing-nexus-1-5-0-ldap-archive-browsing-javadoc-and-more.html): Discover new features in Sonatype Nexus Repository 1.5.0, including LDAP integration, remote repository browsing, and enhanced Javadoc viewing capabilities. (535 words)
- [Australian ISM Software Development Guidelines | Sonatype](/content/resources/guides/meet-australian-ism-software-development-guidelines-with-sonatype.html): Stay Compliant with Australian ISM guidelines and learn how it can help CISOs, CIOs, security professionals, and IT managers protect against cyber threats. (973 words)
- [Jenkins and Sontype | Integration](/content/products/integrations/jenkins/index.html): Enhance your Jenkins CI/CD pipeline with the Sonatype plugin to automate security, license enforcement, and artifact management for secure development. (474 words)
- [Sonatype Firewall Shields Against OSS Invasions](/content/blog/oss-endgame-nexus-firewall-as-your-shield-against-open-source-invasions.html): Put simply, Nexus Firewall enables the heroes. Mike Van Doren walked through how to get started using it at the 2019 Nexus User Conference.  (788 words)
- [Sonatype Lifecycle Report Redesign Survey | Sonatype](/content/blog/nexus-lifecycle-report-redesign-survey/index.html): Participate in the Sonatype Lifecycle report redesign survey. Help us improve the Nexus Lifecycle and application composition report for better clarity and UX. (462 words)
- [Report a Security Vulnerability | Sonatype](/content/report-a-security-vulnerability/index.html): Report security issues and vulnerabilities. Let’s work together to help secure Sonatype’s products and services while earning some extra cash and/or swag! (401 words)
- [Benefits of a Repository Manager: Partners and Vendors](/content/blog/2010/08/benefits-of-a-repository-manager-part-v-external-partners-and-vendors.html): Benefits of a Repository Manager: Part V External Partners and Vendors (682 words)
- [ABN AMRO Embraced CI/CD for Better Innovation and Security](/content/blog/abn-amro-continuous-delivery-sonatype-nexus/index.html): Many organizations would have shied away from the transformation, but ABN AMRO saw FinTech companies nipping at their heels. (744 words)
- [Developers: We Must Evolve](/content/blog/developers-we-better-evolve/index.html): Chris Roberts of Attivo Networks sees many trends colliding that will require developers to adopt DevSecOps practices - now!  (560 words)
- [Antoine Harden Joins Sonatype as RVP of Federal | Sonatype](/content/blog/sonatype-welcomes-antoine-harden-as-regional-vice-president-of-federal.html): Sonatype welcomes Antoine Harden, regional VP of Federal to lead cybersecurity efforts across U.S. agencies and strengthen software supply chain security. (1,214 words)
- [Maximizing Value with Sonatype Lifecycle's Success Metrics](/content/blog/how-much-value-are-you-getting-from-nexus-lifecycle.html): Success Metrics generates a report highlighting the overall policy health of your projects, and the progress you are making in remediating policy violations (4,800 words)
- [Air-Gapped Software Security: Offline Environments | Sonatype](/content/blog/offline-not-off-guard-countering-software-supply-chain-threats-in-high-security-environments.html): Air-gapped does not mean safe. Learn how to achieve air-gapped software security with SBOMs, automation, and supply chain protection for offline environments. (1,068 words)
- [Sonatype Delivers Hardened Platform to DoD’s Platform One](/content/press-releases/platform1/index.html): Sonatype's Nexus Lifecycle and Nexus Repository are now available on the Department of Defense’s (DoD) Platform One.  (497 words)
- [Maven 3 Plugin Configuration for Developers and Users | Sonatype](/content/blog/2011/03/configuring-plugin-goals-in-maven-3/index.html): Learn about the new improvements to plugin goals configuration in Maven 3.0.3 and how they simplify plugin development and usage. Dive into the details. (1,462 words)
- [DevSecOps: Dreams, Teams, and Architecture](/content/blog/devsecops-dreams-teams-and-architecture/index.html): DevSecOps: Dreams, Teams, and Architecture.  How to bring DevSecOps into your organization.   (748 words)
- [Securing Mobile Apps with Dart, Flutter, and Sonatype](/content/blog/secure-mobile-applications-with-dart-flutter-and-sonatype.html): Discover how Sonatype supports Dart and Flutter to help secure cross-platform apps with visibility into open source risk and smarter dependency management. (869 words)
- [Risk Management Framework (RMF) Compliance | Sonatype Platform](/content/resources/guides/risk-management-framework/index.html): Discover how the Sonatype Platform automates compliance with DoD Risk Management Framework (RMF) controls to enhance software supply chain security. (6,630 words)
- [Useful Docker Images – Part 1 | Sonatype](/content/blog/useful-docker-images-part-1/index.html): Nexus 3 is an open source repository manager that can be used as a private Docker registry to store your images (745 words)
- [2020 International Women's Day Theme Resonates in DevSecOps](/content/blog/each-for-equal-international-womens-day-2020-theme-resonates-in-devsecops-as-a-business-issue.html): Studies demonstrate a variety of immediate and ongoing business advantages accrued by gender diverse teams. (1,001 words)
- [Setting Boundaries: How Procurement Relates to Security (Part 1)](/content/blog/how-procurement-relates-to-security-part-1/index.html): Whether your organization calls it purchasing, requisition, bidding, or business operations, not managing what comes into your company can be expensive.
 (5,457 words)
- [How-To Video Training: Open Source Component Management](/content/blog/how-to-video-training-on-open-source-component-management-and-intelligence.html): As a long-time trainer for Apache Maven and Sonatype Nexus Repository Manager, I’ve spent considerable time recording and editing numerous short tutorial. (415 words)
- [Protect Against Hijacking with Nexus Repository Routing](/content/blog/new-feature-repository-routing/index.html): How to create a repository routing rule to prevent developers from pulling a private package from a public repository. Company Pied Piper as an example.  (655 words)
- [What You Should Know About the Latest Struts2 Vulnerability](/content/blog/what-you-should-know-about-the-struts-2-vulnerability-announcement-video.html): What you should know about the recent struts 2 vulnerability announcements from September 2018 (153 words)
- [Mühlbauer Transforms Security Culture | A Sonatype Success Story](/content/customer-stories/muhlbauer-id-services/index.html): Learn how Mühlbauer ID Services GmbH achieved an 87% fix rate and reduced its technical debt through automation and proactive measures in software development.  (723 words)
- [Securing the Software Supply Chain: CISA Best Practices](/content/blog/helping-developers-implement-cisa-best-practices-part-1.html): Sonatype's Nexus Platform helps give DevSecOps practitioners the tools they need to help secure the software supply chain against malicious cyber attacks. (5,575 words)
- [Mitigating Open Source Persistent Risks in Software Security](/content/blog/the-evolution-of-open-source-risk-persistent-challenges-in-software-security.html): Explore the evolving challenges of open source risk in the State of the Software Supply Chain. Discover best practices to secure software supply chains. (803 words)
- [The Project Object Model | Maven: The Complete Reference](/content/maven-complete-reference/project-object-model/index.html): Explore Maven's Project Object Model in Chapter 3 of the Maven Definitive Guide by Sonatype. Understand the core structure and hierarchy of Maven projects. (11,054 words)
- [Encrypting Passwords in Maven: A Step-by-Step Guide](/content/blog/2009/10/maven-tips-and-tricks-encrypting-passwords/index.html): Learn how to securely encrypt passwords in Maven to protect sensitive information stored in your settings.xml file with this step-by-step guide. (5,219 words)
- [Learn What Is Spring4Shell? | Wicked Good Development](/content/blog/wicked-good-development-what-is-spring4shell-and-why-you-should-care.html): In a special episode of Wicked Good Development we dissect the zero-day RCE vulnerability in the Spring Framework dubbed Spring4Shell or Springshell. , Did Spring4Shell set the internet on fire again? Not so fast. In a special episode of Wicked Good Development, we dissect the zero-day RCE vulnerability in the Spring Framework dubbed Spring4Shell or Springshell. From comparisons to Log4j to how to remediate it and what versions on vulnerable, the experts on today's show break down what we know so far about this new vulnerability. And most importantly, how to determine if you're affected.
Check out the resources from today's episode here. (2,748 words)
- [DCA Live Names Sonatype’s Matt Howard to List of Top CMOs](/content/press-releases/dca-live-names-matt-howard-to-list-top-cmos-in-dc-region-for-2018.html): Sonatype's CMO Matt Howard listed among DCA Live’s Top CMOs and Marketing Leaders of 2018. (435 words)
- [Apache Tomcat Vulnerability: Nearly 100K Risky Downloads](/content/blog/apache-tomcat-vulnerability-widespread-exploitation-and-key-insights-from-sonatype.html): A critical Apache Tomcat vulnerability (CVE-2025-24813) was exploited 30 hours after disclosure. Vulnerable versions were downloaded 100K times post-PoC. (1,239 words)
- [Enhance Security with Continuous Compliance and DevOps](/content/blog/continuous-compliance-and-devops/index.html): Compliance automation is critical to DevOps infrastructure. Christoph Hartmann, lead engineer at Chef and the creator of InSpec, explains the benefits. (611 words)
- [New Malware: Python Crypto & Dependency Confusion Packages](/content/blog/this-week-in-malware-dependency-overflow/index.html): This week includes a PyPI typosquat that drops a cryptominer and AWS credential stealer, along with an influx of 345 dependency confusion packages. (717 words)
- [Building Trust at the Speed of AI](/content/resources/webinars/building-trust-at-speed-of-ai/index.html): Join Sonatype's webinar to learn how to secure your software supply chain against evolving AI-driven threats. (186 words)
- [On Maven model transforms and C# | Sonatype blog](/content/blog/2008/11/on-maven-model-transforms-and-c/index.html): Learn how Maven 3.0 facilitates bidirectional transformations between Maven POM files and C# project files using a canonical data format. (379 words)
- [Log4j Updates and Vulnerability Resources | Sonatype](/content/resources/log4j-vulnerability-resource-center/index.html): Stay informed on Log4j exploit updates, critical fixes, and tools to enhance your software security and protect your digital assets effectively. (356 words)
- [Getting rugged DevOps right | Sonatype Blog](/content/blog/2015/12/getting-rugged-devops-right/index.html): Discover how to bridge the gap between traditional security practices and high-velocity DevOps for a secure, efficient application development process. (1,136 words)
- [CVE-2020-13935: Apache Tomcat WebSocket DoS Vulnerability](/content/blog/nexus-intelligence-insightscve-2020-13935-apache-tomcat.html): July’s Nexus Intelligence Insight takes a deep dive into a Denial of Service (DoS) vulnerability impacting the popular Apache Tomcat Websocket component.
 (686 words)
- [Breaking Builds and Securing Code: Insights from ABN AMRO](/content/blog/wicked-good-development-build-breaking-and-more-with-abn-amros-ingmar-vis.html): Kadi Grigg and guest co-host Sola Otudeko sit down with ABN AMRO's Ingmar Vis to talk about the value of breaking builds, automation, and more. 
, Join Kadi and guest co-host Sola Otudeko for a chat with ABN AMRO’s Ingmar Vis. Listen in as they discuss:

 The value of breaking builds.
 Why automation is key for agile development.
  Lessons he’s learned throughout his open source journey.
  What pushed him to give back to open source.

Tune in for the full conversation and check out the resources from this episode here. (6,079 words)
- [RSAC 2018 - The opening session for DevOps Connect: DevSecOps Day](/content/blog/rsac-2018-preview-of-opening-session-for-devops-connect-devsecops-day-podcast.html): Preview of RSAC 2018's DevSecOps Day opening session with insights from Shannon Lietz, Caroline Wong, and Paula Thrasher on the significance of DevSecOps. (630 words)
- [The Evolution of Maven Central: From Origin to Modernization](/content/blog/the-history-of-maven-central-and-sonatype-a-journey-from-past-to-present.html): Explore the evolution of Maven Central, highlighting its crucial role in the Java ecosystem and software development overall and its connection to Sonatype (2,040 words)
- [Unpickling Pytorch: Keeping Malicious AI Out | Sonatype](/content/resources/whitepapers/unpickling-pytorch/index.html): Understand the risks of pickle files and explore practical ways to protect your enterprise from the hidden threats in AI models.  (168 words)
- [Unlocking Cyber Readiness with SBOMs | Sonatype Webinar](/content/resources/webinars/cyber-readiness-with-sboms/index.html): Discover how SBOMs are transforming software security and compliance. Join our webinar to learn about SBOM requirements and their impact on risk management., The cybersecurity landscape has undergone significant transformations resulting in Executive Order 14028 with a special emphasis on implementing a Softw... (140 words)
- [Exploring Distributed Continuous Integration with Hudson | Sonatype](/content/blog/2009/02/the-hudson-build-farm-experience-volume-iv/index.html): Navigate the complexities of setting up a distributed Hudson build farm, addressing cross-OS path translation and managing concurrent builds. (1,889 words)
- [Modern Slavery Statement | Sonatype](/content/legal/modern-slavery-statement/index.html): Discover how our company is taking a stand against Modern Slavery. Read our comprehensive Modern Slavery Statement. (523 words)
- [New Typosquats in PyPI, Dependency Confusion Packages](/content/blog/this-week-in-malware-typosquats-in-pypi-dependency-confusion-packages.html): This Week in Malware we discovered 50 packages that are either malicious or dependency confusion attacks. (266 words)
- [Software Packages, Do We Even Need Them?](/content/blog/software-packages-do-we-even-need-them/index.html): Explore the evolution of package managers & the benefits of binary packages in software ecosystems. Learn how they enhance DevOps, security, & efficiency. (1,052 words)
- [Struts Vulnerabilities Persist: Are You Ignoring the Risks?](/content/blog/8-more-struts-breaches/index.html): When using vulnerable versions of the framework, organizations are breached. (491 words)
- [Why Open Source Matters and How Companies Can Contribute](/content/blog/why-companies-should-contribute-to-open-source-and-how-to-do-it.html): Your company relies on open source projects; giving back to them can reduce tech debt, accelerate innovation, and reduce your developers’ cognitive load.  (1,453 words)
- [Explore The Persistence of OSS Vulnerabilities and Avoidable Risk](/content/blog/unnecessary-risk-the-persistence-of-open-source-vulnerabilities.html): Four years after Log4Shell, developers still choose vulnerable components. New research reveals the widespread, avoidable risk hiding in plain sight. (620 words)
- [Temp IP Change to Improve Maven Central Failover Mechanism](/content/blog/2011/05/maven-central-failover-mechanism-improves-temporary-ip-change-on-monday.html): Maven Central Failover Mechanism Improves: Temporary IP change on Monday (837 words)
- [How DevOps Killed the Market for Software Composition Analysis](/content/blog/forrester-software-composition-analysis-wave-and-the-future-of-devops.html): Discover how DevOps-native workflows rendered traditional SCA tools obsolete, and what organizations should look for to integrate automated SCA security. (310 words)
- [Sonatype SBOM Manager Product Tour](/content/resources/product-tours/sbom-manager/index.html): Discover how Sonatype SBOM Manager simplifies compliance, ensuring full visibility and confidence in your software components. Watch the product tour now. (39 words)
- [Sonatype Nexus Innovator: Bloomberg Industry Group](/content/blog/bloomberg-industry-german3/index.html): Bryan Batty von der Bloomberg Industry Group teilt seine Meinung im Hinblick auf Herumexperimentieren und wie der Erfolg von Initiativen gemessen werden kann. (1,642 words)
- [Secure Your Software Supply Chain: A C-Suite Imperative](/content/resources/whitepapers/securing-your-ssc/index.html): Download a vital brief on securing your software supply chain amid rising threats and regulatory demands. Align software security with business strategy. (130 words)
- [Why Sonatype Is Acquiring MuseDev](/content/blog/sonatype-acquires-musedev-and-unveils-full-spectrum-software-supply-chain-management-system.html): Sonatype acquired MuseDev, a developer-first source code analysis platform and unveiled the world’s first full-spectrum platform for strengthening. (1,246 words)
- [Talking Turkey in Texas: Open Source Governance Lags](/content/blog/2014/11/open-source-governance-lags/index.html): Learn about the critical need for improved open source software supply chain management, as discussed at the Lone Star Application Security Conference. (671 words)
- [Securing Air-Gapped Software Supply Chains | Sonatype Webinar](/content/resources/webinars/securing-air-gapped-supply-chains/index.html): Discover strategies for federal agencies to improve visibility, governance, and accurate SBOM generation in air-gapped environments during this webinar., How do you enable rapid, secure software development while remaining compliant with strict regulations? Discover the answer during this exclusive webina... (222 words)
- [Securing Software Supply Chains: Sonatype's Firewall Policy](/content/blog/sonatype-releases-new-nexus-firewall-policy-to-secure-software-supply-chains-from-dependency-confusion-attacks.html):  Sonatype’s new Dependency Confusion Policy Protection using Nexus Firewall and Nexus Repository can now automate dependency confusion protection at scale (944 words)
- [Sonatype Intelligence for Open Source Security | Sonatype](/content/products/intelligence/index.html): Secure your SDLC with Sonatype Intelligence, the leading source of vulnerability intelligence. Detect and remediate open source risks with precision. (1,023 words)
- [Sonatype Reports Record Growth in 2017 | Sonatype](/content/press-releases/sonatype-reports-record-growth-in-2017/index.html): Sonatype, the leader in automated open source governance •  Sonatype announces record growth for 2017  (445 words)
- [WSJ on Struts: Companies Still Downloading Vulnerability](/content/blog/wsj-on-struts-companies-still-downloading-flaw-linked-to-equifax-breach.html): The Wall Street Journal discusses open-source governance, Struts and how companies are still downloading the flaw that led to the Equifax Breach (418 words)
- [Managing AI Risks in the Modern Software Supply Chain](/content/blog/managing-ai-risks-in-the-modern-software-supply-chain.html): Discover how to manage AI risks in the software supply chain. Learn about threats, governance, and tools to secure models without slowing innovation. (918 words)
- [What's New in Sonatype Nexus Repository Open Source 1.7.0?](/content/blog/2010/06/whats-new-in-nexus-open-source-1-7-0/index.html): Discover the new features in Nexus Open Source 1.7, including an improved artifact search interface and enhanced repository group capabilities.  (454 words)
- [Insights Inside Recent npm Malware Attacks | Sonatype Webinar](/content/resources/webinars/inside-npm-malware-attacks/index.html): Discover strategies to protect your software supply chain from npm malware attacks. Learn how to identify risks and secure your development environment.,  (92 words)
- [Maven: The Complete Reference is Now Available as An Epub](/content/blog/2010/08/maven-the-complete-reference-now-available-as-an-epub.html): Discover the availability of Maven: The Complete Reference as an epub for mobile reading. Learn more about this essential resource and how to get support. (268 words)
- [Modern Automotive Software Development Solutions | Sonatype](/content/solutions/automotive/index.html): Discover how Sonatype accelerates automotive software development, ensuring security, compliance, and innovation in the era of AI-assisted development. (1,113 words)
- [Best Practices for Safe and Compliant Open Source Use | Sonatype](/content/resources/whitepapers/open-source-best-practices/index.html): Explore best practices for secure, compliant open source use. Implement policies that protect your supply chain and streamline development. (754 words)
- [Optimizing Platform Health with Synthetic Monitoring](/content/blog/observability-made-easy/index.html): A small number of apps disproportionately skewed aggregate metrics and sent false alarms. The solution was DIY synthetic monitoring using Python. (706 words)
- [Detect and Mitigate the Discord.dll Malware Threat in npm](/content/blog/discord-dll-successor-to-npm-fallguys.html): Sonatype has identified a series of counterfeit components in the npm ecosystem, Discord. (1,272 words)
- [TED Talks security: Three provoking discussions | Sonatype Blog](/content/blog/2014/03/security-3-ted-talks/index.html): I love watching TED Talks. They are 15 well-spent minutes watching experts around the world provide great insights into things I thought I knew well. (321 words)
- [A Struts2 Vulnerability Hurricane: Deserialization](/content/blog/alert-three-things-to-know-about-the-newest-struts2-vulnerability.html): Discover critical details of the latest Struts2 deserialization vulnerability impacting global organizations and learn how to protect your applications. (559 words)
- [m2e Roadmap | Sonatype Blog](/content/blog/2009/01/m2e-roadmap/index.html): m2e refocuses on quality and testing, aiming for a flawless 1.0 release with robust automated tests, improved architecture, and better user involvement. (1,942 words)
- [Chapter 4: Ant and Maven | Sonatype Maven Cookbook](/content/resources/guides/maven-cookbook/ant-and-maven/index.html): Integrate Ant with Apache Maven for enhanced build automation. This chapter guides you through seamless integration and maximizing your productivity. (1,106 words)
- [Open Source License Compliance Software | Sonatype](/content/solutions/legal-open-source-license-compliance/index.html): Automate open source license compliance with Sonatype software. Use our license compliance management tools to fix violations without slowing down development.

 (1,119 words)
- [Fannie Mae: Scaling the DevOps Enterprise](/content/blog/fannie-mae-scaling-the-devops-enterprise/index.html): Fannie Mae has $100 B in annual revenue, over 7,200 employees, 468 applications and 1,200 software assets. (934 words)
- [Gradle Package Support | Secure Dependency Management](/content/products/language-support/gradle/index.html): Manage Gradle dependencies securely with Sonatype. Streamline artifact publishing, enforce policies, and automate risk detection to safeguard your SDLC. (375 words)
- [Sonatype's Enterprise Development Survey | Sonatype Blog](/content/blog/2010/12/sonatypes-enterprise-development-survey/index.html): Sonatype invites developers, managers, and tech executives to participate in a survey to share your experiences and help shape our products. (116 words)
- [Open Source Malware Surges in Q3 as Attackers Target Dependencies](/content/press-releases/open-source-malware-index-q3-2025/index.html): Open Source Malware Surges in Q3 2025, driven by sophisticated, AI-powered attacks targeting trusted dependencies and data across open source registries. (688 words)
- [The Power of Binary Repositories | Sonatype DevOps Webinar](/content/resources/webinars/devops-downloads/binary-repositories/index.html): Discover the importance of binary repositories in DevOps. Learn how they enhance development workflows, reduce risks, and improve control across the SDLC., Amidst the allure of flashy tools in today's dynamic software development, a binary repository often goes unnoticed but should be a DevOps team's best a... (153 words)
- [R Package and Language Support | Sonatype Support](/content/products/language-support/r/index.html): Manage and secure your R projects with Sonatype's solutions for dependency governance, private hosting, and compliance, ensuring control over open source. (400 words)
- [Understanding Hashing: Key to Unique Identifiers in Software](/content/blog/what-is-hashing-a-look-at-unique-identifiers-in-software.html): Get a handle on software security with these odd-looking but very accessible hash identifier tools to help sort good from bad on the internet. (1,392 words)
- [Bryan Batty on the Importance of Open Source Governance](/content/blog/nexus-innovator-bryan-batty-of-bloomberg-industry-group-part-4.html): Bryan Batty of Bloomberg Industry Group explains why he selected the Sonatype Platform and how it has dramatically improved open source governance. (982 words)
- [This Week in Malware - Nearly 40 Packages Discovered | Sonatype](/content/blog/this-week-in-malware-nearly-40-packages-discovered/index.html): We discovered and analyzed nearly 40 packages flagged as malicious, suspicious, or dependency confusion attacks in npm and PyPI registries. (260 words)
- [PyPI Attack: 1,275 Dependency Confusion Packages Detected](/content/blog/pypi-flooded-with-over-1200-dependency-confusion-packages.html): Popular Python open source software repository, PyPI has been flooded with over 1,200 dependency confusion packages by the same actor.  (866 words)
- [SAST vs. DAST: Enhancing Application Security in DevSecOps](/content/blog/sast-vs-dast/index.html): Explore advantages and limits of static application security testing SAST and dynamic application security testing DAST in application security (1,500 words)
- [Assessing your Open Source Security Efficacy | Sonatype Webinar](/content/resources/webinars/accessing-open-source-efficacy/index.html): Explore insights from experts on managing open source security, reducing risks, and empowering developers to secure your software supply chain effectively., Discover how open source dependencies play a vital role in modern software development within the financial services sector. In this webinar, industry e... (262 words)
- [Chapter 8: Maven Assemblies | Maven: The Complete Reference](/content/maven-complete-reference/maven-assemblies/index.html): Delve into Maven Assemblies in Chapter 8 of the Maven Definitive Guide by Sonatype. A detailed overview of assembling multi-module projects. (14,060 words)
- [See Why Happy Developers Produce More Secure Software](/content/blog/happy-developers-produce-more-secure-software-better-business-outcomes.html): The 2020 DevSecOps Community Survey confirms correlations between DevSecOps culture and practices, and their influence on motivation and job satisfaction. (621 words)
- [Mastering SBOMs: Demonstrations](/content/blog/mastering-sboms-demonstrations/index.html): Sonatype's webinar highlighted real-world applications of software bills of materials (SBOMs) and provided uses cases for SBOM optimization (451 words)
- [Request a Sonatype Platform & Nexus Repository Demo](/content/request-a-personalized-demo/index.html): Book a personalized Sonatype demo to see our platform in action. Speak with an expert about how to improve open source management and security. (292 words)
- [Optimizing Maven Projects: Using the Dependency Plugin](/content/blog/2009/10/maven-tips-and-tricks-optimizing-with-the-maven-dependency-plugin.html): Optimize your Maven projects by identifying and managing direct and transitive dependencies using the Maven Dependency Plugin for better build performance. (1,357 words)
- [npm Ransomware Attack: Malicious npm Package | Sonatype](/content/blog/fake-npm-roblox-api-package-installs-ransomware-spooky-surprise.html): Sonatype uncovered the first known npm ransomware attack: a malicious npm package typosquatting a popular Roblox API to deliver ransomware in a typosquatting attack. (1,794 words)
- [Replacing the Release Process Using the Staging Suite](/content/blog/2014/05/the-nexus-2-minute-challenge-replace-the-release-process-using-the-nexus-staging-suite.html): Replace the release process using the Nexus Staging Suite - The Nexus 2 Minute Challenge (90 words)
- [Access OSS Project Download Stats on Maven Central | Sonatype](/content/blog/2010/12/now-available-central-download-statistics-for-oss-projects.html): Learn how to access detailed download statistics for your OSS projects on Maven Central with Sonatype Nexus Repository. Enhance your performance analysis. (808 words)
- [370+ Companies Report Open Source Breaches in Past 12 Months](/content/press-releases/open-source-breaches/index.html): Survey Finds 75 Percent Put Consumers at Risk with Poor Software Component Control (599 words)
- [Stop Malicious Packages Before They Hit Your Build](/content/resources/webinars/stop-malicious-packages-webinar/index.html): Learn to identify malicious packages and mitigate risk in development environments. Join our webinar to enhance your security knowledge and protect your builds., Modern malicious packages no longer rely on simple typos or obvious fake names. Today’s attackers are publishing packages that look like normal parts of... (260 words)
- [Open Source Components, a Fine Vintage or Sour Milk?](/content/blog/2014/07/open-source-components-fine-vintage/index.html): The U.S. recently overtook France as the world’s largest wine market. And here at Sonatype, we can proudly say we’ve contributed to this achievement. (520 words)
- [Devs Flood npm with 15K Packages to Receive Tea tokens](/content/blog/devs-flood-npm-with-10000-packages-to-reward-themselves-with-tea-tokens.html): Over 15,000 npm packages have flooded the npm registry in a trend where devs use the 'tea' protocol to reward themselves by inflating their reputation. (1,199 words)
- [Future of Open Source: Navigate the Cyber Resilience Act](/content/blog/cyber-resilience-act-the-future-of-software-in-the-european-union.html): Discover what the EU Cyber Resilience Act entails and what the consequences might be for open source and software development overall (1,328 words)
- [Sonatype Lifecycle + Microsoft Visual Studio Integration](/content/blog/microsoft-visual-studio-integration-with-nexus-lifecycle.html): Discover how the Sonatype plugin enhances Microsoft Visual Studio by providing developers with precise component intelligence directly within the IDE. (150 words)
- [DevOps Assurance With OWASP SAMM](/content/blog/devops-assurance-with-owasp-samm/index.html): SAMM v2 follows three levels of maturity. Maturity levels 1 through 3 are similar to what, in other models, are known as crawling, walking, and running. (933 words)
- [Malicious npm Packages Conceal macOS Malware in Travis CI](/content/blog/npm-packages-use-travis-yml-files-to-conceal-macos-malware-disguised-as-safari-updates.html): Three npm packages identified by Sonatype this week conceal malware in travis.yml, a CI/CD build configuration file used by Travis CI. (886 words)
- [How To Merge Sub-Items From Parent to Child POM in a Maven](/content/blog/2007/06/how-to-merge-sub-items-from-parent-pom-to-child-pom-in-a-maven-plugin-configuration-2.html): Learn how to correctly merge sub-items from parent to child POM in Maven plugin configurations using the combine.children attribute. Explore example code. (353 words)
- [Essential DevSecOps Tools for Secure Software Development](/content/blog/devsecops-tools-a-beginners-guide/index.html): Explore the DevSecOps toolchain. Learn about DevSecOps security tools, including software component analysis and application security testing tools. (1,152 words)
- [Enhancing Security with SBOMs and Continuous Monitoring](/content/blog/a-proactive-defense-utilize-sboms-and-continuous-monitoring.html): Discover how utilizing SBOMs and continuous monitoring can transform your approach to software supply chain security and maintaining compliance. (658 words)
- [npm Package Everything Sparks Controversy | Sonatype](/content/blog/everything-matters-why-the-npm-package-sparked-controversy.html): An npm package sparked controversy after its publication. Understand what it does and how you can safeguard yourself against such packages. (798 words)
- [Building Trusted AI Development With Kiro and Sonatype Guide](/content/blog/building-trusted-ai-development-with-kiro-and-sonatype-guide.html): Build trusted AI-powered software faster with Kiro and Sonatype Guide, combining real-time open source intelligence with secure, policy-aware development. (851 words)
- [The Unchanging Laws of Software in the Age of AI | Sonatype](/content/blog/the-laws-of-software-havent-changed-were-just-choosing-to-forget-them.html): Artificial intelligence (AI) speeds up software creation, but old engineering rules still apply. Without governance, fast builds risk big failures. (1,210 words)
- [Software Provider Gains Scalability Security | Sonatype](/content/customer-stories/software-provider-leader-discovers-accuracy/index.html): Read how Sonatype Lifecycle helped a CRM leader identify and fix $1.5 billion in risk over the last three years. (251 words)
- [Security Should Stop Being a Drag](/content/blog/security-should-stop-being-a-drag/index.html): An application should withstand automated, manual, or user testing. Security vulnerabilities, although extremely important, are in reality non-functional. (679 words)
- [3 Reason Why I'm Excited for Red Hat Summit](/content/blog/3-reason-why-im-excited-for-red-hat-summit/index.html): Red Hat Summit, MTTR, Software Supply Chain, Nexus, Nexus Lifecycle, cloud, containers, security (700 words)
- [Two AppSec Questions Always Asked](/content/blog/2014/07/two-appsec-questions/index.html): While Repository Health Checks are valuable, we just released something even better: the CLM 1.11 Dashboard. (1,001 words)
- [Why External Repos Are Being Phased Out of Maven Central](/content/blog/2010/03/why-external-repos-are-being-phased-out-of-central/index.html): Discover why external repositories are being phased out of Central and the efforts to improve artifact management for a better user experience. (720 words)
- [Sonatype Embraces CycloneDX Standard for Integrating SBOMs](/content/press-releases/sonatype-embraces-cyclonedx-standard-for-sboms/index.html): Sonatype champions the CycloneDX SBOM standard with a new API for seamless integration and sharing of SBOMs. (735 words)
- [Often you people are too smart to train | Sonatype blog](/content/blog/2012/08/often-you-people-are-too-smart-to-train/index.html): Adapting training for advanced learners, this blog explores interactive discussions on Maven best practices. (1,099 words)
- [Sonatype Goes to CloudBees Days](/content/blog/sonatype-goes-to-cloudbees-days/index.html): We're always excited to spend time with our friends at CloudBees - and participating in their CloudBees Days tour is no different. (374 words)
- [Mature DevSecOps Practices Lead to Happier Developers](/content/press-releases/mature-devsecops-practices-lead-to-secure-code/index.html): Mature DevOps teams demonstrate 1.6x higher job satisfaction rates compared to peers and 1.9x more likely to invest in Software Composition Analysis. (1,003 words)
- [Nexus: Don't Dive in Until You Know How to Swim](/content/blog/2012/02/nexus-dont-dive-in-until-you-know-how-to-swim/index.html): Avoid costly mistakes by taking time to learn new development tools before diving into implementation. Understand the fundamentals. (922 words)
- [Java and Maven Package Support | Sonatype Support](/content/products/language-support/java-and-maven/index.html): Manage your Java projects securely and efficiently with full support for Maven and Java. Explore supported functionality across the Sonatype platform. (511 words)
- [Developers Need The Sonatype Platform and Pot of Coffee](/content/blog/developers-need-two-things-the-nexus-platform-and-a-full-pot-of-coffee.html): Waiting too long to invest in security is too common. Sonatype's Nexus platform helps orgs protect themselves from known and unknown vulnerabilities.
 (1,001 words)
- [What's in Your jQuery App? Not the Fishy 'jquery-lh' We Hope](/content/blog/whats-in-your-jquery-not-the-fishy-jquery-lh-we-hope.html): The mysterious 'jquery-lh' npm package installs real jQuery code while doing something fishy behind the scenes. (643 words)
- [Software Composition Analysis: Precision Definitely Matters](/content/blog/software-composition-analysis-precision-definitely-matters-just-ask-our-competitors.html): Just two years ago, SCA was more about helping traditional security professionals identify suspects across a broad spectrum of open source ecosystems. (571 words)
- [OSS Projects Affected by HTTP/2 'Rapid Reset' Vulnerability](/content/blog/10-open-source-projects-hit-by-http/2-rapid-reset-zero-day/index.html): Discover ten open source packages affected by the HTTP/2 Rapid Reset vulnerability, disclosed by Cloudflare this week (538 words)
- [IndonesianFoods Malware: Open Source Worm | Sonatype](/content/blog/unprecedented-automation-indonesianfoods-pits-open-source-against-itself.html): Protect against the IndonesianFoods malware. Learn how this open source worm weaponizes automation and how to defend your software supply chain from attack. (891 words)
- [DevSecOps: Security at the Speed of DevOps](/content/blog/devsecops-security-at-the-speed-of-devops/index.html): Larry Maccherone of Comcast shares his DevSecOps Manifesto and strategies he's used to foster the cultural change necessary to implement DevSecOps. 

 (588 words)
- [Next Generation Maven Development Stack Unveiled at JFokus](/content/blog/2010/01/next-generation-maven-development-stack/index.html): Explore the latest advancements in Maven development, infrastructure, and tools discussed at JFokus. Learn about new technologies in the Maven ecosystem. (465 words)
- [Atlassian Bamboo Integration with Sonatype Lifecycle](/content/products/integrations/atlassian-bamboo/index.html): Explore Sonatype's Atlassian Bamboo Plugin and learn how you can automate open source policy evaluations to enhance CI pipeline efficiency and security. (436 words)
- [How to Onboard Sonatype Lifecycle via Source Control](/content/blog/onboarding-sonatype-lifecycle-through-scm/index.html): We're simplifying the Sonatype Lifecycle onboarding process, making it easy to onboard apps from a source control repository such as GitHub and GitLab. (466 words)
- [A DevSecOps Journey at a Dutch Bank](/content/blog/a-devsecops-journey-at-a-dutch-bank/index.html): This is the story of ABN AMRO’s DevSecOps journey - as told by Stefan Simenon and Widbe de Roos at the 2018 Nexus User Conference.  (686 words)
- [Latest Updates to the DevSecOps Reference Architecture](/content/blog/2020-devsecops-reference-architecture/index.html): Based on community feedback the 2020 DevSecOps Reference Architecture now includes continuous education, mobile delivery, and rearrangement of controls.  (495 words)
- [m2eclipse 0.9.8 Dev Build Available | Sonatype Blog](/content/blog/2009/04/m2eclipse-098-dev-build-available/index.html): New m2eclipse 0.9.8 dev build released with key updates, including proxy settings, deadlock fixes, and pom editor features. Learn more in our blog. (98 words)
- [What Developers Need to Know About WhatsApp Security Issues](/content/blog/whatsapp-double-free-double-trouble/index.html): Sonatype issues an Advisory Deviation Notice for CVE-2019-11932, a vulnerability that exploits processor memory and recently affected WhatsApp. (703 words)
- [Cybersecurity Awareness Month: Developers Are Our Guardians](/content/blog/october-is-cyber-security-awareness-month-open-source-developers-are-some-of-our-best-guardians.html): As open source software grows, developers play a crucial role ensuring that cyber security threats are prevented, mitigated, and repaired.  (616 words)
- [New Developer Enhancements in Sonatype Repository Firewall](/content/blog/new-nexus-firewall-release-with-developer-first-enhancements.html): With increasing attacks targeting developers, Sonatype’s new Nexus Firewall features improve application security and developer productivity.
 (655 words)
- [Managing OSS Legal Compliance With Advanced Legal Pack](/content/blog/slaying-the-dragon-of-oss-legal-compliance-with-the-advanced-legal-pack.html): Open source can come with a plethora of legal obligations. Manual reviews can take hundreds of hours for 1 app. Let The Advanced Legal Packs help. (643 words)
- [Maven: The Complete Reference & Definitive Guide | Sonatype](/content/maven-complete-reference/index.html): Read Maven: The Complete Reference. This Apache Maven guide is the definitive guide for developers looking to master Maven build tools and best practices. (85 words)
- [Component-Capable Release Management: The Key to Successful DevOps](/content/blog/2013/11/component-capable-release-management-is-key-to-devops.html): Explore how component-capable release management and automation drive DevOps success, enhance business agility, and improve security. (740 words)
- [SBOM in DevSecOps: Best Practices | Sonatype](/content/resources/guides/best-practices-for-integrating-sboms-into-devsecops.html): Learn the best practices for integrating SBOM in DevSecOps. Enhance security and compliance in your CI/CD pipelines to mitigate risk and improve deployment. (617 words)
- [NIS2 Compliance Guide | Optimize Your Software Supply Chain](/content/resources/guides/nis2-checklist/index.html): Learn how to protect software components and be compliant with Article 21 and 23 requirements of the NIS2 Directive. (753 words)
- [That's billion with a B: Is Java having an Outlook moment?](/content/blog/2012/09/thats-billion-with-a-b-is-java-having-an-outlook-moment.html): Java's ongoing security issues risk its dominance. Learn about the latest vulnerabilities and the call for stronger software security practices. (850 words)
- [SSO/SAML Authentication and Conan Support in Sonatype Nexus](/content/blog/saml/sso-authentication-and-conan-in-nexus-repository-3-22.html): Now users can authenticate with Security Assertion Markup Language (SAML) identity providers, enabling single sign-on (SSO) with Nexus Repository Pro. (688 words)
- [Best Practices for CISOs & AppSec Leaders | Sonatype Webinar](/content/resources/webinars/best-practices-for-cisos/index.html): Discover how CISOs and AppSec leaders can enhance application security by focusing on impactful practices, risk reduction, and collaboration across the SDLC., At a time of economic headwinds, the risks don’t go away, even if some of your budget may. This is why it is more critical than ever to focus on mitigat... (283 words)
- [Clean Up Old Docker Images From Sonatype Nexus Repository](/content/blog/cleanup-old-docker-images-from-sonatype-nexus-repository.html): I built a Sonatype Nexus CLI which uses Docker Registry API to purge Docker images and keep the last X images and delete all other. Here's how I did it. (456 words)
- [Sonatype Partners with ADDO to Educate More Than 1 Million People](/content/press-releases/2018-all-day-devops-to-reach-1-million-people/index.html): Sonatype, as a core sponsor and partner of All Day DevOps, is excited to help educate 1 million people with an expanded 2018 program.  (679 words)
- [A Lesson in Why Security by Press Release Is Detrimental](/content/blog/a-lesson-in-why-security-by-press-release-is-detrimental.html): Last week news broke about a 3-year old jQuery vulnerability that was just discovered, and had just been patched - sending many into a frenzy. (825 words)
- [Modern Vulnerability Management | Sonatype Fireside Chat](/content/resources/webinars/modern-vulnerability-management/index.html): Explore effective strategies for modern vulnerability management, addressing complexities of open source dependencies and enhancing security practices., Modern vulnerability management is breaking down, not because teams aren't scanning, but because the system itself no longer supports reliable remediati... (310 words)
- [Red Hat Summit is a quality choice | Sonatype Blog](/content/blog/red-hat-summit-is-like-a-beautiful-open-source-component-heres-why.html): Join us at Red Hat Summit to explore cutting-edge technology in cloud computing, DevOps, and more. Learn more in this blog. (353 words)
- [Part 2 - [ ________ ] Is the Best Policy](/content/blog/2014/08/defining-policy-that-works/index.html): In Part 1, ‘[ ________ ] is the Best Policy, we looked at some of the common aspects of an open source policy and discussed how our recent survey discovered. (843 words)
- [Sonatype Nexus Reference Platform: Docker Stack & Kubernetes](/content/blog/nexus-reference-platform-docker-stack-and-kubernetes.html): Learn how Docker Stack and Kubernetes simplify managing demo environments and streamline the transition from development to operations. (605 words)
- [Navigating the Evolving SWFT Initiative | Sonatype Webinar](/content/resources/webinars/navigating-the-swft-initiative/index.html): Explore the SWFT initiative in this webinar and learn how to align your software development practices with evolving Department of Defense requirements.,  (84 words)
- [Open Source Continues to Fuel Digital Transformation | Sonatype](/content/press-releases/sonatypes-2021-software-supply-chain-report/index.html): Sonatype’s 2021 State of the Software Supply Chain Report  reveals continued strong growth in open source supply and demand dynamics.  (827 words)
- [DevSecOps and Chaos Engineering: Knowing the Unknown](/content/blog/devsecops-chaos-engineering/index.html): Aaron Rinehart (@aaronrinehart) dives into chaos engineering: what it is, why you need it, and how you can implement it in your organization. (519 words)
- [Understanding Repository Managers: Key Features and Benefits](/content/blog/2009/04/what-is-a-repository-manager/index.html): Discover the significance of repository managers in software development and how tools like Nexus Repository enhance software artifact management (1,301 words)
- [Exploring Application Security Risk in 2019 | Sonatype](/content/blog/cyber-risk-in-2019-its-about-the-supply-chain-stupid.html): Cyber criminals are intentionally planting vulnerabilities directly into the global supply of open source components. (870 words)
- [Creating Mission Ready SBOMs | Sonatype Webinar](/content/resources/webinars/mission-ready-sboms/index.html): Discover how to leverage Software Bills of Materials (SBOMs) for enhanced software assurance and compliance in our on-demand webinar. Watch now for insights., The federal government is continuously advancing software security standards, positioning the Software Bill of Materials (SBOM) as a critical element of... (275 words)
- [Nexus Repository Manager 3.8 Released with Yum Support](/content/blog/nexus-repository-manager-3-8-is-now-available.html): Nexus Repository Manager 3.8 is available with support for Yum hosted repositories. (316 words)
- [New Tool for Effortless Artifact Search in Maven Central](/content/blog/2011/02/new-service-to-search-for-artifacts-in-maven-central.html): Discover Sonatype's advanced search service for Maven Central artifacts, offering the most accurate information and enhanced search functionalities. (386 words)
- [Exploring How Sonatype Nexus Repository 1.3 Works](/content/blog/2009/03/a-tour-of-the-nexus-repository-internals/index.html): Explore the revamped internals of Sonatype Nexus 1.3, featuring unified repository handling, extensible content classes, and dynamic file capabilities. (1,313 words)
- [Publishing artifacts with Nexus Repository and Apache Ivy](/content/blog/2012/06/how-to-consume-and-publish-artifacts-with-nexus-and-apache-ivy.html): Learn how to configure Apache Ivy to consume and publish artifacts with Sonatype Nexus Repository. Get step-by-step guidance in this blog. (218 words)
- [Preparing for CRA Enforcements | Sonatype Webinar](/content/resources/webinars/cra-enforcements/index.html): Prepare for the EU Cyber Resilience Act with insights from industry experts in this webinar, focusing on practical steps for teams to ensure compliance., The EU Cyber Resilience Act (CRA) introduces new, enforceable requirements for organizations that develop, distribute, or rely on software, raising expe... (247 words)
- [Sonatype Adds Infrastructure as Code Security | Sonatype](/content/press-releases/sonatype-adds-infrastructure-as-code-security-and-compliance.html): Sonatype's new Infrastructure as Code Pack makes it easy for devs to configure infrastructure as code without worrying about common security mistakes. (537 words)
- [Chapter 1: Cooking with Maven and OSGi | Sonatype Maven Cookbook](/content/resources/guides/maven-cookbook/cooking-with-maven-and-osgi/index.html): Dive into dependency management, plugins, and more in this essential chapter of the Maven Cookbook. (8,907 words)
- [Precision Malware: How AI Transformed Open-Source Threats](/content/resources/webinars/how-ai-transformed-opensource-threats/index.html): Discover how AI has transformed open-source threats in our upcoming webinar. Register now. (163 words)
- [CIO.com: Helping Developers Reduce Open Source Risk](/content/blog/2014/11/cio-open-source-risk/index.html): Discover how automated open source risk analysis can enhance application security, as discussed in the latest CIO.com article by Lucian Constantin. (174 words)
- [Key Insights from the Gartner Security and Risk Management Summit](/content/blog/2013/06/12-takeaways-from-gartner-security-risk-management-summit.html): Key insights from the Gartner Security and Risk Management Summit 2013, exploring software supply chain risks, IT-business alignment, and policy. (1,077 words)
- [Best Practices for Securing Open Source Code Quality](/content/blog/open-source-basic-practices-for-higher-quality-code.html): A look at some basic practices for higher quality code to help fundamentally strengthen your project. (1,520 words)
- [CVE-2024-3094: Backdoor Attack Against xz and liblzma](/content/blog/cve-2024-3094-the-targeted-backdoor-supply-chain-attack-against-xz-and-liblzma.html): Learn about a targeted backdoor supply chain attack against the popular XZ compression utility seen in many Linux distributions such as fedora and debian. (2,644 words)
- [How to Disable Redeployment in Sonatype Nexus Repository](/content/blog/2009/11/nexus-tips-disable-redeployment-in-nexus/index.html): Learn how to disable redeployment of release artifacts in Sonatype Nexus Repository to ensure consistent builds and adopt best practices in repository management. (409 words)
- [Sonatype Advanced Legal Pack Product Tour](/content/resources/product-tours/advanced-legal-pack/index.html): Discover how Sonatype Advanced Legal Pack streamlines legal workflows, reduces review time, and ensures license compliance in this product tour. (28 words)
- [Nigel's Wake-up Call: Scaling Open Source Governance](/content/blog/2014/11/wake-up-call/index.html): Learn how a major media and entertainment company automated governance to reduce vulnerabilities and ensure compliance without slowing development. (636 words)
- [Update on CVE-2019-7238: Ensuring Your Nexus Repository is Secure](/content/blog/cve-2019-7238-in-nexus-repository-manager-3-0/index.html): An article was brought to our attention that suggests a new attack tactic is targeting an old vulnerability in NXRM, CVE-2019-7238. (202 words)
- [Software Supply Chains: Reject, Replace, and Respond](/content/blog/the-three-rs-of-software-supply-chains-reject-replace-and-respond.html): OWASP A9 has been around for over 6 years now. These three R's helps enterprise security manage their software supply chains: Reject, Replace, Respond. (1,843 words)
- [About the 2022 Software Supply Chain Report](/content/resources/state-of-the-software-supply-chain-2022/about-the-sscr-report/index.html): The 8th Annual State of the Software Supply Chain Report was made possible thanks to a tremendous effort put forth by many team members at Sonatype. (411 words)
- [Wicked Good Development Episode 32: Java Queens at Devnexus 2023](/content/blog/wicked-good-development-java-queens-at-devnexus-2023.html): Kadi Grigg and Theresa Mammarella sit down for a conversation with Erin Schnabel, Emily Jiang, Mary Gygleski, and Holly Cummins at Devnexus 2023., Prepare for an insightful discussion with Java Champions Erin Schnable, Emily Jiang, Mary Gygleski, and Holly Cummins at Devnexus 2023. 
They sit down with Sonatype’s Kadi Grigg and Theresa Mammarella for an unforgettable conversation about making an impact in the tech community. They cover topics like:

 Their unique journeys in tech

 Embracing the mindset of a lifelong learner

 The power of goal setting for personal growth 

 The essential qualities of a great leader

  Why conference talks, like this one, fuel their passion and drive


Don’t miss this chance to learn from some of the brightest minds in the industry. 🔥
 (7,965 words)
- [Wicked Good Development: Exploring Open Source Compliance](/content/blog/russ-eling-talks-founding-oss-consultants-and-open-source-compliance.html): Russ Eling, Founder & CEO of OSS Consultants, joins Kadi Grigg and A.J. Brown to discuss how his tenure at General Motors led to founding OSS Consultants., In the latest episode, Russ Eling–Founder and CEO of OSS Consultants–sits down with Kadi Grigg and co-host A.J. Brown to discuss his journey with open source. Tune in to hear valuable lessons learned during his tenure as an Open Source Compliance Officer at General Motors and how that eventually led to the creation of OSS Consultants.
Check out the resources from today's episode here. (5,604 words)
- [SBOM Manager: Everything You Need to Know | Sonatype Video](/content/resources/videos/sbom-everything-you-need-to-know/index.html): Gain comprehensive insights into SBOM management with VP of Product Innovation at Sonatype, Stephen Magill in this short video. (31 words)
- [Try Sonatype Nexus Repository Manager Free | Sonatype](/content/products/sonatype-nexus-pro/trial/index.html): See why Sonatype Nexus Repository is the world’s most popular artifact repository manager with universal component format support. Try free today. (281 words)
- [OpenShift CI/CD Pipelines with Jenkins | Sonatype](/content/blog/ci/cd-with-openshift/index.html): Learn how to build OpenShift CI/CD pipelines with Jenkins, streamline your workflows, and ship software faster with less friction. Read our blog here! (518 words)
- [What Golden Dome Requires from Federal DevSecOps Teams | Sonatype](/content/blog/what-golden-dome-requires-from-federal-devsecops-teams.html): Learn how federal DevSecOps teams can prevent risky components, govern workflows, and prove compliance across software supply chains for the Golden Dome. (1,573 words)
- [Optimal Maven Plugin Configuration | Sonatype Blog](/content/blog/2008/05/optimal-maven-plugin-configuration/index.html): Optimize your Maven plugin configuration by understanding the distinctions between project.build.plugins and project.build.pluginManagement.plugins. (415 words)
- [Releasing Software with Maven | Sonatype Maven Cookbook](/content/resources/guides/maven-cookbook/releasing-software-with-maven/index.html): Ready to release? Learn the ins and outs of software releases with Apache Maven, making deployment a breeze in this chapter. (348 words)
- [Sonatype Partners With ADDO on Largest DevOps Conference](/content/blog/addo-2019/index.html): In conjunction with All Day DevOps, Sonatype helps to educate more than 36,000 IT professionals. Join us on Nov. 6.  (583 words)
- [SBOM 101: Evolving Regulations in Software Development](/content/resources/videos/regulation-in-software-development/index.html): Explore regulations in software software development in this brief video overview from Sonatype CTO Brian Fox.  (33 words)
- [DevOps Enhances Cybersecurity in Federal IT Systems](/content/blog/government-spotlight-devops-accelerates-cyber-security.html): Discover how DevOps principles can improve cybersecurity in federal agencies with resilient code, continuous feedback, and supply chain best practices. (1,052 words)
- [Ready to Take the Two-Minute Nexus Challenge? | Sonatype](/content/blog/2014/03/nexus-live-challenge/index.html): For those that don't know me, I am the new Nexus community advocate and now moderator of Nexus Live. (176 words)
- [hubfs/state_of_cloud_security_2021-pdf.html](/content/hubfs/state_of_cloud_security_2021-pdf.html) (1,212 words)
- [Technology Preview of Sonatype Nexus Repository 3.0](/content/blog/2014/09/nexus-3-0-technology-preview/index.html): The Nexus development team at Sonatype is pleased to announce the release of the first milestone build (M1) of Nexus 3. (305 words)
- [Boost Open Source Security with Sonatype Lifecycle](/content/blog/sonatype-nexus-lifecycle-boosts-open-source-security-and-dependency-management.html): Nexus Lifecycle is designed to monitor for problems at every stage of the software development life cycle (SDLC) and automatically address them.  (1,408 words)
- [Sonatype Air-Gapped Environment (SAGE) | Deployment Overview](/content/sonatype-air-gapped-environment-overview/index.html): Explore Sonatype's Air-Gapped Environment (SAGE), designed for secure, compliance-driven development in defense and critical infrastructure sectors. (606 words)
- [Crypto npm Malware: Hijacked npm Packages | Sonatype](/content/blog/multiple-crypto-packages-hijacked-turned-into-info-stealers.html): Learn how crypto npm malware targets developers through hijacked packages that steal environment variables via dependency attacks on open source ecosystems. (701 words)
- [Sharing Resources Across Maven Projects: Step-by-Step Guide](/content/blog/2008/04/how-to-share-resources-across-projects-in-maven/index.html): Learn how to efficiently share resources across Maven projects using the assembly and dependency plugins for better project management. (1,233 words)
- [Sonatype Lifecycle and Webstorm Integration](/content/products/integrations/webstorm/index.html): Secure your workflows in WebStorm with real-time insights into component risks, license issues, and policy violations using Sonatype Lifecycle integration. (346 words)
- [Understanding Maven Dependency Resolution | Sonatype](/content/blog/2009/12/maven-dependency-resolution-a-repository-perspective.html): Learn how Maven resolves dependencies and manages repositories with path calculation and conflict resolution, ensuring a more secure software supply chain. (923 words)
- [DevSecOps and GDPR: Why Open Source Risk Management is Important](/content/blog/auditing-the-use-of-open-source-software/index.html): Managing open source risk is paramount in the face of GDPR and the need for rapid innovation. Learn how to balance compliance and speed during development. (462 words)
- [A Time for Cyber Supply Chain Management in Congress: Part 2](/content/blog/2014/12/cyber-supply-chain-management-part2/index.html): [Part 2] Code, Cars, and Congress: A Time for Cyber Supply Chain Management (1,143 words)
- [Bank Cuts Vulnerability Resolution Time | Sonatype Success Story](/content/customer-stories/bank-cuts-mttr/index.html): Global bank transformed its vulnerability management, reducing resolution time from weeks to hours with the Sonatype platform. Dive into the results. (807 words)
- [CVE-2020-2100: Jenkins UDP Amplification Reflection Attack](/content/blog/cve-2020-2100-jenkins-udp-amplification-reflection-attack-distributed-denial-of-service.html): CVE-2020-2100 takes advantage of the fact that both UDP multicast/broadcast and DNS multicast traffic is enabled on Jenkins. Here's what to do. (1,276 words)
- [DLT & Sonatype Partner to Accelerate DevOps in Public Sector](/content/press-releases/dlt-and-sonatype-accelerate-secure-software-development-in-public-sector.html): DLT Solutions partners with Sonatype for secure, risk-mitigated public sector software development. Read more. (553 words)
- [The Rise of Dependency Scanners | Sonatype](/content/blog/the-rise-of-dependency-scanners/index.html): Software composition analysis has seen a spike in growth from developers on Github to help with their devsecops journey. (551 words)
- [Chrome Extension for Sonatype Platform | Sonatype Integrations](/content/products/integrations/chrome/index.html): Enhance your development process with the Sonatype Chrome extension, which helps teams shift left by identifying open source risks in real-time. (414 words)
- [An Interview with Brian Fox: Maven 3, Central, and Nexus](/content/blog/2012/03/ken-rimple-interviews-brian-fox-maven-3-running-central-and-nexus.html): Ken Rimple interviews Brian Fox on Maven's legacy, Central repository management, and new Nexus 2.0 features in an insightful discussion. (430 words)
- [AI/ML Insights That Safeguard Developers from Malware Threats](/content/blog/protecting-software-developers-with-ai-ml/index.html): Developer-targeted malware is a complex and difficult problem. A look at what tools and information are needed to reduce risk in your development pipeline. (1,066 words)
- [The 2015 State of the Software Supply Chain Report](/content/blog/2015/06/the-2015-state-of-the-software-supply-chain-report/index.html): In April of this year, I embarked on a six-week journey diving deep into an analysis of the world’s software supply chains. (523 words)
- [Cloud Security Concerns in 2021](/content/blog/cloud-security-concerns-in-2021/index.html): Cloud environments are growing in complexity, and challenging those responsible for keeping environments secure. (490 words)
- [Is Your Repository Ready for What's Next?](/content/blog/is-your-repository-ready-for-whats-next/index.html): Learn how modern artifact repositories reduce risk, prevent vulnerable dependencies, and support faster, more reliable software delivery. (1,188 words)
- [Understanding Nexus Tasks for Optimal Repository Management](/content/blog/2009/09/nexus-scheduled-tasks/index.html): Learn about the various scheduled tasks in Nexus, their configurations, and best practices for optimizing your repository management. (1,775 words)
- [DevOps Tools & Solutions for Secure Pipelines | Sonatype](/content/solutions/devops/index.html): Integrate security into your DevOps workflow. Sonatype's DevSecOps solutions help you accelerate pipelines while minimizing risk and ensuring compliance. (982 words)
- [Nexus Repository Now Supports APT Repositories | Sonatype](/content/blog/nexus-repo-supports-apt/index.html): Nexus Repository Manager 3.17 supports Advanced Package Tool repositories. Use APT to search, install, manage packages on Debian, Ubuntu, and Linux. (472 words)
- [Explore New Cloud-Native CI/CD Projects | Sonatype](/content/blog/new-cloud-native-ci/cd-projects-openshift-and-tekton/index.html): Siamak Sadeghianfar of RedHat explains how the open source projects Tekton and OpenShift support cloud-native CI/CD projects. (606 words)
- [Releasing 8th State of the Software Supply Chain Report](/content/press-releases/2022-software-supply-chain-report/index.html): Sonatype’s 8th Annual State of the Software Supply Chain Report finds that 96% of known-vulnerable open source downloads are avoidable. 
 (834 words)
- [Use Staging Repositories for Quality Deployment in Nexus](/content/blog/2009/06/using-staging-repositories-for-deployment-in-nexus/index.html): Learn how to use staging repositories in Sonatype Nexus Repository for secure and controlled releases, ensuring quality assurance before production deployment. (336 words)
- [Open Source Growth: Benefits and Security Challenges](/content/blog/the-scale-of-open-source-growth-challenges-and-key-insights.html): Explore the growth and challenges of open source software, including statistics on ecosystem expansion, the rise of malicious packages, and the role of AI. (743 words)
- [Equifax Selects Sonatype to Support Open Source Governance](/content/press-releases/sonatype-selected-by-equifax-to-support-open-source-governance-security.html): Equifax Inc. has selected its Nexus platform to intelligently manage and monitor the use of open source libraries across its application portfolio. (363 words)
- [Software Composition Analysis (SCA) Best Practices | Webinar](/content/resources/webinars/2025-sca-best-practices/index.html): Join Sonatype experts to explore software composition analysis (SCA) best practices to tackle software supply chain challenges and keep applications secure., Are your SCA practices keeping up with today’s threats and tomorrow’s regulations?

The world of open source is evolving fast—and so are the risks. Sona... (139 words)
- [Documenting Nexus REST API with Enunciate: A Developer's Guide](/content/blog/2010/02/documenting-the-nexus-rest-api-with-enunciate/index.html): Documenting Nexus REST API with Enunciate streamlines development and enhances the user experience by providing documentation and modernizing infrastructure. (1,492 words)
- [Dirty Rivers Flow Downstream, Leading to Dirty Reservoirs](/content/blog/dirty-rivers-flow-downstream-leading-to-dirty-reservoirs.html): A reservoir is created by rivers and streams that flow into it. What if one of those rivers is polluted? It pollutes the whole thing. (1,135 words)
- [Supercharge AI DevSecOps by Fixing Your Flow Problems First](/content/resources/whitepapers/supercharge-ai-devsecops/index.html): Discover how to overcome workflow bottlenecks in AI DevSecOps to enhance software delivery speed and reliability. Download the Gartner research report for actionable insights. (175 words)
- [Sonatype Celebrates World Open Source Day 2023](/content/blog/sonatype-celebrates-world-open-source-day-2023/index.html): February 3rd is World Open Source Day and Sonatype is celebrating all the ways to engage with the software that powers our world.  (1,116 words)
- [hubfs/1-2023_new_site_assets/cheat-20sheets/sbom_faq-2024-pdf.html](/content/hubfs/1-2023_new_site_assets/cheat-20sheets/sbom_faq-2024-pdf.html) (1,033 words)
- [ZeroTrustOps: Securing at Scale](/content/blog/zerotrustops-securing-at-scale/index.html): With zero trust, you assume everything on the network is unsafe. You have to check trust explicitly. This stance improves security throughout the SDLC. (1,137 words)
- [Cross-Platform Backdoor Found in 'cors-parser' npm Package](/content/blog/cors-parser-npm-package-hides-cross-platform-backdoor-in-png-files.html): Discover how the 'cors-parser' npm package used steganography to hide cross-platform backdoor malware in disguised PNGs. Learn how to prevent the threat. (914 words)
- [Why Developers Are the Weakest Link in Supply Chain Attacks](/content/blog/why-developers-are-becoming-the-weakest-link-in-supply-chain-attacks.html): As cyber-attacks continue to grow, threat actors have shifted their focus from endpoints and end users to the software supply chain. (1,110 words)
- [Identify Open Source Vulnerabilities with Sonatype OSS Index](/content/blog/how-to-use-sonatype-oss-index-to-identify-security-vulnerabilities.html): Learn how to identify software security vulnerabilities in third-party libraries with Sonatype's free OSS Index. Find open source vulnerabilities faster. (1,732 words)
- [Software Supply Chain Management: A Shifting Industry](/content/resources/software-supply-chain-management-part-3-a-shifting-industry.html): Explore how evolving threats and regulations are reshaping software supply chain management in this comprehensive guide from the experts at Sonatype. (1,149 words)
- [Meet Ankita Lamba: Values Champion](/content/blog/meet-ankita-lamba-values-champion/index.html): Ankita Lamba was recently honored as a Sonatype Values Champion. Her interview is a fun dive into her involvement in the program and much more. (2,105 words)
- [2017 SSC Report Reveals DevOps Practices Reduce Risky OSS](/content/press-releases/sonatype-2017-state-of-the-software-supply-chain-report-reveals.html): Sonatype, the leader in software supply chain automation, today announced the release of its third annual State of the Software Supply Chain Report. (763 words)
- [Information Stealer Malware: Cybercrime Market | Sonatype](/content/blog/how-stolen-information-stealers-are-fueling-an-underground-market.html): Explore how information stealer malware uploaded to PyPI drives data exfiltration and fuels the underground cybercrime market. Read the blog here! (1,376 words)
- [John Deere Dependency Confusion Attempt Flagged by Sonatype](/content/blog/john-deere-dependency-confusion-attempt-flagged-by-sonatype.html): Sonatype identified 17 npm packages, at least 12 of which directly target John Deere's private npm dependencies via dependency confusion, a technique that. (544 words)
- [PhantomRaven: npm Malware Uses Remote Dynamic Dependencies](/content/blog/phantomraven-npm-malware/index.html): PhantomRaven malware on npm uses remote dynamic dependencies to evade detection, highlighting the need for deeper supply chain defense.  (938 words)
- [Sonatype Named Company of the Year by Maryland Tech Council](/content/press-releases/sonatype-named-technology-company-of-the-year-by-maryland-tech-council.html): Sonatype, the leader in automated open source governance •  Sonatype named technology company of the year by maryland tech council.  (292 words)
- [Software Dependency Cooldowns Are a Symptom, Not a Strategy](/content/blog/software-dependency-cooldowns-are-a-symptom-not-a-strategy.html): Software dependency cooldowns can reduce risk, but do not equal trust. Learn why release integrity and real-time intelligence matter more than release age. (1,084 words)
- [Transitioning Software Supply Chain Management to the Cloud](/content/blog/transitioning-your-software-supply-chain-management-sscm-to-the-cloud.html): Transitioning from self-hosted services to managed cloud can be difficult. A look at some of the considerations around SSCM migrations.
 (983 words)
- [CALMS Framework: The Key to Successful DevOps Transformation](/content/blog/principle-based-devops-frameworks-calms/index.html): Discover the CALMS Framework for DevOps transformation. Learn how Culture, Automation, Lean, Measurement, and Sharing will transform your DevOps practices. (793 words)
- [Understanding NIS2: The Scope, Requirements, and Impact](/content/blog/the-countdown-to-nis2-is-on-understanding-its-scope-and-requirements.html): Learn how the NIS2 Directive expands cybersecurity regulations across the European Union and how Sonatype helps you meet these new compliance challenges. (461 words)
- [Maven Training Insights: Checksums, SSH Keys, and Writing Plugins](/content/blog/2011/01/training-questions-answered-checksums-ssh-keys-writing-plugins.html): Get answers to common frequently asked Maven questions about checksums, SSH keys, and writing plugins, helping you maximize your Maven training experience. (430 words)
- [Debunking CVE-2022-31289: A Misunderstood Security Flaw](/content/blog/nexus-repo-issue-neither-bug-nor-vulnerability/index.html): A recent report of a Nexus Repository vulnerability is not a security concern and no software update is required. A look at issue and similar concerns. (778 words)
- [Open Source Attacks: OSS Threats on the Uptick | Sonatype](/content/blog/careful-out-there-open-source-attacks-continue-to-be-on-the-uptick.html): Open source attacks on software supply chains continue to rise. Discover the latest OSS threats and what organizations can do to strengthen their defenses. (1,021 words)
- [Kubernetes in 10 Seconds](/content/blog/kubernetes-in-10-seconds/index.html): Sonatype's DJ Schleen (@djschleen) explains Kubernetes in less than 10 seconds in this video. Ready? 10...9...8... (460 words)
- [How SLSA Enhances Software Supply Chain Security | Sonatype](/content/blog/how-can-slsa-help-secure-your-software-supply-chain.html): Learn how Supply-chain Levels for Software Artifacts (SLSA) can help secure your software supply chain and provide a safer software development environment (1,126 words)
- [Best Practices in Provisioning Sonatype Nexus Repository](/content/blog/the-cloud-dish/index.html): The Sonatype Integrations team was tasked with developing reference deployments of Nexus Repository Manager and Nexus IQ Server as part of our cloud. (783 words)
- [Publishing Artifacts to the Central Repository | Sonatype](/content/blog/2011/10/publishing-your-artifacts-to-the-central-repository.html): Learn how to publish your open source project’s artifacts to Maven Central via Sonatype’s OSSRH, with guidance on setup, staging, and validation. (666 words)
- [Enhancing Financial Software Security with Sonatype and AWS](/content/blog/enhancing-software-supply-chain-security-in-financial-services-with-sonatype-and-aws.html): Discover how Sonatype and AWS help financial institutions secure open source software, combat malware, and meet regulatory demands with modern tools. (1,378 words)
- [sonatype-2026-003200 | Security Details | Sonatype Guide](/content/guide/vulnerability/sonatype-2026-003200/index.html): Technical security analysis for sonatype-2026-003200. CVSS 9.3 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (102 words)
- [SBOM Manager New Features Accelerate Compliance and Security](/content/blog/sbom-manager-new-features-accelerate-compliance-and-security-at-scale.html): Discover new SBOM Manager features for compliance, security, and scale such as container scanning, license workflows, and expanded data catalog. (867 words)
- [Deterministic DevSecOps: Best Practices | Sonatype](/content/blog/devsecops-a-more-deterministic-approach/index.html): Explore deterministic DevSecOps best practices to balance security and agility. Learn to secure your software development lifecycle with predictable results. (723 words)
- [The False Sense of Security | Sonatype Webinar](/content/resources/webinars/false-sense-of-security/index.html): Explore emerging software supply chain risks and effective strategies to strengthen your security. Watch this webinar for insights from Sonatype experts., Many organizations assume that using a repository manager or perimeter security tools is enough to protect them from open source malware. The reality is... (319 words)
- [Sonatype Lifecycle Measures the Performance of Better DevOps](/content/press-releases/success-metrics/index.html): Software development teams automating open source component governance improve application quality by 63% (517 words)
- [The CVE Wake-Up Call | Sonatype Webinar](/content/resources/webinars/the-cve-reliance/index.html): Discover how reliance on CVEs as a single source of vulnerability intelligence can jeopardize your security. Learn how to enhance your software security., The implications of overreliance on the Common Vulnerabilities and Exposures (CVE) program became apparent as the MITRE Corporation disclosed recent fun... (236 words)
- [Build Better Component Practices: Crawl, Walk, Run](/content/blog/build-better-component-practices-crawl-walk-run.html): Whether you're just getting started or attempting to take the next step in improving your organization's open source processes, there are lessons you can. (879 words)
- [What Is Software Composition Analysis (SCA Security)](/content/resources/articles/what-is-software-composition-analysis/index.html): Understand how Software Composition Analysis (SCA) eliminates risk from open source software (OSS) and secures your projects. Read our guide to learn more! (3,509 words)
- ["WTF Is DevSecOps?"](/content/blog/wtf-is-devsecops-by-eliza-may-austin/index.html): DevSecOps is a great idea. But it means security engineers, DevSecOps teams, and developers working together. (767 words)
- [m2eclipse 0.9.5 Release: Exploring the POM Editor | Sonatype](/content/blog/2008/07/m2eclipse-095-released-pom-editor/index.html): Discover the new features in m2eclipse 0.9.5, including an enhanced POM editor, improved content assist, and easier navigation for Eclipse and Maven users. (302 words)
- [Building a Docker Registry with High Availability on AWS](/content/blog/highly-available-docker-registry-on-aws-with-nexus/index.html): How to build a highly available and resilient Docker Repository to store your Docker Images (150 words)
- [The Future of Dependency Management | Sonatype Webinar](/content/resources/webinars/future-of-dependency-management/index.html): Explore how AI-assisted development transforms dependency management, highlighting the need for autonomous security in fast-paced software delivery. Watch Now., The rapid adoption of AI coding assistants is revolutionizing software development, accelerating workflows, and compressing the development lifecycle. B... (342 words)
- [What is Open Source Malware? Protection Guide | Sonatype](/content/resources/articles/open-source-malware/index.html): What is open source malware? Explore open source malware examples and learn protection strategies to secure your software supply chain from malicious code. (1,232 words)
- [CVE-2024-6060 | Sonatype Security Advisory](/content/security-advisories/cve-2024-6060/index.html): Sonatype Research team disclosed CVE-2024-6060. Explore how Phloc Webscopes 7.0.0 allows local attackers to access sensitive data in log files. (60 words)
- [How to Optimize Modular Maven Projects with Nexus | Sonatype](/content/blog/2009/05/refactoring-a-multimodule-project-nexus-book-build/index.html): Refactor multimodule Maven projects to streamline builds and improve automation. Learn how to implement best practices for efficient content management. (1,315 words)
- [Sonatype's Role in Strengthening the Maven Community and Ecosystem](/content/blog/2010/01/sonatype-and-the-foundations-of-the-maven-and-nexus-communities.html): Discover how Sonatype has fostered social capital and technical cohesion to build a lasting foundation for the Maven community and its ecosystem. (1,840 words)
- [Deploy Secure Applications With DevOps, DevSecOps](/content/blog/deploysecureapplication/index.html): Developing a secure application is no different than delivering a high-quality application as long as security is addressed throughout the software development. (917 words)
- [CVE-2022-45868 | Sonatype Security Advisory](/content/security-advisories/cve-2022-45868/index.html): Sonatype Research Team disclosed a new advisory: CVE-2022-45868. H2 database versions expose plaintext admin passwords, allowing unauthorized access.  (886 words)
- [Securing the AI Era: Sonatype Safeguards Open Source Software Supply Chains](/content/blog/securing-the-ai-era-sonatype-safeguards-open-source-software-supply-chains.html): Open source drives modern software but with innovation comes risk. Learn how Sonatype secures the software supply chain with faster delivery. (1,683 words)
- [Sonatype Guide Overview | Video](/content/resources/videos/sonatype-guide-overview/index.html): Discover how Sonatype Guide enables secure AI-powered development with trusted open source intelligence, smart recommendations, and seamless integration. (277 words)
- [Sonatype Named Leader in Forrester Wave™ for SCA | Sonatype](/content/blog/sonatype-named-a-leader-in-the-forrester-wave-for-software-composition-analysis.html): The Sonatype platform named a Leader in the 2023 Forrester Wave for SCA. (646 words)
- [Congress Pushes for Cybersecurity with Software Bill of Materials](/content/blog/congress-calls-for-cybersecurity-doctor-doctor-cant-you-see.html): Congressman Walden sent a letter to the U.S. Department of Health and Human Services (HHS) requesting a software bill of materials (SBOM). (655 words)
- [Sonatype Research Reveals Patterns in DevSecOps Practices](/content/press-releases/it-professionals-reveal-patterns-of-elite-devsecops-practices.html): Sonatype's 6th DevSecOps Survey with 5,558 IT pros reveals elite DevSecOps traits amid rising cyber attacks. Find out more. (861 words)
- [Explore Why Sonatype Nexus Repository For Non-programmers](/content/blog/2010/04/why-sonatype-nexus-for-the-non-programmer/index.html): Discover how Sonatype Nexus Repository optimizes software development by managing artifacts and streamlining deployment in this high-level overview. (2,045 words)
- [What is DevSecOps? How to Integrate Security in DevOps Practices](/content/blog/definition-of-devsecops/index.html): DevSecOps protects the software supply chain, from initial open source component selection to building, staging, and releasing an application. What is it? (1,076 words)
- [DevSecOps for a Dollar or Less](/content/blog/devsecops-for-a-dollar-or-less/index.html): The DevSecOps Maturity Model (DSOMM) helps you analyze your organization's development pipeline to see where you need to improve.  (729 words)
- [PayPal's Strategy for Remediating Critical Software Vulnerabilities](/content/blog/remediation-at-scale-lessons-from-paypal-for-the-equifax-security-team.html): PayPal Lessons for the Equifax Security Team regarding the Struts2 related breach. (479 words)
- [Discovery Health and Sonatype Lifecycle | Sonatype](/content/customer-stories/discovery-health-and-sonatype-nexus-lifecycle/index.html): See how Sonatype Lifecycle and Sonatype Nexus Repository help Discovery Health continuously monitor open source software security and license compliance. (1,084 words)
- [Apache Struts2 (S2-053): How One Developer Braces for Impact](/content/blog/bracing-for-impact-in-more-ways-than-one-apache-struts2-s2-053.html): How one Sonatype Engineer responded to the Apache Struts2 announcement... while dealing with a hurricane bearing down on him. (1,073 words)
- [Sonatype Recognized as a Leader in SCA by Forrester](/content/blog/forrester-recognition-market-leader-in-software-composition-analysis.html): Sonatype recognized as a leader in 2021 Forrester Wave on SCA with the strongest market presence and top policy management criterion.  (754 words)
- [NIST: Adopt a Secure Software Development Framework (SSDF)](/content/blog/nist-adopt-a-secure-software-development-framework-ssdf-to-mitigate-risk-of-software-vulnerabilities.html): NIST recommends a SSDF framework to assess open source component cybersecurity risks, including an SBOM and automated security controls in the SDLC.  (564 words)
- [Automate SBOM Reporting for U.S. Army Compliance | Sonatype](/content/blog/proactive-compliance-with-sonatype-automating-reporting-for-u-s-army-sbom-requirements.html): Automate compliance with the U.S. Army’s SBOM requirements with Sonatype. Streamline security, SCA, and regulatory adherence for mission-critical software. (1,001 words)
- [Why Should Your Organization Choose Nexus Repository Pro](/content/resources/whitepapers/why-should-you-choose-nexus-repository-pro/index.html): Explore key advantages of Sonatype Nexus Repository Pro and how it empowers enterprise organizations to optimize software delivery and maximize ROI. (138 words)
- [Rugged DevOps: Survival Is Not Mandatory](/content/blog/2016/01/ruggeddevops/index.html): Deming, the patron saint of DevOps once advised, “It is not necessary to change. Survival is not mandatory. (967 words)
- [Continuous Delivery: Overcoming Common Objections](/content/blog/continuous-delivery-for-all/index.html): Jez Humble addresses the four reasons he consistently hears why continuous delivery won't work in their organization -- and busts all the myths. (855 words)
- [Nexus Plugins Integration Testing: Best Practices and Tools](/content/blog/2009/10/integration-tests-part-4-nexus-plugins-integration-test.html): Discover the process of integrating and testing Nexus plugins, including a detailed walkthrough of the virus scanner plugin and setup using Maven plugins. (701 words)
- [Create Two JARs from One Project: Best Practices & Pitfalls](/content/blog/2010/01/how-to-create-two-jars-from-one-project-and-why-you-shouldnt.html): Learn why creating two JARs from one Maven project is discouraged and explore alternative solutions for better project management. (1,219 words)
- [Sonatype Guide: Giving AI the Context It Needs](/content/blog/sonatype-guide-giving-ai-the-context-it-needs/index.html): Learn how Sonatype Guide gives AI coding assistants real-time dependency intelligence to reduce rework, improve security, and generate higher-quality code. (833 words)
- [Understanding the Sonatype Safety Rating for OSS Projects](/content/blog/how-is-the-sonatype-safety-rating-determined/index.html): The Sonatype Safety Rating is an aggregate rating designed to estimate the likelihood of an open source project containing security vulnerabilities. (375 words)
- [Explore Maven Central Performance Improvements With Edgecast](/content/blog/2012/07/we-just-kicked-central-performance-and-availability-up-a-notch-with-edgecast.html): We Just Kicked Central Performance and Availability Up a Notch with Edgecast (501 words)
- [Fallguys Malware Targets Browsing Data and Discord IMs](/content/blog/inside-the-fallguys-malware/index.html): This weekend a malicious component called “fallguys” was discovered on npm impersonating an API for the widely popular video game, Fall Guys: Ultimate. (894 words)
- [New in Nexus Repository: R Format and VS Code Support](/content/blog/nexus-repository-3-20.html): The release of Nexus Repository 3.20 offers native support for R repositories. R is a language used for statistical analysis and machine learning. (410 words)
- [The Rise of Collective Defense for Open Source](/content/blog/the-rise-of-collective-defense-for-open-source/index.html): AI is accelerating vulnerability discovery. Learn why open source security must evolve from isolated efforts to coordinated ecosystem-wide remediation. (1,002 words)
- [Modern Retail Software Development Solutions | Sonatype](/content/solutions/retail/index.html): Discover how Sonatype accelerates retail software development, ensuring security, compliance, and innovation in the era of AI-assisted development. (790 words)
- [Explore How Sonatype Leads in SBOM Management and Visibility](/content/blog/sbom-management-and-generation-how-sonatype-leads-in-software-supply-chain-visibility.html): Sonatype leads in SBOM generation and management with integrated tools that deliver software supply chain visibility, compliance, and security at scale. (779 words)
- [Manage Conda Packages Securely | Sonatype Support](/content/products/language-support/conda/index.html): Manage and secure your Conda packages with comprehensive Sonatype support within Sonatype solutions. Build confidently with Conda and Sonatype.  (420 words)
- [NeuVector and Lifecycle Integration: Securing Containers](/content/blog/neuvector/index.html): Sonatypes new integration between NeuVector and Nexus Lifecycle combines NeuVector’s open source detection and mitigation capabilities at the container. (723 words)
- [Automating Staging Workflow With Gradle and Nexus Repository](/content/blog/2012/07/nexus-pro-automating-staging-workflow-with-gradle-using-the-nexus-rest-apis.html): Nexus Pro: Automating Staging Workflow with Gradle using the Nexus REST APIs (555 words)
- [Explore Aether: The Embeddable Maven Repository API](/content/blog/2010/08/introducing-aether/index.html): Discover Aether, an embeddable API for seamless interaction with Maven repositories, enhancing interoperability for JVM-based projects.  (444 words)
- [Software Supply Chain Management: App Development | Sonatype](/content/resources/software-supply-chain-management-part-2-dawn-of-component-software-development.html): Explore the evolution of software development, its dependencies, artifact management, and licensing complexities shaping the modern software supply chain. (1,849 words)
- [DevOps Leadership Series: Monitoring Containers and Microservices](/content/blog/2015/05/devops-leadership-series-monitoring-containers-and-microservices.html): Trevor Parsons (@trevparsons) is a Co-Founder and Chief Scientist at Logentries, a leading SaaS-delivered log management and analytics service. (224 words)
- [Part 3 – [ ________ ] Is the Best Policy](/content/blog/2014/08/the-best-policy/index.html): In part 1 and part 2 of the '[ ________ ] is the Best Policy' series, we looked at how open source policies can quite often lead to the wrong type of behavior. (667 words)
- [Sonatype Lifecycle Integrates with Azure DevOps | Sonatype](/content/blog/sonatype-lifecycle-now-integrates-with-azure-devops-to-secure-software-supply-chains-in-the-cloud.html): The Nexus IQ Extension for Azure DevOps scans builds to identify open source security, license, or quality policy violations.  (410 words)
- [Maintainer Sabotages npm Libraries 'colors' and 'faker'](/content/blog/npm-libraries-colors-and-faker-sabotaged-in-protest-by-their-maintainer-what-to-do-now.html): Popular npm open source libraries, colors.js, and faker.js were sabotaged by their own maintainer. What does that mean for open source sustainability?  (1,138 words)
- [Sonatype Delivers Advanced Staging & DevOps-Native Development](/content/press-releases/resources/state-of-the-software-supply-chain-2022/establishment-and-expansion-of-software-supply-chain-regulation-standards.html): Sonatype, the leader in automated open source governance and DevSecOps announced it has released Staging for version 3 of Nexus Repository Professional. (415 words)
- [Accelerate DevOps: Key Practices for High-Performing Teams](/content/blog/principle-based-devops-frameworks-accelerate/index.html): The devops framework proposed by the Accelerate authors is focused on three key areas: Continuous Delivery, Architecture, and Product Process. (798 words)
- [Releasing the Apache Maven-Bundle-Plugin 2.2.0](/content/blog/2011/01/maven-bundle-plugin-220/index.html): Apache maven-bundle-plugin 2.2.0 released with key updates to bnd tool, improving package management and Web Archive Bundles creation.  (238 words)
- [Exploring Key Benefits of Integrating Sonatype with Your IDE](/content/blog/5-benefits-of-integrating-iq-server-with-your-ide/index.html): Nexus IQ for IDEs provides development teams with Sonatype's component intelligence. Current IDE integrations: IntelliJ IDEA, Eclipse, and Visual Studio.  (462 words)
- [Unveiling Vulnerabilities: Identify & Score Risks | Sonatype](/content/resources/guides/unveiling-vulnerabilities/index.html): In this guide, we address common questions for safeguarding development environments against intentionally malicious and vulnerable components.  (686 words)
- [Transform Enterprises: Leadership Insights on Generative AI](/content/blog/transforming-enterprises-with-generative-ai-pallavi-nargunds-keynote-at-addo.html): Discover how generative AI is transforming industries and is revolutionizing software development and shaping the future of DevOps. (551 words)
- [DevOps Confessions From Fannie Mae, Capital One, and More](/content/blog/confessions-from-fannie-mae-liberty-mutual-and-capital-one.html): For FREE access to all 57 of the recorded conference sessions, go to: www.AllDayDevOps.com.  
 (341 words)
- [Sonatype Named to The 2016 Deloitte Technology Fast 500](/content/press-releases/fast-500/index.html): Sonatype, the leader in software supply chain automation, has been ranked number 313 on the Deloitte Technology Fast 500 list for 2016. (476 words)
- [CVE-2023-50164: Apache Struts2 Vulnerability | Sonatype](/content/blog/cve-2023-50164-another-vulnerability-in-the-widely-used-apache-struts2-component.html): The recent identification of CVE-2023-50164 in Apache Struts is quite similar to other vulnerabilities Sonatype has seen and covered in the past. (1,225 words)
- [GDPR and OSS. How Are They Linked and Why Should You Care?](/content/blog/gdpr-and-oss-how-are-they-linked-and-why-should-you-care.html): Learn how GDPR legislation and regulations impact the use of Open Source Software (OSS) and the importance of securing data to avoid hefty fines and breaches. (665 words)
- [Maven Central Repository Moves to HTTPS for Better Security](/content/blog/central-repository-moving-to-https/index.html): Beginning January 15, 2020 The Central Repository will no longer support communication over HTTP. We are moving to HTTPS to ensure greater security.  (650 words)
- [Sonatype's Repository Manager Includes Docker & npm Support](/content/press-releases/docker-images-npm-javascript-modules/index.html): Sonatype introduces free Docker and npm format support in Nexus Repository Manager, plus new Twistlock and npm plug-ins. (737 words)
- [10 Frequently Asked SBOM Questions Answered | Sonatype Guide](/content/resources/guides/the-10-most-frequently-asked-sbom-questions-answered.html): Explore essential insights on SBOM requirements and the impact of regulations on software development as Sonatype answers frequently asked SBOM questions. (985 words)
- [A Guide to Migrating from Apache Archiva to Sonatype Nexus](/content/blog/2009/07/from-apache-archiva-to-sonatype-nexus/index.html): Learn how to effectively migrate from Apache Archiva to Sonatype Nexus Repository. Explore tips and real-world lessons from a large-scale implementation. (3,443 words)
- [What the TPG-led $80M investment means for the future of Sonatype](/content/blog/what-tpgs-80m-investment-means-for-the-future-of-sonatype-and-the-devsecops-movement.html): Sonatype has raised an $80 million round of growth financing led by TPG Capital to fuel global growth requirements as automated OSS governance grows. (635 words)
- [Why Sonatype Nexus Repository Rocketed Beyond 60,000 Installs](/content/blog/2015/11/why-nexus-rocketed-beyond-60000-installs/index.html): Discover how Sonatype Nexus Repository surpassed 60,000 installations, emphasizing defect detection and quality in software supply chains. (1,189 words)
- [Improve Your Supply Chain with a Software Security Framework](/content/blog/how-to-improve-your-software-supply-chain-with-a-software-security-framework.html): Enhance software supply chain security with a framework. Protect against attacks, meet regulations, and release secure software. Learn more now. (1,905 words)
- [Sonatype and Red Hat Deliver Security & Enhanced Visibility](/content/press-releases/sonatype-collaborates-with-red-hat/index.html): Sonatype’s Nexus Lifecycle leverages its Red Hat OpenShift Operator Certification, enabling customers to easily design a Software Bill of Materials (SBOM). (534 words)
- [Unlock Efficiency in Software Management with SBOMs](/content/blog/unlock-collaboration-and-efficiency-in-software-management-with-sboms.html): Learn how SBOMs streamline collaboration, security, and compliance by standardizing data sharing across software supply chains. (557 words)
- [Sonatype Finds 700% Rise in Open Source Supply Chain Attacks](/content/press-releases/sonatype-finds-700-average-increase-in-open-source-supply-chain-attacks.html): Early findings from Sonatype's 8th Software Supply Chain Report reveal a surge in cyberattacks on open source ecosystems. (629 words)
- [Maven by Example: Preface | Sonatype Guide](/content/resources/guides/maven-by-example/preface/index.html): Discover Maven, an essential tool for managing complex software projects and dependencies, in this comprehensive guide. (462 words)
- [Mitigating OSS Risks: Insights from the ISACA Journal](/content/blog/2012/03/article-published-in-isaca-journal-mitigating-oss-risk.html): Explore the risks and mitigation strategies associated with open-source software as highlighted in Charles Gold's article in the ISACA Journal. (517 words)
- [Taking on the Ultimate Challenge: Deca Ironman for Charity](/content/blog/extreme-endurance-required/index.html): Sonatyper Mark Dodgson will test his physical limits and mental toughness participating in an athletic event that is 10x an Ironman, a first for the UK.  (563 words)
- [Java Serialization - The Gift That Keeps on Taking (Part 1)](/content/blog/java-serialization-the-gift-that-keeps-on-taking-part-1.html): Log4Shell impels us  to review the reasons Java needs serialisation, how to use it safely, and what other options exist. Here in part 1, we examine design. (1,478 words)
- [OpenSSF Calls for Multifaceted Software ID Strategy](/content/blog/openssf-responds-to-cisa-advocates-for-a-multifaceted-approach-to-software-identification.html): OpenSSF published a response to CISA's request for comment on their white paper about software identification (1,036 words)
- [How AWS Enhances Sonatype's On-Demand Training Infrastructure](/content/blog/2010/04/amazons-aws-powers-sonatypes-on-demand-training-infrastructure.html): Discover how Sonatype leverages AWS EC2 to efficiently power their on-demand training infrastructure, enhancing agility, and reducing costs. Learn More. (362 words)
- [Sonatype Releases Q1 2026 Open Source Malware Index](/content/press-releases/sonatype-q1-2026-open-source-malware-index/index.html): Sonatype's Open Source Malware Index reveals a surge in malicious packages, highlighting trust abuse as the primary attack vector in software development. (644 words)
- [Rashida Hodge Joins Sonatype's Board of Directors | Sonatype](/content/press-releases/rashida-hodge-joins-sonatype-board-of-directors/index.html): Sonatype has welcomed Rashida Hodge, one of the most experienced practitioners of AI deployments, to its Board of Directors.
 (582 words)
- [5 Steps to Turn Your RMF Backlog Into a Continuous ATO: The CSRMC Migration Playbook](/content/blog/5-steps-to-turn-your-rmf-backlog-into-a-continuous-ato-the-csrmc-migration-playbook.html): The DoD CSRMC and FedRAMP OSCAL mandates mean the end of static RMF spreadsheets. Learn how to automate your software supply chain to achieve a true cATO. (840 words)
- [Next-Gen Build Tools for Eclipse Plugins & RCP Applications](/content/blog/2008/11/the-next-generation-of-build-tools-for-eclipse-plugins-and-rcp-applications.html): The next generation of build tools for Eclipse plugins and RCP applications (322 words)
- [Wicked Good Development: Cybersecurity Experts Talk Log4j](/content/blog/wicked-good-development-episode-1/index.html): 3 experts with different views on the world of software talk about the latest in development news. Today's episode: Log4j, White house and Open Source  (8,499 words)
- [Navigate EU Cyber Resilience Act Compliance | Checklist](/content/blog/tackle-cyber-resilience-act-requirements-with-our-cra-checklist.html): Learn how the Cyber Resilience Act impacts software providers and how Sonatype's platform can help you meet its requirements. (313 words)
- [Model Context Protocol (MCP) & AI Workflows | Sonatype](/content/blog/from-generic-code-to-specialist-ai-how-mcp-will-reshape-the-developer-experience.html): Learn how Model Context Protocol (MCP) transforms the AI development workflow. Discover how MCP reshapes the developer experience by unifying tools. (981 words)
- [The Big Hack: Chinese Military Implicated in Equifax Breach](/content/blog/chinese-military-implicated-in-equifax-breach/index.html): The Chinese Military were implicated in the attack on Equifax's software supply chain. It's time to take software supply chain security seriously. (819 words)
- [Software Composition Analysis: A Matter of Perspective](/content/blog/software-composition-analysis/index.html): Explore the evolution of software composition analysis and its impact on improving open source security, compliance, and innovation across enterprises. (703 words)
- [Federal Software Security Demands Velocity and Assurance](/content/blog/mission-velocity-mission-assurance-why-federal-software-security-demands-both.html): Discover why federal agencies must achieve mission velocity and assurance. Learn how to empower software delivery in zero-trust AI-driven environments. (1,069 words)
- [Sonatype Strengthens Leadership Team with a New CRO](/content/press-releases/jon-mellon-cro/index.html): Sonatype welcomes Jon Mellon as its first-ever CRO to help expand the Sonatype partner ecosystem, while accelerating the company’s growth strategy. (530 words)
- [CVE-2014-3603: Lack of Hostname Verification in OpenSAML](/content/blog/2019/01/nexus-intelligence-insights-february-2019/0/index.html): Discover the risks of CVE-2014-3603 in OpenSAML. Learn how to protect your applications from Man-in-the-Middle attacks with these remediation strategies. (709 words)
- [Continuous Delivery: The Atlassian Way](/content/blog/2016/03/continuous-delivery-atlassian-way/index.html): At the recent DEVNEXUS conference in Atlanta, Sonatype’s Mark Miller caught up with Ian Buchanan for our 2016 DevOps Leadership Series. (980 words)
- [Securing and Scaling InnerSource With Automation](/content/blog/securing-and-scaling-innersource-with-automation/index.html): Learn how automating InnerSource practices allows organizations to scale secure software development and how Sonatype Lifecycle can help. (993 words)
- [Scaling Infrastructure Management with Terraform | Sonatype](/content/blog/managing-infrastructure-at-scale-with-terraform/index.html): Eighty percent of software outages are due to human error. Jon Brouse shows how Terraform, an open source infrastructure solution, eliminates mistakes.  (440 words)
- [Malicious 'Distutil' and Spring4Shell Active Exploitation](/content/blog/this-week-in-malware-malicious-distutil-and-spring4shell-active-exploits.html): Discover the latest in malware threats, including Distutil, Spring4Shell, ProxyShell exploits, and more. Stay informed and protect your systems today. (1,112 words)
- [From 0 to Accredited in 23 Days](/content/blog/from-o-to-accredited-in-23-days/index.html): DevSecOps in Government - What if there was a way to go from 0 to accredited in 23 days? Leonel Garciga from the DoD’s Joint Improvised Threat Defeat. (634 words)
- [Manage OCI Packages Securely | Sonatype Package Support](/content/products/language-support/oci/index.html): Manage OCI packages securely at scale with Sonatype, enabling governance, visibility, and seamless distribution across diverse container environments. (455 words)
- [DevOps Research Reveals Attitudes on Application Security](/content/press-releases/appsec-in-financial-sector/index.html): Sonatype, the leader in software supply chain automation, today announced the financial services results of its 2017 DevSecOps Community Survey. (659 words)
- [SBOM 101: What is an SBOM? | Sonatype Video](/content/resources/videos/what-is-an-sbom/index.html): Explore the fundamental concept of SBOMs in this brief video. Learn how you can simplify software security and streamline your supply chain. (20 words)
- [Evolving Developer Roles: Beyond Just Coding | Sonatype](/content/blog/beyond-coding-changing-developer-roles/index.html): Developers are increasingly taking center-stage, assuming more responsibilities and tasks. But what does this mean for developers themselves? (2,285 words)
- [Enhancing DoD DevSecOps: Key Takeaways & Sonatype Alignment](/content/blog/key-takeaways-from-the-latest-dod-enterprise-devsecops-fundamentals-update.html): Explore DevSecOps fundamentals and securing software supply chains with automation and SBOMs. Learn how Sonatype tools align with these goals. (1,061 words)
- [Sonatype Named a Leader in SCA by Independent Research Firm](/content/press-releases/sonatype-named-a-leader-in-sca/index.html): Sonatype has been named a Leader in The Forrester Wave: Software Composition Analysis, Q2 2023 report.
 (488 words)
- [Explore Guardrails for Safer AI-Assisted Software Development](/content/blog/guardrails-make-ai-assisted-development-safer-by-design.html): AI coding assistants move fast. Sonatype Guide adds real-time context, so AI-generated code stays secure, high-quality, and ready to ship. (787 words)
- [Simplifying Code Deployment at a DOE Laboratory | Sonatype](/content/customer-stories/simplifying-code-deployment-at-a-doe-laboratory/index.html): For the Department of Energy Laboratory, DevSecOps provided a framework that simplified their code deployment and delivered using the Sonatype Platform. (1,246 words)
- [Salesforce Transforms Open Source Approval with Automation](/content/blog/salesforce-and-nexus-the-real-results-of-automation.html): Mary Lee from Salesforce explains how automating the open source component approval process went from 25 days of manual evaluation down to 5. (194 words)
- [10 reasons why All Day DevOps 2017 is awesome | Sonatype Blog](/content/blog/10-reasons-why-all-day-devops-2017-is-awesome/index.html): Discover why All Day DevOps 2017 stands out, featuring visionary presentations, global participation, and grassroots support from the DevOps community. (267 words)
- [Over 50 Malicious Packages Identified This Week | Sonatype](/content/blog/this-week-in-malware-oct-14-22/index.html): This week we discovered and analyzed nearly 5 dozen packages flagged as malicious, suspicious, or dependency confusion attacks in npm and PyPI registries. (294 words)
- [Wicked Good Development: James McLeod's Journey to FINOS](/content/blog/wicked-good-james-mcleod-finos-and-beyond/index.html): James McLeod, Director of Community for FINOS, talks about his journey and working closely with some of the world’s largest banks and cloud providers, This session features open source war stories from James McLeod, Director of Community for FINOS–the Financial Technology vertical of the Linux Foundation.
After years in FinTech as a bank software developer, James McLeod now works to create impactful open source technology and communities. He works closely with contributors from the world’s largest investment banks and cloud providers on a daily basis, providing experiences and insights we’re excited to share with our listeners.
Check out the resources from today's episode here.  (6,245 words)
- [Why Software Supply Chain Security Requires a New Playbook](/content/blog/why-software-supply-chain-security-requires-a-new-playbook.html): Software supply chain attacks are rising. Discover why traditional security falls short and learn how to secure dependencies and development workflows. (798 words)
- [Insecure at Any Speed](/content/blog/insecure-at-any-speed/index.html): Because of the pervasive use of of open source software and the poor open source security practices, bad actors simply lie in wait for opportunity to knock. (1,175 words)
- [The Top 5 Trends Every CISO Needs to Know | Sonatype](/content/blog/the-top-5-trends-every-ciso-needs-to-know-for-2024/index.html): Five key predictions shaping the future of software development with insights to empower CISOs in navigating the evolving development landscape (604 words)
- [Ghostcat CVE-2020-1938 Vulnerability: Critical Apache Tomcat](/content/blog/nexus-intelligence-insights-whats-in-a-ghostcat-cve-2020-1938-apache-tomcat.html): Ghostcat manipulates the widely used Apache Tomcat web server. No version of Tomcat released in the last 13 years is immune, unless properly patched. (987 words)
- [How to Get Started With Sonatype Nexus Repository REST APIs](/content/blog/four-steps-to-get-started-with-nexus-repo-using-new-rest-apis.html): Nexus Repository Manager supports REST API endpoints for binary management. Use NXRM endpoints to seamlessly integrate with your tools and CI/CD pipeline. (506 words)
- [Log4j Exploits Are Now Being Used to Spread Dridex Banking Trojan](/content/blog/log4j-exploits-are-now-being-used-to-spread-dridex-banking-trojan.html):  Log4shell exploits are now being leveraged by threat actors to infect Windows machines with the Dridex Trojan and Linux devices with Meterpreter (723 words)
- [Chapter 10: Site Generation | Maven: The Complete Reference](/content/maven-complete-reference/site-generation/index.html): Master the art of site generation in Maven with Chapter 10 of the Maven Definitive Guide by Sonatype. A comprehensive guide to documentation and reporting. (5,702 words)
- [npm Malware: Bladabindi Trojan in Typosquatting Packages](/content/blog/bladabindi-njrat-rat-in-jdb-js-npm-malware.html): Sonatype discovered new malware within the npm registry, jdb.js and db-json. (1,335 words)
- [Explore Nexus Repository 1.3 New Mirror Support Feature](/content/blog/2009/03/new-feature-in-nexus-13-mirror-support/index.html): Discover how the Mirror Support feature in Sonatype Nexus Repository 1.3 enhances repository efficiency by using multiple mirrors and validating artifacts. (676 words)
- [Sonatype Introduces Guide for Secure Agentic Development](/content/press-releases/introducing-guide-for-secure-agentic-development/index.html): Sonatype unveils Guide, a tool that enhances AI-assisted development with real-time open source intelligence for improved security and efficiency. (841 words)
- [The 2024 Forrester Wave™ Software Composition Analysis](/content/resources/whitepapers/2024-forrester-wave/index.html): Discover why Sonatype was named a Leader in the Forrester Wave™ for SCA Software. Uncover hidden insights and compare features from leading SCA vendors. (212 words)
- [hubfs/archived-20and-20unused-20images/2015_state_of_the_software_supply_chain_report-pdf.html](/content/hubfs/archived-20and-20unused-20images/2015_state_of_the_software_supply_chain_report-pdf.html) (11,808 words)
- [Sonatype Lifecycle Enhancements Boost Speed and Security](/content/blog/sonatype-lifecycle-enhancements-boost-speed-security-and-productivity.html): Sonatype Lifecycle’s new feature enhancements elevate security posture, developer productivity, and operational excellence. Read on for the full details. (961 words)
- [Malicious 'pymafka' Package Drops Cobalt Strike | Sonatype](/content/blog/new-pymafka-malicious-package-drops-cobalt-strike-on-macos-windows-linux.html): The 'pymafka' PyPI package is filled with trojans targeting Windows, macOS & Linux users and appears to typosquat the popular PyKafka. (842 words)
- [AI is Hard Work: Unveiling the Real Effort Behind the Hype](/content/blog/ai-is-hard-work/index.html): AI rewards effort, not spectators. Why mastering AI requires hard work, and why those who lean in will outpace their peers. (1,044 words)
- [Maven: The Complete Reference - Preface | Sonatype Guide](/content/maven-complete-reference/preface/index.html): Discover a comprehensive guide to Maven, a vital tool for managing large software projects and dependencies, offering insights and best practices. (1,025 words)
- [The Central Repository Is Getting Faster. Ready for New IPs?](/content/blog/2011/07/the-central-repository-is-getting-faster-are-you-ready-for-the-new-ips.html): The Central Repository Is Getting Faster! Are you ready for the new IPs? (688 words)
- [ Software Supply Chain Maturity Model & Assessment | Sonatype](/content/blog/how-to-measure-the-maturity-of-your-software-supply-chain.html): Measure your software supply chain maturity with a proven maturity model and supply chain assessment framework and build more secure, reliable software. (1,486 words)
- [Meet an Open Source Developer: Theresa Mammarella](/content/blog/meet-an-open-source-developer-theresa-mammarella/index.html): Theresa Mammarella, Developer Advocate on the DevRel team at Sonatype, discusses her journey and career in open source for World Open Source Day 2023.  (625 words)
- [Shai-Hulud is Back: Maintainer Accounts Are Still the Soft Target](/content/blog/shai-hulud-is-back-maintainers-the-target/index.html): Recent npm compromises expose developers to credential theft and RCE. Learn how Shai-Hulud exploited trusted packages and what actions to take in our blog. (1,177 words)
- [Essential Role of SBOMs in Cybersecurity and Compliance](/content/blog/why-sboms-are-essential-for-every-organization/index.html): Explore the big role of software bills of materials (SBOMs) in enhancing cybersecurity, managing vulnerabilities, and ensuring compliance with regulations (1,159 words)
- [DORA Compliance Checklist | Sonatype Guide](/content/resources/guides/dora-checklist/index.html): Learn how to protect software components and be compliant with DORA regulatory requirements. (428 words)
- [The Cybersecurity Improvement Act: A Legislative Legacy and Future](/content/blog/cybersecurity-improvement-act-of-2017-the-ghost-of-congress-past.html): A steady breeze is blowing from Washington DC that is nudging the software industry toward a future in which vendors will no longer be immune to liability. (470 words)
- [PyPI Crypto-Stealer Targets Windows Users in New Campaign](/content/blog/pypi-crypto-stealer-targets-windows-users-revives-malware-campaign.html): Discovery of a malicious PyPI package 'pytoileur' indicates 2023's 'Cool package' crypto-stealing campaign has been revived. (1,019 words)
- [Debunking DevSecOps Myths | Sonatype](/content/blog/myth-busting-in-devsecops/index.html): Larry Maccherone leads the DevSecOps efforts at Comcast. He discusses some of the myths he has busted along his DevSecOps Journey. (261 words)
- [Sonatype Announces Integration with ServiceNow to Streamline SCA](/content/press-releases/sonatype-announces-integration-with-servicenow-to-streamline-software-composition-analysis.html): Sonatype partners with ServiceNow to streamline SCA. Accelerate you response to vulnerabilities, enhance security, save time, and boost collaboration. (629 words)
- [Simplifying SBOMs and Enhancing Security with VEX | Sonatype](/content/blog/demystifying-vex-simplifying-sboms-with-sonatype-sbom-manager.html): Discover how VEX simplifies SBOMs, streamlines vulnerability management, and enhances compliance with Sonatype SBOM Manager. (456 words)
- [Hudson's bright future | Sonatype blog](/content/blog/2011/02/hudsons-bright-future/index.html): Hudson's future is bright with dedicated engineering resources and a focus on improving its infrastructure, testing, and architecture for better stability. (568 words)
- [Building Trust in AI-Driven Software Development | Sonatype Guide](/content/resources/whitepapers/sonatype-guide-business-case/index.html): Discover how Sonatype Guide enhances AI-driven software development by giving AI agents real-time security intelligence for better component choices. (1,241 words)
- [Maven 2.0.10 Released | Sonatype Blog](/content/blog/2009/02/maven-2010-released/index.html): Maven 2.0.10 is officially released after extensive testing, stabilizing the 2.0.x line. Learn more about the release in this blog.  (422 words)
- [Achieving a Managed State Model for Your Software Supply Chain](/content/blog/achieving-a-managed-state-model-for-your-software-supply-chain.html): Secure software development processes share attributes with other human endeavors such as cooking, reading, and sports, says Santi Mulukutla of Sonatype. (585 words)
- [Meet an Open Source Contributor: Sal Kimmich](/content/blog/meet-an-open-source-contributor-sal-kimmich/index.html): Meet Sal Kimmich one of the incredible open source contributors at Sonatype. Learn more about why and how they got into open source.  (1,014 words)
- [Explore Sonatype Nexus Repository Roles and User Permissions](/content/blog/demo-restricting-access-to-nexus-repository-based-on-roles-and-user-permissions.html): Learn how to configure Sonatype Nexus Repository for user-specific access control with roles and permissions in this quick tutorial by Andrés Pérez. (163 words)
- [Software Governance in Air-Gapped Environments | Sonatype](/content/blog/mastering-software-governance-in-air-gapped-critical-mission-environments.html): Learn how to enable secure software governance in air-gapped environments. Master air-gapped DevSecOps to ensure compliance and mission speed today. (1,097 words)
- [Insights from Bryan Batty on Security Experimentation and Metrics](/content/blog/nexus-innovator-bryan-batty-of-bloomberg-industry-group-part-3-of-4.html): Explore Bryan Batty's insights on integrating security into development, measuring success, and the importance of dedicated security roles. (1,415 words)
- [Open Source Governance: Why It's Crucial for Executives](/content/blog/open-source-governance-equifax-and-the-ceo/index.html): The Wall Street Journal’s Adam Janofsky wrote an article entitled, How Companies Can Manage Risks Tied to Open-Source Software*. (500 words)
- [Vista Equity Partners Acquires Majority Stake in Sonatype](/content/press-releases/vista-acquires-majority-interest-in-sonatype/index.html): Sonatype has announced it has signed a definitive agreement to receive a majority investment from Vista Equity Partners.  (611 words)
- [Replace Plain Text Credentials With User Tokens | Challenge](/content/blog/2014/06/replace-plain-text-username-and-password-with-a-user-token.html): Replace plain text username  and password with a user token - The Nexus 2 Minute Challenge (167 words)
- [Now Available: SSL Connectivity to Central | Sonatype Blog](/content/blog/2012/10/now-available-ssl-connectivity-to-central/index.html): Discover how Sonatype enables SSL connectivity to Maven Central, protecting your component downloads from man-in-the-middle attacks and improving security. (602 words)
- [Eficode Bolsters Partnership With Sonatype | Sonatype](/content/press-releases/eficode-bolsters-partnership-sonatype/index.html): Eficode integrates Sonatype Nexus into its ROOT DevOps platform to enhance security in cloud transformations. (730 words)
- [sonatype-2024-011914 | Security Details | Sonatype Guide](/content/guide/vulnerability/sonatype-2024-011914/index.html): Technical security analysis for sonatype-2024-011914. CVSS 9.3 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (64 words)
- [Discover The Top 5 Tomcat Vulnerabilities | Sonatype Blog](/content/blog/top-5-tomcat-vulnerabilities/index.html): In this blog, Tomitribe and Sonatype discuss the top five vulnerabilities in Tomcat and show you how to protect your system from these threats.  (597 words)
- [(ISC)² Global InfoSec Study on Application Vulnerabilities](/content/blog/2013/09/isc-global-infosec-study-app-vulnerabilities-are-1-concern.html): Security executives are most concerned about application vulnerabilities but invest little time in proactive measures. Learn more in this blog. (611 words)
- [Nexus Repository 3.7.0: Introducing Hierarchical Browsing](/content/blog/nexus-repository-3-7-0-released.html): Hierarchical browsing is now available in Nexus Repository 3.7.0. We’ve implemented both a browse view in the UI and an HTML index for more lightweight uses.  (345 words)
- [CVE-2025-1716 | Sonatype Security Advisory](/content/security-advisories/cve-2025-1716/index.html): Sonatype Research Team disclosed CVE-2025-1716: Picklescan versions prior to 0.0.21 are vulnerable to remote code execution via unsafe deserialization. (454 words)
- [Navigating Docker Hub Rate Limits with Nexus Repository](/content/blog/using-sonatype-nexus-repository-with-the-new-docker-hub-rate-limits.html): Learn how upcoming Docker Hub pull rate limits will impact CI/CD workflows and how Sonatype Nexus Repository can help mitigate disruptions. (720 words)
- [Extended Sonatype Firewall Support for RubyGems and RPM](/content/blog/nexus-firewall-supports-rubygems-rpm/index.html): Sonatype Repository Firewall now supports RubyGems and RPM, automating security and compliance checks to safeguard your DevSecOps pipeline. (234 words)
- [Helm and Nexus: Accelerate Deployments with Nexus Repository](/content/blog/helm-nexus-steering-towards-faster-deployments-in-nexus-3-21.html): Nexus Repository 3.21 now supports Helm, P2, and NuGet V3 proxy repositories to enhance container automation and provide faster deployments. (453 words)
- [Go Modules and Go Support | Sonatype Support](/content/products/language-support/go-and-go-modules/index.html): Securely manage dependencies in your Go projects with full Go Modules support, ensuring compliance, visibility, and control across your SDLC. (445 words)
- [Cancer Sucks, DevOps Helps](/content/blog/cancer-sucks-devops-helps.html): Sara Elkins tells the story of how they are applying DevOps practices at the National Cancer Institute. (733 words)
- [The Sonatype 2014 Engineering Summit | Sonatype Blog](/content/blog/2014/04/the-sonatype-2014-engineering-summit/index.html): Sonatype's 2014 Engineering Summit focused on Nexus 2.8, Nexus 3.0, and featured insights from engineers, fostering global team collaboration. (210 words)
- [Critical Security Alert: CVE-2018-16487 in Lodash Library](/content/blog/cve-2018-16487-lodash-rce-prototype-pollution/index.html): In this month's Nexus Intelligence Insights, we're covering CVE-2018-16487: remote code execution and 'prototype' pollution in Lodash and how to protect. (702 words)
- [AI Predictions 2025: Artificial Intelligence Trends | Sonatype](/content/blog/2025-predictions-artificial-intelligence-ai/index.html): Explore Sonatype's 2025 AI predictions covering artificial intelligence trends, cybersecurity, and regulation. See the AI future of software development. (839 words)
- [Sonatype Nexus Repository 2.0.5 Release: Explore Features](/content/blog/2012/06/nexus-professional-2-0-5-released-its-easier-to-evaluate-awesomeness.html): Nexus Professional 2.0.5 Released: It's Easier to Evaluate Awesomeness (730 words)
- [Past Reports | State of the Software Supply Chain](/content/state-of-the-software-supply-chain/past-reports/index.html): Explore insights from the past 10 editions of the State of the Software Supply Chain Reports. (241 words)
- [Continuous Integration with Containers in CI/CD Pipelines](/content/blog/continuous-integration-in-the-age-of-containers-part-1.html): A practical example of how to build and test a modern, containerized, application using Docker and the Nexus Platform. (1,193 words)
- [Amazic Announces New Partnership with Sonatype | Sonatype](/content/press-releases/amazic-announces-new-partnership-with-sonatype/index.html): Amazic partners with Sonatype to expand the reach of developer-focused software supply chain automation in EMEA. (568 words)
- [Ivanti Connect SSRF Vulnerability Traced to 'xmltooling'](/content/blog/the-exploited-ivanti-connect-ssrf-vulnerability-stems-from-xmltooling-oss-library.html): Ivanti's CVE-2024-21893 is an alias for CVE-2023-36661 — a SSRF vulnerability in Shibboleth 'xmltooling' library. Learn about these zero-day attacks.  (871 words)
- [How a Health Insurance Provider Reduced Tech Debt with Sonatype](/content/customer-stories/health-insurance-provider-reduces-tech-debt/index.html): Learn how a health insurance provider reduced tech debt and enhanced security with Sonatype Lifecycle, improving developer efficiency and innovation. (1,074 words)
- [Sonatype Live Streams Inaugural Nexus User Conference](/content/press-releases/sonatype-to-live-stream-inaugural-nexus-user-conference.html): Sonatype, the leader in automated open source governance and DevSecOps, will host over 1,500 people at it’s inaugural Nexus User Conference, June 6 - 7. (352 words)
- [Spring Security Vulnerability CVE-2021-22119 | Sonatype](/content/blog/from-feature-to-vulnerability-a-spring-security-oauth2-client-story.html): Explore CVE-2021-22119, a Spring Security vulnerability in the OAuth2 client exposing applications to a DoS attack through uncontrolled resource consumption. (786 words)
- [Malicious Attacks on Open Source Are Going to Get Worse](/content/blog/malicious-attacks-on-open-source-are-going-to-get-worse.html): Bad actors have recognized the power of open source and are now beginning to create their own attack opportunities. (500 words)
- [Prácticas de SCA para reducir riesgos de forma más rápida e inteligente](/content/resources/webinars/sca-best-practices-es/index.html) (141 words)
- [Comparing Open Claw vs. Spring Projects | Sonatype Video](/content/resources/videos/open-claw-vs-spring/index.html): 3D visualizations of Open Claw and Spring products to see how AI coding assistants are creating larger software dependency trees and increasing risk. (367 words)
- [Understanding the Critical Struts2 Security Vulnerability](/content/blog/unraveling-the-struts2-security-vulnerability-a-deep-dive.html): Learn about the critical security vulnerability in Apache Struts2 from a Sonatype webinar covering CVE-2023-50164 with a risk of remote code execution (1,384 words)
- [Sonatype Announces DevOps Solution for Python Developers](/content/press-releases/sonatype-pypi/index.html): Sonatype, the leader in software supply chain automation, today announced that its Nexus Firewall will offer support for automated governance of PyPI. (365 words)
- [Sonatype-2018-0413, flatmap-stream's back, back again | Sonatype](/content/blog/nexus-intelligence-insights-sonatype-2018-0413/index.html): Sonatype Intelligence uncovers Sonatype-2018-0413: a deeper dive into flatmap-stream and malicious code injection vectors in additional components 

 (5,539 words)
- [Inside npm Malware Attacks: Protecting Your Software Supply Chain](/content/resources/webinars/npm-malware-attacks-sg/index.html): Learn how to protect your software supply chain from sophisticated attacks and enhance your risk reduction strategies. (192 words)
- [Policy Engine Explained | Secure Open Source with Sonatype](/content/resources/articles/policy-engine/index.html): Discover how a robust policy engine enhances software security and compliance, enabling organizations to manage open source risks efficiently. (1,204 words)
- [Hitting the Trifecta With GitLab Automated Merge Requests](/content/blog/gitlab-automated-merge-requests/index.html): Say hello to GitLab automated merge requests. Developers can now leverage Nexus Intelligence's precision to provide expert remediation guidance in GitLab.  (442 words)
- [Rework Is Choking Software According to Sonatype Report](/content/blog/2015/06/rework-is-choking-software-2015-state-of-the-software-supply-chain-report.html): “Software may be eating the world, but rework is choking software”, tweeted John Jeremiah (@j_jeremiah). (958 words)
- [Open Source Evolution: Key Lessons from the Last Decade](/content/blog/the-transformation-of-open-source-lessons-from-the-past-decade.html): Explore the past decade of open source software's evolution with key insights from Sonatype's State of the Software Supply Chain report. (696 words)
- [Bryan Batty von der Bloomberg Industry Group, Teil 2](/content/blog/bloomberg-industry-german2/index.html): Bryan Batty von der Bloomberg Industry Group teilt seine Ideen, um Sicherheit zu einem zentralen Teil der Software Lieferkette zu machen. 
 (1,046 words)
- [The Power of Generative AI in Software Development | Sonatype](/content/blog/unlocking-the-power-of-generative-ai-in-software-development-insights-from-sonatypes-survey.html): Explore the influence of generative AI in software development via the results of Sonatype's recent survey involving 400 DevOps and 400 SecOps leaders (864 words)
- [Clojure Language Support | Sonatype Support](/content/products/language-support/clojure/index.html): Securely manage your Clojure build pipeline with full visibility, vulnerability detection, and policy enforcement to enhance development and reduce risks. (409 words)
- [Sonatype Lifecycle and IntelliJ IDEA | Sonatype Blog](/content/blog/nexus-lifecycle-and-intellij-idea/index.html): When it comes to Integrated Development Environments, IDEA has become a standard. Explore Nexus IQ for IntelliJ IDEA, which is now available for all users. (326 words)
- [Exploring The Anatomy of RubyGems 'rest-client' Hack](/content/blog/anatomy-of-the-rubygems-rest-client-hack-and-getting-creative-about-open-source-security.html): Last month, the RubyGems strong_password component was breached and injected with malicious code. (892 words)
- [Understanding Software Bill of Materials (SBOM) | Sonatype](/content/blog/what-is-a-software-bill-of-materials/index.html): A deep dive into a Software Bill of Materials with top use cases, benefits, and ways to manage. (1,243 words)
- [What Differentiates Nexus Repository Manager? | Sonatype](/content/blog/2010/01/nx-differentiate/index.html): Discover the unique features that set Nexus apart from other repository managers, including mirror handling, OpenSearch support, and extensibility. (1,507 words)
- [Getting Started With Sonatype Vulnerability Scanner](/content/blog/sonatype-vulnerability-scanner-and-vulnerability-analysis.html): Sonatype Vulnerability Scanner is a free tool that scans your application for vulnerabilities and reports on its analysis.  (1,286 words)
- [Maven How-To: Merging Plugin Configuration in Complex Projects](/content/blog/2011/01/maven-how-to-merging-plugin-configuration-in-complex-projects.html): Maven How-To: Merging Plugin Configuration in Complex Projects (575 words)
- [DevSecOps, Germs, and Steel: Tales From 5,558 Pros](/content/blog/2019-devsecopssurvey/index.html): We queried 5,558 developers and DevOps pros in our 2019 DevSecOps Community Survey (6th annual) to better understand what advances they've made, training. (980 words)
- [Integrating Sonatype CLM with SonarQube for Code Quality](/content/blog/2014/08/integrating-with-sonarqube/index.html): Customers using CLM want to surface known security vulnerabilities and license risk in the same place developers or executives already go to assess the. (549 words)
- [Sonatype Recognized in the Gartner Magic Quadrant for SSSC](/content/resources/whitepapers/gartner-magic-quadrant-2026/index.html): Sonatype is named a leader in the 2026 Gartner® Magic Quadrant™ for Software Supply Chain Security. Download the report to learn more.  (162 words)
- [Sonatype Nexus Repository and Yum Hosted Support](/content/blog/nexus-repository-manager-just-got-yummier/index.html): Nexus Repository now support Yum. What it's like to develop a new format for Sonatype. (686 words)
- [Sonatype's Commitment to Advancing Hudson and Making Great Software](/content/blog/2011/02/our-focus-on-advancing-hudson-and-making-great-software.html): Sonatype advances Hudson with significant core architecture improvements, enhancing performance and stability for the developer community. (291 words)
- [Open source changes fast. Can you keep up? | Sonatype Blog](/content/blog/2011/10/open-source-changes-fast-can-you-keep-up-2/index.html): Stay updated with the rapid changes in open source and learn how to manage security vulnerabilities in your software dependencies. (386 words)
- [Explore New Navigation Improvements in m2eclipse XML POM Editor](/content/blog/2011/02/navigation-improvements-in-the-m2eclipse-xml-pom-editor.html): Explore the latest improvements in the m2eclipse XML POM Editor, enhancing efficiency and experience with new auto-correct options and Artifact Search integration. (344 words)
- [Fix Vulnerabilities with GitHub PR Reviews & Line Comments](/content/blog/find-fix-vulnerabilities-in-seconds-with-github-pr-reviews-with-line-comments.html): Pull Request line comments highlight code that introduces a policy violation. This gives developers the information needed to remediate security risks. (550 words)
- [Sonatype a Cybersecurity Impact Award Honoree](/content/blog/sonatype-a-cybersecurity-impact-award-honoree/index.html): Sonatype places in the second annual Cybersecurity Impact Awards, sponsored by CyberTacos, to recognize leaders in Washington, D.C., Maryland and Virginia. (205 words)
- [DevSecOps: The Carrot and the Stick](/content/blog/devsecops-the-carrot-and-the-stick/index.html): DevOps and DevSecOps success stories from practitioners along with a cautionary tale of the consequences of doing nothing. (951 words)
- [Securing the AI Stack for Federal Missions](/content/blog/securing-the-ai-stack-for-federal-missions/index.html): Learn how federal agencies can secure the AI supply chain, and explore using automated compliance to accelerate authority to operate (ATO) timelines. (1,130 words)
- [Sonatype Data Services (HDS) Regularly Scheduled Maintenance – Sonatype Support](/content/support/hc/en-us/articles/4715055134099-sonatype-data-services-hds-regularly-scheduled-maintenance.html): In order to keep Sonatype Lifecycle Data Services performing at an optimal level,Sonatype routinely carries out maintenance. Usually, the... (90 words)
- [Maven tips and tricks: Describing Maven plugins | Sonatype Blog](/content/blog/2009/09/maven-tips-and-tricks-describing-maven-plugins-with-helpdescribe.html): Learn how to effectively describe Maven plugin configurations using the Maven Help plugin's describe goal for better build customizations. (771 words)
- [Miasma Returns: Leo Platform Compromise in npm](/content/blog/miasma-returns-leo-platform-compromise-in-npm/index.html): The Shai-Hulud Miasma campaign compromised trusted Leo Platform npm packages, using malware to steal credentials and spread through developer workflows. (1,039 words)
- [GDPR Gets Teeth: British Airways and Marriott Fined](/content/blog/gdpr-gets-teeth-british-airways-and-marriott-fined/index.html): Fines levied at British Airways and Marriott International under GDPR show why data protection must be a central part of the software supply chain.  (820 words)
- [Simplify Software Compliance | Sonatype SBOM Manager](/content/products/sonatype-sbom-manager/index.html): Use Sonatype SBOM Manager to automate software compliance. Generate, monitor & manage audit-ready SBOMs to easily manage vulnerabilities and legal risk., Explore our platform (884 words)
- [Nexus Repository: Auto-Blocking Unreachable Repositories](/content/blog/2010/04/nexus-1-6-introduces-auto-blocking-unreachable-remote-repositories.html): Sonatype Nexus Repository 1.6 introduces auto-blocking for unreachable remote repositories, ensuring smooth performance and proactive monitoring. (693 words)
- [How We're Staying Connected with Our Channel Partners](/content/blog/how-were-staying-connected-with-our-channel-partners-in-a-virtual-world.html): As part of our channel partner kickoff, we asked partners to share part of their country's culture in video, to bring us all a little closer in today's virtual. (633 words)
- [Maven Central Supports TLS 1.2 Only](/content/blog/maven-central-supports-tls-1-2-only-june-15.html): As of June 15th 2018, Central (repo1.maven.org & repo.maven.apache.org) will be supporting TLS 1.2 only. (315 words)
- [Sonatype Named Leader in SCA Software Report by Forrester](/content/press-releases/sonatype-named-leader-in-sca-software-report/index.html): Sonatype receives highest scores in both current offering and strategy categories among top SCA software vendors. (525 words)
- [Crypto-Mining: Why Software Supply Chain Hygiene Matters](/content/blog/crypto-mining-crime-rings/index.html): There are many reasons why organizations should protect their software supply chains. Crypto-mining crime rings are just the latest. (387 words)
- [Can Kubernetes Keep a Secret?](/content/blog/can-kubernetes-keep-a-secret/index.html): Kubernetes Secrets store usernames and passwords as base-64 encoded strings. They are obscured from casual browsing, but this is the same as plaintext.  (941 words)
- [Sonatype Platform Offers 3 New Integrations for Atlassian](/content/press-releases/nexus-platform-offers-new-integrations-for-atlassian.html): New Capabilities for Atlassian Workflows Will Accelerate Secure Coding Practices Across the SDLC.  (556 words)
- [Sonatype Nexus Repository | A Leading Artifact Repository](/content/products/sonatype-nexus-repository/index.html): Centrally manage software artifacts and AI models with Sonatype Nexus Repository. Ship code fast with an industry-leading artifact repository. , Explore our platform (1,522 words)
- [sonatype-2026-001622 | Security Details | Sonatype Guide](/content/guide/vulnerability/sonatype-2026-001622/index.html): Technical security analysis for sonatype-2026-001622. CVSS 8.7 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (36 words)
- [Simplify Policy Oversight: New Notifier Plugin for Bitbucket](/content/blog/policy-governance-made-easy-introducing-the-nexus-notifier-plugin-for-bitbucket.html): We’re excited to announce the Sonatype Nexus Notifier Plugin for Jenkins now has initial support for Bitbucket Code Insights.  (377 words)
- [Simplify NIS2 Compliance with Sonatype's Comprehensive Guide](/content/blog/simplify-nis2-compliance-with-sonatype/index.html): Learn how the EU's Network and Information Systems Directive 2 (NIS2) impacts software providers with new cybersecurity requirements. (260 words)
- [Learn the 2.x REST API: Automating Sonatype Nexus Repository](/content/blog/learn-the-nexus-rest-api-automating-sonatype-nexus/index.html): Like any modern web application, Nexus exposes REST based endpoints to exchange information over HTTP.  (850 words)
- [Best Practices for Nexus Repository | Sonatype Whitepaper](/content/resources/guides/best-practices-for-nexus-repository/index.html): Discover Sonatype Nexus Repository best practices to enhance software supply chain integrity, mitigate risks, and ensure regulatory compliance. (2,117 words)
- [PCI 3.0: The Importance of Secure Components in Payment Systems](/content/blog/2013/11/pci-3-0-secure-payment-requires-secure-components/index.html): Learn how PCI 3.0 emphasizes secure components in applications, requiring inventory management, vulnerability monitoring, and adherence to best practices. (343 words)
- [Key Trends in Application Security: AI, DevSecOps, and SBOMs](/content/blog/application-security-trends-shift-left-security-ai-and-open-source-malware.html): Explore top application security trends, including AI-driven threat detection, shift-left security, and the rising risks of open source malware. (1,052 words)
- [Maven Cookbook | Sonatype Guide](/content/resources/guides/maven-cookbook/index.html): Explore practical information about Apache Maven in Sonatype's Maven Cookbook that can help enhance your development skills. (57 words)
- [Preventing Vulnerabilities with Lessons from HeartBleed Bug](/content/blog/2014/04/heartbleed-bug/index.html): As the HeartBleed bug wreaked havoc on the internet over the past few days, we at Sonatype began thinking about the lessons learned from this recent scare. (940 words)
- [Sonatype Firewall Available to 10 Million Developers](/content/press-releases/sonatype-makes-nexus-firewall-available-to-ten-million-devs.html): Sonatype, the leader in open source governance and DevSecOps automation, today announced that Nexus Firewall is now available to support the more than 10. (523 words)
- [January Malware Monthly: Major Threats in Software Supply Chains](/content/blog/malware-monthly-january-2023/index.html): January 2023's Malware Monthly covers malware that rejects virtual machines, Linux crypto miners, evasive variants of RAT mutants, and more. (1,765 words)
- [Celebrating $100m in ARR and Welcoming Our First President](/content/blog/a-cause-for-celebration-reaching-100-m-in-arr-and-welcoming-our-first-president.html): Sonatype reaches pivotal revenue milestone and welcomes its first president.  (788 words)
- [Software Development in the Age of AI | Sonatype Webinar](/content/resources/webinars/software-development-in-ai-age/index.html): Discover how AI is transforming software development, revealing hidden risks, and learn strategies to manage these challenges effectively in this webinar., Open source AI/ML adoption is soaring — over the last 12 months, Sonatype has identified more than 300,000 models within customer software supply chains... (225 words)
- [New in Sonatype Nexus Repository 3.24: Storage Optimization](/content/blog/new-in-nexus-repository-3-24-storage-optimization-at-scale-and-nuget-v3-hosted.html): Nexus Repository 3.24 offers enterprise admin capabilities and frictionless ecosystem support with new storage at scale and NuGet V3 hosting capabilities. (636 words)
- [How Jasmine James Rolled Out Nexus at Delta Airlines](/content/blog/nexus-innovator-jasmine-james-of-delta/index.html): Jasmine James of Delta Airlines explains how she discovered Sonatype Nexus and how it's played a role in her career. (876 words)
- [JavaScript Security: Nexus Repository Introduces npm Audit](/content/blog/new-in-nexus-repository-3-23-nexus-intelligence-via-npm-audit.html): Now developers can check for policy violations using the npm audit command built into the npm CLI, using the precise data of Nexus Intelligence.  (571 words)
- [Sonatype's New Run Anywhere Platform for Software Management](/content/press-releases/sonatype-launches-industry-first-run-anywhere-platform.html): Sonatype's new cloud deployment options make it the most versatile software composition analysis and application security testing solution available. (783 words)
- [What Enterprise Architects Can Learn from Time Travelers](/content/blog/2012/09/what-enterprise-architects-and-time-travelers-have-in-common.html): Discover the parallels between enterprise architects and time travelers, and how modern tools like Nexus can revolutionize outdated development practices. (1,278 words)
- [Agile, Component Development, and DevOps: A Natural Match](/content/blog/2013/09/security-devops/index.html): Discover how Agile, component development, and DevOps align to enhance software delivery speed, quality, and security, driving competitive advantage. (519 words)
- [Lottie Player Compromised in Supply Chain Attack | Sonatype](/content/blog/lottie-player-compromised-in-supply-chain-attack-all-you-need-to-know.html): Popular JavaScript and npm library Lottie Player was compromised in a supply chain attack. Understand what this threat means and what you need to do. (921 words)
- [hubfs/1-2025_website-assets/resource_files/nexus-lifecycle-fundamentals-workshop-2026-pdf.html](/content/hubfs/1-2025_website-assets/resource_files/nexus-lifecycle-fundamentals-workshop-2026-pdf.html) (591 words)
- [What is Software Security? | Sonatype](/content/resources/articles/what-is-software-security/index.html): Learn what software security is and how it impacts businesses. We explore software vulnerabilities, the software supply chain, and software security tips. (1,717 words)
- [Fixing a Vulnerability? Ensure GitHub Isn't Showing Too Much](/content/blog/leaky-secrets-a-326m-crypto-hack-do-your-github-commits-reveal-too-much.html): February's $326 million crypto hack at Wormhole and this month's findings by Sonatype shed light on the importance of secrets management for open source. (947 words)
- [Sonatype Introduces Next Generation Dependency Management](/content/press-releases/advanced-development-pack/index.html): Introducing Sonatype’s newest enhancements for Nexus Lifecycle: the Advanced Development Pack and the new frontier of dependency management.  (739 words)
- [From Plexus to Guice (#1): Why Guice? | Sonatype Blog](/content/blog/2010/01/from-plexus-to-guice-1-why-guice/index.html): Discover why Maven transitioned from Plexus to Guice for better adaptability, community focus, and extensibility in their development infrastructure. (965 words)
- [How to Use Sonatype Nexus Repository with Maven Deploy](/content/blog/how-to-use-nexus-repository-with-maven-deploy-video.html): This short video and outline of steps demonstrate how to deploy Maven from Nexus Repository. (430 words)
- [What is Application Security? | Types, Testing, and Risks](/content/resources/articles/what-is-application-security/index.html): Dive into the essentials of application security. Discover its importance, various types, testing methods and software tools to ensure app protection. (3,021 words)
- [A point of inspiration | Sonatype employee insights](/content/blog/a-point-of-inspiration/index.html): Santi Mulukutla, a Sonatype CSE, shares inspiration from Cynthia Danaher who remained true to her spirit and balanced technical expertise and leadership.  (964 words)
- [Navigate Australia's ISM Guidelines for Secure Development](/content/blog/navigating-australian-ism-guidelines-for-software-development.html): Explore the Australian Cyber Security Centre's Information Security Manual (ISM) guidelines for secure software development and how Sonatype can help. (350 words)
- [Do You View Your AppSec Tools As an Inhibitor to Innovation?](/content/blog/do-you-view-your-appsec-tools-as-an-inhibitor-to-innovation-or-a-safety-measure.html): DevOps is all about making better software faster.  It also requires making it more safely while compressing the time between ideation to realisation (542 words)
- [Sonatype Firewall: Perimeter Defense for Repositories](/content/blog/the-nexus-firewall-perimeter-defense-for-software-development.html): We now have a revolutionary way to improve speed and reduce risk through the quarantine of components with known vulnerabilities using Nexus Firewall. (1,060 words)
- [Malicious npm Packages Expose Sensitive User Information](/content/blog/sonatype-spots-malicious-npm-packages/index.html): Initially found by Sonatype's malicious code detection bots, our researchers have discovered and confirmed the presence of two new vulnerable npm packages. (1,732 words)
- [Developers Gain Feedback with Automated Pull Requests](/content/blog/developers-gain-contextual-feedback-with-automated-pull-request-commenting.html): Pull request comments provide contextual information about the individual branch a developer is working on, and changes that they may have introduced. (608 words)
- [Development Automation You Can Count On | Sonatype Webinar](/content/resources/webinars/automation-webinar/index.html): Discover how modern automation enhances security and streamlines development workflows in our webinar featuring expert insights from Justin Young.,  (72 words)
- [SBOM Regulatory Framework Overview | Sonatype Video](/content/resources/videos/sbom-regulatory-overview/index.html): Explore the components that make up the SBOM regulatory framework. Watch this video to learn more about SBOMs and the regulations around them. (24 words)
- [Lessons Learned Again #npmgate](/content/blog/lessons-learned-again-npmgate/index.html): Find out more around the kik package, the trademark threats, the unpublishing of the left-pad package and the results, check out this recap. (1,234 words)
- [A Tale of Two SDLCs: Rise of the AI-Powered SDLC](/content/blog/a-tale-of-two-sdlcs-rise-of-the-ai-powered-sdlc/index.html): Explore how generative AI is reshaping the software development life cycle, its risks, and what enterprises need to prepare for the AI-powered SDLC. (1,301 words)
- [Kubernetes Containers a Boon for Developers](/content/blog/kubernetes-for-developers/index.html): Kubernetes helps to automate deploying, scaling, and managing multiple containers. It is the most popular container orchestration system in use right now. (635 words)
- [Aether Questions Answered for JAX | Sonatype Blog](/content/blog/2010/08/aether-questions-answered-for-jax/index.html): Learn about Aether, a robust library for interacting with artifact repositories, enhancing interoperability among build tools like Maven, Gradle, and Ant. (958 words)
- [Why Responsible Open Source Use Matters | Sonatype Webinar](/content/resources/webinars/open-letter-on-sustainable-stewardship/index.html): Join industry leaders on a discussion about sustainable stewardship in open source. Explore ways to strengthen software supply chains and vital infrastructure., The Open Letter on Sustainable Stewardship, co-signed by the Python Software Foundation, Rust Foundation, OpenJS, Ruby Central, and others, highlights a... (290 words)
- [Understanding Software Supply Chain Attacks & Key Incidents](/content/blog/what-constitutes-a-software-supply-chain-attack/index.html):  ENISA feels the term software supply chain attack is overused, so what does constitute a supply chain attack?  (1,249 words)
- [Customer Success Story - Tomitribe | Sonatype](/content/customer-stories/tomitribe-and-sonatype-lifecycle/index.html): See how Tomitribe uses Sonatype Lifecycle to automate open source security monitoring, alleviating time-consuming manual processes that inhibit scaling. (563 words)
- [DevSecOps Tools to Build a Security-Minded Development Team](/content/blog/building-a-security-minded-development-team-devsecops-tools-and-sdlc-best-practices.html): Learn actionable strategies to enhance software security. Reduce risk with developer training, DevSecOps strategies, and software security automation. (1,325 words)
- [Fortify by OpenText + Sonatype | Partners](/content/partners/opentext-sonatype-lifecycle/index.html): Learn how Sonatype’s partnership with Fortify by OpenText offers organizations the highest quality data and comprehensive security coverage. (287 words)
- [Open Source Malware Protection Solution | Sonatype](/content/solutions/open-source-malware-protection/index.html): Secure your software supply chain with an open source malware protection solution. Use proactive detection to block malware and threats early in development. (876 words)
- [Bahwan CyberTek Partners with Sonatype to Mitigate Risks](/content/press-releases/bahwan-cybertek-partners-with-sonatype/index.html): Digital transformation specialist Bahwan CyberTek have joined the the Sonatype partner ecosystem.  (544 words)
- [Early Detection, Early Prevention | Sonatype Guide](/content/resources/guides/early-detection-early-prevention/index.html): In this guide, we address common questions around early detection and prevention of intentionally malicious and vulnerable components.  (850 words)
- [Mastering Complex UI Testing: Selenium Strategies for Nexus](/content/blog/2009/09/testing-nexus-with-selenium-a-lesson-in-complex-ui-testing-part-1.html): Learn how to tackle complex UI testing with Selenium, focusing on AJAX-heavy applications and ExtJS, to create robust, future-proof tests. (4,880 words)
- [OWASP Top 10: Insights from Caroline Wong | Sonatype](/content/blog/owasp-top-10-introduction-with-caroline-wong-video/index.html): Caroline Wong shares her perspective on which OWASP Top 10 is particularly relevant today with so many professionals working from home.  (134 words)
- [Spring Framework RCE Vulnerability CVE-2021-22963 and SONATYPE-2022-1764 – Sonatype Support](/content/support/hc/en-us/articles/5164550821011-spring-framework-rce-vulnerability-cve-2021-22963-and-sonatype-2022-1764.html): Please see our blog post for the most up-to-date information regarding the recently discovered Spring Framework RCE vulnerabilities. New... (60 words)
- [sonatype-2022-2601 | Security Details | Sonatype Guide](/content/guide/vulnerability/sonatype-2022-2601/index.html): Technical security analysis for sonatype-2022-2601. CVSS 10.0 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (69 words)
- [Sonatype and SBT Integration | Sonatype Documentation](/content/products/integrations/sbt/index.html): Seamlessly integrate SBT with Sonatype Nexus Repository to enhance build performance and streamline your artifact deployment process. (429 words)
- [Managing 5,000 Jobs in Jenkins: DevOps Best Practices](/content/blog/one-team-5000-jobs-life-in-the-devops-jungle/index.html): This blog series is reviewing sessions from the All Day DevOps conference from November which hosted over 13,500 registered attendees. (537 words)
- [hubfs/white_papers/son-ai-first-20checklist-pdf.html](/content/hubfs/white_papers/son-ai-first-20checklist-pdf.html) (645 words)
- [Automation And Risk Scoring | A Sonatype Success Story](/content/customer-stories/risk-scoring-system/index.html): Explore how a financial services leader reduced critical and high vulnerabilities by 80% using a tailored risk scoring system from Sonatype.  (710 words)
- [Sonatype Strengthens Continuous Delivery with Atlassian](/content/press-releases/strengthen-continuous-delivery-with-atlassian/index.html): Sonatype, the leader in software supply chain automation, today announced new integrations with Atlassian’s product portfolio to better support Continuous. (565 words)
- [Detect Malicious Packages to Secure Software Supply Chains](/content/blog/malicious-package-detection-sonatype-protects-software-supply-chains.html): Learn how Sonatype's SCA tools detect malicious packages and protect the software supply chain with real-time insights and advanced threat intelligence. (835 words)
- [Maven Central: org.apache.servicemix.bundles:org.apache.servicemix.bundles.xerces](/content/central/artifact/org-apache-servicemix-bundles/org-apache-servicemix-bundles-xerces.html): Discover org.apache.servicemix.bundles.xerces in the org.apache.servicemix.bundles namespace. Explore metadata, contributors, the Maven POM file, and more. (198 words)
- [When It Comes to Application Security, Knowledge Matters](/content/blog/when-it-comes-to-application-security-doing-your-homework-matters.html): They say software is eating the world, very true, but it has become even more clear that OSS components are eating the software world. (831 words)
- [Sonatype Platform: 2019 Key Features and Enhancements Recap](/content/blog/nexus-platform-2019-year-in-review/index.html): We look back at features introduced in 2019 across Nexus Repository Manager and Nexus IQ Server (Lifecycle, Lifecycle Foundation, Firewall, and Auditor). 
 (485 words)
- [Modern Vulnerability Management in the Age of AI](/content/blog/modern-vulnerability-management-in-the-age-of-ai/index.html): Vulnerability management is breaking under end-of-life (EOL) risk, data gaps, and AI-driven scale. Learn how to manage modern vulnerability debt. (1,054 words)
- [Sonatype Thwarts Major Software Supply Chain Attack](/content/blog/malware-removed-from-maven-central/index.html): Sonatype removed 3 malicious open-source Java components from Maven Central targeting popular software releases, stopping a software supply chain attack. (1,602 words)
- [Sonatype Firewall Extends Malicious Package Protection](/content/press-releases/sonatype-firewall-extends-malicious-package-protection.html): Sonatype Firewall expanded protection to block malicious packages before they enter any repository environment, safeguarding developers and AI assistants. (478 words)
- [Simplifying Policy Management with Sonatype CLM 1.5 Release](/content/blog/2013/07/announcing-clm-1-5-new-release-simplifies-policy-management.html): Discover how Sonatype CLM 1.5 simplifies policy management with new features like policy import/export, validation, and enhanced threat notifications. (629 words)
- [Nexus Wins in an Objective Comparison of Repository Managers](/content/blog/2012/05/nexus-victorious-in-an-objective-comparison-of-repository-managers.html): Explore a detailed comparison of repository managers, showcasing Nexus Repository's strengths and addressing the nuances of OSS vs. Pro editions. (731 words)
- [For Distributed Teams, It's Not All About the Tools](/content/blog/for-distributed-teams-its-not-all-about-the-tools/index.html): A great distributed team starts with people with strong collaboration skills. The team needs time to understand each other's preferences to deliver value. (1,112 words)
- [Mastering SBOMs: Best Practices](/content/blog/mastering-sboms-best-practices/index.html): Check out Sonatype's recent webinar that sheds light on the importance of software bills of materials (SBOMs) in software development. (384 words)
- [This Week in Malware - July 15th Edition | Sonatype Blog](/content/blog/this-week-in-malware-july-15th-edition/index.html): This Week in Malware we identified over 34 npm and PyPI packages that are dependency confusion candidates, prank packages, or contain PoC reverse shell. (304 words)
- [Russian Hacker Sells 250+ Malicious npm Packages on Telegram](/content/blog/exploit-creator-selling-250-reserved-npm-packages-via-telegram.html): Sonatype Security Research found over 250 npm packages which are lucrative and convincing exploits named after open source from AWS, Microsoft, React. (951 words)
- [Malicious PyPI Package VMConnect Imitates VMware vSphere](/content/blog/malicious-pypi-package-vmconnect-imitates-vmware-vsphere-connector-module.html): A malicious PyPI package ‘VMConnect’ designed to resemble VMware vSphere Connector Module was caught by Sonatype’s automated malware detection systems (596 words)
- [Mitchell Johnson Named Chief Product Development Officer](/content/press-releases/sonatype-names-mitchell-johnson-chief-product-development-officer.html): Sonatype bolsters its leadership team with the addition of Mitchell Johnson as Chief Product Development Officer.  (398 words)
- [Efficient Interaction With the Central Maven Repository](/content/blog/2008/12/central-repository-downloading-the-nexus-index/index.html): Efficient Interaction with the Central Maven Repository: Downloading the Nexus Index (938 words)
- [Anatomy of a Continuous Delivery Pipeline](/content/blog/anatomy-of-a-continuous-delivery-pipeline/index.html): Kamalika Majumder explains the anatomy of a continuous delivery pipeline, its benefits, and five key principles to shape and refine it. (721 words)
- [Oracle Issues Critical Security Bug Fixes for Databases](/content/blog/2012/04/oracle-issues-critical-security-bugs-for-databases-glassfish-and-more.html): Oracle Issues Critical Security Bug Fixes for Databases, Glassfish, and more. (367 words)
- [Sonatype Learning & Development | Courses and Workshops](/content/learning-and-development/index.html): Explore Sonatype learning and development resource to enhance your understanding of Sonatype solutions. Unlock your potential and register a workshop. (629 words)
- [Meet an Open Source Contributor: Jeffry Hesse](/content/blog/meet-an-open-source-contributor-jeffry-hesse/index.html): Meet Jeffry Hesse, one of the incredible open source contributors at Sonatype. (775 words)
- [Switching from SVN to Git: A Comprehensive Guide](/content/blog/2011/04/goodbye-svn-hello-git/index.html): Switching from SVN to Git improves branch management, latency issues, and patch submissions. Learn how Sonatype transitioned its repositories with detailed steps. (964 words)
- [Enable Automated Pull Requests in Atlassian Bitbucket](/content/blog/keep-applications-secure-in-bitbucket-with-automated-pull-requests.html): The Nexus Lifecycle/Atlassian Bitbucket integration automates pull requests, fixing security vulnerabilities and maintaining the quality of dependencies. (524 words)
- [Maven Central: xerces:xmlParserAPIs](/content/central/artifact/xerces/xmlparserapis/versions/index.html): Discover xmlParserAPIs in the xerces namespace. Explore metadata, contributors, the Maven POM file, and more. (16 words)
- [hubfs/son_nexusfirewall_infographics_2019-pdf.html](/content/hubfs/son_nexusfirewall_infographics_2019-pdf.html) (302 words)
- [DevOps Requires an Optimized Application Delivery Tool Chain](/content/blog/2013/11/devops-requires-an-optimized-application-delivery-tool-chain.html): Optimizing your DevOps tool chain is essential for efficient application delivery, balancing technology and process to enhance productivity. (898 words)
- [Empowering Women in Tech: Insights from Sonatype](/content/blog/open-source-and-diversity-in-tech-womensonatype/index.html): Celebrating International Women's Day (March 8), the Women@Sonatype group discusses community, recruiting, onboarding, inclusion, and beyond. (1,477 words)
- [Axios Compromise on npm Introduces Hidden Malicious Package](/content/blog/axios-compromise-on-npm-introduces-hidden-malicious-package.html): Malicious axios versions introduced a hidden dependency, exposing systems via npm supply chain attack, targeting trusted packages and dependencies. (1,086 words)
- [Alef Education Shifts Left | A Sonatype Success Story](/content/customer-stories/alef-education/index.html): Alef Education enhances developer productivity and security by implementing a shift-left strategy, saving 300 hours monthly. Learn more in this success story. (828 words)
- [Wicked Good Development: Evolution of Supply Chain Attacks](/content/blog/wicked-good-development-evolution-supply-chain-attacks.html): This episode looks at how fraud detection and supply chain attacks are similar, the data science behind these systems, and developer behavior., For this episode, Jamie Whitehouse, Director of Product Management at Sonatype, joins Kadi as guest host. With the unique perspectives of a Product Manager, Engineering Manager Daryl Handley, Data Scientist Cody Nash, and principal Engineer AJ Brown, we dissect the evolution of software supply chain attacks and lessons learned. We’ll dive into how credit card fraud detection and supply chain attack detection is similar, the data science behind these systems, and the behavior of the developers.
Check out the resources from today's episode here.  (5,753 words)
- [org.exist-db.thirdparty.xerces/xercesImpl… | Sonatype Guide](/content/guide/component/maven/org-exist-db-thirdparty-xerces-xercesimpl/2-12-2.html): Comprehensive security analysis for org.exist-db.thirdparty.xerces/xercesImpl version 2.12.2. Max vulnerability severity: 9.8 CVSS. License: Apache-2.0. View d… (40 words)
- [Cybersecurity Executive Order: Everything You Need to Know](/content/blog/bidens-executive-order-on-improving-national-cyber-defense-everything-i-need-to-know-i-learned-in-kindergarten.html): Biden's Cybersecurity Executive Order, set to change secure development processes in the US, is actually quite simple to understand. (998 words)
- [The Developer's Hippocratic Oath in the Age of AI | Sonatype](/content/blog/the-developers-hippocratic-oath-in-the-age-of-ai/index.html): Explores the Developer's Hippocratic Oath in the AI era, balancing speed with responsibility, owning code, and demanding smarter, context-aware tools. (888 words)
- [Internet of Things Cybersecurity Improvement Act of 2017](/content/blog/internet-of-things-cybersecurity-improvement-act-of-2017.html): Senators propose the Internet of Things Cybersecurity Improvement Act of 2017 to enhance security standards and protect consumer data and privacy. (736 words)
- [Log4Shell log4j Vulnerability CVE-2021-44228 Status – Sonatype Support](/content/support/hc/en-us/articles/4412678269971-log4shell-log4j-vulnerability-cve-2021-44228-status.html): . As of Friday Dec 10, 2021, deep dive research information about CVE-2021-44228 was published into Sonatype Data Services. Scans by... (344 words)
- [A New OpenSSL Vulnerability Is Coming - Get Ready to Patch](/content/blog/a-new-openssl-vulnerability-is-coming-get-ready-to-patch.html): On Tuesday 1st of November, between 1-5pm UTC a new version of the widely adopted OpenSSL 3.x series will be released for general consumption. (523 words)
- [AI Model Security: Open Source ML Threats | Sonatype](/content/blog/open-source-ml/ai-models-attackers-next-potential-target/index.html): Explore AI model security risks as open-source ML models become prime targets, including machine learning threats and AI attacks on vulnerable model pipelines. (1,208 words)
- [Sonatype Software Protects Enterprise Software Applications](/content/press-releases/sonatype-protects-enterprises-from-vulnerabilities/index.html): Sonatype releases new CLM version for secure, compliant software development. Learn more. (468 words)
- [Sonatype Spots 275+ Malicious npm Packages Copying Recent Attacks](/content/blog/sonatype-spots-150-malicious-npm-packages-copying-recent-software-supply-chain-attacks.html): 48 hours after a security researcher breached 35+ tech companies in a software supply chain attack, Sonatype’s Nexus Intelligence flagged 150+ copycat. (1,541 words)
- [Sonatype's 2022: A Year-End Recap](/content/blog/sonatypes-2022-the-year-in-review/index.html): 2022 was quite the year. Sonatype continued to push the boundaries of open source, gave back to our communities, expanded our team, and so much more. (1,193 words)
- [npm Registry Support for All](/content/blog/2014/10/npm-registry-support-for-all/index.html): Continuing our commitment to the open source community we are taking Nexus OSS to another level. After adding NuGet support in Nexus 2. (353 words)
- [Nomura and Sonatype | A Customer Success Story](/content/customer-stories/nomura/index.html): Nomura transformed its software supply chain by achieving a 630% increase in scanning rates, enhancing security and automation throughout the SDLC. (724 words)
- [What is a Software Bill of Materials | Sonatype](/content/resources/articles/what-is-software-bill-of-materials/index.html): A software bill of materials (SBOM) lists all packages and libraries included in an application. Learn how SBOMs make software supply chains more secure. (901 words)
- [Using Sonatype Nexus Repository 3: Maven Artifacts | Sonatype](/content/blog/using-sonatype-nexus-repository-3-part-1-maven-artifacts.html): This article is the first in a three part series by one of our community advocates, Rafael Eyng. (557 words)
- [Accelerate Secure Releases With Microsoft Copilot and Sonatype Guide](/content/blog/accelerate-secure-releases-with-microsoft-copilot-and-sonatype-guide.html): Learn how to pair Microsoft Copilot with Sonatype Guide to accelerate secure releases with real-time dependency intelligence and policy guardrails. (962 words)
- [Struts One-Two Punch Knocks Out India](/content/blog/struts-one-two-punch-knocks-out-india/index.html): The social security system of India, AADHAAR, was just breached due to a Struts related vulnerability exploited on their website. (402 words)
- [DevSecOps: Hope Is Not a Strategy](/content/blog/devsecops-hope-is-not-a-strategy/index.html): Hope is not a strategy when it comes to DevSecOps.  Here are three ways to start your journey. (399 words)
- [Explore Sonatype Lifecycle's Improved Jira Add-On](/content/blog/nexus-lifecycle-improved-jira-add-on/index.html): Nexus Lifecycle's new JIRA add-on with violation reporting eliminates the admin overhead of managing fixes. (310 words)
- [DevOps At Massive Scale](/content/blog/devops-at-massive-scale/index.html): When you have a billion users, people notice.  That’s where our story about DevOps and Yahoo! starts. (650 words)
- [Legal at DevOps Speed](/content/blog/2015/04/legal-at-devops-speed/index.html): Paul is not part of our development team, he doesn’t want to be, and he certainly does not slow them down. (386 words)
- [The Future of Maven and OSGi: Enhancing Tycho for Eclipse Development](/content/blog/2009/03/the-future-of-maven-osgi-join-the-tycho-users-mailing-list.html): Discover the future of Maven and OSGi with Tycho, and join the conversation to shape its development. Get involved through the Tycho mailing list. (558 words)
- [Stop the Low-Quality Contribution Plague](/content/blog/stop-the-low-quality-contribution-plague/index.html): You’ve heard the phrase.  Today we talk about how to actually low quality when contributing to open source projects. (936 words)
- [Removing Search Guard from the Central Repository | Sonatype Blog](/content/blog/search-guard-central-repository/index.html): Due to an intellectual property dispute between two third parties, Sonatype is legally required to remove disputed artifacts related to Search Guard. (646 words)
- [Cyber Mayhem: Zero-Days in Confluence and Fortinet](/content/blog/cyber-mayhem-attackers-actively-exploit-vulnerable-confluence-servers.html): Last week severe zero-days in Atlassian Confluence, Fortinet devices, and Microsoft Office all needed patching following active exploits.  (953 words)
- [New Maven Archetypes in Nexus OSS and When to Use Them](/content/blog/2011/04/archetypes-new-in-nexus-oss-and-when-to-use-archetypes.html): Discover how Maven Archetypes and Nexus OSS can streamline your project setups in both open source and internal development scenarios. (1,247 words)
- [AI-First Software Delivery Readiness Checklist | Sonatype](/content/resources/whitepapers/ai-first-software-delivery-checklist/index.html): Evaluate your organization's readiness for AI-first software delivery with our comprehensive checklist to ensure security, compliance, and developer productivity. (2,008 words)
- [Modern Strategies to Accelerate Dependency Management](/content/blog/strategies-to-accelerate-dependency-management-for-modern-enterprise-software-development.html): Explore effective practices to accelerate software dependency management in enterprise software development even in the face of evolving malicious threats (1,218 words)
- [Sonatype Lifecycle: Assisted Remediation Product Tour](/content/resources/product-tours/lifecycle-assisted-remediation/index.html): Discover how Sonatype Lifecycle's assisted remediation streamlines vulnerability fixes with automated fixes, ensuring your software remains secure. (36 words)
- [The Weakest Link is Your Supply Chain: Just Ask The Pentagon](/content/blog/the-weakest-link-might-be-your-supply-chain-just-ask-the-pentagon.html): The Pentagon is prioritizing supply chain security in DoD contracts, emphasizing the importance of safeguarding operational and software assurance.  (445 words)
- [Trust at Machine Scale: Navigating AI, Security, and the Commons](/content/blog/trust-at-scale-the-commons-threats-and-ai-in-the-loop.html): Explore key insights on AI integration, operational reality, and security threats from Sonatype's 2026 State of the Software Supply Chain® Report.  (926 words)
- [A Data-Driven Look at Open Source Risk Management | Sonatype](/content/blog/data-driven-look-at-open-source-risk-management/index.html): Get insights, background, and data and key takeaways from the 8th Annual State of the Software Supply Chain report. Hosted by Dr. Stephen Magill. (229 words)
- [Apache Kafka Typosquats Expose Data Theft Tactics](/content/blog/this-week-in-malware-apache-kafka-typosquats-shorthand-data-exfiltration.html): This Week In Malware—May 6th edition: Apache Kafka typosquat, and a simple distraction technique. (620 words)
- [State of the Software Supply Chain Reveals Best Practices](/content/press-releases/2019-state-of-the-software-supply-chain-report/index.html): 2019 Software Supply Chain Report: Best practices from 36,000 OSS and 12,000 commercial teams, with Gene Kim and Dr. Stephen Magill. (718 words)
- [Maven Integrations for Sonatype Solutions](/content/products/integrations/maven/index.html): Enhance your Apache Maven builds with Sonatype integrations, enabling secure dependency management, policy enforcement, and efficient artifact publishing. (480 words)
- [Sonatype Nexus Repository Performance, Compatibility and Browsing](/content/blog/2011/04/nexus-1-9-performance-compatibility-and-dependency-browsing.html): Discover the latest features and improvements in Sonatype Nexus Repository, enhancing performance, compatibility, and dependency browsing for Maven users. (901 words)
- [SBOM Software Acquisition & Secure Procurement | Sonatype](/content/blog/how-sboms-power-secure-software-acquisition/index.html): SBOMs and SCA are transforming software acquisition. Learn why software transparency and secure procurement are now essential for resilient supply chains. (665 words)
- [Software Supply 
Chain Maturity](/content/resources/state-of-the-software-supply-chain-2022/software-supply-chain-maturity/index.html): Sonatype conducted a survey to measure the use of OSS components, dependency management, job satisfaction, and more. Let's dig into the data. (1,938 words)
- [Maven Central: Embracing Sigstore for Better Security](/content/blog/maven-central-and-sigstore/index.html): Sonatype has been investing heavily in Maven Central, modernizing the platform & providing a developer experience of contemporary software registries. (404 words)
- [How Lazarus Group is Weaponizing Open Source | Sonatype](/content/resources/whitepapers/how-lazarus-group-is-weaponizing-open-source/index.html): Discover how North Korea-Baked Lazarus Group is exploiting open source to infiltrate software supply chains, targeting developers with malware. (224 words)
- [Sonatype Nexus Firewall Now Protects JFrog Artifactory](/content/press-releases/sonatypes-nexus-firewall-now-protects-jfrog-artifactory.html): Nexus Firewall now available for JFrog users, preventing vulnerable open source components in repositories. (374 words)
- [Best Practices for Migrating from Apache Ant to Maven](/content/blog/2012/08/best-strategy-for-migrating-from-apache-ant-to-apache-maven.html): Migrating from Ant to Maven? Start with a repository manager to streamline dependencies, minimize downtime, and ensure a smoother build process transition. (1,300 words)
- [One Year of the DORA Regulation | Sonatype Webinar](/content/resources/webinars/one-year-of-dora/index.html): Explore expert insights on operational resilience and digital risk management in the first year of the EU’s Digital Operational Resilience Act (DORA)., It’s been one year since the Digital Operational Resilience Act (DORA) went into force. With enforcement now real, not theoretical, organizations are be... (201 words)
- [Quality Data Is Critical for Software Composition Analysis](/content/blog/why-high-quality-data-is-critical-for-effective-software-composition-analysis.html): Discover how high-quality data in Sonatype's SCA solutions enhances developer productivity and security by reducing false positives for faster remediation. (898 words)
- [The bottom line in the Maven-Ant debate](/content/blog/2010/03/the-bottom-line-in-the-maven-ant-debate/index.html): Discover the ongoing debate between Maven and Ant, focusing on the benefits of Maven's standardization in build systems and its impact on productivity. (229 words)
- [npm Software Supply Chain Attack Highlights New Risks](/content/blog/ongoing-npm-software-supply-chain-attack-exposes-new-risks.html): Sonatype uncovers a wormable npm software supply chain attack compromising over 180 packages, following S1ngularity and Chalk/Debug campaigns. (1,036 words)
- [npm Packages @rspack/core and vant Compromised by Attack](/content/blog/npm-packages-rspack-vant-compromised-blocked-by-sonatype.html): Npm packages @rspack/core and @rspack/cli were hijacked to deploy Monero miners. Sonatype's malware detection systems caught the attack. Learn more. (929 words)
- [Lazarus Group's Latest: Brandjacking Campaign on npm](/content/blog/lazarus-groups-latest-brandjacking-campaign-on-npm/index.html): Lazarus Group-linked npm packages used brandjacking tactics to impersonate trusted tools, delivering malware that compromises software supply chains. (1,200 words)
- [PyPI Malware Attack Targeting Python Developers | Sonatype](/content/blog/crytic-compilers-typosquats-known-crypto-library-drops-windows-trojan.html): Sonatype uncovered a PyPI malware attack using a fake Python package tied to the Russia-linked Lumma trojan malware targeting developers. Learn how it works. (807 words)
- [Best Practices in Dependency Management: Cooking Code](/content/blog/best-practices-in-dependency-management-cooking-a-meal-of-gourmet-code.html): Close to 85% of every application is open source software. Better understanding your software supply chain starts with understanding dependency management. (1,015 words)
- [Sonatype Statement: Struts2 and Equifax Breach](/content/blog/sonatype-statement-struts2-and-equifax-breach/index.html): Organizations like Equifax who leverage open source are responsible for practicing hygiene in a timely manner when fixes for vulnerabilities are available. (421 words)
- [Malicious npm Packages Mimic 'Colors' Library | Sonatype](/content/blog/malicious-npm-colors-typosquats-pack-discord-malware.html): Sonatype has caught newer typosquats of the popular 'colors' npm library that contain Discord info-stealing malware. (776 words)
- [Enhance Security with Continuous Authorization in DevSecOp](/content/blog/continuous-authorization-with-devsecops/index.html): Continuous Authentication is a dynamic process that examines attributes that change and continually validates them. Hasan Yasar explains the DevSecOps fit. (534 words)
- [Sonatype Lifecycle XC is now available | Sonatype blog](/content/blog/nexus-lifecycle-xc-is-now-available/index.html): Discover the new Sonatype Lifecycle XC and its expanded language support, essential for secure and efficient open source governance. Learn more today. (239 words)
- [Explore OpenSSL Vulnerabilities CVE-2022-3786 & CVE-2022-3602](/content/blog/what-the-openssl-vulnerabilities-are-and-arent/index.html): It’s been a week since we were warned about the OpenSSL vulnerability. We're here to help you understand what this vulnerability is and what it is not.
 (1,030 words)
- [Benefits of Repository Managers: Continuous Build Deployment](/content/blog/2010/08/benefits-of-a-repository-manager-part-iii-continuous-build-deployment.html): Benefits of a Repository Manager: Part III Continuous Build Deployment (1,042 words)
- [State of the Software Supply Chain: Dependency Management](/content/blog/2021-state-of-the-software-supply-chain/index.html): As Open Source Continues to Fuel Digital Transformation, Sonatype's 2021 Software Supply Chain Report Reveals Important Trends
 (674 words)
- [Security Processes at the Apache Software Foundation](/content/blog/security-processes-at-the-apache-software-foundation.html): In our series on the Struts2 vulnerability and the breach at Equifax, we spoke with Mark Thomas, Director, Apache Software Foundation. Get the insights. (195 words)
- [Mastering Repository Health Check 2.0 in Nexus Repository](/content/blog/how-to-use-the-new-repository-health-check-2-0.html): Learn how to install and use the Repository Health Check (RHC) 2.0 in the Sonatype Nexus Repository in this step-by-step guide. (435 words)
- [All Day DevOps: Practitioner-to-Practitioner](/content/blog/all-day-devops-practitioner-to-practitioner/index.html): All Day DevOps will deliver 57 practitioner-led sessions over 15 hours and 15 time zones. No vendor pitches are allowed.  (513 words)
- [Optimize SBOM Sharing: Best Practices for Compliance](/content/blog/optimizing-sbom-sharing-for-compliance-and-transparency.html): Explore SBOM sharing and learn how to enhance compliance, transparency, and security in software supply chains through effective use of SBOMs. (807 words)
- [CRA and AI Regulation: What's Next for Software Compliance?](/content/resources/webinars/cra-and-ai-regulation/index.html): This webinar explores how regulations like the EU Cyber Resilience Act (CRA) and AI governance frameworks are changing software compliance and security. , Navigate the new era of software compliance and turn regulatory shifts into your strategic advantage.

As innovation accelerates, the landscape of softw... (313 words)
- [How to SafeGuard Your Software Supply Chain | Sonatype Webinar](/content/resources/webinars/safeguarding-your-software-supply-chain/index.html): Discover strategies to mitigate open source risks in your software supply chain with insights from industry experts. Watch the on-demand webinar now., In 2023, an alarming 96% of vulnerabilities found in open source downloads were actually avoidable. Shockingly, poor consumption practices led to a stag... (188 words)
- [CVE-2017-8046: Remote Code Execution in Pivotal Spring](/content/blog/remote-code-execution-vulnerability-cve-2017-8046-in-pivotals-spring-framework.html): A remote code execution vulnerability (CVE-2017-8046) in Pivotal's popular Spring Framework was disclosed last week, although the original vulnerability. (358 words)
- [Minimize Namespace Confusion and Risk with Nexus Repository](/content/blog/namespace-confusion-minimizing-risk-with-nexus-repository.html): Nexus Repository (NXRM) can help minimize your risk against namespace confusion with a feature called repository routing rules.
 (410 words)
- [21 SaltStack Breaches in May and 2,900 Still Exposed](/content/blog/saltstack-20-breaches-within-four-days/index.html): When a vulnerability is announced in an open source project, ask immediately: have we ever used that open source component, and (if yes) where is it? (1,422 words)
- [Community Updates: Nancy Has a New Ship and Found oysteRs](/content/blog/docker-nancy-oyster-now-available/index.html): Nancy checks for vulnerabilities in your Golang dependencies, powered by Sonatype OSS Index and Nexus IQ Server. Another community contribution is oysteR.
 (380 words)
- [Secure Claude Projects with Sonatype Guide | Video](/content/resources/videos/sonatype-guide-and-claude/index.html): Enhance Claude development with real-time open source intelligence powered by Sonatype Guide. Help Claude select safer dependencies automatically.
 (396 words)
- [No-Fix Mediums? No High Priorities Doesn't Mean Low Danger](/content/blog/the-no-fix-mediums-not-having-a-high-priority-doesnt-mean-low-danger.html): An ongoing weak link in the software supply chain is vulnerable software – are you being proactive or just putting out fires? (1,008 words)
- [Sonatype CEO Presents at JMP Securities Tech Conference](/content/press-releases/wayne-jackson-at-the-jmp-2018-security-tech-conference.html): Sonatype CEO Wayne Jackson to present at the JMP Securities 2018 Technology Conference, highlighting the company's leadership in open source governance. (213 words)
- [Sonatype Launches in AWS Marketplace | Sonatype](/content/press-releases/sonatype-launches-in-aws-marketplace/index.html): Sonatype is now available in AWS Marketplace to help customers automate software supply chain security. 
 (520 words)
- [Exploring Nexus, Maven 3, and Automated Testing Insights](/content/blog/2009/10/21-in-other-news/index.html): Weekly roundup blog posts with rich insights on Maven 3's polyglot features, automated performance testing, and more. Explore insights now. (373 words)
- [Designing Effective Teams for Modern Software Systems](/content/blog/how-and-why-to-design-your-teams-for-modern-software-systems.html): Matthew Skelton discusses team topologies. A team's communication and collaboration styles will influence a software product. Are you maximizing yours? (823 words)
- [Achieving CI/CD With Kubernetes](/content/blog/achieving-ci/cd-with-kubernetes/index.html): This article explores two interesting pieces technology: Jenkins, a popular CI/CD tool, and Kubernetes, a popular orchestration engine for containers. (1,461 words)
- [Sonatype Named to JMP Securities Super 60 List of Companies](/content/press-releases/sonatype-jmp-super-60/index.html): Sonatype makes JMP Securities’ Super 60 list again as a top internet security and software company. (505 words)
- [Wicked Good Development: The Impact of Vulnerability Drills](/content/blog/wicked-good-development-vulnerability-drills/index.html): To prepare for the unexpected, check your code and run vulnerability drills to create muscle memory for engineering teams and build better software.
, In this episode, Kadi and Omar sit down and chat with members of the Developer Relations team at Sonatype to discuss the value in engineering teams doing vulnerability drills. We now live in a world where it's not a matter of if you will get attacked, it’s now a matter of when you will get attacked. So what can you do to protect yourself when that does happen? Learn why this shouldn’t be viewed as an incident response but more as streamlining your operational and engineering levels that need to be in lockstep with one another.
Check out the resources from today's episode here.  (7,066 words)
- [Kenna Security & Sonatype Enhance Vulnerability Management](/content/press-releases/kenna-security-and-sonatype-partner/index.html): Sonatype and Kenna Security partner to boost enterprise vulnerability management with top-tier open source intelligence. (624 words)
- [Meet Frank Tingle: Values Champion](/content/blog/meet-frank-tingle-values-champion/index.html): Meet Frank Tingle, Sales Engineering Manager, and a peer-nominated Values Champion. (3,016 words)
- [New Threats to Open Source: The Event-Stream Hack Unveiled](/content/blog/open-source-software-is-under-attack-new-event-stream-hack-is-latest-proof.html): Open source software is under attack, and the malicious attack on the popular npm event-stream 3 package, is just the latest proof. (824 words)
- [Sonatype Nexus Repository Supports Your Gradle Builds](/content/blog/2012/06/does-nexus-pro-support-your-gradle-builds-yes-it-does.html): Learn how to configure Gradle builds with Sonatype Nexus Repository using simple projects in this evaluation guide. Get started today. (220 words)
- [Streamline Your Debian Development | APT Support](/content/products/language-support/apt-debian/index.html): Streamline your Debian APT package management with Sonatype Nexus Repository, enhancing delivery speed and continuity across your development teams. (444 words)
- [Maven Central: Search](/content/central/search/index.html): Search and discover Java packages with our advanced search functionality. (770 words)
- [Banking on built-in security checks | Sonatype Blog](/content/blog/banking-on-built-in-security-checks/index.html): Financial services firms are enhancing security by integrating automatic security checks early in the development cycle, reducing risks through DevOps. (471 words)
- [DevOps and Opportunities in Software Supply Chain Governance](/content/blog/devops-and-opportunities-in-software-supply-chain-governance.html): Governance has been an evil word for developers but new approaches unlock massive gains in productivity, reductions in cost, improvements in quality. (996 words)
- [CVE Program Leaves Vulnerabilities Unscored | Sonatype](/content/press-releases/sonatype-intelligence-report-cve-crisis/index.html): Sonatype report reveals major flaws in the CVE system, which found that nearly two-thirds of vulnerabilities disclosed lacked severity scores. Learn more. (809 words)
- [Wicked Good Development: Overview of Devnexus Conversations](/content/blog/wicked-good-development-dev-nexus-part-1/index.html): At our roundtable discussion on Devnexus 2022, we get a chance to interview two more developers who contribute to the open source community., This episode is the first in a mini-series from our experience at Devnexus 2022. It was an exciting time to learn from developers and capture wisdom from the open source community.  The life of a contributor told by Maarten Mulders, Consultant, Trainer, and Technology Advocate at Info Support, plays out on Wicked Good Development during DevNexus 2022. Considering Apache Maven to be the cornerstone for Java development, hear how Maarten navigates fixing bugs, avoiding build breaks, and Java derivative languages.
Check out the resources from today's episode here.  (4,608 words)
- [Open Publishing, Commercial Scale](/content/blog/open-publishing-commercial-scale/index.html): Open source registries are evolving for commercial-scale use. Learn why Maven Central publishing limits aim for open access and sustainable infrastructure. (1,331 words)
- [New Critical Log4j 1.x CVEs and Chainsaw Vulnerability](/content/blog/new-log4j-1-x-cves-and-critical-chainsaw-vulnerability-what-to-do.html): Apache disclosed 3 vulns impacting Log4j 1.x versions, which included info on a critical Apache Chainsaw vulnerability buried within.  (854 words)
- [Sonatype Nexus Repository 1.3.2: New Features and Enhancements](/content/blog/2009/04/announcing-nexus-pro-132/index.html): Discover the new features in Sonatype Nexus Repository 1.3.2, including backup tasks, Maven settings templates, and improved artifact upload capabilities. (673 words)
- [Diving Into Open Source Dependencies | Sonatype Podcast](/content/resources/podcasts/software-dependencies-101/index.html): Learn how modern developers build software with open source dependencies, why they matter, and how to manage and secure complex dependency trees. (5,891 words)
- [How DevOps Pioneers are Leading Organizational Change | Sonatype](/content/resources/webinars/how-devops-pioneer-change/index.html): Discover how DevOps pioneers are transforming organizational change with insights from Gene Kim on the integration of infosec, AI, and innovative strategies., How information security integrates into the work of others is very different than it was ten years ago — we now integrate into the daily work of develo... (350 words)
- [Open Source Malware Index: Surge in High-Severity Attacks](/content/blog/open-source-malware-index-q3-2025/index.html): Sonatype's Q3 2025 Malware Index reveals a 140% surge in open source malware and rising high-severity attacks targeting developers and AI. (980 words)
- [Mythos Found 10,000 Vulnerabilities. The Bigger Challenge Is Fixing Them](/content/blog/mythos-found-10000-vulnerabilities-the-bigger-challenge-is-fixing-them.html): Learn how to become Mythos-ready with automated remediation, policy-driven governance, and machine-speed software supply chain security. (1,352 words)
- [Nexus Delivers Repository Health Check and Git LFS Support](/content/blog/nexus-repository-3-3-delivers-git-lfs-and-new-component-intelligence.html): Sonatype is excited to announce the availability of Nexus Repository 3.3 in OSS and Pro editions with Git LFS and Repository Health Check enhancements (502 words)
- [DCAI and Sonatype | Enhancing Software Supply Chain Security](/content/customer-stories/dcai/index.html): DCAI swiftly secured its national AI supercomputer by implementing the Sonatype platform, ensuring safe and secure access to open source components. (903 words)
- [Financial Giant Cuts Vulnerability MTTR | Sonatype Success Story](/content/customer-stories/financial-giant-reduces-remediation-time/index.html): Explore how a global financial giant reduced its vulnerability remediation time by 75% and enhancing developer efficiency through automation. (888 words)
- [Make Nexus Part of the DevOps Dozen](/content/blog/2015/08/make-nexus-part-of-the-devops-dozen/index.html): Nominate Sonatype Nexus for the DevOps Dozen awards and recognize it as your top artifact repository manager. Show your support and vote before August 12th. (224 words)
- [Maven Central Grows Up - See the History | Sonatype Blog](/content/blog/2011/07/central-grows-up-see-the-history/index.html): Discover the evolution of Maven Central, its significance in the developer community, and the impressive legacy of its original hosting machine. (482 words)
- [The Cost to DevOps: 27 Mufflers](/content/blog/2015/07/the-cost-to-devops-27-mufflers/index.html): Imagine that you are designing the 2016 Range Rover line of sport utility vehicles. Like all gas powered vehicles, each one needs an exhaust muffler. (887 words)
- [SBOM SOS: 6 Things to Do Right Now | Sonatype Guide](/content/resources/guides/sbom-sos-6-things-to-do-right-now/index.html): Discover essential strategies for effective SBOM management to enhance compliance, reduce vulnerabilities, and secure your software supply chain. (1,041 words)
- [The Time Is Now to Prepare for CRA Enforcement](/content/blog/the-time-is-now-to-prepare-for-cra-enforcement/index.html): Prepare for the Cyber Resilience Act. Learn how to meet CRA requirements with SBOMs, risk management, incident response, and secure software supply chains. (927 words)
- [Software Supply Chain Management: Understanding the Basics](/content/resources/software-supply-chain-management-part-4-understanding-the-basics.html): Explore how software supply chain management reduces security risks and maintains integrity while enhancing workflows in this comprehensive guide. (3,809 words)
- [EMEA SBOM Regulatory Requirements | Video](/content/resources/videos/emea-sbom-requirements/index.html): Learn about new regulations in Europe that will require organizations to produce software bills of materials (SBOMs). (21 words)
- [GDPR One Year On: Increasing Demand for "Security By Design"](/content/blog/gdpr-one-year-on/index.html): GDPR's influence is becoming more and more evident in software development. What comes next for teams in the EU and elsewhere as the policy turns 1?  (681 words)
- [5 Technologies You Need for Life Cycle Container Security](/content/blog/understanding-nexus-container-5-technologies-you-need-for-full-life-cycle-container-security.html): Say hello to Nexus Container and explore the five technologies you need for full life cycle container security. (710 words)
- [Diving into Software Supply Chain Security | Sonatype Webinar](/content/resources/webinars/software-supply-chain-security-with-f5-docker/index.html): Discover how to enhance software supply chain security and development velocity in this webinar featuring expert insights from Docker, F5, and Sonatype., Mastering Software Supply Chain Security with F5, Docker, and Sonatype AI is accelerating software development, boosting code output and pushing teams t... (211 words)
- [The Atlassian Story With Guest Tim Pettersen](/content/blog/2014/07/the-atlassian-story-with-guest-tim-pettersen-on-nexus-live.html): Join us on July 31 to hear Atlassian's Tim Pettersen discuss future releases and using Sonatype Nexus Repository for managing open source projects. (162 words)
- [Sonatype Firewall Advances DevSecOps with RubyGems & RPM](/content/press-releases/sonatype-nexus-firewall-advances-devsecops-with-rubygems-rpm-support.html): Sonatype, the leader in open source governance and DevSecOps automation, today announced that Nexus Firewall now supports RubyGems and RPM components. (500 words)
- [The 2 Billion Hack: npm Compromised Packages | Sonatype Video](/content/resources/videos/npm-compromised-packages/index.html): Learn how attackers compromised popular npm packages like Chalk and Debug, affecting billions of downloads. Watch this video for insights on the attack. (65 words)
- [Merge Parent and Child POM Settings in Maven Plugin Config](/content/blog/2007/06/how-to-merge-sub-items-from-parent-pom-to-child-pom-in-a-maven-plugin-configuration.html): Understand how to merge sub-items from Parent POM to Child POM in Maven plugin configuration to avoid potential issues and ensure proper inheritance. (225 words)
- [Personally, I have always been a fan of bribery | Sonatype blog](/content/blog/2013/05/personally-i-have-always-been-a-fan-of-bribery/index.html): Tips on enhancing collaboration between security and development teams using Sonatype CLM to align goals and streamline agile development. (399 words)
- [How MOSA Principles Are Transforming DoD Cybersecurity and RMF](/content/blog/how-mosa-principles-will-reshape-the-dod-rmf/index.html): Learn how integrating MOSA principles with the DoD Risk Management Framework enables faster authorized cybersecurity for defense systems. (1,274 words)
- [Thoughts on Modern Software Supply Chain Security | Sonatype](/content/blog/thoughts-on-security/index.html): A conversations about government vs public software security, the OWASP Top 10 and common security patterns in large scale projects. (380 words)
- [@fairwords/websocket 1.0.39 | Sonatype Guide](/content/guide/component/npm/40fairwords-2fwebsocket/1-0-39.html): Comprehensive security analysis for @fairwords/websocket version 1.0.39. Max vulnerability severity: 7.1 CVSS. License: Apache-2.0. View dependencies, vulnerab… (26 words)
- [Struts2 Breach at Equifax Was 100% Preventable. Here's How](/content/blog/struts2-breach-at-equifax-was-100-preventable-heres-how.html): The breach at Equifax is a siren call for organizations to approach the problem of managing open source software by using automated technology. (139 words)
- [Software Security Has to Start at Assembly](/content/blog/shift-left-is-no-longer-early-enough-for-software-security.html): Shift left is not enough. Learn why software supply chain security must start at assembly time, governing dependencies, AI, and risk before code is built. (1,161 words)
- [Automating Risk Management | A Sonatype Success Story](/content/customer-stories/payments-leader-automates-risk-management/index.html): See how a global payments org enhanced its software security by automating risk management and eliminating vulnerabilities from containerized environments. (783 words)
- [2023 State of the Software Supply Chain Report](/content/state-of-the-software-supply-chain/2023/introduction/index.html): Explore our 9th report on open source adoption, AI/ML's role, and fixable vulnerabilities in software security. (746 words)
- [What is Central? | Sonatype Blog](/content/blog/2012/01/what-is-central/index.html): Learn about Maven Central, its importance in Java open source development, and explore a video overview provided by Sonatype. (107 words)
- [New Sonatype Security Solution for Go Programming Language](/content/press-releases/sonatype-goes-long-with-go/index.html): Sonatype Nexus now supports Go (Golang), simplifying package management and security for Go developers. (723 words)
- [Prioritizing and Automating for Optimal Developer Velocity](/content/blog/prioritizing-and-automating-for-optimal-developer-velocity-and-business-outcomes.html): Learn how prioritization and automation in software development can enhance developer velocity and business outcomes for financial services professionals. (659 words)
- [Groovy Language Support for Secure Builds | Sonatype](/content/products/language-support/groovy/index.html): Manage and secure Groovy dependencies efficiently across the software supply chain, ensuring reliable builds and faster development in modern JVM ecosystems. (472 words)
- [NSA and Open Source: Another Controversy Brewing?](/content/blog/2013/09/nsa-open-source-another-controversy-brewing/index.html): This blog delves into the challenges and opportunities of integrating open source components in modern software development. (1,554 words)
- [New Report Highlights Surge in Application Vulnerabilities](/content/blog/open-source-components-code-volume-drag-down-web-app-security-new-report-from-imperva.html): Jai Vijayan provides a nice summary of the Imperva report, The State of Web Application Vulnerabilities in 2017 . (167 words)
- [What's New With Java? A Discussion With the London Java Community](/content/blog/whats-happening-with-java/index.html): What's new with Java? Musings from the recent London Java Community event, Including insight on Java 11 and Java 17 migration, Static Java, UI technology. (954 words)
- [Sonatype Nexus Repository Containers With Persistent Storage](/content/blog/sonatype-nexus-containers-with-persistent-storage-in-azure-container-instances.html): With a bit of automation, this could turn out to be a cost effective way to quickly and easily run some common services. (367 words)
- [Introducing Our 8th Annual State of the Software Supply Chain](/content/blog/8th-annual-state-of-the-software-supply-chain-report.html): Announcing the arrival of our 8th Annual State of the Software Supply Chain Report looking at managing open source security, industry trends, and more. (438 words)
- [Full Ecosystem Support for Conan and C/C++ | Sonatype Support](/content/products/language-support/conan-and-c/index.html): Securely manage your C and C++ projects with full support in the Sonatype suite for Conan and C/C++ to help mitigate risks across you SDLC.  (481 words)
- [Is Code Snippet Scanning Still Necessary in Development?](/content/blog/2014/04/code-snippet-scanning/index.html): Code snippet scanning is a common question we get from prospects. We typically try to dig at why the prospect actually thinks they need snippet matching. (868 words)
- [Docker: The New Ordinary](/content/blog/docker-devops-new-ordinary/index.html): This is the true story of Daniël van Gils and the 12 steps he laid out in his Docker journey.  (657 words)
- [Sonatype Further Expands Coverage of Nexus Platform | Sonatype](/content/press-releases/sonatype-further-expands-coverage-of-nexus-platform.html): Sonatype now supports: Alpine, Bower, Cargo (Rust), CocoaPods (Swift and Objective-C), Composer (PHP), Conan (C/C++), Conda, CRAN (R), Debian Drupal, rpm. (454 words)
- [Rust in Enterprise: Best Practices and Security Insights](/content/blog/rust-in-the-enterprise-best-practices-and-security-considerations.html): Best practices for adopting Rust in the enterprise, covering security, dependency management, compliance, and performance optimization. (768 words)
- [Building Microservice Architecture on Kubernetes](/content/blog/microservice-architecture-on-kubernetes/index.html): Namespace-level isolation is helpful for managing Kubernetes architecture. Also, do not put all things in the default namespace. Keep it simple.
 (475 words)
- [DORA User's Guide to Compliance | Sonatype](/content/resources/guides/dora-compliance-guide/index.html): Learn how DORA will improve cybersecurity, learn about its key compliance elements, and how Sonatype can help ensure you’re ready. (781 words)
- [Sonatype and Atlassian Bitbucket Integration](/content/products/integrations/atlassian-bitbucket/index.html): Integrate Sonatype Lifecycle with Atlassian Bitbucket to enhance security, mitigate risk, and enforce policies directly within your development workflows. (386 words)
- [OSS Compliance: Lead the Way or Follow the Rules](/content/blog/2012/04/oss-compliance-lead-or-be-led-your-choice/index.html): Explore the evolving landscape of OSS compliance and why developers should take the lead in implementing rigorous standards. (509 words)
- [Automation to Cut Security Backlogs and Keep Builds Stable](/content/blog/automation-you-can-trust-cut-backlogs-without-breaking-builds.html): Learn how Sonatype’s intelligent automation reduces noise, fixes vulnerabilities, and keeps developers focused on shipping code. (1,393 words)
- [The Software Supply Chain Piques Interest](/content/blog/2015/02/supply-chain-piques-interest/index.html): As we looked back at what our readers found most intriguing in the past year, we found one central theme: managing their software supply chain. (571 words)
- [NIS2 Compliance: Vulnerability Handling Requirements](/content/blog/vulnerability-handling-requirements-for-nis2-compliance.html): Learn how to meet vulnerability requirements under NIS2 compliance. Explore best practices for managing security risks including SBOM management. (815 words)
- [Please try Maven 3.0 RC1 | Sonatype Blog](/content/blog/2010/09/please-try-maven-3-0-rc1/index.html): Help test the new Maven 3.0 RC1 and ensure a smooth final release by providing your feedback on any issues encountered. (254 words)
- [Better Software Development: Insights From the SBOM Scorecard](/content/blog/better-software-development-insights-from-the-sbom-scorecard.html): Gain visibility, prioritize tasks, and make intelligent decisions to enhance performance and security with Sonatype's SBOM Scorecard.  (470 words)
- [Government Software Development Solutions | Sonatype](/content/solutions/government/index.html): Use trusted government solutions to comply with strict federal cybersecurity mandates and monitor your software supply chain 24/7. (1,057 words)
- [hubfs/cert-in-20executive-20summary-20-20rv3-pdf.html](/content/hubfs/cert-in-20executive-20summary-20-20rv3-pdf.html) (2,108 words)
- [Part 2, the Internet of Everything: Code, Cars, and More](/content/blog/2014/07/how-your-software-is-like-a-car-a-closer-look-at-todays-software-supply-chain.html): In part one of my blog, It's Just the Way Software is Made, I discussed the realities of how software is made, the birth of agile development, and the. (807 words)
- [Celebrating Sonatypers](/content/blog/celebrating-sonatypers/index.html): The Values Champion initiative is a peer-nominated, peer-selected program that celebrates employees who holistically live up to Sonatype’s Core Values.
 (724 words)
- [Microsoft Visual Studio and Sonatype Integration](/content/products/integrations/visual-studio/index.html): Accelerate secure development with Sonatype's Microsoft Visual Studio extension that automatically evaluates open source risks directly within your IDE. (397 words)
- [CI/CD Pipeline Security Explained | Sonatype](/content/resources/articles/ci-cd-pipeline-security/index.html): Secure CI/CD pipelines effectively by integrating security early, controlling dependencies, and monitoring risks to ensure faster and safer software delivery. (2,622 words)
- [Meet an Open Source Contributor: Chris Wininger](/content/blog/meet-an-open-source-contributor-chris-wininger/index.html): Chris Wininger discusses how open source contributions are a part of his broader journey as a software engineer. (839 words)
- [Nexus and RunDeck: Tools for DevOps | Sonatype Blog](/content/blog/2014/06/nexus-and-rundeck-tools-for-devops/index.html): Explore how Nexus and RunDeck collaborate to automate operational procedures, enhancing productivity and efficiency in enterprise environments.  (123 words)
- [Chapter 7: Maven Configuration | Maven: Complete Reference](/content/maven-complete-reference/maven-configuration/index.html): Explore Maven Configuration in Chapter 7 of the Maven Definitive Guide by Sonatype. Gain insights into configuring Maven for personalized requirements. (1,492 words)
- [Java.net Maven Repository Rescue Mission](/content/blog/2010/02/java-net-maven-repository-rescue-mission-on-march-5th.html): Sonatype assists Java.net projects in migrating to a better Maven repository infrastructure, addressing common issues with Java.net repositories. (315 words)
- [Optimizing Component Usage with Your Repository Manager](/content/blog/2013/09/using-your-repository-manager-to-optimize-component-usage.html): Learn how to optimize component usage and improve release processes using your repository manager. Discover the benefits today. (252 words)
- [Tracing the SolarWinds Exploit Upstream | Sonatype Blog](/content/blog/tracing-the-solarwinds-exploit-upstream/index.html): Tracing the SolarWinds Exploit: Discover how a sophisticated supply chain attack impacted 18,000 customers and exposed critical government systems. (763 words)
- [Kotlin Language Support | Sonatype Support](/content/products/language-support/kotlin/index.html): Secure your Kotlin projects with Sonatype's solutions with full support to manage dependencies, detect vulnerabilities and ensure license compliance.  (486 words)
- [5 Quick Wins for Securing Continuous Delivery](/content/blog/5-quick-wins-for-securing-continuous-delivery/index.html): At the 2018 Nexus User Conference, Jim Bird, CTO of BiDS Trading, laid out 5 quick ways to secure continuous delivery.  (863 words)
- [Component Not Found | Sonatype Guide](/content/guide/component/undefined/40common-stack-2fgenerate-plugin/10-0-1-alpha-0.html): Could not find component data for undefined/@common-stack/generate-plugin/10.0.1-alpha.0. This component may not exist in our database or may have been removed. (17 words)
- [Learnings From 200 Billion JavaScript Downloads | Sonatype](/content/blog/what-can-we-learn-from-200-billion-javascript-downloads.html): JavaScript packages downloaded from the npm repository now tops 200 billion downloads annually. We dissect what that means for the open source community.  (1,100 words)
- [Generative AI Adoption Surges Despite Security Risks](/content/press-releases/generative-ai-adoption-surges-in-software-development.html): New research from Sonatype reveals that generative AI adoption has surged in software development despite noted security risks.  (660 words)
- [OSS Security Solution Supports C/C++, PHP & Ruby | Sonatype](/content/press-releases/sonatype-expands-solution-to-support-c/c-php-and-ruby/index.html): Sonatype remains committed to creating the most universally applicable, polyglot software supply chain automation tools.  (650 words)
- [Yes, Policies Can Actually Speed Development](/content/blog/2013/10/yes-policies-can-actually-speed-development/index.html): Learn how automated policies can enhance agile development, ensuring high-quality applications while eliminating inefficiencies of policy implementation. (1,243 words)
- [Wicked Good Development: The Future of Maven Central](/content/blog/maven-central-past-present-and-future/index.html): If you utilize Java or any other JVM, there’s a good chance you know the Maven Central repository. Hear from experts on its past, present, and future., If you utilize Java or any other JVM, there’s a good chance you know the Maven Central repository. Today’s episode brings long-time maintainers and contributors of Maven Central, Brian Fox, Jason Swank, and Joel Orlina to the mic to rehash the early days of Maven Central, lessons learned from managing open source ecosystems, and bring insight into the platform’s practical software supply chain management capabilities of the past, present, and future.
Check out the resources from today's episode here.  (7,580 words)
- [The Future of Developer Velocity with Sonatype and AWS | Sonatype](/content/blog/the-future-of-developer-velocity-with-sonatype-and-aws.html): Learn how Sonatype and AWS enable secure, AI-driven developer velocity with governed pipelines, invisible security, and cloud-native innovation. (922 words)
- [Unveiling Sonatype's New Logo and Tagline: A Transformation](/content/blog/introducing-sonatypes-latest-release-our-logo/index.html): Sonatype unveils its modernized logo, reflecting our forward-thinking vision and commitment to helping companies build the best software.  (408 words)
- [Exploring the Sonatype Platform for Software Supply Chains](/content/blog/hands-on-with-the-nexus-platform-a-software-supply-chain-demo.html): Sonatype's Ilkka Turunen demonstrates how to use the Nexus Platform. Download the files to try it yourself. You'll see how useful it is for your workflow. (374 words)
- [OWASP Top 10: Key Vulnerabilities and How to Prevent Them](/content/blog/owasp-top-10-overview/index.html): Caroline Wong is a Chief Strategy Officer who teaches the OWASP Top 10. She uses memorable analogies to explain all ten.  (951 words)
- [Concerned About Container Security? Try the Sonatype Platform](/content/blog/docker-scanning/index.html): Native Container Scanning for Docker Containers and a Private Container Registry (285 words)
- [Exploring HeartBleed and Hacking Through Minecraft Lessons](/content/blog/2014/05/hacking-minecraft-a-metaphor-for-bleeding-hearts/index.html): Over a month has passed since HeartBleed was announced to the public, and while saturation into the mainstream media likely peaked shortly after that, it. (1,380 words)
- [Why Software Composition Analysis (SCA) Demands Precision](/content/blog/why-software-composition-analysis-sca-demands-precision.html): Software Composition Analysis (SCA): Getting to the Signal Through the Noise, by 451 Research, demonstrates Sonatype's leadership in SCA. (609 words)
- [Swift Programming Language Support | Sonatype Support](/content/products/language-support/swift/index.html): Manage Swift dependencies efficiently with Sonatype, enhancing build reliability and security. Explore full support for Swift Package Manager. (716 words)
- [Sonatype Firewall Prevented $1.5B in Losses from Attacks](/content/press-releases/sonatype-repository-firewall-malicious-attack-prevention.html): Now a SaaS-first solution, Sonatype Repository Firewall has prevented more than $1.5 billion in potential losses from malicious open source attacks. (736 words)
- [New Zealand Information Security Manual (NZISM) Guide | Sonatype](/content/resources/guides/nzism-executive-summary/index.html): Learn how to comply with the New Zealand Information Security Manual (NZISM) requirements in this compliance guide from the experts at Sonatype.  (564 words)
- [OWASP LLM Top 10: Securing AI and Software Supply Chain](/content/blog/the-owasp-llm-top-10-and-sonatype-supply-chain-security.html): Learn how Sonatype helps secure large language model (LLM) applications from software supply chain risks outlined in the OWASP LLM Top 10. (939 words)
- [Improving Maven Builds While Leaving Existing Builds Intact](/content/blog/2009/04/incrementally-improving-a-maven-build-while-leaving-the-existing-build-intact.html): Incrementally improving a Maven build while leaving the existing build intact (635 words)
- [Outnumbered, Again](/content/blog/2014/07/outnumbered-again/index.html): I remember it clearly. Sitting down for breakfast, I opened the Sydney Morning Herald to see the latest headlines in Australia for the day. (683 words)
- [Enhance Software Security with SBOMs and Gartner Insights](/content/blog/gain-visibility-and-traceability-of-your-software-supply-chain-with-sboms-with-new-gartner-report.html): Discover how software bills of materials (SBOMs) enhance visibility and traceability in software supply chains. (521 words)
- [Sonatype Adds Cloud-Native Container & Kubernetes Security](/content/press-releases/cloud-native-container-and-kubernetes-security/index.html): Sonatype's Nexus Container is a Kubernetes-native, life cycle container security solution that secures containerized applications from dev to production.  (576 words)
- [Navigating Software Regulations, SBOMs and Beyond | Sonatype](/content/resources/videos/mitre-sboms/index.html): Explore SBOMs and discover practical steps for navigating software compliance with MITRE in this Regulate to Innovate video. 
 (36 words)
- [Sonatype Uncovers Millions Hidden Open Source Vulnerabilities](/content/press-releases/sonatype-uncovers-millions-of-previously-hidden-open-source-vulnerabilities-through-unique-shaded-vulnerability-detection-system.html): Sonatype uncovers hidden open source vulnerabilities through a novel detection system, that identifies vulnerabilities in shaded open source files.  (752 words)
- [Sonatype User Conference Brings DevSecOps Leaders Together](/content/press-releases/sonatypes-2019-nexus-user-conference/index.html): Sonatype's Nexus User Conference is a free event that brings DevSecOps practitioners together to share insights, technical how-to’s, and experiences.
 (425 words)
- [Sonatype Boosts AI and OSS Security with Hyderabad Center](/content/press-releases/global-operations-expand-with-india-innovation-center.html): Sonatype opens a new Innovation Center in Hyderabad to scale AI-driven software development and strengthen Sonatype's mission to secure modern software. (640 words)
- [Integrate Nexus IQ & OSS Index with Visual Studio Code](/content/blog/new-integration-to-visual-studio-code-nexus-iq-and-oss-index.html): Introducing the new Nexus IQ integration for VS Code. If you want to understand how we built it, why we built it, and the problems it solves, read on.  (992 words)
- [npm Stops $13M Crypto Theft from Malicious Code Injection](/content/blog/malicious-code-injection-strikes-again-as-npm-foils-13m-cryptocurrency-theft.html): The latest attempt at a cryptocurrency heist demonstrates how open source software components are used throughout the cryptocurrency ecosystem.  (564 words)
- [How Toyota’s Principles Drive Today’s Software Supply Chain](/content/blog/what-toyota-unlocked-decades-ago-drives-software-supply-chain-management-today.html): Toyota developed a vehicle production framework, still in use today, that shapes contemporary software supply chain management, too. (592 words)
- [Hudson, meet JavaServiceWrapper | Sonatype Blog](/content/blog/2008/10/hudson-meet-javaservicewrapper/index.html): Simplify Hudson CI server setup with JavaServiceWrapper for automatic recovery after restarts. Download and integrate easily with RedHat systems. (299 words)
- [CoffeeScript Language Support | Sonatype Support](/content/products/language-support/coffeescript/index.html): Secure your CoffeeScript projects with comprehensive dependency management, vulnerability monitoring, and policy enforcement to reduce open source risks. (476 words)
- [Mythos and the AI Vulnerability Storm: Explore the Control Point](/content/blog/mythos-and-the-ai-vulnerability-storm/index.html): Discover how AI is transforming software development and security. Learn how to adapt to the AI vulnerability storm with proactive strategies to reduce risk. (884 words)
- [Secure Coding Practices Learned From 36,000 OSS Projects](/content/blog/2019ssc/index.html): Our 2019 State of the Software Supply Chain Report Reveals Best Practices From 36,000 OSS Dev Teams and 12,000 commercial software engineering teams. (622 words)
- [Fileless Linux Malware Found in PyPI Package 'secretslib' | Sonatype](/content/blog/this-week-in-malware-fileless-linux-cryptominer-100-packages.html): This week Sonatype discovered more than 100 open source packages that were malicious, suspicious, or dependency confusion attacks. 
 (488 words)
- [Banking Leader Cuts Vulnerabilities by 60% | Sonatype Success Story](/content/customer-stories/banking-leader-cuts-vulnerabilities/index.html): A leading financial institution reduced high-severity vulnerabilities by 60% in three months through enhanced DevSecOps integration and improved collaboration. (794 words)
- [Transforming Software Development with Sonatype Intelligence](/content/blog/2011/09/the-next-step-in-transforming-software-development/index.html): Introducing Sonatype Insight™: enhancing open source software development with improved visibility, control, and reduced risks.  (348 words)
- [Sonatype Adds npm & JavaScript Intelligence to Its Platform](/content/press-releases/npm-javascript/index.html): Sonatype updates Nexus platform with advanced npm and JavaScript intelligence for superior DevOps automation and software quality. (494 words)
- [Major Government Attack Highlights How Log4j Is Still Unresolved](/content/blog/major-government-attack-highlights-log4j-resolution-shortfall.html): Despite all the attention and effort so far this year, this open source vulnerability found a it’s first major victim in multiple U.S. State governments.  (576 words)
- [Sonatype Repository Firewall and JFrog Artifactory Integration](/content/products/integrations/jfrog-artifactory/index.html): Integrate Sonatype Repository Firewall with JFrog Artifactory to block malicious components and ensure secure software development. Protect your ecosystem. (602 words)
- [How to Make an Executable JAR in Maven | Sonatype Blog](/content/blog/2009/08/how-to-make-an-executable-jar-in-maven/index.html): Learn how to create an executable JAR in Maven with a step-by-step guide by Brian Fox, including handling dependencies and best practices. (251 words)
- [New Threats: Cryptominers Flood npm & Inject Malicious PyPI](/content/blog/this-week-in-malware-aug-18/index.html): This week Sonatype discovered 200+ npm and PyPI packages that are cryptominers, with additional packages comprising dependency confusion PoCs. 
 (319 words)
- [Upgrade Sonatype Nexus Repository to Java 8 | Sonatype](/content/blog/time-to-upgrade-nexus-repository-2-to-java-8/index.html): Upgrade your Sonatype Nexus Repository to Java 8 now to ensure security and compatibility with future updates and vulnerabilities. (510 words)
- [New Tools for Managing Open Source Dependencies and Risk](/content/blog/new-developer-tools-for-open-source-dependency-management.html): Nexus platform customers can now access improved dependency visualization, better track policy exceptions, and work with PHP. (950 words)
- [Best Practices for SCA Tools and Programs | Sonatype Guide](/content/resources/guides/best-practices-sca-tools/index.html): Learn best practices for SCA tools, focusing on integration, risk reduction, and automated remediation to optimize your DevOps pipeline. (1,464 words)
- [Nexus Now Supports OpenSearch Standard | Sonatype Blog](/content/blog/2009/06/nexus-now-supports-opensearch-standard/index.html): Sonatype Nexus Repository now supports OpenSearch Standard. See how you can set up this functionality to search artifacts (from your instance or ours). (356 words)
- [Select the Best Tools and Deconstruct the CI/CD Pipeline](/content/blog/jobs-as-code/index.html): Jobs-as-Code is an approach that treats application automation management in the SDLC just like any other code components of an application. (711 words)
- [Explore CanisterSprawl: A Self-Propagating npm Malware Campaign](/content/blog/self-propagating-npm-malware-turns-trusted-packages-into-attack-paths.html): Self-propagating malware steals credentials and hijacks accounts to spread via trusted packages, turning a single install into a supply chain threat. (933 words)
- [AI Code Governance: Policy & Security | Sonatype](/content/blog/the-last-mile-problem-ai-can-write-code-but-only-policy-can-ship-it.html): Master AI code governance and AI policy enforcement. Learn how to bridge the gap between AI creation and control to ensure AI software supply chain security. (986 words)
- [Bringing Java and Linux Together for Continuous Deployment](/content/blog/2011/11/bringing-java-and-linux-together-on-the-way-to-continuous-live-deployment.html): Bringing Java and Linux together on the way to Continuous Live Deployment (305 words)
- [Vista Equity Partners | Sonatype](/content/investors/vista-equity-partners/index.html): Vista Equity Partners, a leading global investment firm, acquired Sonatype in 2019. Learn more.  (210 words)
- [Sonatype Firewall: Quality at Velocity](/content/blog/2015/11/nexus-firewall-quality-at-velocity/index.html): Boost build quality and minimize risk with Sonatype Repository Firewall. Block and quarantine vulnerable components, ensuring secure software development. (1,051 words)
- [RedHat OpenShift + Sonatype Nexus Lifecycle | Sonatype](/content/partners/redhat-openshift-sonatype-nexus-lifecycle-sonatype/index.html): Discover how Sonatype and Red Hat swiftly implement software supply chain mandates per Executive Order 14028. (316 words)
- [DevSecOps Automation in Financial Services | Sonatype Webinar](/content/resources/webinars/revolutionizing-financial-services-through-devsecops-automation.html): Discover how DevSecOps automation transforms financial services by enhancing security and accelerating digital innovation. Watch the webinar for insights., Hear high-profile financial service enterprises share ways software supply chain management is at the forefront of their organization’s digital transfor... (110 words)
- [Testing Sonatype Nexus With Selenium: A Lesson in UI Testing](/content/blog/2009/10/selenium-part-4/index.html): Learn advanced techniques for Selenium UI testing with Nexus, including capturing screenshots, network logs, and remote browser testing. (1,581 words)
- [Avoid lawyers, track your licenses | Sonatype Blog](/content/blog/2011/10/avoid-lawyers-track-your-licenses/index.html): Avoid costly legal battles by effectively tracking open source licenses in your software development process. Proactive governance can save time and money. (937 words)
- [Software Composition Analysis Tools | Sonatype](/content/solutions/software-composition-analysis-tools/index.html): Secure your software with our Software Composition Analysis tool. Identify vulnerabilities, manage open-source compliance, and ensure safe, reliable code.  (1,612 words)
- [Software Supply Chain Resources, Guides & Tools | Sonatype](/content/resources/index.html): Discover insights on application security, AI development, and open source risks from the experts at Sonatype. Explore our resource center for more info. (257 words)
- [What is DevOps? Understanding DevOps Principles and Practices](/content/blog/definition-of-devops/index.html): DevOps is more than a combination of two words. But what is it, exactly? This post dispels some of the common misconceptions around DevOps. (1,626 words)
- [Protecting Authorizations: A Crucial Aspect of DevSecOps](/content/blog/make-sure-to-cover-your-auth/index.html): Aditya Balapure (@adityabalapure) explores how authentication has evolved and makes recommendations for DevSecOps teams to improve their security. (390 words)
- [Sonatype Names Megan Lueders Chief Marketing Officer](/content/press-releases/megan-lueders-joins-sonatype-as-chief-marketing-officer.html): Respected marketing veteran Megan Lueders joins Sonatype as Chief Marketing Officer. (487 words)
- [AppSec / DevOps Survey: 63% Concerned With Open Source](/content/blog/2014/02/open-source-concern/index.html): Discover key insights from the 2014 AppSec/DevOps survey highlighting the importance of vigilance in open source software security.  (262 words)
- [Scaling Sonatype: Perspective From #SaaStr 2018](/content/blog/sonatype-rising-perspective-from-saastr-2018/index.html): Insights from SaaStr 2018 on scaling SaaS businesses, focusing on key metrics like the Rule of 40, sales efficiency, and net revenue retention. (941 words)
- [Signal Over Noise: Reachability Analysis Is the Reality Check SCA Has Been Missing](/content/blog/signal-over-noise-reachability-analysis-is-the-reality-check-sca-has-been-missing.html): Reachability analysis and software composition analysis help teams cut through noise by identifying vulnerabilities, enabling faster remediation. (1,440 words)
- [Fedora Blocks CC0: Navigate Open Source Licensing Challenges](/content/blog/licensing-fedora-blocks-creative-commons/index.html): Recent news of a popular license no longer allowed in open source projects underlines the ongoing evolution of licenses and legal risk.  (1,019 words)
- [Going Beyond Manual Remediation with Repository Health Check](/content/blog/is-manual-remediation-with-repository-health-check-as-good-as-it-gets.html): Manual remediation of vulnerable components can be time-consuming. Learn how Sonatype tools can automate and improve the health of your repositories efficiently. (1,191 words)
- [Linux Malware Found in PyPI Package 'secretslib' Mine Monero](/content/blog/pypi-package-secretslib-drops-fileless-linux-malware-to-mine-monero.html): Sonatype identified a 'secretslib' PyPI package that covertly installs cryptominers on Linux systems. (1,170 words)
- [Enhance Open Source Security with Advanced Malware Detection](/content/blog/manage-open-source-risk-with-improved-malware-detection.html): Malware targeting developers remains a major concern. Learn what your organization can do to keep cybersecurity risks out of your development pipeline. (885 words)
- [Sonatype Recognizes Individuals Embracing DevOps Innovation](/content/press-releases/embracing-devops-to-accelerate-software-innovation/index.html): Sonatype, the leader in software supply chain automation, launched the Innovator’s Journey to DevOps, a series of interviews profiling individual DevOps. (389 words)
- [EU CRA: Implications for Software Security and Open Source](/content/blog/eu-cyber-resilience-act-good-for-software-supply-chain-security-bad-for-open-source.html): The Cyber Resilience Act is the European Union's proposed regulation to combat threats affecting any digital entity. What does that mean for open source?  (2,065 words)
- [2026 Release Notes](/content/help/en/sonatype-iq-server-2026-release-notes-html.html) (5,055 words)
- [Software Compliance Checklist for Global Regulations](/content/resources/whitepapers/global-regulations-cheat-sheet/index.html): Assess your compliance readiness for DORA, NIS2, SSDF, SEBI, ISO 27001, and PCI DSS. Sonatype's Global Regulations Checklist helps ensure you're compliant. (948 words)
- [CVE-2025-12183 | Sonatype Security Advisory](/content/security-advisories/cve-2025-12183/index.html): The Sonatype Research team disclosed a new security advisory: CVE-2025-12183. Explore details on this high-severity vulnerability in lz4-java. (534 words)
- [Sonatype Launches Customer-Focused Program, Sonatype Innovate](/content/blog/sonatype-launches-customer-focused-program-sonatype-innovate.html): Say hello to Sonatype Innovate—a program designed for innovators within the Sonatype community to collaborate, grow and learn from each other.  (324 words)
- [Insights from Sonatype’s 9th Software Supply Chain Report](/content/press-releases/sonatype-9th-annual-state-of-the-software-supply-chain-report.html): Sonatype's new 9th Annual State of the Software Supply Chain Report highlights alarming open source software and software supply chain security trends. (946 words)
- [Sonatype Sales Surge 105% Year Over Year in Q1 2018](/content/press-releases/sonatype-sales-surge-105-percent-year-over-year-in-first-quarter.html): Sonatype, the leader in automated open source governance •  Sonatype announces quarterly year-over-year sales growth.  (367 words)
- [Counterfeit Lodash Exploits AnyDesk Targeting Windows Users](/content/blog/counterfeit-lodash-attack-leverages-anydesk-to-target-windows-users.html): npm packages identified by Sonatype are named similar to the popular JavaScript library, lodash, and abuse typosquatting to target Windows OS developers. (949 words)
- [sonatype-2026-003277 | Components Impacted | Sonatype Guide](/content/guide/vulnerability/sonatype-2026-003277/components-impacted/index.html): View all components affected by sonatype-2026-003277 (CVSS 8.7). Identify vulnerable packages in your dependencies and find remediation guidance. (53 words)
- [Streamline Security with Sonatype DepShield | Guide](/content/blog/getting-started-with-sonatype-depshield-an-introduction.html): Sonatype’s GitHub application DepShield scans your GitHub repository and analyzes dependencies for known vulnerabilities. The best part is that it’s free!
 (1,400 words)
- [Why the Cloud is Embracing BSD-Style Licenses Over GPL](/content/blog/2012/09/the-cloud-is-running-toward-bsd-style-licenses-are-you.html): Cloud infrastructure is shifting toward BSD-style licenses for better compatibility and fewer legal issues. Learn why PostgreSQL is the premier choice. (1,442 words)
- [Publishing Maven Sites to Nexus Repository | Sonatype](/content/blog/2009/11/nexus-tips-and-tricks-publishing-maven-sites-to-nexus-14.html): Learn how to configure and deploy Maven-generated project websites to Nexus Repository with step-by-step instructions. (849 words)
- [Beyond npm Audit to Traverse a Complex Dependency Tree](/content/blog/beyond-npm-audit/index.html): Building good hygiene habits as part of our development practice helps the community at large. Here's how to use Nexus Repository OSS as part of it. (1,129 words)
- [DevSecOps is Suddenly Strategic for Everyone in Software](/content/blog/devsecops-is-suddenly-strategic-for-everyone-in-software-heres-why.html): DevSecOps is now crucial for software innovation. Learn why integrating security into DevOps processes is essential for modern organizations to thrive. (555 words)
- [Auto-Remediation Now in Eclipse, IntelliJ, and Visual Studio](/content/blog/auto-remediation-now-available/index.html): Auto-remediation makes it even easier to choose the best component right within an IDE. The CIP now automatically suggests the compliant version.  (315 words)
- [Exploring Sonatype Nexus Repository 1.0.0-beta-3.1 Release](/content/blog/2008/05/nexus-maven-repository-manager-100-beta-31-and-source-released.html): Sonatype releases Nexus Repository 1.0.0-beta-3.1 with new features, security enhancements, and bug fixes, alongside the source code now available. (331 words)
- [Sonatype + Microsoft Azure Partnership](/content/partners/microsoft-azure/index.html): Learn how Sonatype's partnership with Microsoft Azure can help you secure your software supply chain. Explore solutions available on the Azure Marketplace. (410 words)
- [2024 State of the Software Supply Chain | Executive Summary](/content/state-of-the-software-supply-chain/2024/introduction/index.html): Explore our 10th Annual State of the Software Supply Chain Report to gain insights on open source consumption, growing risks, and development efficiency. (1,642 words)
- [3 DevSecOps Lessons From Conversations With 45 CISOs | Sonatype](/content/blog/three-devsecops-lessons-drawn-from-conversations-with-45-cisos.html): CISOs reduce risk and significantly improve an organization's IT security posture by shifting more resources to the beginning of the digital supply chain. (908 words)
- [Ledger Connect-Kit Compromise: A Crypto Drainer Attack](/content/blog/decrypting-the-ledger-connect-kit-compromise-a-deep-dive-into-the-crypto-drainer-attack.html): Sonatype covers how Ledger, a maker of hardware wallets for storing crypto, identified malicious software embedded in one of their open source packages (615 words)
- [The Top 5 Trends Every DevOps Leader Needs to Know for 2024](/content/blog/sonatype-unveils-2024-predictions-our-top-5-trends-for-devops-managers.html): Five key predictions shaping the future of software development with insights to empower DevOps leads in navigating the evolving development landscape (740 words)
- [Writing a book with Maven: Part 1 | Sonatype Blog](/content/blog/2008/04/writing-a-book-with-maven-part-i/index.html): Learn about the challenges and benefits of using DocBook over APT for writing technical books with Maven tools. (1,745 words)
- [Welcome Back to Sonatype Intelligence Insights](/content/blog/introducing-nexus-intelligence-insights-0/index.html): Stay informed on open source vulnerabilities with Sonatype Intelligence. Our monthly series offers practical insights to keep your software secure. (380 words)
- [World Bank Group's DevSecOps Cloud Transformation Journey](/content/blog/the-world-bank-groups-cloud-journey-with-devsecops/index.html): The World Bank Group works to end extreme poverty and boost shared prosperity. They work on many fronts handling sensitive data, a place for DevSecOps.
 (881 words)
- [Sonatype Named a Leader in Forrester Wave for SCA | Sonatype](/content/blog/sonatype-recognized-as-a-leader-in-sca-software-in-forrester-wave.html): Sonatype is a leader in Forrester Wave Q4 2024 for SCA, recognized for top scores in malicious package detection, SBOM management, and AI-driven analysis. (657 words)
- [Medical Device Security: A New Look at Open Source Software](/content/blog/medical-device-security-a-new-look-at-open-source-software.html): An effort to keep our healthcare system and medical devices secure is being spearheaded by the Healthcare Industry Cybersecurity Task Force (593 words)
- [Azure Blob Storage Support Now in Sonatype Nexus Repository](/content/blog/new-in-sonatype-nexus-repository-3-30-microsoft-azure-blob-storage-support-for-expanded-cloud-platform-deployments.html): Sonatype Nexus Repository Pro users can now manage and deploy their critical infrastructure on Microsoft’s Azure Cloud Platform. (728 words)
- [Software Bill of Materials Explained | Sonatype Video](/content/resources/videos/software-bill-of-materials-explained/index.html): Explore what software bill of materials are and why they are such an integral part of software development in today's regulatory and compliance landscape. (30 words)
- [hubfs/wp-top_5_vulnerable_open_source_components-pdf.html](/content/hubfs/wp-top_5_vulnerable_open_source_components-pdf.html) (1,175 words)
- [FTC Warning in Wake of Log4j: Secure Your Software Supply Chain](/content/blog/ftc-warning-in-wake-of-log4j/index.html): Not addressing Log4shell issues are looking at more than downtime or reputation damage. U.S. regulators are considering lawsuits to enforce security. (505 words)
- [The True Cost of Not Having a Cloud Repository | Sonatype](/content/blog/the-true-cost-of-not-having-a-cloud-repository/index.html): Learn how on-premise repositories hide costs in downtime, maintenance, and security risk, and why Sonatype Nexus Repository Cloud delivers true ROI. (912 words)
- [DevOps: Escape the Blame Game | Sonatype Blog](/content/blog/devops-escape-the-blame-game/index.html): Separate judgement from the good and the bad binary approach to our system health, and instead focuses on behaviors, interactions, and complexities. (816 words)
- [Progress Software and Sonatype Lifecycle | Sonatype](/content/customer-stories/progress-software-and-sonatype-lifecycle/index.html): Simplify due diligence with Sonatype Lifecycle. 🔍 Discover open source risks fast like Progress Software. #OpenSource #RiskManagement (465 words)
- [Open Source Security Baseline: New Era with OSPS | Sonatype](/content/blog/behind-the-baseline-reflecting-on-the-launch-of-the-open-source-project-security-baseline.html): Discover how the Open Source Project Security (OSPS) Baseline, developed by OpenSSF, helps maintainers meet open source security standards and improve hygiene. (1,320 words)
- [Survey Insights: Developers Demand Better Integration](/content/blog/2011/01/1600-developers-speak-and-they-want-better-integration.html): Developers demand better integration and efficient onboarding. Survey highlights trends in development infrastructure, with support for Maven and Hudson. (597 words)
- [Objective-C Language Support | Sonatype Support](/content/products/language-support/objective-c/index.html): Sonatype empowers teams to analyze and secure Objective-C applications, managing dependencies and risks throughout the software supply chain effectively. (463 words)
- [Simplify Maven Projects: Match Directories to Artifact IDs](/content/blog/2011/01/maven-tip-project-directories-and-artifact-ids/index.html): Get the latest tip from Maven experts. Be sure that your project directories should match the artifact ID. Learn More. (346 words)
- [Sonatype Simplifies Open Source License Management](/content/press-releases/new-tool-helps-manage-open-source-license-obligations.html): Sonatype unveiled its Advanced Legal Pack which fundamentally changes how both legal teams and developers manage open source licenses and compliance.  (625 words)
- [Healthcare Industry Developers Report OSS Breach | Sonatype](/content/press-releases/sonatype-healthcare-industry-report/index.html): Nearly One-Third of Happy Coders Say Security is a Top Concern, Showing Desire for Change in the Industry (617 words)
- [SBOM: The Idea of Transparency Turns Into Reality of Code](/content/blog/sbom-from-the-idea-of-transparency-to-the-reality-of-code.html): Explore the importance of Software Bill of Materials (SBOM) in enhancing code transparency and tackling software vulnerabilities effectively.  (958 words)
- [ Federal Strategies for Compliant AI Adoption | Sonatype Webinar](/content/resources/webinars/federal-strategies-for-compliant-adoption/index.html): Explore strategies to secure AI software supply chains, enhance governance of AI models used, and align with federal guidelines in our on-demand webinar. , Federal agencies are accelerating the adoption of artificial intelligence and machine learning. As these technologies are integrated into critical workf... (277 words)
- [Apache Struts Vulnerability: Live Updates | Sonatype Blog](/content/blog/apache-struts-vulnerability-live-updates/index.html): Stay updated on the latest Apache Struts vulnerability exploits and find out how to protect your systems with expert guidance and remediation advice. (889 words)
- [Walking in the Open Source Component Garden](/content/blog/2014/06/open-source-component-garden/index.html): Its not everyday I can stop to enjoy my afternoon tea outside on my deck, overlooking my garden. (613 words)
- [Malware Discovered in Hijacked npm Packages via Solana](/content/blog/hijacked-npm-packages-deliver-malware-via-solana-linked-to-glassworm.html): Hijacked npm packages in React Native delivered multi-stage malware via Solana, linked to Glassworm, exposing risks in trusted open source dependencies. (1,057 words)
- [Sonatype Acquires Vor Security; Introduces Lifecycle XC](/content/press-releases/sonatype-acquires-vor-security-announces-lifecycle-xc.html): Sonatype, a leader in software supply chain automation, today announced that it has acquired Vor Security. (666 words)
- [DevOps and Continuous Delivery Reference Architectures](/content/blog/2015/09/28-devops-and-continuous-delivery-reference-architectures-vol-2.html): Discover the latest DevOps and Continuous Delivery reference architectures in Volume 2, now available on SlideShare. Enhance your DevOps journey. (239 words)
- [2024 Open Source Malware Threat Report | Sonatype](/content/resources/whitepapers/2024-open-source-malware-threat-report/index.html): Dive into trends and insights into the state of open source malware. Learn how threat actors use malicious open source packages to target developers. (124 words)
- [Sonatype Acquires Code Analysis Platform MuseDev | Sonatype](/content/press-releases/sonatype-acquires-musedev/index.html): Sonatype has acquired MuseDev, an innovative code analysis platform that automatically analyzes and provides feedback on each developer pull request. (851 words)
- [Steps to responsible disclosure panel discussion | Sonatype](/content/blog/steps-to-responsible-disclosure/index.html): In this episode of the OWASP 24/7 Podcast Series, the research team at Semmle discusses how they discovered the Pivotal Spring framework vulnerability.  (546 words)
- [Proactive Security Management with Sonatype Insights](/content/blog/2012/05/get-proactive-about-security-with-insight/index.html): Discover how proactive security measures and tools like Insight for CI can help organizations address evolving security challenges. (461 words)
- [How Developer Morale Impacts Your Software Supply Chain](/content/blog/how-developer-morale-affects-software-supply-chain/index.html): Your place in the software supply chain has a lot to do with your development staff.  A look at Sonatype data on developer state-of-mind and performance. (622 words)
- [Gartner: Mitigate Risk By Hardening the Software Supply Chain](/content/blog/gartner-mitigate-risk-by-hardening-the-software-supply-chain.html): As Gartner explains, key to mitigating open source risk, is a hardened software supply chain. But, where do you start?
 (1,016 words)
- [Sonatype Integrates Lifecycle with Microsoft Visual Studio](/content/press-releases/nexus-lifecycle-visual-studio-press-release/index.html): Today, Sonatype announced that it has released a new version of Nexus Lifecycle that includes an extension to Microsoft Visual Studio. (586 words)
- [New Automated Malware Prevention for Open Source Libraries](/content/press-releases/next-generation-nexus-intelligence/index.html): Sonatype introduces behavioral analysis with machine learning for early detection of malicious open source releases. (586 words)
- [What NIST's Definition of Critical Software Means? | Sonatype](/content/blog/what-does-nists-definition-of-critical-software-mean.html): NIST's definition of Critical Software in relation to the 2021 Cybersecurity Executive Order may seem broad, but its immediate implementation is limited.  (759 words)
- [Sonatype Drives Smart Software Security with New Features](/content/press-releases/sonatype-drives-intelligent-software-security-with-new-product-enhancements.html): Sonatype unveils new features for its Repository Firewall, Nexus Repository, and Lifecycle products, advancing software supply chain management. (698 words)
- [Are Vulnerabilities Polluting Your Software Supply Chain?](/content/blog/are-unnecessary-vulnerabilities-polluting-your-software-supply-chain.html): As malicious software supply chain attacks continue to evolve, so do the ways that bad actors exploit vulnerable libraries. (1,216 words)
- [Establishing an Open Source Governance Program | Sonatype](/content/blog/2011/10/tips-for-increasing-open-source-benefits-for-development-part-2.html): Establish an Open Source Governance Program:  Open Source Development Tip #3 (384 words)
- [Download the SANS 2023 DevSecOps Survey Report | Sonatype](/content/resources/whitepapers/sans-2023-devsecops-survey-report/index.html): Explore insights in the SANS DevSecOps Survey Report covering secure DevOps practices, cloud usage, and AI trends. (322 words)
- [Implement CERT-in Software Development Guidelines | Sonatype](/content/resources/guides/cert-in-guidelines/index.html): Learn everything you need to know about CERT-in guidelines from the Indian Computer Emergency Response Team.
 (1,182 words)
- [New Plugin Console and Artifact Metadata in Nexus Repository](/content/blog/2009/12/sonatype-nexus-141-introduces-a-plugin-console-and-custom-artifact-metadata.html): Sonatype Nexus 1.4.1 introduces a plugin console and custom artifact metadata (926 words)
- [Wicked Good Development: Testcontainers with Oleg Šelajev](/content/blog/wicked-good-development-testcontainers-with-oleg-selajev.html): Join Kadi Grigg and Jamie Coleman as they sit down with Oleg Šelajev of AtomicJar, Inc., for an episode packed with insights on Testcontainers. , Ready to take a dive into the world of TestContainers? Join Kadi Grigg and Sonatype Developer Advocate Jamie Coleman as they sit down with the one and only Oleg Šelajev of AtomicJar, Inc., for an episode packed with insights and laughs. 
Together, they'll delve into the world of Testcontainers and uncover the secrets behind these powerful tools that have revolutionized the testing landscape. From the origin of Testcontainers to the crucial importance of reliability in testing, they'll cover it all and so much more
Check out the resources for this episode on the Sonatype Blog. 


 (6,390 words)
- [sonatype-2026-003277 | Security Details | Sonatype Guide](/content/guide/vulnerability/sonatype-2026-003277/index.html): Technical security analysis for sonatype-2026-003277. CVSS 8.7 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (72 words)
- [Component Management with Apache Maven Infrastructure](/content/blog/2012/07/component-lifecycle-management-with-your-apache-maven-infrastructure.html): Learn how to manage component lifecycles with Apache Maven, addressing security, licensing, and dependency challenges in modern software development. (179 words)
- [ Microsoft Installed an OSS Agent with Vulnerabilities](/content/blog/microsoft-installed-open-source-agent-critical-vulnerabilities-on-linux-vms.html): Microsoft released patches for critical vulnerabilities in its Open Management Infrastructure software agent which had been silently installed on Azure. (610 words)
- [Four Open Source Components You Need to Update Right Now](/content/blog/2014/05/4-open-source-components-you-need-to-update-right-now.html): Heartbleed has put the security community on notice: it is time to take a harder look at the security status of open source components and frameworks. (850 words)
- [Tripwires: When We Might Learn and Where We Don't](/content/blog/when-we-might-learn-and-where-we-dont/index.html): An analysis of what we have to do to learn better and faster and what often gets in our way.  (3,643 words)
- [Apache Maven 3.0-beta-1 Release to Enhance Development](/content/blog/2010/04/the-maven-team-announces-release-of-apache-maven-3-0-beta-1.html): Apache Maven 3.0-beta-1 released, offering compatibility with Maven 2.x plugins and projects. Explore the new beta version and its features. (163 words)
- [Maven Indexer: Explore Sonatype's Donation to Repository Search](/content/blog/2011/02/maven-indexer-sonatypes-donation-to-repository-search.html): Discover how Sonatype's Maven Indexer revolutionized repository search, enhancing efficiency and accessibility by standardizing artifact indexing. (1,350 words)
- [What to Look for in a Software Composition Analysis Solution](/content/blog/what-users-really-look-for-in-a-sca-solution/index.html): Real users explain what you should demand from your SCA tools, including visibility through an SBOM, continuous monitoring, and the ability to scan apps. (903 words)
- [DevOps at Scale & Enterprise Tool Onboarding | Sonatype](/content/blog/how-devops-at-scale-and-tool-onboarding-relate/index.html): Learn how DevOps at scale requires more than tool access. Discover how enterprise DevOps teams approach tool onboarding to support CI/CD transformation. (2,786 words)
- [How to Enhances R with Open Source Contributions](/content/blog/oss-index-contributor-asks-where-r-you/index.html): Dr. Colin Gillespie, co-author of the book, Efficient R Programming, talks about contributing to open source software projects and using OSS Index.  (548 words)
- [Crypto Stealer Malware: Fake npm Utilities | Sonatype](/content/blog/fake-ip-checker-utilities-on-npm-are-crypto-stealers.html): Crypto stealer malware is hiding in fake npm IP checker utilities, targeting Windows, Linux, and macOS developers in a growing npm attack campaign. Learn more! (870 words)
- [Maven by Example: Installing Maven | Sonatype Guide](/content/resources/guides/maven-by-example/installing-maven/index.html): Learn how to install, verify, and configure Apache Maven on various operating systems, ensuring a smooth setup for your Java development projects. (1,798 words)
- [SolarWinds Software Supply Chain Attack | Protect Your Apps](/content/blog/software-supply-chain-attacks-solarwind-how-developers-fortify-apps.html): Protect your SDLC from supply chain attacks like SolarWinds by securing development pipelines and third-party components. Learn best practices today. (1,714 words)
- [Improve Your Karma With DevOps Culture in a Box](/content/blog/improve-your-karma-with-devops-culture-in-a-box/index.html): Discover how Sonatype's Nexus experience transforms DevOps culture, enhances collaboration, and boosts innovation with cutting-edge tools. (403 words)
- [Enhance Maven Workflows: Index Repositories with m2eclipse](/content/blog/2009/09/browsing-and-indexing-repositories-with-m2eclipse/index.html): Maven Tips and Tricks: Browsing and Indexing Repositories with m2eclipse (383 words)
- [Sonatype Named to JMP Securities’ 2018 Hot 100 List | Sonatype](/content/press-releases/sonatype-named-to-jmp-securities-2018-hot-100-list/index.html): Sonatype named to JMP Securities' 2018 Hot 100 list, celebrating their market impact and leadership in automated open source governance. (331 words)
- [Contact Us About SBOM Governance](/content/contact-us/sbom-manager/index.html): Get in touch with our experts to learn how to manage your software supply chain effectively with Sonatype SBOM Manager.  (83 words)
- [Sonatype Releases Nexus Repository Manager OSS 3.0 | Sonatype](/content/press-releases/nexus-3-press-release/index.html): Sonatype, the leader in software supply chain automation, today released the latest version of Nexus Repository, adding free support for seven of the most. (487 words)
- [Sonatype SBOM Generation: Leading the Way in Security](/content/blog/sonatypes-sbom-generation-capabilities-outpace-the-competition.html): Better data, a dedicated security team, and the analytical capabilities of BOM Doctor are all part of what makes Sonatype's SBOM capabilities superior.
 (1,367 words)
- [Sonatype Can Help You Navigate DORA Compliance](/content/blog/sonatype-can-help-you-navigate-dora-compliance/index.html): Discover how the EU's Digital Operations Resilience Act (DORA) impacts software providers and third-party ICT service providers in the financial sector. (286 words)
- [Sonatype Overhauls JavaScript Scanning with Automated PRs](/content/press-releases/sonatype-provides-npm-automated-pull-requests/index.html): Sonatype's enhanced JavaScript solutions take advantage of new algorithms to better identify security vulnerabilities in open source npm packages. 
 (574 words)
- [From Plexus to Guice: The Bridge and Custom Bean Injection](/content/blog/2010/01/from-plexus-to-guice-2-the-guiceplexus-bridge-and-custom-bean-injection.html): From Plexus to Guice (#2): The Guice/Plexus Bridge and Custom Bean Injection (1,314 words)
- [Effortlessly Migrate from Ant to Maven: A Step-by-Step Guide](/content/blog/2009/04/how-to-convert-from-ant-to-maven-in-5-minutes/index.html): Learn how to convert your Ant build to Maven with minimal team disruption. Follow our step-by-step migration guide and streamline your build process. (1,198 words)
- [Integrating Open Source Supply Chain Management into DevOps](/content/resources/webinars/devops-downloads/open-source-supply-chain-management/index.html): Learn how to enhance your DevOps tool chain by managing open source supply chains, automating processes, and mitigating risks in software development., Open source software (OSS) has reshaped software development for the better, emphasizing reusability, transparency, and easy integration. Yet, it brings... (192 words)
- [Nexus 3: New Milestone Release | Sonatype Blog](/content/blog/2015/02/nexus-3-new-milestone-release/index.html): Discover the latest enhancements in Nexus 3 Milestone Release, focusing on user experience improvements and new features. Download now. (341 words)
- [Software Supply Chain Management | Sonatype Nexus One Platform](/content/products/nexus-one-platform/index.html): Streamline software development with Sonatype's Nexus One Platform, enhancing open source security and productivity through AI-driven automation. (845 words)
- [Scala Artifacts Now on Maven Central | Sonatype Blog](/content/blog/2012/02/scala-artifacts-now-on-central/index.html): Scala artifacts are now available on Maven Central, simplifying the configuration process for developers and enhancing infrastructure reliability. (430 words)
- [CryptoJS Library Conceals Dangerous Crypto-Stealing Malware](/content/blog/revived-cryptojs-library-is-a-crypto-stealer-in-disguise.html): A malicious npm package, 'crypto-encrypt-ts,' impersonates CryptoJS to steal crypto wallet data. The malware has been downloaded over 1,600 times. (665 words)
- [December 2009 News: Maven, Liferay SDK, and Java Insights](/content/blog/2009/12/17-in-other-news/index.html): Explore the latest updates on Nexus, Maven, and Sonatype projects, including Liferay Maven SDK advancements and insights on switching from .NET to Java. (343 words)
- [Open Source Software: What is OSS? | Sonatype](/content/resources/articles/what-is-open-source-software/index.html): Learn what open source software is, its advantages, potential risks, and how businesses can safely integrate open source software into their applications. (1,878 words)
- [Explore Sonatype Lifecycle and ServiceNow AVR Integration](/content/blog/enhance-security-with-sonatype-lifecycle-and-servicenow-application-vulnerability-response-avr-integration.html): Sonatype integrates with ServiceNow's Application Vulnerability Response module to offer a single pane of glass view into open source vulnerabilities. (411 words)
- [Differentiating Software Vulnerabilities and Malware](/content/blog/a-closer-look-differentiating-software-vulnerabilities-from-malware.html): Vulnerabilities and malware in open source software pose significant threats to the security and integrity of your software supply chain (1,543 words)
- [Sonatype Sets Q1 Record in YoY Bookings and Renewals ](/content/press-releases/sonatype-sets-record-first-quarter-2022/index.html): Sonatype announced another quarter of extraordinary growth. It follows the milestone of exceeding $100 million in annual recurring revenue in 2021. (793 words)
- [Evaluating Security Measures in Open Source Projects](/content/blog/2012/04/evaluating-an-open-source-projects-security-team/index.html): Learn how to evaluate the security of open source projects and ensure you are using components with mature security practices in place. (918 words)
- [Accelerating Software Delivery | Sonatype Customer Story](/content/customer-stories/finance-organization-accelerates-release-cycles/index.html): Explore how a finance organization enhanced its software delivery through centralized vulnerability management and automated processes with Sonatype. (832 words)
- [DevSecOps Leaders: The Conversation Continues Online](/content/blog/devsecops-leaders-the-conversation-continues-online-may-7th.html): Learn from DevSecOps experts May 7th to align software, security, and operations resources so organizations innovate faster with less risk. (798 words)
- [Sonatype Lifecycle and Micro Focus Fortify Integration](/content/products/integrations/micro-focus/index.html): Streamline application security and enhance visibility of software risks with Sonatype Lifecycle's integration with Micro Focus Fortify SSC. (377 words)
- [Microsoft Acquires npm: A Move for Public Infrastructure](/content/blog/microsoft-acquires-npm-a-healthy-move-for-critical-public-infrastructure.html): Today, news broke that GitHub and its parent company Microsoft, acquired npm and its public repository of open source JavaScript packages. (869 words)
- [Deploying Jenkins Clusters on AWS | Automated CI/CD Platform](/content/blog/how-to-deploy-a-jenkins-cluster-on-aws-as-part-of-a-fully-automate-ci/cd-platform/index.html): Following his Nexus User Conference talk on how to build a fully automated CI/CD platform on AWS, using Terraform, Packer & Ansible, Mohamed Labouardy goes. (2,003 words)
- [Sun Specification Alternatives | Maven Complete Reference](/content/maven-complete-reference/sun-specification-alternatives/index.html): Explore Sun Specification Alternatives in Maven: The Maven Complete Reference by Sonatype. A guide for alternatives to standard specifications. (445 words)
- [Securing Repositories: Role of Checksums and PGP Signatures](/content/blog/2012/03/the-first-line-of-defense-checksums-and-pgp-signatures-in-repositories.html): The First Line of Defense: Checksums and PGP Signatures in Repositories (840 words)
- [Atomic Arch npm Campaign Adds Malicious Dependency](/content/blog/atomic-arch-npm-campaign-adds-malicious-dependency/index.html): Sonatype researchers uncovered Atomic Arch, a supply chain attack targeting orphaned AUR packages. Learn how attackers are hijacking trusted projects.  (1,136 words)
- [Bash 2014 - This Is Not a Party](/content/blog/2014/09/bash-2014-no-this-is-not-a-party/index.html): I can honestly say that although referred to by the media as Shellshocked, I am neither shocked nor awed. (489 words)
- [From DevOps to DevSecOps: Integrating Security into SDLC](/content/blog/how-devops-evolved-into-devsecops-embracing-security-in-software-development.html): Understand how DevOps and DevSecOps are crucial to optimize software development and ensure security is not an afterthought in an SDLC. (728 words)
- [Important: Apache Struts framework security alert | Sonatype Blog](/content/blog/2013/08/important-apache-struts-framework-security-alert/index.html): Critical Apache Struts vulnerability announced. Learn how to protect your applications with guidance on effective component lifecycle management. (456 words)
- [Simplifying Deployment with a Repository Manager](/content/blog/2010/08/benefits-of-a-repository-manager-part-iv-deployment.html): Discover how a repository manager simplifies production deployments and reduces risks by isolating build processes and sharing certified binaries. (610 words)
- [Why Secure Procurement Is a Must for Your Organization](/content/blog/cybersecurity-and-beyond-why-secure-procurement-is-a-must-for-your-organization.html): Michael Griffin discusses how cybersecurity and mature procurement go hand-in-hand, and how Sonatype helps make sure that this process is secure. (1,102 words)
- [Maven by Example | Sonatype Guide](/content/resources/guides/maven-by-example/index.html): Discover Maven through a practical guide designed by developers for developers. Learn essential concepts to streamline development. (157 words)
- [Equifax and Struts: The Importance of Prevention & Security](/content/blog/equifax-and-struts-an-ounce-of-prevention-is-worth-a-pound-of-cure.html): A $50 billion dollar question is begged. What, if anything, could Equifax have done differently to prevent the Struts breach from happening? (488 words)
- [2017 State of the Software Supply Chain](/content/blog/2017-state-of-the-software-supply-chain-report-1/index.html): Today, Sonatype introduces its third annual State of the Software Supply Chain report.  (367 words)
- [Sonatype at RSAC 2025](/content/blog/sonatype-at-rsac-2025/index.html): Highlights from RSA Conference 2025: AI risk, open source malware, and new protections with Sonatype Repository Firewall and Zscaler. (800 words)
- [Sonatype at RSAC 2025: Cybersecurity Conference Sessions](/content/blog/5-reasons-to-not-miss-sonatype-at-rsac-2025/index.html): Join Sonatype at RSAC 2025 for expert insights, live demos, and sessions on AI threats and open source defense at this premier cybersecurity conference. (657 words)
- [Nexus Repository: PGP Verification and Improved Interface](/content/blog/2009/04/nexus-133-introduces-automatic-signature-verification-to-maven-artifacts.html): Discover the latest enhancements in Sonatype Nexus Repository 1.3.3, including PGP verification for artifact security and improved procurement features. (579 words)
- [Holding the Industry Accountable: Steps for Effective DevSecOps](/content/blog/holding-the-industry-accountable/index.html): Humans often need to experience something before we change. As DevSecOps practitioners and leaders we should always be asking what needs changing and why.  (865 words)
- [Integrating Infrastructure as Code Into Continuous Delivery](/content/blog/integrating-infrastructure-as-code-into-a-continuous-delivery-pipeline.html): Learn how Infrastructure as Code (IaC) transforms continuous delivery, enhancing security, collaboration, and compliance in software development. (996 words)
- [Financial Institution Increases Security with Sonatype Lifecycle](/content/customer-stories/financial-institution-increases-software-security/index.html): Learn how a financial institution leveraged Sonatype Lifecycle to increase software security and improve mean time to remediate vulnerabilities by 36%. (980 words)
- [Addressing Maven Challenges: Insights from the JBoss Wiki](/content/blog/2009/11/response-to-maven-problems-on-the-jboss-wiki-part-one.html): Brian Fox addresses Maven issues highlighted on the JBoss wiki and offers insights into potential solutions and improvements. (1,246 words)
- [How AI is Reshaping Open Source | Sonatype Webinar](/content/resources/webinars/how-ai-reshapes-open-source/index.html): Discover how AI is transforming open source software supply chains in the public sector. Explore new risks and expert insights in this webinar.,  (73 words)
- [The power of data in DevSecOps | Sonatype Blog](/content/blog/the-power-of-data-in-devsecops/index.html): Discover the critical role of accurate data in DevSecOps and how Sonatype's platform ensures fast, precise feedback loops for secure software development. (590 words)
- [Hijacked npm Package Attempts to Deliver PolinRider-Linked RAT](/content/blog/hijacked-npm-package-attempts-to-deliver-polinrider-linked-rat.html): Hijacked npm packages linked to PolinRider delivered install-time malware and RAT payloads, exposing developer systems, CI/CD pipelines, and credentials. (956 words)
- [A World of Infinite Choice in Open Source Software](/content/blog/a-world-of-infinite-choice-in-open-source-software/index.html): The 2019 Software Supply Chain Report explains the development environment we're all living in and what we can learn from exemplar dev teams. (717 words)
- [How To Deploy a Private Docker Registry on Google Cloud](/content/blog/deploy-private-docker-registry-on-google-cloud-platform-with-nexus.html): Mohamed Labouardy shares a step-by-step guide on how to deploy Sonatype Nexus OSS 3 on Google Cloud Platform and how to create a private Docker hosted. (1,079 words)
- [Sonatype Careers & Current Job Openings | Sonatype](/content/company/careers/index.html): Explore Sonatype careers and find your next role. Browse our current job openings and join a team of innovators changing how software is developed. (565 words)
- [What are Large Language Models (LLMs)? | Sonatype](/content/resources/articles/large-language-models/index.html): Learn what large language models (LLMs), how they are used, and best practices for using them in software development. (991 words)
- [Proxy .NET packages NuGet Gallery with Sonatype Nexus Repository](/content/blog/2012/04/start-proxying-net-packages-nuget-gallery-with-nexus-professional.html): Learn how to proxy .NET packages in NuGet Gallery using Sonatype Nexus Repository with detailed step-by-step instructions. (330 words)
- [Bryan Batty of Bloomberg Industry Group, a 4-Part Convo](/content/blog/nexus-innovator-bryan-batty-of-bloomberg-industry-group-part-1-of-4.html): Bryan Batty of the Bloomberg Industry Group shares his experiences strengthening the software supply chain in a four part conversation with Mark Miller. (1,496 words)
- [Shifting Security Left: The Innovation of DevSecOps](/content/blog/shifting-security-left-the-innovation-of-devsecops/index.html): DevSecOps is a cultural shift that reinforces the mindset that everyone is responsible for security. Here's why this idea is so innovative and productive.  (755 words)
- [Docker Security Best Practices for Containers | Sonatype](/content/resources/guides/docker-security-best-practices/index.html): Learn essential Docker security best practices to protect your containerized environments. Master securing docker containers to ensure safe SDLC deployments. (2,424 words)
- [Sonatype Available in AWS Marketplace AI Agents category](/content/press-releases/solutions-now-available-in-the-aws-marketplace-ai-agents-category.html): Sonatype's full product suite is now available in AWS Marketplace's AI Agents and Tools category, streamlining secure AI adoption for AWS users. (545 words)
- [Responding to Cybersecurity Threats in a VUCA World](/content/blog/gartner-report-how-to-respond-to-the-threat-landscape-in-a-volatile-complex-and-ambiguous-world.html): Explore actionable insights from Gartner on adapting cybersecurity strategies to the VUCA environment: volatility, uncertainty, complexity, and ambiguity. (247 words)
- [MavenBook now under Creative Commons 3.0 (BY-ND-NC)](/content/blog/2008/06/mavenbook-now-under-creative-commons-30-by-nd-nc-version-012.html): MavenBook transitions to Creative Commons 3.0, enhancing PDF and online formats, and exploring interactive features for a dynamic reading experience. (387 words)
- [How to migrate from Ant to Maven: Project structure | Sonatype](/content/blog/2010/08/how-to-migrate-from-ant-to-maven-project-structure/index.html): Learn how to migrate from Ant to Maven, focusing on project structure and modularity to ensure a smoother transition and better development workflow. (971 words)
- [Java JEP'DY: Sometimes You Just Have to Let Your Hair Down](/content/blog/java-jepdy-sometimes-you-just-have-to-let-your-hair-down.html): Java JEP'dy. a game for Java developers everywhere
Inspired by the original Jepardy quiz came
at Devnexus,  Devoxx UK,  JBCN,  JNation and more  (526 words)
- [Maven by Example: A Simple Maven Project | Sonatype Guide](/content/resources/guides/maven-by-example/simple-maven-project/index.html): Learn to create and build a simple Maven project from scratch, exploring core concepts like POM, lifecycle, and dependency management in the process. (4,298 words)
- [Tidelift Delivers Open Source Vulnerability Data with Sonatype](/content/press-releases/tidelift-delivers-open-source-vulnerability-data/index.html): Tidelift has integrated Sonatype’s OSS Index data into the Tidelift Subscription to help developers more quickly identify and remediate vulnerabilities. (539 words)
- [What Is the Best Artifact Repository? | Sonatype](/content/compare/best-artifact-repository-solutions/index.html): Compare the best artifact repository managers. Explore feature set to select the best solution to centralize artifact management and accelerate pipelines.  (1,555 words)
- [Improving container security: Docker and more | Sonatype Blog](/content/blog/2015/11/improving-container-security-docker-and-more/index.html): Explore how Twistlock enhances container security through its strategic partnerships with Sonatype and Google Cloud Platform. (621 words)
- [The Trump White House Takes Aim at Cybersecurity | Sonatype Blog](/content/blog/the-trump-white-house-takes-aim-at-cybersecurity/index.html): The Trump White House Takes Aim at Cybersecurity. Introduces EO: Strengthening the cybersecurity of federal networks and critical infrastructure.  (993 words)
- [A Common Approach to OSS Policy: Making It Up As You Go](/content/blog/2012/03/a-common-approach-for-oss-policy-making-it-up-as-you-go.html): Learn about the pitfalls of the Make it Up as You Go approach to OSS policy and how you can avoid them using Nexus Professional 2.0. (1,626 words)
- [The CVE Crisis: Why Vulnerability Data Is Broken](/content/resources/research/the-cve-crisis/index.html): Meta Description: Sonatype’s 2025 report reveals major gaps in CVE and NVD data — missing scores, delays, and errors that undermine real security intelligence. (145 words)
- [Most application vulnerabilities are forever day vulnerabilities](/content/blog/2012/04/most-application-vulnerabilities-are-forever-day-vulnerabilities.html): Learn about Forever Day vulnerabilities in applications and the importance of staying vigilant with security measures to protect your software systems. (290 words)
- [Free DevOps: Hatched in Response to COVID-19](/content/blog/free-devops-hatched-in-response-to-covid-19/index.html): All Day DevOps | Spring Break required organizing an online DevOps conference in 30 days for 4,000 people. It launches this Friday and is free to attend. (468 words)
- [Banking Agency Mandates Better Software Supply Chain Hygiene](/content/blog/turkish-banking-regulations/index.html): The Banking Regulation and Supervision Agency has introduced new standards to protect the Turkish citizenry and require banks to more aggressively protect. (837 words)
- [PyTorch Dependency Confusion Attack: What You Need to Know](/content/blog/pytorch-namespace-dependency-confusion-attack/index.html): During the 2022 holiday season, a dependency confusion attack targeted PyTorch. Here's what users of PyTorch-NightlyBuild need to know. (799 words)
- [Sonatype’s Channel Partner Program Has Triple Digital Growth](/content/press-releases/channel-partner-program-has-triple-digital-growth/index.html): Sonatype's EMEA partner program saw a 200% revenue increase in 2020 and investment in strategic hires, tooling and infrastructure. (729 words)
- [Sonatype's Evolution: 10 Years of Innovation and Impact](/content/blog/sonatypes-10-year-journey-with-co-founder-brian-fox.html): The fact that we are closing in on 200,000 open source instances of the Nexus Repository Manager is great to see. That transcends Maven usage. (905 words)
- [Maximizing Maven Release Plugin: Best Practices and Pitfalls](/content/blog/2011/01/using-the-maven-release-plugin-things-to-know/index.html): Understand the essentials of using the Maven Release plugin, its assumptions, and why customization might be necessary for unique project requirements. (1,293 words)
- [Sonatype Launches Integrated System of Record for SBOMs](/content/press-releases/sonatype-launches-industry-first-integrated-system-of-record-for-management-of-sboms.html): Introducing Sonatype SBOM Manager, a powerful, one-stop shop for easy, cost-effective, and compliant SBOM management, monitoring, and distribution. (1,005 words)
- [Action Required: Struts2 Vulnerability CVE-2023-50164](/content/blog/struts2-cve-2023-50164-by-the-numbers/index.html): Struts2 security vulnerability is not like Log4j, but it is similar to historic breaches and has the potential for disaster if not addressed properly. (996 words)
- [9% of Developers Going Rogue and Contributing | Sonatype](/content/blog/2012/03/9-of-developers-going-rouge-and-contributing-anyway.html): Developers often defy corporate policies to contribute to open source, but these actions can lead to legal issues. Organizations should adopt OSS policies. (1,123 words)
- [Wicked Good Development Episode 30: JUG, AKA the Java User Group](/content/blog/wicked-good-development-jug-aka-the-java-user-group.html): Kadi Grigg sits down with Frank Greco, Sharat Chander, and Steve Poole to discuss the value, history, and future of Java User Groups (JUGs).
, In our latest episode, we sit down with Steve Poole (Leader of London JUG | Director, Developer Relations, Sonatype), Frank Greco (Founder of NYJavaSIG | Director, Technology and Strategy, Crossroads Technologies), and Sharat Chander (Sr. Director, Java and Cloud Native Product Management and Developer Relations, Oracle).
Java user groups (JUGs) have seen changes over the years due to the growing prominence of Java and a continuously maturing audience. We’ll be revisiting the late 90s/early 2000s when JUGs first started appearing. Listen in for answers to questions like: 

 What was their purpose? 

 What are they now?

 Why are JUGs a valuable community resource?

 How has the pandemic changed them? 


Check out the resources for this episode on the blog.  (7,748 words)
- [SBOM Management Software For Security and Compliance](/content/solutions/sbom-management/index.html): Simplify software compliance with our SBOM management software. Track dependencies, ensure compliance, and enhance software security with ease. (1,068 words)
- [Sonatype Intelligence Insights: CVE-2018-1109-Braces ReDoS Attack](/content/blog/nexus-intelligence-insights-cve-2018-1109-braces-regular-expression-denial-of-service-redos-attack-0.html): Explore CVE-2018-1109, a Regular Expression Denial of Service (ReDoS) vulnerability in the npm braces component, and best practices for prevention. (557 words)
- [An open discussion on open source review boards | Sonatype blog](/content/blog/2014/03/open-source-review-boards/index.html): Discover the role of open source review boards in enhancing software security in financial services and the importance of vulnerability management. (253 words)
- [Dependency Tracking vs Scanning: Key Differences | Sonatype ](/content/resources/articles/dependency-tracking-vs-scanning/index.html): Learn the difference between dependency tracking and dependency scanning, and the roles both play in boosting software supply chain security.  (945 words)
- [Embrace Modern Software Development in the AI Era | Sonatype](/content/resources/whitepapers/modern-development-in-ai-era/index.html): Discover how leading organizations are transforming their software development practices for the AI era in this Harvard Business Review whitepaper. (93 words)
- [Our Top 5 Vulnerable Open Source Components | Sonatype Whitepaper](/content/resources/whitepapers/top-five-vulnerabilities-2023/index.html): Learn the attack mechanics and remediation recommendations for the top 5 most vulnerable components used worldwide.  (134 words)
- [download/clm/scanner/latest-jar-asc.html](/content/download/clm/scanner/latest-jar-asc.html) (10 words)
- [How EDF Improved Security with OSS Visibility | Sonatype](/content/customer-stories/edf-group-and-sonatype-lifecycle-and-iq-server/index.html): How introducing Sonatype Lifecycle and IQ Server into their DevSecOps pipeline provided immediate visibility into security issues at EDF.  (1,013 words)
- [Nexus & GitLab CI Integration | A How-To Guide | Sonatype](/content/blog/how-to-use-gitlab-ci-with-sonatype-nexus-repository.html): Learn how to use GitLab CI with Sonatype Nexus Repository. This step-by-step guide shows how to integrate your pipeline for seamless artifact deployment. (1,254 words)
- [News and Notes from the Makers of Nexus | Sonatype Blog](/content/blog/index-2.html): Conversations about software supply automation, devsecops, open source, continuous delivery, and application security. (282 words)
- [CRA and AI Regulation: The Next Chapter in Software Compliance](/content/blog/cra-and-ai-regulation-whats-next-for-software-compliance.html): Learn how the CRA and AI Act reshape software security and supply chain practices, and discover practical steps to ensure compliance and resilience. (918 words)
- [TheNexus: A Community Project](/content/blog/2014/10/thenexus-a-community-project/index.html): Explore TheNEXUS Community, a vibrant platform offering daily DevOps content, exclusive training, and support to enhance your Nexus and CLM experience.  (482 words)
- [ReDoS Vulnerability in SheetJS Exposed: How to Protect Apps](/content/blog/nexus-intelligence-insights-sonatype-2018-0622-xlsx-sheetjs-regular-expression-denial-of-service.html): The ReDoS vulnerability impacting the popular npm component SheetJS, also known as “xlsx,” was thought to be remedied through a fix, but no, not so fast.  (646 words)
- [AI Regulation Compliance in Software Development | Sonatype](/content/resources/guides/ai-regulations-in-software-development/index.html): AI regulation compliance is becoming critical for software teams. Learn how AI regulations impact secure software development and compliance strategies. (1,813 words)
- [Sonatype IQ CLI](/content/help/en/sonatype-iq-cli-html.html) (2,556 words)
- [Software Composition Analysis (SCA) for Secure Development](/content/blog/software-composition-analysis-sca-a-beginners-guide.html): Learn how software composition analysis (SCA) safeguards applications by identifying risks, ensuring compliance, and upholding software quality (1,114 words)
- [86 Malicious npm Packages Named After Popular NodeJS Functions](/content/blog/86-malicious-npm-packages-named-after-popular-nodejs-function-names.html): Sonatype has discovered 83 packages on the npm open source repository named after popular NodeJS & JavaScript functions that exfiltrate system information. (583 words)
- [Explore the Sonatype Nexus REST API for Ruby Scripts](/content/blog/2008/11/searching-with-the-nexus-rest-api-ruby/index.html): Learn how to use Ruby scripts to search Sonatype Nexus repositories via the REST API for efficient and customizable artifact management. (820 words)
- [Sonatype Racks Up Awards from Fast Company, Inc, and More](/content/blog/notable-sonatype-awards/index.html): Sonatype's racking up an impressive list of awards: Inc.500, Fast Company Innovators, The Washington Post's Best Workplace, CyberTacos, and more. (1,163 words)
- [Sonatype SBOM Manager: Bom Visualizer Demo | Video](/content/resources/videos/bom-visualization/index.html): Explore Sonatype SBOM Manager's BOM Visualization feature for instant access to your bill of materials. See how it improves visibility without manual downloads. (506 words)
- [Open Source Policy Management: Supporting Security at Scale](/content/blog/open-source-policy-management-how-sonatype-supports-security-at-scale.html): Recognized as a leader in the Forrester Wave, Sonatype helps organizations enforce security and manage open source policy across the SDLC at scale. (753 words)
- [Regulations and Compliance Deep Dive  | Sonatype Webinar](/content/resources/webinars/compliance-sscr-authors-panel/index.html): Explore how shifting software supply chain regulations affect compliance and security strategies. Gain insights from industry experts in this webinar., The regulatory landscape around software supply chains is rapidly evolving, driven by a growing recognition of the risks posed by vulnerabilities in sof... (246 words)
- [Top 10 Reasons to Upgrade to Maven 3 | Sonatype](/content/blog/2011/02/top-ten-reasons-to-move-to-maven-3/index.html): Discover the top ten reasons to upgrade to Maven 3 for improved performance, better dependency management, and enhanced build capabilities. Explore the benefits. (1,729 words)
- [Mythos-Ready: Build Security for the AI Vulnerability Storm](/content/resources/webinars/mythos-ready/index.html): Join industry leaders as they explore how AI is transforming vulnerability management and the importance of software supply chain security. Register now., The latest Mythos and Glasswing briefing signals a major shift in cybersecurity: AI is accelerating vulnerability discovery, exploit development, and at... (284 words)
- [Helm Charts Package Support | Secure Kubernetes Management](/content/products/language-support/helm-charts/index.html): Confidently manage Helm charts with Sonatype Nexus Repository for enhanced control and streamlined CI/CD integration across your Kubernetes applications. (507 words)
- [Avoiding DevSecOps Failures: Choosing the Right Tools](/content/blog/are-you-a-fool-with-a-tool/index.html): Buckminster Fuller cautioned against prioritizing tools. DevOps should always include discussions of culture, strategy, and process for the best outcomes. (616 words)
- [Sonatype Success Story | Crosskey](/content/customer-stories/crosskey-and-sonatype-lifecycle/index.html): Sonatype Lifecycle helps Crosskey streamline and remain PCI compliant in open source development, while providing more secure and agile banking solutions.  (642 words)
- [DevSecOps Lessons Learned: Guardrails for Speed & Security](/content/blog/less-gates-more-guardrails-devsecops-lessons-learned-in-2017.html): Now is the perfect time to understand how DevSecOps can promote tribal trust and enable teams to accelerate innovation while maintaining security controls. (758 words)
- [AI Role in Automation & Ethics: Insights from Gartner Report](/content/blog/ai-impact-on-the-future-of-automation-and-ethics-insights-from-gartner-report.html): AI is transforming industries. Explore how businesses can balance automation with ethical AI practices in this Gartner report analysis. (509 words)
- [State of the Software Supply Chain Report | 10 Year Look](/content/state-of-the-software-supply-chain/2024/10-year-look/index.html): Sonatype reviewed 10 years of data to reflect on what has changed and what hasn't within the state of the software supply chain. (1,406 words)
- [Top 5 Highlights from SBOM-a-Rama Fall 2024 by Sonatype](/content/blog/sbom-a-rama-fall-2024-sonatypes-top-5-takeaways/index.html): SBOM-a-Rama Fall 2024, hosted by CISA, highlighted the rising importance of software bill of materials (SBOMs) in cybersecurity. See Sonatype's takeaways. (575 words)
- [How to Mitigate Top Open Source Software Security Risks](/content/blog/5-key-open-source-security-risks-and-how-to-prevent-them.html): An analysis of open source software security risks and license issues. Understand the benefits and the dangers of OSS and learn how to protect your SDLC. (1,326 words)
- [Why Contextual Policy Is the Baseline for Agentic AI Development](/content/blog/the-end-of-tribal-knowledge-why-contextual-policy-is-the-foundation-for-agentic-ai-development.html): Discover why contextual policy is the key to safe, agentic AI, turning raw data into guardrails that guide autonomous systems at scale. (827 words)
- [Distube-config npm Package Drops Info-Stealing Malware](/content/blog/fake-distube-config-npm-package-drops-windows-info-stealing-malware.html): Sonatype identified two npm packages that typosquat open source packages like Discord modules, in an attempt to infect Windows users with a Trojan (564 words)
- [Yum Package Management Support | Sonatype Package Support](/content/products/language-support/yum/index.html): Enhance reliability, governance, and operational efficiency in your RPM ecosystems with full support in the Nexus One Sonatype Platform.  (388 words)
- [Sonatype Enables Teams to Govern InnerSource Components](/content/press-releases/take-control-of-innersource-components-with-sonatype.html): Sonatype introduces a novel solution for identifying and fixing vulnerabilities in InnerSource components. (527 words)
- [Navigating DevSecOps with Sonatype and Saltworks Security](/content/blog/devsecops-with-sonatype-and-saltworks-security/index.html): Sonatype and Saltworks talk about how to deliver higher quality software faster while securely taking advantage of everything open source has to offer. (502 words)
- [Micro Focus + Sonatype Partnership Enables Enhanced AppSec](/content/blog/micro-focus-sonatype/index.html): The need to understand both custom and open source code, in a holistic way, is exactly why Micro Focus and Sonatype have come together in partnership.  (413 words)
- [Bootstrapping an Alfresco Project With Maven Archetypes](/content/blog/2010/01/bootstrapping-an-alfresco-project-with-maven-archetypes-delivered-with-nexus.html): Bootstrapping an Alfresco Project with Maven Archetypes (delivered with Nexus) (363 words)
- [Sonatype Supports Secure Development in Rust | Sonatype News](/content/press-releases/sonatype-supports-secure-development-in-rust/index.html): Sonatype announced expanded support for software development in Rust via the Cargo registry to the entire Sonatype product suite.  (574 words)
- [Sonatype Software Innovation Partners Program | Sonatype](/content/partners/index.html): Working together to accelerate software innovation - Platform Partners, Solution Partners, Technology Partners (660 words)
- [Sonatype Named to Deloitte’s 2018 Technology Fast 500™ | Sonatype](/content/press-releases/sonatype-named-to-deloittes-2018-technology-fast-500.html): Sonatype secures a spot in Deloitte's Technology Fast 500 for the third consecutive year. (702 words)
- [Yes, Understanding Gender Is a Professional Issue](/content/blog/yes-understanding-gender-is-a-professional-issue/index.html): Gender is a complex and frequently misunderstood topic. It's also a topic that we should all be talking about at work.  (2,148 words)
- [PyPI and Python Support | Sonatype Support](/content/products/language-support/pypi-and-python/index.html): Manage your Python and PyPI packages confidently with Sonatype, enhancing visibility and governance while reducing risks in your software supply chain. (387 words)
- [Revolutionize Your Business with GenAI-Centric Technologies](/content/blog/generative-ai-centric-technologies-get-gartner-report.html): Explore how generative AI technologies like LLMs, multimodal AI, and agentic AI drive innovation and efficiency. Download Gartner's report to learn more. (589 words)
- [Using a Software Bill of Materials (SBOM) Is Going Mainstream](/content/blog/software-bill-of-materials-going-mainstream/index.html): Crazy: OWASP A9 is about to turn seven and the DevSecOps Community Survey shows less than half of organizations can produce a Software Bill of Materials.  (687 words)
- [From SBOMs to AI BOMs: Why SPDX 3.0 Matters](/content/blog/from-sboms-to-ai-boms-why-spdx-3-0-matters.html): SPDX expands SBOMs beyond software inventories to support AI BOMs, provenance, and security metadata, enabling stronger software supply chain transparency. (956 words)
- [Sonatype Nexus Repository Product Tour](/content/resources/product-tours/nexus-repository/index.html): Discover how Sonatype Nexus Repository simplifies artifact management in just five minutes. Watch our brief product tour or schedule a personalized demo. (47 words)
- [Improving the Nexus Search Experience](/content/blog/improving-the-nexus-search-experience/index.html): The Sonatype Nexus team has been busy making improvements to the Nexus Repository Manager 3 experience, including a new tree view in 3. (231 words)
- [Join Our Exclusive Webinar: Shai-Hulud & the Nx Campaign](/content/resources/webinar/shai-hulud-nx-campaign/index.html) (241 words)
- [Three reasons manual policies just don't work | Sonatype blog](/content/blog/2014/06/manual-policies-dont-work/index.html): Over the past four years, Sonatype has surveyed open source development organizations and over the years, we find that developers have the best intentions. (574 words)
- [Are You Choosing the "Right" Component?](/content/blog/2014/07/choosing-right-component/index.html): In our recent open source developer survey we asked, what are the TOP FOUR characteristics considered when selecting a component? And since components are. (886 words)
- [Open and Closed Source Software Licenses Explained](/content/blog/open-source-licenses-explained/index.html): Learn about the key software license types including open source and closed source licenses. Plus, how to manage open source software license compliance. (1,668 words)
- [Profiling Maven Tests for Memory Leaks Using YourKit](/content/blog/2009/09/profiling-maven-tests/index.html): Learn how to profile Maven tests step by step using YourKit to identify memory leaks and optimize performance in your Sonatype Nexus integration tests. (630 words)
- [Nexus Repository and Microsoft NuGet Gallery OData changes](/content/blog/nexus-repository-microsoft-nuget-gallery-odata-changes-for-nuget-v2.html): Following Microsoft's announcement to the NuGet Gallery and the depreciation of OData, see details on how Nexus Repository users can avoid V2 protocol. (364 words)
- [Effective Routing Rules for Managing Nexus Repository Groups](/content/blog/2010/01/how-to-control-nexus-groups-with-effective-routing-rules.html): Optimize your repository management by mastering effective routing rules to streamline artifact access, speed up builds, and filter out unwanted content. (2,286 words)
- [Streamline Python Builds | PyCharm and Sonatype Integration](/content/blog/pycharm-and-nexus-repository-manager-a-match-made-in-heaven.html): Great news for Python developers, Nexus Repository Manager (NXRM) now natively supports PyCharm; no extra configuration needed. 

 (691 words)
- [Zoosk Asks Users to Reset Passwords Following Mass Leak](/content/blog/2013/03/not-a-match-made-in-heaven-zoosk-asks-users-to-reset-passwords-following-mass-leak.html): Not a match made in heaven, Zoosk asks users to reset passwords following mass leak. (52 words)
- [Lessons of Youth: A License to Use](/content/blog/2014/07/lessons-of-youth-a-license-to-use/index.html): I can still recall (it actually pains me to count the years, so I refuse to) with perfect clarity the sound of my 1200 baud modem handshaking with my. (871 words)
- [2023 Software Supply Chain Predictions and Insights](/content/blog/2023-predictions-software-supply-chain-governance/index.html): A look at what we're expecting in the coming year, including open source security, software supply chain attacks, regulation, DevOps, and more. (1,302 words)
- [Maven Release Challenges: Insights and Solutions (Part 2)](/content/blog/2009/12/response-to-maven-problems-on-the-jboss-wiki-part-two.html): In this blog, we discuss the challenges with the Maven release plugin and offer alternatives for a smoother release process in Maven projects. (1,110 words)
- [Chapter 5 - Build Profiles | Maven: The Complete Reference ](/content/maven-complete-reference/build-profiles/index.html): Learn about Maven Build Profiles in Chapter 5 of the Maven Definitive Guide by Sonatype. A must-read for customizing builds in different environments. (942 words)
- [Understanding DORA Compliance Requirements | Sonatype Blog](/content/blog/summer-compliance-webinar-series-understanding-dora-compliance.html): Explore how financial institutions can prepare for the Digital Operations Resilience Act (DORA) and learn about the importance of SBOM management. (375 words)
- [Sonatype Names Finalists for 2022 Elevate Awards | Sonatype](/content/press-releases/sonatype-names-finalists-for-2022-elevate-awards/index.html): Sonatype has announced the finalists of the 2022 Elevate Awards, celebrating bold innovators who are transforming software supply chain management.

 (461 words)
- [How a Financial Services Leader Enhanced Security | Sonatype](/content/customer-stories/financial-services-leader-enhances-security/index.html): Learn how a leading financial services organization improved the security and compliance of its OSS usage with Sonatype Lifecycle and Repository Firewall.  (713 words)
- [OMB's Rollback on Software Security Increases Risks](/content/blog/omb-rolled-back-the-rules-security-did-not-get-easier.html): OMB replaced software security mandates with flexibility. But without shared evidence standards, risk-based security may create more gaps. (655 words)
- [CVE-2026-7308 | Security Details | Sonatype Guide](/content/guide/vulnerability/cve-2026-7308/index.html): Technical security analysis for CVE-2026-7308. CVSS 5.1 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (184 words)
- [Sonatype Lifecycle Demo | Sonatype](/content/request-sonatype-lifecycle-demo/index.html): There is a better way to SCA with Sonatype Lifecycle. Integrate precise component intelligence directly into your development tools. Book a demo today. (245 words)
- [Cryptominer Disguised: Python-Dateutils Targets OS Platforms](/content/blog/python-dateutils-a-moner-cryptominer-in-disguise-for-windows-linux-macos.html): We analyze a suspicious 'python-dateutils' PyPI package targeting Python developers to mine cryptocurrency after infecting their Windows, macOS or Linux. (879 words)
- [AI Grounded in Intelligence Delivers Safer Outcomes | Sonatype](/content/press-releases/sonatype-research-on-ai-coding-safety/index.html): Sonatype's research reveals that real-time software intelligence enhances AI coding safety, outperforming larger models in secure upgrade recommendations. (664 words)
- [Want to Understand Software Supply Chains? Ask Red Hat | Sonatype](/content/blog/want-to-understand-software-supply-chains-ask-red-hat.html): Want to learn about automating and scaling modern software supply chains?  Ask our friends at Red Hat.  They know what they're talking about. (241 words)
- [Nexus OSS vs Pro: Which Repository Manager to Choose?](/content/blog/2010/01/nexus-open-source-or-professional-which-one-is-right-for-you.html): Discover the differences between Sonatype Nexus Repository OSS and Nexus Repository Pro. Learn which one suits your needs best. (696 words)
- [Sonatype Nexus Named Best Open Source DevOps Tool | Sonatype](/content/press-releases/sonatype-nexus-named-best-open-source-devops-tool/index.html): Sonatype, the leader in automated open source governance. Nexus Repository named Best Open Source DevOps Tool by Computing at DevOps Excellence Awards 2018 (378 words)
- [Ann Winblad Reflects: The Rise of Software](/content/blog/ann-winblad-reflects-the-rise-of-software/index.html): Imagine this: the 5 U.S. tech companies are annually investing $60 billion in R&D - close to the non-defense R&D budget of U.S. Government. (736 words)
- [How to Retrieve Maven Plugin Documentation | Sonatype](/content/blog/2010/06/diy-retrieving-a-maven-plugins-documentation/index.html): Learn how to retrieve documentation for Maven plugins using built-in tools, even for older or undocumented plugins. Discover step-by-step methods to get info. (598 words)
- [Securosis Dives Deep Into Our 2014 Survey](/content/blog/2014/07/securosis-survey-analysis/index.html): There are two ways to motivate others to action: emotional appeal and fact based analysis. (654 words)
- [Malicious Intent: Open Source Developers, Protect Your Users](/content/blog/malicious-intent-open-source-developers-please-protect-your-users.html): Open source developers face new security challenges as attackers exploit vulnerabilities. Protect your users by prioritizing digital security to maintain trust and ecosystem integrity. (502 words)
- [How Nexus Helps Simplify Releases to the Central Repository](/content/blog/2013/09/simplified-releases-to-the-central-repository-with-nexus.html): Simplify your project's release process with Nexus and Maven. Learn step-by-step how to automate releases to the Central Repository from the command line. (705 words)
- [Sonatype Launches Novel Deep Code Analysis Platform](/content/press-releases/sonatype-launches-novel-deep-code-analysis-platform.html): Discover Sonatype Lift: a unique cloud-native platform for deep code analysis and fixing common coding errors. (768 words)
- [CVE-2014-3483: SQL Injection in PostgreSQL Adapter](/content/blog/nexus-intelligence-insights-cve-2014-3483/index.html): In this month's Nexus Intelligence Insights we discuss an older component that is used by millions of developers. (542 words)
- [Continuous Delivery: How to Transform Application Release](/content/blog/2016/02/continuous-delivery-how-to-transform-application-release.html): Explore how Continuous Delivery and DevOps practices can transform application release processes, featuring insights from experts at CA World 2015. (191 words)
- [New Enhanced JS Scanning and npm Automated Pull Requests](/content/blog/sonatype-rolls-out-enhanced-javascript-scanning-npm-automated-pull-requests-more-free-developer-tools.html): Enhanced JavaScript support provides improved accuracy, increased policy control, and faster remediation of open source vulnerabilities across the SDLC. (593 words)
- [What is DevSecOps? | Integrating Security Into The SDLC](/content/resources/articles/what-is-devsecops/index.html): Get an introduction to DevSecOps (development, security, operations) and why an integrated strategy is crucial for modern software development practices.  (2,642 words)
- [Developers, Say Goodbye to Vulnerabilities and Squash Those Bugs](/content/blog/developers-say-goodbye-to-vulnerabilities-squash-those-bugs.html): Sonatypers Jerome Gergel and Melanie Latin offer developers a set of four best practices once violations are identified in your software.
 (483 words)
- [DevSecOps in the Age of Containers](/content/blog/devsecops-in-the-age-of-containers/index.html): Containers and automated tools create new opportunities for software supply chains and opensource governance as well as system security. (778 words)
- [Software Supply Chain Report Finds 430% Increase OSS Attacks](/content/press-releases/2020-state-of-the-software-supply-chain/index.html): 2020's Software Supply Chain Report: A 430% increase in cyber attacks on open source supply chains. Read more. (814 words)
- [Nexus Repository 3.9 Release: New UI and Firewall Support](/content/blog/nexus-repository-3-9-released-with-a-new-upload-ui-and-firewall-support.html): Discover the new features and functionality in Sonatype Nexus Repository 3.9, including a user-friendly upload UI and enhanced firewall support for OSS. (308 words)
- [PyPI Attackers Drop Trojan and Info-Stealers in Packages](/content/blog/pypi-attackers-still-at-it-malicious-packages-drop-trojans-and-info-stealers.html): Sonatype's malicious open source and malware detection systems found hundreds of malicious PyPI packages. (569 words)
- [Override Maven Plugin Dependencies: A Comprehensive Guide](/content/blog/2008/04/how-to-override-a-plugins-dependency-in-maven/index.html): Learn how to override a plugin's dependency in Maven to use newer versions of tools like Checkstyle and PMD for enhanced project builds. (590 words)
- [AI Trends in Application Security: The Gartner® Report](/content/blog/ai-devsecops-and-the-future-of-application-security-the-gartner-report.html): AI is reshaping application security. Learn how DevSecOps, better prioritization, and platform consolidation help manage risk in software development. (928 words)
- [Keeping Vulnerable Struts Versions Out of Nexus Repository](/content/blog/how-to-keep-vulnerable-versions-of-struts-out-of-your-nexus-repository.html): Use Nexus Lifecycle Continuous Monitoring and Nexus Firewall to keep vulnerable versions of Apache Struts out of your software supply chain. (632 words)
- [hubfs/devsecops-20reference-20architecture-pdf.html](/content/hubfs/devsecops-20reference-20architecture-pdf.html) (243 words)
- [2018 DevSecOps Survey: Automation Races Against Breaches](/content/blog/2018-devsevops-community-survey/index.html): New research published today, reveals that breaches pinned to open source software components are up 55% year over year. (525 words)
- [npm Library Hijacked: Supply-Chain Attack Targets Millions](/content/blog/npm-project-used-by-millions-hijacked-in-supply-chain-attack.html): Companies are assessing impact from compromise of a popular npm project that may have introduced cryptominers and password stealers into their systems. (1,400 words)
- [Activate Your Shield Against Open Source Invasions](/content/blog/activate-your-shield-against-open-source-invasions/index.html): Mike Van Doren, Sonatype Solution Architect, identifies the infinity stones that grant superpowers in the Nexus ecosystem. (563 words)
- [License Legal REST API](/content/help/en/license-legal-rest-api-html.html) (1,606 words)
- [ABN AMRO and Sonatype Lifecycle | Customer Success Sotry](/content/customer-stories/abn-amro-and-sonatype-lifecycle/index.html): See how Sonatype Lifecycle helps ABN AMRO decrease time to deploy while facilitating an optimal working environment for its development community. (1,134 words)
- [Request a Private Offer with Azure Marketplace | Sonatype](/content/request-a-private-azure-marketplace-offer/index.html): Learn how you can purchase Sonatype solutions through the Azure Marketplace. Request a private offer today on the Azure Marketplace. (72 words)
- [AppSec Best Practices for the AI Era](/content/resources/webinars/appsec-best-practices-for-ai-era/index.html): Join the webinar to explore strategies for securely operationalizing AI development with AWS Kiro and Sonatype Guide while managing compliance and open source risks effectively. (184 words)
- [DevOps Meets the Sporting Goods Industry](/content/blog/adidas-devops-meets-the-sporting-goods-industry/index.html): Adidas isn't a software company, but it employs advanced techniques in software delivery to build different applications more than 10,000 times a day.
 (882 words)
- [Sonatype Guide and AWS Kiro | Demo Video](/content/resources/videos/sonatype-guide-and-aws-kiro/index.html): Discover how Sonatype Guide MCP server and AWS Kiro enhance AI-assisted development by providing real-time dependency intelligence direct into AI workflows. (543 words)
- [DevSecOps: Catching Fire | Sonatype Blog](/content/blog/devsecops-catching-fire/index.html): Waterfall-native approaches to security couldn't keep pace with new DevOps-native requirements and they were shunned. Times have changed. Enter: DevSecOps. (629 words)
- [Explore India's Cybersecurity Framework for SBOM Compliance](/content/blog/simplifying-sbom-compliance-with-sonatype-under-indias-cybersecurity-framework.html): Simplify SBOM compliance under India's cybersecurity framework. Explore new SBOM mandates, covering procurement, updates, and legacy systems. (656 words)
- [Upgrade Nexus Repository for Versions 3.68.0 and Older | Sonatype](/content/products/sonatype-nexus-repository/upgrade/3-68-0-and-older.html): Upgrade your Nexus Repository to the latest version to patch critical vulnerabilities and enhance performance, security, and scalability. Take action now. (732 words)
- [Finance Software Development Solutions | Sonatype](/content/solutions/banking-and-financial-services/index.html): Explore Sonatype's financial services software development solutions that put the protection of your customers' data and your bottom line first. (1,067 words)
- [Formats](/content/help/en/formats-html.html) (813 words)
- [DevOps Lessons Learned from Southwest Airlines | Sonatype](/content/blog/2015/11/software-supply-chains-devops-lessons-learned-from-southwest-airlines.html): Software Supply Chains:  DevOps Lessons Learned from Southwest Airlines (820 words)
- [There's no analog to a repository manager in .NET. Until now.](/content/blog/2012/03/theres-no-analog-to-a-repository-manager-in-net-until-now.html): Discover how Sonatype Nexus Repository brings centralized management for .NET components, revolutionizing how developers consume binary artifacts. (243 words)
- [Secure Software Development Attestation Form | Sonatype](/content/blog/secure-software-development-attestation-form-sonatype-helps-you-comply.html): Comply with the new CISA Secure Software Development Attestation Form and ensure secure development practices for software sold to US Federal agencies. (1,209 words)
- [Distributing Binaries: Why Not Use a Shared Filesystem?](/content/blog/2012/02/distributing-binaries-why-not-just-use-a-shared-filesystem.html): Learn why relying on shared filesystems for distributing binaries is a bad idea and how Sonatype Nexus Repository can solve common build issues. (1,083 words)
- [Explore Sonatype Lifecycle and GitLab Ultimate Integration](/content/blog/enhance-security-with-the-sonatype-lifecycle-and-gitlab-ultimate-integration.html): Discover how the Sonatype Lifecycle and GitLab Ultimate integration brings vulnerability insights directly into GitLab, streamlining security workflows. (532 words)
- [Software Liability Gets Real (Global)](/content/blog/software-liability-gets-real-global/index.html): Software liability turns up the volume in France, Germany, the UK, the USA, and the EU in 2018. (1,142 words)
- [Docker: Handling Circular Dependency Between Containers](/content/blog/docker-handling-circular-dependency-between-containers.html): Let’s assume we are going to run 3 containers. Nginx is used to serve cleaner URLs through reverse proxies so that users don't have to remember specific ports. (294 words)
- [Sonatype and Micro Focus Bolster Strategic Partnership](/content/press-releases/micro-focus-and-sonatype/index.html): Micro Focus and Sonatype introduce an integrated AppSec Platform for comprehensive open source risk management. (564 words)
- [Python Packages Peek in Telegram, Set Up Windows RDP Access](/content/blog/python-packages-peek-into-your-telegram-set-up-windows-rdp-access.html): This Week in Malware we discovered multiple malicious PyPI packages that either set up new Remote Desktop user accounts on your Windows computer. (427 words)
- [Continuous Delivery and Sonatype](/content/blog/2015/03/continuous-delivery-and-nexus/index.html): There are numerous examples of reference architectures available, and each of them vary in levels of detail, tools highlighted, and processes followed. (337 words)
- [The Pervasive Influence of Open Source | Security Concerns](/content/state-of-the-software-supply-chain/2023/open-source-supply-and-demand/index.html): Dive into open source's vast influence, with 90% of production code origins. (4,102 words)
- [Tech Spec: Building Your App with SOUP Is a Bad Idea](/content/blog/post-conference-tech-spec-why-building-your-ship-application-with-raw-materials-is-a-bad-idea.html): Get all the details of the presentation that Jamie Coleman, Developer Advocate on Sonatype’s Developer Relations team, gave at Voxxed Days Zurich 2023. (1,282 words)
- [CVE-2025-1944 | Sonatype Security Advisory](/content/security-advisories/cve-2025-1944/index.html): The Sonatype Research team disclosed CVE-2025-1944. Explore details on how PickleScan versions may be vulnerable to ZIP manipulation attacks. (413 words)
- [Wicked Good Development Episode 23: Demystifying Tech Debt](/content/blog/wicked-good-development-demystifying-tech-debt/index.html): What is tech debt? Can different types be treated the same? How do you quantify it? And more importantly how do you prioritize it? Tune in to find out.
, In this episode, Kadi sits down with Sonatype’s Director of Product Management, Justin Young, and Engineering Manager, Brad Cupit to discuss all things tech debt. What is it? Can different types be treated the same? How do you quantify it? And more importantly, how do you prioritize it?
Tune in and learn how you too can begin to understand your tech debt and begin to tactically manage it.
Check out the resources from today's episode here.  (8,223 words)
- [New Red Hat Quay Capabilities Offer Users OSS Container Security](/content/press-releases/sonatype-debuts-new-capabilities-for-red-hat-quay/index.html): Sonatype's new capabilities for Red Hat Quay, enable enterprises to automate and enforce open source governance across containerized applications.  (495 words)
- [2026 Cybersecurity Predictions: A New Era of Threat Intelligence](/content/blog/the-great-shift-cybersecurity-predictions-for-2026-and-the-new-era-of-threat-intelligence.html): Cybersecurity predictions for 2026 on AI, open source risk, threat intelligence, and why security must move into the developer flow. (819 words)
- [Complete Guide to AIBOMs | Sonatype](/content/resources/articles/aiboms/index.html): Explore the concept of Artificial Intelligence Bills of Materials (AIBOMs), how they differ from SBOMs, and their importance in regulatory compliance.   (1,320 words)
- [Enhanced OSS Index: New Data for Safer, Smarter Development](/content/blog/ossindex-update/index.html): Sonatype’s free catalog of open source components and scanning tools for developers, OSS Index, now has more data, improved component choice and better. (484 words)
- [Secure Software Development That Drives Innovation | Sonatype](/content/solutions/technology-and-software/index.html): Accelerate your software innovation with secure open source security tools from Sonatype that help you mitigate risk without slowing down development. (755 words)
- [Explore CVE-2018-14721: jackson-databind RCE Vulnerability](/content/blog/jackson-databind-remote-code-execution/index.html): We're demystifying the jackson-databind and block polymorphic deserialization (CVE-2018-14721), which is vulnerable to Remote Code Execution.  (871 words)
- [How to Achieve PCI Compliance | Sonatype Guide](/content/resources/guides/pci-compliance/index.html): Achieve PCI DSS 4.0 compliance with Sonatype's robust security solutions, ensuring software supply chain integrity and data protection. (2,669 words)
- [Remember When Hackers Ignored Java? FBI was Just Hacked](/content/blog/2012/09/remember-when-hackers-ignored-java-those-days-are-over-fbi-hacked-via-atomicreferencearray.html): Remember when Hackers Ignored Java?   Those days are over... FBI Hacked via AtomicReferenceArray (648 words)
- [DevSecOps Reference Architecture Download | Sonatype](/content/resources/whitepapers/test-drive-a-devsecops-reference-architecture/index.html): Using Sonatype's reference architecture select the best delivery method for particular technologies within your business. (248 words)
- [Sonatype Nexus vs. Black Duck | Compare Vendors](/content/compare/synopsys-vs-sonatype-nexus/index.html): Explore how Sonatype outperforms Black Duck (previously Synopsys) in software security. Learn why Sonatype is a leader in software composition analysis. (879 words)
- [Learn More About Sonatype's Partnership Program | Sonatype](/content/become-a-sonatype-partner/index.html): Interested in selling or working with Sonatype's Partnership Program? Reach out to our team for more information on how you can become a Sonatype partner.  (547 words)
- [2024 State of the Software Supply Chain | Open Source Risk](/content/state-of-the-software-supply-chain/2024/risk/index.html): Dive into the evolution of open source risk and how to address it to ensure long-term security and reliability of your software lifecycle.  (3,899 words)
- [Dependency Confusion Packages Target Amazon, Zillow & Slack](/content/blog/malicious-dependency-confusion-copycats-exfiltrate-bash-history-and-etc-shadow-files.html): Malicious npm dependency confusion packages exfiltrate your bash_history and /etc/shadow files (1,442 words)
- [Cleanup Performance Data](/content/help/en/cleanup-performance-data-html.html) (1,660 words)
- [Autonomous Development Meets Real-World Risk  | Sonatype Webinar](/content/resources/webinars/autonomous-development-meets-risk/index.html): Discover how to navigate risk in autonomous development. Join experts from Sonatype and AWS for insights on how to balance speed, AI governance, and security., AI coding agents and generative AI are accelerating development, but without real-time intelligence, they introduce new forms of supply chain risk. In t... (344 words)
- [How to Safeguard Your Software Supply Chain](/content/blog/how-to-safeguard-your-software-supply-chain/index.html): Sonatype CTO Brian Fox and Forrester Senior Analyst Janet Worthington discuss securing your organization's software supply chain. (465 words)
- [The Evolution of OSS Index in the Age of AI | Sonatype](/content/blog/the-evolution-of-oss-index-in-the-age-of-ai/index.html): As AI reshapes software development, OSS Index evolves. Discover how Sonatype Guide delivers real-time intelligence for AI-driven SDLCs. (1,150 words)
- [Financial Institution Prevents $5.5 Million Malware Threat](/content/customer-stories/financial-institution-prevents-malware-threat/index.html): Learn how Sonatype Repository Firewall identified 75+ malware attacks that eluded a Fortune 200 financial institution's custom systems. (209 words)
- [The Sonatype Newsroom | Sonatype Press Releases](/content/newsroom/index.html): Learn the latest about Sonatype. Explore our announcements, press coverage, brand assets, and more. Have inquiries? Contact our press team. (487 words)
- [Sonatype Nexus Repository 3 Versions Status](/content/help/en/sonatype-nexus-repository-3-versions-status-html.html) (1,425 words)
- [Wicked Good Development: Reflect on Devnexus Conversations](/content/blog/wicked-good-development-dev-nexus-part-2/index.html): From a discussion at Devnexus 2022, a varied conversation about development and open source security from an open source maintainer and contributor.  , Brad Wood, Software Architect at Ortus Solutions says “everybody should be secure” when it comes to open source security. Hear Brad’s distinctive perspective after occupying roles of both an open source maintainer and contributor. From the advantages of using ColdFusion to the effects of trust in development like abandonware and namespace confusion attacks, Brad covers it all with Wicked Good Development at DevNexus 2022.
Check out the resources from today's episode here.  (5,670 words)
- [Search Sonatype Nexus Repositories Using Python and REST API](/content/blog/2008/11/searching-with-the-sonatype-nexus-rest-api-python/index.html): Explore how to list repositories and search for artifacts in Sonatype Nexus using Python scripts and the REST API. (844 words)
- [KubeSecOps: Kubernetes Security Practices You Should Follow](/content/blog/kubesecops-kubernetes-security-practices-you-should-follow.html): Karthik Gaekwad, (@iteration1), a developer and cloud native evangelist at Oracle, shares tips and tools to ensure your Kubernetes containers are secure. 
 (590 words)
- [The Complex Landscape of Open Source Supply Chain Attacks](/content/blog/the-shifting-landscape-of-open-source-supply-chain-attacks.html): A deep dive into how modern supply chains manage problems, and how companies looking to secure their software supply chains can learn from their mistakes. (1,369 words)
- [The Role Google Plays in How Developers Find Dependencies](/content/blog/2012/04/how-do-most-people-find-new-dependencies-google/index.html): Discover how developers find new dependencies and the challenges they face, highlighting the need for reliable data in evaluating open source software. (1,385 words)
- [How to Implement Federal DevOps and System Modernization](/content/blog/how-are-federal-agencies-implementing-devops-system-modernization.html): Learn how the Department of Homeland Security (DHS) is leading the DevOps charge with a recent project to modernize mission-critical systems at USCIS. (246 words)
- [Sonatype Nexus Repository 3.87.0 - 3.87.2 Release Notes](/content/help/en/sonatype-nexus-repository-3-87-0-release-notes-html.html) (2,139 words)
- [The Ultimate SBOM Guide | Sonatype](/content/resources/guides/ultimate-sbom-guide/index.html): Discover essential strategies and best practices for managing Software Bills of Materials (SBOMs) to enhance security and ensure compliance. (337 words)
- [What a Year of DORA Reveals About Cyber Resilience | Sonatype](/content/blog/what-a-year-of-dora-reveals-about-cyber-resilience/index.html): A year into DORA, Sonatype discusses lessons emerging on cyber resilience, third-party risk, SBOMs, and why visibility is not enough to prevent incidents. (1,010 words)
- [Benefits of a Repository Manager: Part I | Sonatype Blog](/content/blog/2010/08/benefits-of-a-repository-manager-part-i/index.html): Discover the essential benefits of using a repository manager for Java development, from dependency management to improved production deployment. (944 words)
- [Sonatype Nexus 3 Launches Into Mesosphere DC/OS](/content/blog/sonatype-nexus-3-launches-into-mesosphere-dc/os/index.html): The incredibly popular repository manager and private container registries, Nexus Repository, is now available on Mesosphere DC/OS.   (587 words)
- [Bryan Batty von der Bloomberg Industry Group | Sonatype](/content/blog/bloomberg-industry-german1/index.html): Bryan Batty von der Bloomberg Industry Group teilt in einem vierteiligen Gespräch mit Mark Miller seine Erfahrungen bezüglich der Stärkung der Software Supply. (1,670 words)
- [CVE-2024-5764 - Nexus Repository Manager 3 - Static hard-coded encryption passphrase used by default - 2024-10-17 – Sonatype Support](/content/support/hc/en-us/articles/34496708991507/index.html): Sonatype Nexus Security Advisory Date:  Oct 17, 2024 Affected Versions:  All previous Sonatype Nexus Repository Manager 3.x OSS/Pro... (495 words)
- [Security Risk Trends](/content/help/en/security-risk-trends-html.html) (1,800 words)
- [Guice 3.0 RC2 Now Available in Maven Central | Sonatype](/content/blog/2011/01/guice-3-0-rc2-is-in-maven-central/index.html): Guice 3.0 RC2 is now available in Maven Central, thanks to Sonatype's efforts in integrating Maven build systems and ensuring seamless deployment.  (637 words)
- [AppSec Tools Explained: SAST vs SCA vs DAST | Sonatype](/content/blog/your-guide-to-appsec-tools-sast-or-sca/index.html): Compare SAST vs SCA vs DAST key differences, when to use each, and how to choose the right AppSec tools to reduce risk across your software supply chain.  (3,064 words)
- [Your Outdated Repository Still Works, But It May Not Be Safe](/content/blog/your-outdated-repository-still-works-but-it-may-not-be-safe.html): Recent CVEs affecting older Nexus Repository and OrientDB-era deployments show why repository modernization is now a security and supportability priority. (1,013 words)
- [Sonatype - 2020-0003 | npm Malicious Package 1337qq-js](/content/blog/sonatype-2020-0003-npm-malicious-package-1337qq-js/index.html): In this month's Nexus Intelligence Insights, we cover Sonatype-2020-0003: npm malicious package 1337qq-js. Here's why it made noise but had no impact.

 (738 words)
- [Sonatype on Federal News Radio](/content/blog/sonatype-on-federal-news-radio/index.html): Listen to Matt Howard, Executive Vice President and Chief Marketing Officer at Sonatype, on Federal News Radio as he discusses the demand for quality open. (74 words)
- [New Features and Improvements in Sonatype Nexus Repository 1.4](/content/blog/2009/10/new-features-in-nexus-and-nexus-professional-14/index.html): Explore the new features in Sonatype Nexus Repository 1.4, including enhanced security, usability improvements, and advanced management capabilities. (1,068 words)
- [How AI and Vibe Coding Changed the Rules of Software Security](/content/blog/how-ai-and-vibe-coding-are-changing-the-rules-of-software-security.html): AI and vibe coding are redefining software development. Learn how to balance innovation, developer speed, and security in the age of AI-driven coding. (791 words)
- [Sonatype MCP Server for Dependency Management | Sonatype](/content/blog/sonatype-dependency-management-mcp-server-now-live-in-oss-mcp-registry.html): The Sonatype MCP server is now live in the GitHub MCP registry. Empower AI coding tools with secure dependency management and compliant open source components. (940 words)
- [Multi-Level Staging and Build Promotion With Nexus 1.7](/content/blog/2010/07/multi-level-staging-and-build-promotion-with-nexus-pro-1-7.html): Discover how Nexus Professional's multi-level staging and build promotion enhance artifact testing and releasing, ensuring validation before deployment. (557 words)
- [Finalists Announced for First Sonatype Elevate Awards](/content/press-releases/finalists-announced-for-inaugural-sonatype-elevate-awards-1.html): Sonatype is celebrating bold innovators and fearless experimenters transforming software supply chain management with the inaugural Sonatype Elevate Awards (476 words)
- [Optimizing CI/CD Pipelines with Containers for Enhanced Security](/content/blog/continuous-integration-in-the-age-of-containers-part-2.html): Discover how containers revolutionize CI/CD processes, enhance delivery consistency, and improve DevSecOps collaboration. Learn more in this blog. (851 words)
- [Lessons From The Hudson Build Farm | Sonatype](/content/blog/2009/01/the-hudson-build-farm-experience-volume-i/index.html): Learn how Sonatype's Hudson-based CI system to enhance Maven builds across multiple platforms. Discover the setup and goals of this advanced build farm. (1,763 words)
- [Understanding the Impact of CVSS 3.1 on Enterprise Security](/content/blog/what-does-the-new-cvss-3-1-scoring-model-mean-for-enterprise-security.html): Learn how CVSS 3.1 is different from earlier versions and why changes to this security rating matters. 
 (752 words)
- [Sonatype Experiences 78% Year-Over-Year Growth | Sonatype](/content/press-releases/2017-momentum-release-1/index.html): Sonatype, the leader in automated open source governance •  Sonatype Reports 78% Year-over-Year Growth as Equifax and GDPR accelerate global demand  (414 words)
- [The 2018 State of the Software Supply Chain Report Is Here](/content/blog/2018-state-of-the-software-supply-chain-report/index.html): Today, Sonatype introduces the 2018 State of the Software Supply Chain Report, on managing
open source components to accelerate innovation.  (490 words)
- [Combining Open Source Policies, Practice, & Tools | Sonatype](/content/blog/2014/02/secure-from-start/index.html): Learn how integrating open source policies, practices, and tools from the start can enhance application security and align with industry guidelines. (646 words)
- [Understanding Software Dependencies: A Guide for Beginners](/content/blog/software-dependencies-a-beginners-guide/index.html): Explore software dependencies, including direct and transitive dependencies and their security and compliance risks. Learn to manage dependencies at scale. (1,016 words)
- [Dynamic Storage Enhancements: 4 Improvements to Blob Storage](/content/blog/dynamic-storage-improvements-3-15.html): The release of Nexus Repository 3.15 this month builds on our blob storage functionality with the launch of Dynamic Storage.  (498 words)
- [C/C++ Application Analysis](/content/help/en/c-c-application-analysis-html.html) (915 words)
- [AI Is Making Software Autonomous, and Governance Must Follow](/content/blog/ai-is-making-software-autonomous-and-governance-must-follow.html): AI is accelerating software creation faster than human governance can scale. Learn why machine-speed trust systems are essential for secure development. (669 words)
- [A 'fix-crash' Info-Stealer and 500+ Malicious npm Packages](/content/blog/this-week-in-malware-a-fix-crash-info-stealer-and-500-malicious-npm-packages.html): Explore the latest malware threats, including malicious npm packages and a 'fix-crash' info-stealer targeting Discord tokens. Mitigate your risk today. (649 words)
- [Resiliency](/content/help/en/resiliency-and-high-availability-html.html) (2,091 words)
- [Sonatype IQ Server 191 Release Notes](/content/help/en/sonatype-iq-server-191-release-notes-html.html) (1,521 words)
- [DevOps: Making the Boring Things Stay Boring](/content/blog/devops-making-the-boring-things-stay-boring/index.html): Robots have, “Lower utility, but greater predictability.” They do exactly what they are told, and they do it the same way, every time. (559 words)
- [Sonatype Nexus Repository 1.5.0 Highlights: LDAP Integration](/content/blog/2010/01/nexus-1-5-0-highlights-open-sourcing-nexus-ldap-integration.html): Discover the new LDAP integration features in Sonatype Nexus Repository 1.5.0, which enhance user authentication and authorization capabilities for free. (649 words)
- [AgentOps Is Here: What DevSecOps Leaders Need to Do Now](/content/blog/agentops-is-here-what-devsecops-leaders-need-to-do-now.html): AgentOps explains why DevSecOps breaks at agent speed, and how policy, not people, becomes the control plane when AI agents become software actors. (1,536 words)
- [Software Composition Analysis Best Practices | Sonatype Webinar](/content/resources/webinars/sca-forrester-webinar/index.html): Discover best practices for software composition analysis in this webinar featuring expert insights from leaders at Forrester and Sonatype. Watch now., Join us for an exclusive fireside chat featuring Tyler Warden, Senior Vice President, Product, at Sonatype, and guest speaker Janet Worthington, Senior ... (277 words)
- [Maturing DevOps in TD Bank](/content/blog/maturing-devops-in-td-bank/index.html): TD Bank has big global growth goals, but are also working toward a huge digital transformation. (876 words)
- [Raw Repositories](/content/help/en/raw-repositories-html.html) (1,350 words)
- [Track the Noblox.js NPM Malware: Techniques and Prevention](/content/blog/tracking-the-noblox-js-npm-malware-campaign.html): Another malicious npm package, noblox.js-rpc was spotted on registry that leverages familiar techniques to steal all sorts of sensitive data. (874 words)
- [Central Maven Traffic: Investigation and Analysis | Sonatype Blog](/content/blog/2008/12/central-maven-repository-traffic-investigation-and-analysis.html): Discover how we tackled traffic spikes on the Maven Central Repository by optimizing server performance and identifying sources of excessive traffic. (846 words)
- [Five Ways to Improve Your Code Quality](/content/blog/five-ways-to-improve-your-code-quality/index.html): Discover 5 strategies to enhance code quality, boost software performance, and reduce development risks. Learn coding best practices with Sonatype. (1,066 words)
- [Sonatype Customers Lead Innovation with Secure Software](/content/blog/sonatype-customers-leading-with-innovation-in-the-new-year.html): See how Sonatype customers innovate in 2025, securing software supply chains and delivering safe, high-performing applications across industries. (474 words)
- [Meet an Open Source Developer: Lex Vorona](/content/blog/meet-an-open-source-developer-lex-vorona/index.html): Lex Vorona, a Software Engineer at Sonatype, discusses his journey and career in open source as part of our series for World Open Source Day 2023.  (1,937 words)
- [License Policy Governance](/content/help/en/license-policy-governance-html.html) (1,288 words)
- [Automate Nexus Reports for Security & License Management](/content/blog/2015/08/automated-nexus-reports-on-licenses-security-and-more.html): Discover how Sonatype Nexus Repository's automated health checks can enhance your software security and license management. (835 words)
- [Unlock the Power of Binary Repositories: A Guide for DevOps](/content/blog/unlocking-the-power-of-binary-repositories-a-devops-teams-best-friend.html): Explore how a well-managed binary repository can be your silent hero, streamlining dependency management and fortifying security.
 (436 words)
- [Secure Your Software Supply Chain on AWS: Insights from ADDO](/content/blog/addo-session-secure-your-application-supply-chain-on-aws.html): Learn how to secure your software supply chain with AWS tools and best practices. Discover the importance of SBOMs and DevSecOps for building software. (426 words)
- [Preparing SBOMs for Audits | Sonatype Guide](/content/resources/guides/preparing-sboms-for-audits/index.html): Enhance your audit readiness for SBOM compliance with best practices and expert guidance to adhere to industry-specific cybersecurity regulations. (623 words)
- [La IA sin Control: El Nuevo Riesgo Oculto del Open Source | Sonatype](/content/2026-profesia-tasting-event/index.html): Establecer contactos con otros profesionales de la seguridad y el desarrollo, centrándose en la experiencia práctica de los equipos técnicos. (205 words)
- [Configuring SSL](/content/help/en/configuring-ssl-html.html) (1,501 words)
- [Custom Vulnerability Attributes](/content/help/en/custom-vulnerability-attributes-html.html) (1,227 words)
- [Firewall for Artifactory Release Notes](/content/help/en/repository-firewall-for-artifactory-plugin-release-notes-html.html) (582 words)
- [Sonatype IQ Server 195 Release Notes](/content/help/en/sonatype-iq-server-195-release-notes-html.html) (1,013 words)
- [Testing JavaScript with Apache Maven: A Comprehensive Guide](/content/blog/2010/03/on-the-web-testing-javascript-with-apache-maven/index.html): Learn how to integrate JavaScript testing into your Apache Maven build process using Rhino, the Maven Jetty plugin, and Testlol. (421 words)
- [Navigating SBOMs and New Software Security Regulations](/content/blog/navigating-new-regulations-and-the-role-of-sboms-in-software-security.html): Explore how emerging global regulations and the expanding role of software bills of materials (SBOMs) are shaping the future of software security. (717 words)
- [Run as a Service](/content/help/en/run-as-a-service-html.html) (1,450 words)
- [Sonatype Announces 300% Growth in Nexus Repository Use](/content/press-releases/300-percent-growth-in-nexus-repository-manager-use/index.html): Sonatype, the leader in software supply chain automation, today announced 300 percent growth in the use of Nexus Repository over the past three years. (538 words)
- [Sonatype CEO on the Future of AI-Native Software Development](/content/resources/videos/ai-native-software-development-vision/index.html): Hear Sonatype CEO Bhagwat Swaroop discuss AI-native software development, Nexus One, and how Sonatype is helping organizations innovate securely.

 (63 words)
- [Vulnerability Prioritization Is Missing the AI-Era Point](/content/blog/focusing-on-vulnerability-prioritization-is-missing-the-ai-era-point.html): Vulnerability prioritization is not enough. Learn why software composition analysis, automation, and real-time intelligence reduce supply chain risk. (1,723 words)
- [Success Metrics Data REST API](/content/help/en/success-metrics-data-rest-api-html.html) (533 words)
- [Open Source Supply, Demand, and Security](/content/resources/state-of-the-software-supply-chain-2022/oss-dependency-management/index.html): In their 8th annual report, Sonatype analyzes data surrounding growth and security concerns in open source software and the software supply chain. (3,327 words)
- [Repository Firewall Evaluation API](/content/help/en/firewall-evaluation-api-html.html) (405 words)
- [Survey: Microservices, Containers, & Serverless Development](/content/blog/take-our-survey-microservices-containers-and-serverless-development.html): If you are excited about microservices, containers, or serverless development, please fill out this survey to shape the future of Nexus IQ.  (224 words)
- [Download Nexus Repository Community Edition | Sonatype](/content/products/nexus-community-edition-download/index.html): Get your free download of Sonatype Nexus Repository Community. Manage all your components from the world's #1 binary artifact repository. (558 words)
- [DevOps Leadership Series: Software Supply Chains](/content/blog/2015/05/devops-leadership-series-software-supply-chains-video.html): Another theme that arose often during our recent “DevOps: Wine-ing, Not Whining” event was the importance of software supply chains. (261 words)
- [Malware Roundup: A PyPI Phishing Follow-Up Plus 120 Packages](/content/blog/this-week-in-malware-sept-2-22/index.html): This week Sonatype discovered and analyzed 120 packages flagged as malicious, suspicious, or dependency confusion attacks.
 (663 words)
- [Maven in the Wild: A Review of the Maven by Example book](/content/blog/2010/01/maven-in-the-wild-smarts-mythbusters-and-a-review-of-the-maven-book.html): Debunks Maven myths and view contributions to Maven by Example with highlights into community involvement in improving open-source projects. (446 words)
- [Sonatype Nexus Repository 3.73.0 Release Notes](/content/help/en/sonatype-nexus-repository-3-73-0-release-notes-html.html) (1,111 words)
- [John Deere Dependency Confusion Attempt and More | Sonatype Blog](/content/blog/this-week-in-malware-john-deere-dependency-confusion-attempt-and-more.html): We analyzed 17 packages, at least a dozen of which were dependency confusion PoCs directly targeting the agricultural equipment giant John Deere. (441 words)
- [Advanced Nexus Diagnostics with Nexus 2.0 Describe Flag](/content/blog/2012/02/advanced-nexus-diagnostics-with-the-nexus-2-0-describe-flag.html): Gain insights into how Sonatype Nexus Repository is resolving artifacts with our new debugging tool. See how it can improve artifact management. (367 words)
- [404 Page not found](/content/help/repomanager3/installation/accessing-the-user-interface/index.html) (25 words)
- [Exploring Open Source Compliance in Fintech | Sonatype Video](/content/resources/videos/finos-compliance/index.html): Explore the adoption of open source in the fintech industry and how financial services organizations are meeting regulatory requirements. (48 words)
- [Automated Commit Feedback](/content/help/en/automated-commit-feedback-html.html) (433 words)
- [Sonatype SBOM Manager Offers Rapid, Reliable Compliance at Scale](/content/press-releases/sonatype-sbom-manager-prepares-enterprises-for-rapid-reliable-compliance-at-scale.html): Discover the importance of SBOMs in achieving compliance and enhancing security posture. Learn how Sonatype SBOM Manager sets enterprises up for success. (947 words)
- [Sonatype Platform AWS Reference Architectures](/content/help/en/aws-reference-architectures-html.html) (532 words)
- [Sonatype IQ Server 188 Release Notes](/content/help/en/sonatype-iq-server-188-release-notes-html.html) (896 words)
- [Speedy-ts-compiler: npm Package Exfiltrates IP Addresses](/content/blog/distraction-technique-npm-get-cache/index.html): We analyze hundreds of suspicious npm and PyPI packages, but this one stood out to us. An npm package that downloads another empty npm package? Learn more. (788 words)
- [Rugged DevOps: Less Capture the Flag, More Teamwork](/content/blog/2016/02/rugged-devops-less-capture-the-flag-more-teamwork/index.html):  I caught up with Chris Corriere at DEVNEXUS -- DevOps Engineer at AutoTrader -- to talk about his experiences in the realm of Rugged DevOps.  (1,860 words)
- [Installation on AWS](/content/help/en/installation-on-aws-html.html) (809 words)
- [Understanding Software Artifact Repositories | Sonatype](/content/blog/2009/04/what-is-a-repository/index.html): Artifact repositories help developers to build secure and stable software. Learn about repositories, and their role in the software development lifecycle. (1,663 words)
- [Chapter 2: Groovy Maven | Sonatype Maven Cookbook](/content/resources/guides/maven-cookbook/groovy-maven/index.html): Discover the magic of Groovy Maven and the synergy between Apache Maven and Groovy, empowering your build process with simplicity and flexibility. (1,010 words)
- [Writing Nexus Plugins: A Comprehensive Guide | Sonatype](/content/blog/2009/06/writing-plugins-for-nexus-part-1/index.html): Learn how to create plugins for Sonatype Nexus without diving deep into Plexus internals, making it easier for third-party developers to extend the platform. (2,303 words)
- [Sonatype Nexus Repository 3.71.0 Release Notes](/content/help/en/sonatype-nexus-repository-3-71-0-release-notes-html.html) (1,081 words)
- [Sonatype Nexus Repository 3.50.0 Release Notes](/content/help/en/sonatype-nexus-repository-3-50-0-release-notes-html.html) (838 words)
- [Weekly Tech Roundup: Maven, OSGi, and JavaFX Updates](/content/blog/2009/10/07-in-other-news/index.html): Weekly roundup featuring blog posts on Nexus, Maven, and Sonatype contributions, including insights on OSGi, Spring 3 RC1, Qi4j, and JavaFX with Maven. (289 words)
- [Change Repository Blob Store Task Performance Testing](/content/help/en/change-repository-blob-store-task-performance-testing-html.html) (879 words)
- [Accelerate Continuous Delivery with NuGet Package Management](/content/blog/2015/01/accelerating-continuous-delivery/index.html): Recently at Microsoft’s TechEd in Europe, Marcel de Vries, Visual Studio ALM MVP and CTO Xpirit, wowed the audience when presenting a talk on how to. (202 words)
- [Top 10 Maven Myths Debunked: Insights and Actions](/content/blog/2010/03/10-maven-myths-debunked/index.html): Discover and debunk the top 10 myths about Maven, offering clear analysis and actionable insights for developers. Read more for a deeper understanding! (230 words)
- [Dependency Hijacking Attack Breaches 35 Companies in Exploit](/content/blog/dependency-hijacking-software-supply-chain-attack-hits-more-than-35-organizations.html): A security researcher managed to breach systems of over 35 tech companies in what has been described as a novel software supply chain attack.
 (1,797 words)
- [Can the Open Source Community Save Europe from the CRA?](/content/blog/can-the-open-source-community-save-europe-from-the-cyber-resilience-act.html): Examine the open source community's response to the EU Cyber Resilience Act, and its potential consequences for the future of innovation & collaboration. (1,668 words)
- [42,000 Nexus Repository Managers, and Growing | Sonatype Blog](/content/blog/2014/11/42000-nexus-repository-managers-and-growing/index.html): Nexus Repository Manager instances double to 42,000 in 15 months. Discover the growth, trends, and upcoming features in the open source space. (1,172 words)
- [Malicious Python Packages Exfiltrate AWS Keys and Secrets](/content/blog/python-packages-upload-your-aws-keys-env-vars-secrets-to-web.html): Multiple Python packages caught by Sonatype were seen uploading secrets such as AWS keys and environment variables to a web endpoint.  (818 words)
- [Firewall Pro Blocking Logic](/content/help/en/firewall-pro-blocking-logic-html.html) (413 words)
- [NCI Leverages Sonatype Nexus to Enhance Cancer Research](/content/blog/nexus-helps-cure-cancer/index.html): At the 2018 Nexus User Conference, Sarah Elkins discussed how the National Cancer Institute uses Sonatype Nexus Repository to manage their applications. (523 words)
- [Install Maven: A Step-by-Step Installation Guide | Sonatype](/content/maven-complete-reference/installing-maven/index.html): Follow this Maven installation guide to get started. Learn how to install Apache Maven step-by-step with this definitive reference from the experts at Sonatype. (2,164 words)
- [PyPI CLI Usage](/content/help/en/pypi-cli-usage-html.html) (460 words)
- [How to Publish Java Artifacts to Sonatype Nexus Repository](/content/blog/how-to-publish-java-artifacts-to-nexus-using-jenkins-and-maven.html): In this article we are going to explore how you can publish Java artifacts (.ear, .jar, .war) to Nexus 3 using Jenkins and Maven. (614 words)
- [Terraform Repositories](/content/help/en/terraform-repositories-html.html) (410 words)
- [Getting the Firewall results page through the JFrog Artifactory API](/content/help/en/getting-the-firewall-results-page-through-the-jfrog-artifactory-api-html.html) (140 words)
- [Size XL - Sonatype IQ - Azure Cloud-Native Reference Architecture](/content/help/en/iq-xl-azure-reference-architecture-html.html) (639 words)
- [Reviewing Security Vulnerabilities](/content/help/en/reviewing-security-vulnerabilities-html.html) (327 words)
- [Automated Setup of Sonatype Nexus Repository](/content/blog/automated-setup-of-a-repository-manager/index.html): Nexus Repository Manager starting with version 3+ provides a Provisioning REST API which allows the upload of scripts to Nexus and execution of those scripts. (862 words)
- [Living Our Core Values: A Journey of Growth and Inclusion](/content/blog/living-six-months-of-core-values/index.html): Sonatype launched our core values at the beginning of 2022 and have spent the first half focusing on living them every day.
 (1,094 words)
- [9 Top DevOps Conferences for Developer's | Sonatype](/content/blog/top-9-devops-conferences-a-developers-picks/index.html): With so many excellent DevOps conferences in the market, sometimes it's hard to choose what to attend. (1,801 words)
- [OCI Repositories](/content/help/en/oci-repositories-html.html) (411 words)
- [Repository Firewall Release Notes](/content/help/en/repository-firewall-release-notes-html.html) (58 words)
- [Q&A: Running Docker in Production | Sonatype Blog](/content/blog/2015/11/qa-running-docker-in-production/index.html): Discover insights on running Docker in production with Sonatype Nexus Repository, including Docker support, migrations, and security features. (1,588 words)
- [Unraveling 'csrf-magic': A Supply Chain Poisoning Case Study](/content/blog/the-curious-case-of-csrf-magic-a-case-study-in-supply-chain-poisoning.html): Discover how a cloned open source project led to a critical backdoor vulnerability in Ivanti products, shedding light on the risks in the OSS ecosystem. (891 words)
- [Software Supply Chain Risks | 2026 Software Supply Chain Report](/content/state-of-the-software-supply-chain/2026/open-source-malware/index.html): Explore the rise of open source malware and software supply chain attacks. Learn how to mitigate your risk with policy controls and secure practices. (2,879 words)
- [The 2026 CISO & CTO AI Governance Playbook Framework | Sonatype](/content/resources/whitepapers/ai-governance-framework-ciso-cto/index.html): Master AI governance with this 2026 playbook. Learn to align AI risk management with the CRA using AI-SCA, AIBOMs, and automated supply chain security controls.  (2,387 words)
- [CPE Matching Experience in SBOM Manager vs. Lifecycle](/content/help/en/cpe-matching-experience-per-solution-html.html) (374 words)
- [Usage Center](/content/help/en/usage-center-html.html) (357 words)
- [Sonatype Lifecycle](/content/help/en/sonatype-lifecycle-html.html) (124 words)
- [DevOps Research Reveals Changing Telecom Attitudes](/content/press-releases/appsec-in-telecommunications-sector/index.html): Sonatype, the leader in software supply chain automation, today announced the telecommunications results of its 2017 DevSecOps Community Survey. (633 words)
- [Solana-Py Typosquat: How Hackers Steal Crypto Wallet Keys](/content/blog/an-ideal-pypi-typosquat-solana-py-is-here-to-steal-your-crypto-keys.html): The Sonatype Security Research team analyzed a suspicious package, solana-py, which appeared on PyPI this week. (754 words)
- [Sonatype Lifecycle Best Practices for Backup and Restore](/content/blog/sonatype-lifecycle-best-practices-reference-policies-backup-and-restore.html): Explore how Sonatype Lifecycle offers powerful capabilities to enhance security with effective reference policies and robust backup and restore processes (1,132 words)
- [Preparing Atlassian Crowd](/content/help/en/preparing-atlassian-crowd-html.html) (427 words)
- [Nexus Repository 3.34.0 - 3.34.1 Release Notes](/content/help/en/nexus-repository-3-34-0-3-34-1-release-notes-html.html) (467 words)
- [DevOps Metrics: Measuring What Matters](/content/blog/devops-metrics-measuring-what-matters/index.html): Achieving high levels of collaboration between teams is challenging. So, you need to address the issue in a systematic manner.  (947 words)
- [New GitLab and Lifecycle Integration Enhances Security](/content/blog/say-hello-to-our-new-gitlab-integration/index.html): Nexus Lifecycle now integrates with GitLab CI, bringing precise open source intelligence to GitLab users.  (436 words)
- [Publishing Docker Images on Sonatype Nexus Repository with Maven](/content/blog/how-to-publish-docker-images-on-a-private-nexus-repository-using-jib-maven-plugin.html): Learn how to publish Docker images to a private Nexus repository with the help of the Maven Jib plugin. (828 words)
- [Swift Repositories](/content/help/en/swift-repositories-html.html) (227 words)
- [DevOps Leadership Series: Gov Does DevOps (Part 2)](/content/blog/2015/06/devops-leadership-series-gov-does-devops-part-2/index.html): During my second day at DevOpsDays DC, I had the opportunity to catch up with a couple more industry thought leaders. (255 words)
- [Measuring Software Supply Chain Progress | Sonatype Insights](/content/state-of-the-software-supply-chain/2023/software-supply-chain-maturity/index.html): Dive into 'Software Supply Chain Maturity' with insights from 621 experts on AI, SBOMs, and open source risk. (2,436 words)
- [Alpine Repositories](/content/help/en/alpine-repositories-html.html) (177 words)
- [Maven SNAPSHOT Tasks](/content/help/en/maven-snapshot-tasks-html.html) (254 words)
- [10 Best Practices for Microservice Architectures | Sonatype](/content/blog/10-best-practices-for-microservice-architectures/index.html): We know the challenges of sustaining a monolithic architecture over many years, so we seek new alternatives to sustainability, flexibility, and ease of. (484 words)
- [Nexus Repository 1.3.5 Released: Key Updates and Bug Fixes](/content/blog/2009/07/nexus-135-released/index.html): Sonatype Nexus Repository 1.3.5 introduces OSGI Bundle Repository support and significant bug fixes, enhancing performance and reliability.  (727 words)
- [Optimize Your SBOM Management with Sonatype's SBOM Manager](/content/blog/streamline-your-sbom-management-with-sbom-manager/index.html): Discover Sonatype's new world-class tool designed to streamline the way you manage software bills of materials (SBOMs) across all of your software (752 words)
- [Meet an Open Source Contributor: Hervé Boutemy](/content/blog/meet-an-open-source-contributor-herve-boutemy/index.html): Meet Hervé Boutemy, one of the incredible open source contributors at Sonatype. Learn more about him. (701 words)
- [Self Hosted to Cloud Migration](/content/help/en/self-hosted-to-cloud-migration-html.html) (206 words)
- [Container Security Solutions | Sonatype](/content/solutions/container-security/index.html): Secure containerized applications by scanning images for vulnerabilities, enforcing CI/CD security policies, and inspecting container network traffic. (1,095 words)
- [NuGet Application Analysis](/content/help/en/nuget-application-analysis-html.html) (684 words)
- [Sonatype Platform Overview](/content/help/en/sonatype-product-overview-html.html) (286 words)
- [Sonatype Software Supply Chain Intelligence in IntelliJ IDEA](/content/press-releases/sonatype-intellij-idea/index.html): Sonatype, the leader in software supply chain automation, today announced Nexus Lifecycle support for IntelliJ IDEA. (354 words)
- [What is Dynamic Application Security Testing (DAST)? | Sonatype](/content/resources/articles/what-is-dast/index.html): What is DAST? Explore Dynamic Application Security Testing and see the pros and cons of DAST vs SAST for your application security strategy. (1,905 words)
- [Sonatype Unveils Nexus One: An AI-Native DevSecOps Platform](/content/press-releases/sonatype-unveils-nexus-one-platform/index.html): Sonatype launches Nexus One, a single, agentic software supply chain infrastructure unifying open source intelligence, governance, and automation. (627 words)
- [More Malware: Malicious 'botaa3' PyPI Package Taken Down](/content/blog/another-day-of-malware-malicious-botaa3-pypi-package.html): A typosquatting attack aimed at the boto3 AWS project, handing system controls to the attacker.  (792 words)
- [m2e at Eclipse: What Will This Mean for You?](/content/blog/2010/12/m2e-at-eclipse-what-will-this-mean-for-you/index.html): Discover what the move of m2e to the Eclipse Foundation means for users, including its alignment with Eclipse components and the impact on m2e extensions. (337 words)
- [DevOps: Building Better Pipelines](/content/blog/devops-building-better-pipelines/index.html): “The deployment pipeline takes value from development and delivers it to clients. (579 words)
- [We're a Java shop, we're not going to get hacked | Sonatype Blog](/content/blog/2012/03/were-a-java-shop-were-not-going-to-get-hacked/index.html): Developers must prioritize security by addressing vulnerabilities in open source components to prevent attacks and maintain system integrity. (804 words)
- [10 Years of Open Source: Growth, Challenges, & the Future](/content/blog/10-years-of-software-supply-chains-navigating-the-growth-risks-and-future-of-open-source.html): Learn how open source adoption, security challenges, and malicious packages impact software. Discover insights to secure your software supply chain. (1,256 words)
- [Open Source in Financial Services: Benefits and Risks Explained](/content/blog/2014/02/fs-isac-policy-enforcement/index.html): Financial services are increasingly adopting open source components for faster development, but they must manage vulnerabilities. Learn more in the blog. (750 words)
- [Real World Experiences: Blackboard](/content/blog/2015/04/blackboard/index.html): As part of a new series we're calling 'Real World Experiences' we'll be highlighting how Sonatype customers are benefiting from greater development. (667 words)
- [Sonatype Announces Free Git LFS Support for Nexus Repository](/content/press-releases/git-lfs-support-for-nexus/index.html): Sonatype's Nexus Repository now offers free Git LFS support. This first to market capability helps organizations enhance their DevOps toolchains. (394 words)
- [Sonatype Nexus Repository: New Support for S3 Blob Stores](/content/blog/nexus-repository-3-12-support-for-s3-blob-stores.html): Sonatype Nexus Repository 3.12 now supports S3 blob stores, simplifying storage management and enhancing scalability for AWS deployments. Learn more now. (332 words)
- [The Benefits of Remote Work Beyond Avoiding COVID-19](/content/blog/the-benefits-of-remote-work-extend-beyond-avoiding-the-coronavirus.html): The advantages we've realized with Sonatype's remote organization are evident. Here, lessons for anyone new to working from home to avoid the Coronavirus.  (781 words)
- [DevOps: The Last Great Hope for Application Security?](/content/blog/2014/04/devops-application-security/index.html): Once upon a time, there was a great battle between speed and security. Development wanted to go fast. But, security wanted to slow down and be safe. (826 words)
- [Software Composition Analysis & SBOMs in Dev Workflows](/content/blog/evolving-development-with-software-composition-analysis-and-software-bills-of-materials.html): Discover the importance of both software composition analysis and SBOM management in modern software development. (857 words)
- [Sonatype: 2025 Gartner Magic Quadrant for AST | Sonatype](/content/blog/sonatype-named-a-visionary-in-the-2025-gartner-magic-quadrant-for-application-security-testing.html): Sonatype named a Visionary in the 2025 Gartner Magic Quadrant for Application Security Testing. Explore our recognized AI-driven DevSecOps and AST solutions. (627 words)
- [Multimedia Company Improves Developer Efficiency | Sonatype](/content/customer-stories/major-multimedia-corporation-improves-developer-efficiency-with-sonatype.html): Media giant enhanced security and developer efficiency by adopting Sonatype Lifecycle, reducing false positives and negatives while streamlining processes. (501 words)
- [Sonatype Support and Professional Services](/content/products/support/index.html): Experience world-class support with Sonatype, offering tailored solutions, rapid response times, and expert guidance to enhance your success. (866 words)
- [Top 6 Reasons DevSecOps is Needed in the Federal Government](/content/blog/top-6-reasons-the-time-is-now-for-devsecops-in-the-federal-government.html): By playing better offense at the beginning of the digital supply chain, federal agencies can better protect themselves and the American citizenry.  (550 words)
- [DevSecOps Community Survey for 2018](/content/blog/devsecops-community-survey-for-2018/index.html): We have kicked off the 2018 DevSecOps community survey.  Tell us about your experiences. (139 words)
- [Sonatype Intelligence (CVE-2018-10237): Guava Vulnerability](/content/blog/2018/11/welcome-back-to-nexus-intelligence-insights/index.html): Discover the impact of CVE-2018-10237, a Guava vulnerability, and how Sonatype helps you stay ahead of open source software threats. (256 words)
- [Trailblazing Women Shaping the Future of Cybersecurity](/content/blog/women-in-cybersecurity-on-the-shoulders-of-giants/index.html): For Women's History Month, learn about ten women who are experts in their fields and shaping the future of the cybersecurity landscape (1,309 words)
- [Sonatype Named Best Place to Launch a Career](/content/blog/sonatype-named-best-place-to-launch-a-career/index.html): Wealthfront named Sonatype to the 2018 Career Launching Companies List. (473 words)
- [OSS Projects Take Security Seriously: Do You? | Sonatype](/content/blog/2012/04/the-oss-projects-you-depend-on-take-security-seriously-do-you.html): Learn why paying attention to security updates in OSS projects like Tomcat is crucial for maintaining robust security in your organization. (647 words)
- [Introducing Nexus Intelligence Insights | Sonatype Blog](/content/blog/introducing-nexus-intelligence-insights/index.html): Stay ahead of vulnerabilities with Sonatype Intelligence Insights, offering in-depth analysis and actionable intelligence to safeguard your projects. (384 words)
- [Learn How to Stage in Nexus Repository Pro 3.11 | Sonatype](/content/blog/staging-in-nexus-repository-3-11.html): Discover how Nexus Repository Pro 3.11’s new Staging and Tagging features streamline your build workflows and enhance component management. (841 words)
- [Six Memorable Sessions with Government DevSecOps Leaders](/content/blog/six-memorable-sessions-with-government-devsecop-leaders-what-we-learned.html): Chris Roberts, Ron Ross, Katie Arrington, Nicolas Chaillan, and Lauren Knausenberger join Sonatype leadership to discuss security trends in the government. (1,072 words)
- [Google's GWT 2.0.4 Now on Maven Central for Easier Development](/content/blog/2010/07/gwt-2-0-4-now-available-in-maven-central/index.html): Google Web Toolkit (GWT) 2.0.4 is now available on Maven Central, simplifying development and adoption for developers. Learn more about this update. (443 words)
- [Compare SDLC Security Tools for the Best Malware Defense](/content/compare/best-malware-prevention/index.html): Protect enterprise software development from open source malware. Learn how to choose secure SDLC tools to deliver the best malware protection. (846 words)
- [Advancing Application Delivery](/content/blog/advancing-application-delivery/index.html): Swati Shah of US Bank describes the steps required to implement Continuous Delivery in a regulated environment.  (671 words)
- [Sonatype-2020-0196: Protect Bitcoin From Malicious RubyGems](/content/blog/nexus-intelligence-insights-protect-your-bitcoins-from-700-malicious-rubygems-with-sonatype-2020-0196.html): Crafty attackers take advantage of the open source software supply chain through typographical errors. Not even the most sophisticated devs are immune. (595 words)
- [Sonatype Lifecycle and Visual Studio Code Integration](/content/products/integrations/vs-code/index.html): Enhance your development workflow with the VS Code extension for Sonatype Lifecycle, enabling real-time insights into license and policy risks. (386 words)
- [Global Espionage: Lazarus Group Targets OSS Ecosystems](/content/blog/sonatype-uncovers-global-espionage-campaign-in-open-source-ecosystems.html): North Korea's Lazarus Group is attacking developers via open source. Sonatype found over 200 malicious packages. Are you affected? Read the blog post. (692 words)
- [Sonatype Nexus Repository Migration Services](/content/hubfs/1-2025_website-assets/professional-20services-20datasheets/sonatype-20nexus-20repository-20migration-20services-20datasheet-pdf.html) (539 words)
- [Configuring Maven-Jetty Plugin for OpenEJB | Sonatype](/content/blog/2010/03/how-to-configure-the-maven-jetty-plugin-for-openejb.html): Learn how to configure the Maven-Jetty plugin to start Jetty with OpenEJB for improved transaction management. Discover more in Sonatype's detailed guide. (190 words)
- [Optimizing Retention Policies and Cleanup in Nexus Repository](/content/blog/nexus-repository-manager-retention-policies-and-cleanup-survey.html): Manage storage with Sonatype Nexus Repository's cleanup features. Participate in our survey to help shape these tools and optimize your repository usage. (170 words)
- [Apache Maven 3.0 has landed | Sonatype Blog](/content/blog/2010/10/maven-3-0-has-landed/index.html): Apache Maven 3.0 is here, marking a new era. Learn about Sonatype's focus on future improvements in related projects like M2Eclipse and Tycho. (445 words)
- [OWASP Highlights Importance of Component Security](/content/blog/2013/05/owasp-recognizes-component-security/index.html): OWASP highlights the importance of securing open source in modern applications. Learn best practices and tools to ensure safety and reliability in your builds. (377 words)
- [Analyzing Open Source Projects: Beyond Code Commits](/content/blog/2012/04/is-analyzing-open-source-projects-by-contributors-a-valid-metric.html): Analyzing open source projects by contributors alone isn't enough. Explore why comprehensive metrics matter for understanding project health. (615 words)
- [New Sonatype Nexus Repository and Datree Integration](/content/blog/nexus-repo-and-datree-integration-deliver-automated-pipeline-control.html): Nexus Repository/Datree integration applies policy control on GitHub commits to bring together developer codebase visibility and build artifact management. (511 words)
- [DevOps Leadership Series 2015](/content/blog/2015/05/devops-leadership-series-2015/index.html): We recently hosted the 2nd annual “DevOps: Wine-ing, Not Whining” event in San Francisco to bring together a number of thought leaders and leading. (228 words)
- [Setting Up a Secure Dockerized Sonatype Nexus Repository](/content/blog/maxences-technical-corner/index.html): Recently, I was playing with Docker Swarm and I decided to setup a containerized Nexus as my Docker registry. (554 words)
- [What Bintray and JCenter Users Need to Know on Maven Central](/content/blog/dear-bintray-and-jcenter-users-heres-what-you-need-to-know-about-the-central-repository.html): If you're freaking out about moving Java components into The Central Repository, following JFrog sunsetting Bintray,  don’t worry. We’re here for you. 
 (826 words)
- [CVE-2025-69419 | Security Details | Sonatype Guide](/content/guide/vulnerability/cve-2025-69419/index.html): Technical security analysis for CVE-2025-69419. CVSS 7.4 severity. View CVSS vectors, CWE classifications, and exploit maturity ratings. (320 words)
- [Open Source Dependency Management: Trends and Recommendations](/content/resources/state-of-the-software-supply-chain-2022/open-source-supply-demand-security/index.html): Trends and best practices in open source dependency management to improve security, reduce pressure on developers, and prepare for the next Log4j. (2,192 words)
- [Integrated Vulnerability Management | Sonatype and OpenText](/content/press-releases/sonatype-and-opentext-partner/index.html): Sonatype and OpenText are partnering to offer a single integrated solution that combines open-source and custom code security.  (687 words)
- [Project Highlights for World Open Source Day: My OSS Tools](/content/blog/project-highlights-for-world-open-source-day-my-open-source-tools.html): Sonatype's Luke McBride shares some of his favorite open source tools in celebration of World Open Source Day 2023.  (600 words)
- [Log4j Vulnerability Still Being Downloaded 40% of the Time](/content/press-releases/critical-log4j-vulnerability-still-being-downloaded-40-of-the-time.html): Sonatype's Log4j Resource Center: Tackle the 40% download rate of vulnerable versions with free tools for Log4shell. (709 words)
- [Wait... you don't have a repository manager? | Sonatype Blog](/content/blog/2012/07/wait-you-dont-have-a-repository-manager/index.html): Discover the essential benefits of repository managers in software development and debunk common myths that hold teams back. Learn why it's crucial. (931 words)
- [Sonatype Newsletter: Results From Our Development Survey](/content/blog/2011/01/sonatype-newsletter-results-from-our-development-survey-more.html): Stay updated with Sonatype's latest survey results, key insights on software development infrastructure, and upcoming training dates in our recent newsletter. (249 words)
- [Migrating Repositories from Artifactory to Nexus Repository](/content/blog/2010/08/how-to-migrate-repositories-from-artifactory-to-nexus.html): Learn how to migrate repositories easily from JFrog Artifactory to Sonatype Nexus Repository with our step-by-step guide. Get started now. (206 words)
- [Nexus Repository | Simplifying Docker Container Management](/content/blog/sonatype-nexus-repository-as-a-container-registry/index.html): Deploy Nexus as your enterprise Docker registry and OCI container platform. Learn about image management and container registry deployment options (881 words)
- [Stop Malware and Protect Your Repositories with Sonatype](/content/blog/stop-open-source-malware-at-the-gate-with-repository-firewall.html): Discover best practices for using Sonatype Repository Firewall to stop open source malware, quarantine threats, and secure your development pipelines. (818 words)
- [The New Op Model: Why State Farm Sponsored ADDO | Sonatype](/content/blog/this-is-the-new-op-model-why-state-farm-sponsored-addo-and-the-results.html): 4,000 developers from State Farm attended this year's All Day DevOps, sponsored by Sonatype. Why did they attend, and what did they get out of it? (1,140 words)
- [New Spring4Shell Vulnerability: Key Steps for Mitigation](/content/blog/new-0-day-spring-framework-vulnerability-confirmed/index.html): A new remote code execution flaw dubbed Springshell is affecting Spring-beans, exploiting a previously unknown security vulnerability. (857 words)
- [Sonatype Opens New Engineering Hub in India | Sonatype](/content/blog/sonatype-expands-global-innovation-with-new-india-engineering-center.html): Discover Sonatype's new Hyderabad innovation center, Senior Director Abhishek Chauhan's vision for secure software, and India career opportunities. (1,017 words)
- [Defending AI Against Data and Model Poisoning Strategies](/content/blog/the-owasp-llm-top-10-and-sonatype-data-and-model-poisoning.html): Learn how Sonatype helps prevent data and model poisoning in AI by securing training data, models, and dependencies across the software supply chain. (991 words)
- [Partitioning Nexus Repository with Privileges and Roles](/content/blog/2010/02/how-to-partition-nexus-repositories-targets-privileges-and-roles.html): Learn how to streamline Nexus Repository management by consolidating repositories and using targets, privileges, and roles for effective project isolation. (944 words)
- [Securing the Software Supply Chain with Expert Insights](/content/blog/protecting-the-software-supply-chain-insights-from-our-expert-panel.html): Learn about evolving malware threats, proactive defense strategies, and the role of software composition analysis to protect your development processes. (656 words)
- [Navigating the Rust Ecosystem & Adoption Challenges](/content/blog/rust-rising-navigating-the-ecosystem-and-adoption-challenges.html): Explore Rust’s rise in software development, its performance and security benefits, adoption challenges, and best practices for integration. (648 words)
- [FINOS AI Security: Fintech AI Collaboration | Sonatype](/content/blog/joining-the-finos-ai-security-initiative/index.html): Sonatype joins the FINOS AI security initiative to develop security controls and advance AI security collaboration in fintech and financial services. Read more! (904 words)
- [Automated Container Security with Red Hat Clair Integration](/content/blog/fully-automated-container-security/index.html): Sonatype is automating container security via an open API that makes it easy for third-party container scanners to integrate with Sonatype Lifecycle. (428 words)
- [What is a Software Dependency? | Sonatype](/content/resources/articles/what-are-software-dependencies/index.html): Learn what software dependencies are, why they are essential for modern coding & how unmanaged versions lead to common security and version conflicts. (2,192 words)
- [Sonatype Presents at William Blair Tech Leaders Conference](/content/press-releases/bill-karpovich-to-present-at-william-blair-tech-leaders-2018-conference.html): Sonatype's SVP Bill Karpovich to speak at William Blair Tech Leaders 2018 Conference. (179 words)
- [Software Supply Chain Security Case Studies | Sonatype](/content/blog/customer-spotlight-discover-how-sonatype-is-helping-lead-the-way-in-software-supply-chain-security.html): Explore software supply chain security case studies showing how top organizations use Sonatype to prevent threats and build stronger DevSecOps programs. (541 words)
- [Biden Executive Order Calls for Enhanced Software Security](/content/blog/biden-executive-order-on-cybersecurity-calls-for-enhanced-software-supply-chain-security.html): Biden's Cybersecurity Executive Order mandates software supply chain security and secure development practices, including creating SBOMs. Learn more today. (567 words)
- [Introducing Our 2020 State of the Software Supply Chain Report](/content/blog/2020-state-of-the-software-supply-chain-report/index.html): Sonatype's 2020 State of the Software Supply Chain Report shows that faster innovation and better risk management do not have to be mutually exclusive. (440 words)
- [Why Git is the Superior Choice for Maven 3.x Development](/content/blog/2009/04/git-the-sweetest-scm-around/index.html): Discover why Git is preferred over SVN for Maven development, including its distributed model, network efficiency, and simple branching. (877 words)
- [Sonatype Introduces Free Next-Gen Repository Health Check](/content/press-releases/repository-health-check/index.html): Sonatype, the leader in software supply chain automation, today released the next generation of its free Repository Health Check (RHC) feature within its. (407 words)
- [The Hugging Face Incident Changes the Vulnerability Equation](/content/blog/the-hugging-face-incident-changes-the-vulnerability-equation.html): Details from OpenAI and Hugging Face reveal how AI is changing software attacks, why software supply chains are the target, and what defenders need to do. (1,240 words)
- [Visual Basic Language Support | Sonatype Support](/content/products/language-support/visual-basic/index.html): Secure your Visual Basic projects with full Visual Basic support from Sonatype to manage dependencies, identify vulnerabilities, and enforce policies. (450 words)
- [Exploring Influential Books for Software Developers](/content/blog/2014/05/on-the-shoulders-of-giants-influential-books-for-software-developers.html): While there are many books I have read during my career as a software engineer, there are a handful that have been influential in my thinking. (794 words)
- [For St. Patrick's Day: A Compliance Strategy for Beerware](/content/blog/2012/03/for-st-patricks-day-a-compliance-strategy-for-beerware.html): Ensure your organization complies with the quirky Beerware OSS license this St. Patrick's Day with our strategic tips and insights. (714 words)
- [DevSecOps: Secrets in the Cloud](/content/blog/devsecops-secrets-in-the-cloud/index.html): Ease you worries with system hardening. Akash Mahajan (@makash) told his personal journey with system hardening in his talk, The Secrets in Our Clouds.   (757 words)
- [CVE-2025-1945 | Sonatype Security Advisory](/content/security-advisories/cve-2025-1945/index.html): The Sonatype Research team disclosed a new security advisory: CVE-2025-1945. Explore details on this vulnerable impacting PickleScan before version 0.0.23. (450 words)
- [Sonatype Professional Services | Deployment & Migration Support](/content/professional-services/index.html): Discover Sonatype's professional services for deploying, optimizing, and migrating to Sonatype solutions. Learn more about our expert guidance and support. (412 words)
- [Securing InnerSource Development Projects | Sonatype](/content/solutions/innersource/index.html): InnerSource enhances internal development. But it can create security risks. Bring accountability to your InnerSourcing program with Sonatype.  (1,099 words)
- [Sonatype Strengthens Leadership Team for AI-Driven Growth](/content/press-releases/sonatype-strengthens-leadership-team-for-ai-driven-growth.html): Sonatype appoints three industry veterans to enhance growth and market leadership in secure, AI-driven software development. (734 words)
- [Software Supply Chain Management: Conclusion | Sonatype Guide](/content/resources/software-supply-chain-management-part-5-bringing-it-all-together.html): Enhance your software supply chain management and learn how to improve security, reduce risks, and accelerate product delivery. (427 words)
- [Attacking the Assembly Line | Sonatype Research](/content/resources/research/attacking-the-assembly-line/index.html): Discover how AI is reshaping software supply chain attacks with data on targeted malware, developer-focused threats, and emerging attack tactics. (2,149 words)
- [React Vulnerabilities: Risks and Mitigation | Sonatype](/content/blog/three-new-react-vulnerabilities-surface/index.html): Discover new React vulnerabilities, including React2Shell. Learn how these security risks cause RCE or DoS and why your team must upgrade immediately. (1,013 words)
- [Why You Need DevSecOps and Artifact Repositories | Sonatype](/content/blog/why-you-need-devsecops-and-artifact-repositories/index.html): In her talk at the Nexus User Conference, Helen Beal, DevOpsologist at Ranger 4, discusses artifact repositories and their role in the DevSecOps toolchain (675 words)
- [Migrating yum to Nexus Repository Manager 3 | Sonatype Blog](/content/blog/migrating-yum-to-nexus-repository-manager-3/index.html): Learn about migrating yum support from Nexus Repository Manager 2 to 3 and share your usage insights to help improve the new implementation. (262 words)
- [Security at the Speed of Development With 451 Research](/content/blog/2013/04/new-webinar-blowing-up-old-thinking-security-at-the-speed-of-development-with-wendy-nather-451-research.html): New Webinar: Security at the Speed of Development with Wendy Nather, 451 Research (183 words)
- [Wicked Good Development: Visualizing Software Architecture](/content/blog/wicked-good-development-simon-brown-on-visualizing-software-architecture.html): Kadi Grigg and guest co-host Sal Kimmich sit down with Simon Brown and Dan Conn to discuss Simon's C4 Software Architecture Model and more.
, When you interview your dream guest, the conversation is wicked good. In this episode, Kadi and co-host Sal Kimmich sit down with Simon Brown–creator of the C4 Software Architecture Model–and Developer Advocate Dann Conn. Topics of conversation include the ins and outs of the C4 model, how having a detailed architecture diagram can make or break you, and more.
Tune in as we discuss the intention behind the model, best practices, and how critical it is for technical and non-technical folks alike to understand.
Today's episode resources can be found here.   (5,842 words)
- [Explore Deployment Models: Self-Hosted, Cloud, & Air-Gapped](/content/blog/a-guide-to-deployment-models-self-hosted-cloud-and-air-gapped.html): Which deployment option is right for your software supply chain? An analysis of the pros and cons of self-hosted, cloud, and air-gapped deployment. (1,273 words)
- [Rebrand the Header in Nexus - The Nexus Two-Minute Challenge](/content/blog/2014/05/rebrand-the-header-in-nexus-the-nexus-2-minute-challenge.html): Learn how to easily rebrand the header in Nexus to identify multiple server instances in this quick two-minute challenge by Manfred.  (112 words)
- [Developer Velocity with Sonatype and AWS | Sonatype Webinar](/content/resources/webinars/developer-velocity-with-aws/index.html): Discover how to enhance developer velocity through secure, AI-enabled workflows that accelerate innovation while ensuring compliance and reducing risk., The pressure to innovate faster in today’s AI-driven world is greater than ever. But can you scale development velocity without sacrificing security, co... (254 words)
- [Manufacturing Software Supply Chain Management | Sonatype](/content/solutions/manufacturing/index.html): Increase productivity and security with manufacturing software supply chain management tools. Prevent breaches and maximize factory production.  (761 words)
- [Brian Fox: What Does Sonatype Do? What Do I Do All Day?](/content/blog/brian-fox-what-does-sonatype-do-what-do-i-do-all-day.html): Many of my friends and most of my family struggle to understand what it is Sonatype does and therefore what I do all day.
 (368 words)
- [Open Source Malware Reaches More Than 778,500 Packages | Sonatype](/content/press-releases/open-source-malware-reaches-778500-packages/index.html): New research examines growth in open source malware attacks, most prevalent against software developers at government and financial institutions.  (536 words)
- [Q2 Open Source Malware Index 2025: Data Exfiltration Threats](/content/blog/open-source-malware-index-q2-2025/index.html): Sonatype’s latest Open Source Malware Index found 16,279 new threats, with 55% focused on data exfiltration. Learn how attackers are targeting developers. (1,436 words)
- [Equifax Success in Security Transformation | Sonatype](/content/customer-stories/equifax-success-in-security-transformation/index.html): Learn how Equifax gains competitive edge with the Sonatype Platform for open source monitoring. Ensure high production quality in digital transformation! (1,311 words)
- [How to publish artifacts to Sonatype Nexus Repository from Gradle](/content/blog/2012/06/how-to-publish-consume-and-stage-artifacts-to-nexus-from-gradle.html): Learn how to publish, consume, and stage artifacts using Gradle with Sonatype Nexus Repository in our latest guide. (192 words)
- [Exposing 4 Critical Vulnerabilities in Python Picklescan](/content/blog/bypassing-picklescan-sonatype-discovers-four-vulnerabilities.html): Sonatype found picklescan vulnerabilities that let attackers bypass malware scans in AI/ML models. Learn how they were patched and how to stay protected. (917 words)
- [Sonatype Lifecycle | SCA Tools for Open Source Security](/content/products/open-source-security-dependency-management/index.html): Manage open source security & dependency risk with Sonatype. Our automated SCA tools find & fix vulnerabilities, so teams can deliver quality code faster., Explore our platform (803 words)
- [2026 State of the Software Supply Chain Report | Sonatype](/content/state-of-the-software-supply-chain/introduction/index-2.html): Explore the software supply chain landscape, emphasizing the need for responsible open source consumption, enhanced security, and transparency. (925 words)
- [Sonatype Latest Press Releases & News | Sonatype](/content/press-releases/index.html): Stay updated with the latest Sonatype News. Discover groundbreaking press releases and industry insights. Don't miss out on the latest developments! (477 words)
- [The AI Vulnerability Storm | Sonatype](/content/resources/research/ai-vulnerability-storm/index.html): Explore the latest insights on AI vulnerabilities and Sonatype's recommendations for effective remediation strategies in the rapidly evolving threat landscape. (773 words)
- [Sonatype Named Visionary in 2025 Gartner® Magic Quadrant™ for AST](/content/press-releases/sonatype-named-visionary-on-2025-gartner-magic-quadrant.html): Sonatype has been recognized by Gartner as a Visionary in the 2025 Magic Quadrant for Application Security Testing (AST). Read the report today. (592 words)
- [Maximizing the Value of Your SBOM: Best Practices and Tools](/content/blog/i-have-an-sbom-now-what/index.html): Learn how to manage and monitor your SBOMs effectively, integrating software composition analysis (SCA) to detect vulnerabilities and ensure compliance. (951 words)
- [Automation Overwhelms OSS Ecosystems: Q4 2025 Malware Index](/content/blog/open-source-malware-index-q4-2025-automation-overwhelms-ecosystems.html): Q4 2025 Open Source Malware Index reveals a 476% surge driven by automated npm attacks, self-replicating malware, and shifting attacker tactics. (950 words)
- [A Timeline of SSC Attacks, Curated by Sonatype](/content/resources/vulnerability-timeline/index.html): View the history of software supply chain attacks, open source components analyzed by Sonatype (8,730 words)
- [Protestware and Apache Struts RCE: Emerging Threats in OSS](/content/blog/this-week-in-protestware-and-tale-of-struts-rce/index.html): In a special edition of This Week in Malware, we change focus and look at protestware and the tale of a two-year-old Struts bug that's returned. (736 words)
- [U.S. SBOM Regulatory Requirements | Sonatype Video](/content/resources/videos/us-sbom-requirements/index.html): Get a high-level overview of U.S. regulations that require software bills of materials (SBOMs) in this brief video.  (21 words)
- [The Spectrum of AI Transparency: Beyond Open vs. Closed](/content/blog/beyond-open-vs-closed-understanding-the-spectrum-of-ai-transparency.html): AI transparency is more than open vs. closed. Explore the spectrum of AI openness to make informed decisions about AI adoption and security. (857 words)
- [React2Shell: RCE Vulnerabilities Require Immediate Attention](/content/blog/react2shell-rce-vulnerabilities-require-immediate-attention.html): Critical RCE vulnerabilities (React2Shell) found in React Server Components require immediate updates to mitigate remote code execution risks. (699 words)
- [Sonatype 10th SSCR Report Reveals 156% Surge in OSS Malware](/content/press-releases/sonatypes-10th-annual-state-of-the-software-supply-chain-report.html): Sonatype®, the end-to-end software supply chain security platform, today released its 10th Annual State of the Software Supply Chain® Report. (826 words)
- [Sonatype Success Story |  mobile.de and Nexus ](/content/customer-stories/mobile-de-and-sonatype/index.html): Read all about how mobile.de uses Sonatype Nexus Repository Pro to automate consistency across the CI/CD pipeline. (700 words)
- [Software Infrastructure Strain | Software Supply Chain Report](/content/state-of-the-software-supply-chain/2026/software-infrastructure-growth/index.html): Analysis of how software ecosystem growth and automation strain shared infrastructure, driving new risks across the modern software supply chain. (601 words)
- [Sonatype Research Reveals Open Source Malware Grows 75%](/content/press-releases/sonatype-research-reveals-open-malware-grows-75-percent.html): Sonatype's 2026 State of the Software Supply Chain report reveals open source malware grows 75%, reaching 1.233 million packages as attack surface expands. (768 words)
- [C# and NuGet Package Support | Sonatype Support](/content/products/language-support/nuget-and-c/index.html): Manage and secure your NuGet packages and C# builds with Sonatype through centralized governance, automated scanning, and comprehensive visibility. (457 words)
- [Troubleshooting Sonatype Nexus Repository 401 Errors](/content/blog/2010/11/what-to-do-when-sonatype-nexus-returns-401/index.html): Learn how to troubleshoot and resolve '401' errors when deploying artifacts to Sonatype Nexus Repository using Maven with this step-by-step guide. (339 words)
- [Nearly 18,000 Malicious Packages Discovered in Q1 | Sonatype](/content/press-releases/18000-new-malicious-packages-discovered-in-q1/index.html): Sonatype's Q1 2025 report reveals 17,954 new open source malware packages, highlighting the need for robust software supply chain security. (547 words)
- [CRA Compliance Checklist | Sonatype Guide](/content/resources/guides/cra-compliance-checklist/index.html): Learn how to protect software components and be compliant with Cyber Resilience Act (CRA) regulatory requirements. (500 words)
- [Dependency Management in Financial Services | Sonatype Webinar](/content/resources/webinars/dependency-management-in-financial-services/index.html): Learn how financial institutions can enhance risk management and compliance through effective dependency management and modern tooling in this webinar., In this webinar, our expert speakers delve into the complexities of dependency management in modern software development. With 90% of application codeba... (212 words)
- [Simplify Dependency Management with Sonatype Developer](/content/resources/videos/sonatype-developer-explained/index.html): Discover how Sonatype Developer simplifies open-source dependency management and enhances your team's development process.  (26 words)
- [hubfs/sscr-2024/sscr_2024-final-optimized-pdf.html](/content/hubfs/sscr-2024/sscr_2024-final-optimized-pdf.html) (18,583 words)
- [Query Regarding Anonymous Access Usage in Nexus Repository - Sonatype Nexus Repository - Sonatype Community](/content/community/t/query-regarding-anonymous-access-usage-in-nexus-repository/16473/6/index.html): Hi Team, 
We currently have anonymous access enabled in Nexus Repository, and we’re planning to disable it. 
After checking with our DevOps team, I learned that our CI/CD pipelines are using a service account for authent… (326 words, Jul 24, 2026)
- [Query Regarding Anonymous Access Usage in Nexus Repository - Sonatype Nexus Repository - Sonatype Community](/content/community/t/query-regarding-anonymous-access-usage-in-nexus-repository/16473/5/index.html): Hi Team, 
We currently have anonymous access enabled in Nexus Repository, and we’re planning to disable it. 
After checking with our DevOps team, I learned that our CI/CD pipelines are using a service account for authent… (350 words, Jul 22, 2026)
- [Query Regarding Anonymous Access Usage in Nexus Repository - Sonatype Nexus Repository - Sonatype Community](/content/community/t/query-regarding-anonymous-access-usage-in-nexus-repository/16473/3/index.html): Hi Team, 
We currently have anonymous access enabled in Nexus Repository, and we’re planning to disable it. 
After checking with our DevOps team, I learned that our CI/CD pipelines are using a service account for authent… (332 words, Jul 21, 2026)
- [Update: Maven Central Publishing Limits Enforcement Moved to October 1 - Central Repository - Sonatype Community](/content/community/t/update-maven-central-publishing-limits-enforcement-moved-to-october-1/16475/1/index.html): Hi everyone, 
Over the past few weeks, we’ve received a lot of valuable feedback from the broader community regarding the upcoming Maven Central publishing limits. Based on what we’ve heard, we have already made changes … (152 words, Jul 20, 2026)
- [Query Regarding Anonymous Access Usage in Nexus Repository - Sonatype Nexus Repository - Sonatype Community](/content/community/t/query-regarding-anonymous-access-usage-in-nexus-repository/16473/2/index.html): Hi Team, 
We currently have anonymous access enabled in Nexus Repository, and we’re planning to disable it. 
After checking with our DevOps team, I learned that our CI/CD pipelines are using a service account for authent… (308 words, Jul 17, 2026)
- [Query Regarding Anonymous Access Usage in Nexus Repository - Sonatype Nexus Repository - Sonatype Community](/content/community/t/query-regarding-anonymous-access-usage-in-nexus-repository/16473/index.html): Hi Team, 
We currently have anonymous access enabled in Nexus Repository, and we’re planning to disable it. 
After checking with our DevOps team, I learned that our CI/CD pipelines are using a service account for authent… (341 words, Jul 17, 2026)
- [Query Regarding Anonymous Access Usage in Nexus Repository - Sonatype Nexus Repository - Sonatype Community](/content/community/t/query-regarding-anonymous-access-usage-in-nexus-repository/16473/1/index.html): Hi Team, 
We currently have anonymous access enabled in Nexus Repository, and we’re planning to disable it. 
After checking with our DevOps team, I learned that our CI/CD pipelines are using a service account for authent… (349 words, Jul 17, 2026)
- [Feature request: Different levels for Maven Central tokens (deploy and publish) - Central Repository - Sonatype Community](/content/community/t/feature-request-different-levels-for-maven-central-tokens-deploy-and-publish/16472/index.html): Hi, 
I keep tokens in GitHub secrets to publish to Maven Central. I am worried because these tokens can do everything. I recently have seen a supply chain take over just because of bad configured GH pipelines that steale… (120 words, Jul 16, 2026)
- [Feature request: Different levels for Maven Central tokens (deploy and publish) - Central Repository - Sonatype Community](/content/community/t/feature-request-different-levels-for-maven-central-tokens-deploy-and-publish/16472/1/index.html): Hi, 
I keep tokens in GitHub secrets to publish to Maven Central. I am worried because these tokens can do everything. I recently have seen a supply chain take over just because of bad configured GH pipelines that steale… (184 words, Jul 16, 2026)
- [Uploading Artifacts - Sonatype Nexus Repository - Sonatype Community](/content/community/t/uploading-artifacts/718/7/index.html): I am trying to upload Snapshot.jar file to nexus and I am getting this error. 
Return code is: 400, ReasonPhrase: Detected content type [application/x-sh], but expected [application/java-archive]: 
When I change the file… (451 words, Jul 15, 2026)
- [Update Your IQ Server License Threat Groups - Sonatype Labs - Sonatype Community](/content/community/t/update-your-iq-server-license-threat-groups/3094/85/index.html): The license threat group updater will apply the latest Sonatype provided license classification to your running IQ server’s license threat groups. This will alleviate any “License Threat Group not Assigned” policy violat… (5,153 words, Jul 14, 2026)
- [Sonatype Nexus Repository 3.93.2 Released - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-repository-3-93-2-released/16433/3/index.html): Sonatype Nexus Repository 3.93.2 is now available. 
Release 3.93.2 fixes an issue that prevented users with multi-action application privileges from correctly accessing authorized resources. 
3.93.1 fixed multiple Ansibl… (431 words, Jul 10, 2026)
- [Sonatype Nexus Repository 3.94.0 Released - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-repository-3-94-0-released/16462/index.html): Sonatype Nexus Repository 3.94.0 is now available. 
This release introduces native OCI repository support, private Amazon ECR proxying, PyPI Simple API v1.1 support, Java EE 10 platform modernization, and numerous usabil… (130 words, Jul 9, 2026)
- [Sonatype Nexus Repository 3.94.0 Released - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-repository-3-94-0-released/16462/1/index.html): Sonatype Nexus Repository 3.94.0 is now available. 
This release introduces native OCI repository support, private Amazon ECR proxying, PyPI Simple API v1.1 support, Java EE 10 platform modernization, and numerous usabil… (122 words, Jul 9, 2026)
- [BUG: Nexus 3.93.1 and PEP 691 JSON - Sonatype Nexus Repository - Sonatype Community](/content/community/t/bug-nexus-3-93-1-and-pep-691-json/16432/2/index.html): This morning we ran into the following issue: 

If I use pip version 22, then when querying Nexus the latest version of the click package is 8.4.1:

pip3 --version
pip 22.0.2 from /usr/lib/python3/dist-packages/pip (pyth… (383 words, Jul 9, 2026)
- [An error occurred during migration after 5 seconds: Migration failed! - Sonatype Nexus Repository - Sonatype Community](/content/community/t/an-error-occurred-during-migration-after-5-seconds-migration-failed/16460/2/index.html): Hi! 
I upgraded our HA Repo from 3.91.1 to 3.93.2 today and after all nodes joined I finalized the rolling upgrade process. 
Unfortunately the migration failed with this message. 
An error occurred during migration after… (219 words, Jul 9, 2026)
- [An error occurred during migration after 5 seconds: Migration failed! - Sonatype Nexus Repository - Sonatype Community](/content/community/t/an-error-occurred-during-migration-after-5-seconds-migration-failed/16460/index.html): Hi! 
I upgraded our HA Repo from 3.91.1 to 3.93.2 today and after all nodes joined I finalized the rolling upgrade process. 
Unfortunately the migration failed with this message. 
An error occurred during migration after… (208 words, Jul 9, 2026)
- [An error occurred during migration after 5 seconds: Migration failed! - Sonatype Nexus Repository - Sonatype Community](/content/community/t/an-error-occurred-during-migration-after-5-seconds-migration-failed/16460/1/index.html): Hi! 
I upgraded our HA Repo from 3.91.1 to 3.93.2 today and after all nodes joined I finalized the rolling upgrade process. 
Unfortunately the migration failed with this message. 
An error occurred during migration after… (214 words, Jul 9, 2026)
- [Sonatype Nexus Repository 3.93.2 Released - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-repository-3-93-2-released/16433/2/index.html): Sonatype Nexus Repository 3.93.2 is now available. 
Release 3.93.2 fixes an issue that prevented users with multi-action application privileges from correctly accessing authorized resources. 
3.93.1 fixed multiple Ansibl… (412 words, Jul 1, 2026)
- [Helm proxy/group repo error: YAML document exceeds limit - Sonatype Nexus Repository - Sonatype Community](/content/community/t/helm-proxy-group-repo-error-yaml-document-exceeds-limit/16436/2/index.html): Hi, 
I have configured several Helm proxy repositories and a single Helm group repository in Nexus to proxy various chart repositories. 
However, I keep seeing the following error in the Nexus logs: 
2026-06-26 14:07:12,… (182 words, Jun 29, 2026)
- [Batch Deletion of expired waivers - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/batch-deletion-of-expired-waivers/16437/2/index.html): i have a number of waivers that have expired and wondered if there were a way i could batch delete with waiver id’s. (205 words, Jun 29, 2026)
- [Support for the new endpoint in Hugging Face Hub API - Sonatype Nexus Repository - Sonatype Community](/content/community/t/support-for-the-new-endpoint-in-hugging-face-hub-api/16275/5/index.html): In Hugging Face Hub API, starting from version 0.20+, a new endpoint was introduced: 
/api/models/{model}/tree/main. 
Currently, the Nexus Repository proxy for Hugging Face does NOT support this new endpoint. 
It returns… (220 words, Jun 29, 2026)
- [Batch Deletion of expired waivers - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/batch-deletion-of-expired-waivers/16437/index.html): i have a number of waivers that have expired and wondered if there were a way i could batch delete with waiver id’s. (206 words, Jun 26, 2026)
- [Batch Deletion of expired waivers - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/batch-deletion-of-expired-waivers/16437/1/index.html): i have a number of waivers that have expired and wondered if there were a way i could batch delete with waiver id’s. (201 words, Jun 26, 2026)
- [Helm proxy/group repo error: YAML document exceeds limit - Sonatype Nexus Repository - Sonatype Community](/content/community/t/helm-proxy-group-repo-error-yaml-document-exceeds-limit/16436/index.html): Hi, 
I have configured several Helm proxy repositories and a single Helm group repository in Nexus to proxy various chart repositories. 
However, I keep seeing the following error in the Nexus logs: 
2026-06-26 14:07:12,… (182 words, Jun 26, 2026)
- [Helm proxy/group repo error: YAML document exceeds limit - Sonatype Nexus Repository - Sonatype Community](/content/community/t/helm-proxy-group-repo-error-yaml-document-exceeds-limit/16436/1/index.html): Hi, 
I have configured several Helm proxy repositories and a single Helm group repository in Nexus to proxy various chart repositories. 
However, I keep seeing the following error in the Nexus logs: 
2026-06-26 14:07:12,… (182 words, Jun 26, 2026)
- [Support for the new endpoint in Hugging Face Hub API - Sonatype Nexus Repository - Sonatype Community](/content/community/t/support-for-the-new-endpoint-in-hugging-face-hub-api/16275/4/index.html): In Hugging Face Hub API, starting from version 0.20+, a new endpoint was introduced: 
/api/models/{model}/tree/main. 
Currently, the Nexus Repository proxy for Hugging Face does NOT support this new endpoint. 
It returns… (216 words, Jun 26, 2026)
- [Sonatype Nexus Repository 3.93.2 Released - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-repository-3-93-2-released/16433/index.html): Sonatype Nexus Repository 3.93.2 is now available. 
Release 3.93.2 fixes an issue that prevented users with multi-action application privileges from correctly accessing authorized resources. 
3.93.1 fixed multiple Ansibl… (426 words, Jun 25, 2026)
- [Sonatype Nexus Repository 3.93.2 Released - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-repository-3-93-2-released/16433/1/index.html): Sonatype Nexus Repository 3.93.2 is now available. 
Release 3.93.2 fixes an issue that prevented users with multi-action application privileges from correctly accessing authorized resources. 
3.93.1 fixed multiple Ansibl… (432 words, Jun 25, 2026)
- [BUG: Nexus 3.93.1 and PEP 691 JSON - Sonatype Nexus Repository - Sonatype Community](/content/community/t/bug-nexus-3-93-1-and-pep-691-json/16432/index.html): This morning we ran into the following issue: 

If I use pip version 22, then when querying Nexus the latest version of the click package is 8.4.1:

pip3 --version
pip 22.0.2 from /usr/lib/python3/dist-packages/pip (pyth… (378 words, Jun 25, 2026)
- [BUG: Nexus 3.93.1 and PEP 691 JSON - Sonatype Nexus Repository - Sonatype Community](/content/community/t/bug-nexus-3-93-1-and-pep-691-json/16432/1/index.html): This morning we ran into the following issue: 

If I use pip version 22, then when querying Nexus the latest version of the click package is 8.4.1:

pip3 --version
pip 22.0.2 from /usr/lib/python3/dist-packages/pip (pyth… (378 words, Jun 25, 2026)
- [Package Coverage Issue - Sonatype Lifecycle & Repository Firewall / Best Practices - Sonatype Community](/content/community/t/package-coverage-issue/15838/3/index.html): Hi there, 
I’m facing an issue with Sonatype Lifecycle when scanning with pnpm. When the target file is pnpm-lock.yaml, the scan seems to only report direct dependencies and doesn’t capture most transitive packages. For … (206 words, Jun 22, 2026)
- [Sonatype Nexus Repository 3.93.1 Released - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-repository-3-93-1-released/16424/index.html): Sonatype Nexus Repository 3.93.1 is now available. 
This release includes fixes for Ansible Galaxy publishing and dependency resolution, chained PyPI proxy downloads, Firewall compatibility with older IQ Server versions,… (72 words, Jun 20, 2026)
- [Sonatype Nexus Repository 3.93.1 Released - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-repository-3-93-1-released/16424/1/index.html): Sonatype Nexus Repository 3.93.1 is now available. 
This release includes fixes for Ansible Galaxy publishing and dependency resolution, chained PyPI proxy downloads, Firewall compatibility with older IQ Server versions,… (72 words, Jun 20, 2026)
- [Update Your IQ Server License Threat Groups - Sonatype Labs - Sonatype Community](/content/community/t/update-your-iq-server-license-threat-groups/3094/80/index.html): The license threat group updater will apply the latest Sonatype provided license classification to your running IQ server’s license threat groups. This will alleviate any “License Threat Group not Assigned” policy violat… (5,150 words, Jun 18, 2026)
- [I can't pull docker images by my own anonymous in nexus - Sonatype Nexus Repository - Sonatype Community](/content/community/t/i-cant-pull-docker-images-by-my-own-anonymous-in-nexus/11883/3/index.html): I wanna pull docker images from docker proxy repo, however I can’t do it. 
It’s successful when I try doing it built-in anonymous user but I fail to pull by my own anonymous (privilege is nx-anonymous. 

in the nexus set… (221 words, Jun 18, 2026)
- [Maven Central publishing limits: what high-volume publishers need to know - Central Repository - Sonatype Community](/content/community/t/maven-central-publishing-limits-what-high-volume-publishers-need-to-know/16420/index.html): Hi everyone, 
Maven Central is critical infrastructure for the Java ecosystem: a shared place where open source projects publish release-ready components and millions of developers reliably consume them. 
Sonatype is int… (702 words, Jun 16, 2026)
- [Maven Central publishing limits: what high-volume publishers need to know - Central Repository - Sonatype Community](/content/community/t/maven-central-publishing-limits-what-high-volume-publishers-need-to-know/16420/1/index.html): Hi everyone, 
Maven Central is critical infrastructure for the Java ecosystem: a shared place where open source projects publish release-ready components and millions of developers reliably consume them. 
Sonatype is int… (702 words, Jun 16, 2026)
- [Nexus 3 as a Pypi mirror - how do I get the **json** data for a given package? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-3-as-a-pypi-mirror-how-do-i-get-the-json-data-for-a-given-package/13448/7/index.html): Using uv as an example… 
If I go to Links for uv I get a simple list of links to just artifacts (no metadata) 
If I go there with header Accept: application/vnd.pypi.simple.v1+json I get a json output with metadata (part… (681 words, Jun 15, 2026)
- [Was FindPackageById name matching changed in Nexus 3.93? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/was-findpackagebyid-name-matching-changed-in-nexus-3-93/16413/9/index.html): Since upgrading from Nexus 3.92 to 3.93 we are seeing an issue with NuGet repositories. 
If seems like the FindPackageById used to do an extra match but maybe now does a starts with match 
that is returning other package… (713 words, Jun 10, 2026)
- [Was FindPackageById name matching changed in Nexus 3.93? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/was-findpackagebyid-name-matching-changed-in-nexus-3-93/16413/8/index.html): Since upgrading from Nexus 3.92 to 3.93 we are seeing an issue with NuGet repositories. 
If seems like the FindPackageById used to do an extra match but maybe now does a starts with match 
that is returning other package… (712 words, Jun 10, 2026)
- [Was FindPackageById name matching changed in Nexus 3.93? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/was-findpackagebyid-name-matching-changed-in-nexus-3-93/16413/7/index.html): Since upgrading from Nexus 3.92 to 3.93 we are seeing an issue with NuGet repositories. 
If seems like the FindPackageById used to do an extra match but maybe now does a starts with match 
that is returning other package… (712 words, Jun 9, 2026)
- [IQ Firewall: Database update frequency and coverage of new libraries against recent threats - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/iq-firewall-database-update-frequency-and-coverage-of-new-libraries-against-recent-threats/16401/5/index.html): Hello everyone. 
I understand there are currently many attacks targeting the latest library versions. 
My question is: how often is the IQ Firewall database updated with respect to libraries, and how often are new librar… (407 words, Jun 9, 2026)
- [Was FindPackageById name matching changed in Nexus 3.93? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/was-findpackagebyid-name-matching-changed-in-nexus-3-93/16413/6/index.html): Since upgrading from Nexus 3.92 to 3.93 we are seeing an issue with NuGet repositories. 
If seems like the FindPackageById used to do an extra match but maybe now does a starts with match 
that is returning other package… (713 words, Jun 9, 2026)
- [Was FindPackageById name matching changed in Nexus 3.93? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/was-findpackagebyid-name-matching-changed-in-nexus-3-93/16413/5/index.html): Since upgrading from Nexus 3.92 to 3.93 we are seeing an issue with NuGet repositories. 
If seems like the FindPackageById used to do an extra match but maybe now does a starts with match 
that is returning other package… (712 words, Jun 9, 2026)
- [Was FindPackageById name matching changed in Nexus 3.93? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/was-findpackagebyid-name-matching-changed-in-nexus-3-93/16413/4/index.html): Since upgrading from Nexus 3.92 to 3.93 we are seeing an issue with NuGet repositories. 
If seems like the FindPackageById used to do an extra match but maybe now does a starts with match 
that is returning other package… (696 words, Jun 9, 2026)
- [Was FindPackageById name matching changed in Nexus 3.93? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/was-findpackagebyid-name-matching-changed-in-nexus-3-93/16413/3/index.html): Since upgrading from Nexus 3.92 to 3.93 we are seeing an issue with NuGet repositories. 
If seems like the FindPackageById used to do an extra match but maybe now does a starts with match 
that is returning other package… (712 words, Jun 8, 2026)
- [Was FindPackageById name matching changed in Nexus 3.93? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/was-findpackagebyid-name-matching-changed-in-nexus-3-93/16413/2/index.html): Since upgrading from Nexus 3.92 to 3.93 we are seeing an issue with NuGet repositories. 
If seems like the FindPackageById used to do an extra match but maybe now does a starts with match 
that is returning other package… (712 words, Jun 8, 2026)
- [Was FindPackageById name matching changed in Nexus 3.93? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/was-findpackagebyid-name-matching-changed-in-nexus-3-93/16413/index.html): Since upgrading from Nexus 3.92 to 3.93 we are seeing an issue with NuGet repositories. 
If seems like the FindPackageById used to do an extra match but maybe now does a starts with match 
that is returning other package… (714 words, Jun 8, 2026)
- [Was FindPackageById name matching changed in Nexus 3.93? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/was-findpackagebyid-name-matching-changed-in-nexus-3-93/16413/1/index.html): Since upgrading from Nexus 3.92 to 3.93 we are seeing an issue with NuGet repositories. 
If seems like the FindPackageById used to do an extra match but maybe now does a starts with match 
that is returning other package… (713 words, Jun 8, 2026)
- [Maintenance Downtime of Community on Thursday, June 4th at 7:30 p.m ET - Community Announcements - Sonatype Community](/content/community/t/maintenance-downtime-of-community-on-thursday-june-4th-at-7-30-p-m-et/16406/7/index.html): Starting around 7:30 p.m. ET on Thursday, June 4th, the Community forum will be brought offline to perform necessary maintenance and upgrades. 
This downtime is localized to just the community forum, and will not affect … (217 words, Jun 5, 2026)
- [Sonatype Nexus Repository 3.93.0 Released - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-repository-3-93-0-released/16409/index.html): Sonatype Nexus Repository 3.93.0 is now available. 
This release introduces support for Go hosted and group repositories as well as Ansible and Alpine formats. It also refreshes the artifact upload UI, adds multiple secu… (167 words, Jun 5, 2026)
- [Sonatype Nexus Repository 3.93.0 Released - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-repository-3-93-0-released/16409/1/index.html): Sonatype Nexus Repository 3.93.0 is now available. 
This release introduces support for Go hosted and group repositories as well as Ansible and Alpine formats. It also refreshes the artifact upload UI, adds multiple secu… (130 words, Jun 5, 2026)
- [Set up proxy repo with embedded credentials in URL? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/set-up-proxy-repo-with-embedded-credentials-in-url/16400/3/index.html): Hi, 
I would like to set up proxy repos for my users (PyPi, Maven, and npm data), but the upstream source server only makes the repos available via URLs with embedded credentials, i.e.: 
https://<user>:<token>@server.dom… (304 words, Jun 4, 2026)
- [Maintenance Downtime of Community on Thursday, June 4th at 7:30 p.m ET - Community Announcements - Sonatype Community](/content/community/t/maintenance-downtime-of-community-on-thursday-june-4th-at-7-30-p-m-et/16406/index.html): Starting around 7:30 p.m. ET on Thursday, June 4th, the Community forum will be brought offline to perform necessary maintenance and upgrades. 
This downtime is localized to just the community forum, and will not affect … (199 words, Jun 4, 2026)
- [Maintenance Downtime of Community on Thursday, June 4th at 7:30 p.m ET - Community Announcements - Sonatype Community](/content/community/t/maintenance-downtime-of-community-on-thursday-june-4th-at-7-30-p-m-et/16406/1/index.html): Starting around 7:30 p.m. ET on Thursday, June 4th, the Community forum will be brought offline to perform necessary maintenance and upgrades. 
This downtime is localized to just the community forum, and will not affect … (204 words, Jun 4, 2026)
- [IQ Firewall: Database update frequency and coverage of new libraries against recent threats - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/iq-firewall-database-update-frequency-and-coverage-of-new-libraries-against-recent-threats/16401/index.html): Hello everyone. 
I understand there are currently many attacks targeting the latest library versions. 
My question is: how often is the IQ Firewall database updated with respect to libraries, and how often are new librar… (404 words, Jun 3, 2026)
- [IQ Firewall: Database update frequency and coverage of new libraries against recent threats - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/iq-firewall-database-update-frequency-and-coverage-of-new-libraries-against-recent-threats/16401/1/index.html): Hello everyone. 
I understand there are currently many attacks targeting the latest library versions. 
My question is: how often is the IQ Firewall database updated with respect to libraries, and how often are new librar… (405 words, Jun 3, 2026)
- [Set up proxy repo with embedded credentials in URL? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/set-up-proxy-repo-with-embedded-credentials-in-url/16400/2/index.html): Hi, 
I would like to set up proxy repos for my users (PyPi, Maven, and npm data), but the upstream source server only makes the repos available via URLs with embedded credentials, i.e.: 
https://<user>:<token>@server.dom… (314 words, Jun 3, 2026)
- [Set up proxy repo with embedded credentials in URL? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/set-up-proxy-repo-with-embedded-credentials-in-url/16400/index.html): Hi, 
I would like to set up proxy repos for my users (PyPi, Maven, and npm data), but the upstream source server only makes the repos available via URLs with embedded credentials, i.e.: 
https://<user>:<token>@server.dom… (302 words, Jun 3, 2026)
- [Set up proxy repo with embedded credentials in URL? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/set-up-proxy-repo-with-embedded-credentials-in-url/16400/1/index.html): Hi, 
I would like to set up proxy repos for my users (PyPi, Maven, and npm data), but the upstream source server only makes the repos available via URLs with embedded credentials, i.e.: 
https://<user>:<token>@server.dom… (303 words, Jun 3, 2026)
- [Sonatype Nexus RM OSS 3.68.1-02 (error 116) - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-rm-oss-3-68-1-02-error-116/16399/index.html): Hi, 
I need some help with this issue as we’re randomly hitting this error: 
npm error Invalid response body while trying to fetch https://nexus.***********/repository/***npm-public/negotiator: Unknown system error -116:… (112 words, Jun 3, 2026)
- [Sonatype Nexus RM OSS 3.68.1-02 (error 116) - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-rm-oss-3-68-1-02-error-116/16399/1/index.html): Hi, 
I need some help with this issue as we’re randomly hitting this error: 
npm error Invalid response body while trying to fetch https://nexus.***********/repository/***npm-public/negotiator: Unknown system error -116:… (51 words, Jun 3, 2026)
- [Update Your IQ Server License Threat Groups - Sonatype Labs - Sonatype Community](/content/community/t/update-your-iq-server-license-threat-groups/3094/74/index.html): The license threat group updater will apply the latest Sonatype provided license classification to your running IQ server’s license threat groups. This will alleviate any “License Threat Group not Assigned” policy violat… (5,147 words, Jun 1, 2026)
- [Update Your IQ Server License Threat Groups - Sonatype Labs - Sonatype Community](/content/community/t/update-your-iq-server-license-threat-groups/3094/73/index.html): The license threat group updater will apply the latest Sonatype provided license classification to your running IQ server’s license threat groups. This will alleviate any “License Threat Group not Assigned” policy violat… (5,152 words, Jun 1, 2026)
- [Important security update for Nexus Repository users - Community Announcements - Sonatype Community](/content/community/t/important-security-update-for-nexus-repository-users/16386/5/index.html): We recently disclosed two critical vulnerabilities affecting older versions of Sonatype Nexus Repository: 


CVE-2026-3199, CVSS 9.4: An authenticated remote code execution vulnerability that could allow an attacker with… (191 words, May 28, 2026)
- [Sonatype Firewall Pro now available for third-party users! - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/sonatype-firewall-pro-now-available-for-third-party-users/16393/1/index.html): Firewall Pro is now generally available
We’re excited to announce that Sonatype Firewall Pro is now generally available. 
Firewall Pro helps teams protect third-party repository environments from malicious open source pa… (392 words, May 28, 2026)
- [Sonatype Nexus Repository 3.92.3 Released - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-repository-3-92-3-released/16389/index.html): Sonatype Nexus Repository 3.92.3 is now available. 
This release fixes known issues affecting NuGet V2 and PyPI proxy repository behavior, including search indexing failures and chained proxy download errors. It also imp… (261 words, May 27, 2026)
- [Sonatype Nexus Repository 3.92.3 Released - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-repository-3-92-3-released/16389/1/index.html): Sonatype Nexus Repository 3.92.3 is now available. 
This release fixes known issues affecting NuGet V2 and PyPI proxy repository behavior, including search indexing failures and chained proxy download errors. It also imp… (195 words, May 27, 2026)
- [Important security update for Nexus Repository users - Community Announcements - Sonatype Community](/content/community/t/important-security-update-for-nexus-repository-users/16386/index.html): We recently disclosed two critical vulnerabilities affecting older versions of Sonatype Nexus Repository: 


CVE-2026-3199, CVSS 9.4: An authenticated remote code execution vulnerability that could allow an attacker with… (191 words, May 26, 2026)
- [Important security update for Nexus Repository users - Community Announcements - Sonatype Community](/content/community/t/important-security-update-for-nexus-repository-users/16386/1/index.html): We recently disclosed two critical vulnerabilities affecting older versions of Sonatype Nexus Repository: 


CVE-2026-3199, CVSS 9.4: An authenticated remote code execution vulnerability that could allow an attacker with… (199 words, May 26, 2026)
- [Support for the new endpoint in Hugging Face Hub API - Sonatype Nexus Repository - Sonatype Community](/content/community/t/support-for-the-new-endpoint-in-hugging-face-hub-api/16275/3/index.html): In Hugging Face Hub API, starting from version 0.20+, a new endpoint was introduced: 
/api/models/{model}/tree/main. 
Currently, the Nexus Repository proxy for Hugging Face does NOT support this new endpoint. 
It returns… (213 words, May 21, 2026)
- [Sonatype Nexus Repository 3.92.2 Released - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-repository-3-92-2-released/16347/index.html): Sonatype Nexus Repository 3.92.2 is now available. 
This release fixes an issue that caused the user interface in Community Edition deployments on 3.92.1 and 3.92.0 to freeze and become unresponsive. 
3.92.1 fixed an iss… (161 words, May 14, 2026)
- [Sonatype Nexus Repository 3.92.2 Released - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-repository-3-92-2-released/16347/1/index.html): Sonatype Nexus Repository 3.92.2 is now available. 
This release fixes an issue that caused the user interface in Community Edition deployments on 3.92.1 and 3.92.0 to freeze and become unresponsive. 
3.92.1 fixed an iss… (244 words, May 14, 2026)
- [KeyStore YUM Nexus Docker - Sonatype Nexus Repository - Sonatype Community](/content/community/t/keystore-yum-nexus-docker/16310/10/index.html): Hello together, 
in following, I refer to Proxying RHEL Yum Repositories . 

A few days ago, I moved our Nexus Repository Manager from a local install, to a docker install as container. 
To ensure, our RHEL servers can g… (777 words, May 13, 2026)
- [Support for the new endpoint in Hugging Face Hub API - Sonatype Nexus Repository - Sonatype Community](/content/community/t/support-for-the-new-endpoint-in-hugging-face-hub-api/16275/2/index.html): In Hugging Face Hub API, starting from version 0.20+, a new endpoint was introduced: 
/api/models/{model}/tree/main. 
Currently, the Nexus Repository proxy for Hugging Face does NOT support this new endpoint. 
It returns… (222 words, May 13, 2026)
- [KeyStore YUM Nexus Docker - Sonatype Nexus Repository - Sonatype Community](/content/community/t/keystore-yum-nexus-docker/16310/9/index.html): Hello together, 
in following, I refer to Proxying RHEL Yum Repositories . 

A few days ago, I moved our Nexus Repository Manager from a local install, to a docker install as container. 
To ensure, our RHEL servers can g… (665 words, May 12, 2026)
- [Sonatype Nexus Repository 3.92.1 Released - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-repository-3-92-1-released/16344/index.html): Sonatype Nexus Repository 3.92.1 is now available. 
This release fixes an issue that prevented deployments with a non-root context path (i.e., custom context path) from loading as expected. 
3.92.0 also introduced the fo… (202 words, May 12, 2026)
- [Sonatype Nexus Repository 3.92.1 Released - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-repository-3-92-1-released/16344/1/index.html): Sonatype Nexus Repository 3.92.1 is now available. 
This release fixes an issue that prevented deployments with a non-root context path (i.e., custom context path) from loading as expected. 
3.92.0 also introduced the fo… (215 words, May 12, 2026)
- [KeyStore YUM Nexus Docker - Sonatype Nexus Repository - Sonatype Community](/content/community/t/keystore-yum-nexus-docker/16310/7/index.html): Hello together, 
in following, I refer to Proxying RHEL Yum Repositories . 

A few days ago, I moved our Nexus Repository Manager from a local install, to a docker install as container. 
To ensure, our RHEL servers can g… (864 words, May 12, 2026)
- [402 Payment Required for publishing project, that worked few weeks ago. No response from support - Sonatype Nexus Repository - Sonatype Community](/content/community/t/402-payment-required-for-publishing-project-that-worked-few-weeks-ago-no-response-from-support/16323/5/index.html): I am attempting to deploy hr.hrg:maven-get-deps-maven-plugin:1.0.4 to OSSRH, but the upload is rejected with 402 Payment Required. 
Details: 
Namespace is registered under hr.hrg in Sonatype Central publishing namespaces… (305 words, May 11, 2026)
- [Sonatype Nexus Repository 3.92.0 Released - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-repository-3-92-0-released/16325/1/index.html): Sonatype Nexus Repository 3.92.0 is now available. 
This release introduces the following new format support: 


Pub repository support for Dart and Flutter 


Support for Conda hosted and group repositories 


Support f… (187 words, May 7, 2026)
- [402 Payment Required for publishing project, that worked few weeks ago. No response from support - Sonatype Nexus Repository - Sonatype Community](/content/community/t/402-payment-required-for-publishing-project-that-worked-few-weeks-ago-no-response-from-support/16323/4/index.html): I am attempting to deploy hr.hrg:maven-get-deps-maven-plugin:1.0.4 to OSSRH, but the upload is rejected with 402 Payment Required. 
Details: 
Namespace is registered under hr.hrg in Sonatype Central publishing namespaces… (298 words, May 7, 2026)
- [402 Payment Required for publishing project, that worked few weeks ago. No response from support - Sonatype Nexus Repository - Sonatype Community](/content/community/t/402-payment-required-for-publishing-project-that-worked-few-weeks-ago-no-response-from-support/16323/3/index.html): I am attempting to deploy hr.hrg:maven-get-deps-maven-plugin:1.0.4 to OSSRH, but the upload is rejected with 402 Payment Required. 
Details: 
Namespace is registered under hr.hrg in Sonatype Central publishing namespaces… (297 words, May 7, 2026)
- [402 Payment Required for publishing project, that worked few weeks ago. No response from support - Sonatype Nexus Repository - Sonatype Community](/content/community/t/402-payment-required-for-publishing-project-that-worked-few-weeks-ago-no-response-from-support/16323/2/index.html): I am attempting to deploy hr.hrg:maven-get-deps-maven-plugin:1.0.4 to OSSRH, but the upload is rejected with 402 Payment Required. 
Details: 
Namespace is registered under hr.hrg in Sonatype Central publishing namespaces… (298 words, May 7, 2026)
- [402 Payment Required for publishing project, that worked few weeks ago. No response from support - Sonatype Nexus Repository - Sonatype Community](/content/community/t/402-payment-required-for-publishing-project-that-worked-few-weeks-ago-no-response-from-support/16323/index.html): I am attempting to deploy hr.hrg:maven-get-deps-maven-plugin:1.0.4 to OSSRH, but the upload is rejected with 402 Payment Required. 
Details: 
Namespace is registered under hr.hrg in Sonatype Central publishing namespaces… (305 words, May 7, 2026)
- [402 Payment Required for publishing project, that worked few weeks ago. No response from support - Sonatype Nexus Repository - Sonatype Community](/content/community/t/402-payment-required-for-publishing-project-that-worked-few-weeks-ago-no-response-from-support/16323/1/index.html): I am attempting to deploy hr.hrg:maven-get-deps-maven-plugin:1.0.4 to OSSRH, but the upload is rejected with 402 Payment Required. 
Details: 
Namespace is registered under hr.hrg in Sonatype Central publishing namespaces… (297 words, May 7, 2026)
- [Docker layer blobs no longer reclaimed after 3.91.0-07 upgrade - Sonatype Nexus Repository - Sonatype Community](/content/community/t/docker-layer-blobs-no-longer-reclaimed-after-3-91-0-07-upgrade/16322/index.html): Since upgrading Nexus Repository to 3.91.0-07 (from 3.87.1-01), our Docker 
hosted repo has stopped reclaiming disk space, despite the scheduled 
cleanup tasks all reporting success. We’ve run Nexus for 10+ years and 
us… (772 words, May 7, 2026)
- [Docker layer blobs no longer reclaimed after 3.91.0-07 upgrade - Sonatype Nexus Repository - Sonatype Community](/content/community/t/docker-layer-blobs-no-longer-reclaimed-after-3-91-0-07-upgrade/16322/1/index.html): Since upgrading Nexus Repository to 3.91.0-07 (from 3.87.1-01), our Docker 
hosted repo has stopped reclaiming disk space, despite the scheduled 
cleanup tasks all reporting success. We’ve run Nexus for 10+ years and 
us… (774 words, May 7, 2026)
- [Nexus 3 Fails to Connect to PostgreSQL with "password authentication failed for user 'nexus'" Despite Correct Credentials - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-3-fails-to-connect-to-postgresql-with-password-authentication-failed-for-user-nexus-despite-correct-credentials/16316/2/index.html): I am running Nexus Repository Manager 3 (version 3.77.0, previously 3.76.1) in Kubernetes, using the official Helm chart. I am attempting to migrate from the embedded H2 database to an external PostgreSQL (Cloud SQL) ins… (324 words, May 6, 2026)
- [KeyStore YUM Nexus Docker - Sonatype Nexus Repository - Sonatype Community](/content/community/t/keystore-yum-nexus-docker/16310/3/index.html): Hello together, 
in following, I refer to Proxying RHEL Yum Repositories . 

A few days ago, I moved our Nexus Repository Manager from a local install, to a docker install as container. 
To ensure, our RHEL servers can g… (868 words, May 6, 2026)
- [Nexus 3 Fails to Connect to PostgreSQL with "password authentication failed for user 'nexus'" Despite Correct Credentials - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-3-fails-to-connect-to-postgresql-with-password-authentication-failed-for-user-nexus-despite-correct-credentials/16316/index.html): I am running Nexus Repository Manager 3 (version 3.77.0, previously 3.76.1) in Kubernetes, using the official Helm chart. I am attempting to migrate from the embedded H2 database to an external PostgreSQL (Cloud SQL) ins… (320 words, May 6, 2026)
- [Nexus 3 Fails to Connect to PostgreSQL with "password authentication failed for user 'nexus'" Despite Correct Credentials - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-3-fails-to-connect-to-postgresql-with-password-authentication-failed-for-user-nexus-despite-correct-credentials/16316/1/index.html): I am running Nexus Repository Manager 3 (version 3.77.0, previously 3.76.1) in Kubernetes, using the official Helm chart. I am attempting to migrate from the embedded H2 database to an external PostgreSQL (Cloud SQL) ins… (323 words, May 6, 2026)
- [Twine upload fails with “license-expression introduced in metadata version 2.4, not 2.3” for wheel uploaded to Nexus PyPI repo - Sonatype Nexus Repository - Sonatype Community](/content/community/t/twine-upload-fails-with-license-expression-introduced-in-metadata-version-2-4-not-2-3-for-wheel-uploaded-to-nexus-pypi-repo/16220/3/index.html): Hello, 
I ran into an issue while uploading a Python wheel to a Nexus Repository PyPI repository and I’m trying to understand whether others have seen the same thing and how you handled it. 
Command used: 
python3 -m twi… (207 words, May 6, 2026)
- [KeyStore YUM Nexus Docker - Sonatype Nexus Repository - Sonatype Community](/content/community/t/keystore-yum-nexus-docker/16310/2/index.html): Hello together, 
in following, I refer to Proxying RHEL Yum Repositories . 

A few days ago, I moved our Nexus Repository Manager from a local install, to a docker install as container. 
To ensure, our RHEL servers can g… (817 words, May 5, 2026)
- [Nexus RM proxy repository Docker multi-arch manifest support - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-rm-proxy-repository-docker-multi-arch-manifest-support/16311/2/index.html): Greetings, 
Do Nexus RM’s Docker proxies support multi-arch image tags via digests?  This forum post from 2019 and the Sonatype Docker registry docs indicate hosted repositories accomplish this via manifest lists when pu… (197 words, May 5, 2026)
- [Nexus RM proxy repository Docker multi-arch manifest support - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-rm-proxy-repository-docker-multi-arch-manifest-support/16311/index.html): Greetings, 
Do Nexus RM’s Docker proxies support multi-arch image tags via digests?  This forum post from 2019 and the Sonatype Docker registry docs indicate hosted repositories accomplish this via manifest lists when pu… (203 words, May 5, 2026)
- [Nexus RM proxy repository Docker multi-arch manifest support - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-rm-proxy-repository-docker-multi-arch-manifest-support/16311/1/index.html): Greetings, 
Do Nexus RM’s Docker proxies support multi-arch image tags via digests?  This forum post from 2019 and the Sonatype Docker registry docs indicate hosted repositories accomplish this via manifest lists when pu… (215 words, May 5, 2026)
- [KeyStore YUM Nexus Docker - Sonatype Nexus Repository - Sonatype Community](/content/community/t/keystore-yum-nexus-docker/16310/1/index.html): Hello together, 
in following, I refer to Proxying RHEL Yum Repositories . 

A few days ago, I moved our Nexus Repository Manager from a local install, to a docker install as container. 
To ensure, our RHEL servers can g… (876 words, May 5, 2026)
- [Update Your IQ Server License Threat Groups - Sonatype Labs - Sonatype Community](/content/community/t/update-your-iq-server-license-threat-groups/3094/72/index.html): The license threat group updater will apply the latest Sonatype provided license classification to your running IQ server’s license threat groups. This will alleviate any “License Threat Group not Assigned” policy violat… (5,179 words, Apr 30, 2026)
- [Missing task "Admin - Remove a member from the blob store group" (Community Edition) - Sonatype Nexus Repository - Sonatype Community](/content/community/t/missing-task-admin-remove-a-member-from-the-blob-store-group-community-edition/16301/index.html): Hi, following the guide Moving a Blob Store I convert an existing (old) blob store into a group and add a new created blob store into it. But the next step to create a scheduled task (“Admin - Remove a member from the bl… (113 words, Apr 29, 2026)
- [Missing task "Admin - Remove a member from the blob store group" (Community Edition) - Sonatype Nexus Repository - Sonatype Community](/content/community/t/missing-task-admin-remove-a-member-from-the-blob-store-group-community-edition/16301/1/index.html): Hi, following the guide Moving a Blob Store I convert an existing (old) blob store into a group and add a new created blob store into it. But the next step to create a scheduled task (“Admin - Remove a member from the bl… (196 words, Apr 29, 2026)
- [Getting Error in Nexus.log too many open files - Sonatype Nexus Repository - Sonatype Community](/content/community/t/getting-error-in-nexus-log-too-many-open-files/16290/6/index.html): Hi Team, 
We are running Nexus 3.29 OSS and got below error in nexus.log 
Caused by: java.io.FileNotFoundException: /app/nexus_home/sonatype-work/nexus3/db/frozen.marker (Too many open files) 
at java.io.FileInputStream.… (525 words, Apr 29, 2026)
- [OSS Index is moving to Sonatype Guide - Community Announcements - Sonatype Community](/content/community/t/oss-index-is-moving-to-sonatype-guide/16133/8/index.html): UPDATE, 4/28/26: This switchover is now complete. 

UPDATE, 4/8/26: Compatibility APIs and new URLs are available. If you’re an OSSI user, update your configurations before April 28th to ensure seamless continuity. Not s… (585 words, Apr 28, 2026)
- [New license-file in containerized environment - Sonatype Nexus Repository - Sonatype Community](/content/community/t/new-license-file-in-containerized-environment/16289/3/index.html): Hi! 
We have setup 3 nodes via Docker compose and the license file is located in /nexus-data/etc/sonatype-license.lic set in nexus.properties following the recommendations. 
When i replace the old license for a new valid… (282 words, Apr 28, 2026)
- [Getting Error in Nexus.log too many open files - Sonatype Nexus Repository - Sonatype Community](/content/community/t/getting-error-in-nexus-log-too-many-open-files/16290/index.html): Hi Team, 
We are running Nexus 3.29 OSS and got below error in nexus.log 
Caused by: java.io.FileNotFoundException: /app/nexus_home/sonatype-work/nexus3/db/frozen.marker (Too many open files) 
at java.io.FileInputStream.… (525 words, Apr 27, 2026)
- [Getting Error in Nexus.log too many open files - Sonatype Nexus Repository - Sonatype Community](/content/community/t/getting-error-in-nexus-log-too-many-open-files/16290/1/index.html): Hi Team, 
We are running Nexus 3.29 OSS and got below error in nexus.log 
Caused by: java.io.FileNotFoundException: /app/nexus_home/sonatype-work/nexus3/db/frozen.marker (Too many open files) 
at java.io.FileInputStream.… (525 words, Apr 27, 2026)
- [New license-file in containerized environment - Sonatype Nexus Repository - Sonatype Community](/content/community/t/new-license-file-in-containerized-environment/16289/index.html): Hi! 
We have setup 3 nodes via Docker compose and the license file is located in /nexus-data/etc/sonatype-license.lic set in nexus.properties following the recommendations. 
When i replace the old license for a new valid… (282 words, Apr 27, 2026)
- [New license-file in containerized environment - Sonatype Nexus Repository - Sonatype Community](/content/community/t/new-license-file-in-containerized-environment/16289/1/index.html): Hi! 
We have setup 3 nodes via Docker compose and the license file is located in /nexus-data/etc/sonatype-license.lic set in nexus.properties following the recommendations. 
When i replace the old license for a new valid… (282 words, Apr 27, 2026)
- [Yum Metadata Rebuild Failed - Sonatype Nexus Repository - Sonatype Community](/content/community/t/yum-metadata-rebuild-failed/16088/13/index.html): I’m running the latest version of nexus, nexus-3.89.1-02, and since recently removing an rpm from our custom yum repository we’ve been getting errors when rebuilding metadata. The rebuild task states our repository is nu… (617 words, Apr 23, 2026)
- [Yum Metadata Rebuild Failed - Sonatype Nexus Repository - Sonatype Community](/content/community/t/yum-metadata-rebuild-failed/16088/11/index.html): I’m running the latest version of nexus, nexus-3.89.1-02, and since recently removing an rpm from our custom yum repository we’ve been getting errors when rebuilding metadata. The rebuild task states our repository is nu… (556 words, Apr 23, 2026)
- [Are there official STIGs or hardening guidelines available for Sonatype Nexus Repository? - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/are-there-official-stigs-or-hardening-guidelines-available-for-sonatype-nexus-repository/16258/3/index.html): Hello, 
We are currently evaluating Sonatype Nexus Repository for enterprise-wide use and are working on aligning the product with our internal security and compliance requirements. 
As part of this process, we would lik… (255 words, Apr 23, 2026)
- [Support for the new endpoint in Hugging Face Hub API - Sonatype Nexus Repository - Sonatype Community](/content/community/t/support-for-the-new-endpoint-in-hugging-face-hub-api/16275/index.html): In Hugging Face Hub API, starting from version 0.20+, a new endpoint was introduced: 
/api/models/{model}/tree/main. 
Currently, the Nexus Repository proxy for Hugging Face does NOT support this new endpoint. 
It returns… (214 words, Apr 23, 2026)
- [Support for the new endpoint in Hugging Face Hub API - Sonatype Nexus Repository - Sonatype Community](/content/community/t/support-for-the-new-endpoint-in-hugging-face-hub-api/16275/1/index.html): In Hugging Face Hub API, starting from version 0.20+, a new endpoint was introduced: 
/api/models/{model}/tree/main. 
Currently, the Nexus Repository proxy for Hugging Face does NOT support this new endpoint. 
It returns… (220 words, Apr 23, 2026)
- [Yum Metadata Rebuild Failed - Sonatype Nexus Repository - Sonatype Community](/content/community/t/yum-metadata-rebuild-failed/16088/10/index.html): I’m running the latest version of nexus, nexus-3.89.1-02, and since recently removing an rpm from our custom yum repository we’ve been getting errors when rebuilding metadata. The rebuild task states our repository is nu… (594 words, Apr 22, 2026)
- [Maintenance Downtime of Community on Monday, April 13th at 7:30 p.m ET - Community Announcements - Sonatype Community](/content/community/t/maintenance-downtime-of-community-on-monday-april-13th-at-7-30-p-m-et/16247/4/index.html): Starting around 7:30 p.m. ET on Monday, April 13th, the Community forum will be brought offline to perform necessary maintenance and upgrades. 
This downtime is localized to just the community forum, and will not affect … (220 words, Apr 21, 2026)
- [how to use remote tcp socket instead of local unix socket for nexus iq container image scan for pulling neuvector image from private registry - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/how-to-use-remote-tcp-socket-instead-of-local-unix-socket-for-nexus-iq-container-image-scan-for-pulling-neuvector-image-from-private-registry/16271/2/index.html): how to use remote tcp socket instead of local unix socket for nexus iq container image scan for pulling neuvector image from private registry? Using jenkins plugin. 
getting the error docker pull privateregistry.com/neuv… (105 words, Apr 21, 2026)
- [how to use remote tcp socket instead of local unix socket for nexus iq container image scan for pulling neuvector image from private registry - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/how-to-use-remote-tcp-socket-instead-of-local-unix-socket-for-nexus-iq-container-image-scan-for-pulling-neuvector-image-from-private-registry/16271/index.html): how to use remote tcp socket instead of local unix socket for nexus iq container image scan for pulling neuvector image from private registry? Using jenkins plugin. 
getting the error docker pull privateregistry.com/neuv… (172 words, Apr 21, 2026)
- [how to use remote tcp socket instead of local unix socket for nexus iq container image scan for pulling neuvector image from private registry - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/how-to-use-remote-tcp-socket-instead-of-local-unix-socket-for-nexus-iq-container-image-scan-for-pulling-neuvector-image-from-private-registry/16271/1/index.html): how to use remote tcp socket instead of local unix socket for nexus iq container image scan for pulling neuvector image from private registry? Using jenkins plugin. 
getting the error docker pull privateregistry.com/neuv… (101 words, Apr 21, 2026)
- [Sonatype Nexus Repository 3.91.1 Released - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-repository-3-91-1-released/16263/index.html): Sonatype Nexus Repository 3.91.1 is now available. 
This release fixes memory-related issues related to duplicate Firewall evaluations, improves Docker error responses with quarantine details, and enables successful inst… (85 words, Apr 18, 2026)
- [Sonatype Nexus Repository 3.91.1 Released - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-repository-3-91-1-released/16263/1/index.html): Sonatype Nexus Repository 3.91.1 is now available. 
This release fixes memory-related issues related to duplicate Firewall evaluations, improves Docker error responses with quarantine details, and enables successful inst… (85 words, Apr 18, 2026)
- [Are there official STIGs or hardening guidelines available for Sonatype Nexus Repository? - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/are-there-official-stigs-or-hardening-guidelines-available-for-sonatype-nexus-repository/16258/2/index.html): Hello, 
We are currently evaluating Sonatype Nexus Repository for enterprise-wide use and are working on aligning the product with our internal security and compliance requirements. 
As part of this process, we would lik… (255 words, Apr 16, 2026)
- [Are there official STIGs or hardening guidelines available for Sonatype Nexus Repository? - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/are-there-official-stigs-or-hardening-guidelines-available-for-sonatype-nexus-repository/16258/1/index.html): Hello, 
We are currently evaluating Sonatype Nexus Repository for enterprise-wide use and are working on aligning the product with our internal security and compliance requirements. 
As part of this process, we would lik… (237 words, Apr 16, 2026)
- [Maintenance Downtime of Community on Monday, April 13th at 7:30 p.m ET - Community Announcements - Sonatype Community](/content/community/t/maintenance-downtime-of-community-on-monday-april-13th-at-7-30-p-m-et/16247/index.html): Starting around 7:30 p.m. ET on Monday, April 13th, the Community forum will be brought offline to perform necessary maintenance and upgrades. 
This downtime is localized to just the community forum, and will not affect … (152 words, Apr 13, 2026)
- [Maintenance Downtime of Community on Monday, April 13th at 7:30 p.m ET - Community Announcements - Sonatype Community](/content/community/t/maintenance-downtime-of-community-on-monday-april-13th-at-7-30-p-m-et/16247/1/index.html): Starting around 7:30 p.m. ET on Monday, April 13th, the Community forum will be brought offline to perform necessary maintenance and upgrades. 
This downtime is localized to just the community forum, and will not affect … (201 words, Apr 13, 2026)
- [Default Role - FAILED - Sonatype Nexus Repository - Sonatype Community](/content/community/t/default-role-failed/15992/4/index.html): After upgrading from 3.78.2-04 to 3.88, the following error appeared: 
Default Role - FAILED Load failed: javax.validation.ConstraintViolationException: Validation failed; 1 constraints violated 

If I delete and recreat… (168 words, Apr 10, 2026)
- [Default Role - FAILED - Sonatype Nexus Repository - Sonatype Community](/content/community/t/default-role-failed/15992/3/index.html): After upgrading from 3.78.2-04 to 3.88, the following error appeared: 
Default Role - FAILED Load failed: javax.validation.ConstraintViolationException: Validation failed; 1 constraints violated 

If I delete and recreat… (169 words, Apr 10, 2026)
- [Sonatype Nexus Repository 3.91.0 Released - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-repository-3-91-0-released/16232/1/index.html): Sonatype Nexus Repository 3.91.0 is now available. 
This release introduces support for Swift Group repository format and global webhooks for Firewall quarantine events. 
This release also updates the Sonatype Nexus Repo… (129 words, Apr 7, 2026)
- [Admin login showing anonymous - Sonatype Nexus Repository - Sonatype Community](/content/community/t/admin-login-showing-anonymous/16231/index.html): I installed Sonatype Nexus Repository OSS 3.72.0-04 on Ubuntu 24.04.4 LTS server. I need to see the Clog Settings wheel. Rather when I log in as Admin, I do not get the prompt to change my password from the system-issued… (397 words, Apr 6, 2026)
- [Twine upload fails with “license-expression introduced in metadata version 2.4, not 2.3” for wheel uploaded to Nexus PyPI repo - Sonatype Nexus Repository - Sonatype Community](/content/community/t/twine-upload-fails-with-license-expression-introduced-in-metadata-version-2-4-not-2-3-for-wheel-uploaded-to-nexus-pypi-repo/16220/2/index.html): Hello, 
I ran into an issue while uploading a Python wheel to a Nexus Repository PyPI repository and I’m trying to understand whether others have seen the same thing and how you handled it. 
Command used: 
python3 -m twi… (207 words, Apr 6, 2026)
- [Twine upload fails with “license-expression introduced in metadata version 2.4, not 2.3” for wheel uploaded to Nexus PyPI repo - Sonatype Nexus Repository - Sonatype Community](/content/community/t/twine-upload-fails-with-license-expression-introduced-in-metadata-version-2-4-not-2-3-for-wheel-uploaded-to-nexus-pypi-repo/16220/index.html): Hello, 
I ran into an issue while uploading a Python wheel to a Nexus Repository PyPI repository and I’m trying to understand whether others have seen the same thing and how you handled it. 
Command used: 
python3 -m twi… (207 words, Apr 3, 2026)
- [Twine upload fails with “license-expression introduced in metadata version 2.4, not 2.3” for wheel uploaded to Nexus PyPI repo - Sonatype Nexus Repository - Sonatype Community](/content/community/t/twine-upload-fails-with-license-expression-introduced-in-metadata-version-2-4-not-2-3-for-wheel-uploaded-to-nexus-pypi-repo/16220/1/index.html): Hello, 
I ran into an issue while uploading a Python wheel to a Nexus Repository PyPI repository and I’m trying to understand whether others have seen the same thing and how you handled it. 
Command used: 
python3 -m twi… (207 words, Apr 3, 2026)
- [Cannot authenticate to terraform repository - Sonatype Nexus Repository - Sonatype Community](/content/community/t/cannot-authenticate-to-terraform-repository/16208/index.html): On Sonatype Nexus Repository CE v3.90.2-06 (docker, linux amd64), with the Terraform Token Realm enabled, and Anonymous Access disabled, I’m unable to authenticate to a terraform repository when appending a base64 encode… (423 words, Apr 1, 2026)
- [Cannot authenticate to terraform repository - Sonatype Nexus Repository - Sonatype Community](/content/community/t/cannot-authenticate-to-terraform-repository/16208/1/index.html): On Sonatype Nexus Repository CE v3.90.2-06 (docker, linux amd64), with the Terraform Token Realm enabled, and Anonymous Access disabled, I’m unable to authenticate to a terraform repository when appending a base64 encode… (423 words, Apr 1, 2026)
- [Update Your IQ Server License Threat Groups - Sonatype Labs - Sonatype Community](/content/community/t/update-your-iq-server-license-threat-groups/3094/71/index.html): The license threat group updater will apply the latest Sonatype provided license classification to your running IQ server’s license threat groups. This will alleviate any “License Threat Group not Assigned” policy violat… (5,140 words, Mar 30, 2026)
- [Application Health Check required permissions for role assignment - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/application-health-check-required-permissions-for-role-assignment/16188/3/index.html): I’ve created a new user to perform health checks against the application, using the following permissions: 
nx-healthcheck-read
nx-healthcheck-summary-read
nx-healthcheck-update

When I attempt to hit the healthcheck end… (203 words, Mar 25, 2026)
- [Corrupt DB during update from 3.85.0 to 3.88.0 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/corrupt-db-during-update-from-3-85-0-to-3-88-0/16187/2/index.html): We recently upgraded our Nexus Repository Manager from version 3.85 to 3.88 (Docker image, running on AWS ECS Fargate) and encountered a critical startup failure due to H2 database corruption. We did this in our dev envi… (222 words, Mar 25, 2026)
- [Application Health Check required permissions for role assignment - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/application-health-check-required-permissions-for-role-assignment/16188/index.html): I’ve created a new user to perform health checks against the application, using the following permissions: 
nx-healthcheck-read
nx-healthcheck-summary-read
nx-healthcheck-update

When I attempt to hit the healthcheck end… (203 words, Mar 25, 2026)
- [Application Health Check required permissions for role assignment - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/application-health-check-required-permissions-for-role-assignment/16188/1/index.html): I’ve created a new user to perform health checks against the application, using the following permissions: 
nx-healthcheck-read
nx-healthcheck-summary-read
nx-healthcheck-update

When I attempt to hit the healthcheck end… (204 words, Mar 25, 2026)
- [Corrupt DB during update from 3.85.0 to 3.88.0 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/corrupt-db-during-update-from-3-85-0-to-3-88-0/16187/index.html): We recently upgraded our Nexus Repository Manager from version 3.85 to 3.88 (Docker image, running on AWS ECS Fargate) and encountered a critical startup failure due to H2 database corruption. We did this in our dev envi… (222 words, Mar 25, 2026)
- [Corrupt DB during update from 3.85.0 to 3.88.0 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/corrupt-db-during-update-from-3-85-0-to-3-88-0/16187/1/index.html): We recently upgraded our Nexus Repository Manager from version 3.85 to 3.88 (Docker image, running on AWS ECS Fargate) and encountered a critical startup failure due to H2 database corruption. We did this in our dev envi… (218 words, Mar 25, 2026)
- [Nexus 3 and Postgres - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-3-and-postgres/16126/3/index.html): A member of your team had ran into a note stating that we needed to upgrade our Nexus3:3.68.1 from H2 to Postgres. After performing the upgrade we found that the instance was still using H2 and we were getting errors so … (265 words, Mar 24, 2026)
- [Yum Metadata Rebuild Failed - Sonatype Nexus Repository - Sonatype Community](/content/community/t/yum-metadata-rebuild-failed/16088/9/index.html): I’m running the latest version of nexus, nexus-3.89.1-02, and since recently removing an rpm from our custom yum repository we’ve been getting errors when rebuilding metadata. The rebuild task states our repository is nu… (535 words, Mar 24, 2026)
- [migrating local blob storage to aws s3 - confirm which directory to sync - Sonatype Nexus Repository - Sonatype Community](/content/community/t/migrating-local-blob-storage-to-aws-s3-confirm-which-directory-to-sync/16184/6/index.html): I’m reviewing documentation on migrating blob storage from local disk to AWS S3 and using this documentation: 
https://help.sonatype.com/en/blob-stores.html#moving-a-blob-store 
Moving the blob storage with aws s3 sync (… (583 words, Mar 24, 2026)
- [Yum Metadata Rebuild Failed - Sonatype Nexus Repository - Sonatype Community](/content/community/t/yum-metadata-rebuild-failed/16088/8/index.html): I’m running the latest version of nexus, nexus-3.89.1-02, and since recently removing an rpm from our custom yum repository we’ve been getting errors when rebuilding metadata. The rebuild task states our repository is nu… (520 words, Mar 24, 2026)
- [Nexus apt plugin - support for deb-src - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-apt-plugin-support-for-deb-src/2664/2/index.html): Any support or planned support for the deb-src format (i.e. keeping track of the source of the packages, snapshotting the source, …)? (118 words, Mar 24, 2026)
- [migrating local blob storage to aws s3 - confirm which directory to sync - Sonatype Nexus Repository - Sonatype Community](/content/community/t/migrating-local-blob-storage-to-aws-s3-confirm-which-directory-to-sync/16184/index.html): I’m reviewing documentation on migrating blob storage from local disk to AWS S3 and using this documentation: 
https://help.sonatype.com/en/blob-stores.html#moving-a-blob-store 
Moving the blob storage with aws s3 sync (… (582 words, Mar 24, 2026)
- [Sonatype Nexus Repository 3.90.2 and 3.70.5 Released - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-repository-3-90-2-and-3-70-5-released/16181/index.html): Sonatype Nexus Repository versions 3.90.2 and 3.70.5 are now available. 
These releases introduce an Instance Migrator that allows Nexus Repository 3.70.5 deployments to move to Nexus Repository Cloud or Nexus Repository… (55 words, Mar 23, 2026)
- [Sonatype Nexus Repository 3.90.2 and 3.70.5 Released - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-repository-3-90-2-and-3-70-5-released/16181/1/index.html): Sonatype Nexus Repository versions 3.90.2 and 3.70.5 are now available. 
These releases introduce an Instance Migrator that allows Nexus Repository 3.70.5 deployments to move to Nexus Repository Cloud or Nexus Repository… (131 words, Mar 23, 2026)
- [Are there any plans to provide vcpkg repository in Sonatype Nexus? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/are-there-any-plans-to-provide-vcpkg-repository-in-sonatype-nexus/16177/index.html): Hi, 
Is support for the vcpkg repository on the roadmap for Sonatype Nexus (proxy, hosted, etc.)? 
If not, why not? 
I have made use of the Conan repository but I think vcpkg would also be very useful. 
Regards, 
Thomas (62 words, Mar 23, 2026)
- [Are there any plans to provide vcpkg repository in Sonatype Nexus? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/are-there-any-plans-to-provide-vcpkg-repository-in-sonatype-nexus/16177/1/index.html): Hi, 
Is support for the vcpkg repository on the roadmap for Sonatype Nexus (proxy, hosted, etc.)? 
If not, why not? 
I have made use of the Conan repository but I think vcpkg would also be very useful. 
Regards, 
Thomas (61 words, Mar 23, 2026)
- [Yum Metadata Rebuild Failed - Sonatype Nexus Repository - Sonatype Community](/content/community/t/yum-metadata-rebuild-failed/16088/7/index.html): I’m running the latest version of nexus, nexus-3.89.1-02, and since recently removing an rpm from our custom yum repository we’ve been getting errors when rebuilding metadata. The rebuild task states our repository is nu… (554 words, Mar 18, 2026)
- [Yum Metadata Rebuild Failed - Sonatype Nexus Repository - Sonatype Community](/content/community/t/yum-metadata-rebuild-failed/16088/6/index.html): I’m running the latest version of nexus, nexus-3.89.1-02, and since recently removing an rpm from our custom yum repository we’ve been getting errors when rebuilding metadata. The rebuild task states our repository is nu… (606 words, Mar 18, 2026)
- [Why does Conan recommend using Artifactory and not Nexus - Sonatype Nexus Repository - Sonatype Community](/content/community/t/why-does-conan-recommend-using-artifactory-and-not-nexus/16165/3/index.html): Hi, 
I have set up Conan proxy repository on Sonatype Nexus which was easy to set up when I followd the Nexus online documentation. It seems to work ok (I used it to access Conan public repo from a network without intern… (138 words, Mar 17, 2026)
- [Why does Conan recommend using Artifactory and not Nexus - Sonatype Nexus Repository - Sonatype Community](/content/community/t/why-does-conan-recommend-using-artifactory-and-not-nexus/16165/index.html): Hi, 
I have set up Conan proxy repository on Sonatype Nexus which was easy to set up when I followd the Nexus online documentation. It seems to work ok (I used it to access Conan public repo from a network without intern… (228 words, Mar 17, 2026)
- [Why does Conan recommend using Artifactory and not Nexus - Sonatype Nexus Repository - Sonatype Community](/content/community/t/why-does-conan-recommend-using-artifactory-and-not-nexus/16165/1/index.html): Hi, 
I have set up Conan proxy repository on Sonatype Nexus which was easy to set up when I followd the Nexus online documentation. It seems to work ok (I used it to access Conan public repo from a network without intern… (138 words, Mar 17, 2026)
- [Freeing up space Recovery Mode - Sonatype Nexus Repository - Sonatype Community](/content/community/t/freeing-up-space-recovery-mode/16163/2/index.html): After running recovery mode in version 3.90.1, is it possible to free up space in the Nexus after this mode is completed? (82 words, Mar 16, 2026)
- [Freeing up space Recovery Mode - Sonatype Nexus Repository - Sonatype Community](/content/community/t/freeing-up-space-recovery-mode/16163/index.html): After running recovery mode in version 3.90.1, is it possible to free up space in the Nexus after this mode is completed? (82 words, Mar 16, 2026)
- [Freeing up space Recovery Mode - Sonatype Nexus Repository - Sonatype Community](/content/community/t/freeing-up-space-recovery-mode/16163/1/index.html): After running recovery mode in version 3.90.1, is it possible to free up space in the Nexus after this mode is completed? (78 words, Mar 16, 2026)
- [Bom scan does not generate a report - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/bom-scan-does-not-generate-a-report/16097/4/index.html): Description: 
We have a centralized CI pipeline (Azure DevOps) setup that runs across our solutions. As part of the CI process, we perform a Sonatype scan using the NexusIqPipelineTask. The task uses, on the scanTargets … (207 words, Mar 11, 2026)
- [Sonatype Nexus Repository 3.90.1 Released - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-repository-3-90-1-released/16150/index.html): Sonatype Nexus Repository 3.90.1 is now available. 
This release fixes an issue that prevented Nexus Repository Community Edition from starting on version 3.90.0. Community Edition users can now safely upgrade to version… (79 words, Mar 6, 2026)
- [Is it possible to use Nexus3 as a winget source? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/is-it-possible-to-use-nexus3-as-a-winget-source/16147/2/index.html): I spun up a container running Nexus3 (community version) initially to use as a local repo for chocolatey.  But management would like to utilize winget since it is built in to most recent versions of Windows.  Can I use N… (160 words, Mar 6, 2026)
- [Is it possible to use Nexus3 as a winget source? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/is-it-possible-to-use-nexus3-as-a-winget-source/16147/index.html): I spun up a container running Nexus3 (community version) initially to use as a local repo for chocolatey.  But management would like to utilize winget since it is built in to most recent versions of Windows.  Can I use N… (162 words, Mar 6, 2026)
- [Is it possible to use Nexus3 as a winget source? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/is-it-possible-to-use-nexus3-as-a-winget-source/16147/1/index.html): I spun up a container running Nexus3 (community version) initially to use as a local repo for chocolatey.  But management would like to utilize winget since it is built in to most recent versions of Windows.  Can I use N… (103 words, Mar 6, 2026)
- [Problem getting Golang proxy repository to work - Sonatype Nexus Repository - Sonatype Community](/content/community/t/problem-getting-golang-proxy-repository-to-work/16122/2/index.html): Hi, 
I reported a while ago that I could not get Golang proxy repository to work in Nexus. I have updated Sonatype Nexus to the latest released official Docker image from Sonatype but the problem remains. I am trying to … (474 words, Mar 6, 2026)
- [Sonatype Nexus Repository 3.90.0 Released - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-repository-3-90-0-released/16140/index.html): Sonatype Nexus Repository 3.90.0 is now available. 
In this release, we re-enabled the Repair - Execute Data Repair Plan task and now provide a new Recovery Mode designed to support safe reconciliation between the databa… (226 words, Mar 5, 2026)
- [Sonatype Nexus Repository 3.90.0 Released - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-repository-3-90-0-released/16140/1/index.html): Sonatype Nexus Repository 3.90.0 is now available. 
In this release, we re-enabled the Repair - Execute Data Repair Plan task and now provide a new Recovery Mode designed to support safe reconciliation between the databa… (268 words, Mar 5, 2026)
- [Undo soft-delete in database to bring back deleted artifact (blob still exists) - Sonatype Nexus Repository - Sonatype Community](/content/community/t/undo-soft-delete-in-database-to-bring-back-deleted-artifact-blob-still-exists/16130/2/index.html): Hello, 
Does anyone know the proper/safe way to restore a soft-deleted artifact in Nexus Repository 3? 
Example: I accidentally deleted a Helm chart → soft-delete occurred, blobs are still present in the S3 blob store. 
W… (168 words, Mar 5, 2026)
- [OSS Index is moving to Sonatype Guide - Community Announcements - Sonatype Community](/content/community/t/oss-index-is-moving-to-sonatype-guide/16133/index.html): UPDATE, 4/28/26: This switchover is now complete. 

UPDATE, 4/8/26: Compatibility APIs and new URLs are available. If you’re an OSSI user, update your configurations before April 28th to ensure seamless continuity. Not s… (582 words, Mar 4, 2026)
- [OSS Index is moving to Sonatype Guide - Community Announcements - Sonatype Community](/content/community/t/oss-index-is-moving-to-sonatype-guide/16133/1/index.html): UPDATE, 4/28/26: This switchover is now complete. 

UPDATE, 4/8/26: Compatibility APIs and new URLs are available. If you’re an OSSI user, update your configurations before April 28th to ensure seamless continuity. Not s… (585 words, Mar 4, 2026)
- [Nexus 3 and Postgres - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-3-and-postgres/16126/index.html): A member of your team had ran into a note stating that we needed to upgrade our Nexus3:3.68.1 from H2 to Postgres. After performing the upgrade we found that the instance was still using H2 and we were getting errors so … (264 words, Mar 3, 2026)
- [Nexus 3 and Postgres - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-3-and-postgres/16126/1/index.html): A member of your team had ran into a note stating that we needed to upgrade our Nexus3:3.68.1 from H2 to Postgres. After performing the upgrade we found that the instance was still using H2 and we were getting errors so … (265 words, Mar 3, 2026)
- [About the Sonatype Guide category - Sonatype Guide - Sonatype Community](/content/community/t/about-the-sonatype-guide-category/16125/index.html): Discuss Sonatype Guide and the MCP server. Ask questions, get answers, and learn about the latest. 
Try Guide for yourself: it’s free to get started and requires no login. See our documentation about Guide for instructio… (162 words, Mar 3, 2026)
- [About the Sonatype Guide category - Sonatype Guide - Sonatype Community](/content/community/t/about-the-sonatype-guide-category/16125/1/index.html): Discuss Sonatype Guide and the MCP server. Ask questions, get answers, and learn about the latest. 
Try Guide for yourself: it’s free to get started and requires no login. See our documentation about Guide for instructio… (197 words, Mar 3, 2026)
- [Nexus H2 repair steps for version 3.79 - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/nexus-h2-repair-steps-for-version-3-79/16116/4/index.html): Hello Team, 
I am performing the recovery of my h2 db in nexus3. Here are the steps and current setup. 
Environment: 

Nexus Version: 3.79.1
H2 Version: 2.2.224
Java Version: 11
Deployment: **OpenShift **

Steps i am per… (222 words, Mar 3, 2026)
- [Yum Metadata Rebuild Failed - Sonatype Nexus Repository - Sonatype Community](/content/community/t/yum-metadata-rebuild-failed/16088/5/index.html): I’m running the latest version of nexus, nexus-3.89.1-02, and since recently removing an rpm from our custom yum repository we’ve been getting errors when rebuilding metadata. The rebuild task states our repository is nu… (478 words, Mar 3, 2026)
- [Nexus H2 repair steps for version 3.79 - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/nexus-h2-repair-steps-for-version-3-79/16116/3/index.html): Hello Team, 
I am performing the recovery of my h2 db in nexus3. Here are the steps and current setup. 
Environment: 

Nexus Version: 3.79.1
H2 Version: 2.2.224
Java Version: 11
Deployment: **OpenShift **

Steps i am per… (236 words, Mar 3, 2026)
- [Problem getting Golang proxy repository to work - Sonatype Nexus Repository - Sonatype Community](/content/community/t/problem-getting-golang-proxy-repository-to-work/16122/index.html): Hi, 
I reported a while ago that I could not get Golang proxy repository to work in Nexus. I have updated Sonatype Nexus to the latest released official Docker image from Sonatype but the problem remains. I am trying to … (475 words, Mar 3, 2026)
- [Problem getting Golang proxy repository to work - Sonatype Nexus Repository - Sonatype Community](/content/community/t/problem-getting-golang-proxy-repository-to-work/16122/1/index.html): Hi, 
I reported a while ago that I could not get Golang proxy repository to work in Nexus. I have updated Sonatype Nexus to the latest released official Docker image from Sonatype but the problem remains. I am trying to … (470 words, Mar 3, 2026)
- [Nexus H2 repair steps for version 3.79 - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/nexus-h2-repair-steps-for-version-3-79/16116/2/index.html): Hello Team, 
I am performing the recovery of my h2 db in nexus3. Here are the steps and current setup. 
Environment: 

Nexus Version: 3.79.1
H2 Version: 2.2.224
Java Version: 11
Deployment: **OpenShift **

Steps i am per… (246 words, Mar 2, 2026)
- [Yum Metadata Rebuild Failed - Sonatype Nexus Repository - Sonatype Community](/content/community/t/yum-metadata-rebuild-failed/16088/4/index.html): I’m running the latest version of nexus, nexus-3.89.1-02, and since recently removing an rpm from our custom yum repository we’ve been getting errors when rebuilding metadata. The rebuild task states our repository is nu… (557 words, Mar 2, 2026)
- [Nexus H2 repair steps for version 3.79 - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/nexus-h2-repair-steps-for-version-3-79/16116/index.html): Hello Team, 
I am performing the recovery of my h2 db in nexus3. Here are the steps and current setup. 
Environment: 

Nexus Version: 3.79.1
H2 Version: 2.2.224
Java Version: 11
Deployment: **OpenShift **

Steps i am per… (248 words, Mar 2, 2026)
- [Nexus H2 repair steps for version 3.79 - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/nexus-h2-repair-steps-for-version-3-79/16116/1/index.html): Hello Team, 
I am performing the recovery of my h2 db in nexus3. Here are the steps and current setup. 
Environment: 

Nexus Version: 3.79.1
H2 Version: 2.2.224
Java Version: 11
Deployment: **OpenShift **

Steps i am per… (247 words, Mar 2, 2026)
- [RAW Repository Powershell Helpfiles - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/raw-repository-powershell-helpfiles/16103/2/index.html): I want to create a proxy RAW repository for the Powershell help files. 
Normally I can update the Hepfiles with the update-help command. Now I want to make the help files available in the domain as a repository. 
Is this… (113 words, Mar 2, 2026)
- [Upgrade from Nexus 3.39 to 3.70.4 Failing. - Sonatype Nexus Repository - Sonatype Community](/content/community/t/upgrade-from-nexus-3-39-to-3-70-4-failing/16054/2/index.html): Background: 
We are in the process of upgrading Sonatype Nexus from version 3.39 to 3.70.4. 
During the upgrade from 3.39 to 3.70.4, the upgrade was successful for versions 3.39 to 3.40.0, and 3.40.0 to 3.40.1. However, … (355 words, Mar 2, 2026)
- [How to deploy Sonatype Nexus CE to K8s? - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/how-to-deploy-sonatype-nexus-ce-to-k8s/14360/7/index.html): Hi everyone, 
we are using Sonatype Nexus OSS hosted in a Kubernetes Cluster, deployed using the Helm chart nexus-repository-manager from the repository at https://sonatype.github.io/helm3-charts/. 
With the announcement… (434 words, Feb 27, 2026)
- [RAW Repository Powershell Helpfiles - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/raw-repository-powershell-helpfiles/16103/index.html): I want to create a proxy RAW repository for the Powershell help files. 
Normally I can update the Hepfiles with the update-help command. Now I want to make the help files available in the domain as a repository. 
Is this… (122 words, Feb 27, 2026)
- [RAW Repository Powershell Helpfiles - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/raw-repository-powershell-helpfiles/16103/1/index.html): I want to create a proxy RAW repository for the Powershell help files. 
Normally I can update the Hepfiles with the update-help command. Now I want to make the help files available in the domain as a repository. 
Is this… (115 words, Feb 27, 2026)
- [Update Your IQ Server License Threat Groups - Sonatype Labs - Sonatype Community](/content/community/t/update-your-iq-server-license-threat-groups/3094/70/index.html): The license threat group updater will apply the latest Sonatype provided license classification to your running IQ server’s license threat groups. This will alleviate any “License Threat Group not Assigned” policy violat… (1,346 words, Feb 27, 2026)
- [Yum Metadata Rebuild Failed - Sonatype Nexus Repository - Sonatype Community](/content/community/t/yum-metadata-rebuild-failed/16088/3/index.html): I’m running the latest version of nexus, nexus-3.89.1-02, and since recently removing an rpm from our custom yum repository we’ve been getting errors when rebuilding metadata. The rebuild task states our repository is nu… (617 words, Feb 26, 2026)
- [Bom scan does not generate a report - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/bom-scan-does-not-generate-a-report/16097/index.html): Description: 
We have a centralized CI pipeline (Azure DevOps) setup that runs across our solutions. As part of the CI process, we perform a Sonatype scan using the NexusIqPipelineTask. The task uses, on the scanTargets … (207 words, Feb 26, 2026)
- [Bom scan does not generate a report - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/bom-scan-does-not-generate-a-report/16097/1/index.html): Description: 
We have a centralized CI pipeline (Azure DevOps) setup that runs across our solutions. As part of the CI process, we perform a Sonatype scan using the NexusIqPipelineTask. The task uses, on the scanTargets … (214 words, Feb 26, 2026)
- [Yum Metadata Rebuild Failed - Sonatype Nexus Repository - Sonatype Community](/content/community/t/yum-metadata-rebuild-failed/16088/2/index.html): I’m running the latest version of nexus, nexus-3.89.1-02, and since recently removing an rpm from our custom yum repository we’ve been getting errors when rebuilding metadata. The rebuild task states our repository is nu… (941 words, Feb 26, 2026)
- [Yum Metadata Rebuild Failed - Sonatype Nexus Repository - Sonatype Community](/content/community/t/yum-metadata-rebuild-failed/16088/index.html): I’m running the latest version of nexus, nexus-3.89.1-02, and since recently removing an rpm from our custom yum repository we’ve been getting errors when rebuilding metadata. The rebuild task states our repository is nu… (544 words, Feb 24, 2026)
- [Yum Metadata Rebuild Failed - Sonatype Nexus Repository - Sonatype Community](/content/community/t/yum-metadata-rebuild-failed/16088/1/index.html): I’m running the latest version of nexus, nexus-3.89.1-02, and since recently removing an rpm from our custom yum repository we’ve been getting errors when rebuilding metadata. The rebuild task states our repository is nu… (559 words, Feb 24, 2026)
- [Docker repository configuration when inside a container confusion - Sonatype Nexus Repository - Sonatype Community](/content/community/t/docker-repository-configuration-when-inside-a-container-confusion/16075/2/index.html): Hi folks. I am trying to get Nexus working for hosting our internal docker images. 

I am using the official docker image sonatype/nexus3:3.89.1-alpine
The only port being exposed is 8081
I am running nginx as the revers… (352 words, Feb 20, 2026)
- [Docker repository configuration when inside a container confusion - Sonatype Nexus Repository - Sonatype Community](/content/community/t/docker-repository-configuration-when-inside-a-container-confusion/16075/index.html): Hi folks. I am trying to get Nexus working for hosting our internal docker images. 

I am using the official docker image sonatype/nexus3:3.89.1-alpine
The only port being exposed is 8081
I am running nginx as the revers… (349 words, Feb 20, 2026)
- [Docker repository configuration when inside a container confusion - Sonatype Nexus Repository - Sonatype Community](/content/community/t/docker-repository-configuration-when-inside-a-container-confusion/16075/1/index.html): Hi folks. I am trying to get Nexus working for hosting our internal docker images. 

I am using the official docker image sonatype/nexus3:3.89.1-alpine
The only port being exposed is 8081
I am running nginx as the revers… (269 words, Feb 20, 2026)
- [Clarification on robots.txt Exposure and CVE-2024-4956 in Nexus Repository 3.69.0 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/clarification-on-robots-txt-exposure-and-cve-2024-4956-in-nexus-repository-3-69-0/15429/3/index.html): Hello There, 
We are currently running Sonatype Nexus Repository version 3.69.0 as a Docker container. 
During a recent security review, we observed that the robots.txt file is publicly accessible via: 
https:///robots.t… (234 words, Feb 20, 2026)
- [VIP is not working when upgrading from Nexus 3.61 to 3.69 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/vip-is-not-working-when-upgrading-from-nexus-3-61-to-3-69/16068/index.html): We are having issues when we are trying to upgrade from Nexus 3.61 to 3.69.  The VIP is not resolving.  The URL only resolves to the hostname. (48 words, Feb 18, 2026)
- [VIP is not working when upgrading from Nexus 3.61 to 3.69 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/vip-is-not-working-when-upgrading-from-nexus-3-61-to-3-69/16068/1/index.html): We are having issues when we are trying to upgrade from Nexus 3.61 to 3.69.  The VIP is not resolving.  The URL only resolves to the hostname. (121 words, Feb 18, 2026)
- [The copy of the Nexus 3.78.2-04 environment fails to start - Sonatype Nexus Repository - Sonatype Community](/content/community/t/the-copy-of-the-nexus-3-78-2-04-environment-fails-to-start/16050/7/index.html): I need to make a test copy of my Nexus Repository Manager 
(I want to test upgrading to a new version and conduct other tests) 
I have: 
1. A virtual machine with Nexus 3.78.2-04 
2. 5 BLOB Store volumes 
3. An external … (922 words, Feb 17, 2026)
- [Upgrade from Nexus 3.39 to 3.70.4 Failing. - Sonatype Nexus Repository - Sonatype Community](/content/community/t/upgrade-from-nexus-3-39-to-3-70-4-failing/16054/index.html): Background: 
We are in the process of upgrading Sonatype Nexus from version 3.39 to 3.70.4. 
During the upgrade from 3.39 to 3.70.4, the upgrade was successful for versions 3.39 to 3.40.0, and 3.40.0 to 3.40.1. However, … (355 words, Feb 14, 2026)
- [Nuget v3 query on proxy - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nuget-v3-query-on-proxy/16043/3/index.html): I have a nexus 3.89 nuget v3 proxy repository with the upstream being a nuget repo on nexus 3.71.0.6.  If I query the upstream repo with repository/ChocolateyInternal/v3/query/0?q=packageid:chocolatey I only get packages… (156 words, Feb 13, 2026)
- [Nuget v3 query on proxy - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nuget-v3-query-on-proxy/16043/2/index.html): I have a nexus 3.89 nuget v3 proxy repository with the upstream being a nuget repo on nexus 3.71.0.6.  If I query the upstream repo with repository/ChocolateyInternal/v3/query/0?q=packageid:chocolatey I only get packages… (155 words, Feb 13, 2026)
- [The copy of the Nexus 3.78.2-04 environment fails to start - Sonatype Nexus Repository - Sonatype Community](/content/community/t/the-copy-of-the-nexus-3-78-2-04-environment-fails-to-start/16050/index.html): I need to make a test copy of my Nexus Repository Manager 
(I want to test upgrading to a new version and conduct other tests) 
I have: 
1. A virtual machine with Nexus 3.78.2-04 
2. 5 BLOB Store volumes 
3. An external … (888 words, Feb 12, 2026)
- [The copy of the Nexus 3.78.2-04 environment fails to start - Sonatype Nexus Repository - Sonatype Community](/content/community/t/the-copy-of-the-nexus-3-78-2-04-environment-fails-to-start/16050/1/index.html): I need to make a test copy of my Nexus Repository Manager 
(I want to test upgrading to a new version and conduct other tests) 
I have: 
1. A virtual machine with Nexus 3.78.2-04 
2. 5 BLOB Store volumes 
3. An external … (907 words, Feb 12, 2026)
- [Inquiry regarding the applicability of usage limits - Sonatype Nexus Repository - Sonatype Community](/content/community/t/inquiry-regarding-the-applicability-of-usage-limits/16048/2/index.html): background：After upgrading from 3.70.4 to 3.79.1, three errors appeared in nexus.log and resources in the blob store are no longer accessible. Please advise on the possible causes and workarounds. 
We are aware that the … (454 words, Feb 12, 2026)
- [Inquiry regarding the applicability of usage limits - Sonatype Nexus Repository - Sonatype Community](/content/community/t/inquiry-regarding-the-applicability-of-usage-limits/16048/index.html): background：After upgrading from 3.70.4 to 3.79.1, three errors appeared in nexus.log and resources in the blob store are no longer accessible. Please advise on the possible causes and workarounds. 
We are aware that the … (454 words, Feb 12, 2026)
- [Inquiry regarding the applicability of usage limits - Sonatype Nexus Repository - Sonatype Community](/content/community/t/inquiry-regarding-the-applicability-of-usage-limits/16048/1/index.html): background：After upgrading from 3.70.4 to 3.79.1, three errors appeared in nexus.log and resources in the blob store are no longer accessible. Please advise on the possible causes and workarounds. 
We are aware that the … (455 words, Feb 12, 2026)
- [Nuget v3 query on proxy - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nuget-v3-query-on-proxy/16043/index.html): I have a nexus 3.89 nuget v3 proxy repository with the upstream being a nuget repo on nexus 3.71.0.6.  If I query the upstream repo with repository/ChocolateyInternal/v3/query/0?q=packageid:chocolatey I only get packages… (168 words, Feb 11, 2026)
- [Sonatype Nexus Repository 3.89.1 Released - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-repository-3-89-1-released/16042/index.html): Sonatype Nexus Repository 3.89.1 is now available. 
This release fixes a number of bugs impacting version 3.89.0. 
Version 3.89.0 also introduces support for proxy Swift repositories and hosted Terraform repositories. It… (171 words, Feb 11, 2026)
- [Cannot filter packages in nuget v2 repository - Sonatype Nexus Repository - Sonatype Community](/content/community/t/cannot-filter-packages-in-nuget-v2-repository/16037/index.html): We have a nexus 3.83 nuget v2 proxy repository.  I’m trying to get a filtered list of packages via “/repository/ChocolateyInternal/Packages()?$filter=Id eq ‘chocolatey’” but I get a list of all packages returned.  What a… (147 words, Feb 10, 2026)
- [Cannot filter packages in nuget v2 repository - Sonatype Nexus Repository - Sonatype Community](/content/community/t/cannot-filter-packages-in-nuget-v2-repository/16037/1/index.html): We have a nexus 3.83 nuget v2 proxy repository.  I’m trying to get a filtered list of packages via “/repository/ChocolateyInternal/Packages()?$filter=Id eq ‘chocolatey’” but I get a list of all packages returned.  What a… (135 words, Feb 10, 2026)
- [Uploading nar (maven plugin) file error - Sonatype Nexus Repository - Sonatype Community](/content/community/t/uploading-nar-maven-plugin-file-error/12724/6/index.html): I’m trying upload a .nar file to a nexus repository using curl.  I get the following error when attempting to do so: 

400 Detected content type [application/zip, application/x-zip-compressed], but expected [application/… (364 words, Feb 10, 2026)
- [Dates in blob files - Sonatype Nexus Repository - Sonatype Community](/content/community/t/dates-in-blob-files/16031/5/index.html): I don’t understand what this directory with the dates 2025 and 2026 is. Is it necessary for the Nexus? Or can these folders with the dates 2025 and 2026 be deleted? (243 words, Feb 9, 2026)
- [Dates in blob files - Sonatype Nexus Repository - Sonatype Community](/content/community/t/dates-in-blob-files/16031/3/index.html): I don’t understand what this directory with the dates 2025 and 2026 is. Is it necessary for the Nexus? Or can these folders with the dates 2025 and 2026 be deleted? (243 words, Feb 6, 2026)
- [Dates in blob files - Sonatype Nexus Repository - Sonatype Community](/content/community/t/dates-in-blob-files/16031/2/index.html): I don’t understand what this directory with the dates 2025 and 2026 is. Is it necessary for the Nexus? Or can these folders with the dates 2025 and 2026 be deleted? (252 words, Feb 6, 2026)
- [Dates in blob files - Sonatype Nexus Repository - Sonatype Community](/content/community/t/dates-in-blob-files/16031/index.html): I don’t understand what this directory with the dates 2025 and 2026 is. Is it necessary for the Nexus? Or can these folders with the dates 2025 and 2026 be deleted? (243 words, Feb 6, 2026)
- [Dates in blob files - Sonatype Nexus Repository - Sonatype Community](/content/community/t/dates-in-blob-files/16031/1/index.html): I don’t understand what this directory with the dates 2025 and 2026 is. Is it necessary for the Nexus? Or can these folders with the dates 2025 and 2026 be deleted? (243 words, Feb 6, 2026)
- [Upgrade from 3.80 to 3.89 failed - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/upgrade-from-3-80-to-3-89-failed/16022/2/index.html): I am trying to upgrade from nexus 3.80 → 3.89 and I’m getting this error when accessing the server from behind my F5. 
Uncaught TypeError: Cannot set properties of undefined (setting 'transformOrigin') (https://nexus.exa… (101 words, Feb 5, 2026)
- [Upgrade from 3.80 to 3.89 failed - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/upgrade-from-3-80-to-3-89-failed/16022/index.html): I am trying to upgrade from nexus 3.80 → 3.89 and I’m getting this error when accessing the server from behind my F5. 
Uncaught TypeError: Cannot set properties of undefined (setting 'transformOrigin') (https://nexus.exa… (95 words, Feb 4, 2026)
- [Upgrade from 3.80 to 3.89 failed - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/upgrade-from-3-80-to-3-89-failed/16022/1/index.html): I am trying to upgrade from nexus 3.80 → 3.89 and I’m getting this error when accessing the server from behind my F5. 
Uncaught TypeError: Cannot set properties of undefined (setting 'transformOrigin') (https://nexus.exa… (99 words, Feb 4, 2026)
- [Sonatype Nexus Repository 3.89.0 Released - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-repository-3-89-0-released/16021/index.html): Sonatype Nexus Repository 3.89.0 is now available. 
This release introduces support for proxy Swift repositories and hosted Terraform repositories. It also provides many bug fixes, expanded Terraform authentication optio… (113 words, Feb 3, 2026)
- [Sonatype Nexus Repository 3.89.0 Released - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-repository-3-89-0-released/16021/1/index.html): Sonatype Nexus Repository 3.89.0 is now available. 
This release introduces support for proxy Swift repositories and hosted Terraform repositories. It also provides many bug fixes, expanded Terraform authentication optio… (113 words, Feb 3, 2026)
- [(Resolved) Known Issue for 3.89 Community Edition users - Sonatype Nexus Repository - Sonatype Community](/content/community/t/resolved-known-issue-for-3-89-community-edition-users/16019/5/index.html): Hello, all, 
We’re aware of an issue with the current release of Nexus Repository 3.89 for Community Edition users. This is a hiccup in our release process and is being actively investigated by our team. For the moment, … (178 words, Feb 3, 2026)
- [(Resolved) Known Issue for 3.89 Community Edition users - Sonatype Nexus Repository - Sonatype Community](/content/community/t/resolved-known-issue-for-3-89-community-edition-users/16019/index.html): Hello, all, 
We’re aware of an issue with the current release of Nexus Repository 3.89 for Community Edition users. This is a hiccup in our release process and is being actively investigated by our team. For the moment, … (186 words, Feb 3, 2026)
- [(Resolved) Known Issue for 3.89 Community Edition users - Sonatype Nexus Repository - Sonatype Community](/content/community/t/resolved-known-issue-for-3-89-community-edition-users/16019/1/index.html): Hello, all, 
We’re aware of an issue with the current release of Nexus Repository 3.89 for Community Edition users. This is a hiccup in our release process and is being actively investigated by our team. For the moment, … (188 words, Feb 3, 2026)
- [License issue in Community Edition? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/license-issue-in-community-edition/16018/3/index.html): Has the Community Edition been removed from docker v3.89? I updated my community v3.88 but the new version started with PRO version and require license to work. (160 words, Feb 3, 2026)
- [License issue in Community Edition? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/license-issue-in-community-edition/16018/2/index.html): Has the Community Edition been removed from docker v3.89? I updated my community v3.88 but the new version started with PRO version and require license to work. (147 words, Feb 3, 2026)
- [License issue in Community Edition? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/license-issue-in-community-edition/16018/index.html): Has the Community Edition been removed from docker v3.89? I updated my community v3.88 but the new version started with PRO version and require license to work. (145 words, Feb 3, 2026)
- [License issue in Community Edition? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/license-issue-in-community-edition/16018/1/index.html): Has the Community Edition been removed from docker v3.89? I updated my community v3.88 but the new version started with PRO version and require license to work. (142 words, Feb 3, 2026)
- [Request for Confirmation of the Resolution Procedure When Resources in the Target Blob Store Become Inaccessible After a Version Upgrade - Sonatype Nexus Repository - Sonatype Community](/content/community/t/request-for-confirmation-of-the-resolution-procedure-when-resources-in-the-target-blob-store-become-inaccessible-after-a-version-upgrade/16016/index.html): background：After upgrading from 3.70.4 to 3.79.1, three errors appeared in nexus.log and resources in the blob store are no longer accessible. Please advise on the possible causes and workarounds. 
＜Background of Procedu… (358 words, Feb 2, 2026)
- [Request for Confirmation of the Resolution Procedure When Resources in the Target Blob Store Become Inaccessible After a Version Upgrade - Sonatype Nexus Repository - Sonatype Community](/content/community/t/request-for-confirmation-of-the-resolution-procedure-when-resources-in-the-target-blob-store-become-inaccessible-after-a-version-upgrade/16016/1/index.html): background：After upgrading from 3.70.4 to 3.79.1, three errors appeared in nexus.log and resources in the blob store are no longer accessible. Please advise on the possible causes and workarounds. 
＜Background of Procedu… (345 words, Feb 2, 2026)
- [Update Your IQ Server License Threat Groups - Sonatype Labs - Sonatype Community](/content/community/t/update-your-iq-server-license-threat-groups/3094/69/index.html): The license threat group updater will apply the latest Sonatype provided license classification to your running IQ server’s license threat groups. This will alleviate any “License Threat Group not Assigned” policy violat… (5,145 words, Feb 1, 2026)
- [S3 BLOB Creating failed. Nexus 3.88 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/s3-blob-creating-failed-nexus-3-88/15991/6/index.html): Hello! I am trying to create an S3 BLOB store for an S3-compatible bucket. 
I am getting the following error: 
An error occurred saving data. ValidationErrorXO{id=‘*’, message=‘The provided ‘x-amz-content-sha256’ header … (403 words, Jan 30, 2026)
- [How do I set up a proxy for this Maven2 repo? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-do-i-set-up-a-proxy-for-this-maven2-repo/16005/6/index.html): Nexus v3.88.0 
I created the following proxy in our hosted Nexus repository, shown in screen shot, and removed ALL mentions of https://repo.maven.apache.org/maven2/ in our build.gradle files and use the proxy setting ins… (409 words, Jan 29, 2026)
- [How do I set up a proxy for this Maven2 repo? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-do-i-set-up-a-proxy-for-this-maven2-repo/16005/index.html): Nexus v3.88.0 
I created the following proxy in our hosted Nexus repository, shown in screen shot, and removed ALL mentions of https://repo.maven.apache.org/maven2/ in our build.gradle files and use the proxy setting ins… (410 words, Jan 27, 2026)
- [How do I set up a proxy for this Maven2 repo? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-do-i-set-up-a-proxy-for-this-maven2-repo/16005/1/index.html): Nexus v3.88.0 
I created the following proxy in our hosted Nexus repository, shown in screen shot, and removed ALL mentions of https://repo.maven.apache.org/maven2/ in our build.gradle files and use the proxy setting ins… (407 words, Jan 27, 2026)
- [Default Role - FAILED - Sonatype Nexus Repository - Sonatype Community](/content/community/t/default-role-failed/15992/2/index.html): After upgrading from 3.78.2-04 to 3.88, the following error appeared: 
Default Role - FAILED Load failed: javax.validation.ConstraintViolationException: Validation failed; 1 constraints violated 

If I delete and recreat… (168 words, Jan 23, 2026)
- [Default Role - FAILED - Sonatype Nexus Repository - Sonatype Community](/content/community/t/default-role-failed/15992/index.html): After upgrading from 3.78.2-04 to 3.88, the following error appeared: 
Default Role - FAILED Load failed: javax.validation.ConstraintViolationException: Validation failed; 1 constraints violated 

If I delete and recreat… (168 words, Jan 21, 2026)
- [Default Role - FAILED - Sonatype Nexus Repository - Sonatype Community](/content/community/t/default-role-failed/15992/1/index.html): After upgrading from 3.78.2-04 to 3.88, the following error appeared: 
Default Role - FAILED Load failed: javax.validation.ConstraintViolationException: Validation failed; 1 constraints violated 

If I delete and recreat… (169 words, Jan 21, 2026)
- [S3 BLOB Creating failed. Nexus 3.88 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/s3-blob-creating-failed-nexus-3-88/15991/index.html): Hello! I am trying to create an S3 BLOB store for an S3-compatible bucket. 
I am getting the following error: 
An error occurred saving data. ValidationErrorXO{id=‘*’, message=‘The provided ‘x-amz-content-sha256’ header … (405 words, Jan 21, 2026)
- [S3 BLOB Creating failed. Nexus 3.88 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/s3-blob-creating-failed-nexus-3-88/15991/1/index.html): Hello! I am trying to create an S3 BLOB store for an S3-compatible bucket. 
I am getting the following error: 
An error occurred saving data. ValidationErrorXO{id=‘*’, message=‘The provided ‘x-amz-content-sha256’ header … (402 words, Jan 21, 2026)
- [Proxy repo for rhn anyone? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/proxy-repo-for-rhn-anyone/15909/4/index.html): I am trying to setup a proxy for my RHEL 10 hosts, and all there was is this outdated link:  Proxying RHEL Yum Repositories 
I did everything including dealing with importing the SHA1withRSA cert so nexus will trust it, … (148 words, Jan 20, 2026)
- [Inquiry Regarding Supported Databases for the Read-Only API - Sonatype Nexus Repository - Sonatype Community](/content/community/t/inquiry-regarding-supported-databases-for-the-read-only-api/15988/index.html): Regarding the documentation at https://help.sonatype.com/en/read-only-api.html: 
The manual states, “This feature is only appropriate for installs that use the legacy OrientDB embedded database.” 
I would like to confirm… (128 words, Jan 20, 2026)
- [Inquiry Regarding Supported Databases for the Read-Only API - Sonatype Nexus Repository - Sonatype Community](/content/community/t/inquiry-regarding-supported-databases-for-the-read-only-api/15988/1/index.html): Regarding the documentation at https://help.sonatype.com/en/read-only-api.html: 
The manual states, “This feature is only appropriate for installs that use the legacy OrientDB embedded database.” 
I would like to confirm… (118 words, Jan 20, 2026)
- [Nexus3 H2 Database Recovery Issue – Error on Startup After Recovery - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus3-h2-database-recovery-issue-error-on-startup-after-recovery/15921/4/index.html): Hello Team, 
I am performing the recovery of my h2 db in nexus3. Here are the steps and current setup. 
Environment: 

Nexus Version: 3.70.1
H2 Version: 2.2.224
Java Version: 11
Deployment: OpenShift (Pod with PVC mounte… (448 words, Jan 16, 2026)
- [Proxy repo for rhn anyone? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/proxy-repo-for-rhn-anyone/15909/3/index.html): I am trying to setup a proxy for my RHEL 10 hosts, and all there was is this outdated link:  Proxying RHEL Yum Repositories 
I did everything including dealing with importing the SHA1withRSA cert so nexus will trust it, … (148 words, Jan 16, 2026)
- [Proxy repo for rhn anyone? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/proxy-repo-for-rhn-anyone/15909/2/index.html): I am trying to setup a proxy for my RHEL 10 hosts, and all there was is this outdated link:  Proxying RHEL Yum Repositories 
I did everything including dealing with importing the SHA1withRSA cert so nexus will trust it, … (148 words, Jan 16, 2026)
- [New Course: Sonatype Guide and MCP Server - Sonatype Learn - Sonatype Community](/content/community/t/new-course-sonatype-guide-and-mcp-server/15978/index.html): If you’re just settling in after the holidays (and I hope you are, everyone deserves a mid-winter break) then you may have missed the release of Sonatype Guide. 
Sonatype Guide is our cutting-edge OSS component intellige… (211 words, Jan 16, 2026)
- [New Course: Sonatype Guide and MCP Server - Sonatype Learn - Sonatype Community](/content/community/t/new-course-sonatype-guide-and-mcp-server/15978/1/index.html): If you’re just settling in after the holidays (and I hope you are, everyone deserves a mid-winter break) then you may have missed the release of Sonatype Guide. 
Sonatype Guide is our cutting-edge OSS component intellige… (215 words, Jan 16, 2026)
- [After upgrading from 3.70.4 to 3.79.1, three errors appeared in nexus.log and resources in the blob store are no longer accessible. Please advise on the possible causes and workarounds. - Sonatype Nexus Repository - Sonatype Community](/content/community/t/after-upgrading-from-3-70-4-to-3-79-1-three-errors-appeared-in-nexus-log-and-resources-in-the-blob-store-are-no-longer-accessible-please-advise-on-the-possible-causes-and-workarounds/15976/index.html): Background： 
・We plan to upgrade Sonatype Nexus from version 3.59 to 3.79. 
・Since we are migrating from OrientDB, we understand that it is necessary to upgrade to 3.70 first as an intermediate step. 
・Due to the require… (344 words, Jan 16, 2026)
- [After upgrading from 3.70.4 to 3.79.1, three errors appeared in nexus.log and resources in the blob store are no longer accessible. Please advise on the possible causes and workarounds. - Sonatype Nexus Repository - Sonatype Community](/content/community/t/after-upgrading-from-3-70-4-to-3-79-1-three-errors-appeared-in-nexus-log-and-resources-in-the-blob-store-are-no-longer-accessible-please-advise-on-the-possible-causes-and-workarounds/15976/1/index.html): Background： 
・We plan to upgrade Sonatype Nexus from version 3.59 to 3.79. 
・Since we are migrating from OrientDB, we understand that it is necessary to upgrade to 3.70 first as an intermediate step. 
・Due to the require… (392 words, Jan 16, 2026)
- [Problem with Docker Baerer Token URL after upgrade to 3.80 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/problem-with-docker-baerer-token-url-after-upgrade-to-3-80/15418/2/index.html): I am running a Nexus Docker Registry with a HTTP connector behind an Apache reverse proxy. 
The setup is pretty much the one recommended by Sonatype. 
Communication looks like this: 
docker pull ---> https://my-registry-… (211 words, Jan 15, 2026)
- [Regarding inquiries about upgrading Nexus - Sonatype Nexus Repository - Sonatype Community](/content/community/t/regarding-inquiries-about-upgrading-nexus/15969/index.html): Background： 
・We plan to upgrade Sonatype Nexus from version 3.59 to 3.79. 
・Since we are migrating from OrientDB, we understand that it is necessary to upgrade to 3.70 first as an intermediate step. 
・Due to the require… (253 words, Jan 15, 2026)
- [Regarding inquiries about upgrading Nexus - Sonatype Nexus Repository - Sonatype Community](/content/community/t/regarding-inquiries-about-upgrading-nexus/15969/1/index.html): Background： 
・We plan to upgrade Sonatype Nexus from version 3.59 to 3.79. 
・Since we are migrating from OrientDB, we understand that it is necessary to upgrade to 3.70 first as an intermediate step. 
・Due to the require… (227 words, Jan 15, 2026)
- [The database has been closed [90098-232] - Sonatype Nexus Repository - Sonatype Community](/content/community/t/the-database-has-been-closed-90098-232/15957/3/index.html): Hello, 
We are using Sonatype Nexus Repository OSS 3.75.1-01, the DB is H2, H2 db version is 2.3.232. 
Recently, some users in our company complained about the intermittent 401 or 403 errors, which look like 
  
Even tho… (298 words, Jan 14, 2026)
- [Sonatype Nexus Repository 3.88.0 Released - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-repository-3-88-0-released/15964/index.html): Sonatype Nexus Repository 3.88.0 is now available. 
This release introduces support for proxy Terraform repositories, moves search operations to SQL search, introduces an API to retrieve Capability types and metadata, pr… (153 words, Jan 13, 2026)
- [Sonatype Nexus Repository 3.88.0 Released - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-repository-3-88-0-released/15964/1/index.html): Sonatype Nexus Repository 3.88.0 is now available. 
This release introduces support for proxy Terraform repositories, moves search operations to SQL search, introduces an API to retrieve Capability types and metadata, pr… (146 words, Jan 13, 2026)
- [Any consideration of upgrading to Sonatype Nexus Repository 3.86.0 - 3.86.2 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/any-consideration-of-upgrading-to-sonatype-nexus-repository-3-86-0-3-86-2/15959/2/index.html): Hey Team, 
Currently, we are using Sonatype Nexus Repository 3.75.1-101, openjdk version is “17.0.14” 2025-01-21 LTS, and the default database is H2. 
If I want to upgrade to Sonatype Nexus Repository 3.86.0 - 3.86.2, ar… (148 words, Jan 13, 2026)
- [Any consideration of upgrading to Sonatype Nexus Repository 3.86.0 - 3.86.2 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/any-consideration-of-upgrading-to-sonatype-nexus-repository-3-86-0-3-86-2/15959/1/index.html): Hey Team, 
Currently, we are using Sonatype Nexus Repository 3.75.1-101, openjdk version is “17.0.14” 2025-01-21 LTS, and the default database is H2. 
If I want to upgrade to Sonatype Nexus Repository 3.86.0 - 3.86.2, ar… (9 words, Jan 12, 2026)
- [The database has been closed [90098-232] - Sonatype Nexus Repository - Sonatype Community](/content/community/t/the-database-has-been-closed-90098-232/15957/2/index.html): Hello, 
We are using Sonatype Nexus Repository OSS 3.75.1-01, the DB is H2, H2 db version is 2.3.232. 
Recently, some users in our company complained about the intermittent 401 or 403 errors, which look like 
  
Even tho… (295 words, Jan 12, 2026)
- [The database has been closed [90098-232] - Sonatype Nexus Repository - Sonatype Community](/content/community/t/the-database-has-been-closed-90098-232/15957/index.html): Hello, 
We are using Sonatype Nexus Repository OSS 3.75.1-01, the DB is H2, H2 db version is 2.3.232. 
Recently, some users in our company complained about the intermittent 401 or 403 errors, which look like 
  
Even tho… (299 words, Jan 12, 2026)
- [The database has been closed [90098-232] - Sonatype Nexus Repository - Sonatype Community](/content/community/t/the-database-has-been-closed-90098-232/15957/1/index.html): Hello, 
We are using Sonatype Nexus Repository OSS 3.75.1-01, the DB is H2, H2 db version is 2.3.232. 
Recently, some users in our company complained about the intermittent 401 or 403 errors, which look like 
  
Even tho… (300 words, Jan 12, 2026)
- [Nexus can not parse the /etc/crypto-policies/back-ends/krb5.config of crypto-policies.rpm, krb5-libs depend on this file that can not be installed - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-can-not-parse-the-etc-crypto-policies-back-ends-krb5-config-of-crypto-policies-rpm-krb5-libs-depend-on-this-file-that-can-not-be-installed/9306/4/index.html): i have a problem in nexus host,(version is 3.31.1) that nexus can not parse the /etc/crypto-policies/back-ends/krb5.config of crypto-policies.rpm, krb5-libs depend on this file that can not be installed (188 words, Jan 8, 2026)
- [Nexus can not parse the /etc/crypto-policies/back-ends/krb5.config of crypto-policies.rpm, krb5-libs depend on this file that can not be installed - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-can-not-parse-the-etc-crypto-policies-back-ends-krb5-config-of-crypto-policies-rpm-krb5-libs-depend-on-this-file-that-can-not-be-installed/9306/3/index.html): i have a problem in nexus host,(version is 3.31.1) that nexus can not parse the /etc/crypto-policies/back-ends/krb5.config of crypto-policies.rpm, krb5-libs depend on this file that can not be installed (182 words, Jan 8, 2026)
- [Problem using Golang proxy repository from a non-internet-connected client machine/container - Sonatype Nexus Repository - Sonatype Community](/content/community/t/problem-using-golang-proxy-repository-from-a-non-internet-connected-client-machine-container/15906/4/index.html): Hi, 
I’ve created a Golang Proxy repository in Nexus. The configuration is as follows (I’ve hidden the path to our repo and the last two HTTP check boxes are left unchecked): 
  
In a Docker container run up from the off… (710 words, Jan 8, 2026)
- [Update Your IQ Server License Threat Groups - Sonatype Labs - Sonatype Community](/content/community/t/update-your-iq-server-license-threat-groups/3094/68/index.html): The license threat group updater will apply the latest Sonatype provided license classification to your running IQ server’s license threat groups. This will alleviate any “License Threat Group not Assigned” policy violat… (5,143 words, Jan 6, 2026)
- [Conan upload fails with a git error - Sonatype Nexus Repository - Sonatype Community](/content/community/t/conan-upload-fails-with-a-git-error/15916/4/index.html): Hello, 
I am testing a new build solution using “conan build” and “Sonatype Nexus Repository, Community Edition version 3.85” on Windows 11. 
I followed the steps from Nexus Help using the following commands: 


Create a… (248 words, Jan 5, 2026)
- [Nexus3 H2 Database Recovery Issue – Error on Startup After Recovery - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus3-h2-database-recovery-issue-error-on-startup-after-recovery/15921/2/index.html): Hello Team, 
I am performing the recovery of my h2 db in nexus3. Here are the steps and current setup. 
Environment: 

Nexus Version: 3.70.1
H2 Version: 2.2.224
Java Version: 11
Deployment: OpenShift (Pod with PVC mounte… (448 words, Jan 5, 2026)
- [Update Your IQ Server License Threat Groups - Sonatype Labs - Sonatype Community](/content/community/t/update-your-iq-server-license-threat-groups/3094/66/index.html): The license threat group updater will apply the latest Sonatype provided license classification to your running IQ server’s license threat groups. This will alleviate any “License Threat Group not Assigned” policy violat… (5,188 words, Dec 31, 2025)
- [Nexus3 H2 Database Recovery Issue – Error on Startup After Recovery - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus3-h2-database-recovery-issue-error-on-startup-after-recovery/15921/index.html): Hello Team, 
I am performing the recovery of my h2 db in nexus3. Here are the steps and current setup. 
Environment: 

Nexus Version: 3.70.1
H2 Version: 2.2.224
Java Version: 11
Deployment: OpenShift (Pod with PVC mounte… (447 words, Dec 24, 2025)
- [Nexus3 H2 Database Recovery Issue – Error on Startup After Recovery - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus3-h2-database-recovery-issue-error-on-startup-after-recovery/15921/1/index.html): Hello Team, 
I am performing the recovery of my h2 db in nexus3. Here are the steps and current setup. 
Environment: 

Nexus Version: 3.70.1
H2 Version: 2.2.224
Java Version: 11
Deployment: OpenShift (Pod with PVC mounte… (423 words, Dec 24, 2025)
- [Nexus3 H2 Database Recovery Issue – Error on Startup After Recovery - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus3-h2-database-recovery-issue-error-on-startup-after-recovery/15920/index.html): Hello Team, 
I had following issue in h2 while performing db recovery with h2. I have shared the details below. 
Environment: 
Nexus Version: 3.70.1 
H2 Version: 2.2.224 
Java Version: 11 
Deployment: OpenShift (Pod with… (209 words, Dec 24, 2025)
- [Nexus3 H2 Database Recovery Issue – Error on Startup After Recovery - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus3-h2-database-recovery-issue-error-on-startup-after-recovery/15920/1/index.html): Hello Team, 
I had following issue in h2 while performing db recovery with h2. I have shared the details below. 
Environment: 
Nexus Version: 3.70.1 
H2 Version: 2.2.224 
Java Version: 11 
Deployment: OpenShift (Pod with… (180 words, Dec 24, 2025)
- [Request to disable the license banner on the home page - Sonatype Nexus Repository - Sonatype Community](/content/community/t/request-to-disable-the-license-banner-on-the-home-page/15918/index.html): We ask that you consider hiding or disabling it for users. In its current state, it’s constantly visible, which is a significant distraction for employees and creates visual noise. 
Please tell me if this option is avail… (135 words, Dec 23, 2025)
- [Request to disable the license banner on the home page - Sonatype Nexus Repository - Sonatype Community](/content/community/t/request-to-disable-the-license-banner-on-the-home-page/15918/1/index.html): We ask that you consider hiding or disabling it for users. In its current state, it’s constantly visible, which is a significant distraction for employees and creates visual noise. 
Please tell me if this option is avail… (139 words, Dec 23, 2025)
- [Cleaning up artifacts in the RAW repository - Sonatype Nexus Repository - Sonatype Community](/content/community/t/cleaning-up-artifacts-in-the-raw-repository/15917/1/index.html): Hello! 
Please help me clean up the Raw Repository in Nexus. 
Currently, I can delete files older than N days. Is it possible to automatically delete old files and always keep only the 10 most recent ones? 
This is a ver… (65 words, Dec 23, 2025)
- [Conan upload fails with a git error - Sonatype Nexus Repository - Sonatype Community](/content/community/t/conan-upload-fails-with-a-git-error/15916/2/index.html): Hello, 
I am testing a new build solution using “conan build” and “Sonatype Nexus Repository, Community Edition version 3.85” on Windows 11. 
I followed the steps from Nexus Help using the following commands: 


Create a… (250 words, Dec 22, 2025)
- [Conan upload fails with a git error - Sonatype Nexus Repository - Sonatype Community](/content/community/t/conan-upload-fails-with-a-git-error/15916/index.html): Hello, 
I am testing a new build solution using “conan build” and “Sonatype Nexus Repository, Community Edition version 3.85” on Windows 11. 
I followed the steps from Nexus Help using the following commands: 


Create a… (247 words, Dec 22, 2025)
- [Conan upload fails with a git error - Sonatype Nexus Repository - Sonatype Community](/content/community/t/conan-upload-fails-with-a-git-error/15916/1/index.html): Hello, 
I am testing a new build solution using “conan build” and “Sonatype Nexus Repository, Community Edition version 3.85” on Windows 11. 
I followed the steps from Nexus Help using the following commands: 


Create a… (251 words, Dec 22, 2025)
- [Can't find "Verify blob store integrity" task to run as part of Nexus upgrade instructions - Sonatype Nexus Repository - Sonatype Community](/content/community/t/cant-find-verify-blob-store-integrity-task-to-run-as-part-of-nexus-upgrade-instructions/15913/index.html): In the Nexus repository upgrade instructions, it says to carry out the instructions in the screenshot below. For step I found it under Settings, Repository then Blob Stores not as described.  For 3 I couldn’t find the ta… (62 words, Dec 22, 2025)
- [Can't find "Verify blob store integrity" task to run as part of Nexus upgrade instructions - Sonatype Nexus Repository - Sonatype Community](/content/community/t/cant-find-verify-blob-store-integrity-task-to-run-as-part-of-nexus-upgrade-instructions/15913/1/index.html): In the Nexus repository upgrade instructions, it says to carry out the instructions in the screenshot below. For step I found it under Settings, Repository then Blob Stores not as described.  For 3 I couldn’t find the ta… (148 words, Dec 22, 2025)
- [Proxy repo for rhn anyone? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/proxy-repo-for-rhn-anyone/15909/index.html): I am trying to setup a proxy for my RHEL 10 hosts, and all there was is this outdated link:  Proxying RHEL Yum Repositories 
I did everything including dealing with importing the SHA1withRSA cert so nexus will trust it, … (148 words, Dec 19, 2025)
- [Proxy repo for rhn anyone? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/proxy-repo-for-rhn-anyone/15909/1/index.html): I am trying to setup a proxy for my RHEL 10 hosts, and all there was is this outdated link:  Proxying RHEL Yum Repositories 
I did everything including dealing with importing the SHA1withRSA cert so nexus will trust it, … (226 words, Dec 19, 2025)
- [Problem using Golang proxy repository from a non-internet-connected client machine/container - Sonatype Nexus Repository - Sonatype Community](/content/community/t/problem-using-golang-proxy-repository-from-a-non-internet-connected-client-machine-container/15906/3/index.html): Hi, 
I’ve created a Golang Proxy repository in Nexus. The configuration is as follows (I’ve hidden the path to our repo and the last two HTTP check boxes are left unchecked): 
  
In a Docker container run up from the off… (710 words, Dec 19, 2025)
- [Problem using Golang proxy repository from a non-internet-connected client machine/container - Sonatype Nexus Repository - Sonatype Community](/content/community/t/problem-using-golang-proxy-repository-from-a-non-internet-connected-client-machine-container/15906/2/index.html): Hi, 
I’ve created a Golang Proxy repository in Nexus. The configuration is as follows (I’ve hidden the path to our repo and the last two HTTP check boxes are left unchecked): 
  
In a Docker container run up from the off… (631 words, Dec 18, 2025)
- [Problem using Golang proxy repository from a non-internet-connected client machine/container - Sonatype Nexus Repository - Sonatype Community](/content/community/t/problem-using-golang-proxy-repository-from-a-non-internet-connected-client-machine-container/15906/index.html): Hi, 
I’ve created a Golang Proxy repository in Nexus. The configuration is as follows (I’ve hidden the path to our repo and the last two HTTP check boxes are left unchecked): 
  
In a Docker container run up from the off… (652 words, Dec 18, 2025)
- [Problem using Golang proxy repository from a non-internet-connected client machine/container - Sonatype Nexus Repository - Sonatype Community](/content/community/t/problem-using-golang-proxy-repository-from-a-non-internet-connected-client-machine-container/15906/1/index.html): Hi, 
I’ve created a Golang Proxy repository in Nexus. The configuration is as follows (I’ve hidden the path to our repo and the last two HTTP check boxes are left unchecked): 
  
In a Docker container run up from the off… (710 words, Dec 18, 2025)
- [Opt out of telemetry - Sonatype Nexus Repository - Sonatype Community](/content/community/t/opt-out-of-telemetry/15042/6/index.html): How do I opt out of telemetry? 
I see this in the outbound-request.log 
https://clm.sonatype.com/user-telemetry/v1/rte/api/v1/feature/client (276 words, Dec 17, 2025)
- [Migration Issue during Nexus 2 to Nexus 3 upgrade (LDAP Configuration Error) - Sonatype Nexus Repository - Sonatype Community](/content/community/t/migration-issue-during-nexus-2-to-nexus-3-upgrade-ldap-configuration-error/15900/index.html): I am facing an issue while upgrading from Nexus Repository 2.14.20 (I also tried from 2.15.1) to Nexus Repository 3.87.1 using the Upgrade Wizard. The migration fails at the “Prepare” step with the following error: 
Inge… (106 words, Dec 16, 2025)
- [Migration Issue during Nexus 2 to Nexus 3 upgrade (LDAP Configuration Error) - Sonatype Nexus Repository - Sonatype Community](/content/community/t/migration-issue-during-nexus-2-to-nexus-3-upgrade-ldap-configuration-error/15900/1/index.html): I am facing an issue while upgrading from Nexus Repository 2.14.20 (I also tried from 2.15.1) to Nexus Repository 3.87.1 using the Upgrade Wizard. The migration fails at the “Prepare” step with the following error: 
Inge… (106 words, Dec 16, 2025)
- [Sonatype Nexus Repository 3.87.0 Released - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-repository-3-87-0-released/15852/5/index.html): Sonatype Nexus Repository 3.87.0 is now available. 
With this release, Sonatype Nexus Repository now minimally requires Java 21. This release also includes adjusted Community Edition usage limitations, a new Configuratio… (346 words, Dec 9, 2025)
- [Terraform format for hosted and proxy repositories - Sonatype Nexus Repository - Sonatype Community](/content/community/t/terraform-format-for-hosted-and-proxy-repositories/15269/6/index.html): Hey guys, 
i want to know, if you are planning to implement a format for terraform modules. 
We like to store our own modules and want to bring the terraform registry into nexus. 
Are there plans? 
Greets, 
Marcus (198 words, Dec 9, 2025)
- [Sonatype Nexus Repository 3.87.1 Released - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-repository-3-87-1-released/15872/index.html): Sonatype Nexus Repository 3.87.1 is now available. 
This release fixes multiple bugs impacting 3.87.0 deployments that use Azure blob stores. 
Also, with 3.87.0, Sonatype Nexus Repository now minimally requires Java 21. … (72 words, Dec 8, 2025)
- [Sonatype Nexus Repository 3.87.1 Released - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-repository-3-87-1-released/15872/1/index.html): Sonatype Nexus Repository 3.87.1 is now available. 
This release fixes multiple bugs impacting 3.87.0 deployments that use Azure blob stores. 
Also, with 3.87.0, Sonatype Nexus Repository now minimally requires Java 21. … (171 words, Dec 8, 2025)
- [Update Your IQ Server License Threat Groups - Sonatype Labs - Sonatype Community](/content/community/t/update-your-iq-server-license-threat-groups/3094/65/index.html): The license threat group updater will apply the latest Sonatype provided license classification to your running IQ server’s license threat groups. This will alleviate any “License Threat Group not Assigned” policy violat… (633 words, Dec 3, 2025)
- [Sonatype Nexus Repository 3.87.0 Released - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-repository-3-87-0-released/15852/2/index.html): Sonatype Nexus Repository 3.87.0 is now available. 
With this release, Sonatype Nexus Repository now minimally requires Java 21. This release also includes adjusted Community Edition usage limitations, a new Configuratio… (365 words, Dec 2, 2025)
- [Sonatype Nexus Repository 3.87.0 Released - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-repository-3-87-0-released/15852/index.html): Sonatype Nexus Repository 3.87.0 is now available. 
With this release, Sonatype Nexus Repository now minimally requires Java 21. This release also includes adjusted Community Edition usage limitations, a new Configuratio… (353 words, Dec 2, 2025)
- [Sonatype Nexus Repository 3.87.0 Released - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-repository-3-87-0-released/15852/1/index.html): Sonatype Nexus Repository 3.87.0 is now available. 
With this release, Sonatype Nexus Repository now minimally requires Java 21. This release also includes adjusted Community Edition usage limitations, a new Configuratio… (346 words, Dec 2, 2025)
- [Nexus Repository - Proxy Behaviour of Uncached Components during Concurrent Access - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-repository-proxy-behaviour-of-uncached-components-during-concurrent-access/15845/2/index.html): Greetings, 
I’m asking this question here since I couldn’t find information in the documentation regarding this. 
I’m using Nexus as an APT (Debian) proxy to cache package downloads and usually run updates/upgrades on do… (191 words, Dec 1, 2025)
- [Unable to find the search.SearchService - Sonatype Nexus Repository - Sonatype Community](/content/community/t/unable-to-find-the-search-searchservice/15846/2/index.html): I have enabled High Availability (HA) on both App01 and App02 nodes without a load balancer, using only HTTPS, as part of pre-production testing. However, I am facing an issue where the Nexus service 3.83.4-20 fails to s… (217 words, Dec 1, 2025)
- [Unable to find the search.SearchService - Sonatype Nexus Repository - Sonatype Community](/content/community/t/unable-to-find-the-search-searchservice/15846/index.html): I have enabled High Availability (HA) on both App01 and App02 nodes without a load balancer, using only HTTPS, as part of pre-production testing. However, I am facing an issue where the Nexus service 3.83.4-20 fails to s… (150 words, Dec 1, 2025)
- [Unable to find the search.SearchService - Sonatype Nexus Repository - Sonatype Community](/content/community/t/unable-to-find-the-search-searchservice/15846/1/index.html): I have enabled High Availability (HA) on both App01 and App02 nodes without a load balancer, using only HTTPS, as part of pre-production testing. However, I am facing an issue where the Nexus service 3.83.4-20 fails to s… (148 words, Dec 1, 2025)
- [Nexus Repository - Proxy Behaviour of Uncached Components during Concurrent Access - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-repository-proxy-behaviour-of-uncached-components-during-concurrent-access/15845/index.html): Greetings, 
I’m asking this question here since I couldn’t find information in the documentation regarding this. 
I’m using Nexus as an APT (Debian) proxy to cache package downloads and usually run updates/upgrades on do… (189 words, Dec 1, 2025)
- [Problems uploading files .pom to nexus - Sonatype Nexus Repository - Sonatype Community](/content/community/t/problems-uploading-files-pom-to-nexus/15812/5/index.html): Hello, 
I have an on-premise instance of Sonatype Nexus Repository COMMUNITY 3.79.1-04 
and I am having problems uploading .pom files. When I upload the artifact, 
only the header appears and not all the dependencies. I … (433 words, Dec 1, 2025)
- [Package Coverage Issue - Sonatype Lifecycle & Repository Firewall / Best Practices - Sonatype Community](/content/community/t/package-coverage-issue/15838/2/index.html): Hi there, 
I’m facing an issue with Sonatype Lifecycle when scanning with pnpm. When the target file is pnpm-lock.yaml, the scan seems to only report direct dependencies and doesn’t capture most transitive packages. For … (203 words, Dec 1, 2025)
- [Update Your IQ Server License Threat Groups - Sonatype Labs - Sonatype Community](/content/community/t/update-your-iq-server-license-threat-groups/3094/64/index.html): The license threat group updater will apply the latest Sonatype provided license classification to your running IQ server’s license threat groups. This will alleviate any “License Threat Group not Assigned” policy violat… (631 words, Dec 1, 2025)
- [Package Coverage Issue - Sonatype Lifecycle & Repository Firewall / Best Practices - Sonatype Community](/content/community/t/package-coverage-issue/15838/index.html): Hi there, 
I’m facing an issue with Sonatype Lifecycle when scanning with pnpm. When the target file is pnpm-lock.yaml, the scan seems to only report direct dependencies and doesn’t capture most transitive packages. For … (206 words, Nov 30, 2025)
- [Package Coverage Issue - Sonatype Lifecycle & Repository Firewall / Best Practices - Sonatype Community](/content/community/t/package-coverage-issue/15838/1/index.html): Hi there, 
I’m facing an issue with Sonatype Lifecycle when scanning with pnpm. When the target file is pnpm-lock.yaml, the scan seems to only report direct dependencies and doesn’t capture most transitive packages. For … (200 words, Nov 30, 2025)
- [Problems uploading files .pom to nexus - Sonatype Nexus Repository - Sonatype Community](/content/community/t/problems-uploading-files-pom-to-nexus/15812/index.html): Hello, 
I have an on-premise instance of Sonatype Nexus Repository COMMUNITY 3.79.1-04 
and I am having problems uploading .pom files. When I upload the artifact, 
only the header appears and not all the dependencies. I … (433 words, Nov 26, 2025)
- [Problems uploading files .pom to nexus - Sonatype Nexus Repository - Sonatype Community](/content/community/t/problems-uploading-files-pom-to-nexus/15812/1/index.html): Hello, 
I have an on-premise instance of Sonatype Nexus Repository COMMUNITY 3.79.1-04 
and I am having problems uploading .pom files. When I upload the artifact, 
only the header appears and not all the dependencies. I … (433 words, Nov 26, 2025)
- [OrientDB to Postgres Migration Guide for Nexus Repository - Sonatype Learn - Sonatype Community](/content/community/t/orientdb-to-postgres-migration-guide-for-nexus-repository/15152/7/index.html): Whitepaper - OrientDB to PostgreSQL Migration Guide.pdf (428.2 KB) 
At Sonatype, we’re well aware that migrations can be frustrating. But with support for OrientDB databases ending early next year, the time to start plan… (299 words, Nov 17, 2025)
- [Cleaning up nuget repostories - Sonatype Nexus Repository - Sonatype Community](/content/community/t/cleaning-up-nuget-repostories/15772/5/index.html): I would like to cleanup our nuget repositories to only have the latest version of each package.  Is there a simple way to do that? (548 words, Nov 14, 2025)
- [Cleanup unused nuget blobs not working? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/cleanup-unused-nuget-blobs-not-working/15769/2/index.html): It appears that not all unused nuget blobs are getting cleaned up from storage.  I’m running the 3.86.0-8 container image.  For example, I’m pretty sure I only have adobereader 2025.1.20756 in my ChocolateyInternal repo,… (95 words, Nov 12, 2025)
- [Cleaning up nuget repostories - Sonatype Nexus Repository - Sonatype Community](/content/community/t/cleaning-up-nuget-repostories/15772/4/index.html): I would like to cleanup our nuget repositories to only have the latest version of each package.  Is there a simple way to do that? (549 words, Nov 12, 2025)
- [Cleaning up nuget repostories - Sonatype Nexus Repository - Sonatype Community](/content/community/t/cleaning-up-nuget-repostories/15772/3/index.html): I would like to cleanup our nuget repositories to only have the latest version of each package.  Is there a simple way to do that? (548 words, Nov 12, 2025)
- [Cleaning up nuget repostories - Sonatype Nexus Repository - Sonatype Community](/content/community/t/cleaning-up-nuget-repostories/15772/2/index.html): I would like to cleanup our nuget repositories to only have the latest version of each package.  Is there a simple way to do that? (548 words, Nov 12, 2025)
- [Login to and download from Nexus Repository takes very long - Sonatype Nexus Repository - Sonatype Community](/content/community/t/login-to-and-download-from-nexus-repository-takes-very-long/15758/3/index.html): Hi there, 
after migrating to a 2021 version of Nexus with Orient DB to a current version with H2 DB, I notice a delay when logging in. When logging in for the first time after some time, the login screen will not disapp… (241 words, Nov 12, 2025)
- [Cleaning up nuget repostories - Sonatype Nexus Repository - Sonatype Community](/content/community/t/cleaning-up-nuget-repostories/15772/index.html): I would like to cleanup our nuget repositories to only have the latest version of each package.  Is there a simple way to do that? (548 words, Nov 12, 2025)
- [Cleaning up nuget repostories - Sonatype Nexus Repository - Sonatype Community](/content/community/t/cleaning-up-nuget-repostories/15772/1/index.html): I would like to cleanup our nuget repositories to only have the latest version of each package.  Is there a simple way to do that? (548 words, Nov 12, 2025)
- [Spin up new Nexus instance from scratch - Task Execute Data Repair Plan stops after 0 seconds - Sonatype Nexus Repository - Sonatype Community](/content/community/t/spin-up-new-nexus-instance-from-scratch-task-execute-data-repair-plan-stops-after-0-seconds/15746/3/index.html): We were running an instance of Nexus for some years until we ran into severe database corruption some months after successful migration from OrientDB to H2. 
Since then this instance was running in read-only mode, we wer… (662 words, Nov 12, 2025)
- [Cleanup unused nuget blobs not working? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/cleanup-unused-nuget-blobs-not-working/15769/index.html): It appears that not all unused nuget blobs are getting cleaned up from storage.  I’m running the 3.86.0-8 container image.  For example, I’m pretty sure I only have adobereader 2025.1.20756 in my ChocolateyInternal repo,… (91 words, Nov 11, 2025)
- [Cleanup unused nuget blobs not working? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/cleanup-unused-nuget-blobs-not-working/15769/1/index.html): It appears that not all unused nuget blobs are getting cleaned up from storage.  I’m running the 3.86.0-8 container image.  For example, I’m pretty sure I only have adobereader 2025.1.20756 in my ChocolateyInternal repo,… (91 words, Nov 11, 2025)
- [Can't migrate from OrientDB to PG - Sonatype Nexus Repository - Sonatype Community](/content/community/t/cant-migrate-from-orientdb-to-pg/13110/14/index.html): Hi, 
I try to migrate my Nexus t3.70.1.x o 3.71.x. But first I have to migrate my OrienDB to PG16. 
I did all the stuff described in Migrating to a New Database 
And when I start the migration 

java -Xmx10G -Xms10G -XX:… (1,058 words, Nov 10, 2025)
- [Proxied Docker Repository failling to pull images - Sonatype Nexus Repository - Sonatype Community](/content/community/t/proxied-docker-repository-failling-to-pull-images/15767/index.html): I have recently installed Nexus 3.86 and configured it for proxy access to dockerhub. 
I have created the DefaultRole for anonymous access, applying it to the anonymous user. 
I have configured DockerHub with Path Based … (109 words, Nov 10, 2025)
- [Proxied Docker Repository failling to pull images - Sonatype Nexus Repository - Sonatype Community](/content/community/t/proxied-docker-repository-failling-to-pull-images/15767/1/index.html): I have recently installed Nexus 3.86 and configured it for proxy access to dockerhub. 
I have created the DefaultRole for anonymous access, applying it to the anonymous user. 
I have configured DockerHub with Path Based … (109 words, Nov 10, 2025)
- [Login to and download from Nexus Repository takes very long - Sonatype Nexus Repository - Sonatype Community](/content/community/t/login-to-and-download-from-nexus-repository-takes-very-long/15758/2/index.html): Hi there, 
after migrating to a 2021 version of Nexus with Orient DB to a current version with H2 DB, I notice a delay when logging in. When logging in for the first time after some time, the login screen will not disapp… (241 words, Nov 10, 2025)
- [Cannot install with gem from a rubugems group - Sonatype Nexus Repository - Sonatype Community](/content/community/t/cannot-install-with-gem-from-a-rubugems-group/11063/6/index.html): Hello Community, 
I have an issue concerning installation of a gem package from a group of type rubygems. 
Here is my scenario: 
I am using Nexus   3.58.1-02 
I have created a proxy repo proxying https://rubygems.org, na… (555 words, Nov 7, 2025)
- [Login to and download from Nexus Repository takes very long - Sonatype Nexus Repository - Sonatype Community](/content/community/t/login-to-and-download-from-nexus-repository-takes-very-long/15758/index.html): Hi there, 
after migrating to a 2021 version of Nexus with Orient DB to a current version with H2 DB, I notice a delay when logging in. When logging in for the first time after some time, the login screen will not disapp… (241 words, Nov 7, 2025)
- [Login to and download from Nexus Repository takes very long - Sonatype Nexus Repository - Sonatype Community](/content/community/t/login-to-and-download-from-nexus-repository-takes-very-long/15758/1/index.html): Hi there, 
after migrating to a 2021 version of Nexus with Orient DB to a current version with H2 DB, I notice a delay when logging in. When logging in for the first time after some time, the login screen will not disapp… (243 words, Nov 7, 2025)
- [Sonatype Nexus Repository 3.86.0 Released - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-repository-3-86-0-released/15750/index.html): Sonatype Nexus Repository 3.86.0 is now available. 
This release introduces new REST APIs for managing SAML users, adds a capability for configuring license expiration notifications, and enables Firewall to use network c… (66 words, Nov 5, 2025)
- [Sonatype Nexus Repository 3.86.0 Released - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-repository-3-86-0-released/15750/1/index.html): Sonatype Nexus Repository 3.86.0 is now available. 
This release introduces new REST APIs for managing SAML users, adds a capability for configuring license expiration notifications, and enables Firewall to use network c… (139 words, Nov 5, 2025)
- [Proxy of Harbor docker registry stopped working - Sonatype Nexus Repository - Sonatype Community](/content/community/t/proxy-of-harbor-docker-registry-stopped-working/15749/3/index.html): Hello, I set up a proxy to a private Harbor registry a while back and it was working fine, but recently I can’t pull images from it anymore. The error message is 
“not found: manifest unknown: manifest unknown”, but it s… (247 words, Nov 5, 2025)
- [Delete docker image - Sonatype Nexus Repository - Sonatype Community](/content/community/t/delete-docker-image/15745/3/index.html): Hello, 
I created a nexus registry for storing some docker images. 
I needed to manually delete one, so I did from web interface deleted the folder of the image wich contains manifest and tags for this image. 
But still … (139 words, Nov 5, 2025)
- [Proxy of Harbor docker registry stopped working - Sonatype Nexus Repository - Sonatype Community](/content/community/t/proxy-of-harbor-docker-registry-stopped-working/15749/2/index.html): Hello, I set up a proxy to a private Harbor registry a while back and it was working fine, but recently I can’t pull images from it anymore. The error message is 
“not found: manifest unknown: manifest unknown”, but it s… (249 words, Nov 5, 2025)
- [Proxy of Harbor docker registry stopped working - Sonatype Nexus Repository - Sonatype Community](/content/community/t/proxy-of-harbor-docker-registry-stopped-working/15749/index.html): Hello, I set up a proxy to a private Harbor registry a while back and it was working fine, but recently I can’t pull images from it anymore. The error message is 
“not found: manifest unknown: manifest unknown”, but it s… (241 words, Nov 5, 2025)
- [Proxy of Harbor docker registry stopped working - Sonatype Nexus Repository - Sonatype Community](/content/community/t/proxy-of-harbor-docker-registry-stopped-working/15749/1/index.html): Hello, I set up a proxy to a private Harbor registry a while back and it was working fine, but recently I can’t pull images from it anymore. The error message is 
“not found: manifest unknown: manifest unknown”, but it s… (251 words, Nov 5, 2025)
- [Spin up new Nexus instance from scratch - Task Execute Data Repair Plan stops after 0 seconds - Sonatype Nexus Repository - Sonatype Community](/content/community/t/spin-up-new-nexus-instance-from-scratch-task-execute-data-repair-plan-stops-after-0-seconds/15746/1/index.html): We were running an instance of Nexus for some years until we ran into severe database corruption some months after successful migration from OrientDB to H2. 
Since then this instance was running in read-only mode, we wer… (665 words, Nov 5, 2025)
- [Delete docker image - Sonatype Nexus Repository - Sonatype Community](/content/community/t/delete-docker-image/15745/index.html): Hello, 
I created a nexus registry for storing some docker images. 
I needed to manually delete one, so I did from web interface deleted the folder of the image wich contains manifest and tags for this image. 
But still … (139 words, Nov 4, 2025)
- [Delete docker image - Sonatype Nexus Repository - Sonatype Community](/content/community/t/delete-docker-image/15745/1/index.html): Hello, 
I created a nexus registry for storing some docker images. 
I needed to manually delete one, so I did from web interface deleted the folder of the image wich contains manifest and tags for this image. 
But still … (139 words, Nov 4, 2025)
- [Adding RHEL9 repos to Nexus - Sonatype Nexus Repository - Sonatype Community](/content/community/t/adding-rhel9-repos-to-nexus/15589/7/index.html): Hi everyone, 
I’m trying to add RHEL9 repos to Nexus. However, after following the instruction in the Proxying RHEL Yum Repositories I’m getting the SSL error when I try validate the certificate. 
Is it even possible to … (693 words, Nov 4, 2025)
- [Nexus Repository 3.85 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-repository-3-85/15732/3/index.html): Hello, 
Our team is tasked with taking over and upgrade an old 2.14 nexus env. 
I already tested a 2.15 in-place upgrade, then a 3.85 http migration. 
I would like to enable https, redirect http to https on port 443. 
I’… (269 words, Nov 3, 2025)
- [Nexus Repository 3.85 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-repository-3-85/15732/2/index.html): Hello, 
Our team is tasked with taking over and upgrade an old 2.14 nexus env. 
I already tested a 2.15 in-place upgrade, then a 3.85 http migration. 
I would like to enable https, redirect http to https on port 443. 
I’… (185 words, Oct 31, 2025)
- [Nexus Repository 3.85 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-repository-3-85/15732/index.html): Hello, 
Our team is tasked with taking over and upgrade an old 2.14 nexus env. 
I already tested a 2.15 in-place upgrade, then a 3.85 http migration. 
I would like to enable https, redirect http to https on port 443. 
I’… (186 words, Oct 30, 2025)
- [Nexus Repository 3.85 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-repository-3-85/15732/1/index.html): Hello, 
Our team is tasked with taking over and upgrade an old 2.14 nexus env. 
I already tested a 2.15 in-place upgrade, then a 3.85 http migration. 
I would like to enable https, redirect http to https on port 443. 
I’… (186 words, Oct 30, 2025)
- [Nexus upgrade 3.77.1 to 3.84 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-upgrade-3-77-1-to-3-84/15568/4/index.html): Hello, 
I’m using nexus community edition 3.77.1-ubi (docker image) in my prod environment now i would like to upgrade my nexus to the latest version 3.84 since my organisation has planned to get a nexus pro licence. I h… (333 words, Oct 30, 2025)
- [Nexus upgrade 3.77.1 to 3.84 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-upgrade-3-77-1-to-3-84/15568/3/index.html): Hello, 
I’m using nexus community edition 3.77.1-ubi (docker image) in my prod environment now i would like to upgrade my nexus to the latest version 3.84 since my organisation has planned to get a nexus pro licence. I h… (354 words, Oct 29, 2025)
- [Blob stores not getting cleaned (correctly) - Sonatype Nexus Repository - Sonatype Community](/content/community/t/blob-stores-not-getting-cleaned-correctly/15717/3/index.html): We are moving some of our blob stores to another file-system and therefore added a blob migration task. I started this task before the weekend and it finished sometime early Saturday. 
We have cleanups running every nigh… (264 words, Oct 29, 2025)
- [Blob stores not getting cleaned (correctly) - Sonatype Nexus Repository - Sonatype Community](/content/community/t/blob-stores-not-getting-cleaned-correctly/15717/2/index.html): We are moving some of our blob stores to another file-system and therefore added a blob migration task. I started this task before the weekend and it finished sometime early Saturday. 
We have cleanups running every nigh… (264 words, Oct 28, 2025)
- [Default Secret Encryption Key - Sonatype Nexus Repository - Sonatype Community](/content/community/t/default-secret-encryption-key/13658/10/index.html): Default Secret Encryption Key 
After upgrade Nexus sso from 3.72 to 3.73 
I get Default Secret Encryption Key 
Nexus was not configured with an encryption key and is using the Default key.	 
Is there aguide to fix that? (751 words, Oct 28, 2025)
- [Blob stores not getting cleaned (correctly) - Sonatype Nexus Repository - Sonatype Community](/content/community/t/blob-stores-not-getting-cleaned-correctly/15717/index.html): We are moving some of our blob stores to another file-system and therefore added a blob migration task. I started this task before the weekend and it finished sometime early Saturday. 
We have cleanups running every nigh… (268 words, Oct 27, 2025)
- [CE installation requests limit misunderstanding - Sonatype Nexus Repository - Sonatype Community](/content/community/t/ce-installation-requests-limit-misunderstanding/15698/5/index.html): I recently upgraded to the latest 3.85 version of Nexus CE and I’ve encountered mismatch in daily requests limit 
I get notification in status bar that I’ve reached 20K requests per day 
 
And the same time status dashbo… (361 words, Oct 24, 2025)
- [Adding RHEL9 repos to Nexus - Sonatype Nexus Repository - Sonatype Community](/content/community/t/adding-rhel9-repos-to-nexus/15589/6/index.html): Hi everyone, 
I’m trying to add RHEL9 repos to Nexus. However, after following the instruction in the Proxying RHEL Yum Repositories I’m getting the SSL error when I try validate the certificate. 
Is it even possible to … (691 words, Oct 23, 2025)
- [Nexus is not overwriting artefacts when deploying new version - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-is-not-overwriting-artefacts-when-deploying-new-version/15707/2/index.html): Hi there, we were running a 2021 version of Nexus Repo Community. We have a repository of type “hosted” where we deploy some artefacts to. Currently, there is an artefact which i want to overwrite with new revision. I pu… (314 words, Oct 23, 2025)
- [Nexus is not overwriting artefacts when deploying new version - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-is-not-overwriting-artefacts-when-deploying-new-version/15707/index.html): Hi there, we were running a 2021 version of Nexus Repo Community. We have a repository of type “hosted” where we deploy some artefacts to. Currently, there is an artefact which i want to overwrite with new revision. I pu… (313 words, Oct 23, 2025)
- [Nexus is not overwriting artefacts when deploying new version - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-is-not-overwriting-artefacts-when-deploying-new-version/15707/1/index.html): Hi there, we were running a 2021 version of Nexus Repo Community. We have a repository of type “hosted” where we deploy some artefacts to. Currently, there is an artefact which i want to overwrite with new revision. I pu… (315 words, Oct 23, 2025)
- [Nexus 3 Compatibility and migration - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-3-compatibility-and-migration/15702/5/index.html): Hello all, 
I am not able to find what is last version of Nexus 3 which supports H2 and allows migration to PostgreSQL if in future we decide to move to PostgreSQL. Currenlty running 3.77.1-01 
Also are there plans for J… (159 words, Oct 23, 2025)
- [CE installation requests limit misunderstanding - Sonatype Nexus Repository - Sonatype Community](/content/community/t/ce-installation-requests-limit-misunderstanding/15698/4/index.html): I recently upgraded to the latest 3.85 version of Nexus CE and I’ve encountered mismatch in daily requests limit 
I get notification in status bar that I’ve reached 20K requests per day 
 
And the same time status dashbo… (372 words, Oct 22, 2025)
- [Nexus 3 Compatibility and migration - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-3-compatibility-and-migration/15702/4/index.html): Hello all, 
I am not able to find what is last version of Nexus 3 which supports H2 and allows migration to PostgreSQL if in future we decide to move to PostgreSQL. Currenlty running 3.77.1-01 
Also are there plans for J… (159 words, Oct 22, 2025)
- [Nexus 3 Compatibility and migration - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-3-compatibility-and-migration/15702/3/index.html): Hello all, 
I am not able to find what is last version of Nexus 3 which supports H2 and allows migration to PostgreSQL if in future we decide to move to PostgreSQL. Currenlty running 3.77.1-01 
Also are there plans for J… (159 words, Oct 22, 2025)
- [Nexus 3 Compatibility and migration - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-3-compatibility-and-migration/15702/2/index.html): Hello all, 
I am not able to find what is last version of Nexus 3 which supports H2 and allows migration to PostgreSQL if in future we decide to move to PostgreSQL. Currenlty running 3.77.1-01 
Also are there plans for J… (162 words, Oct 22, 2025)
- [Nexus 3 Compatibility and migration - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-3-compatibility-and-migration/15702/index.html): Hello all, 
I am not able to find what is last version of Nexus 3 which supports H2 and allows migration to PostgreSQL if in future we decide to move to PostgreSQL. Currenlty running 3.77.1-01 
Also are there plans for J… (159 words, Oct 22, 2025)
- [Nexus 3 Compatibility and migration - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-3-compatibility-and-migration/15702/1/index.html): Hello all, 
I am not able to find what is last version of Nexus 3 which supports H2 and allows migration to PostgreSQL if in future we decide to move to PostgreSQL. Currenlty running 3.77.1-01 
Also are there plans for J… (230 words, Oct 22, 2025)
- [NEXUS PostgreSql SIZE when migrating from OrientDB to PostgreSql - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-postgresql-size-when-migrating-from-orientdb-to-postgresql/15665/4/index.html): Hello, 
We are planning to migrate from OrientDB to PostgreSQL. We are currently estimating the size of our database in GB. At the moment, our OrientDB database is about 5 GB. 
What would be the ideal size for the new da… (440 words, Oct 22, 2025)
- [CE installation requests limit misunderstanding - Sonatype Nexus Repository - Sonatype Community](/content/community/t/ce-installation-requests-limit-misunderstanding/15698/2/index.html): I recently upgraded to the latest 3.85 version of Nexus CE and I’ve encountered mismatch in daily requests limit 
I get notification in status bar that I’ve reached 20K requests per day 
 
And the same time status dashbo… (361 words, Oct 22, 2025)
- [CE installation requests limit misunderstanding - Sonatype Nexus Repository - Sonatype Community](/content/community/t/ce-installation-requests-limit-misunderstanding/15698/index.html): I recently upgraded to the latest 3.85 version of Nexus CE and I’ve encountered mismatch in daily requests limit 
I get notification in status bar that I’ve reached 20K requests per day 
 
And the same time status dashbo… (361 words, Oct 22, 2025)
- [CE installation requests limit misunderstanding - Sonatype Nexus Repository - Sonatype Community](/content/community/t/ce-installation-requests-limit-misunderstanding/15698/1/index.html): I recently upgraded to the latest 3.85 version of Nexus CE and I’ve encountered mismatch in daily requests limit 
I get notification in status bar that I’ve reached 20K requests per day 
 
And the same time status dashbo… (371 words, Oct 22, 2025)
- [Migrate nexus installation OSS to another server with nexus CE - Sonatype Nexus Repository - Sonatype Community](/content/community/t/migrate-nexus-installation-oss-to-another-server-with-nexus-ce/15668/8/index.html): Hello! 
We’re planning to migrate Nexus 3.68 OSS installation to another machine running Ubuntu 24. We want to migrate to the latest version of Nexus, which is 3.85, at the same time, but i see that there is significant … (600 words, Oct 22, 2025)
- [404 Error on Component Search in Nexus - Sonatype Nexus Repository - Sonatype Community](/content/community/t/404-error-on-component-search-in-nexus/15696/3/index.html): Recently after upgrade to 3.82.0 we noticed that component searches presented a 404 error, as below… 
  
But while investigating the issue we found that if you click the browser ‘Back’ button Nexus will present the searc… (116 words, Oct 21, 2025)
- [404 Error on Component Search in Nexus - Sonatype Nexus Repository - Sonatype Community](/content/community/t/404-error-on-component-search-in-nexus/15696/index.html): Recently after upgrade to 3.82.0 we noticed that component searches presented a 404 error, as below… 
  
But while investigating the issue we found that if you click the browser ‘Back’ button Nexus will present the searc… (122 words, Oct 21, 2025)
- [404 Error on Component Search in Nexus - Sonatype Nexus Repository - Sonatype Community](/content/community/t/404-error-on-component-search-in-nexus/15696/1/index.html): Recently after upgrade to 3.82.0 we noticed that component searches presented a 404 error, as below… 
  
But while investigating the issue we found that if you click the browser ‘Back’ button Nexus will present the searc… (122 words, Oct 21, 2025)
- [Encryption keys on Sonatype Nexus RepositoryCOMMUNITY 3.77.1-01 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/encryption-keys-on-sonatype-nexus-repositorycommunity-3-77-1-01/15694/2/index.html): Hello everyone, 
I have this warning status: 
Re-encryption required	Detected more than one encryption key in use. Re-encryption is required. See help documentation for information on how to start re-encryption. 
Where  … (144 words, Oct 21, 2025)
- [Adding RHEL9 repos to Nexus - Sonatype Nexus Repository - Sonatype Community](/content/community/t/adding-rhel9-repos-to-nexus/15589/5/index.html): Hi everyone, 
I’m trying to add RHEL9 repos to Nexus. However, after following the instruction in the Proxying RHEL Yum Repositories I’m getting the SSL error when I try validate the certificate. 
Is it even possible to … (693 words, Oct 21, 2025)
- [Encryption keys on Sonatype Nexus RepositoryCOMMUNITY 3.77.1-01 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/encryption-keys-on-sonatype-nexus-repositorycommunity-3-77-1-01/15694/index.html): Hello everyone, 
I have this warning status: 
Re-encryption required	Detected more than one encryption key in use. Re-encryption is required. See help documentation for information on how to start re-encryption. 
Where  … (145 words, Oct 21, 2025)
- [Encryption keys on Sonatype Nexus RepositoryCOMMUNITY 3.77.1-01 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/encryption-keys-on-sonatype-nexus-repositorycommunity-3-77-1-01/15694/1/index.html): Hello everyone, 
I have this warning status: 
Re-encryption required	Detected more than one encryption key in use. Re-encryption is required. See help documentation for information on how to start re-encryption. 
Where  … (141 words, Oct 21, 2025)
- [Clarification on Request Limits When Upgrading Nexus Repository OSS from v3.37 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/clarification-on-request-limits-when-upgrading-nexus-repository-oss-from-v3-37/15682/2/index.html): Hello, 
We are currently running Sonatype Nexus Repository OSS v3.37 and are planning to upgrade to a newer version. Before proceeding, we would like to clarify a few points: 

Request Limits in Newer Versions 
We unders… (302 words, Oct 20, 2025)
- [Missing column in Settings > Repositories - Sonatype Nexus Repository - Sonatype Community](/content/community/t/missing-column-in-settings-repositories/15680/6/index.html): We have 2 instances of Nexus3 running (Test & Prod) and I am currently finishing setup of the Prod instance. For the order of routing to proxied repositories, I wanted to check the size the proxied repos are using in the… (289 words, Oct 17, 2025)
- [Migrate nexus installation OSS to another server with nexus CE - Sonatype Nexus Repository - Sonatype Community](/content/community/t/migrate-nexus-installation-oss-to-another-server-with-nexus-ce/15668/7/index.html): Hello! 
We’re planning to migrate Nexus 3.68 OSS installation to another machine running Ubuntu 24. We want to migrate to the latest version of Nexus, which is 3.85, at the same time, but i see that there is significant … (600 words, Oct 17, 2025)
- [Missing column in Settings > Repositories - Sonatype Nexus Repository - Sonatype Community](/content/community/t/missing-column-in-settings-repositories/15680/4/index.html): We have 2 instances of Nexus3 running (Test & Prod) and I am currently finishing setup of the Prod instance. For the order of routing to proxied repositories, I wanted to check the size the proxied repos are using in the… (267 words, Oct 17, 2025)
- [Clarification on Request Limits When Upgrading Nexus Repository OSS from v3.37 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/clarification-on-request-limits-when-upgrading-nexus-repository-oss-from-v3-37/15682/index.html): Hello, 
We are currently running Sonatype Nexus Repository OSS v3.37 and are planning to upgrade to a newer version. Before proceeding, we would like to clarify a few points: 

Request Limits in Newer Versions 
We unders… (290 words, Oct 17, 2025)
- [Clarification on Request Limits When Upgrading Nexus Repository OSS from v3.37 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/clarification-on-request-limits-when-upgrading-nexus-repository-oss-from-v3-37/15682/1/index.html): Hello, 
We are currently running Sonatype Nexus Repository OSS v3.37 and are planning to upgrade to a newer version. Before proceeding, we would like to clarify a few points: 

Request Limits in Newer Versions 
We unders… (298 words, Oct 17, 2025)
- [Migrate nexus installation OSS to another server with nexus CE - Sonatype Nexus Repository - Sonatype Community](/content/community/t/migrate-nexus-installation-oss-to-another-server-with-nexus-ce/15668/6/index.html): Hello! 
We’re planning to migrate Nexus 3.68 OSS installation to another machine running Ubuntu 24. We want to migrate to the latest version of Nexus, which is 3.85, at the same time, but i see that there is significant … (594 words, Oct 17, 2025)
- [Missing column in Settings > Repositories - Sonatype Nexus Repository - Sonatype Community](/content/community/t/missing-column-in-settings-repositories/15680/index.html): We have 2 instances of Nexus3 running (Test & Prod) and I am currently finishing setup of the Prod instance. For the order of routing to proxied repositories, I wanted to check the size the proxied repos are using in the… (280 words, Oct 17, 2025)
- [Missing column in Settings > Repositories - Sonatype Nexus Repository - Sonatype Community](/content/community/t/missing-column-in-settings-repositories/15680/1/index.html): We have 2 instances of Nexus3 running (Test & Prod) and I am currently finishing setup of the Prod instance. For the order of routing to proxied repositories, I wanted to check the size the proxied repos are using in the… (280 words, Oct 17, 2025)
- [Best way to use routing rules - Sonatype Nexus Repository - Sonatype Community](/content/community/t/best-way-to-use-routing-rules/15677/3/index.html): I’ve been a long time user of Nexus 2 and am very confused about how to setup the routing rules in 3 correctly. The example in the documentation is not really helpful either, as it only shows how not to leak your interna… (216 words, Oct 16, 2025)
- [Best way to use routing rules - Sonatype Nexus Repository - Sonatype Community](/content/community/t/best-way-to-use-routing-rules/15677/index.html): I’ve been a long time user of Nexus 2 and am very confused about how to setup the routing rules in 3 correctly. The example in the documentation is not really helpful either, as it only shows how not to leak your interna… (215 words, Oct 16, 2025)
- [Best way to use routing rules - Sonatype Nexus Repository - Sonatype Community](/content/community/t/best-way-to-use-routing-rules/15677/1/index.html): I’ve been a long time user of Nexus 2 and am very confused about how to setup the routing rules in 3 correctly. The example in the documentation is not really helpful either, as it only shows how not to leak your interna… (215 words, Oct 16, 2025)
- [Migrate nexus installation OSS to another server with nexus CE - Sonatype Nexus Repository - Sonatype Community](/content/community/t/migrate-nexus-installation-oss-to-another-server-with-nexus-ce/15668/5/index.html): Hello! 
We’re planning to migrate Nexus 3.68 OSS installation to another machine running Ubuntu 24. We want to migrate to the latest version of Nexus, which is 3.85, at the same time, but i see that there is significant … (597 words, Oct 15, 2025)
- [Migrate nexus installation OSS to another server with nexus CE - Sonatype Nexus Repository - Sonatype Community](/content/community/t/migrate-nexus-installation-oss-to-another-server-with-nexus-ce/15668/4/index.html): Hello! 
We’re planning to migrate Nexus 3.68 OSS installation to another machine running Ubuntu 24. We want to migrate to the latest version of Nexus, which is 3.85, at the same time, but i see that there is significant … (595 words, Oct 15, 2025)
- [Adding RHEL9 repos to Nexus - Sonatype Nexus Repository - Sonatype Community](/content/community/t/adding-rhel9-repos-to-nexus/15589/4/index.html): Hi everyone, 
I’m trying to add RHEL9 repos to Nexus. However, after following the instruction in the Proxying RHEL Yum Repositories I’m getting the SSL error when I try validate the certificate. 
Is it even possible to … (692 words, Oct 15, 2025)
- [Migrate nexus installation OSS to another server with nexus CE - Sonatype Nexus Repository - Sonatype Community](/content/community/t/migrate-nexus-installation-oss-to-another-server-with-nexus-ce/15668/3/index.html): Hello! 
We’re planning to migrate Nexus 3.68 OSS installation to another machine running Ubuntu 24. We want to migrate to the latest version of Nexus, which is 3.85, at the same time, but i see that there is significant … (597 words, Oct 15, 2025)
- [Migrate nexus installation OSS to another server with nexus CE - Sonatype Nexus Repository - Sonatype Community](/content/community/t/migrate-nexus-installation-oss-to-another-server-with-nexus-ce/15668/2/index.html): Hello! 
We’re planning to migrate Nexus 3.68 OSS installation to another machine running Ubuntu 24. We want to migrate to the latest version of Nexus, which is 3.85, at the same time, but i see that there is significant … (598 words, Oct 14, 2025)
- [Adding RHEL9 repos to Nexus - Sonatype Nexus Repository - Sonatype Community](/content/community/t/adding-rhel9-repos-to-nexus/15589/3/index.html): Hi everyone, 
I’m trying to add RHEL9 repos to Nexus. However, after following the instruction in the Proxying RHEL Yum Repositories I’m getting the SSL error when I try validate the certificate. 
Is it even possible to … (695 words, Oct 14, 2025)
- [Migrate nexus installation OSS to another server with nexus CE - Sonatype Nexus Repository - Sonatype Community](/content/community/t/migrate-nexus-installation-oss-to-another-server-with-nexus-ce/15668/index.html): Hello! 
We’re planning to migrate Nexus 3.68 OSS installation to another machine running Ubuntu 24. We want to migrate to the latest version of Nexus, which is 3.85, at the same time, but i see that there is significant … (598 words, Oct 14, 2025)
- [Migrate nexus installation OSS to another server with nexus CE - Sonatype Nexus Repository - Sonatype Community](/content/community/t/migrate-nexus-installation-oss-to-another-server-with-nexus-ce/15668/1/index.html): Hello! 
We’re planning to migrate Nexus 3.68 OSS installation to another machine running Ubuntu 24. We want to migrate to the latest version of Nexus, which is 3.85, at the same time, but i see that there is significant … (600 words, Oct 14, 2025)
- [Sonatype Nexus Repository OSS Requests Per Day: Hard Limit? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-repository-oss-requests-per-day-hard-limit/14555/15/index.html): Hey, 
is the “Requests Per Day” a hard limit or a recommendation in recent Nexus Repository OSS Versions? (1,259 words, Oct 14, 2025)
- [NEXUS PostgreSql SIZE when migrating from OrientDB to PostgreSql - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-postgresql-size-when-migrating-from-orientdb-to-postgresql/15665/index.html): Hello, 
We are planning to migrate from OrientDB to PostgreSQL. We are currently estimating the size of our database in GB. At the moment, our OrientDB database is about 5 GB. 
What would be the ideal size for the new da… (439 words, Oct 14, 2025)
- [NEXUS PostgreSql SIZE when migrating from OrientDB to PostgreSql - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-postgresql-size-when-migrating-from-orientdb-to-postgresql/15665/1/index.html): Hello, 
We are planning to migrate from OrientDB to PostgreSQL. We are currently estimating the size of our database in GB. At the moment, our OrientDB database is about 5 GB. 
What would be the ideal size for the new da… (440 words, Oct 14, 2025)
- [Adding RHEL9 repos to Nexus - Sonatype Nexus Repository - Sonatype Community](/content/community/t/adding-rhel9-repos-to-nexus/15589/2/index.html): Hi everyone, 
I’m trying to add RHEL9 repos to Nexus. However, after following the instruction in the Proxying RHEL Yum Repositories I’m getting the SSL error when I try validate the certificate. 
Is it even possible to … (674 words, Oct 14, 2025)
- [Failed to make connection to backend after upgrade to nexus 3.78.2 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/failed-to-make-connection-to-backend-after-upgrade-to-nexus-3-78-2/15348/2/index.html): Hello there, 
I am currently testing the upgrade of our nexus from 3.77.2 to 3.78.2 on a preprod environment and after the upgrade, the URL of our nexus gives a “404 not found” and in the apache log I found the error “fa… (323 words, Oct 10, 2025)
- [Deployment error: Dependencies to SNAPSHOT versions not allowed - Central Repository - Sonatype Community](/content/community/t/deployment-error-dependencies-to-snapshot-versions-not-allowed/15647/index.html): Hey, 
I recently tried to create a new deployment for my project on Maven Central, but the deployment has failed. The reason given is that one component validation has failed, with the following note: 
pkg:maven/com.gith… (362 words, Oct 9, 2025)
- [Deployment error: Dependencies to SNAPSHOT versions not allowed - Central Repository - Sonatype Community](/content/community/t/deployment-error-dependencies-to-snapshot-versions-not-allowed/15647/1/index.html): Hey, 
I recently tried to create a new deployment for my project on Maven Central, but the deployment has failed. The reason given is that one component validation has failed, with the following note: 
pkg:maven/com.gith… (362 words, Oct 9, 2025)
- [Scope of Support for Upgrading from Nexus OSS to Nexus Pro - Sonatype Nexus Repository - Sonatype Community](/content/community/t/scope-of-support-for-upgrading-from-nexus-oss-to-nexus-pro/15642/2/index.html): Could you please explain the scope of support when upgrading from Nexus OSS to Nexus Pro? For example, is it possible to upgrade to a different Pro version, such as from OSS 3.2 to Pro 3.76? 
Also, is there any official … (130 words, Oct 8, 2025)
- [Scope of Support for Upgrading from Nexus OSS to Nexus Pro - Sonatype Nexus Repository - Sonatype Community](/content/community/t/scope-of-support-for-upgrading-from-nexus-oss-to-nexus-pro/15642/index.html): Could you please explain the scope of support when upgrading from Nexus OSS to Nexus Pro? For example, is it possible to upgrade to a different Pro version, such as from OSS 3.2 to Pro 3.76? 
Also, is there any official … (130 words, Oct 8, 2025)
- [Scope of Support for Upgrading from Nexus OSS to Nexus Pro - Sonatype Nexus Repository - Sonatype Community](/content/community/t/scope-of-support-for-upgrading-from-nexus-oss-to-nexus-pro/15642/1/index.html): Could you please explain the scope of support when upgrading from Nexus OSS to Nexus Pro? For example, is it possible to upgrade to a different Pro version, such as from OSS 3.2 to Pro 3.76? 
Also, is there any official … (191 words, Oct 8, 2025)
- [Sonatype Nexus Repository 3.85.0 Released - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-repository-3-85-0-released/15639/index.html): Sonatype Nexus Repository 3.85.0 is now available. 
This release provides numerous bug fixes, improving Sonatype Nexus Repository quality and user experience. Nexus Repository Cloud now also supports predictable S3 bucke… (121 words, Oct 7, 2025)
- [Sonatype Nexus Repository 3.85.0 Released - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-repository-3-85-0-released/15639/1/index.html): Sonatype Nexus Repository 3.85.0 is now available. 
This release provides numerous bug fixes, improving Sonatype Nexus Repository quality and user experience. Nexus Repository Cloud now also supports predictable S3 bucke… (121 words, Oct 7, 2025)
- [SQL Error - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sql-error/15623/3/index.html): I see this error a couple of times per day in my logs. Seeing it’s an error, I assume that nothing happens on the DB and it will keep filling up the table. Can someone look at this and fix it in the next release? 
### Er… (234 words, Oct 3, 2025)
- [SQL Error - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sql-error/15623/2/index.html): I see this error a couple of times per day in my logs. Seeing it’s an error, I assume that nothing happens on the DB and it will keep filling up the table. Can someone look at this and fix it in the next release? 
### Er… (156 words, Oct 3, 2025)
- [How to deploy Sonatype Nexus CE to K8s? - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/how-to-deploy-sonatype-nexus-ce-to-k8s/14360/6/index.html): Hi everyone, 
we are using Sonatype Nexus OSS hosted in a Kubernetes Cluster, deployed using the Helm chart nexus-repository-manager from the repository at https://sonatype.github.io/helm3-charts/. 
With the announcement… (434 words, Oct 1, 2025)
- [SQL Error - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sql-error/15623/index.html): I see this error a couple of times per day in my logs. Seeing it’s an error, I assume that nothing happens on the DB and it will keep filling up the table. Can someone look at this and fix it in the next release? 
### Er… (152 words, Sep 30, 2025)
- [SQL Error - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sql-error/15623/1/index.html): I see this error a couple of times per day in my logs. Seeing it’s an error, I assume that nothing happens on the DB and it will keep filling up the table. Can someone look at this and fix it in the next release? 
### Er… (152 words, Sep 30, 2025)
- [Cleanup policies and tasks not working v3.84.1 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/cleanup-policies-and-tasks-not-working-v3-84-1/15611/7/index.html): We use the Sonatype Nexus 3 Repository hosted via a Linux VM. We mount the nexus.service on an Azure File Share, and as of recently, the file share capacity has increased rapidly (we were on Nexus v3.82.0). Since then, w… (541 words, Sep 30, 2025)
- [Cleanup policies and tasks not working v3.84.1 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/cleanup-policies-and-tasks-not-working-v3-84-1/15611/6/index.html): We use the Sonatype Nexus 3 Repository hosted via a Linux VM. We mount the nexus.service on an Azure File Share, and as of recently, the file share capacity has increased rapidly (we were on Nexus v3.82.0). Since then, w… (541 words, Sep 30, 2025)
- [Cleanup policies and tasks not working v3.84.1 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/cleanup-policies-and-tasks-not-working-v3-84-1/15611/5/index.html): We use the Sonatype Nexus 3 Repository hosted via a Linux VM. We mount the nexus.service on an Azure File Share, and as of recently, the file share capacity has increased rapidly (we were on Nexus v3.82.0). Since then, w… (541 words, Sep 30, 2025)
- [Cleanup policies and tasks not working v3.84.1 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/cleanup-policies-and-tasks-not-working-v3-84-1/15611/4/index.html): We use the Sonatype Nexus 3 Repository hosted via a Linux VM. We mount the nexus.service on an Azure File Share, and as of recently, the file share capacity has increased rapidly (we were on Nexus v3.82.0). Since then, w… (541 words, Sep 29, 2025)
- [Cleanup policies and tasks not working v3.84.1 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/cleanup-policies-and-tasks-not-working-v3-84-1/15611/3/index.html): We use the Sonatype Nexus 3 Repository hosted via a Linux VM. We mount the nexus.service on an Azure File Share, and as of recently, the file share capacity has increased rapidly (we were on Nexus v3.82.0). Since then, w… (541 words, Sep 29, 2025)
- [Update Your IQ Server License Threat Groups - Sonatype Labs - Sonatype Community](/content/community/t/update-your-iq-server-license-threat-groups/3094/63/index.html): The license threat group updater will apply the latest Sonatype provided license classification to your running IQ server’s license threat groups. This will alleviate any “License Threat Group not Assigned” policy violat… (4,938 words, Sep 29, 2025)
- [State and future of Composer support (community plugin clashes with official implementation) - Sonatype Nexus Repository - Sonatype Community](/content/community/t/state-and-future-of-composer-support-community-plugin-clashes-with-official-implementation/14337/10/index.html): Hi, 
I’ve been working on the Nexus Repository Composer Format community plugin (sonatype-nexus-community/nexus-repository-composer on GitHub) recently including major refactoring for compatibility with Nexus 3.71+ datas… (988 words, Sep 29, 2025)
- [Privileges based on content selectors not working correctly - Sonatype Nexus Repository - Sonatype Community](/content/community/t/privileges-based-on-content-selectors-not-working-correctly/15609/4/index.html): We need to separate permissions in our repositories on a per team basis. Therefore, I am trying to create content selectors to allow our teams to maintain their own docker images. 
Pushing works like a charm, problems ar… (415 words, Sep 27, 2025)
- [Updated Course: Malware Vs. Vulnerabilities - Sonatype Learn - Sonatype Community](/content/community/t/updated-course-malware-vs-vulnerabilities/15612/index.html): Happy Friday, all! 
We just updated our Open-Source Malware vs. Vulnerabilities course with new examples from the recent npm malware attacks. If you’re wondering how these attacks fit into the overall threat landscape, t… (149 words, Sep 26, 2025)
- [Updated Course: Malware Vs. Vulnerabilities - Sonatype Learn - Sonatype Community](/content/community/t/updated-course-malware-vs-vulnerabilities/15612/1/index.html): Happy Friday, all! 
We just updated our Open-Source Malware vs. Vulnerabilities course with new examples from the recent npm malware attacks. If you’re wondering how these attacks fit into the overall threat landscape, t… (83 words, Sep 26, 2025)
- [Cleanup policies and tasks not working v3.84.1 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/cleanup-policies-and-tasks-not-working-v3-84-1/15611/index.html): We use the Sonatype Nexus 3 Repository hosted via a Linux VM. We mount the nexus.service on an Azure File Share, and as of recently, the file share capacity has increased rapidly (we were on Nexus v3.82.0). Since then, w… (541 words, Sep 26, 2025)
- [Cleanup policies and tasks not working v3.84.1 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/cleanup-policies-and-tasks-not-working-v3-84-1/15611/1/index.html): We use the Sonatype Nexus 3 Repository hosted via a Linux VM. We mount the nexus.service on an Azure File Share, and as of recently, the file share capacity has increased rapidly (we were on Nexus v3.82.0). Since then, w… (541 words, Sep 26, 2025)
- [Cannot create Maven - Delete SNAPSHOT Task - Sonatype Nexus Repository - Sonatype Community](/content/community/t/cannot-create-maven-delete-snapshot-task/15605/3/index.html): Hi, 
I’m trying to create a task to delete Maven snapshots using Nexus 3.84.1.  Specifically, I’m trying to use the “Maven - Delete SNAPSHOT” task. 
When I go to select a repository, the UI shows a “Loading” spinner, but… (395 words, Sep 26, 2025)
- [Custom Auth Plugin Supports Basic Auth but Not Bearer Token (Realm Not Invoked for Bearer Tokens) - Sonatype Nexus Repository - Sonatype Community](/content/community/t/custom-auth-plugin-supports-basic-auth-but-not-bearer-token-realm-not-invoked-for-bearer-tokens/15610/index.html): Description: 
I developed a custom authentication plugin for Nexus 3, but it only intercepts Basic Auth requests. For Bearer Token (or other authentication methods), the realm seems to be ignored despite overriding suppo… (200 words, Sep 26, 2025)
- [Custom Auth Plugin Supports Basic Auth but Not Bearer Token (Realm Not Invoked for Bearer Tokens) - Sonatype Nexus Repository - Sonatype Community](/content/community/t/custom-auth-plugin-supports-basic-auth-but-not-bearer-token-realm-not-invoked-for-bearer-tokens/15610/1/index.html): Description: 
I developed a custom authentication plugin for Nexus 3, but it only intercepts Basic Auth requests. For Bearer Token (or other authentication methods), the realm seems to be ignored despite overriding suppo… (200 words, Sep 26, 2025)
- [Privileges based on content selectors not working correctly - Sonatype Nexus Repository - Sonatype Community](/content/community/t/privileges-based-on-content-selectors-not-working-correctly/15609/3/index.html): We need to separate permissions in our repositories on a per team basis. Therefore, I am trying to create content selectors to allow our teams to maintain their own docker images. 
Pushing works like a charm, problems ar… (404 words, Sep 26, 2025)
- [Privileges based on content selectors not working correctly - Sonatype Nexus Repository - Sonatype Community](/content/community/t/privileges-based-on-content-selectors-not-working-correctly/15609/2/index.html): We need to separate permissions in our repositories on a per team basis. Therefore, I am trying to create content selectors to allow our teams to maintain their own docker images. 
Pushing works like a charm, problems ar… (415 words, Sep 26, 2025)
- [Privileges based on content selectors not working correctly - Sonatype Nexus Repository - Sonatype Community](/content/community/t/privileges-based-on-content-selectors-not-working-correctly/15609/1/index.html): We need to separate permissions in our repositories on a per team basis. Therefore, I am trying to create content selectors to allow our teams to maintain their own docker images. 
Pushing works like a charm, problems ar… (415 words, Sep 26, 2025)
- [Cannot create Maven - Delete SNAPSHOT Task - Sonatype Nexus Repository - Sonatype Community](/content/community/t/cannot-create-maven-delete-snapshot-task/15605/2/index.html): Hi, 
I’m trying to create a task to delete Maven snapshots using Nexus 3.84.1.  Specifically, I’m trying to use the “Maven - Delete SNAPSHOT” task. 
When I go to select a repository, the UI shows a “Loading” spinner, but… (389 words, Sep 25, 2025)
- [Cannot create Maven - Delete SNAPSHOT Task - Sonatype Nexus Repository - Sonatype Community](/content/community/t/cannot-create-maven-delete-snapshot-task/15605/index.html): Hi, 
I’m trying to create a task to delete Maven snapshots using Nexus 3.84.1.  Specifically, I’m trying to use the “Maven - Delete SNAPSHOT” task. 
When I go to select a repository, the UI shows a “Loading” spinner, but… (390 words, Sep 25, 2025)
- [Cannot create Maven - Delete SNAPSHOT Task - Sonatype Nexus Repository - Sonatype Community](/content/community/t/cannot-create-maven-delete-snapshot-task/15605/1/index.html): Hi, 
I’m trying to create a task to delete Maven snapshots using Nexus 3.84.1.  Specifically, I’m trying to use the “Maven - Delete SNAPSHOT” task. 
When I go to select a repository, the UI shows a “Loading” spinner, but… (389 words, Sep 25, 2025)
- [Problem with OrientDB on Sonatype Nexus Repository OSS 3.70.1-02 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/problem-with-orientdb-on-sonatype-nexus-repository-oss-3-70-1-02/15603/index.html): An error suddenly occurred: 
2025-09-24 21:38:33,158+0300 ERROR [qtp823698766-154607] *UNKNOWN com.orientechnologies.orient.core.storage.impl.local.paginated.OLocalPaginatedStorage 
ge - Exception 09FA9940 in storage loc… (115 words, Sep 25, 2025)
- [Problem with OrientDB on Sonatype Nexus Repository OSS 3.70.1-02 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/problem-with-orientdb-on-sonatype-nexus-repository-oss-3-70-1-02/15603/1/index.html): An error suddenly occurred: 
2025-09-24 21:38:33,158+0300 ERROR [qtp823698766-154607] *UNKNOWN com.orientechnologies.orient.core.storage.impl.local.paginated.OLocalPaginatedStorage 
ge - Exception 09FA9940 in storage loc… (175 words, Sep 25, 2025)
- [PostgreSQL error observed since the update to Nexus v3.84 Community Edition - Sonatype Nexus Repository - Sonatype Community](/content/community/t/postgresql-error-observed-since-the-update-to-nexus-v3-84-community-edition/15591/2/index.html): Since upgrading to v3.84.0 (on RHEL8), the following error appears several times a day in the nexus.log file. 
This error seems non-blocking, but do you have any idea on its origin and how to try to fix it, please? 
2025… (252 words, Sep 24, 2025)
- [PostgreSQL error observed since the update to Nexus v3.84 Community Edition - Sonatype Nexus Repository - Sonatype Community](/content/community/t/postgresql-error-observed-since-the-update-to-nexus-v3-84-community-edition/15591/index.html): Since upgrading to v3.84.0 (on RHEL8), the following error appears several times a day in the nexus.log file. 
This error seems non-blocking, but do you have any idea on its origin and how to try to fix it, please? 
2025… (252 words, Sep 24, 2025)
- [PostgreSQL error observed since the update to Nexus v3.84 Community Edition - Sonatype Nexus Repository - Sonatype Community](/content/community/t/postgresql-error-observed-since-the-update-to-nexus-v3-84-community-edition/15591/1/index.html): Since upgrading to v3.84.0 (on RHEL8), the following error appears several times a day in the nexus.log file. 
This error seems non-blocking, but do you have any idea on its origin and how to try to fix it, please? 
2025… (252 words, Sep 24, 2025)
- [OSS To community edition upgrade help - Community Announcements / News - Sonatype Community](/content/community/t/oss-to-community-edition-upgrade-help/15277/8/index.html): Hi Team, 
We are currently using OSS Nexus version 3.75.1 and are planning to upgrade to the latest Community Edition. Could you please provide the location of the Helm charts and the container images for version 3.77.1?… (782 words, Sep 23, 2025)
- [Adding RHEL9 repos to Nexus - Sonatype Nexus Repository - Sonatype Community](/content/community/t/adding-rhel9-repos-to-nexus/15589/index.html): Hi everyone, 
I’m trying to add RHEL9 repos to Nexus. However, after following the instruction in the Proxying RHEL Yum Repositories I’m getting the SSL error when I try validate the certificate. 
Is it even possible to … (692 words, Sep 23, 2025)
- [Adding RHEL9 repos to Nexus - Sonatype Nexus Repository - Sonatype Community](/content/community/t/adding-rhel9-repos-to-nexus/15589/1/index.html): Hi everyone, 
I’m trying to add RHEL9 repos to Nexus. However, after following the instruction in the Proxying RHEL Yum Repositories I’m getting the SSL error when I try validate the certificate. 
Is it even possible to … (673 words, Sep 23, 2025)
- [Issue "unable to migrate secrets for blobstore" after upgrade from 3.71 to 3.77 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/issue-unable-to-migrate-secrets-for-blobstore-after-upgrade-from-3-71-to-3-77/14450/2/index.html): Hello to all the community, 
I have tested the migration from 3.71 to latest 3.77.1 
and I encountered an issue with all my S3 blobstores: 
there are all unavailable with log messages saying: 
“unable to migrate secrets … (195 words, Sep 23, 2025)
- [Is it possible for Sonatype Nexus Repository Community Edition to get vulnerability information? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/is-it-possible-for-sonatype-nexus-repository-community-edition-to-get-vulnerability-information/15587/index.html): In Sonatype nexus repository community edition 
Browse > apt repository > some package > OSS Index Vulnerabilities > Vulnerability information unavailable 
How to let it get Vulnerability information? (149 words, Sep 23, 2025)
- [Is it possible for Sonatype Nexus Repository Community Edition to get vulnerability information? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/is-it-possible-for-sonatype-nexus-repository-community-edition-to-get-vulnerability-information/15587/1/index.html): In Sonatype nexus repository community edition 
Browse > apt repository > some package > OSS Index Vulnerabilities > Vulnerability information unavailable 
How to let it get Vulnerability information? (107 words, Sep 23, 2025)
- [Protection from Recent npm Malware Attacks - Community Announcements - Sonatype Community](/content/community/t/protection-from-recent-npm-malware-attacks/15579/2/index.html): Over the last two weeks, npm has seen a number of novel malware attacks. If you’re a Repository Firewall customer, you can protect your software supply chain from these threats. The following instructions assume that you… (437 words, Sep 23, 2025)
- [Protection from Recent npm Malware Attacks - Community Announcements - Sonatype Community](/content/community/t/protection-from-recent-npm-malware-attacks/15579/index.html): Over the last two weeks, npm has seen a number of novel malware attacks. If you’re a Repository Firewall customer, you can protect your software supply chain from these threats. The following instructions assume that you… (465 words, Sep 22, 2025)
- [Protection from Recent npm Malware Attacks - Community Announcements - Sonatype Community](/content/community/t/protection-from-recent-npm-malware-attacks/15579/1/index.html): Over the last two weeks, npm has seen a number of novel malware attacks. If you’re a Repository Firewall customer, you can protect your software supply chain from these threats. The following instructions assume that you… (464 words, Sep 22, 2025)
- [Hosted Apt Repository not working with 3.84.0 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/hosted-apt-repository-not-working-with-3-84-0/15560/3/index.html): While testing Nexus 3.84.0-03 Community Edition on our test server, we noticed that our hosted apt repository is no longer working as expected. While we can still upload packages as expected, the download from such a rep… (362 words, Sep 22, 2025)
- [Insufficient grace period for community tier - Sonatype Nexus Repository - Sonatype Community](/content/community/t/insufficient-grace-period-for-community-tier/14378/7/index.html): Dear Sonatype, 
you recently announced the introduction of the community tier and I would like to provide you with some feedback from your users’ perspective on how you introduced this critical change. 
First of all, I h… (1,422 words, Sep 19, 2025)
- [What is wrong with the NPM repository? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/what-is-wrong-with-the-npm-repository/15574/3/index.html): I’ve been setting up and testing a bit with NPM repositories and have now had my cleanup policies run. By my rules, the repo should currently be empty, but for some reason I see this in the repo: 
  
When selecting these… (218 words, Sep 19, 2025)
- [What is wrong with the NPM repository? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/what-is-wrong-with-the-npm-repository/15574/2/index.html): I’ve been setting up and testing a bit with NPM repositories and have now had my cleanup policies run. By my rules, the repo should currently be empty, but for some reason I see this in the repo: 
  
When selecting these… (151 words, Sep 18, 2025)
- [What is wrong with the NPM repository? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/what-is-wrong-with-the-npm-repository/15574/index.html): I’ve been setting up and testing a bit with NPM repositories and have now had my cleanup policies run. By my rules, the repo should currently be empty, but for some reason I see this in the repo: 
  
When selecting these… (145 words, Sep 18, 2025)
- [What is wrong with the NPM repository? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/what-is-wrong-with-the-npm-repository/15574/1/index.html): I’ve been setting up and testing a bit with NPM repositories and have now had my cleanup policies run. By my rules, the repo should currently be empty, but for some reason I see this in the repo: 
  
When selecting these… (209 words, Sep 18, 2025)
- [Sonatype Nexus Repository 3.84.1 Released - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-repository-3-84-1-released/15571/index.html): Sonatype Nexus Repository version 3.84.1 is now available. 
This release addresses bugs impacting version 3.84.0 related to licenses with certain special characters and IQ Server certificates stored in the Nexus truststo… (49 words, Sep 17, 2025)
- [Sonatype Nexus Repository 3.84.1 Released - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-repository-3-84-1-released/15571/1/index.html): Sonatype Nexus Repository version 3.84.1 is now available. 
This release addresses bugs impacting version 3.84.0 related to licenses with certain special characters and IQ Server certificates stored in the Nexus truststo… (120 words, Sep 17, 2025)
- [Nexus upgrade 3.77.1 to 3.84 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-upgrade-3-77-1-to-3-84/15568/2/index.html): Hello, 
I’m using nexus community edition 3.77.1-ubi (docker image) in my prod environment now i would like to upgrade my nexus to the latest version 3.84 since my organisation has planned to get a nexus pro licence. I h… (354 words, Sep 17, 2025)
- [Nexus upgrade 3.77.1 to 3.84 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-upgrade-3-77-1-to-3-84/15568/index.html): Hello, 
I’m using nexus community edition 3.77.1-ubi (docker image) in my prod environment now i would like to upgrade my nexus to the latest version 3.84 since my organisation has planned to get a nexus pro licence. I h… (354 words, Sep 17, 2025)
- [Nexus upgrade 3.77.1 to 3.84 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-upgrade-3-77-1-to-3-84/15568/1/index.html): Hello, 
I’m using nexus community edition 3.77.1-ubi (docker image) in my prod environment now i would like to upgrade my nexus to the latest version 3.84 since my organisation has planned to get a nexus pro licence. I h… (355 words, Sep 17, 2025)
- [OSS Nexus Helm chart for 3.83.2 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/oss-nexus-helm-chart-for-3-83-2/15559/2/index.html): Hi Team, 
We are currently using Nexus OSS version 3.75 and are planning to continue with the OSS version instead of switching to the Community Edition. 
Could you please help clarify the following: 

Building and Deploy… (190 words, Sep 16, 2025)
- [New Course: Intro to SBOM Manager - Sonatype Learn - Sonatype Community](/content/community/t/new-course-intro-to-sbom-manager/15561/index.html): Good morning, folks! 
Proud to announce a new course over on learn.sonatype.com. This course uses our new, highly engaging format and is chockablock full of information about SBOM Manager, its value, and how its used. Th… (84 words, Sep 16, 2025)
- [New Course: Intro to SBOM Manager - Sonatype Learn - Sonatype Community](/content/community/t/new-course-intro-to-sbom-manager/15561/1/index.html): Good morning, folks! 
Proud to announce a new course over on learn.sonatype.com. This course uses our new, highly engaging format and is chockablock full of information about SBOM Manager, its value, and how its used. Th… (89 words, Sep 16, 2025)
- [Hosted Apt Repository not working with 3.84.0 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/hosted-apt-repository-not-working-with-3-84-0/15560/index.html): While testing Nexus 3.84.0-03 Community Edition on our test server, we noticed that our hosted apt repository is no longer working as expected. While we can still upload packages as expected, the download from such a rep… (362 words, Sep 16, 2025)
- [Hosted Apt Repository not working with 3.84.0 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/hosted-apt-repository-not-working-with-3-84-0/15560/1/index.html): While testing Nexus 3.84.0-03 Community Edition on our test server, we noticed that our hosted apt repository is no longer working as expected. While we can still upload packages as expected, the download from such a rep… (362 words, Sep 16, 2025)
- [OSS Nexus Helm chart for 3.83.2 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/oss-nexus-helm-chart-for-3-83-2/15559/index.html): Hi Team, 
We are currently using Nexus OSS version 3.75 and are planning to continue with the OSS version instead of switching to the Community Edition. 
Could you please help clarify the following: 

Building and Deploy… (190 words, Sep 16, 2025)
- [OSS Nexus Helm chart for 3.83.2 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/oss-nexus-helm-chart-for-3-83-2/15559/1/index.html): Hi Team, 
We are currently using Nexus OSS version 3.75 and are planning to continue with the OSS version instead of switching to the Community Edition. 
Could you please help clarify the following: 

Building and Deploy… (190 words, Sep 16, 2025)
- [The official Nexus3.80.0 + version claims that there is a built-in task that can implement this function (Migrating User Tokens from LDAP to SAML), but there is no such built-in task in the UI page. What is the reason for this? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/the-official-nexus3-80-0-version-claims-that-there-is-a-built-in-task-that-can-implement-this-function-migrating-user-tokens-from-ldap-to-saml-but-there-is-no-such-built-in-task-in-the-ui-page-what-is-the-reason-for-this/15543/5/index.html): The official Nexus3.80.0 + version claims that there is a built-in task that can implement this function (Migrating User Tokens from LDAP to SAML), but there is no such built-in task in the UI page. What is the reason fo… (240 words, Sep 15, 2025)
- [The official Nexus3.80.0 + version claims that there is a built-in task that can implement this function (Migrating User Tokens from LDAP to SAML), but there is no such built-in task in the UI page. What is the reason for this? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/the-official-nexus3-80-0-version-claims-that-there-is-a-built-in-task-that-can-implement-this-function-migrating-user-tokens-from-ldap-to-saml-but-there-is-no-such-built-in-task-in-the-ui-page-what-is-the-reason-for-this/15543/4/index.html): The official Nexus3.80.0 + version claims that there is a built-in task that can implement this function (Migrating User Tokens from LDAP to SAML), but there is no such built-in task in the UI page. What is the reason fo… (240 words, Sep 15, 2025)
- [Default role loading failure after upgrade to version 3.84.0 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/default-role-loading-failure-after-upgrade-to-version-3-84-0/15541/5/index.html): We are getting the following error after upgrading Nexus from version 3.83.1 to version 3.84.0: 
(accessible by logging in as an admin user → Settings → System → Capabilities → Default Role) (155 words, Sep 14, 2025)
- [Default role loading failure after upgrade to version 3.84.0 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/default-role-loading-failure-after-upgrade-to-version-3-84-0/15541/4/index.html): We are getting the following error after upgrading Nexus from version 3.83.1 to version 3.84.0: 
(accessible by logging in as an admin user → Settings → System → Capabilities → Default Role) (143 words, Sep 12, 2025)
- [The official Nexus3.80.0 + version claims that there is a built-in task that can implement this function (Migrating User Tokens from LDAP to SAML), but there is no such built-in task in the UI page. What is the reason for this? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/the-official-nexus3-80-0-version-claims-that-there-is-a-built-in-task-that-can-implement-this-function-migrating-user-tokens-from-ldap-to-saml-but-there-is-no-such-built-in-task-in-the-ui-page-what-is-the-reason-for-this/15543/2/index.html): The official Nexus3.80.0 + version claims that there is a built-in task that can implement this function (Migrating User Tokens from LDAP to SAML), but there is no such built-in task in the UI page. What is the reason fo… (240 words, Sep 11, 2025)
- [The official Nexus3.80.0 + version claims that there is a built-in task that can implement this function (Migrating User Tokens from LDAP to SAML), but there is no such built-in task in the UI page. What is the reason for this? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/the-official-nexus3-80-0-version-claims-that-there-is-a-built-in-task-that-can-implement-this-function-migrating-user-tokens-from-ldap-to-saml-but-there-is-no-such-built-in-task-in-the-ui-page-what-is-the-reason-for-this/15543/index.html): The official Nexus3.80.0 + version claims that there is a built-in task that can implement this function (Migrating User Tokens from LDAP to SAML), but there is no such built-in task in the UI page. What is the reason fo… (240 words, Sep 11, 2025)
- [The official Nexus3.80.0 + version claims that there is a built-in task that can implement this function (Migrating User Tokens from LDAP to SAML), but there is no such built-in task in the UI page. What is the reason for this? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/the-official-nexus3-80-0-version-claims-that-there-is-a-built-in-task-that-can-implement-this-function-migrating-user-tokens-from-ldap-to-saml-but-there-is-no-such-built-in-task-in-the-ui-page-what-is-the-reason-for-this/15543/1/index.html): The official Nexus3.80.0 + version claims that there is a built-in task that can implement this function (Migrating User Tokens from LDAP to SAML), but there is no such built-in task in the UI page. What is the reason fo… (240 words, Sep 11, 2025)
- [Default role loading failure after upgrade to version 3.84.0 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/default-role-loading-failure-after-upgrade-to-version-3-84-0/15541/3/index.html): We are getting the following error after upgrading Nexus from version 3.83.1 to version 3.84.0: 
(accessible by logging in as an admin user → Settings → System → Capabilities → Default Role) (234 words, Sep 11, 2025)
- [Default role loading failure after upgrade to version 3.84.0 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/default-role-loading-failure-after-upgrade-to-version-3-84-0/15541/2/index.html): We are getting the following error after upgrading Nexus from version 3.83.1 to version 3.84.0: 
(accessible by logging in as an admin user → Settings → System → Capabilities → Default Role) (240 words, Sep 11, 2025)
- [Issue with Cleanup Policies: Preview displays artifact but they are not cleaned when the cleanup task run - Sonatype Nexus Repository - Sonatype Community](/content/community/t/issue-with-cleanup-policies-preview-displays-artifact-but-they-are-not-cleaned-when-the-cleanup-task-run/14960/21/index.html): Hello, 
I have an issue with Nexus Cleanup Policies. I can’t make it work properly. Maybe I’m missing something. 
General information 

Nexus version: Community 3.80.0-06
Saturated: No
Read-only: No
Database: H2
Blobstor… (550 words, Sep 11, 2025)
- [Default role loading failure after upgrade to version 3.84.0 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/default-role-loading-failure-after-upgrade-to-version-3-84-0/15541/index.html): We are getting the following error after upgrading Nexus from version 3.83.1 to version 3.84.0: 
(accessible by logging in as an admin user → Settings → System → Capabilities → Default Role) (259 words, Sep 11, 2025)
- [Default role loading failure after upgrade to version 3.84.0 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/default-role-loading-failure-after-upgrade-to-version-3-84-0/15541/1/index.html): We are getting the following error after upgrading Nexus from version 3.83.1 to version 3.84.0: 
(accessible by logging in as an admin user → Settings → System → Capabilities → Default Role) (245 words, Sep 11, 2025)
- [Sonatype Nexus Repository 3.84.0 Released - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-repository-3-84-0-released/15537/2/index.html): Sonatype Nexus Repository 3.84.0 is now available. 
With this release, Sonatype Repository Firewall now supports OCI image manifest specification and RPM packages in container scanning. 
This release also brings a number… (154 words, Sep 10, 2025)
- [How to fix Corrupted Orient DB? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-to-fix-corrupted-orient-db/15539/index.html): Hi All, 
We are running Nexus OSS Repository 3.75.1.  As an expected incident happened, the DB was corrupted, so we used the old latest db backup to recovery it, and schedule a manual task - Reconcile component database … (103 words, Sep 10, 2025)
- [How to fix Corrupted Orient DB? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-to-fix-corrupted-orient-db/15539/1/index.html): Hi All, 
We are running Nexus OSS Repository 3.75.1.  As an expected incident happened, the DB was corrupted, so we used the old latest db backup to recovery it, and schedule a manual task - Reconcile component database … (170 words, Sep 10, 2025)
- [Sonatype Nexus Repository 3.84.0 Released - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-repository-3-84-0-released/15537/1/index.html): Sonatype Nexus Repository 3.84.0 is now available. 
With this release, Sonatype Repository Firewall now supports OCI image manifest specification and RPM packages in container scanning. 
This release also brings a number… (144 words, Sep 9, 2025)
- [IP-filtering doesn't work - Sonatype Nexus Repository - Sonatype Community](/content/community/t/ip-filtering-doesnt-work/15524/3/index.html): I’m trying to deny several IPs from downloading from my repo, but using the information from this article doesn’t seem to work. I still see the IPs trying to download from the repo. Has the way filtering should be done c… (110 words, Sep 8, 2025)
- [Docker artifacts being automatically deleted despite no policies/tasks enabled - Sonatype Nexus Repository - Sonatype Community](/content/community/t/docker-artifacts-being-automatically-deleted-despite-no-policies-tasks-enabled/15528/index.html): Nexus OSS 3.66/docker repo 
I’m facing the following problem: I don’t want to delete the artifacts, but they are being deleted automatically. leaving only up to 5 latest tags. That is the case with Nexus OSS 3.66 at mine… (153 words, Sep 8, 2025)
- [Docker artifacts being automatically deleted despite no policies/tasks enabled - Sonatype Nexus Repository - Sonatype Community](/content/community/t/docker-artifacts-being-automatically-deleted-despite-no-policies-tasks-enabled/15528/1/index.html): Nexus OSS 3.66/docker repo 
I’m facing the following problem: I don’t want to delete the artifacts, but they are being deleted automatically. leaving only up to 5 latest tags. That is the case with Nexus OSS 3.66 at mine… (150 words, Sep 8, 2025)
- [Customized clean-up policy - Sonatype Nexus Repository - Sonatype Community](/content/community/t/customized-clean-up-policy/12117/5/index.html): I am using Sonatype Nexus RepositoryOSS 3.61.0-02. I have configured a clean-up policy such that artifacts are deleted after 30 days (Published Before). That works fine and deletion works. I am wondering if it is possibl… (262 words, Sep 8, 2025)
- [Storage facet cleanup removes images from repository without cleanup policy - Sonatype Nexus Repository - Sonatype Community](/content/community/t/storage-facet-cleanup-removes-images-from-repository-without-cleanup-policy/5159/2/index.html): Hi all, 
I have a question for Nexus OSS 3.25.1-04. I have a docker hosted repository which has no cleanup policy. I have identified several times that images are disappearing. According to logs from webhooks, image are … (170 words, Sep 8, 2025)
- [Outbound requests to clm.sonatype.com/user-telemetry - Sonatype Nexus Repository - Sonatype Community](/content/community/t/outbound-requests-to-clm-sonatype-com-user-telemetry/13901/4/index.html): Hello everyone, I have raised Outbound requests to clm.sonatype.com/user-telemetry · Issue #518 · sonatype/nexus-public · GitHub. 
I just wanted to enquire here in the community if somebody is experiencing the same behav… (300 words, Sep 5, 2025)
- [How to setup privileges for content selectors - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-to-setup-privileges-for-content-selectors/15525/index.html): We have been running 2 instances of Nexus (Nexus 2 & Nexus 3) and are preparing a new Nexus where both should be consolidated. I am currently trying to setup our content selectors, but I feel both the documentation (Priv… (358 words, Sep 5, 2025)
- [How to setup privileges for content selectors - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-to-setup-privileges-for-content-selectors/15525/1/index.html): We have been running 2 instances of Nexus (Nexus 2 & Nexus 3) and are preparing a new Nexus where both should be consolidated. I am currently trying to setup our content selectors, but I feel both the documentation (Priv… (353 words, Sep 5, 2025)
- [IP-filtering doesn't work - Sonatype Nexus Repository - Sonatype Community](/content/community/t/ip-filtering-doesnt-work/15524/index.html): I’m trying to deny several IPs from downloading from my repo, but using the information from this article doesn’t seem to work. I still see the IPs trying to download from the repo. Has the way filtering should be done c… (110 words, Sep 5, 2025)
- [IP-filtering doesn't work - Sonatype Nexus Repository - Sonatype Community](/content/community/t/ip-filtering-doesnt-work/15524/1/index.html): I’m trying to deny several IPs from downloading from my repo, but using the information from this article doesn’t seem to work. I still see the IPs trying to download from the repo. Has the way filtering should be done c… (110 words, Sep 5, 2025)
- [Does the warning message “delete will not be added to metrics” have any impact? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/does-the-warning-message-delete-will-not-be-added-to-metrics-have-any-impact/15512/3/index.html): Product Version: 
Nexus/3.59.0-01 (OSS) 
MinIO RELEASE.2023-09-07T02-05-02Z (using S3-type Blobstore) 
The following WARN message may sometimes appear in the nexus.log: 
org.sonatype.nexus.blobstore.s3.internal.S3BlobSto… (181 words, Sep 4, 2025)
- [Nexus 3.83.2-01 request.log does not write anymore - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-3-83-2-01-request-log-does-not-write-anymore/15520/index.html): Hi after updating from 3.70 to 3.83 Community our request.log stops working 
Anyone knows what happened? 
Thank you for your support (110 words, Sep 4, 2025)
- [Nexus 3.83.2-01 request.log does not write anymore - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-3-83-2-01-request-log-does-not-write-anymore/15520/1/index.html): Hi after updating from 3.70 to 3.83 Community our request.log stops working 
Anyone knows what happened? 
Thank you for your support (111 words, Sep 4, 2025)
- [Maven repository proxy not caching artifacts? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/maven-repository-proxy-not-caching-artifacts/15519/index.html): Nexus-OSS 3.78.0-14 
I set up a maven-proxy repo with the following settings: 

Name: mvnrepository-proxy
Version policy: release
Layout policy: strict
Content Disposition: inline
Remote storage: https://mvnrepository.co… (124 words, Sep 4, 2025)
- [Maven repository proxy not caching artifacts? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/maven-repository-proxy-not-caching-artifacts/15519/1/index.html): Nexus-OSS 3.78.0-14 
I set up a maven-proxy repo with the following settings: 

Name: mvnrepository-proxy
Version policy: release
Layout policy: strict
Content Disposition: inline
Remote storage: https://mvnrepository.co… (131 words, Sep 4, 2025)
- [Does the warning message “delete will not be added to metrics” have any impact? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/does-the-warning-message-delete-will-not-be-added-to-metrics-have-any-impact/15512/2/index.html): Product Version: 
Nexus/3.59.0-01 (OSS) 
MinIO RELEASE.2023-09-07T02-05-02Z (using S3-type Blobstore) 
The following WARN message may sometimes appear in the nexus.log: 
org.sonatype.nexus.blobstore.s3.internal.S3BlobSto… (182 words, Sep 3, 2025)
- [Nexus 3.69 OSS - does going over the daily requests threshold cause slowness? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-3-69-oss-does-going-over-the-daily-requests-threshold-cause-slowness/15513/index.html): We are on Sonatype Nexus 3.69 OSS repository where the daily requests are over 3 times the 20000 limit per day and total number of components are well over 100000 limit too. 
Can this cause slowness in artifact downloads… (115 words, Sep 3, 2025)
- [Nexus 3.69 OSS - does going over the daily requests threshold cause slowness? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-3-69-oss-does-going-over-the-daily-requests-threshold-cause-slowness/15513/1/index.html): We are on Sonatype Nexus 3.69 OSS repository where the daily requests are over 3 times the 20000 limit per day and total number of components are well over 100000 limit too. 
Can this cause slowness in artifact downloads… (113 words, Sep 3, 2025)
- [Does the warning message “delete will not be added to metrics” have any impact? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/does-the-warning-message-delete-will-not-be-added-to-metrics-have-any-impact/15512/index.html): Product Version: 
Nexus/3.59.0-01 (OSS) 
MinIO RELEASE.2023-09-07T02-05-02Z (using S3-type Blobstore) 
The following WARN message may sometimes appear in the nexus.log: 
org.sonatype.nexus.blobstore.s3.internal.S3BlobSto… (179 words, Sep 3, 2025)
- [Does the warning message “delete will not be added to metrics” have any impact? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/does-the-warning-message-delete-will-not-be-added-to-metrics-have-any-impact/15512/1/index.html): Product Version: 
Nexus/3.59.0-01 (OSS) 
MinIO RELEASE.2023-09-07T02-05-02Z (using S3-type Blobstore) 
The following WARN message may sometimes appear in the nexus.log: 
org.sonatype.nexus.blobstore.s3.internal.S3BlobSto… (181 words, Sep 3, 2025)
- [Content selector for pypi repository - Sonatype Nexus Repository - Sonatype Community](/content/community/t/content-selector-for-pypi-repository/1177/7/index.html): Hello everyone, 
I have created two pypi repository in nexus (for snapshot and release version) but nexus don’t accept version policy for pypi. 
But snapshot version of pipy artifacts have “.dev” pattern in their name. 
S… (455 words, Sep 3, 2025)
- [how to configure docker registry path based routing in registries.conf - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-to-configure-docker-registry-path-based-routing-in-registries-conf/15504/1/index.html): I’ve got my Nexus docker-private repository configured for path based routing, which is the preferred setup (Docker Registry). Now I need to configure registries.conf, so podman can search it. But Podman keeps trying to … (148 words, Sep 2, 2025)
- [Nxrm3-maven-plugin:1.0.9 Missing - Central Repository - Sonatype Community](/content/community/t/nxrm3-maven-plugin-1-0-9-missing/15501/index.html): Hi, 
as per Tags · sonatype/nxrm3-maven-plugin · GitHub it seems there is a new release in version 1.0.9 
Unfortunately, Maven Central: org.sonatype.plugins:nxrm3-maven-plugin reports 1.0.7 as latest version. 
When will … (91 words, Sep 2, 2025)
- [Nxrm3-maven-plugin:1.0.9 Missing - Central Repository - Sonatype Community](/content/community/t/nxrm3-maven-plugin-1-0-9-missing/15501/1/index.html): Hi, 
as per Tags · sonatype/nxrm3-maven-plugin · GitHub it seems there is a new release in version 1.0.9 
Unfortunately, Maven Central: org.sonatype.plugins:nxrm3-maven-plugin reports 1.0.7 as latest version. 
When will … (179 words, Sep 2, 2025)
- [The only file for Open Source scans with Golang is NOT supported - Sonatype Lifecycle & Repository Firewall / Best Practices - Sonatype Community](/content/community/t/the-only-file-for-open-source-scans-with-golang-is-not-supported/11491/17/index.html): https://help.sonatype.com/iqserver/analysis/go-application-analysis 
According to this page go.sum may be used for dependency scanning, but is not recommended. I think it should be removed from this help page if it is no… (900 words, Aug 29, 2025)
- [Invalidate cache of Nexus group repository via Groovy - Sonatype Nexus Repository - Sonatype Community](/content/community/t/invalidate-cache-of-nexus-group-repository-via-groovy/9865/6/index.html): Hello Community, 
Is there any preferred method to invalidate cache via a Groovy script which can be executed by Nexus task executor? 
Following the groovy scripting guide provided at (GitHub - sonatype-nexus-community/n… (286 words, Aug 29, 2025)
- [Update Your IQ Server License Threat Groups - Sonatype Labs - Sonatype Community](/content/community/t/update-your-iq-server-license-threat-groups/3094/62/index.html): The license threat group updater will apply the latest Sonatype provided license classification to your running IQ server’s license threat groups. This will alleviate any “License Threat Group not Assigned” policy violat… (5,143 words, Aug 28, 2025)
- [Redhat registry error - Sonatype Nexus Repository - Sonatype Community](/content/community/t/redhat-registry-error/15478/7/index.html): I’m trying to use podman to download containers and i’m getting the following errors: 
2025-08-26 09:40:55,552-0500 WARN  [qtp1465691120-24]  *UNKNOWN org.sonatype.nexus.repository.docker.internal.datastore.recipe.Docker… (651 words, Aug 26, 2025)
- [Redhat registry error - Sonatype Nexus Repository - Sonatype Community](/content/community/t/redhat-registry-error/15478/3/index.html): I’m trying to use podman to download containers and i’m getting the following errors: 
2025-08-26 09:40:55,552-0500 WARN  [qtp1465691120-24]  *UNKNOWN org.sonatype.nexus.repository.docker.internal.datastore.recipe.Docker… (443 words, Aug 26, 2025)
- [Redhat registry error - Sonatype Nexus Repository - Sonatype Community](/content/community/t/redhat-registry-error/15478/2/index.html): I’m trying to use podman to download containers and i’m getting the following errors: 
2025-08-26 09:40:55,552-0500 WARN  [qtp1465691120-24]  *UNKNOWN org.sonatype.nexus.repository.docker.internal.datastore.recipe.Docker… (444 words, Aug 26, 2025)
- [Redhat registry error - Sonatype Nexus Repository - Sonatype Community](/content/community/t/redhat-registry-error/15478/index.html): I’m trying to use podman to download containers and i’m getting the following errors: 
2025-08-26 09:40:55,552-0500 WARN  [qtp1465691120-24]  *UNKNOWN org.sonatype.nexus.repository.docker.internal.datastore.recipe.Docker… (651 words, Aug 26, 2025)
- [Redhat registry error - Sonatype Nexus Repository - Sonatype Community](/content/community/t/redhat-registry-error/15478/1/index.html): I’m trying to use podman to download containers and i’m getting the following errors: 
2025-08-26 09:40:55,552-0500 WARN  [qtp1465691120-24]  *UNKNOWN org.sonatype.nexus.repository.docker.internal.datastore.recipe.Docker… (443 words, Aug 26, 2025)
- [Getting 502 error for containers pull - Sonatype Nexus Repository - Sonatype Community](/content/community/t/getting-502-error-for-containers-pull/15477/1/index.html): I am trying to use NExus to download containers.  We have a proxy set up for outbound traffic and I do have all the appropriate firewall exceptions put in place.  Using curl it works.  I am trying to download from Red Ha… (1,271 words, Aug 26, 2025)
- [Error when using repository - Sonatype Nexus Repository - Sonatype Community](/content/community/t/error-when-using-repository/15471/8/index.html): I am trying to pull container images from registry.redhat.io and i’m getting this error when using nexus repo manager.  I am using podman for this.  Here is the error: 
DEBU[0001] Error pulling candidate nexus01.example.… (336 words, Aug 25, 2025)
- [Error when using repository - Sonatype Nexus Repository - Sonatype Community](/content/community/t/error-when-using-repository/15471/3/index.html): I am trying to pull container images from registry.redhat.io and i’m getting this error when using nexus repo manager.  I am using podman for this.  Here is the error: 
DEBU[0001] Error pulling candidate nexus01.example.… (336 words, Aug 25, 2025)
- [Error when using repository - Sonatype Nexus Repository - Sonatype Community](/content/community/t/error-when-using-repository/15471/2/index.html): I am trying to pull container images from registry.redhat.io and i’m getting this error when using nexus repo manager.  I am using podman for this.  Here is the error: 
DEBU[0001] Error pulling candidate nexus01.example.… (336 words, Aug 25, 2025)
- [Error when using repository - Sonatype Nexus Repository - Sonatype Community](/content/community/t/error-when-using-repository/15471/index.html): I am trying to pull container images from registry.redhat.io and i’m getting this error when using nexus repo manager.  I am using podman for this.  Here is the error: 
DEBU[0001] Error pulling candidate nexus01.example.… (336 words, Aug 25, 2025)
- [Error when using repository - Sonatype Nexus Repository - Sonatype Community](/content/community/t/error-when-using-repository/15471/1/index.html): I am trying to pull container images from registry.redhat.io and i’m getting this error when using nexus repo manager.  I am using podman for this.  Here is the error: 
DEBU[0001] Error pulling candidate nexus01.example.… (336 words, Aug 25, 2025)
- [How to set up Cleanup Policies? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-to-set-up-cleanup-policies/15467/2/index.html): Version: Sonatype Nexus Repository OSS 3.67.1-01
Deployment Method: Docker 
 
I need to set up a cleanup policy for Maven Snapshots: I want to clean up those older than 10 days but must retain the latest one. 
 
I set… (197 words, Aug 25, 2025)
- [How to create repository for registry.access.redhat.com - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-to-create-repository-for-registry-access-redhat-com/11255/2/index.html): how to create repository for registry.access.redhat.com? Does it need custom index? (117 words, Aug 25, 2025)
- [NuGet package publishing using API key - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nuget-package-publishing-using-api-key/15367/4/index.html): I’m trying to setup NuGet package repository on Community Edition. Documentation here NuGet Repositories implies that it is possible to use API key as a ClearTextPassword field for publishing, however no matter what I tr… (253 words, Aug 25, 2025)
- [How to set up Cleanup Policies? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-to-set-up-cleanup-policies/15467/index.html): Version: Sonatype Nexus Repository OSS 3.67.1-01
Deployment Method: Docker 
 
I need to set up a cleanup policy for Maven Snapshots: I want to clean up those older than 10 days but must retain the latest one. 
 
I set… (130 words, Aug 25, 2025)
- [How to set up Cleanup Policies? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-to-set-up-cleanup-policies/15467/1/index.html): Version: Sonatype Nexus Repository OSS 3.67.1-01
Deployment Method: Docker 
 
I need to set up a cleanup policy for Maven Snapshots: I want to clean up those older than 10 days but must retain the latest one. 
 
I set… (208 words, Aug 25, 2025)
- [How could I find out the role name - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-could-i-find-out-the-role-name/15422/2/index.html): Hey Team, 
How could I find out the role name by repository name? Or how could I get the username by the role name? 
Thanks a lot (260 words, Aug 25, 2025)
- [Sonatype Nexus remote repositories are not working after adding the proxy to connect to internet - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-remote-repositories-are-not-working-after-adding-the-proxy-to-connect-to-internet/15450/3/index.html): Hi, 
I’m using Sonatype Nexus Repository OSS 3.76.0-03. I have set up a remote repository for Rocky Linux so that packages can be downloaded from the internet. I have also configured the HTTP and HTTPS proxy settings—bot… (199 words, Aug 25, 2025)
- [Sonatype Nexus remote repositories are not working after adding the proxy to connect to internet - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-remote-repositories-are-not-working-after-adding-the-proxy-to-connect-to-internet/15450/2/index.html): Hi, 
I’m using Sonatype Nexus Repository OSS 3.76.0-03. I have set up a remote repository for Rocky Linux so that packages can be downloaded from the internet. I have also configured the HTTP and HTTPS proxy settings—bot… (198 words, Aug 22, 2025)
- [Changes to Nexus Repository Core codebase - Sonatype Nexus Repository - Sonatype Community](/content/community/t/changes-to-nexus-repository-core-codebase/14341/8/index.html): With version 3.77.0 Nexus Repository has become “Community Edition” with the changes/restrictions described by Sonatype. 
Brain Fox is mentioning the following in his blog post (Introducing Nexus Repository Community Edi… (848 words, Aug 22, 2025)
- [Sonatype Nexus Repository OSS Requests Per Day: Hard Limit? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-repository-oss-requests-per-day-hard-limit/14555/11/index.html): Hey, 
is the “Requests Per Day” a hard limit or a recommendation in recent Nexus Repository OSS Versions? (1,257 words, Aug 22, 2025)
- [Sonatype Nexus remote repositories are not working after adding the proxy to connect to internet - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-remote-repositories-are-not-working-after-adding-the-proxy-to-connect-to-internet/15450/index.html): Hi, 
I’m using Sonatype Nexus Repository OSS 3.76.0-03. I have set up a remote repository for Rocky Linux so that packages can be downloaded from the internet. I have also configured the HTTP and HTTPS proxy settings—bot… (198 words, Aug 22, 2025)
- [Sonatype Nexus remote repositories are not working after adding the proxy to connect to internet - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-remote-repositories-are-not-working-after-adding-the-proxy-to-connect-to-internet/15450/1/index.html): Hi, 
I’m using Sonatype Nexus Repository OSS 3.76.0-03. I have set up a remote repository for Rocky Linux so that packages can be downloaded from the internet. I have also configured the HTTP and HTTPS proxy settings—bot… (199 words, Aug 22, 2025)
- [Sonatype Nexus Repository warns "1 Malware Component Found" - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-repository-warns-1-malware-component-found/13718/29/index.html): Since upgrading our free local standalone version of Nexus Repository to version 3.73.0, we are seeing a Big Red Warning stating 1 Malware Component Found. 
From the guide below, my understanding is that we would need th… (1,704 words, Aug 21, 2025)
- [Can't downgrade from Nexus Pro to Nexus OOS in 3.83.0 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/cant-downgrade-from-nexus-pro-to-nexus-oos-in-3-83-0/15441/2/index.html): Hey, 
I just upgraded to Nexus 3.83.0 and ran into an issue. It seems like the new license system, cause downgrading to OSS to not work anymore. I followed the instructions within https://support.sonatype.com/hc/en-us/ar… (137 words, Aug 21, 2025)
- [Can't downgrade from Nexus Pro to Nexus OOS in 3.83.0 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/cant-downgrade-from-nexus-pro-to-nexus-oos-in-3-83-0/15441/1/index.html): Hey, 
I just upgraded to Nexus 3.83.0 and ran into an issue. It seems like the new license system, cause downgrading to OSS to not work anymore. I followed the instructions within https://support.sonatype.com/hc/en-us/ar… (140 words, Aug 21, 2025)
- [Add more Calls to the community page - Office Hours - Sonatype Community](/content/community/t/add-more-calls-to-the-community-page/15440/2/index.html): Hello, 
im Managing right now my calender for Sonatype-Events and the next call for Office Hours is next week. but My Sonatype - Office Hours list no calls for Sept - Dec. Could you please add them, so i can update our S… (157 words, Aug 21, 2025)
- [Add more Calls to the community page - Office Hours - Sonatype Community](/content/community/t/add-more-calls-to-the-community-page/15440/index.html): Hello, 
im Managing right now my calender for Sonatype-Events and the next call for Office Hours is next week. but My Sonatype - Office Hours list no calls for Sept - Dec. Could you please add them, so i can update our S… (151 words, Aug 21, 2025)
- [Add more Calls to the community page - Office Hours - Sonatype Community](/content/community/t/add-more-calls-to-the-community-page/15440/1/index.html): Hello, 
im Managing right now my calender for Sonatype-Events and the next call for Office Hours is next week. but My Sonatype - Office Hours list no calls for Sept - Dec. Could you please add them, so i can update our S… (186 words, Aug 21, 2025)
- [Clear cached LDAP users - Sonatype Nexus Repository - Sonatype Community](/content/community/t/clear-cached-ldap-users/15427/4/index.html): We are using LDAP in our Sonatype Nexus instance. Some users complained that while they could log in, they could not access the repositories as expected. 
I found out that the cause has been an invalid configuration of t… (397 words, Aug 20, 2025)
- [Clear cached LDAP users - Sonatype Nexus Repository - Sonatype Community](/content/community/t/clear-cached-ldap-users/15427/3/index.html): We are using LDAP in our Sonatype Nexus instance. Some users complained that while they could log in, they could not access the repositories as expected. 
I found out that the cause has been an invalid configuration of t… (409 words, Aug 20, 2025)
- [Clear cached LDAP users - Sonatype Nexus Repository - Sonatype Community](/content/community/t/clear-cached-ldap-users/15427/2/index.html): We are using LDAP in our Sonatype Nexus instance. Some users complained that while they could log in, they could not access the repositories as expected. 
I found out that the cause has been an invalid configuration of t… (397 words, Aug 19, 2025)
- [I have updated the Nexus from 3.71.0 to 3.77.2 using AWS ECS Setup but getting an error. - Sonatype Nexus Repository - Sonatype Community](/content/community/t/i-have-updated-the-nexus-from-3-71-0-to-3-77-2-using-aws-ecs-setup-but-getting-an-error/15431/2/index.html): Here is the detailed error - 
2025-08-19 08:18:58,462+0000 ERROR [FelixStartLevel] *SYSTEM org.sonatype.nexus.upgrade.datastore.internal.UpgradeManagerImpl - Missing migrations: [SearchCapabilityStep_2_1, SecretsMigratio… (206 words, Aug 19, 2025)
- [Clarification on robots.txt Exposure and CVE-2024-4956 in Nexus Repository 3.69.0 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/clarification-on-robots-txt-exposure-and-cve-2024-4956-in-nexus-repository-3-69-0/15429/2/index.html): Hello There, 
We are currently running Sonatype Nexus Repository version 3.69.0 as a Docker container. 
During a recent security review, we observed that the robots.txt file is publicly accessible via: 
https:///robots.t… (241 words, Aug 19, 2025)
- [I have updated the Nexus from 3.71.0 to 3.77.2 using AWS ECS Setup but getting an error. - Sonatype Nexus Repository - Sonatype Community](/content/community/t/i-have-updated-the-nexus-from-3-71-0-to-3-77-2-using-aws-ecs-setup-but-getting-an-error/15431/1/index.html): Here is the detailed error - 
2025-08-19 08:18:58,462+0000 ERROR [FelixStartLevel] *SYSTEM org.sonatype.nexus.upgrade.datastore.internal.UpgradeManagerImpl - Missing migrations: [SearchCapabilityStep_2_1, SecretsMigratio… (147 words, Aug 19, 2025)
- [Clarification on robots.txt Exposure and CVE-2024-4956 in Nexus Repository 3.69.0 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/clarification-on-robots-txt-exposure-and-cve-2024-4956-in-nexus-repository-3-69-0/15429/index.html): Hello There, 
We are currently running Sonatype Nexus Repository version 3.69.0 as a Docker container. 
During a recent security review, we observed that the robots.txt file is publicly accessible via: 
https:///robots.t… (254 words, Aug 19, 2025)
- [Clarification on robots.txt Exposure and CVE-2024-4956 in Nexus Repository 3.69.0 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/clarification-on-robots-txt-exposure-and-cve-2024-4956-in-nexus-repository-3-69-0/15429/1/index.html): Hello There, 
We are currently running Sonatype Nexus Repository version 3.69.0 as a Docker container. 
During a recent security review, we observed that the robots.txt file is publicly accessible via: 
https:///robots.t… (251 words, Aug 19, 2025)
- [Clear cached LDAP users - Sonatype Nexus Repository - Sonatype Community](/content/community/t/clear-cached-ldap-users/15427/index.html): We are using LDAP in our Sonatype Nexus instance. Some users complained that while they could log in, they could not access the repositories as expected. 
I found out that the cause has been an invalid configuration of t… (401 words, Aug 19, 2025)
- [Clear cached LDAP users - Sonatype Nexus Repository - Sonatype Community](/content/community/t/clear-cached-ldap-users/15427/1/index.html): We are using LDAP in our Sonatype Nexus instance. Some users complained that while they could log in, they could not access the repositories as expected. 
I found out that the cause has been an invalid configuration of t… (397 words, Aug 19, 2025)
- [How could I find out the role name - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-could-i-find-out-the-role-name/15422/index.html): Hey Team, 
How could I find out the role name by repository name? Or how could I get the username by the role name? 
Thanks a lot (267 words, Aug 19, 2025)
- [How could I find out the role name - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-could-i-find-out-the-role-name/15422/1/index.html): Hey Team, 
How could I find out the role name by repository name? Or how could I get the username by the role name? 
Thanks a lot (260 words, Aug 19, 2025)
- [Problem with Docker Baerer Token URL after upgrade to 3.80 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/problem-with-docker-baerer-token-url-after-upgrade-to-3-80/15418/index.html): I am running a Nexus Docker Registry with a HTTP connector behind an Apache reverse proxy. 
The setup is pretty much the one recommended by Sonatype. 
Communication looks like this: 
docker pull ---> https://my-registry-… (198 words, Aug 18, 2025)
- [Problem with Docker Baerer Token URL after upgrade to 3.80 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/problem-with-docker-baerer-token-url-after-upgrade-to-3-80/15418/1/index.html): I am running a Nexus Docker Registry with a HTTP connector behind an Apache reverse proxy. 
The setup is pretty much the one recommended by Sonatype. 
Communication looks like this: 
docker pull ---> https://my-registry-… (215 words, Aug 18, 2025)
- [Alert raised by the new "Licensing" status check from Nexus v3.83 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/alert-raised-by-the-new-licensing-status-check-from-nexus-v3-83/15400/5/index.html): Since Nexus v3.83, the new “Licensing” status check raises an issue on the Community Edition. 
Is it possible to disable this alert, or is there a free license key specific to the Community Edition, please? (135 words, Aug 15, 2025)
- [Proxying ChocolatyInternal - Sonatype Nexus Repository - Sonatype Community](/content/community/t/proxying-chocolatyinternal/15409/index.html): I’ve setup a nexus3 container running 3.82.0-08.  It’s behind an apache reverse proxy that provides SSL.  I’ve configured a ChocolateyInternal nuget v3 proxy pointing to our internal Chocolatey for business nexus server.… (145 words, Aug 15, 2025)
- [Proxying ChocolatyInternal - Sonatype Nexus Repository - Sonatype Community](/content/community/t/proxying-chocolatyinternal/15409/1/index.html): I’ve setup a nexus3 container running 3.82.0-08.  It’s behind an apache reverse proxy that provides SSL.  I’ve configured a ChocolateyInternal nuget v3 proxy pointing to our internal Chocolatey for business nexus server.… (145 words, Aug 15, 2025)
- [Alert raised by the new "Licensing" status check from Nexus v3.83 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/alert-raised-by-the-new-licensing-status-check-from-nexus-v3-83/15400/4/index.html): Since Nexus v3.83, the new “Licensing” status check raises an issue on the Community Edition. 
Is it possible to disable this alert, or is there a free license key specific to the Community Edition, please? (128 words, Aug 15, 2025)
- [Alert raised by the new "Licensing" status check from Nexus v3.83 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/alert-raised-by-the-new-licensing-status-check-from-nexus-v3-83/15400/3/index.html): Since Nexus v3.83, the new “Licensing” status check raises an issue on the Community Edition. 
Is it possible to disable this alert, or is there a free license key specific to the Community Edition, please? (135 words, Aug 14, 2025)
- [Alert raised by the new "Licensing" status check from Nexus v3.83 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/alert-raised-by-the-new-licensing-status-check-from-nexus-v3-83/15400/2/index.html): Since Nexus v3.83, the new “Licensing” status check raises an issue on the Community Edition. 
Is it possible to disable this alert, or is there a free license key specific to the Community Edition, please? (135 words, Aug 14, 2025)
- [Error after upgrade to 3.83 NoSuchBeanDefinitionException GroupFacet Qualifier("groupWriteFacet") - Sonatype Nexus Repository - Sonatype Community](/content/community/t/error-after-upgrade-to-3-83-nosuchbeandefinitionexception-groupfacet-qualifier-groupwritefacet/15403/index.html): Hi, 
After upgrading to Nexus 3.83.0-08, it fails to start with the following error: 
ERROR [jetty-main-1]  *SYSTEM org.sonatype.nexus.self.hosted.repository.manager.RepositoryManagerImpl - Failed transition: NEW -> STAR… (258 words, Aug 14, 2025)
- [Alert raised by the new "Licensing" status check from Nexus v3.83 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/alert-raised-by-the-new-licensing-status-check-from-nexus-v3-83/15400/index.html): Since Nexus v3.83, the new “Licensing” status check raises an issue on the Community Edition. 
Is it possible to disable this alert, or is there a free license key specific to the Community Edition, please? (134 words, Aug 14, 2025)
- [Alert raised by the new "Licensing" status check from Nexus v3.83 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/alert-raised-by-the-new-licensing-status-check-from-nexus-v3-83/15400/1/index.html): Since Nexus v3.83, the new “Licensing” status check raises an issue on the Community Edition. 
Is it possible to disable this alert, or is there a free license key specific to the Community Edition, please? (135 words, Aug 14, 2025)
- [Error Installing Nexus Service on Windows - Sonatype Nexus Repository - Sonatype Community](/content/community/t/error-installing-nexus-service-on-windows/15378/2/index.html): Running ‘install-nexus-service.bat’ to install and the install script presents this error 'Do you want to proceed with these values? [Y/n]: y 
[2025-08-07 14:44:07] [warn]  [ 9392] Failed to grant service user ‘NT AUTHOR… (101 words, Aug 11, 2025)
- [Error Installing Nexus Service on Windows - Sonatype Nexus Repository - Sonatype Community](/content/community/t/error-installing-nexus-service-on-windows/15378/index.html): Running ‘install-nexus-service.bat’ to install and the install script presents this error 'Do you want to proceed with these values? [Y/n]: y 
[2025-08-07 14:44:07] [warn]  [ 9392] Failed to grant service user ‘NT AUTHOR… (95 words, Aug 7, 2025)
- [Error Installing Nexus Service on Windows - Sonatype Nexus Repository - Sonatype Community](/content/community/t/error-installing-nexus-service-on-windows/15378/1/index.html): Running ‘install-nexus-service.bat’ to install and the install script presents this error 'Do you want to proceed with these values? [Y/n]: y 
[2025-08-07 14:44:07] [warn]  [ 9392] Failed to grant service user ‘NT AUTHOR… (101 words, Aug 7, 2025)
- [NuGet package publishing using API key - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nuget-package-publishing-using-api-key/15367/3/index.html): I’m trying to setup NuGet package repository on Community Edition. Documentation here NuGet Repositories implies that it is possible to use API key as a ClearTextPassword field for publishing, however no matter what I tr… (253 words, Aug 6, 2025)
- [No results on first search - Sonatype Nexus Repository - Sonatype Community](/content/community/t/no-results-on-first-search/15375/3/index.html): Hello everyone. 
I have this strange problem with search. 
You search “test” on the componets and you get 
404 RESOURCE NOT FOUND 
This resource is not available. It may have been moved, deleted, or you don’t have access… (130 words, Aug 6, 2025)
- [NuGet package publishing using API key - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nuget-package-publishing-using-api-key/15367/2/index.html): I’m trying to setup NuGet package repository on Community Edition. Documentation here NuGet Repositories implies that it is possible to use API key as a ClearTextPassword field for publishing, however no matter what I tr… (253 words, Aug 5, 2025)
- [No results on first search - Sonatype Nexus Repository - Sonatype Community](/content/community/t/no-results-on-first-search/15375/1/index.html): Hello everyone. 
I have this strange problem with search. 
You search “test” on the componets and you get 
404 RESOURCE NOT FOUND 
This resource is not available. It may have been moved, deleted, or you don’t have access… (197 words, Aug 5, 2025)
- [About Renewing SSL Certificate - Sonatype Nexus Repository - Sonatype Community](/content/community/t/about-renewing-ssl-certificate/15358/3/index.html): Hi Team, 
Can you please provide me the steps to renew SSL Certificate for Nexus " [Account - Nexus Repository Manager] (https://nexus.supervalu.com/#user/account)" 
Thanks, 
Priyanka (194 words, Aug 5, 2025)
- [OSS NPM repo support - Sonatype Nexus Repository - Sonatype Community](/content/community/t/oss-npm-repo-support/15368/2/index.html): Hi, I built the OSS version directly from the Github nexus-public repo, but I don’t see npm as one of the repository creation recipes.  Is there support in the OSS (non-community-edition) version for NPM repositories? (103 words, Aug 4, 2025)
- [OSS NPM repo support - Sonatype Nexus Repository - Sonatype Community](/content/community/t/oss-npm-repo-support/15368/index.html): Hi, I built the OSS version directly from the Github nexus-public repo, but I don’t see npm as one of the repository creation recipes.  Is there support in the OSS (non-community-edition) version for NPM repositories? (171 words, Aug 4, 2025)
- [OSS NPM repo support - Sonatype Nexus Repository - Sonatype Community](/content/community/t/oss-npm-repo-support/15368/1/index.html): Hi, I built the OSS version directly from the Github nexus-public repo, but I don’t see npm as one of the repository creation recipes.  Is there support in the OSS (non-community-edition) version for NPM repositories? (103 words, Aug 4, 2025)
- [NuGet package publishing using API key - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nuget-package-publishing-using-api-key/15367/index.html): I’m trying to setup NuGet package repository on Community Edition. Documentation here NuGet Repositories implies that it is possible to use API key as a ClearTextPassword field for publishing, however no matter what I tr… (254 words, Aug 4, 2025)
- [NuGet package publishing using API key - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nuget-package-publishing-using-api-key/15367/1/index.html): I’m trying to setup NuGet package repository on Community Edition. Documentation here NuGet Repositories implies that it is possible to use API key as a ClearTextPassword field for publishing, however no matter what I tr… (254 words, Aug 4, 2025)
- [About Renewing SSL Certificate - Sonatype Nexus Repository - Sonatype Community](/content/community/t/about-renewing-ssl-certificate/15358/2/index.html): Hi Team, 
Can you please provide me the steps to renew SSL Certificate for Nexus " [Account - Nexus Repository Manager] (https://nexus.supervalu.com/#user/account)" 
Thanks, 
Priyanka (189 words, Aug 1, 2025)
- [About Renewing SSL Certificate - Sonatype Nexus Repository - Sonatype Community](/content/community/t/about-renewing-ssl-certificate/15358/1/index.html): Hi Team, 
Can you please provide me the steps to renew SSL Certificate for Nexus " [Account - Nexus Repository Manager] (https://nexus.supervalu.com/#user/account)" 
Thanks, 
Priyanka (187 words, Aug 1, 2025)
- [Update Your IQ Server License Threat Groups - Sonatype Labs - Sonatype Community](/content/community/t/update-your-iq-server-license-threat-groups/3094/61/index.html): The license threat group updater will apply the latest Sonatype provided license classification to your running IQ server’s license threat groups. This will alleviate any “License Threat Group not Assigned” policy violat… (4,861 words, Aug 1, 2025)
- [July 2025 Office Hours - Recording - Office Hours - Sonatype Community](/content/community/t/july-2025-office-hours-recording/15350/index.html): Hi, all! 
Here’s the recording from our July Office Hours call. 
Passcode: 4F?l9Rr1 
Questions? Comments? Trouble with the recording? Reach out to me directly. (101 words, Jul 29, 2025)
- [July 2025 Office Hours - Recording - Office Hours - Sonatype Community](/content/community/t/july-2025-office-hours-recording/15350/1/index.html): Hi, all! 
Here’s the recording from our July Office Hours call. 
Passcode: 4F?l9Rr1 
Questions? Comments? Trouble with the recording? Reach out to me directly. (40 words, Jul 29, 2025)
- [Failed to make connection to backend after upgrade to nexus 3.78.2 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/failed-to-make-connection-to-backend-after-upgrade-to-nexus-3-78-2/15348/index.html): Hello there, 
I am currently testing the upgrade of our nexus from 3.77.2 to 3.78.2 on a preprod environment and after the upgrade, the URL of our nexus gives a “404 not found” and in the apache log I found the error “fa… (323 words, Jul 29, 2025)
- [Failed to make connection to backend after upgrade to nexus 3.78.2 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/failed-to-make-connection-to-backend-after-upgrade-to-nexus-3-78-2/15348/1/index.html): Hello there, 
I am currently testing the upgrade of our nexus from 3.77.2 to 3.78.2 on a preprod environment and after the upgrade, the URL of our nexus gives a “404 not found” and in the apache log I found the error “fa… (323 words, Jul 29, 2025)
- [Postgres error - Sonatype Nexus Repository - Sonatype Community](/content/community/t/postgres-error/15317/2/index.html): I recently rebuilt my Nexus Repo Manager server for my home lab.  I’m running this on CentOS 9 w/ the latest nexus. 
I’m trying to migrate from H2 to PostgreSQL 17. 
I’m currently getting this in the logs 
Caused by: org… (159 words, Jul 25, 2025)
- [State and future of Composer support (community plugin clashes with official implementation) - Sonatype Nexus Repository - Sonatype Community](/content/community/t/state-and-future-of-composer-support-community-plugin-clashes-with-official-implementation/14337/9/index.html): Hi, 
I’ve been working on the Nexus Repository Composer Format community plugin (sonatype-nexus-community/nexus-repository-composer on GitHub) recently including major refactoring for compatibility with Nexus 3.71+ datas… (1,011 words, Jul 25, 2025)
- [What's the way in integrate a new format into Sonatype community github - Sonatype Nexus Repository - Sonatype Community](/content/community/t/whats-the-way-in-integrate-a-new-format-into-sonatype-community-github/9857/8/index.html): Hi everybody, 
For my company, we are using sonatype Nexus for multiples formats, but one was missing: Ansible Galaxy. 
Ansible is a great tool to automate tasks in general for a server, for everything 
Ansible galaxy ar… (671 words, Jul 24, 2025)
- [Postgres error - Sonatype Nexus Repository - Sonatype Community](/content/community/t/postgres-error/15317/index.html): I recently rebuilt my Nexus Repo Manager server for my home lab.  I’m running this on CentOS 9 w/ the latest nexus. 
I’m trying to migrate from H2 to PostgreSQL 17. 
I’m currently getting this in the logs 
Caused by: org… (156 words, Jul 22, 2025)
- [Postgres error - Sonatype Nexus Repository - Sonatype Community](/content/community/t/postgres-error/15317/1/index.html): I recently rebuilt my Nexus Repo Manager server for my home lab.  I’m running this on CentOS 9 w/ the latest nexus. 
I’m trying to migrate from H2 to PostgreSQL 17. 
I’m currently getting this in the logs 
Caused by: org… (159 words, Jul 22, 2025)
- [Rapid Onboarding with Nexus Repository Cloud - Sonatype Learn - Sonatype Community](/content/community/t/rapid-onboarding-with-nexus-repository-cloud/15309/2/index.html): Happy Friday, all! 
The Customer Education is pleased to present a new Sona Short, ~15 minutes in length, about Nexus Repository Cloud, perfect for a customer who’s just made the purchase and is ready to start achieving … (169 words, Jul 18, 2025)
- [Rapid Onboarding with Nexus Repository Cloud - Sonatype Learn - Sonatype Community](/content/community/t/rapid-onboarding-with-nexus-repository-cloud/15309/index.html): Happy Friday, all! 
The Customer Education is pleased to present a new Sona Short, ~15 minutes in length, about Nexus Repository Cloud, perfect for a customer who’s just made the purchase and is ready to start achieving … (159 words, Jul 18, 2025)
- [Rapid Onboarding with Nexus Repository Cloud - Sonatype Learn - Sonatype Community](/content/community/t/rapid-onboarding-with-nexus-repository-cloud/15309/1/index.html): Happy Friday, all! 
The Customer Education is pleased to present a new Sona Short, ~15 minutes in length, about Nexus Repository Cloud, perfect for a customer who’s just made the purchase and is ready to start achieving … (184 words, Jul 18, 2025)
- [Web UI stuck on initializing - Sonatype Nexus Repository - Sonatype Community](/content/community/t/web-ui-stuck-on-initializing/15195/5/index.html): Hello! 
Since a few weeks my Nexus suddenly stopped working and the Web UI is stuck on initializing. No matter what version I use it is stuck on the same step. I thought it might be because I used an old SSL certificate … (408 words, Jul 18, 2025)
- [Cleanup policies in 3.83.0 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/cleanup-policies-in-3-83-0/15292/4/index.html): Some users on the Community have noted some difficulty with cleanup policies in recent versions of Nexus Repository. After some review, our team identified bugs that are likely the source of these issues. Fixes will ship… (175 words, Jul 18, 2025)
- [Cleanup policies in 3.83.0 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/cleanup-policies-in-3-83-0/15292/3/index.html): Some users on the Community have noted some difficulty with cleanup policies in recent versions of Nexus Repository. After some review, our team identified bugs that are likely the source of these issues. Fixes will ship… (171 words, Jul 18, 2025)
- [Cleanup policies in 3.83.0 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/cleanup-policies-in-3-83-0/15292/2/index.html): Some users on the Community have noted some difficulty with cleanup policies in recent versions of Nexus Repository. After some review, our team identified bugs that are likely the source of these issues. Fixes will ship… (161 words, Jul 18, 2025)
- [Task "Compact Blob Store" does not reclaim disk space - Sonatype Nexus Repository - Sonatype Community](/content/community/t/task-compact-blob-store-does-not-reclaim-disk-space/10058/7/index.html): We have a large maven-snapshots repository with over 3 TB of reclaimable bytes, but nothing is deleted from disk when we run the “Compact blob store” task. 
Output from the nx-blob-repo-space-report script (https://suppo… (555 words, Jul 17, 2025)
- [Support credly for Sonatype badges - Sonatype Learn - Sonatype Community](/content/community/t/support-credly-for-sonatype-badges/9214/3/index.html): I like very much the Sonatype Learn portal and I think it’s a great way to improve the teams’ overall knowledge of the best practices for the different tools usage patterns. 
What do you think about the idea to issue Son… (328 words, Jul 16, 2025)
- [Cleanup policies in 3.83.0 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/cleanup-policies-in-3-83-0/15292/index.html): Some users on the Community have noted some difficulty with cleanup policies in recent versions of Nexus Repository. After some review, our team identified bugs that are likely the source of these issues. Fixes will ship… (176 words, Jul 15, 2025)
- [Cleanup policies in 3.83.0 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/cleanup-policies-in-3-83-0/15292/1/index.html): Some users on the Community have noted some difficulty with cleanup policies in recent versions of Nexus Repository. After some review, our team identified bugs that are likely the source of these issues. Fixes will ship… (171 words, Jul 15, 2025)
- [3.81, 3.82 CE running in Alpine Docker has major Jetty 12 problem - Sonatype Nexus Repository - Sonatype Community](/content/community/t/3-81-3-82-ce-running-in-alpine-docker-has-major-jetty-12-problem/15289/index.html): Hi everyone, 
I was wondering if there is any guidance/workarounds for the below issue. 
We have a setup hosted via nginx reverse proxy however I get the same issue when bypassing the proxy. 
docker login and /v1 REST en… (181 words, Jul 15, 2025)
- [3.81, 3.82 CE running in Alpine Docker has major Jetty 12 problem - Sonatype Nexus Repository - Sonatype Community](/content/community/t/3-81-3-82-ce-running-in-alpine-docker-has-major-jetty-12-problem/15289/1/index.html): Hi everyone, 
I was wondering if there is any guidance/workarounds for the below issue. 
We have a setup hosted via nginx reverse proxy however I get the same issue when bypassing the proxy. 
docker login and /v1 REST en… (170 words, Jul 15, 2025)
- [CSV Report file Cleanup Policy Report Export Empty File - Sonatype Nexus Repository - Sonatype Community](/content/community/t/csv-report-file-cleanup-policy-report-export-empty-file/14924/3/index.html): I found a bug, after I switched from the H2 database to Postgres in CE, the cleaning policies stopped working. Also, an unload with a (CSV) file appeared. Nexus unloads an empty file. If Component Age is unchecked, it wi… (129 words, Jul 14, 2025)
- [Unable to delete repository when database is frozen.. Database not writable on node - Sonatype Nexus Repository - Sonatype Community](/content/community/t/unable-to-delete-repository-when-database-is-frozen-database-not-writable-on-node/10737/10/index.html): hi, i get this error when trying to delete or to push to repository: 
Unable to delete repository when database is frozen… Database not writable on node! 
any help please? (376 words, Jul 14, 2025)
- [cleanup task - Sonatype Nexus Repository - Sonatype Community](/content/community/t/cleanup-task/15218/3/index.html): local hosted (docker) is not cleaned up. (200 words, Jul 14, 2025)
- [Can i add new repo type manualy - Sonatype Nexus Repository - Sonatype Community](/content/community/t/can-i-add-new-repo-type-manualy/15267/2/index.html): Can i add Hugging Face Repositories (repository formats ) manualy to Sonatype Nexus Repository 
OSS 3.70.1-02 ? (63 words, Jul 14, 2025)
- [Unable to delete repository when database is frozen - Sonatype Nexus Repository - Sonatype Community](/content/community/t/unable-to-delete-repository-when-database-is-frozen/8605/13/index.html): Hi Team, 
We have upgraded the Nexus application from v3.30.0-01 to v3.38.1-01. 
After upgrading, we are not able to delete a repository. 
It showing error as " Unable to delete repository when database is frozen… Databa… (394 words, Jul 14, 2025)
- [OSS To community edition upgrade help - Community Announcements / News - Sonatype Community](/content/community/t/oss-to-community-edition-upgrade-help/15277/index.html): Hi Team, 
We are currently using OSS Nexus version 3.75.1 and are planning to upgrade to the latest Community Edition. Could you please provide the location of the Helm charts and the container images for version 3.77.1?… (909 words, Jul 11, 2025)
- [OSS To community edition upgrade help - Community Announcements / News - Sonatype Community](/content/community/t/oss-to-community-edition-upgrade-help/15277/1/index.html): Hi Team, 
We are currently using OSS Nexus version 3.75.1 and are planning to upgrade to the latest Community Edition. Could you please provide the location of the Helm charts and the container images for version 3.77.1?… (888 words, Jul 11, 2025)
- [Support for conda repodata.json.zst format - Sonatype Nexus Repository - Sonatype Community](/content/community/t/support-for-conda-repodata-json-zst-format/15276/index.html): Hi, 
Nexus: 3.69.0-02 
client micromamba v3.2.0 
When using the conda proxy I’m not able the get the new conda metadata repo working downloaded. 
#9 28.99 warning  libmamba Failed to load subdir: Transfer finalized, stat… (131 words, Jul 11, 2025)
- [Support for conda repodata.json.zst format - Sonatype Nexus Repository - Sonatype Community](/content/community/t/support-for-conda-repodata-json-zst-format/15276/1/index.html): Hi, 
Nexus: 3.69.0-02 
client micromamba v3.2.0 
When using the conda proxy I’m not able the get the new conda metadata repo working downloaded. 
#9 28.99 warning  libmamba Failed to load subdir: Transfer finalized, stat… (136 words, Jul 11, 2025)
- [Sonatype Nexus Repository 3.82.0 Released - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-repository-3-82-0-released/15271/index.html): Sonatype Nexus Repository 3.82.0 is now available. 
This release introduces a new Capabilities API that allows you to programmatically view, create, update, and delete Capabilities in your Sonatype Nexus Repository insta… (129 words, Jul 10, 2025)
- [Sonatype Nexus Repository 3.82.0 Released - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-repository-3-82-0-released/15271/1/index.html): Sonatype Nexus Repository 3.82.0 is now available. 
This release introduces a new Capabilities API that allows you to programmatically view, create, update, and delete Capabilities in your Sonatype Nexus Repository insta… (147 words, Jul 10, 2025)
- [Terraform format for hosted and proxy repositories - Sonatype Nexus Repository - Sonatype Community](/content/community/t/terraform-format-for-hosted-and-proxy-repositories/15269/index.html): Hey guys, 
i want to know, if you are planning to implement a format for terraform modules. 
We like to store our own modules and want to bring the terraform registry into nexus. 
Are there plans? 
Greets, 
Marcus (198 words, Jul 10, 2025)
- [Terraform format for hosted and proxy repositories - Sonatype Nexus Repository - Sonatype Community](/content/community/t/terraform-format-for-hosted-and-proxy-repositories/15269/1/index.html): Hey guys, 
i want to know, if you are planning to implement a format for terraform modules. 
We like to store our own modules and want to bring the terraform registry into nexus. 
Are there plans? 
Greets, 
Marcus (198 words, Jul 10, 2025)
- [Can i add new repo type manualy - Sonatype Nexus Repository - Sonatype Community](/content/community/t/can-i-add-new-repo-type-manualy/15267/index.html): Can i add Hugging Face Repositories (repository formats ) manualy to Sonatype Nexus Repository 
OSS 3.70.1-02 ? (63 words, Jul 10, 2025)
- [Can i add new repo type manualy - Sonatype Nexus Repository - Sonatype Community](/content/community/t/can-i-add-new-repo-type-manualy/15267/1/index.html): Can i add Hugging Face Repositories (repository formats ) manualy to Sonatype Nexus Repository 
OSS 3.70.1-02 ? (124 words, Jul 10, 2025)
- [AWS Marketplace licensing - Sonatype Nexus Repository - Sonatype Community](/content/community/t/aws-marketplace-licensing/15256/2/index.html): I saw the possibility to use Marketplace to buy a PRO license, but both in the marketplace and sonatype website doesnt have sufficient information. 
Prompts to ASK AI doesnt return information too. 
The license is based … (170 words, Jul 9, 2025)
- [Problem with namespace migrating from oss to central repo - Central Repository - Sonatype Community](/content/community/t/problem-with-namespace-migrating-from-oss-to-central-repo/15261/3/index.html): Hello, 
I am migrating my open source projects form old ‘https://oss.sonatype.org/content/repositories/snapshots’ to the new ‘Repository - Sonatype Nexus Repository’. 
This works already for some of my projects. 
But I h… (171 words, Jul 9, 2025)
- [Is it possible to integrate OIDC authentication in Nexus OSS? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/is-it-possible-to-integrate-oidc-authentication-in-nexus-oss/15255/6/index.html): Hi, I am currently looking into implementing OIDC authentication via Microsoft Entra in the Nexus Repository. 
As far as I know, there doesn’t seem to be an official way to implement SSO authentication other than SAML, w… (778 words, Jul 9, 2025)
- [Problem with namespace migrating from oss to central repo - Central Repository - Sonatype Community](/content/community/t/problem-with-namespace-migrating-from-oss-to-central-repo/15261/2/index.html): Hello, 
I am migrating my open source projects form old ‘https://oss.sonatype.org/content/repositories/snapshots’ to the new ‘Repository - Sonatype Nexus Repository’. 
This works already for some of my projects. 
But I h… (200 words, Jul 9, 2025)
- [Problem with namespace migrating from oss to central repo - Central Repository - Sonatype Community](/content/community/t/problem-with-namespace-migrating-from-oss-to-central-repo/15261/index.html): Hello, 
I am migrating my open source projects form old ‘https://oss.sonatype.org/content/repositories/snapshots’ to the new ‘Repository - Sonatype Nexus Repository’. 
This works already for some of my projects. 
But I h… (170 words, Jul 9, 2025)
- [Problem with namespace migrating from oss to central repo - Central Repository - Sonatype Community](/content/community/t/problem-with-namespace-migrating-from-oss-to-central-repo/15261/1/index.html): Hello, 
I am migrating my open source projects form old ‘https://oss.sonatype.org/content/repositories/snapshots’ to the new ‘Repository - Sonatype Nexus Repository’. 
This works already for some of my projects. 
But I h… (211 words, Jul 9, 2025)
- [Is it possible to integrate OIDC authentication in Nexus OSS? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/is-it-possible-to-integrate-oidc-authentication-in-nexus-oss/15255/2/index.html): Hi, I am currently looking into implementing OIDC authentication via Microsoft Entra in the Nexus Repository. 
As far as I know, there doesn’t seem to be an official way to implement SSO authentication other than SAML, w… (777 words, Jul 8, 2025)
- [Checksum and signature errors while publishing - Central Repository - Sonatype Community](/content/community/t/checksum-and-signature-errors-while-publishing/15257/index.html): Hi, we are having problems while publishing to sonatype with the plugin gradle io.github.gradle-nexus:publish-plugin:2.0.0 From our repository we publish two different artifacts: webrtc-99*** and webrtc-121*** and we are… (293 words, Jul 8, 2025)
- [Checksum and signature errors while publishing - Central Repository - Sonatype Community](/content/community/t/checksum-and-signature-errors-while-publishing/15257/1/index.html): Hi, we are having problems while publishing to sonatype with the plugin gradle io.github.gradle-nexus:publish-plugin:2.0.0 From our repository we publish two different artifacts: webrtc-99*** and webrtc-121*** and we are… (300 words, Jul 8, 2025)
- [AWS Marketplace licensing - Sonatype Nexus Repository - Sonatype Community](/content/community/t/aws-marketplace-licensing/15256/index.html): I saw the possibility to use Marketplace to buy a PRO license, but both in the marketplace and sonatype website doesnt have sufficient information. 
Prompts to ASK AI doesnt return information too. 
The license is based … (166 words, Jul 8, 2025)
- [AWS Marketplace licensing - Sonatype Nexus Repository - Sonatype Community](/content/community/t/aws-marketplace-licensing/15256/1/index.html): I saw the possibility to use Marketplace to buy a PRO license, but both in the marketplace and sonatype website doesnt have sufficient information. 
Prompts to ASK AI doesnt return information too. 
The license is based … (166 words, Jul 8, 2025)
- [Is it possible to integrate OIDC authentication in Nexus OSS? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/is-it-possible-to-integrate-oidc-authentication-in-nexus-oss/15255/index.html): Hi, I am currently looking into implementing OIDC authentication via Microsoft Entra in the Nexus Repository. 
As far as I know, there doesn’t seem to be an official way to implement SSO authentication other than SAML, w… (779 words, Jul 8, 2025)
- [Is it possible to integrate OIDC authentication in Nexus OSS? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/is-it-possible-to-integrate-oidc-authentication-in-nexus-oss/15255/1/index.html): Hi, I am currently looking into implementing OIDC authentication via Microsoft Entra in the Nexus Repository. 
As far as I know, there doesn’t seem to be an official way to implement SSO authentication other than SAML, w… (710 words, Jul 8, 2025)
- [Apt proxy problems downloading large files - Sonatype Nexus Repository - Sonatype Community](/content/community/t/apt-proxy-problems-downloading-large-files/15233/2/index.html): Hi, 
I have a containerized Nexus Repository with 3 HA Nodes running various apt proxy repos connected to archive.ubuntu.com. 
As soon as I want to install packages with large files like linux-firmware, flightgear-data-b… (281 words, Jul 7, 2025)
- [Apt mirror for gitlab-runner in packages.gitlab.com - Sonatype Nexus Repository - Sonatype Community](/content/community/t/apt-mirror-for-gitlab-runner-in-packages-gitlab-com/15246/2/index.html): Hi, 
I want to create an apt proxy for gitlab-runner to be available for our ubuntu hosts. 
I have created a repo “apt-proxy-noble-gitlab” connected to packages.gitlab.com for ubuntu noble 
https://packages.gitlab.com/ru… (190 words, Jul 7, 2025)
- [Please specify request metrics in more detail - Sonatype Nexus Repository - Sonatype Community](/content/community/t/please-specify-request-metrics-in-more-detail/15247/index.html): Hi! 
We’re currently monitoring our Nexus OSS 3.76 request metrics in order to assess whether we’re good to move to Nexus Repository CE. According to your specification Only considers requests to the /repository/* urls, … (182 words, Jul 7, 2025)
- [Apt mirror for gitlab-runner in packages.gitlab.com - Sonatype Nexus Repository - Sonatype Community](/content/community/t/apt-mirror-for-gitlab-runner-in-packages-gitlab-com/15246/index.html): Hi, 
I want to create an apt proxy for gitlab-runner to be available for our ubuntu hosts. 
I have created a repo “apt-proxy-noble-gitlab” connected to packages.gitlab.com for ubuntu noble 
https://packages.gitlab.com/ru… (189 words, Jul 7, 2025)
- [Apt mirror for gitlab-runner in packages.gitlab.com - Sonatype Nexus Repository - Sonatype Community](/content/community/t/apt-mirror-for-gitlab-runner-in-packages-gitlab-com/15246/1/index.html): Hi, 
I want to create an apt proxy for gitlab-runner to be available for our ubuntu hosts. 
I have created a repo “apt-proxy-noble-gitlab” connected to packages.gitlab.com for ubuntu noble 
https://packages.gitlab.com/ru… (190 words, Jul 7, 2025)
- [Apt proxy problems downloading large files - Sonatype Nexus Repository - Sonatype Community](/content/community/t/apt-proxy-problems-downloading-large-files/15233/index.html): Hi, 
I have a containerized Nexus Repository with 3 HA Nodes running various apt proxy repos connected to archive.ubuntu.com. 
As soon as I want to install packages with large files like linux-firmware, flightgear-data-b… (231 words, Jul 4, 2025)
- [Apt proxy problems downloading large files - Sonatype Nexus Repository - Sonatype Community](/content/community/t/apt-proxy-problems-downloading-large-files/15233/1/index.html): Hi, 
I have a containerized Nexus Repository with 3 HA Nodes running various apt proxy repos connected to archive.ubuntu.com. 
As soon as I want to install packages with large files like linux-firmware, flightgear-data-b… (148 words, Jul 4, 2025)
- [Malware vs. Vulnerability - Sonatype Learn - Sonatype Community](/content/community/t/malware-vs-vulnerability/15067/5/index.html): Hi, folks! 
If you want to understand the current state of the software supply chain, you need to understand the difference between a vulnerability and malware. The short answer is: malware is worse, by an order of magni… (462 words, Jul 3, 2025)
- [Can't launch after upgrade - Sonatype Nexus Repository - Sonatype Community](/content/community/t/cant-launch-after-upgrade/15212/4/index.html): I just upgraded from nexus-3.80.0-06 to nexus-3.81.1-01 and i’m getting this error: 
2025-06-30 15:30:50,940-0500 INFO  [SpringApplicationShutdownHook]  *SYSTEM org.sonatype.nexus.bootstrap.jetty.JettyServer - Stopping
2… (459 words, Jul 2, 2025)
- [403 error when deploy package - Central Repository - Sonatype Community](/content/community/t/403-error-when-deploy-package/15196/7/index.html): I am trying to migrating from OSSRH service to Central Publishing Portal, and I am using jreleaser to publish the package. 
From the log, the variables are loaded from ~/config.toml, and I have tried to set JRELEASER_MAV… (170 words, Jul 1, 2025)
- [cleanup task - Sonatype Nexus Repository - Sonatype Community](/content/community/t/cleanup-task/15218/index.html): local hosted (docker) is not cleaned up. (207 words, Jul 1, 2025)
- [cleanup task - Sonatype Nexus Repository - Sonatype Community](/content/community/t/cleanup-task/15218/1/index.html): local hosted (docker) is not cleaned up. (144 words, Jul 1, 2025)
- [Staging repositories from Central Portal? - Central Repository - Sonatype Community](/content/community/t/staging-repositories-from-central-portal/15217/index.html): I have a project that published to Sonatype’s OSSRH portal which then published to Maven Central.  As we all know Sonatype has shut down OSSRH and moved everyone to Central Portal. 
But the old OSSRH publish process woul… (232 words, Jul 1, 2025)
- [Staging repositories from Central Portal? - Central Repository - Sonatype Community](/content/community/t/staging-repositories-from-central-portal/15217/1/index.html): I have a project that published to Sonatype’s OSSRH portal which then published to Maven Central.  As we all know Sonatype has shut down OSSRH and moved everyone to Central Portal. 
But the old OSSRH publish process woul… (169 words, Jul 1, 2025)
- [Can't launch after upgrade - Sonatype Nexus Repository - Sonatype Community](/content/community/t/cant-launch-after-upgrade/15212/index.html): I just upgraded from nexus-3.80.0-06 to nexus-3.81.1-01 and i’m getting this error: 
2025-06-30 15:30:50,940-0500 INFO  [SpringApplicationShutdownHook]  *SYSTEM org.sonatype.nexus.bootstrap.jetty.JettyServer - Stopping
2… (423 words, Jun 30, 2025)
- [Can't launch after upgrade - Sonatype Nexus Repository - Sonatype Community](/content/community/t/cant-launch-after-upgrade/15212/1/index.html): I just upgraded from nexus-3.80.0-06 to nexus-3.81.1-01 and i’m getting this error: 
2025-06-30 15:30:50,940-0500 INFO  [SpringApplicationShutdownHook]  *SYSTEM org.sonatype.nexus.bootstrap.jetty.JettyServer - Stopping
2… (461 words, Jun 30, 2025)
- [npm repository(proxy remote storage) error - Sonatype Nexus Repository - Sonatype Community](/content/community/t/npm-repository-proxy-remote-storage-error/15207/index.html): Dear Sonatype Support Team, 
We are currently experiencing a strange issue with our Nexus related to an npm repository. 
Here’s the behavior we’re observing: 
Repository > Proxy > Remote storage is set to profer external… (229 words, Jun 30, 2025)
- [npm repository(proxy remote storage) error - Sonatype Nexus Repository - Sonatype Community](/content/community/t/npm-repository-proxy-remote-storage-error/15207/1/index.html): Dear Sonatype Support Team, 
We are currently experiencing a strange issue with our Nexus related to an npm repository. 
Here’s the behavior we’re observing: 
Repository > Proxy > Remote storage is set to profer external… (200 words, Jun 30, 2025)
- [Assign Upload privileges to a role for a specific repository - Sonatype Nexus Repository - Sonatype Community](/content/community/t/assign-upload-privileges-to-a-role-for-a-specific-repository/15194/5/index.html): Hello, 
I want to create a role with upload permissions to a specific repository. 
I assigned the nx-component-upload privilege to the role but the upload is not enabled for the role. 
Which privileges or roles are neede… (274 words, Jun 26, 2025)
- [403 error when deploy package - Central Repository - Sonatype Community](/content/community/t/403-error-when-deploy-package/15196/index.html): I am trying to migrating from OSSRH service to Central Publishing Portal, and I am using jreleaser to publish the package. 
From the log, the variables are loaded from ~/config.toml, and I have tried to set JRELEASER_MAV… (170 words, Jun 26, 2025)
- [403 error when deploy package - Central Repository - Sonatype Community](/content/community/t/403-error-when-deploy-package/15196/1/index.html): I am trying to migrating from OSSRH service to Central Publishing Portal, and I am using jreleaser to publish the package. 
From the log, the variables are loaded from ~/config.toml, and I have tried to set JRELEASER_MAV… (170 words, Jun 26, 2025)
- [Web UI stuck on initializing - Sonatype Nexus Repository - Sonatype Community](/content/community/t/web-ui-stuck-on-initializing/15195/index.html): Hello! 
Since a few weeks my Nexus suddenly stopped working and the Web UI is stuck on initializing. No matter what version I use it is stuck on the same step. I thought it might be because I used an old SSL certificate … (397 words, Jun 26, 2025)
- [Web UI stuck on initializing - Sonatype Nexus Repository - Sonatype Community](/content/community/t/web-ui-stuck-on-initializing/15195/1/index.html): Hello! 
Since a few weeks my Nexus suddenly stopped working and the Web UI is stuck on initializing. No matter what version I use it is stuck on the same step. I thought it might be because I used an old SSL certificate … (441 words, Jun 26, 2025)
- [Assign Upload privileges to a role for a specific repository - Sonatype Nexus Repository - Sonatype Community](/content/community/t/assign-upload-privileges-to-a-role-for-a-specific-repository/15194/index.html): Hello, 
I want to create a role with upload permissions to a specific repository. 
I assigned the nx-component-upload privilege to the role but the upload is not enabled for the role. 
Which privileges or roles are neede… (274 words, Jun 26, 2025)
- [Assign Upload privileges to a role for a specific repository - Sonatype Nexus Repository - Sonatype Community](/content/community/t/assign-upload-privileges-to-a-role-for-a-specific-repository/15194/1/index.html): Hello, 
I want to create a role with upload permissions to a specific repository. 
I assigned the nx-component-upload privilege to the role but the upload is not enabled for the role. 
Which privileges or roles are neede… (239 words, Jun 26, 2025)
- [Deadline Extended: Submit Your Elevate Award Nomination Today - Community Announcements - Sonatype Community](/content/community/t/deadline-extended-submit-your-elevate-award-nomination-today/15156/5/index.html): There’s still time to submit your nomination for the 2025 Sonatype Elevate Awards before the Monday, June 30th deadline. We’re recognizing the teams and individuals transforming software development through secure, sc… (152 words, Jun 23, 2025)
- [Deadline Extended: Submit Your Elevate Award Nomination Today - Community Announcements - Sonatype Community](/content/community/t/deadline-extended-submit-your-elevate-award-nomination-today/15156/index.html): There’s still time to submit your nomination for the 2025 Sonatype Elevate Awards before the Monday, June 30th deadline. We’re recognizing the teams and individuals transforming software development through secure, sc… (147 words, Jun 18, 2025)
- [Deadline Extended: Submit Your Elevate Award Nomination Today - Community Announcements - Sonatype Community](/content/community/t/deadline-extended-submit-your-elevate-award-nomination-today/15156/1/index.html): There’s still time to submit your nomination for the 2025 Sonatype Elevate Awards before the Monday, June 30th deadline. We’re recognizing the teams and individuals transforming software development through secure, sc… (153 words, Jun 18, 2025)
- [OrientDB to Postgres Migration Guide for Nexus Repository - Sonatype Learn - Sonatype Community](/content/community/t/orientdb-to-postgres-migration-guide-for-nexus-repository/15152/index.html): Whitepaper - OrientDB to PostgreSQL Migration Guide.pdf (428.2 KB) 
At Sonatype, we’re well aware that migrations can be frustrating. But with support for OrientDB databases ending early next year, the time to start plan… (362 words, Jun 18, 2025)
- [OrientDB to Postgres Migration Guide for Nexus Repository - Sonatype Learn - Sonatype Community](/content/community/t/orientdb-to-postgres-migration-guide-for-nexus-repository/15152/1/index.html): Whitepaper - OrientDB to PostgreSQL Migration Guide.pdf (428.2 KB) 
At Sonatype, we’re well aware that migrations can be frustrating. But with support for OrientDB databases ending early next year, the time to start plan… (289 words, Jun 18, 2025)
- [Automated Nexus 3 H2-to-PostgreSQL Migration Using Docker – My First Contribution - Sonatype Nexus Repository - Sonatype Community](/content/community/t/automated-nexus-3-h2-to-postgresql-migration-using-docker-my-first-contribution/15151/index.html): Hi all, 
This is my first post here, so be gentle 
I’ve created a Docker container to simplify running the Sonatype Nexus H2-to-PostgreSQL migrator, making it easier to test and use. 
You can find the project here: 

Git… (191 words, Jun 18, 2025)
- [Automated Nexus 3 H2-to-PostgreSQL Migration Using Docker – My First Contribution - Sonatype Nexus Repository - Sonatype Community](/content/community/t/automated-nexus-3-h2-to-postgresql-migration-using-docker-my-first-contribution/15151/1/index.html): Hi all, 
This is my first post here, so be gentle 
I’ve created a Docker container to simplify running the Sonatype Nexus H2-to-PostgreSQL migrator, making it easier to test and use. 
You can find the project here: 

Git… (99 words, Jun 18, 2025)
- [Nexus docker registry is not working over IPV6 trying to login nor the docker image push from local machine - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-docker-registry-is-not-working-over-ipv6-trying-to-login-nor-the-docker-image-push-from-local-machine/14961/8/index.html): "I’m having trouble connecting to my Sonatype Nexus Docker repository via IPv6. My environment is IPv6-only, and while IPv4 connectivity to Nexus works, IPv6 connections are failing. I’ve installed Sonatype Nexus on a Ro… (1,188 words, Jun 18, 2025)
- [Docker: How to remove all manifests without any tags assigned (with groovy or tasks)? - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/docker-how-to-remove-all-manifests-without-any-tags-assigned-with-groovy-or-tasks/15146/index.html): Sonatype Nexus Repository 
COMMUNITY 3.77.2-02 
I am trying to remove all manifests and their related blobs, that have no docker tag assigned. I.e. when I delete a tag in the browse UI, I would like to remove it’s associ… (323 words, Jun 17, 2025)
- [Assistance Required for Migrating Custom Nexus Plugin to Release 3.79 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/assistance-required-for-migrating-custom-nexus-plugin-to-release-3-79/15143/index.html): Hello, 
I’m currently working on upgrading our custom Sonatype Nexus plugin to version 3.79.0-09, but the process has proven to be quite challenging due to the lack of clear documentation. 
I’ve updated the dependencies … (178 words, Jun 17, 2025)
- [Assistance Required for Migrating Custom Nexus Plugin to Release 3.79 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/assistance-required-for-migrating-custom-nexus-plugin-to-release-3-79/15143/1/index.html): Hello, 
I’m currently working on upgrading our custom Sonatype Nexus plugin to version 3.79.0-09, but the process has proven to be quite challenging due to the lack of clear documentation. 
I’ve updated the dependencies … (238 words, Jun 17, 2025)
- [Issues with logback overrides in Nexus 3.80.0-06 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/issues-with-logback-overrides-in-nexus-3-80-0-06/15122/index.html): Hello to all, 
I am configuring logback for Nexus version 3.80.0-06 and have a few questions: 


I am using logback-overrides.xml located at /var/opt/sonatype-work/nexus3/etc/logback/logback-overrides.xml, as described i… (239 words, Jun 12, 2025)
- [Successfully logged into "central.sonatype.com" but failed to log into "s01.oss.sonatype.org" - Sonatype Nexus Repository - Sonatype Community](/content/community/t/successfully-logged-into-central-sonatype-com-but-failed-to-log-into-s01-oss-sonatype-org/15121/index.html): Some of the old publishing accounts I maintain have suddenly been unable to log in to “s01.oss.sonatype.org” recently, which has caused great trouble for my team’s publishing work.I tried to log in to “central.sonatype.c… (175 words, Jun 12, 2025)
- [Successfully logged into "central.sonatype.com" but failed to log into "s01.oss.sonatype.org" - Sonatype Nexus Repository - Sonatype Community](/content/community/t/successfully-logged-into-central-sonatype-com-but-failed-to-log-into-s01-oss-sonatype-org/15121/1/index.html): Some of the old publishing accounts I maintain have suddenly been unable to log in to “s01.oss.sonatype.org” recently, which has caused great trouble for my team’s publishing work.I tried to log in to “central.sonatype.c… (177 words, Jun 12, 2025)
- [How to publish aar through Central Portal - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-to-publish-aar-through-central-portal/15120/index.html): https://central.sonatype.org/publish/publish-portal-maven/ 
The link above is a guide on how to publish jar. We have aar built by CI that needs to be published, but we always encounter problems. After changing the packag… (81 words, Jun 12, 2025)
- [Estimating downtime for changing S3 blob store "Expiration Days" - Sonatype Nexus Repository - Sonatype Community](/content/community/t/estimating-downtime-for-changing-s3-blob-store-expiration-days/15097/3/index.html): We have Nexus Repository 3.76.0, and would like to change the value of the “Expiration Days” for a S3 blob store. 
The configuration page has a message on the very top, which reads: 
Updating the blob store configuration… (426 words, Jun 12, 2025)
- [Behavior of Asset API search/download has changed - Sonatype Nexus Repository - Sonatype Community](/content/community/t/behavior-of-asset-api-search-download-has-changed/15071/2/index.html): We have updated out Nexus Community Edition to version 3.79.1-04 and to me it looks as if the behavior of the Asset API download/search has changed compared to the version we used before the update (3.70.4). 
Before the … (318 words, Jun 11, 2025)
- [Sonatype Nexus Repository 3.81.0 Released - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-repository-3-81-0-released/15099/index.html): Sonatype Nexus Repository 3.81.0 is now available. This release includes an upgrade to Jetty 12, the ability to integrate Sonatype Repository Firewall with Zscaler, and egress information in the licensing usage tab. 
For… (131 words, Jun 10, 2025)
- [Sonatype Nexus Repository 3.81.0 Released - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-repository-3-81-0-released/15099/1/index.html): Sonatype Nexus Repository 3.81.0 is now available. This release includes an upgrade to Jetty 12, the ability to integrate Sonatype Repository Firewall with Zscaler, and egress information in the licensing usage tab. 
For… (113 words, Jun 10, 2025)
- [Estimating downtime for changing S3 blob store "Expiration Days" - Sonatype Nexus Repository - Sonatype Community](/content/community/t/estimating-downtime-for-changing-s3-blob-store-expiration-days/15097/index.html): We have Nexus Repository 3.76.0, and would like to change the value of the “Expiration Days” for a S3 blob store. 
The configuration page has a message on the very top, which reads: 
Updating the blob store configuration… (427 words, Jun 10, 2025)
- [Estimating downtime for changing S3 blob store "Expiration Days" - Sonatype Nexus Repository - Sonatype Community](/content/community/t/estimating-downtime-for-changing-s3-blob-store-expiration-days/15097/1/index.html): We have Nexus Repository 3.76.0, and would like to change the value of the “Expiration Days” for a S3 blob store. 
The configuration page has a message on the very top, which reads: 
Updating the blob store configuration… (427 words, Jun 10, 2025)
- [When nexus decides to delete blobs, and which blobs, if nothing configured to do so - Sonatype Nexus Repository - Sonatype Community](/content/community/t/when-nexus-decides-to-delete-blobs-and-which-blobs-if-nothing-configured-to-do-so/7796/10/index.html): Hello, 
We’re using Sonatype Nexus Repository ManagerOSS 3.30.1-01 with an s3 blobstore and 3 npm repos (hosted, proxy and group) configured with this blobstore, 
I see a lot of objects in s3 bucket with a tag deleted=tr… (670 words, Jun 10, 2025)
- [Nexus can't startup due `NullInjectedIntoNonNullable` on `RemovedAssetSender.java:48` - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-cant-startup-due-nullinjectedintononnullable-on-removedassetsender-java-48/9016/5/index.html): I’m trying develop an integration. But after install my bundle, the Nexus can’t startup. 
I found the following error report in the nexus.log: 
2022-07-22 06:43:39,735+0000 WARN  [FelixStartLevel]  *SYSTEM Sisu - Problem… (343 words, Jun 9, 2025)
- [Nexus Spring Boot Resource - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/nexus-spring-boot-resource/15072/index.html): Can someone please send me a small project (demo project) of the new Nexus repository in a Spring Boot project, or any other related resources about the new Nexus upgrade (>3.78.0) 
I really appreciate any help you can p… (114 words, Jun 4, 2025)
- [Nexus Spring Boot Resource - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/nexus-spring-boot-resource/15072/1/index.html): Can someone please send me a small project (demo project) of the new Nexus repository in a Spring Boot project, or any other related resources about the new Nexus upgrade (>3.78.0) 
I really appreciate any help you can p… (133 words, Jun 4, 2025)
- [Behavior of Asset API search/download has changed - Sonatype Nexus Repository - Sonatype Community](/content/community/t/behavior-of-asset-api-search-download-has-changed/15071/index.html): We have updated out Nexus Community Edition to version 3.79.1-04 and to me it looks as if the behavior of the Asset API download/search has changed compared to the version we used before the update (3.70.4). 
Before the … (317 words, Jun 4, 2025)
- [Behavior of Asset API search/download has changed - Sonatype Nexus Repository - Sonatype Community](/content/community/t/behavior-of-asset-api-search-download-has-changed/15071/1/index.html): We have updated out Nexus Community Edition to version 3.79.1-04 and to me it looks as if the behavior of the Asset API download/search has changed compared to the version we used before the update (3.70.4). 
Before the … (318 words, Jun 4, 2025)
- [Help Needed: Migrating from OrientDB to H2 in Nexus 3.48.0-01 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/help-needed-migrating-from-orientdb-to-h2-in-nexus-3-48-0-01/15032/5/index.html): We’re currently using Nexus Repository Manager OSS version 3.48.0-01 with OrientDB. We’re following this guide to migrate to H2: 
:point_right: Upgrading to H2 database - #4 by judaly 
However, we’re unable to get our ex… (393 words, Jun 4, 2025)
- [Malware vs. Vulnerability - Sonatype Learn - Sonatype Community](/content/community/t/malware-vs-vulnerability/15067/index.html): Hi, folks! 
If you want to understand the current state of the software supply chain, you need to understand the difference between a vulnerability and malware. The short answer is: malware is worse, by an order of magni… (449 words, Jun 3, 2025)
- [Malware vs. Vulnerability - Sonatype Learn - Sonatype Community](/content/community/t/malware-vs-vulnerability/15067/1/index.html): Hi, folks! 
If you want to understand the current state of the software supply chain, you need to understand the difference between a vulnerability and malware. The short answer is: malware is worse, by an order of magni… (462 words, Jun 3, 2025)
- [Help Needed: Migrating from OrientDB to H2 in Nexus 3.48.0-01 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/help-needed-migrating-from-orientdb-to-h2-in-nexus-3-48-0-01/15032/4/index.html): We’re currently using Nexus Repository Manager OSS version 3.48.0-01 with OrientDB. We’re following this guide to migrate to H2: 
:point_right: Upgrading to H2 database - #4 by judaly 
However, we’re unable to get our ex… (396 words, Jun 3, 2025)
- [Help Needed: Migrating from OrientDB to H2 in Nexus 3.48.0-01 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/help-needed-migrating-from-orientdb-to-h2-in-nexus-3-48-0-01/15032/3/index.html): We’re currently using Nexus Repository Manager OSS version 3.48.0-01 with OrientDB. We’re following this guide to migrate to H2: 
:point_right: Upgrading to H2 database - #4 by judaly 
However, we’re unable to get our ex… (393 words, Jun 3, 2025)
- [Reminder: Submit Your Elevate Award Nomination - Community Announcements - Sonatype Community](/content/community/t/reminder-submit-your-elevate-award-nomination/15049/2/index.html): A friendly reminder that nominations are now open for the 2025 Sonatype Elevate Awards! 
These awards recognize customers like you — those leading innovation, driving collaboration, and delivering real impact across t… (122 words, Jun 2, 2025)
- [Reminder: Submit Your Elevate Award Nomination - Community Announcements - Sonatype Community](/content/community/t/reminder-submit-your-elevate-award-nomination/15049/index.html): A friendly reminder that nominations are now open for the 2025 Sonatype Elevate Awards! 
These awards recognize customers like you — those leading innovation, driving collaboration, and delivering real impact across t… (129 words, Jun 2, 2025)
- [Reminder: Submit Your Elevate Award Nomination - Community Announcements - Sonatype Community](/content/community/t/reminder-submit-your-elevate-award-nomination/15049/1/index.html): A friendly reminder that nominations are now open for the 2025 Sonatype Elevate Awards! 
These awards recognize customers like you — those leading innovation, driving collaboration, and delivering real impact across t… (122 words, Jun 2, 2025)
- [I'm not able to "Settings icon" though I have admin access in Nexus - Sonatype Nexus Repository - Sonatype Community](/content/community/t/im-not-able-to-settings-icon-though-i-have-admin-access-in-nexus/15045/4/index.html): Hi Everyone, 
I have nx-admin role in Nexus repository, and I was able to perform admin activities before. But, now suddenly, I’m not able to see “Settings” icon. We are the tools support team, and nobody can help us in … (274 words, Jun 2, 2025)
- [Admin rights are not working suddenly in Nexus - Sonatype Nexus Repository - Sonatype Community](/content/community/t/admin-rights-are-not-working-suddenly-in-nexus/15044/2/index.html): I have nx-admin rights in Nexus, and I was able to perform admin activities before. But, suddenly, I’m not able to see “Settings” icon. Please help ASAP. My priority works are getting delayed because of this. (91 words, Jun 2, 2025)
- [I'm not able to "Settings icon" though I have admin access in Nexus - Sonatype Nexus Repository - Sonatype Community](/content/community/t/im-not-able-to-settings-icon-though-i-have-admin-access-in-nexus/15045/index.html): Hi Everyone, 
I have nx-admin role in Nexus repository, and I was able to perform admin activities before. But, now suddenly, I’m not able to see “Settings” icon. We are the tools support team, and nobody can help us in … (273 words, Jun 2, 2025)
- [Help Needed: Migrating from OrientDB to H2 in Nexus 3.48.0-01 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/help-needed-migrating-from-orientdb-to-h2-in-nexus-3-48-0-01/15032/2/index.html): We’re currently using Nexus Repository Manager OSS version 3.48.0-01 with OrientDB. We’re following this guide to migrate to H2: 
:point_right: Upgrading to H2 database - #4 by judaly 
However, we’re unable to get our ex… (398 words, Jun 2, 2025)
- [Admin rights are not working suddenly in Nexus - Sonatype Nexus Repository - Sonatype Community](/content/community/t/admin-rights-are-not-working-suddenly-in-nexus/15044/index.html): I have nx-admin rights in Nexus, and I was able to perform admin activities before. But, suddenly, I’m not able to see “Settings” icon. Please help ASAP. My priority works are getting delayed because of this. (97 words, Jun 2, 2025)
- [Admin rights are not working suddenly in Nexus - Sonatype Nexus Repository - Sonatype Community](/content/community/t/admin-rights-are-not-working-suddenly-in-nexus/15044/1/index.html): I have nx-admin rights in Nexus, and I was able to perform admin activities before. But, suddenly, I’m not able to see “Settings” icon. Please help ASAP. My priority works are getting delayed because of this. (98 words, Jun 2, 2025)
- [Opt out of telemetry - Sonatype Nexus Repository - Sonatype Community](/content/community/t/opt-out-of-telemetry/15042/index.html): How do I opt out of telemetry? 
I see this in the outbound-request.log 
https://clm.sonatype.com/user-telemetry/v1/rte/api/v1/feature/client (266 words, Jun 1, 2025)
- [Opt out of telemetry - Sonatype Nexus Repository - Sonatype Community](/content/community/t/opt-out-of-telemetry/15042/1/index.html): How do I opt out of telemetry? 
I see this in the outbound-request.log 
https://clm.sonatype.com/user-telemetry/v1/rte/api/v1/feature/client (266 words, Jun 1, 2025)
- [LDAP Lockout policy in Nexus Community Edition - Sonatype Nexus Repository - Sonatype Community](/content/community/t/ldap-lockout-policy-in-nexus-community-edition/15033/index.html): Our Nexus 3.80.0 server is connected to and is authenticating against our active directory server binding using a service account. 
However, this seems to bypass the server’s lockout policy, as the users can fail to auth… (103 words, May 30, 2025)
- [LDAP Lockout policy in Nexus Community Edition - Sonatype Nexus Repository - Sonatype Community](/content/community/t/ldap-lockout-policy-in-nexus-community-edition/15033/1/index.html): Our Nexus 3.80.0 server is connected to and is authenticating against our active directory server binding using a service account. 
However, this seems to bypass the server’s lockout policy, as the users can fail to auth… (116 words, May 30, 2025)
- [Oracle Cloud Infrastructure S3 for blob store - Sonatype Nexus Repository - Sonatype Community](/content/community/t/oracle-cloud-infrastructure-s3-for-blob-store/7480/6/index.html): Hi All, 
is it possible to use OCI S3 instead of AWS S3 to configure blob stores ? 
Thanks (370 words, May 30, 2025)
- [Help Needed: Migrating from OrientDB to H2 in Nexus 3.48.0-01 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/help-needed-migrating-from-orientdb-to-h2-in-nexus-3-48-0-01/15032/index.html): We’re currently using Nexus Repository Manager OSS version 3.48.0-01 with OrientDB. We’re following this guide to migrate to H2: 
:point_right: Upgrading to H2 database - #4 by judaly 
However, we’re unable to get our ex… (388 words, May 30, 2025)
- [Help Needed: Migrating from OrientDB to H2 in Nexus 3.48.0-01 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/help-needed-migrating-from-orientdb-to-h2-in-nexus-3-48-0-01/15032/1/index.html): We’re currently using Nexus Repository Manager OSS version 3.48.0-01 with OrientDB. We’re following this guide to migrate to H2: 
:point_right: Upgrading to H2 database - #4 by judaly 
However, we’re unable to get our ex… (392 words, May 30, 2025)
- [Swift Package Manager (SPM / SwiftPM) repositories support - Sonatype Nexus Repository - Sonatype Community](/content/community/t/swift-package-manager-spm-swiftpm-repositories-support/9835/11/index.html): Good morning, 
With the release of Swift 5.7, SwiftPM now supports Package Registry Service. We are very interested on migrating from CocoaPods to SwiftPM while still using Nexus to manage our repositories. 
Is this on y… (255 words, May 28, 2025)
- [Update Your IQ Server License Threat Groups - Sonatype Labs - Sonatype Community](/content/community/t/update-your-iq-server-license-threat-groups/3094/59/index.html): The license threat group updater will apply the latest Sonatype provided license classification to your running IQ server’s license threat groups. This will alleviate any “License Threat Group not Assigned” policy violat… (517 words, May 27, 2025)
- [Nexus Docker Hub Proxy help needed - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-docker-hub-proxy-help-needed/14844/8/index.html): Hi, 
I’m having trouble getting Nexus Docker Hub proxy to work. I have successfully created proxies in Nexus previously for apt, yum and pypi repositories without any difficulty but am struggling with this one. My Nexus … (1,106 words, May 22, 2025)
- [Nexus 3.63.0 OSS UnsupportedHttpSchemeException: Unsupported HTTP Scheme: https - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-3-63-0-oss-unsupportedhttpschemeexception-unsupported-http-scheme-https/14994/1/index.html): I have configured Nexus 3 in docker-compose with HTTPS support, webUI opens in the browser as https://nexus.mycompany.com:8443 
here is my jetty-https.xml file: 
<?xml version="1.0"?>


  
    
      
        
        
 … (268 words, May 22, 2025)
- [Setup SMTP Mail via M365 (smtp.office365.com) - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/setup-smtp-mail-via-m365-smtp-office365-com/14977/4/index.html): Hi, 
I would like to setup SMTP mail via M365. 
Mail verification does not work. 
Failed to invoke action method: coreui_Email.sendVerification, java-method: org.sonatype.nexus.coreui.EmailComponent.sendVerification
org.… (267 words, May 20, 2025)
- [Setup SMTP Mail via M365 (smtp.office365.com) - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/setup-smtp-mail-via-m365-smtp-office365-com/14977/3/index.html): Hi, 
I would like to setup SMTP mail via M365. 
Mail verification does not work. 
Failed to invoke action method: coreui_Email.sendVerification, java-method: org.sonatype.nexus.coreui.EmailComponent.sendVerification
org.… (375 words, May 20, 2025)
- [Setup SMTP Mail via M365 (smtp.office365.com) - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/setup-smtp-mail-via-m365-smtp-office365-com/14977/2/index.html): Hi, 
I would like to setup SMTP mail via M365. 
Mail verification does not work. 
Failed to invoke action method: coreui_Email.sendVerification, java-method: org.sonatype.nexus.coreui.EmailComponent.sendVerification
org.… (294 words, May 20, 2025)
- [Cleanup policies do not completely remove objects - Sonatype Nexus Repository - Sonatype Community](/content/community/t/cleanup-policies-do-not-completely-remove-objects/14976/2/index.html): When deleting an object using the cleanup policy, the object is deleted, but a mirror copy of the object name remains, but as an empty directory. Previously, when updating or migrating data in Postgresql, there were no s… (75 words, May 19, 2025)
- [Setup SMTP Mail via M365 (smtp.office365.com) - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/setup-smtp-mail-via-m365-smtp-office365-com/14977/index.html): Hi, 
I would like to setup SMTP mail via M365. 
Mail verification does not work. 
Failed to invoke action method: coreui_Email.sendVerification, java-method: org.sonatype.nexus.coreui.EmailComponent.sendVerification
org.… (272 words, May 19, 2025)
- [Setup SMTP Mail via M365 (smtp.office365.com) - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/setup-smtp-mail-via-m365-smtp-office365-com/14977/1/index.html): Hi, 
I would like to setup SMTP mail via M365. 
Mail verification does not work. 
Failed to invoke action method: coreui_Email.sendVerification, java-method: org.sonatype.nexus.coreui.EmailComponent.sendVerification
org.… (187 words, May 19, 2025)
- [Cleanup policies do not completely remove objects - Sonatype Nexus Repository - Sonatype Community](/content/community/t/cleanup-policies-do-not-completely-remove-objects/14976/index.html): When deleting an object using the cleanup policy, the object is deleted, but a mirror copy of the object name remains, but as an empty directory. Previously, when updating or migrating data in Postgresql, there were no s… (134 words, May 19, 2025)
- [Access error to endpoint /service/rest/v1/reconcile/list/ - Sonatype Nexus Repository - Sonatype Community](/content/community/t/access-error-to-endpoint-service-rest-v1-reconcile-list/14958/2/index.html): I constantly see errors in the logs about accessing an endpoint. What could be causing this error, and how can I fix it? 
2025-05-16 10:56:40,073+0300 ERROR [qtp20408451-247824]  admin com.sonatype.analytics.internal.fil… (102 words, May 19, 2025)
- [Docker login 401 Unauthorized only on hosted and proxy registry - Sonatype Nexus Repository - Sonatype Community](/content/community/t/docker-login-401-unauthorized-only-on-hosted-and-proxy-registry/14973/1/index.html): Hello , 
I am using nexus as a Docker container. 
For my case, I create a blog-store and create three docker registry repository, one hosted and one group. I try to log in on group and it works fine. But when I tried to … (155 words, May 19, 2025)
- [Nexus docker registry is not working over IPV6 trying to login nor the docker image push from local machine - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-docker-registry-is-not-working-over-ipv6-trying-to-login-nor-the-docker-image-push-from-local-machine/14961/index.html): "I’m having trouble connecting to my Sonatype Nexus Docker repository via IPv6. My environment is IPv6-only, and while IPv4 connectivity to Nexus works, IPv6 connections are failing. I’ve installed Sonatype Nexus on a Ro… (778 words, May 16, 2025)
- [State and future of Composer support (community plugin clashes with official implementation) - Sonatype Nexus Repository - Sonatype Community](/content/community/t/state-and-future-of-composer-support-community-plugin-clashes-with-official-implementation/14337/8/index.html): Hi, 
I’ve been working on the Nexus Repository Composer Format community plugin (sonatype-nexus-community/nexus-repository-composer on GitHub) recently including major refactoring for compatibility with Nexus 3.71+ datas… (1,010 words, May 16, 2025)
- [Issue with Cleanup Policies: Preview displays artifact but they are not cleaned when the cleanup task run - Sonatype Nexus Repository - Sonatype Community](/content/community/t/issue-with-cleanup-policies-preview-displays-artifact-but-they-are-not-cleaned-when-the-cleanup-task-run/14960/index.html): Hello, 
I have an issue with Nexus Cleanup Policies. I can’t make it work properly. Maybe I’m missing something. 
General information 

Nexus version: Community 3.80.0-06
Saturated: No
Read-only: No
Database: H2
Blobstor… (781 words, May 16, 2025)
- [Issue with Cleanup Policies: Preview displays artifact but they are not cleaned when the cleanup task run - Sonatype Nexus Repository - Sonatype Community](/content/community/t/issue-with-cleanup-policies-preview-displays-artifact-but-they-are-not-cleaned-when-the-cleanup-task-run/14960/1/index.html): Hello, 
I have an issue with Nexus Cleanup Policies. I can’t make it work properly. Maybe I’m missing something. 
General information 

Nexus version: Community 3.80.0-06
Saturated: No
Read-only: No
Database: H2
Blobstor… (1,330 words, May 16, 2025)
- [anonymous connect to https://registry-1.docker.io:443 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/anonymous-connect-to-https-registry-1-docker-io-443/14959/index.html): In the Nexus logs, there is a line about an unsuccessful connection to Docker Hub as an anonymous user for the proxy repository, even though the repository settings explicitly specify an account. Why does this happen? Is… (157 words, May 16, 2025)
- [anonymous connect to https://registry-1.docker.io:443 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/anonymous-connect-to-https-registry-1-docker-io-443/14959/1/index.html): In the Nexus logs, there is a line about an unsuccessful connection to Docker Hub as an anonymous user for the proxy repository, even though the repository settings explicitly specify an account. Why does this happen? Is… (167 words, May 16, 2025)
- [Access error to endpoint /service/rest/v1/reconcile/list/ - Sonatype Nexus Repository - Sonatype Community](/content/community/t/access-error-to-endpoint-service-rest-v1-reconcile-list/14958/index.html): I constantly see errors in the logs about accessing an endpoint. What could be causing this error, and how can I fix it? 
2025-05-16 10:56:40,073+0300 ERROR [qtp20408451-247824]  admin com.sonatype.analytics.internal.fil… (102 words, May 16, 2025)
- [Access error to endpoint /service/rest/v1/reconcile/list/ - Sonatype Nexus Repository - Sonatype Community](/content/community/t/access-error-to-endpoint-service-rest-v1-reconcile-list/14958/1/index.html): I constantly see errors in the logs about accessing an endpoint. What could be causing this error, and how can I fix it? 
2025-05-16 10:56:40,073+0300 ERROR [qtp20408451-247824]  admin com.sonatype.analytics.internal.fil… (102 words, May 16, 2025)
- [Nexus failing after upgrade from nexus-3.73.0-12-win64 -->nexus-3.80.0-06-win-x86_64 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-failing-after-upgrade-from-nexus-3-73-0-12-win64-nexus-3-80-0-06-win-x86-64/14956/2/index.html): Hello 
I have upgraded from nexus-3.73.0-12-win64 to nexus-3.80.0-06-win-x86_64, and the server can no longer start. The service returns the following message: 
  
Nothing is written to the log file, as the server does n… (128 words, May 16, 2025)
- [Nexus failing after upgrade from nexus-3.73.0-12-win64 -->nexus-3.80.0-06-win-x86_64 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-failing-after-upgrade-from-nexus-3-73-0-12-win64-nexus-3-80-0-06-win-x86-64/14956/index.html): Hello 
I have upgraded from nexus-3.73.0-12-win64 to nexus-3.80.0-06-win-x86_64, and the server can no longer start. The service returns the following message: 
  
Nothing is written to the log file, as the server does n… (110 words, May 16, 2025)
- [Nexus failing after upgrade from nexus-3.73.0-12-win64 -->nexus-3.80.0-06-win-x86_64 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-failing-after-upgrade-from-nexus-3-73-0-12-win64-nexus-3-80-0-06-win-x86-64/14956/1/index.html): Hello 
I have upgraded from nexus-3.73.0-12-win64 to nexus-3.80.0-06-win-x86_64, and the server can no longer start. The service returns the following message: 
  
Nothing is written to the log file, as the server does n… (130 words, May 16, 2025)
- [Nexus service was not starting after upgrading to OSS 3.75.1-01 from OSS 3.71.0-06 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-service-was-not-starting-after-upgrading-to-oss-3-75-1-01-from-oss-3-71-0-06/14945/index.html): Currently i was on Sonatype Nexus Repository OSS 3.71.0-06 , H2 DB and Java 17(openjdk-17.0.15+6-linux-x64).  Can someone help me to understand what’s wrong here? 
Same problem identified when upgrading from OSS 3.71.0-0… (362 words, May 15, 2025)
- [Nexus service was not starting after upgrading to OSS 3.75.1-01 from OSS 3.71.0-06 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-service-was-not-starting-after-upgrading-to-oss-3-75-1-01-from-oss-3-71-0-06/14945/1/index.html): Currently i was on Sonatype Nexus Repository OSS 3.71.0-06 , H2 DB and Java 17(openjdk-17.0.15+6-linux-x64).  Can someone help me to understand what’s wrong here? 
Same problem identified when upgrading from OSS 3.71.0-0… (355 words, May 15, 2025)
- [Docker login 401 Unauthorized - Sonatype Nexus Repository - Sonatype Community](/content/community/t/docker-login-401-unauthorized/1345/25/index.html): Hello , 
I am using nexus as a Docker container, with tag sonatype/nexus3:3.14.0. Also, I connect nexus with LDAP for user better user management it is helpful for group and role management. 
For my case, I create a blog… (915 words, May 15, 2025)
- [NPM REST API command using account and password - Sonatype Nexus Repository - Sonatype Community](/content/community/t/npm-rest-api-command-using-account-and-password/14913/2/index.html): Hello, 
Nexus OSS doesn’t seem to support user token.  Can you please help what is the command with user account and password to download/upload NPM package in Curl or REST API? 
Thanks, 
Chang (182 words, May 12, 2025)
- [CSV Report file Cleanup Policy Report Export Empty File - Sonatype Nexus Repository - Sonatype Community](/content/community/t/csv-report-file-cleanup-policy-report-export-empty-file/14924/index.html): I found a bug, after I switched from the H2 database to Postgres in CE, the cleaning policies stopped working. Also, an unload with a (CSV) file appeared. Nexus unloads an empty file. If Component Age is unchecked, it wi… (129 words, May 12, 2025)
- [CSV Report file Cleanup Policy Report Export Empty File - Sonatype Nexus Repository - Sonatype Community](/content/community/t/csv-report-file-cleanup-policy-report-export-empty-file/14924/1/index.html): I found a bug, after I switched from the H2 database to Postgres in CE, the cleaning policies stopped working. Also, an unload with a (CSV) file appeared. Nexus unloads an empty file. If Component Age is unchecked, it wi… (198 words, May 12, 2025)
- [Nexus Pro Performance - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-pro-performance/14907/5/index.html): Hi all! 
I noticed that my nexus pro repository instance at version 3.77.1-01 that I also use as a proxy to maven central, is too slow in resolving dependencies (I use maven) using the mirror instead of not using it (goi… (553 words, May 12, 2025)
- [Nexus SSL configuration help - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-ssl-configuration-help/14840/6/index.html): Hello, 
I’m trying to apply my SSL certificate to SonaType Nexus Repo Manager 3. 
I’m using the following commands to generate the keystore: 
keytool -genkey -alias myalias -keyalg RSA -keystore /opt/sonatype/nexus/sonat… (329 words, May 9, 2025)
- [NPM REST API command using account and password - Sonatype Nexus Repository - Sonatype Community](/content/community/t/npm-rest-api-command-using-account-and-password/14913/index.html): Hello, 
Nexus OSS doesn’t seem to support user token.  Can you please help what is the command with user account and password to download/upload NPM package in Curl or REST API? 
Thanks, 
Chang (182 words, May 9, 2025)
- [NPM REST API command using account and password - Sonatype Nexus Repository - Sonatype Community](/content/community/t/npm-rest-api-command-using-account-and-password/14913/1/index.html): Hello, 
Nexus OSS doesn’t seem to support user token.  Can you please help what is the command with user account and password to download/upload NPM package in Curl or REST API? 
Thanks, 
Chang (182 words, May 9, 2025)
- [Nexus Pro Performance - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-pro-performance/14907/index.html): Hi all! 
I noticed that my nexus pro repository instance at version 3.77.1-01 that I also use as a proxy to maven central, is too slow in resolving dependencies (I use maven) using the mirror instead of not using it (goi… (554 words, May 8, 2025)
- [Nexus Pro Performance - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-pro-performance/14907/1/index.html): Hi all! 
I noticed that my nexus pro repository instance at version 3.77.1-01 that I also use as a proxy to maven central, is too slow in resolving dependencies (I use maven) using the mirror instead of not using it (goi… (552 words, May 8, 2025)
- [Sonatype Nexus Repository 3.80.0 Released - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-repository-3-80-0-released/14898/index.html): Sonatype Nexus Repository 3.80.0 is now available. 
This version features a modernized, React-based UI, new usage insights, and improved blob store cleanup management. 
For full details, see the Sonatype Nexus Repository… (105 words, May 6, 2025)
- [Sonatype Nexus Repository 3.80.0 Released - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-repository-3-80-0-released/14898/1/index.html): Sonatype Nexus Repository 3.80.0 is now available. 
This version features a modernized, React-based UI, new usage insights, and improved blob store cleanup management. 
For full details, see the Sonatype Nexus Repository… (102 words, May 6, 2025)
- [Nexus can't startup due `NullInjectedIntoNonNullable` on `RemovedAssetSender.java:48` - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-cant-startup-due-nullinjectedintononnullable-on-removedassetsender-java-48/9016/4/index.html): I’m trying develop an integration. But after install my bundle, the Nexus can’t startup. 
I found the following error report in the nexus.log: 
2022-07-22 06:43:39,735+0000 WARN  [FelixStartLevel]  *SYSTEM Sisu - Problem… (338 words, May 6, 2025)
- [Timing out on nexus npm proxy with gradle on node plugin - Sonatype Nexus Repository - Sonatype Community](/content/community/t/timing-out-on-nexus-npm-proxy-with-gradle-on-node-plugin/14882/3/index.html): We have a gradle with node plugin, these are the settings, 
plugins {
	id 'java'
	id 'java-library'
	id "org.springframework.boot" version "2.7.15"
	id "com.github.node-gradle.node" version "3.5.1"
}

node {
    version … (300 words, May 5, 2025)
- [CSV File export does not work - it uploads an empty file - Sonatype Nexus Repository - Sonatype Community](/content/community/t/csv-file-export-does-not-work-it-uploads-an-empty-file/14887/index.html): Unloading of deletion rules does not work, an empty CSV file is unloaded. CSV is filled if Component Age is empty. It is impossible to estimate which files are deleted. This is clearly a bug. 
3.79.1-04 (139 words, May 5, 2025)
- [CSV File export does not work - it uploads an empty file - Sonatype Nexus Repository - Sonatype Community](/content/community/t/csv-file-export-does-not-work-it-uploads-an-empty-file/14887/1/index.html): Unloading of deletion rules does not work, an empty CSV file is unloaded. CSV is filled if Component Age is empty. It is impossible to estimate which files are deleted. This is clearly a bug. 
3.79.1-04 (59 words, May 5, 2025)
- [How to configure the idle session timeout for Nexus IQ? - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/how-to-configure-the-idle-session-timeout-for-nexus-iq/7693/3/index.html): Is it possible to configure a custom time other than the default 30 minutes for Nexus IQ idle session timeout? If so, how? (99 words, May 5, 2025)
- [Timing out on nexus npm proxy with gradle on node plugin - Sonatype Nexus Repository - Sonatype Community](/content/community/t/timing-out-on-nexus-npm-proxy-with-gradle-on-node-plugin/14882/index.html): We have a gradle with node plugin, these are the settings, 
plugins {
	id 'java'
	id 'java-library'
	id "org.springframework.boot" version "2.7.15"
	id "com.github.node-gradle.node" version "3.5.1"
}

node {
    version … (280 words, May 4, 2025)
- [Timing out on nexus npm proxy with gradle on node plugin - Sonatype Nexus Repository - Sonatype Community](/content/community/t/timing-out-on-nexus-npm-proxy-with-gradle-on-node-plugin/14882/1/index.html): We have a gradle with node plugin, these are the settings, 
plugins {
	id 'java'
	id 'java-library'
	id "org.springframework.boot" version "2.7.15"
	id "com.github.node-gradle.node" version "3.5.1"
}

node {
    version … (282 words, May 4, 2025)
- [Sonatype Repository Firewall Is About to Get Even Better! - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/sonatype-repository-firewall-is-about-to-get-even-better/14863/3/index.html): We’ve added some awesome new features to Repository Firewall to help you tackle open source malware earlier and more easily—whether you’re coding at your workstation, working with containers, or experimenting with AI. 
H… (177 words, May 2, 2025)
- [HandlerContributor not extending custom ContributedHandler with datastore enabled - Sonatype Nexus Repository - Sonatype Community](/content/community/t/handlercontributor-not-extending-custom-contributedhandler-with-datastore-enabled/13560/5/index.html): Hello! 
Im developing plugin extension for nexus3, using 3.59.0 version with docker. With default run settings everyting is ok, but for some reason, if run a container with datastore enabled(Dnexus.datastore.enabled=true… (154 words, Apr 30, 2025)
- [Nexus bundle not getting called in Nexus 3.74 - 3.77 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-bundle-not-getting-called-in-nexus-3-74-3-77/14866/3/index.html): Hello. 
As I understand, bundles have been deprecated for 3.78 and onwards. 
But for Nexus 3.74 to 3.77 I cannot get Nexus to even call the the class that implements ContributedHandler. 
My plugin is working fine in vers… (158 words, Apr 30, 2025)
- [nexus-public build problems - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-public-build-problems/14872/index.html): Hello Team, 
I’m trying to build nexus-publicusing the below command by skipping the tests as I had problems when building without skiptests. 
./mvnw clean install -DskipTests -Dpublic 
When running with skipTests with d… (314 words, Apr 30, 2025)
- [nexus-public build problems - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-public-build-problems/14872/1/index.html): Hello Team, 
I’m trying to build nexus-publicusing the below command by skipping the tests as I had problems when building without skiptests. 
./mvnw clean install -DskipTests -Dpublic 
When running with skipTests with d… (334 words, Apr 30, 2025)
- [HandlerContributor not extending custom ContributedHandler with datastore enabled - Sonatype Nexus Repository - Sonatype Community](/content/community/t/handlercontributor-not-extending-custom-contributedhandler-with-datastore-enabled/13560/4/index.html): Hello! 
Im developing plugin extension for nexus3, using 3.59.0 version with docker. With default run settings everyting is ok, but for some reason, if run a container with datastore enabled(Dnexus.datastore.enabled=true… (180 words, Apr 30, 2025)
- [[rust/cargo registry] cargo publish creates an invalid index entry - Sonatype Nexus Repository - Sonatype Community](/content/community/t/rust-cargo-registry-cargo-publish-creates-an-invalid-index-entry/14864/2/index.html): Hello, 
I have a problem regarding the cargo registry on the Nexus I deployed. 
When trying to publish a crate to it, it pushes a broken index. 
Cargo error when trying to fetch said crate : 
Failed to select a version f… (338 words, Apr 29, 2025)
- [Nexus bundle not getting called in Nexus 3.74 - 3.77 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-bundle-not-getting-called-in-nexus-3-74-3-77/14866/index.html): Hello. 
As I understand, bundles have been deprecated for 3.78 and onwards. 
But for Nexus 3.74 to 3.77 I cannot get Nexus to even call the the class that implements ContributedHandler. 
My plugin is working fine in vers… (158 words, Apr 29, 2025)
- [Nexus bundle not getting called in Nexus 3.74 - 3.77 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-bundle-not-getting-called-in-nexus-3-74-3-77/14866/1/index.html): Hello. 
As I understand, bundles have been deprecated for 3.78 and onwards. 
But for Nexus 3.74 to 3.77 I cannot get Nexus to even call the the class that implements ContributedHandler. 
My plugin is working fine in vers… (158 words, Apr 29, 2025)
- [Docker pull suddenly fails with unknown blob error from proxy repository - Sonatype Nexus Repository - Sonatype Community](/content/community/t/docker-pull-suddenly-fails-with-unknown-blob-error-from-proxy-repository/14865/index.html): We have a docker-proxy repository which is proxying docker hub. This repository has been in our configuration for many years without issue. Suddenly a few days ago we started getting errors when pulling an image which ha… (377 words, Apr 29, 2025)
- [Docker pull suddenly fails with unknown blob error from proxy repository - Sonatype Nexus Repository - Sonatype Community](/content/community/t/docker-pull-suddenly-fails-with-unknown-blob-error-from-proxy-repository/14865/1/index.html): We have a docker-proxy repository which is proxying docker hub. This repository has been in our configuration for many years without issue. Suddenly a few days ago we started getting errors when pulling an image which ha… (377 words, Apr 29, 2025)
- [[rust/cargo registry] cargo publish creates an invalid index entry - Sonatype Nexus Repository - Sonatype Community](/content/community/t/rust-cargo-registry-cargo-publish-creates-an-invalid-index-entry/14864/index.html): Hello, 
I have a problem regarding the cargo registry on the Nexus I deployed. 
When trying to publish a crate to it, it pushes a broken index. 
Cargo error when trying to fetch said crate : 
Failed to select a version f… (338 words, Apr 29, 2025)
- [[rust/cargo registry] cargo publish creates an invalid index entry - Sonatype Nexus Repository - Sonatype Community](/content/community/t/rust-cargo-registry-cargo-publish-creates-an-invalid-index-entry/14864/1/index.html): Hello, 
I have a problem regarding the cargo registry on the Nexus I deployed. 
When trying to publish a crate to it, it pushes a broken index. 
Cargo error when trying to fetch said crate : 
Failed to select a version f… (338 words, Apr 29, 2025)
- [Sonatype Repository Firewall Is About to Get Even Better! - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/sonatype-repository-firewall-is-about-to-get-even-better/14863/index.html): We’ve added some awesome new features to Repository Firewall to help you tackle open source malware earlier and more easily—whether you’re coding at your workstation, working with containers, or experimenting with AI. 
H… (241 words, Apr 29, 2025)
- [Sonatype Repository Firewall Is About to Get Even Better! - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/sonatype-repository-firewall-is-about-to-get-even-better/14863/1/index.html): We’ve added some awesome new features to Repository Firewall to help you tackle open source malware earlier and more easily—whether you’re coding at your workstation, working with containers, or experimenting with AI. 
H… (239 words, Apr 29, 2025)
- [The rules stopped working Cleanup Policies - Sonatype Nexus Repository - Sonatype Community](/content/community/t/the-rules-stopped-working-cleanup-policies/14862/index.html): The deletion rules for the raw repository have stopped working; stinging may not work for other repositories either. Also the CSV is uploaded empty - this looks like a bug 
Rules 100% were previously working 
How to retu… (65 words, Apr 29, 2025)
- [The rules stopped working Cleanup Policies - Sonatype Nexus Repository - Sonatype Community](/content/community/t/the-rules-stopped-working-cleanup-policies/14862/1/index.html): The deletion rules for the raw repository have stopped working; stinging may not work for other repositories either. Also the CSV is uploaded empty - this looks like a bug 
Rules 100% were previously working 
How to retu… (62 words, Apr 29, 2025)
- [Tagging multiple different artifact types. - Sonatype Nexus Repository - Sonatype Community](/content/community/t/tagging-multiple-different-artifact-types/14860/index.html): I have a question, lately we got license for Nexus Repository Pro and I’m interested tagging feature. 
I’ve read documentation but didn’t find what I need beside using RestAPI and PUT request to add tags, but that is not… (122 words, Apr 29, 2025)
- [Tagging multiple different artifact types. - Sonatype Nexus Repository - Sonatype Community](/content/community/t/tagging-multiple-different-artifact-types/14860/1/index.html): I have a question, lately we got license for Nexus Repository Pro and I’m interested tagging feature. 
I’ve read documentation but didn’t find what I need beside using RestAPI and PUT request to add tags, but that is not… (124 words, Apr 29, 2025)
- [2025 Elevate Awards: Submissions Now Open - Community Announcements - Sonatype Community](/content/community/t/2025-elevate-awards-submissions-now-open/14856/2/index.html): We’re excited to share that nominations are now open for the 2025 Sonatype Elevate Awards! 
These awards recognize customers like you — those leading innovation, driving collaboration, and delivering real impact acros… (121 words, Apr 28, 2025)
- [2025 Elevate Awards: Submissions Now Open - Community Announcements - Sonatype Community](/content/community/t/2025-elevate-awards-submissions-now-open/14856/index.html): We’re excited to share that nominations are now open for the 2025 Sonatype Elevate Awards! 
These awards recognize customers like you — those leading innovation, driving collaboration, and delivering real impact acros… (123 words, Apr 28, 2025)
- [2025 Elevate Awards: Submissions Now Open - Community Announcements - Sonatype Community](/content/community/t/2025-elevate-awards-submissions-now-open/14856/1/index.html): We’re excited to share that nominations are now open for the 2025 Sonatype Elevate Awards! 
These awards recognize customers like you — those leading innovation, driving collaboration, and delivering real impact acros… (195 words, Apr 28, 2025)
- [Nexus OSS 3.76.1 - Recalculate blob storage Question - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-oss-3-76-1-recalculate-blob-storage-question/14852/index.html): Hello, 
we’ve recently updated our Nexus OSS instance from 3.70 to 3.76 and performed the migration from OrientDB to H2. 
One thing we’ve noticed, was that the blob storage display is showing us values way too low for wh… (157 words, Apr 28, 2025)
- [Nexus OSS 3.76.1 - Recalculate blob storage Question - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-oss-3-76-1-recalculate-blob-storage-question/14852/1/index.html): Hello, 
we’ve recently updated our Nexus OSS instance from 3.70 to 3.76 and performed the migration from OrientDB to H2. 
One thing we’ve noticed, was that the blob storage display is showing us values way too low for wh… (160 words, Apr 28, 2025)
- [State and future of Composer support (community plugin clashes with official implementation) - Sonatype Nexus Repository - Sonatype Community](/content/community/t/state-and-future-of-composer-support-community-plugin-clashes-with-official-implementation/14337/7/index.html): Hi, 
I’ve been working on the Nexus Repository Composer Format community plugin (sonatype-nexus-community/nexus-repository-composer on GitHub) recently including major refactoring for compatibility with Nexus 3.71+ datas… (1,006 words, Apr 25, 2025)
- [Nexus Docker Hub Proxy help needed - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-docker-hub-proxy-help-needed/14844/index.html): Hi, 
I’m having trouble getting Nexus Docker Hub proxy to work. I have successfully created proxies in Nexus previously for apt, yum and pypi repositories without any difficulty but am struggling with this one. My Nexus … (1,106 words, Apr 25, 2025)
- [Nexus Docker Hub Proxy help needed - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-docker-hub-proxy-help-needed/14844/1/index.html): Hi, 
I’m having trouble getting Nexus Docker Hub proxy to work. I have successfully created proxies in Nexus previously for apt, yum and pypi repositories without any difficulty but am struggling with this one. My Nexus … (1,106 words, Apr 25, 2025)
- [Nexus Core Build - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/nexus-core-build/14827/2/index.html): Hello Team, 
I have few questions on nexus core. I have highlighted them below. 

I need to know if there is any docker images available for nexus-core in docker hub. If not please let me know the steps to build a docker… (158 words, Apr 25, 2025)
- [Nexus SSL configuration help - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-ssl-configuration-help/14840/1/index.html): Hello, 
I’m trying to apply my SSL certificate to SonaType Nexus Repo Manager 3. 
I’m using the following commands to generate the keystore: 
keytool -genkey -alias myalias -keyalg RSA -keystore /opt/sonatype/nexus/sonat… (326 words, Apr 24, 2025)
- [Missing upgrade capability on Nexus 3 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/missing-upgrade-capability-on-nexus-3/14834/2/index.html): Hi, 
We are looking to upgrade from Nexus 2 > Nexus 3. We have managed to enable the Upgrade capability on Nexus 2 but when looking to enable it on Nexus 3 (3.79.1-04) it is not present to enable. 
I’ve uploaded a screen… (151 words, Apr 23, 2025)
- [December 2023 Learn Package - Our Favorite Things - Sonatype Learn - Sonatype Community](/content/community/t/december-2023-learn-package-our-favorite-things/11730/3/index.html): Happy holidays from the Sonatype Customer Education team! As we wrap up the year, we’re taking the month of December to highlight a few of our favorite things (I promise, there’s no singing). Some of these are throwbacks… (660 words, Apr 23, 2025)
- [Missing upgrade capability on Nexus 3 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/missing-upgrade-capability-on-nexus-3/14834/index.html): Hi, 
We are looking to upgrade from Nexus 2 > Nexus 3. We have managed to enable the Upgrade capability on Nexus 2 but when looking to enable it on Nexus 3 (3.79.1-04) it is not present to enable. 
I’ve uploaded a screen… (151 words, Apr 23, 2025)
- [cdn_metadata required in cocoapods proxying - Sonatype Nexus Repository - Sonatype Community](/content/community/t/cdn-metadata-required-in-cocoapods-proxying/14826/2/index.html): Our cocoapods proxying is not working.  When we browse the cocoapods-proxy, we see a cdn_metadata folder. 
When we set the source in the Podfile as https://foo.com/repository/cocoapods-proxy/, Nexus returns 500 code erro… (139 words, Apr 22, 2025)
- [Nexus Core Build - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/nexus-core-build/14827/1/index.html): Hello Team, 
I have few questions on nexus core. I have highlighted them below. 

I need to know if there is any docker images available for nexus-core in docker hub. If not please let me know the steps to build a docker… (158 words, Apr 22, 2025)
- [cdn_metadata required in cocoapods proxying - Sonatype Nexus Repository - Sonatype Community](/content/community/t/cdn-metadata-required-in-cocoapods-proxying/14826/index.html): Our cocoapods proxying is not working.  When we browse the cocoapods-proxy, we see a cdn_metadata folder. 
When we set the source in the Podfile as https://foo.com/repository/cocoapods-proxy/, Nexus returns 500 code erro… (139 words, Apr 22, 2025)
- [Database migration Orientdb to PostgreSQL - two questions - Sonatype Nexus Repository - Sonatype Community](/content/community/t/database-migration-orientdb-to-postgresql-two-questions/14811/4/index.html): Hi, 
1 - Because i’m intending to migrate from Orientdb to Postgresql i refer to Migrating to a New Database, but it tell us only to migrate to an external database. I’m wondering… is it possible to migrate to an interna… (266 words, Apr 22, 2025)
- [API to create Admin - Export Database for backup - Sonatype Nexus Repository - Sonatype Community](/content/community/t/api-to-create-admin-export-database-for-backup/14720/3/index.html): Hello, 
Is there an API or some method available to create an “Admin - Export Database for Backup” and execute it? We want to automate this process but haven’t been able to find any API to accomplish this. We are using N… (165 words, Apr 22, 2025)
- [Database migration Orientdb to PostgreSQL - two questions - Sonatype Nexus Repository - Sonatype Community](/content/community/t/database-migration-orientdb-to-postgresql-two-questions/14811/index.html): Hi, 
1 - Because i’m intending to migrate from Orientdb to Postgresql i refer to Migrating to a New Database, but it tell us only to migrate to an external database. I’m wondering… is it possible to migrate to an interna… (266 words, Apr 19, 2025)
- [Database migration Orientdb to PostgreSQL - two questions - Sonatype Nexus Repository - Sonatype Community](/content/community/t/database-migration-orientdb-to-postgresql-two-questions/14811/1/index.html): Hi, 
1 - Because i’m intending to migrate from Orientdb to Postgresql i refer to Migrating to a New Database, but it tell us only to migrate to an external database. I’m wondering… is it possible to migrate to an interna… (267 words, Apr 19, 2025)
- [Publish Portal returns 500 when artifacts have validation errors - Central Repository - Sonatype Community](/content/community/t/publish-portal-returns-500-when-artifacts-have-validation-errors/14802/3/index.html): I am updating my GitHub Action for uploading artifacts. 
The last days I have worked on the switch from OSSRH to Publish Portal. 
And I think I can publish now. 
But you should know that the /status REST resource returns… (149 words, Apr 17, 2025)
- [Publish Portal returns 500 when artifacts have validation errors - Central Repository - Sonatype Community](/content/community/t/publish-portal-returns-500-when-artifacts-have-validation-errors/14802/2/index.html): I am updating my GitHub Action for uploading artifacts. 
The last days I have worked on the switch from OSSRH to Publish Portal. 
And I think I can publish now. 
But you should know that the /status REST resource returns… (149 words, Apr 17, 2025)
- [What is this p2 directory in my composer repository group? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/what-is-this-p2-directory-in-my-composer-repository-group/14805/1/index.html): We have a repository group for Composer PHP libraries. Recently a new folder appeared in that repository group called p2. Now when I try to run composer update, I’m getting an error that a JSON file in the p2 folder is c… (133 words, Apr 17, 2025)
- [Publish Portal returns 500 when artifacts have validation errors - Central Repository - Sonatype Community](/content/community/t/publish-portal-returns-500-when-artifacts-have-validation-errors/14802/index.html): I am updating my GitHub Action for uploading artifacts. 
The last days I have worked on the switch from OSSRH to Publish Portal. 
And I think I can publish now. 
But you should know that the /status REST resource returns… (149 words, Apr 16, 2025)
- [Publish Portal returns 500 when artifacts have validation errors - Central Repository - Sonatype Community](/content/community/t/publish-portal-returns-500-when-artifacts-have-validation-errors/14802/1/index.html): I am updating my GitHub Action for uploading artifacts. 
The last days I have worked on the switch from OSSRH to Publish Portal. 
And I think I can publish now. 
But you should know that the /status REST resource returns… (143 words, Apr 16, 2025)
- [Received unexpected HTTP status: 502 Bad Gateway when performing the image pull from docker hub through the proxy. - Sonatype Nexus Repository - Sonatype Community](/content/community/t/received-unexpected-http-status-502-bad-gateway-when-performing-the-image-pull-from-docker-hub-through-the-proxy/14797/3/index.html): Hello Team, 
we are facing issue with the nexus docker proxy configuration, we are getting 502 bad gate way. 
root@nexus-client-mechine:~# docker pull nexus.server.com:8083/library/nginx:latest 
latest: Pulling from libr… (328 words, Apr 15, 2025)
- [Feature request - deleting Orphaned Tags - Sonatype Nexus Repository - Sonatype Community](/content/community/t/feature-request-deleting-orphaned-tags/14800/2/index.html): It would be really useful to have a possibility to wipe out orphaned tags from Nexus (a tag, that is not associated with any content). When a new deployment is done and its components are later dropped, the tag remains i… (150 words, Apr 15, 2025)
- [Feature request - deleting Orphaned Tags - Sonatype Nexus Repository - Sonatype Community](/content/community/t/feature-request-deleting-orphaned-tags/14800/index.html): It would be really useful to have a possibility to wipe out orphaned tags from Nexus (a tag, that is not associated with any content). When a new deployment is done and its components are later dropped, the tag remains i… (157 words, Apr 15, 2025)
- [Feature request - deleting Orphaned Tags - Sonatype Nexus Repository - Sonatype Community](/content/community/t/feature-request-deleting-orphaned-tags/14800/1/index.html): It would be really useful to have a possibility to wipe out orphaned tags from Nexus (a tag, that is not associated with any content). When a new deployment is done and its components are later dropped, the tag remains i… (153 words, Apr 15, 2025)
- [Duration of Database Migration - Sonatype Nexus Repository - Sonatype Community](/content/community/t/duration-of-database-migration/14798/2/index.html): We are preparing for a migration of Nexus database from Orient to PostgreSQL.  After reading about as much information as I could find, I’m still left wondering how long this migration is expected to take.  Does anyone h… (197 words, Apr 14, 2025)
- [Duration of Database Migration - Sonatype Nexus Repository - Sonatype Community](/content/community/t/duration-of-database-migration/14798/index.html): We are preparing for a migration of Nexus database from Orient to PostgreSQL.  After reading about as much information as I could find, I’m still left wondering how long this migration is expected to take.  Does anyone h… (194 words, Apr 14, 2025)
- [Duration of Database Migration - Sonatype Nexus Repository - Sonatype Community](/content/community/t/duration-of-database-migration/14798/1/index.html): We are preparing for a migration of Nexus database from Orient to PostgreSQL.  After reading about as much information as I could find, I’m still left wondering how long this migration is expected to take.  Does anyone h… (191 words, Apr 14, 2025)
- [Received unexpected HTTP status: 502 Bad Gateway when performing the image pull from docker hub through the proxy. - Sonatype Nexus Repository - Sonatype Community](/content/community/t/received-unexpected-http-status-502-bad-gateway-when-performing-the-image-pull-from-docker-hub-through-the-proxy/14797/index.html): Hello Team, 
we are facing issue with the nexus docker proxy configuration, we are getting 502 bad gate way. 
root@nexus-client-mechine:~# docker pull nexus.server.com:8083/library/nginx:latest 
latest: Pulling from libr… (396 words, Apr 14, 2025)
- [Received unexpected HTTP status: 502 Bad Gateway when performing the image pull from docker hub through the proxy. - Sonatype Nexus Repository - Sonatype Community](/content/community/t/received-unexpected-http-status-502-bad-gateway-when-performing-the-image-pull-from-docker-hub-through-the-proxy/14797/1/index.html): Hello Team, 
we are facing issue with the nexus docker proxy configuration, we are getting 502 bad gate way. 
root@nexus-client-mechine:~# docker pull nexus.server.com:8083/library/nginx:latest 
latest: Pulling from libr… (404 words, Apr 14, 2025)
- [Slow Yum Metadata Downloads and Occasional 502/Timeout Errors via Nexus Proxy - Sonatype Nexus Repository - Sonatype Community](/content/community/t/slow-yum-metadata-downloads-and-occasional-502-timeout-errors-via-nexus-proxy/14793/index.html): Hello, 
I’m encountering an issue using Nexus Repository Manager as a yum proxy for AlmaLinux (https://repo.almalinux.org/almalinux/). When I run yum update (yum/dnf), the metadata downloads are often extremely slow or e… (863 words, Apr 14, 2025)
- [Slow Yum Metadata Downloads and Occasional 502/Timeout Errors via Nexus Proxy - Sonatype Nexus Repository - Sonatype Community](/content/community/t/slow-yum-metadata-downloads-and-occasional-502-timeout-errors-via-nexus-proxy/14793/1/index.html): Hello, 
I’m encountering an issue using Nexus Repository Manager as a yum proxy for AlmaLinux (https://repo.almalinux.org/almalinux/). When I run yum update (yum/dnf), the metadata downloads are often extremely slow or e… (898 words, Apr 14, 2025)
- [Apt proxy repo: GPG failure - Sonatype Nexus Repository - Sonatype Community](/content/community/t/apt-proxy-repo-gpg-failure/14785/index.html): Hello, 
I use NRM for internal hosts behind a firewall to receive upstream packages without burdening the network - brilliant tool! 
For Canonical repos, I find no issues. 
But for 3rd party repos, like Microsoft, Puppet… (207 words, Apr 11, 2025)
- [Apt proxy repo: GPG failure - Sonatype Nexus Repository - Sonatype Community](/content/community/t/apt-proxy-repo-gpg-failure/14785/1/index.html): Hello, 
I use NRM for internal hosts behind a firewall to receive upstream packages without burdening the network - brilliant tool! 
For Canonical repos, I find no issues. 
But for 3rd party repos, like Microsoft, Puppet… (129 words, Apr 11, 2025)
- [upgrade wizard in 3.78 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/upgrade-wizard-in-3-78/14761/4/index.html): the wizard  is not available in 3.78 , it is also not available in capabilities to be added. How to resolve this issue (165 words, Apr 11, 2025)
- [Sonatype Nexus Repository 3.79.1 Released - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-repository-3-79-1-released/14779/2/index.html): Sonatype Nexus Repository 3.79.1 is now available. This release fixes numerous bugs, including bringing back the RUT Auth realm for Community Edition, resolving an issue affecting Azure blob store users, and re-enabling … (242 words, Apr 11, 2025)
- [Sonatype Nexus Repository 3.79.1 Released - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-repository-3-79-1-released/14779/index.html): Sonatype Nexus Repository 3.79.1 is now available. This release fixes numerous bugs, including bringing back the RUT Auth realm for Community Edition, resolving an issue affecting Azure blob store users, and re-enabling … (248 words, Apr 10, 2025)
- [Sonatype Nexus Repository 3.79.1 Released - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-repository-3-79-1-released/14779/1/index.html): Sonatype Nexus Repository 3.79.1 is now available. This release fixes numerous bugs, including bringing back the RUT Auth realm for Community Edition, resolving an issue affecting Azure blob store users, and re-enabling … (268 words, Apr 10, 2025)
- [Nxrm3-maven-plugin Staging Plugin Does Not Update Browse Index on Delete - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nxrm3-maven-plugin-staging-plugin-does-not-update-browse-index-on-delete/14775/1/index.html): I am testing deployment using org.sonatype.plugins:nxrm3-maven-plugin as described here: 
https://help.sonatype.com/en/nexus-repository-maven-plugin.html 
When I deploy the artifacts using  nxrm3:staging-deploy and then … (228 words, Apr 9, 2025)
- [What to delete to claim storage, tags or manifest files - Sonatype Nexus Repository - Sonatype Community](/content/community/t/what-to-delete-to-claim-storage-tags-or-manifest-files/14769/2/index.html): Hello, 
I am deleting the tags of unwanted artifacts from Nexus3 UI to free up the storage, but after deleting there is no change refelcts in storage under Blob Stores. 
So what should I delete, tags or manifest files to… (86 words, Apr 8, 2025)
- [What to delete to claim storage, tags or manifest files - Sonatype Nexus Repository - Sonatype Community](/content/community/t/what-to-delete-to-claim-storage-tags-or-manifest-files/14769/index.html): Hello, 
I am deleting the tags of unwanted artifacts from Nexus3 UI to free up the storage, but after deleting there is no change refelcts in storage under Blob Stores. 
So what should I delete, tags or manifest files to… (148 words, Apr 8, 2025)
- [What to delete to claim storage, tags or manifest files - Sonatype Nexus Repository - Sonatype Community](/content/community/t/what-to-delete-to-claim-storage-tags-or-manifest-files/14769/1/index.html): Hello, 
I am deleting the tags of unwanted artifacts from Nexus3 UI to free up the storage, but after deleting there is no change refelcts in storage under Blob Stores. 
So what should I delete, tags or manifest files to… (86 words, Apr 8, 2025)
- [upgrade wizard in 3.78 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/upgrade-wizard-in-3-78/14761/index.html): the wizard  is not available in 3.78 , it is also not available in capabilities to be added. How to resolve this issue (177 words, Apr 7, 2025)
- [upgrade wizard in 3.78 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/upgrade-wizard-in-3-78/14761/1/index.html): the wizard  is not available in 3.78 , it is also not available in capabilities to be added. How to resolve this issue (165 words, Apr 7, 2025)
- [Nexus-db-migrator-3.70.4-02 for OrientDB backup doesn't produce any H2 file - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-db-migrator-3-70-4-02-for-orientdb-backup-doesnt-produce-any-h2-file/14733/5/index.html): I’m trying to migrate from a docker based sonatype/nexus3:3.70.2 image to H2 as described in Migrating to 3.71 on a docker-based installation - #5 by mbender 
Nexus System Information: 
version	3.70.2-01 
edition	OSS 
ne… (659 words, Apr 7, 2025)
- [Announcing a New Integration with GitLab Ultimate! - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/announcing-a-new-integration-with-gitlab-ultimate/13716/3/index.html): We’re excited to announce our new integration with GitLab Ultimate! With this update, you can now view detailed vulnerability findings from Lifecycle scans right in your GitLab Vulnerability Report. Plus, your project’s … (230 words, Apr 7, 2025)
- [Upgraded to 3.22.0-02 BUG: How can I edit existing Task script code, or creation a new Task script? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/upgraded-to-3-22-0-02-bug-how-can-i-edit-existing-task-script-code-or-creation-a-new-task-script/3991/12/index.html): Hi friends 
We upgraded Nexus to version 3.22.0-02 and followed the Nexus guidelines ( https://support.sonatype.com/hc/en-us/articles/360045220393-Scripting-Nexus-Repository-Manager-3 ) to re-enable the UI CRUD and RUN o… (743 words, Apr 7, 2025)
- [How to enable "skip duplicate" NuGet feature? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-to-enable-skip-duplicate-nuget-feature/13001/2/index.html): Hi everyone, 
I’ve been using the “dotnet nuget push” command with the “–skip-duplicate” flag. As I understand it, if the NuGet package already exists in the repository, it should return a “Conflict” (409) HTTP status co… (475 words, Apr 7, 2025)
- [nexus-3.78.2-04 ERROR bootstrap jetty -- Data store not found - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-3-78-2-04-error-bootstrap-jetty-data-store-not-found/14711/3/index.html): Dear Community Members, 
Upgrading from nexus-3.59.0-01 to nexus-3.78.2-04 
I’ve got the following error message: 
2025-03-31 11:27:51,242+0200 ERROR [jetty-main-1]  *SYSTEM org.sonatype.nexus.bootstrap.jetty.JettyServer… (276 words, Apr 7, 2025)
- [Nexus-db-migrator-3.70.4-02 for OrientDB backup doesn't produce any H2 file - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-db-migrator-3-70-4-02-for-orientdb-backup-doesnt-produce-any-h2-file/14733/index.html): I’m trying to migrate from a docker based sonatype/nexus3:3.70.2 image to H2 as described in Migrating to 3.71 on a docker-based installation - #5 by mbender 
Nexus System Information: 
version	3.70.2-01 
edition	OSS 
ne… (657 words, Apr 2, 2025)
- [Nexus-db-migrator-3.70.4-02 for OrientDB backup doesn't produce any H2 file - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-db-migrator-3-70-4-02-for-orientdb-backup-doesnt-produce-any-h2-file/14733/1/index.html): I’m trying to migrate from a docker based sonatype/nexus3:3.70.2 image to H2 as described in Migrating to 3.71 on a docker-based installation - #5 by mbender 
Nexus System Information: 
version	3.70.2-01 
edition	OSS 
ne… (653 words, Apr 2, 2025)
- [Are there any docs about extension development? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/are-there-any-docs-about-extension-development/14732/index.html): I want to create some extension on nexus repository (126 words, Apr 2, 2025)
- [Are there any docs about extension development? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/are-there-any-docs-about-extension-development/14732/1/index.html): I want to create some extension on nexus repository (87 words, Apr 2, 2025)
- [Sonatype Nexus Repository 3.79.0 Released - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-repository-3-79-0-released/14727/index.html): Sonatype Nexus Repository 3.79.0 is now available. 
This release includes support for pre-signed URL downloads for AWS S3 for Nexus Repository Pro customers. It also includes monthly request metrics in the Usage Center a… (52 words, Apr 1, 2025)
- [Sonatype Nexus Repository 3.79.0 Released - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-repository-3-79-0-released/14727/1/index.html): Sonatype Nexus Repository 3.79.0 is now available. 
This release includes support for pre-signed URL downloads for AWS S3 for Nexus Repository Pro customers. It also includes monthly request metrics in the Usage Center a… (65 words, Apr 1, 2025)
- [Issue with Nexus Not Going Upstream for Docker Image with Same Tag After Cache Invalidation - Sonatype Nexus Repository - Sonatype Community](/content/community/t/issue-with-nexus-not-going-upstream-for-docker-image-with-same-tag-after-cache-invalidation/14723/index.html): I have a Nexus setup with three repositories: two proxy repositories and one grouped repository. All repositories have their metadata and content max-age set to -1. However, after invalidating the cache for the grouped r… (219 words, Apr 1, 2025)
- [Issue with Nexus Not Going Upstream for Docker Image with Same Tag After Cache Invalidation - Sonatype Nexus Repository - Sonatype Community](/content/community/t/issue-with-nexus-not-going-upstream-for-docker-image-with-same-tag-after-cache-invalidation/14723/1/index.html): I have a Nexus setup with three repositories: two proxy repositories and one grouped repository. All repositories have their metadata and content max-age set to -1. However, after invalidating the cache for the grouped r… (201 words, Apr 1, 2025)
- [nexus-3.78.2-04 ERROR bootstrap jetty -- Data store not found - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-3-78-2-04-error-bootstrap-jetty-data-store-not-found/14711/2/index.html): Dear Community Members, 
Upgrading from nexus-3.59.0-01 to nexus-3.78.2-04 
I’ve got the following error message: 
2025-03-31 11:27:51,242+0200 ERROR [jetty-main-1]  *SYSTEM org.sonatype.nexus.bootstrap.jetty.JettyServer… (283 words, Apr 1, 2025)
- [Upgrade to 3.78.0 failed with: No JVM configured or found in registry. Is this fixed in 3.78.1? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/upgrade-to-3-78-0-failed-with-no-jvm-configured-or-found-in-registry-is-this-fixed-in-3-78-1/14615/4/index.html): Current version: 
Nexus Repository OSS 3.72.0-04 
Windows Server 2016 
Using bundled JRE, no custom options. 
Using folder structure E:\Nexus<binary folder> and E:\Nexus\sonatype-work\nexus3\ data folder. 
I tried to upg… (408 words, Apr 1, 2025)
- [Upgrade to 3.78.2-04 from 3.72.0-04 fails with "The database is read only" - Sonatype Nexus Repository - Sonatype Community](/content/community/t/upgrade-to-3-78-2-04-from-3-72-0-04-fails-with-the-database-is-read-only/14661/6/index.html): First of all, there’s a mistake made in the install-nexus-service.bat file: KARAF_BASE is not set, making the installation routine fail because the base directory is missing for “NEXUS_JAVA_HOME=%KARAF_BASE%\jdk\temurin_… (349 words, Apr 1, 2025)
- [API to create Admin - Export Database for backup - Sonatype Nexus Repository - Sonatype Community](/content/community/t/api-to-create-admin-export-database-for-backup/14720/index.html): Hello, 
Is there an API or some method available to create an “Admin - Export Database for Backup” and execute it? We want to automate this process but haven’t been able to find any API to accomplish this. We are using N… (282 words, Apr 1, 2025)
- [API to create Admin - Export Database for backup - Sonatype Nexus Repository - Sonatype Community](/content/community/t/api-to-create-admin-export-database-for-backup/14720/1/index.html): Hello, 
Is there an API or some method available to create an “Admin - Export Database for Backup” and execute it? We want to automate this process but haven’t been able to find any API to accomplish this. We are using N… (165 words, Apr 1, 2025)
- [nexus-3.78.2-04 ERROR bootstrap jetty -- Data store not found - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-3-78-2-04-error-bootstrap-jetty-data-store-not-found/14711/index.html): Dear Community Members, 
Upgrading from nexus-3.59.0-01 to nexus-3.78.2-04 
I’ve got the following error message: 
2025-03-31 11:27:51,242+0200 ERROR [jetty-main-1]  *SYSTEM org.sonatype.nexus.bootstrap.jetty.JettyServer… (279 words, Mar 31, 2025)
- [nexus-3.78.2-04 ERROR bootstrap jetty -- Data store not found - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-3-78-2-04-error-bootstrap-jetty-data-store-not-found/14711/1/index.html): Dear Community Members, 
Upgrading from nexus-3.59.0-01 to nexus-3.78.2-04 
I’ve got the following error message: 
2025-03-31 11:27:51,242+0200 ERROR [jetty-main-1]  *SYSTEM org.sonatype.nexus.bootstrap.jetty.JettyServer… (282 words, Mar 31, 2025)
- [Upgrade to 3.78.2-04 from 3.72.0-04 fails with "The database is read only" - Sonatype Nexus Repository - Sonatype Community](/content/community/t/upgrade-to-3-78-2-04-from-3-72-0-04-fails-with-the-database-is-read-only/14661/5/index.html): First of all, there’s a mistake made in the install-nexus-service.bat file: KARAF_BASE is not set, making the installation routine fail because the base directory is missing for “NEXUS_JAVA_HOME=%KARAF_BASE%\jdk\temurin_… (376 words, Mar 31, 2025)
- [How to delete a docker image in Nexus3 Repo programmatically? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-to-delete-a-docker-image-in-nexus3-repo-programmatically/14701/index.html): Sorry for this seems to be the very basic question, but somehow I just can’t make it work. 
In my most recently updated ubuntu22.04, I installed nexus3:latest (I think it is 3.78.2) so to use it as a docker repo. I used … (627 words, Mar 27, 2025)
- [Components API - Sonatype Nexus Repository - Sonatype Community](/content/community/t/components-api/14602/8/index.html): I’m attempting to use the available API to post a tgz file to an existing repository.  However, the resulting curl command: 
curl -X 'POST' \
  'http://192.168.56.2/service/rest/v1/components?repository=node-local' \
  -… (588 words, Mar 27, 2025)
- [Nexus 3.70.1-02 with H2 Database - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-3-70-1-02-with-h2-database/14681/8/index.html): Hello there, 
We want to use Nexus version 3.70.1-02 with the H2 database as the default DB. However, when we try to install it, it always starts with OrientDB. 
We know that version 3.70.1-02 supports both databases, an… (827 words, Mar 27, 2025)
- [Nexus 3.70.1-02 with H2 Database - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-3-70-1-02-with-h2-database/14681/7/index.html): Hello there, 
We want to use Nexus version 3.70.1-02 with the H2 database as the default DB. However, when we try to install it, it always starts with OrientDB. 
We know that version 3.70.1-02 supports both databases, an… (807 words, Mar 26, 2025)
- [Nexus 3.70.1-02 with H2 Database - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-3-70-1-02-with-h2-database/14681/6/index.html): Hello there, 
We want to use Nexus version 3.70.1-02 with the H2 database as the default DB. However, when we try to install it, it always starts with OrientDB. 
We know that version 3.70.1-02 supports both databases, an… (810 words, Mar 26, 2025)
- [New to Nexus Repository Pro? Part 2 - Sonatype Learn - Sonatype Community](/content/community/t/new-to-nexus-repository-pro-part-2/14689/index.html): If you recently moved from Community Edition to Pro, then it’s imperative that you start taking advantage of some of the features that Pro offers. These three short videos will help you save time, work smarter, address r… (164 words, Mar 26, 2025)
- [New to Nexus Repository Pro? Part 2 - Sonatype Learn - Sonatype Community](/content/community/t/new-to-nexus-repository-pro-part-2/14689/1/index.html): If you recently moved from Community Edition to Pro, then it’s imperative that you start taking advantage of some of the features that Pro offers. These three short videos will help you save time, work smarter, address r… (157 words, Mar 26, 2025)
- [Startup failure after migrating from 3.73 to 3.78 (alpine custom container) - Sonatype Nexus Repository - Sonatype Community](/content/community/t/startup-failure-after-migrating-from-3-73-to-3-78-alpine-custom-container/14688/index.html): I have been running the (mostly) same custom Alpine container since ±NxRM v3.37 . 
Multiple issues now: 

Nexus startup script fails (issue similar to Shell Compatibility Issue in Nexus Repository 3.78.2-04 Startup Scrip… (280 words, Mar 26, 2025)
- [Startup failure after migrating from 3.73 to 3.78 (alpine custom container) - Sonatype Nexus Repository - Sonatype Community](/content/community/t/startup-failure-after-migrating-from-3-73-to-3-78-alpine-custom-container/14688/1/index.html): I have been running the (mostly) same custom Alpine container since ±NxRM v3.37 . 
Multiple issues now: 

Nexus startup script fails (issue similar to Shell Compatibility Issue in Nexus Repository 3.78.2-04 Startup Scrip… (268 words, Mar 26, 2025)
- [Nexus 3.70.1-02 with H2 Database - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-3-70-1-02-with-h2-database/14681/5/index.html): Hello there, 
We want to use Nexus version 3.70.1-02 with the H2 database as the default DB. However, when we try to install it, it always starts with OrientDB. 
We know that version 3.70.1-02 supports both databases, an… (798 words, Mar 26, 2025)
- [Upgrade to 3.78.2-04 from 3.72.0-04 fails with "The database is read only" - Sonatype Nexus Repository - Sonatype Community](/content/community/t/upgrade-to-3-78-2-04-from-3-72-0-04-fails-with-the-database-is-read-only/14661/4/index.html): First of all, there’s a mistake made in the install-nexus-service.bat file: KARAF_BASE is not set, making the installation routine fail because the base directory is missing for “NEXUS_JAVA_HOME=%KARAF_BASE%\jdk\temurin_… (358 words, Mar 25, 2025)
- [Upgrade to 3.78.2-04 from 3.72.0-04 fails with "The database is read only" - Sonatype Nexus Repository - Sonatype Community](/content/community/t/upgrade-to-3-78-2-04-from-3-72-0-04-fails-with-the-database-is-read-only/14661/3/index.html): First of all, there’s a mistake made in the install-nexus-service.bat file: KARAF_BASE is not set, making the installation routine fail because the base directory is missing for “NEXUS_JAVA_HOME=%KARAF_BASE%\jdk\temurin_… (376 words, Mar 25, 2025)
- [Nexus 3.70.1-02 with H2 Database - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-3-70-1-02-with-h2-database/14681/4/index.html): Hello there, 
We want to use Nexus version 3.70.1-02 with the H2 database as the default DB. However, when we try to install it, it always starts with OrientDB. 
We know that version 3.70.1-02 supports both databases, an… (749 words, Mar 25, 2025)
- [Nexus 3.70.1-02 with H2 Database - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-3-70-1-02-with-h2-database/14681/3/index.html): Hello there, 
We want to use Nexus version 3.70.1-02 with the H2 database as the default DB. However, when we try to install it, it always starts with OrientDB. 
We know that version 3.70.1-02 supports both databases, an… (805 words, Mar 25, 2025)
- [Nexus 3.70.1-02 with H2 Database - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-3-70-1-02-with-h2-database/14681/2/index.html): Hello there, 
We want to use Nexus version 3.70.1-02 with the H2 database as the default DB. However, when we try to install it, it always starts with OrientDB. 
We know that version 3.70.1-02 supports both databases, an… (855 words, Mar 25, 2025)
- [Nexus 3.70.1-02 with H2 Database - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-3-70-1-02-with-h2-database/14681/index.html): Hello there, 
We want to use Nexus version 3.70.1-02 with the H2 database as the default DB. However, when we try to install it, it always starts with OrientDB. 
We know that version 3.70.1-02 supports both databases, an… (791 words, Mar 25, 2025)
- [Nexus 3.70.1-02 with H2 Database - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-3-70-1-02-with-h2-database/14681/1/index.html): Hello there, 
We want to use Nexus version 3.70.1-02 with the H2 database as the default DB. However, when we try to install it, it always starts with OrientDB. 
We know that version 3.70.1-02 supports both databases, an… (817 words, Mar 25, 2025)
- [IQ server not scanning docker proxy - Sonatype Nexus Repository - Sonatype Community](/content/community/t/iq-server-not-scanning-docker-proxy/14678/index.html): I have setup 2 Nexus repository, a Go proxy and a docker proxy, whenever I get a Go module, the IQ server can scan that module on Go proxy, however for the docker proxy, nothing happen. Is this an error or I need to conf… (64 words, Mar 25, 2025)
- [IQ server not scanning docker proxy - Sonatype Nexus Repository - Sonatype Community](/content/community/t/iq-server-not-scanning-docker-proxy/14678/1/index.html): I have setup 2 Nexus repository, a Go proxy and a docker proxy, whenever I get a Go module, the IQ server can scan that module on Go proxy, however for the docker proxy, nothing happen. Is this an error or I need to conf… (64 words, Mar 25, 2025)
- [Upgrade to 3.78.2-04 from 3.72.0-04 fails with "The database is read only" - Sonatype Nexus Repository - Sonatype Community](/content/community/t/upgrade-to-3-78-2-04-from-3-72-0-04-fails-with-the-database-is-read-only/14661/2/index.html): First of all, there’s a mistake made in the install-nexus-service.bat file: KARAF_BASE is not set, making the installation routine fail because the base directory is missing for “NEXUS_JAVA_HOME=%KARAF_BASE%\jdk\temurin_… (348 words, Mar 24, 2025)
- [Can I use a hosted docker repository as a remote storage for a proxy docker repository? - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/can-i-use-a-hosted-docker-repository-as-a-remote-storage-for-a-proxy-docker-repository/14671/index.html): I have setup 2 Nexus repo, Nexus one will be used as a hosted registry for user to upload their docker images, the Nexus two will be use internal for user to pull image from Nexus one, I have configured Nexus one for use… (214 words, Mar 24, 2025)
- [Can I use a hosted docker repository as a remote storage for a proxy docker repository? - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/can-i-use-a-hosted-docker-repository-as-a-remote-storage-for-a-proxy-docker-repository/14671/1/index.html): I have setup 2 Nexus repo, Nexus one will be used as a hosted registry for user to upload their docker images, the Nexus two will be use internal for user to pull image from Nexus one, I have configured Nexus one for use… (151 words, Mar 24, 2025)
- [Migration 3.70 to 3.78 error 400 bad request accessing proxy repo URL - Sonatype Nexus Repository - Sonatype Community](/content/community/t/migration-3-70-to-3-78-error-400-bad-request-accessing-proxy-repo-url/14668/index.html): Hello 
I migrated from Nexus 3.70 to 3.78. 
I have no problems accessing the Nexus interface or browsing (browse mode) in my repositories. 
However, I get 400 bad request errors when I try to access them via their normal… (147 words, Mar 21, 2025)
- [Migration 3.70 to 3.78 error 400 bad request accessing proxy repo URL - Sonatype Nexus Repository - Sonatype Community](/content/community/t/migration-3-70-to-3-78-error-400-bad-request-accessing-proxy-repo-url/14668/1/index.html): Hello 
I migrated from Nexus 3.70 to 3.78. 
I have no problems accessing the Nexus interface or browsing (browse mode) in my repositories. 
However, I get 400 bad request errors when I try to access them via their normal… (147 words, Mar 21, 2025)
- [Upgrade to 3.78.2-04 from 3.72.0-04 fails with "The database is read only" - Sonatype Nexus Repository - Sonatype Community](/content/community/t/upgrade-to-3-78-2-04-from-3-72-0-04-fails-with-the-database-is-read-only/14661/index.html): First of all, there’s a mistake made in the install-nexus-service.bat file: KARAF_BASE is not set, making the installation routine fail because the base directory is missing for “NEXUS_JAVA_HOME=%KARAF_BASE%\jdk\temurin_… (359 words, Mar 20, 2025)
- [Upgrade to 3.78.2-04 from 3.72.0-04 fails with "The database is read only" - Sonatype Nexus Repository - Sonatype Community](/content/community/t/upgrade-to-3-78-2-04-from-3-72-0-04-fails-with-the-database-is-read-only/14661/1/index.html): First of all, there’s a mistake made in the install-nexus-service.bat file: KARAF_BASE is not set, making the installation routine fail because the base directory is missing for “NEXUS_JAVA_HOME=%KARAF_BASE%\jdk\temurin_… (359 words, Mar 20, 2025)
- [Shell Compatibility Issue in Nexus Repository 3.78.2-04 Startup Script - Sonatype Nexus Repository - Sonatype Community](/content/community/t/shell-compatibility-issue-in-nexus-repository-3-78-2-04-startup-script/14660/index.html): Environment

Nexus Repository: 3.78.2-04 (Community Edition)
OS: Debian 12.10

Issue
During service startup, the following error appears: 
/opt/nexus-3.78.2-04/bin/nexus: 155: [[: not found

Root Cause
The startup script… (158 words, Mar 20, 2025)
- [Shell Compatibility Issue in Nexus Repository 3.78.2-04 Startup Script - Sonatype Nexus Repository - Sonatype Community](/content/community/t/shell-compatibility-issue-in-nexus-repository-3-78-2-04-startup-script/14660/1/index.html): Environment

Nexus Repository: 3.78.2-04 (Community Edition)
OS: Debian 12.10

Issue
During service startup, the following error appears: 
/opt/nexus-3.78.2-04/bin/nexus: 155: [[: not found

Root Cause
The startup script… (250 words, Mar 20, 2025)
- [Usage metrics counts are much higher than blob counts - Sonatype Nexus Repository - Sonatype Community](/content/community/t/usage-metrics-counts-are-much-higher-than-blob-counts/14591/9/index.html): Hello, I am running a Nexus OSS v3.78.1-02 installation. Since last week, I’ve been getting a banner saying that my instance is getting too big, and I need to add a licence or reduce the number of artefacts. 
I have deci… (594 words, Mar 20, 2025)
- [How can I view scan result of a docker image in a hosted repository - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-can-i-view-scan-result-of-a-docker-image-in-a-hosted-repository/14654/index.html): I have integrated my nexus repository with a nexus iq server and notice that if the docker image was pull from outside and in docker proxy repo, but if it is a hosted repo for uploaded self built docker image, I can only… (92 words, Mar 20, 2025)
- [How do I use Nexus repository npm as a remote storage for another Nexus repository - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-do-i-use-nexus-repository-npm-as-a-remote-storage-for-another-nexus-repository/14647/3/index.html): I am currently deploying twos Nexus Repository for a javascript project, the Nexus 1 will connect directly to https://registry.npmjs.org, Nexus 2 will run locally and only connect to Nexus 1, I tried to set up Nexus2-npm… (129 words, Mar 20, 2025)
- [How do I use Nexus repository npm as a remote storage for another Nexus repository - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-do-i-use-nexus-repository-npm-as-a-remote-storage-for-another-nexus-repository/14647/index.html): I am currently deploying twos Nexus Repository for a javascript project, the Nexus 1 will connect directly to https://registry.npmjs.org, Nexus 2 will run locally and only connect to Nexus 1, I tried to set up Nexus2-npm… (125 words, Mar 19, 2025)
- [How do I use Nexus repository npm as a remote storage for another Nexus repository - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-do-i-use-nexus-repository-npm-as-a-remote-storage-for-another-nexus-repository/14647/1/index.html): I am currently deploying twos Nexus Repository for a javascript project, the Nexus 1 will connect directly to https://registry.npmjs.org, Nexus 2 will run locally and only connect to Nexus 1, I tried to set up Nexus2-npm… (131 words, Mar 19, 2025)
- [Docker repository with httpd reverse proxy and port mapping does not work (port is duplicated) - Sonatype Nexus Repository - Sonatype Community](/content/community/t/docker-repository-with-httpd-reverse-proxy-and-port-mapping-does-not-work-port-is-duplicated/14646/1/index.html): Hi, 
I encounter the same issue as described here: Access to the docker registry using none standard port fails - port value is duplicated 
Using Nexus Repository 3.78.1. 
I have setup a docker repository with a reverse … (154 words, Mar 19, 2025)
- [Sonatype Nexus Repository 3.78.2 Released - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-repository-3-78-2-released/14637/2/index.html): Sonatype Nexus Repository 3.78.2 is now available. 
This release fixes a number of bugs impacting 3.78.0 and 3.78.1 deployments. 
For full details, see the Sonatype Nexus Repository 3.78.0 - 3.78.2 Release Notes. (143 words, Mar 19, 2025)
- [Sonatype Nexus Repository 3.78.2 Released - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-repository-3-78-2-released/14637/index.html): Sonatype Nexus Repository 3.78.2 is now available. 
This release fixes a number of bugs impacting 3.78.0 and 3.78.1 deployments. 
For full details, see the Sonatype Nexus Repository 3.78.0 - 3.78.2 Release Notes. (144 words, Mar 18, 2025)
- [Sonatype Nexus Repository 3.78.2 Released - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-repository-3-78-2-released/14637/1/index.html): Sonatype Nexus Repository 3.78.2 is now available. 
This release fixes a number of bugs impacting 3.78.0 and 3.78.1 deployments. 
For full details, see the Sonatype Nexus Repository 3.78.0 - 3.78.2 Release Notes. (143 words, Mar 18, 2025)
- [Rules for keeping specific files in cleanup policy. - Sonatype Nexus Repository - Sonatype Community](/content/community/t/rules-for-keeping-specific-files-in-cleanup-policy/14636/2/index.html): Hello, 
So I have a raw hosted repo in my Nexus setup and I need to do some cleanup with specific rules. I need to keep regardless of age every folder and its contents that is under a “master” folder and also some variat… (354 words, Mar 18, 2025)
- [Rules for keeping specific files in cleanup policy. - Sonatype Nexus Repository - Sonatype Community](/content/community/t/rules-for-keeping-specific-files-in-cleanup-policy/14636/index.html): Hello, 
So I have a raw hosted repo in my Nexus setup and I need to do some cleanup with specific rules. I need to keep regardless of age every folder and its contents that is under a “master” folder and also some variat… (354 words, Mar 18, 2025)
- [Rules for keeping specific files in cleanup policy. - Sonatype Nexus Repository - Sonatype Community](/content/community/t/rules-for-keeping-specific-files-in-cleanup-policy/14636/1/index.html): Hello, 
So I have a raw hosted repo in my Nexus setup and I need to do some cleanup with specific rules. I need to keep regardless of age every folder and its contents that is under a “master” folder and also some variat… (353 words, Mar 18, 2025)
- [Update Your IQ Server License Threat Groups - Sonatype Labs - Sonatype Community](/content/community/t/update-your-iq-server-license-threat-groups/3094/56/index.html): The license threat group updater will apply the latest Sonatype provided license classification to your running IQ server’s license threat groups. This will alleviate any “License Threat Group not Assigned” policy violat… (691 words, Mar 17, 2025)
- [Utilizing rust Cargos with the Community Edition - Sonatype Nexus Repository - Sonatype Community](/content/community/t/utilizing-rust-cargos-with-the-community-edition/14614/3/index.html): Hello everyone! 
I apologize in advance if I missed anything about this. 
We are currently performing a migration over from pre-Community Edition of Nexus Repository. Running Nexus Repository 3.78.1, we tried creating bo… (188 words, Mar 17, 2025)
- [H2 database connection issue after a time since 3.78.1 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/h2-database-connection-issue-after-a-time-since-3-78-1/14620/index.html): Hello, 
I recently installed Nexus version 3.71.0 on a Linux system. Everything was working fine until I updated to 3.78.1. 
Since then, after a certain period of time, I’ve been experiencing H2 database connection error… (759 words, Mar 14, 2025)
- [Upgrade to 3.78.0 failed with: No JVM configured or found in registry. Is this fixed in 3.78.1? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/upgrade-to-3-78-0-failed-with-no-jvm-configured-or-found-in-registry-is-this-fixed-in-3-78-1/14615/1/index.html): Current version: 
Nexus Repository OSS 3.72.0-04 
Windows Server 2016 
Using bundled JRE, no custom options. 
Using folder structure E:\Nexus<binary folder> and E:\Nexus\sonatype-work\nexus3\ data folder. 
I tried to upg… (408 words, Mar 14, 2025)
- [Utilizing rust Cargos with the Community Edition - Sonatype Nexus Repository - Sonatype Community](/content/community/t/utilizing-rust-cargos-with-the-community-edition/14614/index.html): Hello everyone! 
I apologize in advance if I missed anything about this. 
We are currently performing a migration over from pre-Community Edition of Nexus Repository. Running Nexus Repository 3.78.1, we tried creating bo… (181 words, Mar 14, 2025)
- [Utilizing rust Cargos with the Community Edition - Sonatype Nexus Repository - Sonatype Community](/content/community/t/utilizing-rust-cargos-with-the-community-edition/14614/1/index.html): Hello everyone! 
I apologize in advance if I missed anything about this. 
We are currently performing a migration over from pre-Community Edition of Nexus Repository. Running Nexus Repository 3.78.1, we tried creating bo… (188 words, Mar 14, 2025)
- [Components API - Sonatype Nexus Repository - Sonatype Community](/content/community/t/components-api/14602/index.html): I’m attempting to use the available API to post a tgz file to an existing repository.  However, the resulting curl command: 
curl -X 'POST' \
  'http://192.168.56.2/service/rest/v1/components?repository=node-local' \
  -… (588 words, Mar 13, 2025)
- [State and future of Composer support (community plugin clashes with official implementation) - Sonatype Nexus Repository - Sonatype Community](/content/community/t/state-and-future-of-composer-support-community-plugin-clashes-with-official-implementation/14337/6/index.html): Hi, 
I’ve been working on the Nexus Repository Composer Format community plugin (sonatype-nexus-community/nexus-repository-composer on GitHub) recently including major refactoring for compatibility with Nexus 3.71+ datas… (1,009 words, Mar 12, 2025)
- [Usage limit and licensing - Sonatype Nexus Repository - Sonatype Community](/content/community/t/usage-limit-and-licensing/14584/2/index.html): When a nexus instance reaches it’s 200k requests limit and a license is purchased, will this be mandatory from now on for this instance or just, until the requests have been reduced below that limit? And will a license a… (121 words, Mar 12, 2025)
- [Maven - Delete SNAPSHOT task leaves folder behind - Sonatype Nexus Repository - Sonatype Community](/content/community/t/maven-delete-snapshot-task-leaves-folder-behind/14593/index.html): Recently we upgraded our Nexus repository from the OrientDb database to the Postgres database. The upgrade went fine but now I notice that artifacts that are being removed by the Maven - Delete SNAPSHOT task are leaving … (116 words, Mar 12, 2025)
- [Maven - Delete SNAPSHOT task leaves folder behind - Sonatype Nexus Repository - Sonatype Community](/content/community/t/maven-delete-snapshot-task-leaves-folder-behind/14593/1/index.html): Recently we upgraded our Nexus repository from the OrientDb database to the Postgres database. The upgrade went fine but now I notice that artifacts that are being removed by the Maven - Delete SNAPSHOT task are leaving … (185 words, Mar 12, 2025)
- [State and future of Composer support (community plugin clashes with official implementation) - Sonatype Nexus Repository - Sonatype Community](/content/community/t/state-and-future-of-composer-support-community-plugin-clashes-with-official-implementation/14337/5/index.html): Hi, 
I’ve been working on the Nexus Repository Composer Format community plugin (sonatype-nexus-community/nexus-repository-composer on GitHub) recently including major refactoring for compatibility with Nexus 3.71+ datas… (1,012 words, Mar 12, 2025)
- [State and future of Composer support (community plugin clashes with official implementation) - Sonatype Nexus Repository - Sonatype Community](/content/community/t/state-and-future-of-composer-support-community-plugin-clashes-with-official-implementation/14337/4/index.html): Hi, 
I’ve been working on the Nexus Repository Composer Format community plugin (sonatype-nexus-community/nexus-repository-composer on GitHub) recently including major refactoring for compatibility with Nexus 3.71+ datas… (1,004 words, Mar 12, 2025)
- [Status of https://download.sonatype.com/nexus/3/latest-unix.tar.gz - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/status-of-https-download-sonatype-com-nexus-3-latest-unix-tar-gz/14565/5/index.html): Like many here, I use a script to update to the latest Sonatype Nexus versions. 
As of today, the URL https://download.sonatype.com/nexus/3/latest-unix.tar.gz redirects to https://sonatype-download.global.ssl.fastly.net/… (202 words, Mar 12, 2025)
- [Usage metrics counts are much higher than blob counts - Sonatype Nexus Repository - Sonatype Community](/content/community/t/usage-metrics-counts-are-much-higher-than-blob-counts/14591/1/index.html): Hello, I am running a Nexus OSS v3.78.1-02 installation. Since last week, I’ve been getting a banner saying that my instance is getting too big, and I need to add a licence or reduce the number of artefacts. 
I have deci… (596 words, Mar 12, 2025)
- [Custom plugins still possible starting with 3.78? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/custom-plugins-still-possible-starting-with-3-78/14589/index.html): Dear Sonatype, 
a year ago I published an authentication plugin on github which was gratefully picked up by a few companies (I can only tell from what people tell me in issues and mails). With the release of 3.78 you men… (1,530 words, Mar 12, 2025)
- [Custom plugins still possible starting with 3.78? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/custom-plugins-still-possible-starting-with-3-78/14589/1/index.html): Dear Sonatype, 
a year ago I published an authentication plugin on github which was gratefully picked up by a few companies (I can only tell from what people tell me in issues and mails). With the release of 3.78 you men… (1,529 words, Mar 12, 2025)
- [Invalid checksum files - Sonatype Nexus Repository - Sonatype Community](/content/community/t/invalid-checksum-files/14573/3/index.html): We have a repository in nexus sonatype repository, the type is proxy and format is maven2, this repository is used to mirror from upstream repo Central Repository: .After migration last month, our users said that the sha… (280 words, Mar 11, 2025)
- [R repositories not browsable with a H2 database backend - Sonatype Nexus Repository - Sonatype Community](/content/community/t/r-repositories-not-browsable-with-a-h2-database-backend/14567/3/index.html): We successfully migrated from OrientDB to H2 database on version 3.70.3 and upgraded all the say up to 3.76.0 without seeing this issue. 
Then we upgraded to version 3.77-0 and was unable to see our R repositories in the… (224 words, Mar 11, 2025)
- [Usage limit and licensing - Sonatype Nexus Repository - Sonatype Community](/content/community/t/usage-limit-and-licensing/14584/index.html): When a nexus instance reaches it’s 200k requests limit and a license is purchased, will this be mandatory from now on for this instance or just, until the requests have been reduced below that limit? And will a license a… (121 words, Mar 11, 2025)
- [Usage limit and licensing - Sonatype Nexus Repository - Sonatype Community](/content/community/t/usage-limit-and-licensing/14584/1/index.html): When a nexus instance reaches it’s 200k requests limit and a license is purchased, will this be mandatory from now on for this instance or just, until the requests have been reduced below that limit? And will a license a… (121 words, Mar 11, 2025)
- [Nexus npm Proxy Fetching Metadata Externally Despite Cached Packages - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-npm-proxy-fetching-metadata-externally-despite-cached-packages/14558/2/index.html): I have a Sonatype Nexus server configured with both hosted and proxy repositories by grouping them with grouped repo for npm. The proxy repository has outbound requests disabled, and my machines do not have internet acce… (225 words, Mar 11, 2025)
- [Updating from nexus-3.77.1-01 to nexus-3.78.1-02 messes up db <-> blob store - Sonatype Nexus Repository - Sonatype Community](/content/community/t/updating-from-nexus-3-77-1-01-to-nexus-3-78-1-02-messes-up-db-blob-store/14580/index.html): Hi there, I updated my Nexus repository this morning and it caused the soft link to the blob store directory in the file system to be overwritten by a new blob directory, resulting in a errors of the type 
ERROR: Could n&hellip; (560 words, Mar 11, 2025)
- [Updating from nexus-3.77.1-01 to nexus-3.78.1-02 messes up db <-> blob store - Sonatype Nexus Repository - Sonatype Community](/content/community/t/updating-from-nexus-3-77-1-01-to-nexus-3-78-1-02-messes-up-db-blob-store/14580/1/index.html): Hi there, I updated my Nexus repository this morning and it caused the soft link to the blob store directory in the file system to be overwritten by a new blob directory, resulting in a errors of the type 
ERROR: Could n&hellip; (517 words, Mar 11, 2025)
- [Nexus keeps using H2 database after migrating from H2 to PostgreSQL - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-keeps-using-h2-database-after-migrating-from-h2-to-postgresql/14569/2/index.html): I am trying to migrate the H2 database to an external PostgreSQL instance. DB-migrator executes without any errors and I can see the tables created in the target PostgreSQL database under schema ‘public’. 
I also created&hellip; (224 words, Mar 11, 2025)
- [Invalid checksum files - Sonatype Nexus Repository - Sonatype Community](/content/community/t/invalid-checksum-files/14573/index.html): We have a repository in nexus sonatype repository, the type is proxy and format is maven2, this repository is used to mirror from upstream repo Central Repository: .After migration last month, our users said that the sha&hellip; (276 words, Mar 11, 2025)
- [Invalid checksum files - Sonatype Nexus Repository - Sonatype Community](/content/community/t/invalid-checksum-files/14573/1/index.html): We have a repository in nexus sonatype repository, the type is proxy and format is maven2, this repository is used to mirror from upstream repo Central Repository: .After migration last month, our users said that the sha&hellip; (276 words, Mar 11, 2025)
- [Nexus keeps using H2 database after migrating from H2 to PostgreSQL - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-keeps-using-h2-database-after-migrating-from-h2-to-postgresql/14569/index.html): I am trying to migrate the H2 database to an external PostgreSQL instance. DB-migrator executes without any errors and I can see the tables created in the target PostgreSQL database under schema ‘public’. 
I also created&hellip; (227 words, Mar 10, 2025)
- [Nexus keeps using H2 database after migrating from H2 to PostgreSQL - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-keeps-using-h2-database-after-migrating-from-h2-to-postgresql/14569/1/index.html): I am trying to migrate the H2 database to an external PostgreSQL instance. DB-migrator executes without any errors and I can see the tables created in the target PostgreSQL database under schema ‘public’. 
I also created&hellip; (22 words, Mar 10, 2025)
- [Delete nuget package via api with apikeys - 403 Forbidden - Sonatype Nexus Repository - Sonatype Community](/content/community/t/delete-nuget-package-via-api-with-apikeys-403-forbidden/14568/index.html): hi, im building a pipeline to promote nuget packages from one repo to another and since the pipeline executes on windows its via powershell. im using my own api key and my user has nx-all rights as i am just testing here&hellip; (220 words, Mar 10, 2025)
- [Delete nuget package via api with apikeys - 403 Forbidden - Sonatype Nexus Repository - Sonatype Community](/content/community/t/delete-nuget-package-via-api-with-apikeys-403-forbidden/14568/1/index.html): hi, im building a pipeline to promote nuget packages from one repo to another and since the pipeline executes on windows its via powershell. im using my own api key and my user has nx-all rights as i am just testing here&hellip; (220 words, Mar 10, 2025)
- [R repositories not browsable with a H2 database backend - Sonatype Nexus Repository - Sonatype Community](/content/community/t/r-repositories-not-browsable-with-a-h2-database-backend/14567/index.html): We successfully migrated from OrientDB to H2 database on version 3.70.3 and upgraded all the say up to 3.76.0 without seeing this issue. 
Then we upgraded to version 3.77-0 and was unable to see our R repositories in the&hellip; (209 words, Mar 10, 2025)
- [R repositories not browsable with a H2 database backend - Sonatype Nexus Repository - Sonatype Community](/content/community/t/r-repositories-not-browsable-with-a-h2-database-backend/14567/1/index.html): We successfully migrated from OrientDB to H2 database on version 3.70.3 and upgraded all the say up to 3.76.0 without seeing this issue. 
Then we upgraded to version 3.77-0 and was unable to see our R repositories in the&hellip; (212 words, Mar 10, 2025)
- [Status of https://download.sonatype.com/nexus/3/latest-unix.tar.gz - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/status-of-https-download-sonatype-com-nexus-3-latest-unix-tar-gz/14565/1/index.html): Like many here, I use a script to update to the latest Sonatype Nexus versions. 
As of today, the URL https://download.sonatype.com/nexus/3/latest-unix.tar.gz redirects to https://sonatype-download.global.ssl.fastly.net/&hellip; (200 words, Mar 10, 2025)
- [Sonatype Nexus Repository 3.78.1 Released - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-repository-3-78-1-released/14559/index.html): Sonatype Nexus Repository 3.78.1 is now available. 
This release fixes multiple bugs impacting version 3.78.0 deployments. 
See the Sonatype Nexus Repository 3.78.0 - 3.78.1 Release Notes for full details. (95 words, Mar 8, 2025)
- [Sonatype Nexus Repository 3.78.1 Released - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-repository-3-78-1-released/14559/1/index.html): Sonatype Nexus Repository 3.78.1 is now available. 
This release fixes multiple bugs impacting version 3.78.0 deployments. 
See the Sonatype Nexus Repository 3.78.0 - 3.78.1 Release Notes for full details. (127 words, Mar 8, 2025)
- [Nexus npm Proxy Fetching Metadata Externally Despite Cached Packages - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-npm-proxy-fetching-metadata-externally-despite-cached-packages/14558/1/index.html): I have a Sonatype Nexus server configured with both hosted and proxy repositories by grouping them with grouped repo for npm. The proxy repository has outbound requests disabled, and my machines do not have internet acce&hellip; (224 words, Mar 7, 2025)
- [Sonatype Nexus Repository OSS Requests Per Day: Hard Limit? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-repository-oss-requests-per-day-hard-limit/14555/index.html): Hey, 
is the “Requests Per Day” a hard limit or a recommendation in recent Nexus Repository OSS Versions? (1,193 words, Mar 7, 2025)
- [Sonatype Nexus Repository OSS Requests Per Day: Hard Limit? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-repository-oss-requests-per-day-hard-limit/14555/1/index.html): Hey, 
is the “Requests Per Day” a hard limit or a recommendation in recent Nexus Repository OSS Versions? (1,268 words, Mar 7, 2025)
- [Re-encryption in nexus repository - Sonatype Nexus Repository - Sonatype Community](/content/community/t/re-encryption-in-nexus-repository/14503/5/index.html): We attempted the re-encryption in Nexus Repository based on the instructions on the pages below without success. 
Re-encryption in Nexus Repository Default Secret Encryption Key - #7 by lemonsterfy 
Nexus is installed on&hellip; (482 words, Mar 7, 2025)
- [Remove unused OrientDB files - Sonatype Nexus Repository - Sonatype Community](/content/community/t/remove-unused-orientdb-files/14541/3/index.html): I successfully completed a migration from OrientDB to the H2 database by following the instructions provided here. 
Notably, step 4 states: 

Copy the produced nexus.mv.db file to your $data-dir/db directory. 

However, &hellip; (226 words, Mar 6, 2025)
- [[Sonatype][Nexus OSS]: Error during transaction commit and more DB errors - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-oss-error-during-transaction-commit-and-more-db-errors/14542/3/index.html): I am using Nexus version 3.70.1-02 which is the last version that supports OrientDB. It is deployed on a k8s cluster as a pod. I have been facing multiple issues ever since I tried to fetch a statistics about sizes of di&hellip; (378 words, Mar 6, 2025)
- [[Sonatype][Nexus OSS]: Error during transaction commit and more DB errors - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-oss-error-during-transaction-commit-and-more-db-errors/14542/1/index.html): I am using Nexus version 3.70.1-02 which is the last version that supports OrientDB. It is deployed on a k8s cluster as a pod. I have been facing multiple issues ever since I tried to fetch a statistics about sizes of di&hellip; (378 words, Mar 5, 2025)
- [Remove unused OrientDB files - Sonatype Nexus Repository - Sonatype Community](/content/community/t/remove-unused-orientdb-files/14541/index.html): I successfully completed a migration from OrientDB to the H2 database by following the instructions provided here. 
Notably, step 4 states: 

Copy the produced nexus.mv.db file to your $data-dir/db directory. 

However, &hellip; (232 words, Mar 5, 2025)
- [Remove unused OrientDB files - Sonatype Nexus Repository - Sonatype Community](/content/community/t/remove-unused-orientdb-files/14541/1/index.html): I successfully completed a migration from OrientDB to the H2 database by following the instructions provided here. 
Notably, step 4 states: 

Copy the produced nexus.mv.db file to your $data-dir/db directory. 

However, &hellip; (237 words, Mar 5, 2025)
- [Sonatype Nexus Repository 3.78.0 Released - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-repository-3-78-0-released/14539/index.html): Sonatype Nexus Repository 3.78.0 is now available. 
This release contains multiple changes to underlying Nexus Repository architecture, including migrating to Spring Boot, shifting to JReleaser to assemble installers, an&hellip; (123 words, Mar 4, 2025)
- [Is the OrientDB to H2 Upgrade Possible on Nexus OSS v3.69? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/is-the-orientdb-to-h2-upgrade-possible-on-nexus-oss-v3-69/14528/3/index.html): Hello, I am trying to find the documentation about the upgrade procedure from OrientDB to H2 while running the v3.69 OSS app version. The Migrating to a new DB page refers to a Legacy method for pre-3.70 page section tha&hellip; (248 words, Mar 4, 2025)
- [NEXUS R Repository does not download from POSIT Packagemanager - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-r-repository-does-not-download-from-posit-packagemanager/13924/15/index.html): I’ve confiugred a r-proxy repository to provide R-Packages from POSIT Packagemanager using the following URL [https://packagemanager.posit.co/cran/__linux__/rhel9/latest]. 
  
 
Unfortunately the r-proxy repository didn’&hellip; (808 words, Mar 4, 2025)
- [Is the OrientDB to H2 Upgrade Possible on Nexus OSS v3.69? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/is-the-orientdb-to-h2-upgrade-possible-on-nexus-oss-v3-69/14528/index.html): Hello, I am trying to find the documentation about the upgrade procedure from OrientDB to H2 while running the v3.69 OSS app version. The Migrating to a new DB page refers to a Legacy method for pre-3.70 page section tha&hellip; (248 words, Mar 3, 2025)
- [Is the OrientDB to H2 Upgrade Possible on Nexus OSS v3.69? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/is-the-orientdb-to-h2-upgrade-possible-on-nexus-oss-v3-69/14528/1/index.html): Hello, I am trying to find the documentation about the upgrade procedure from OrientDB to H2 while running the v3.69 OSS app version. The Migrating to a new DB page refers to a Legacy method for pre-3.70 page section tha&hellip; (248 words, Mar 3, 2025)
- [Package.json scan in Nexus IQ - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/package-json-scan-in-nexus-iq/14526/index.html): I am getting 0 components identified when we scan package.json file but not for all package.json file. So for some, it is working . so, need to know why some package.json file is not getting scanned in Nexus IQ. what nee&hellip; (65 words, Mar 3, 2025)
- [Package.json scan in Nexus IQ - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/package-json-scan-in-nexus-iq/14526/1/index.html): I am getting 0 components identified when we scan package.json file but not for all package.json file. So for some, it is working . so, need to know why some package.json file is not getting scanned in Nexus IQ. what nee&hellip; (184 words, Mar 3, 2025)
- [Nexus IQ scan for Package.Json file - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-iq-scan-for-package-json-file/14523/2/index.html): Need your assistance to scan package.json using Nexus iq. For some package.json file, Scan is not successful which is giving zero components identified results (66 words, Mar 3, 2025)
- [Nexus IQ scan for Package.Json file - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-iq-scan-for-package-json-file/14523/index.html): Need your assistance to scan package.json using Nexus iq. For some package.json file, Scan is not successful which is giving zero components identified results (62 words, Mar 3, 2025)
- [Nexus IQ scan for Package.Json file - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-iq-scan-for-package-json-file/14523/1/index.html): Need your assistance to scan package.json using Nexus iq. For some package.json file, Scan is not successful which is giving zero components identified results (62 words, Mar 3, 2025)
- [package.json file scan in Nexus IQ - Community Announcements / News - Sonatype Community](/content/community/t/package-json-file-scan-in-nexus-iq/14522/index.html): I am getting 0 components identified when we scan package.json file but not for all package.json file. So for some, it is working . so, need to know why some package.json file is not getting scanned in Nexus IQ. what nee&hellip; (154 words, Mar 3, 2025)
- [Re-encryption in nexus repository - Sonatype Nexus Repository - Sonatype Community](/content/community/t/re-encryption-in-nexus-repository/14503/index.html): We attempted the re-encryption in Nexus Repository based on the instructions on the pages below without success. 
Re-encryption in Nexus Repository Default Secret Encryption Key - #7 by lemonsterfy 
Nexus is installed on&hellip; (488 words, Feb 28, 2025)
- [HTTP access failed due to unknown reasons - Sonatype Nexus Repository - Sonatype Community](/content/community/t/http-access-failed-due-to-unknown-reasons/14462/3/index.html): I encountered this problem inexplicably. I never figured out why it was so. Restarting didn’t work either. The error message is below. 
2025-02-24 22:10:50,915+0800 WARN  [quartz-10-thread-20] *SYSTEM org.sonatype.nexus.&hellip; (475 words, Feb 28, 2025)
- [Conan 2.0 remote login sometimes fail - Sonatype Nexus Repository - Sonatype Community](/content/community/t/conan-2-0-remote-login-sometimes-fail/14475/2/index.html): Versions 

Self-managed Sonatype Nexus Repository PRO 3.77.1-01 (trial)
Java openjdk 17.0.14 2025-01-21
PostgreSQL 17.4 (NOTE: We originally used the built-in H2 database. Upgraded to try to fix this issue with no luck)
c&hellip; (245 words, Feb 26, 2025)
- [Nexus Helm Proxy Fails for Newer Bitnami Charts (502 Bad Gateway) - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/nexus-helm-proxy-fails-for-newer-bitnami-charts-502-bad-gateway/14483/2/index.html): I’m running Nexus 3.51.0-01 and have a Helm proxy repository configured to pull charts from https://charts.bitnami.com/bitnami. Everything works fine for older versions of Bitnami charts (e.g., bitnami/redis:20.3.0), but&hellip; (243 words, Feb 26, 2025)
- [Nexus Helm Proxy Fails for Newer Bitnami Charts (502 Bad Gateway) - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/nexus-helm-proxy-fails-for-newer-bitnami-charts-502-bad-gateway/14483/index.html): I’m running Nexus 3.51.0-01 and have a Helm proxy repository configured to pull charts from https://charts.bitnami.com/bitnami. Everything works fine for older versions of Bitnami charts (e.g., bitnami/redis:20.3.0), but&hellip; (239 words, Feb 26, 2025)
- [Nexus Helm Proxy Fails for Newer Bitnami Charts (502 Bad Gateway) - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/nexus-helm-proxy-fails-for-newer-bitnami-charts-502-bad-gateway/14483/1/index.html): I’m running Nexus 3.51.0-01 and have a Helm proxy repository configured to pull charts from https://charts.bitnami.com/bitnami. Everything works fine for older versions of Bitnami charts (e.g., bitnami/redis:20.3.0), but&hellip; (239 words, Feb 26, 2025)
- [Sonatype Nexus Repository 3.77.2 Released - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-repository-3-77-2-released/14480/index.html): Sonatype Nexus Repository 3.77.2 is now available. This release includes multiple performance-related bug fixes. See the Sonatype Nexus Repository 3.77.0 - 3.77.2 Release Notes for full details. (113 words, Feb 25, 2025)
- [Sonatype Nexus Repository 3.77.2 Released - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-repository-3-77-2-released/14480/1/index.html): Sonatype Nexus Repository 3.77.2 is now available. This release includes multiple performance-related bug fixes. See the Sonatype Nexus Repository 3.77.0 - 3.77.2 Release Notes for full details. (97 words, Feb 25, 2025)
- [Upgrading Sonatype Nexus OSS 3.70.3-01 from OrientDB to PostgreSQL - Sonatype Nexus Repository - Sonatype Community](/content/community/t/upgrading-sonatype-nexus-oss-3-70-3-01-from-orientdb-to-postgresql/14448/3/index.html): Hi, 
I am planning to migrate our existing Sonatype Nexus OSS 3.70.3-01 from OrientDB to PostgreSQL database. 
I have followed below link for database migration from OrientDB to PostgreSQL. 
https://help.sonatype.com/en/&hellip; (782 words, Feb 25, 2025)
- [Conan 2.0 remote login sometimes fail - Sonatype Nexus Repository - Sonatype Community](/content/community/t/conan-2-0-remote-login-sometimes-fail/14475/index.html): Versions 

Self-managed Sonatype Nexus Repository PRO 3.77.1-01 (trial)
Java openjdk 17.0.14 2025-01-21
PostgreSQL 17.4 (NOTE: We originally used the built-in H2 database. Upgraded to try to fix this issue with no luck)
c&hellip; (250 words, Feb 25, 2025)
- [Conan 2.0 remote login sometimes fail - Sonatype Nexus Repository - Sonatype Community](/content/community/t/conan-2-0-remote-login-sometimes-fail/14475/1/index.html): Versions 

Self-managed Sonatype Nexus Repository PRO 3.77.1-01 (trial)
Java openjdk 17.0.14 2025-01-21
PostgreSQL 17.4 (NOTE: We originally used the built-in H2 database. Upgraded to try to fix this issue with no luck)
c&hellip; (248 words, Feb 25, 2025)
- [Support for other Data Bases other then H2 or PostGreSQL - Sonatype Nexus Repository - Sonatype Community](/content/community/t/support-for-other-data-bases-other-then-h2-or-postgresql/14463/index.html): Hi all, 
Is there a plan to support other databases besides H2 or PostgreSQL? We are planning to migrate to the Pro version, but we have no DBA know-how on PostgreSQL, and it seems our current H2 database isn’t sufficien&hellip; (980 words, Feb 24, 2025)
- [Support for other Data Bases other then H2 or PostGreSQL - Sonatype Nexus Repository - Sonatype Community](/content/community/t/support-for-other-data-bases-other-then-h2-or-postgresql/14463/1/index.html): Hi all, 
Is there a plan to support other databases besides H2 or PostgreSQL? We are planning to migrate to the Pro version, but we have no DBA know-how on PostgreSQL, and it seems our current H2 database isn’t sufficien&hellip; (867 words, Feb 24, 2025)
- [HTTP access failed due to unknown reasons - Sonatype Nexus Repository - Sonatype Community](/content/community/t/http-access-failed-due-to-unknown-reasons/14462/1/index.html): I encountered this problem inexplicably. I never figured out why it was so. Restarting didn’t work either. The error message is below. 
2025-02-24 22:10:50,915+0800 WARN  [quartz-10-thread-20] *SYSTEM org.sonatype.nexus.&hellip; (478 words, Feb 24, 2025)
- [Downgrading from Nexus Community Edition to OSS - Sonatype Nexus Repository - Sonatype Community](/content/community/t/downgrading-from-nexus-community-edition-to-oss/14439/4/index.html): I manage the devops for a small team of developers (15-20), and we’ve been using Nexus 2 since maybe 2017. I inherited ownership of the Nexus server and in an effort to keep us up to date, have done weekly updates of our&hellip; (663 words, Feb 21, 2025)
- [Issue "unable to migrate secrets for blobstore" after upgrade from 3.71 to 3.77 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/issue-unable-to-migrate-secrets-for-blobstore-after-upgrade-from-3-71-to-3-77/14450/index.html): Hello to all the community, 
I have tested the migration from 3.71 to latest 3.77.1 
and I encountered an issue with all my S3 blobstores: 
there are all unavailable with log messages saying: 
“unable to migrate secrets &hellip; (196 words, Feb 21, 2025)
- [Issue "unable to migrate secrets for blobstore" after upgrade from 3.71 to 3.77 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/issue-unable-to-migrate-secrets-for-blobstore-after-upgrade-from-3-71-to-3-77/14450/1/index.html): Hello to all the community, 
I have tested the migration from 3.71 to latest 3.77.1 
and I encountered an issue with all my S3 blobstores: 
there are all unavailable with log messages saying: 
“unable to migrate secrets &hellip; (195 words, Feb 21, 2025)
- [Upgrading Sonatype Nexus OSS 3.70.3-01 from OrientDB to PostgreSQL - Sonatype Nexus Repository - Sonatype Community](/content/community/t/upgrading-sonatype-nexus-oss-3-70-3-01-from-orientdb-to-postgresql/14448/1/index.html): Hi, 
I am planning to migrate our existing Sonatype Nexus OSS 3.70.3-01 from OrientDB to PostgreSQL database. 
I have followed below link for database migration from OrientDB to PostgreSQL. 
https://help.sonatype.com/en/&hellip; (777 words, Feb 21, 2025)
- [Announcing a New Integration with GitLab Ultimate! - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/announcing-a-new-integration-with-gitlab-ultimate/13716/2/index.html): We’re excited to announce our new integration with GitLab Ultimate! With this update, you can now view detailed vulnerability findings from Lifecycle scans right in your GitLab Vulnerability Report. Plus, your project’s &hellip; (229 words, Feb 21, 2025)
- [Downgrading from Nexus Community Edition to OSS - Sonatype Nexus Repository - Sonatype Community](/content/community/t/downgrading-from-nexus-community-edition-to-oss/14439/index.html): I manage the devops for a small team of developers (15-20), and we’ve been using Nexus 2 since maybe 2017. I inherited ownership of the Nexus server and in an effort to keep us up to date, have done weekly updates of our&hellip; (663 words, Feb 20, 2025)
- [Downgrading from Nexus Community Edition to OSS - Sonatype Nexus Repository - Sonatype Community](/content/community/t/downgrading-from-nexus-community-edition-to-oss/14439/1/index.html): I manage the devops for a small team of developers (15-20), and we’ve been using Nexus 2 since maybe 2017. I inherited ownership of the Nexus server and in an effort to keep us up to date, have done weekly updates of our&hellip; (663 words, Feb 20, 2025)
- [Modifying the proxies blocked status via scripting is not being retained - Sonatype Nexus Repository - Sonatype Community](/content/community/t/modifying-the-proxies-blocked-status-via-scripting-is-not-being-retained/14434/3/index.html): I have created a groovy script that is used for updating the a proxy repositories blocked status. The intent here is I need to automate sometimes flipping a handful of proxies to being blocked (my understanding is this w&hellip; (636 words, Feb 20, 2025)
- [New to Nexus Repository Pro? Part 1 - Sonatype Learn - Sonatype Community](/content/community/t/new-to-nexus-repository-pro-part-1/14435/1/index.html): If you’re moving from Nexus Repository Community Edition to Pro, take it from us: now is the time to check the foundations of your deployment and plan for future success. 
Take a look at these five resources – each less &hellip; (202 words, Feb 20, 2025)
- [Modifying the proxies blocked status via scripting is not being retained - Sonatype Nexus Repository - Sonatype Community](/content/community/t/modifying-the-proxies-blocked-status-via-scripting-is-not-being-retained/14434/index.html): I have created a groovy script that is used for updating the a proxy repositories blocked status. The intent here is I need to automate sometimes flipping a handful of proxies to being blocked (my understanding is this w&hellip; (535 words, Feb 20, 2025)
- [Modifying the proxies blocked status via scripting is not being retained - Sonatype Nexus Repository - Sonatype Community](/content/community/t/modifying-the-proxies-blocked-status-via-scripting-is-not-being-retained/14434/1/index.html): I have created a groovy script that is used for updating the a proxy repositories blocked status. The intent here is I need to automate sometimes flipping a handful of proxies to being blocked (my understanding is this w&hellip; (647 words, Feb 20, 2025)
- [Nothing is uploaded to procy repo as per course "Sonatype Nexus Repository Demo Installation and Usage" - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nothing-is-uploaded-to-procy-repo-as-per-course-sonatype-nexus-repository-demo-installation-and-usage/14428/2/index.html): I have just downloaded and launched nexus community and following the course “Sonatype Nexus Repository Demo Installation and Usage”. 
On local machine, I updated the settings.mxl for maven as indicated, then I create po&hellip; (451 words, Feb 20, 2025)
- [Nothing is uploaded to procy repo as per course "Sonatype Nexus Repository Demo Installation and Usage" - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nothing-is-uploaded-to-procy-repo-as-per-course-sonatype-nexus-repository-demo-installation-and-usage/14428/index.html): I have just downloaded and launched nexus community and following the course “Sonatype Nexus Repository Demo Installation and Usage”. 
On local machine, I updated the settings.mxl for maven as indicated, then I create po&hellip; (470 words, Feb 19, 2025)
- [Nothing is uploaded to procy repo as per course "Sonatype Nexus Repository Demo Installation and Usage" - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nothing-is-uploaded-to-procy-repo-as-per-course-sonatype-nexus-repository-demo-installation-and-usage/14428/1/index.html): I have just downloaded and launched nexus community and following the course “Sonatype Nexus Repository Demo Installation and Usage”. 
On local machine, I updated the settings.mxl for maven as indicated, then I create po&hellip; (469 words, Feb 19, 2025)
- [How to deploy Sonatype Nexus CE to K8s? - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/how-to-deploy-sonatype-nexus-ce-to-k8s/14360/5/index.html): Hi everyone, 
we are using Sonatype Nexus OSS hosted in a Kubernetes Cluster, deployed using the Helm chart nexus-repository-manager from the repository at https://sonatype.github.io/helm3-charts/. 
With the announcement&hellip; (434 words, Feb 19, 2025)
- [How to deploy Sonatype Nexus CE to K8s? - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/how-to-deploy-sonatype-nexus-ce-to-k8s/14360/4/index.html): Hi everyone, 
we are using Sonatype Nexus OSS hosted in a Kubernetes Cluster, deployed using the Helm chart nexus-repository-manager from the repository at https://sonatype.github.io/helm3-charts/. 
With the announcement&hellip; (434 words, Feb 19, 2025)
- [How to deploy Sonatype Nexus CE to K8s? - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/how-to-deploy-sonatype-nexus-ce-to-k8s/14360/3/index.html): Hi everyone, 
we are using Sonatype Nexus OSS hosted in a Kubernetes Cluster, deployed using the Helm chart nexus-repository-manager from the repository at https://sonatype.github.io/helm3-charts/. 
With the announcement&hellip; (433 words, Feb 18, 2025)
- [Access to the docker registry using none standard port fails - port value is duplicated - Sonatype Nexus Repository - Sonatype Community](/content/community/t/access-to-the-docker-registry-using-none-standard-port-fails-port-value-is-duplicated/14398/4/index.html): I have just updated my Nexus community edition from version nexus-3.76.1-01 to nexus-3.77.1-01 to the latest nexus-3.77.1-01 version. 
However, it stopped to pull docker images. 
In the Release Notes for version 3.77.1 y&hellip; (401 words, Feb 18, 2025)
- [Issue with HTTPRequest Jenkins Plugin in JenkinsFile for Deleting Nexus Components via API - Sonatype Nexus Repository - Sonatype Community](/content/community/t/issue-with-httprequest-jenkins-plugin-in-jenkinsfile-for-deleting-nexus-components-via-api/13921/5/index.html): Hi everyone, 
I’m trying to delete components in Nexus using the httpRequest plugin in a Jenkins pipeline. The deletion works — the component gets deleted from Nexus — but I never receive the expected 204 No Content resp&hellip; (323 words, Feb 18, 2025)
- [Sonatype Nexus OSS 3.75.1-01 pip upload issue - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-oss-3-75-1-01-pip-upload-issue/14389/3/index.html): Summary 
We are currently using Nexus Repository OSS 3.75.1-01 to manage private PyPI packages. However, we noticed that Nexus only supports setuptools up to version 51.3.3. Many modern PyPI packages require setuptools &gt;=&hellip; (338 words, Feb 18, 2025)
- [How to deploy Sonatype Nexus CE to K8s? - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/how-to-deploy-sonatype-nexus-ce-to-k8s/14360/2/index.html): Hi everyone, 
we are using Sonatype Nexus OSS hosted in a Kubernetes Cluster, deployed using the Helm chart nexus-repository-manager from the repository at https://sonatype.github.io/helm3-charts/. 
With the announcement&hellip; (434 words, Feb 18, 2025)
- [Update Your IQ Server License Threat Groups - Sonatype Labs - Sonatype Community](/content/community/t/update-your-iq-server-license-threat-groups/3094/55/index.html): The license threat group updater will apply the latest Sonatype provided license classification to your running IQ server’s license threat groups. This will alleviate any “License Threat Group not Assigned” policy violat&hellip; (5,184 words, Feb 18, 2025)
- [How to change database for sonatype nexus service? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-to-change-database-for-sonatype-nexus-service/14404/2/index.html): I want to change my sonatype nexus database,and I use nexus 3.76 version. I have tried to modify  field ‘nexus.datastore.nexus.jdbcUrl’ in etc/fabric/nexus-store.properties file, I also tried to set system property ‘nexu&hellip; (87 words, Feb 18, 2025)
- [Developing a new format - Sonatype Nexus Repository - Sonatype Community](/content/community/t/developing-a-new-format/14351/8/index.html): Hi team, 
We, at WSO2 (https://wso2.com/), are trying to implement a Nexus3 format to support Ballerina (https://ballerina.io/), an integration-specific open-source language, artifacts. I went through a few implementatio&hellip; (707 words, Feb 18, 2025)
- [How to change database for sonatype nexus service? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-to-change-database-for-sonatype-nexus-service/14404/index.html): I want to change my sonatype nexus database,and I use nexus 3.76 version. I have tried to modify  field ‘nexus.datastore.nexus.jdbcUrl’ in etc/fabric/nexus-store.properties file, I also tried to set system property ‘nexu&hellip; (74 words, Feb 17, 2025)
- [How to change database for sonatype nexus service? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-to-change-database-for-sonatype-nexus-service/14404/1/index.html): I want to change my sonatype nexus database,and I use nexus 3.76 version. I have tried to modify  field ‘nexus.datastore.nexus.jdbcUrl’ in etc/fabric/nexus-store.properties file, I also tried to set system property ‘nexu&hellip; (174 words, Feb 17, 2025)
- [Access to the docker registry using none standard port fails - port value is duplicated - Sonatype Nexus Repository - Sonatype Community](/content/community/t/access-to-the-docker-registry-using-none-standard-port-fails-port-value-is-duplicated/14398/1/index.html): I have just updated my Nexus community edition from version nexus-3.76.1-01 to nexus-3.77.1-01 to the latest nexus-3.77.1-01 version. 
However, it stopped to pull docker images. 
In the Release Notes for version 3.77.1 y&hellip; (331 words, Feb 14, 2025)
- [R repositories not browsable with a PostgreSQL database backend - Sonatype Nexus Repository - Sonatype Community](/content/community/t/r-repositories-not-browsable-with-a-postgresql-database-backend/14392/3/index.html): When I configure Nexus (CE, 3.77.1) with a PostgreSQL database, I cannot browse R repositories anymore. Instead an “Database error” is displayed, and the Nexus logfile has the following Exception logged: 
2025-02-14 15:5&hellip; (501 words, Feb 14, 2025)
- [Maintenance Downtime of Community on Wednesday, February 19th at 7:30 p.m ET - Community Announcements - Sonatype Community](/content/community/t/maintenance-downtime-of-community-on-wednesday-february-19th-at-7-30-p-m-et/14393/3/index.html): Starting around 7:30 p.m. ET on Wednesday, February 19th, the Community forum will be brought offline to perform necessary maintenance and upgrades. 
This downtime is localized to just the community forum, and will not a&hellip; (160 words, Feb 14, 2025)
- [Maintenance Downtime of Community on Wednesday, February 19th at 7:30 p.m ET - Community Announcements - Sonatype Community](/content/community/t/maintenance-downtime-of-community-on-wednesday-february-19th-at-7-30-p-m-et/14393/index.html): Starting around 7:30 p.m. ET on Wednesday, February 19th, the Community forum will be brought offline to perform necessary maintenance and upgrades. 
This downtime is localized to just the community forum, and will not a&hellip; (166 words, Feb 14, 2025)
- [Maintenance Downtime of Community on Wednesday, February 19th at 7:30 p.m ET - Community Announcements - Sonatype Community](/content/community/t/maintenance-downtime-of-community-on-wednesday-february-19th-at-7-30-p-m-et/14393/1/index.html): Starting around 7:30 p.m. ET on Wednesday, February 19th, the Community forum will be brought offline to perform necessary maintenance and upgrades. 
This downtime is localized to just the community forum, and will not a&hellip; (181 words, Feb 14, 2025)
- [R repositories not browsable with a PostgreSQL database backend - Sonatype Nexus Repository - Sonatype Community](/content/community/t/r-repositories-not-browsable-with-a-postgresql-database-backend/14392/index.html): When I configure Nexus (CE, 3.77.1) with a PostgreSQL database, I cannot browse R repositories anymore. Instead an “Database error” is displayed, and the Nexus logfile has the following Exception logged: 
2025-02-14 15:5&hellip; (400 words, Feb 14, 2025)
- [Insufficient grace period for community tier - Sonatype Nexus Repository - Sonatype Community](/content/community/t/insufficient-grace-period-for-community-tier/14378/4/index.html): Dear Sonatype, 
you recently announced the introduction of the community tier and I would like to provide you with some feedback from your users’ perspective on how you introduced this critical change. 
First of all, I h&hellip; (1,424 words, Feb 14, 2025)
- [Sonatype Nexus OSS 3.75.1-01 pip upload issue - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-oss-3-75-1-01-pip-upload-issue/14389/1/index.html): Summary 
We are currently using Nexus Repository OSS 3.75.1-01 to manage private PyPI packages. However, we noticed that Nexus only supports setuptools up to version 51.3.3. Many modern PyPI packages require setuptools &gt;=&hellip; (336 words, Feb 14, 2025)
- [Developing a new format - Sonatype Nexus Repository - Sonatype Community](/content/community/t/developing-a-new-format/14351/4/index.html): Hi team, 
We, at WSO2 (https://wso2.com/), are trying to implement a Nexus3 format to support Ballerina (https://ballerina.io/), an integration-specific open-source language, artifacts. I went through a few implementatio&hellip; (713 words, Feb 13, 2025)
- [Update Your IQ Server License Threat Groups - Sonatype Labs - Sonatype Community](/content/community/t/update-your-iq-server-license-threat-groups/3094/54/index.html): The license threat group updater will apply the latest Sonatype provided license classification to your running IQ server’s license threat groups. This will alleviate any “License Threat Group not Assigned” policy violat&hellip; (496 words, Feb 13, 2025)
- [Phantom components found during IQ scans? - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/phantom-components-found-during-iq-scans/14221/2/index.html): I have experienced numerous phantom components throughout my time scanning projects with IQ. Components that do not appear to exist within the project’s code, its dependencies, or sub-dependencies. Why is this, and what &hellip; (134 words, Feb 13, 2025)
- [Insufficient grace period for community tier - Sonatype Nexus Repository - Sonatype Community](/content/community/t/insufficient-grace-period-for-community-tier/14378/1/index.html): Dear Sonatype, 
you recently announced the introduction of the community tier and I would like to provide you with some feedback from your users’ perspective on how you introduced this critical change. 
First of all, I h&hellip; (1,424 words, Feb 13, 2025)
- ["401 Content access is protected by token" authentication failure while performing maven release - Central Repository - Sonatype Community](/content/community/t/401-content-access-is-protected-by-token-authentication-failure-while-performing-maven-release/12741/25/index.html): I am getting a “401 Content access is protected by token” authentication failure while performing maven release. But I did not make any changes regarding Sonatype/Nexus. 
[ERROR] Failed to execute goal org.sonatype.plugi&hellip; (1,007 words, Feb 12, 2025)
- [About "Advance Search" - Sonatype Nexus Repository - Sonatype Community](/content/community/t/about-advance-search/14366/2/index.html): We are using Sonatype Repository Nexus 3.74.01,when I tried to use “Advanced search…”, it shows me “Search feature is not available as you do not have the required permissionsSorry you are not permitted to use the featur&hellip; (172 words, Feb 12, 2025)
- [Warnings maven-metadata.xml - Sonatype Nexus Repository - Sonatype Community](/content/community/t/warnings-maven-metadata-xml/14356/3/index.html): I upgraded nexus from 3.69.0 to 3.70.3 and switched to the H2 database following the steps on the Nexus websites. 
I am getting a lot of warnings in the log with the information: 
WARN  [qtp1510662161-5912] XXXX org.sona&hellip; (178 words, Feb 11, 2025)
- [How to browse/cleanup components/assets in groovy script with H2 instead of OrientDB (e.g. without StorageFacet) - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-to-browse-cleanup-components-assets-in-groovy-script-with-h2-instead-of-orientdb-e-g-without-storagefacet/13733/9/index.html): Hi, 
There are many examples how to browse/cleanup components/assets via groovy scripts like so - GitHub - PhilSwiss/nexus-cleanup: Remove old releases from a Maven2-repository on Nexus3 - but after switching to H2 inste&hellip; (407 words, Feb 11, 2025)
- [About "Advance Search" - Sonatype Nexus Repository - Sonatype Community](/content/community/t/about-advance-search/14366/index.html): We are using Sonatype Repository Nexus 3.74.01,when I tried to use “Advanced search…”, it shows me “Search feature is not available as you do not have the required permissionsSorry you are not permitted to use the featur&hellip; (144 words, Feb 11, 2025)
- [About "Advance Search" - Sonatype Nexus Repository - Sonatype Community](/content/community/t/about-advance-search/14366/1/index.html): We are using Sonatype Repository Nexus 3.74.01,when I tried to use “Advanced search…”, it shows me “Search feature is not available as you do not have the required permissionsSorry you are not permitted to use the featur&hellip; (149 words, Feb 11, 2025)
- [Update Your IQ Server License Threat Groups - Sonatype Labs - Sonatype Community](/content/community/t/update-your-iq-server-license-threat-groups/3094/53/index.html): The license threat group updater will apply the latest Sonatype provided license classification to your running IQ server’s license threat groups. This will alleviate any “License Threat Group not Assigned” policy violat&hellip; (690 words, Feb 11, 2025)
- [Authentication with Google Cloud Artifact Registry - Sonatype Nexus Repository - Sonatype Community](/content/community/t/authentication-with-google-cloud-artifact-registry/14365/1/index.html): Hi, 
I trying to use Nexus as an on-prem proxy for a Google Cloud Artifact Registry. The Artifact Registry is configured with the format “Docker” and type “Standard”.  In Nexus I’ve tried both using username _json_key an&hellip; (149 words, Feb 10, 2025)
- [Sonatype Nexus Repository OSS is now Community Edition - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-repository-oss-is-now-community-edition/14324/4/index.html): As of version 3.77.0, the free edition of Nexus Repository is now called Sonatype Nexus Repository Community Edition. To learn more about why Sonatype is making this change, read this message from our founder. 
Community&hellip; (339 words, Feb 10, 2025)
- [How to deploy Sonatype Nexus CE to K8s? - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/how-to-deploy-sonatype-nexus-ce-to-k8s/14360/index.html): Hi everyone, 
we are using Sonatype Nexus OSS hosted in a Kubernetes Cluster, deployed using the Helm chart nexus-repository-manager from the repository at https://sonatype.github.io/helm3-charts/. 
With the announcement&hellip; (434 words, Feb 10, 2025)
- [How to deploy Sonatype Nexus CE to K8s? - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/how-to-deploy-sonatype-nexus-ce-to-k8s/14360/1/index.html): Hi everyone, 
we are using Sonatype Nexus OSS hosted in a Kubernetes Cluster, deployed using the Helm chart nexus-repository-manager from the repository at https://sonatype.github.io/helm3-charts/. 
With the announcement&hellip; (434 words, Feb 10, 2025)
- [Warnings maven-metadata.xml - Sonatype Nexus Repository - Sonatype Community](/content/community/t/warnings-maven-metadata-xml/14356/index.html): I upgraded nexus from 3.69.0 to 3.70.3 and switched to the H2 database following the steps on the Nexus websites. 
I am getting a lot of warnings in the log with the information: 
WARN  [qtp1510662161-5912] XXXX org.sona&hellip; (181 words, Feb 9, 2025)
- [Warnings maven-metadata.xml - Sonatype Nexus Repository - Sonatype Community](/content/community/t/warnings-maven-metadata-xml/14356/1/index.html): I upgraded nexus from 3.69.0 to 3.70.3 and switched to the H2 database following the steps on the Nexus websites. 
I am getting a lot of warnings in the log with the information: 
WARN  [qtp1510662161-5912] XXXX org.sona&hellip; (182 words, Feb 9, 2025)
- [Update Your IQ Server License Threat Groups - Sonatype Labs - Sonatype Community](/content/community/t/update-your-iq-server-license-threat-groups/3094/52/index.html): The license threat group updater will apply the latest Sonatype provided license classification to your running IQ server’s license threat groups. This will alleviate any “License Threat Group not Assigned” policy violat&hellip; (648 words, Feb 7, 2025)
- [Developing a new format - Sonatype Nexus Repository - Sonatype Community](/content/community/t/developing-a-new-format/14351/index.html): Hi team, 
We, at WSO2 (https://wso2.com/), are trying to implement a Nexus3 format to support Ballerina (https://ballerina.io/), an integration-specific open-source language, artifacts. I went through a few implementatio&hellip; (690 words, Feb 7, 2025)
- [Developing a new format - Sonatype Nexus Repository - Sonatype Community](/content/community/t/developing-a-new-format/14351/1/index.html): Hi team, 
We, at WSO2 (https://wso2.com/), are trying to implement a Nexus3 format to support Ballerina (https://ballerina.io/), an integration-specific open-source language, artifacts. I went through a few implementatio&hellip; (707 words, Feb 7, 2025)
- [Sonatype Nexus Repository 3.77.1 Released - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-repository-3-77-1-released/14349/index.html): Sonatype Nexus Repository 3.77.1 is now available. 
This release fixes an issue in 3.77.0 where using the X-Forwarded-Port header with that exact letter case caused Docker repositories to return a 500 Server Error due to&hellip; (137 words, Feb 7, 2025)
- [Sonatype Nexus Repository 3.77.1 Released - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-repository-3-77-1-released/14349/1/index.html): Sonatype Nexus Repository 3.77.1 is now available. 
This release fixes an issue in 3.77.0 where using the X-Forwarded-Port header with that exact letter case caused Docker repositories to return a 500 Server Error due to&hellip; (153 words, Feb 7, 2025)
- [State and future of Composer support (community plugin clashes with official implementation) - Sonatype Nexus Repository - Sonatype Community](/content/community/t/state-and-future-of-composer-support-community-plugin-clashes-with-official-implementation/14337/3/index.html): Hi, 
I’ve been working on the Nexus Repository Composer Format community plugin (sonatype-nexus-community/nexus-repository-composer on GitHub) recently including major refactoring for compatibility with Nexus 3.71+ datas&hellip; (1,005 words, Feb 6, 2025)
- [State and future of Composer support (community plugin clashes with official implementation) - Sonatype Nexus Repository - Sonatype Community](/content/community/t/state-and-future-of-composer-support-community-plugin-clashes-with-official-implementation/14337/2/index.html): Hi, 
I’ve been working on the Nexus Repository Composer Format community plugin (sonatype-nexus-community/nexus-repository-composer on GitHub) recently including major refactoring for compatibility with Nexus 3.71+ datas&hellip; (1,009 words, Feb 6, 2025)
- [Changes to Nexus Repository Core codebase - Sonatype Nexus Repository - Sonatype Community](/content/community/t/changes-to-nexus-repository-core-codebase/14341/5/index.html): With version 3.77.0 Nexus Repository has become “Community Edition” with the changes/restrictions described by Sonatype. 
Brain Fox is mentioning the following in his blog post (Introducing Nexus Repository Community Edi&hellip; (646 words, Feb 6, 2025)
- [Changes to Nexus Repository Core codebase - Sonatype Nexus Repository - Sonatype Community](/content/community/t/changes-to-nexus-repository-core-codebase/14341/index.html): With version 3.77.0 Nexus Repository has become “Community Edition” with the changes/restrictions described by Sonatype. 
Brain Fox is mentioning the following in his blog post (Introducing Nexus Repository Community Edi&hellip; (919 words, Feb 6, 2025)
- [Changes to Nexus Repository Core codebase - Sonatype Nexus Repository - Sonatype Community](/content/community/t/changes-to-nexus-repository-core-codebase/14341/1/index.html): With version 3.77.0 Nexus Repository has become “Community Edition” with the changes/restrictions described by Sonatype. 
Brain Fox is mentioning the following in his blog post (Introducing Nexus Repository Community Edi&hellip; (919 words, Feb 6, 2025)
- [State and future of Composer support (community plugin clashes with official implementation) - Sonatype Nexus Repository - Sonatype Community](/content/community/t/state-and-future-of-composer-support-community-plugin-clashes-with-official-implementation/14337/index.html): Hi, 
I’ve been working on the Nexus Repository Composer Format community plugin (sonatype-nexus-community/nexus-repository-composer on GitHub) recently including major refactoring for compatibility with Nexus 3.71+ datas&hellip; (993 words, Feb 5, 2025)
- [State and future of Composer support (community plugin clashes with official implementation) - Sonatype Nexus Repository - Sonatype Community](/content/community/t/state-and-future-of-composer-support-community-plugin-clashes-with-official-implementation/14337/1/index.html): Hi, 
I’ve been working on the Nexus Repository Composer Format community plugin (sonatype-nexus-community/nexus-repository-composer on GitHub) recently including major refactoring for compatibility with Nexus 3.71+ datas&hellip; (1,025 words, Feb 5, 2025)
- [Why Is Nexus Docker Repository Consuming More Space Than Docker Registry? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/why-is-nexus-docker-repository-consuming-more-space-than-docker-registry/14266/3/index.html): Hi , 
I’m using Nexus 3.x as a Docker registry to store around 30 Docker images. When I use the official Docker Registry for storing the same images, it consumes around 10GB. However, with Nexus as the Docker registry, i&hellip; (184 words, Feb 4, 2025)
- [Migrating to a PostgreSQL Database for Nexus Repository - Sonatype Learn - Sonatype Community](/content/community/t/migrating-to-a-postgresql-database-for-nexus-repository/14327/index.html): Upgrade_Migrate Job Aid.pdf (371.8 KB) 
If you’re treating Nexus Repository like the critical piece of digital infrastructure it is, then you want stability, flexibility, and minimal downtime. The absolute, hands-down be&hellip; (170 words, Feb 4, 2025)
- [Migrating to a PostgreSQL Database for Nexus Repository - Sonatype Learn - Sonatype Community](/content/community/t/migrating-to-a-postgresql-database-for-nexus-repository/14327/1/index.html): Upgrade_Migrate Job Aid.pdf (371.8 KB) 
If you’re treating Nexus Repository like the critical piece of digital infrastructure it is, then you want stability, flexibility, and minimal downtime. The absolute, hands-down be&hellip; (175 words, Feb 4, 2025)
- [Sonatype Nexus Repository 3.77.0 Released - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-repository-3-77-0-released/14326/index.html): Sonatype Nexus Repository version 3.77.0 is now available. 
With this release, Nexus Repository OSS becomes Nexus Repository Community Edition. This release also includes support for proxy Hugging Face repositories, cont&hellip; (120 words, Feb 4, 2025)
- [Sonatype Nexus Repository 3.77.0 Released - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-repository-3-77-0-released/14326/1/index.html): Sonatype Nexus Repository version 3.77.0 is now available. 
With this release, Nexus Repository OSS becomes Nexus Repository Community Edition. This release also includes support for proxy Hugging Face repositories, cont&hellip; (137 words, Feb 4, 2025)
- [Sonatype Nexus Repository OSS is now Community Edition - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-repository-oss-is-now-community-edition/14324/index.html): As of version 3.77.0, the free edition of Nexus Repository is now called Sonatype Nexus Repository Community Edition. To learn more about why Sonatype is making this change, read this message from our founder. 
Community&hellip; (333 words, Feb 4, 2025)
- [Sonatype Nexus Repository OSS is now Community Edition - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-repository-oss-is-now-community-edition/14324/1/index.html): As of version 3.77.0, the free edition of Nexus Repository is now called Sonatype Nexus Repository Community Edition. To learn more about why Sonatype is making this change, read this message from our founder. 
Community&hellip; (342 words, Feb 4, 2025)
- [Podman login not working with Nexus OSS 3.28.0-0 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/podman-login-not-working-with-nexus-oss-3-28-0-0/6016/4/index.html): Hi Team, 
I am able to login to my private docker registry (Nexus OSS 3.28.0-0) from docker but the same thing not working with podman,  same with anonymous pull, works with docker but not with podman. 
any help will be &hellip; (362 words, Feb 4, 2025)
- [Uploading Artifacts - Sonatype Nexus Repository - Sonatype Community](/content/community/t/uploading-artifacts/718/6/index.html): I am trying to upload Snapshot.jar file to nexus and I am getting this error. 
Return code is: 400, ReasonPhrase: Detected content type [application/x-sh], but expected [application/java-archive]: 
When I change the file&hellip; (451 words, Feb 4, 2025)
- [Why Is Nexus Docker Repository Consuming More Space Than Docker Registry? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/why-is-nexus-docker-repository-consuming-more-space-than-docker-registry/14266/2/index.html): Hi , 
I’m using Nexus 3.x as a Docker registry to store around 30 Docker images. When I use the official Docker Registry for storing the same images, it consumes around 10GB. However, with Nexus as the Docker registry, i&hellip; (183 words, Feb 3, 2025)
- [Lost encryption key - Sonatype Nexus Repository - Sonatype Community](/content/community/t/lost-encryption-key/14315/index.html): i lost my encryption key file. how can i change it or what can i do with it? (103 words, Feb 3, 2025)
- [Lost encryption key - Sonatype Nexus Repository - Sonatype Community](/content/community/t/lost-encryption-key/14315/1/index.html): i lost my encryption key file. how can i change it or what can i do with it? (34 words, Feb 3, 2025)
- [Problem with getting all assets from the npm group - Sonatype Nexus Repository - Sonatype Community](/content/community/t/problem-with-getting-all-assets-from-the-npm-group/14291/5/index.html): Hello. I want to download all assets from a certain repository and certain groups (not all). To get a list of all assets in a group, I use the following parameters: 
GET {{BASE_URL}}/service/rest/v1/search/assets
    ?re&hellip; (316 words, Jan 31, 2025)
- [Problem with getting all assets from the npm group - Sonatype Nexus Repository - Sonatype Community](/content/community/t/problem-with-getting-all-assets-from-the-npm-group/14291/index.html): Hello. I want to download all assets from a certain repository and certain groups (not all). To get a list of all assets in a group, I use the following parameters: 
GET {{BASE_URL}}/service/rest/v1/search/assets
    ?re&hellip; (316 words, Jan 30, 2025)
- [Problem with getting all assets from the npm group - Sonatype Nexus Repository - Sonatype Community](/content/community/t/problem-with-getting-all-assets-from-the-npm-group/14291/1/index.html): Hello. I want to download all assets from a certain repository and certain groups (not all). To get a list of all assets in a group, I use the following parameters: 
GET {{BASE_URL}}/service/rest/v1/search/assets
    ?re&hellip; (316 words, Jan 30, 2025)
- [Why Is Nexus Docker Repository Consuming More Space Than Docker Registry? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/why-is-nexus-docker-repository-consuming-more-space-than-docker-registry/14266/index.html): Hi , 
I’m using Nexus 3.x as a Docker registry to store around 30 Docker images. When I use the official Docker Registry for storing the same images, it consumes around 10GB. However, with Nexus as the Docker registry, i&hellip; (183 words, Jan 28, 2025)
- [Why Is Nexus Docker Repository Consuming More Space Than Docker Registry? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/why-is-nexus-docker-repository-consuming-more-space-than-docker-registry/14266/1/index.html): Hi , 
I’m using Nexus 3.x as a Docker registry to store around 30 Docker images. When I use the official Docker Registry for storing the same images, it consumes around 10GB. However, with Nexus as the Docker registry, i&hellip; (183 words, Jan 28, 2025)
- [Maven-metadata.xml dropping older versions - Sonatype Nexus Repository - Sonatype Community](/content/community/t/maven-metadata-xml-dropping-older-versions/14236/3/index.html): Hi folks, 
I’ve been publishing new minor versions of two different major versions of a library lately, and I find that older versions are not being included in maven-metadata.xml. 
Here is my latest maven-metadata.xml: h&hellip; (265 words, Jan 28, 2025)
- [NxRM 3.39 will not start, complains of tampered keystore - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nxrm-3-39-will-not-start-complains-of-tampered-keystore/8856/3/index.html): Hi, 
I’ve been running NxRM 3.37 forever and wanted to update to v3.39 tonight, but run into multiple issues. 
First, some description on my setup. 
NxRM runs in my own custom (Alpine-based) docker image and is serviced &hellip; (333 words, Jan 27, 2025)
- [Maven-metadata.xml dropping older versions - Sonatype Nexus Repository - Sonatype Community](/content/community/t/maven-metadata-xml-dropping-older-versions/14236/index.html): Hi folks, 
I’ve been publishing new minor versions of two different major versions of a library lately, and I find that older versions are not being included in maven-metadata.xml. 
Here is my latest maven-metadata.xml: h&hellip; (265 words, Jan 24, 2025)
- [Maven-metadata.xml dropping older versions - Sonatype Nexus Repository - Sonatype Community](/content/community/t/maven-metadata-xml-dropping-older-versions/14236/1/index.html): Hi folks, 
I’ve been publishing new minor versions of two different major versions of a library lately, and I find that older versions are not being included in maven-metadata.xml. 
Here is my latest maven-metadata.xml: h&hellip; (266 words, Jan 24, 2025)
- [Sonatype Nexus Repository 3.76.1 Released - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-repository-3-76-1-released/14229/index.html): Sonatype Nexus Repository 3.76.1 is now available. 
This release fixes a bug that caused 404 errors during yum install commands for some 3.76.0 deployments. It also fixes a bug that prevented the Assets REST API from ret&hellip; (61 words, Jan 23, 2025)
- [Sonatype Nexus Repository 3.76.1 Released - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-repository-3-76-1-released/14229/1/index.html): Sonatype Nexus Repository 3.76.1 is now available. 
This release fixes a bug that caused 404 errors during yum install commands for some 3.76.0 deployments. It also fixes a bug that prevented the Assets REST API from ret&hellip; (158 words, Jan 23, 2025)
- [Join Us TODAY at 10 EST for January Office Hours! - Community Announcements - Sonatype Community](/content/community/t/join-us-today-at-10-est-for-january-office-hours/14227/1/index.html): Join us in one hour at 10 am EDT (7 am PDT | 2 pm GMT) for our monthly, customer-exclusive Office Hours . 
This month, we’ll be discussing the following topics: 

AI/ML Overview
SBOM Container Scanning Capability
Automat&hellip; (193 words, Jan 23, 2025)
- [Generate SHA256 when uploading files using maven - Sonatype Nexus Repository - Sonatype Community](/content/community/t/generate-sha256-when-uploading-files-using-maven/5041/5/index.html): We are currently using Nexus Repository Manager OSS 3.22.1-02. 
We have several maven2-repositories to which we uploading files using the Nexus-web-frontend and maven. 
When i deploy a file using maven (mvn deploy:deploy&hellip; (345 words, Jan 22, 2025)
- [Conan 2.x Support - Sonatype Nexus Repository - Sonatype Community](/content/community/t/conan-2-x-support/10722/10/index.html): Hello, 
As far as I know Nexus doesn’t support yet Conan 2.x , Will it be supported in the future and is there any timeline for when it will be supported ? (243 words, Jan 21, 2025)
- [Phantom components found during IQ scans? - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/phantom-components-found-during-iq-scans/14221/index.html): I have experienced numerous phantom components throughout my time scanning projects with IQ. Components that do not appear to exist within the project’s code, its dependencies, or sub-dependencies. Why is this, and what &hellip; (120 words, Jan 21, 2025)
- [Phantom components found during IQ scans? - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/phantom-components-found-during-iq-scans/14221/1/index.html): I have experienced numerous phantom components throughout my time scanning projects with IQ. Components that do not appear to exist within the project’s code, its dependencies, or sub-dependencies. Why is this, and what &hellip; (152 words, Jan 21, 2025)
- [Running Nexus with FIPS mode enabled (plus LDAP) - Sonatype Nexus Repository - Sonatype Community](/content/community/t/running-nexus-with-fips-mode-enabled-plus-ldap/8232/10/index.html): I’m running Nexus Repository Manager in Docker on a UBI8 (RedHat) base image, which uses FIPS mode when the host is also in FIPS mode. 
We then get the following error in the Nexus container logs: 
2022-02-11 16:26:34,36&hellip; (919 words, Jan 21, 2025)
- [Updating any entity causes 403 Forbidden. Delete and Create works. - Sonatype Nexus Repository - Sonatype Community](/content/community/t/updating-any-entity-causes-403-forbidden-delete-and-create-works/14182/2/index.html): Hello, 
After buying the pro license and migrating to postgresql we have some issues with Nexus 3. 
Anytime I try to update a policy, repo, realm or any other entity I get a 403 Forbidden. 
The only way to change any con&hellip; (263 words, Jan 20, 2025)
- [Scan hosted repositories for sensitive information? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/scan-hosted-repositories-for-sensitive-information/14174/3/index.html): We would like to scan artifacts in our Sonatype Nexus Repository (OSS 3.70.1-02, not PRO) for sensitive content to find things that our on-prem developers might have left in source code inadvertently  - for example, any &hellip; (271 words, Jan 17, 2025)
- [Dependency Tree for Python projects - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/dependency-tree-for-python-projects/14161/2/index.html): Hi, 
Does Nexus IQ currently support Dependency Tree for Python projects? If not, when do you plan to implement it? 
Contrary to a simple requirements.txt file, poetry.lock contains dependency information about transient&hellip; (183 words, Jan 16, 2025)
- [Updating any entity causes 403 Forbidden. Delete and Create works. - Sonatype Nexus Repository - Sonatype Community](/content/community/t/updating-any-entity-causes-403-forbidden-delete-and-create-works/14182/index.html): Hello, 
After buying the pro license and migrating to postgresql we have some issues with Nexus 3. 
Anytime I try to update a policy, repo, realm or any other entity I get a 403 Forbidden. 
The only way to change any con&hellip; (196 words, Jan 16, 2025)
- [Updating any entity causes 403 Forbidden. Delete and Create works. - Sonatype Nexus Repository - Sonatype Community](/content/community/t/updating-any-entity-causes-403-forbidden-delete-and-create-works/14182/1/index.html): Hello, 
After buying the pro license and migrating to postgresql we have some issues with Nexus 3. 
Anytime I try to update a policy, repo, realm or any other entity I get a 403 Forbidden. 
The only way to change any con&hellip; (195 words, Jan 16, 2025)
- [Nexus OSS v3.76.0-03 problem with JMX monitoring - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-oss-v3-76-0-03-problem-with-jmx-monitoring/14181/index.html): jmx monitoring configured using this article https://support.sonatype.com/hc/en-us/articles/218501277-Configuring-Nexus-Repository-3-To-Allow-JMX-Connections is in v3.76.0-03 not working, in v3.70.3-01 JMX monitoring is &hellip; (175 words, Jan 16, 2025)
- [Nexus OSS v3.76.0-03 problem with JMX monitoring - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-oss-v3-76-0-03-problem-with-jmx-monitoring/14181/1/index.html): jmx monitoring configured using this article https://support.sonatype.com/hc/en-us/articles/218501277-Configuring-Nexus-Repository-3-To-Allow-JMX-Connections is in v3.76.0-03 not working, in v3.70.3-01 JMX monitoring is &hellip; (166 words, Jan 16, 2025)
- [Cleanup policy in nexus-3.66 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/cleanup-policy-in-nexus-3-66/14180/index.html): Hi! 
I want to setup a cleanup policy in nexus which we should keep the latest 2-3 versions even if the artifact has not been downloaded in the recent 180 days and for those applications which frequenctly keep uploading &hellip; (102 words, Jan 16, 2025)
- [Cleanup policy in nexus-3.66 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/cleanup-policy-in-nexus-3-66/14180/1/index.html): Hi! 
I want to setup a cleanup policy in nexus which we should keep the latest 2-3 versions even if the artifact has not been downloaded in the recent 180 days and for those applications which frequenctly keep uploading &hellip; (97 words, Jan 16, 2025)
- [Scan hosted repositories for sensitive information? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/scan-hosted-repositories-for-sensitive-information/14174/1/index.html): We would like to scan artifacts in our Sonatype Nexus Repository (OSS 3.70.1-02, not PRO) for sensitive content to find things that our on-prem developers might have left in source code inadvertently  - for example, any &hellip; (270 words, Jan 16, 2025)
- [Source code for nexus-repository-yum-3.76.0-03.jar - Sonatype Nexus Repository - Sonatype Community](/content/community/t/source-code-for-nexus-repository-yum-3-76-0-03-jar/14172/index.html): It doesn’t appear that Sonotype publishes the source for nexus-repository-yum-.jar on their GitHub sonatype/nexus-public: Sonatype Nexus Repository Open-source codebase mirror.  If I am wrong and I just could not locate &hellip; (260 words, Jan 15, 2025)
- [Source code for nexus-repository-yum-3.76.0-03.jar - Sonatype Nexus Repository - Sonatype Community](/content/community/t/source-code-for-nexus-repository-yum-3-76-0-03-jar/14172/1/index.html): It doesn’t appear that Sonotype publishes the source for nexus-repository-yum-.jar on their GitHub sonatype/nexus-public: Sonatype Nexus Repository Open-source codebase mirror.  If I am wrong and I just could not locate &hellip; (228 words, Jan 15, 2025)
- [Guidance on Upgrading to H2 database - Sonatype Nexus Repository - Sonatype Community](/content/community/t/guidance-on-upgrading-to-h2-database/14153/3/index.html): Hello, 
We are planning to migrate from OrientDB to the H2 database, and I have been reviewing the following documentation: 
Upgrading to 3.71.0+ for Instances Using OrientDB, Nexus Repository 3.70.x, and Java 8 or 11 
I&hellip; (340 words, Jan 15, 2025)
- [Update Your IQ Server License Threat Groups - Sonatype Labs - Sonatype Community](/content/community/t/update-your-iq-server-license-threat-groups/3094/50/index.html): The license threat group updater will apply the latest Sonatype provided license classification to your running IQ server’s license threat groups. This will alleviate any “License Threat Group not Assigned” policy violat&hellip; (5,150 words, Jan 14, 2025)
- [Dependency Tree for Python projects - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/dependency-tree-for-python-projects/14161/index.html): Hi, 
Does Nexus IQ currently support Dependency Tree for Python projects? If not, when do you plan to implement it? 
Contrary to a simple requirements.txt file, poetry.lock contains dependency information about transient&hellip; (181 words, Jan 14, 2025)
- [Dependency Tree for Python projects - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/dependency-tree-for-python-projects/14161/1/index.html): Hi, 
Does Nexus IQ currently support Dependency Tree for Python projects? If not, when do you plan to implement it? 
Contrary to a simple requirements.txt file, poetry.lock contains dependency information about transient&hellip; (183 words, Jan 14, 2025)
- [Yum Group Repositories not creating correct repomd.xml files in version 3.76.0 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/yum-group-repositories-not-creating-correct-repomd-xml-files-in-version-3-76-0/14157/index.html): Hello, it seems that most (if not all) of my yum group repositories build repodata/repomd.xml files that reference non-existent *-primary.xml.gz *-filelist.xml.gz and *-other.xml.gz files that do not match the same names&hellip; (736 words, Jan 14, 2025)
- [Yum Group Repositories not creating correct repomd.xml files in version 3.76.0 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/yum-group-repositories-not-creating-correct-repomd-xml-files-in-version-3-76-0/14157/1/index.html): Hello, it seems that most (if not all) of my yum group repositories build repodata/repomd.xml files that reference non-existent *-primary.xml.gz *-filelist.xml.gz and *-other.xml.gz files that do not match the same names&hellip; (704 words, Jan 14, 2025)
- [Guidance on Upgrading to H2 database - Sonatype Nexus Repository - Sonatype Community](/content/community/t/guidance-on-upgrading-to-h2-database/14153/index.html): Hello, 
We are planning to migrate from OrientDB to the H2 database, and I have been reviewing the following documentation: 
Upgrading to 3.71.0+ for Instances Using OrientDB, Nexus Repository 3.70.x, and Java 8 or 11 
I&hellip; (342 words, Jan 14, 2025)
- [Guidance on Upgrading to H2 database - Sonatype Nexus Repository - Sonatype Community](/content/community/t/guidance-on-upgrading-to-h2-database/14153/1/index.html): Hello, 
We are planning to migrate from OrientDB to the H2 database, and I have been reviewing the following documentation: 
Upgrading to 3.71.0+ for Instances Using OrientDB, Nexus Repository 3.70.x, and Java 8 or 11 
I&hellip; (340 words, Jan 14, 2025)
- [Nexus silently fails very early into startup - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-silently-fails-very-early-into-startup/14130/3/index.html): Hi! 
I’ll get right to the point, I’m a bit of an amateur programmer, have been using maven for a long time and am brand new to nexus. 
Through following a tutorial yesterday, I downloaded and successfully set up Nexus 3&hellip; (567 words, Jan 10, 2025)
- [APT proxy metadata problems - Sonatype Nexus Repository - Sonatype Community](/content/community/t/apt-proxy-metadata-problems/8428/8/index.html): “apt update” command returns error: 
E: Failed to fetch http://XXXXXXXXX/repository/apt-download-docker-proxy/dists/bionic/nightly/binary-amd64/Packages.gz  File has unexpected size (71462 != 71267). Mirror sync in progr&hellip; (543 words, Jan 10, 2025)
- [Upgrade to Sonatype Nexus Repository to 3.74 from 3.70 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/upgrade-to-sonatype-nexus-repository-to-3-74-from-3-70/14132/3/index.html): We have a instance which is running Nexus Oss 3.70.3-01, the database has been migrated from OrientDB to H2 (version 2).My question is: 
Is it OK upgrade our nexus to 3.74 directly? Is there any additional steps should w&hellip; (125 words, Jan 10, 2025)
- [Upgrade to Sonatype Nexus Repository to 3.74 from 3.70 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/upgrade-to-sonatype-nexus-repository-to-3-74-from-3-70/14132/1/index.html): We have a instance which is running Nexus Oss 3.70.3-01, the database has been migrated from OrientDB to H2 (version 2).My question is: 
Is it OK upgrade our nexus to 3.74 directly? Is there any additional steps should w&hellip; (126 words, Jan 8, 2025)
- [FindPackagesByID() fails for public nuget repos - Sonatype Nexus Repository - Sonatype Community](/content/community/t/findpackagesbyid-fails-for-public-nuget-repos/14123/2/index.html): Hi all, 
We just recently migrated our Nexus oss from Orient to H2. Also, we did the upgrade to 3.75.1-01. 
Everything went OK. 
However, we gor some reports from the users that they cannot restore some of the packages t&hellip; (123 words, Jan 7, 2025)
- [Nexus silently fails very early into startup - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-silently-fails-very-early-into-startup/14130/index.html): Hi! 
I’ll get right to the point, I’m a bit of an amateur programmer, have been using maven for a long time and am brand new to nexus. 
Through following a tutorial yesterday, I downloaded and successfully set up Nexus 3&hellip; (567 words, Jan 7, 2025)
- [Nexus silently fails very early into startup - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-silently-fails-very-early-into-startup/14130/1/index.html): Hi! 
I’ll get right to the point, I’m a bit of an amateur programmer, have been using maven for a long time and am brand new to nexus. 
Through following a tutorial yesterday, I downloaded and successfully set up Nexus 3&hellip; (567 words, Jan 7, 2025)
- [Error while migrating db from OrientDB to H2 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/error-while-migrating-db-from-orientdb-to-h2/14111/3/index.html): Hi, 
We are using a stand-lone version of Nexus 3.70.3-01. 
When i’m using the db migrator tool to migrate the OrientDB to H2 i’m getting an error. 
java.lang.IllegalStateException: Failed to execute ApplicationRunner
  &hellip; (348 words, Jan 7, 2025)
- [FindPackagesByID() fails for public nuget repos - Sonatype Nexus Repository - Sonatype Community](/content/community/t/findpackagesbyid-fails-for-public-nuget-repos/14123/index.html): Hi all, 
We just recently migrated our Nexus oss from Orient to H2. Also, we did the upgrade to 3.75.1-01. 
Everything went OK. 
However, we gor some reports from the users that they cannot restore some of the packages t&hellip; (118 words, Jan 6, 2025)
- [Error while migrating db from OrientDB to H2 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/error-while-migrating-db-from-orientdb-to-h2/14111/1/index.html): Hi, 
We are using a stand-lone version of Nexus 3.70.3-01. 
When i’m using the db migrator tool to migrate the OrientDB to H2 i’m getting an error. 
java.lang.IllegalStateException: Failed to execute ApplicationRunner
  &hellip; (348 words, Jan 3, 2025)
- [Debian Auto-Update Repository Manager - Sonatype Nexus Repository - Sonatype Community](/content/community/t/debian-auto-update-repository-manager/14079/3/index.html): Hello, 
since I can’t find the latest versions of the community edition of the repository manager on repo.sonatype.com. I would like to ask if there’s anyone whos knows how to update the repository manager automatically &hellip; (296 words, Dec 24, 2024)
- [Task: Docker - Delete unused manifests and images - problems - Sonatype Nexus Repository - Sonatype Community](/content/community/t/task-docker-delete-unused-manifests-and-images-problems/14082/1/index.html): Hi, 
any idea how can I fix it? 
Task ID: 3b038c4e-efdc-41d7-a5a3-ab0c6265dd9b
Task Name: Docker - Delete unused manifests and images
Stack-trace:
org.sonatype.goodies.common.MultipleFailures$MultipleFailuresException: F&hellip; (162 words, Dec 24, 2024)
- [Issue Uploading Python Packages to Nexus: "Metadata is missing required fields" - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/issue-uploading-python-packages-to-nexus-metadata-is-missing-required-fields/14065/3/index.html): Hello, 
I often encounter the following issue when uploading Python packages to Nexus. I’m using the following command: 
python3 -m twine upload -u &quot;admin&quot; -p &quot;****&quot; --repository-url &quot;http://192.168.163.30:8081/repositor&hellip; (206 words, Dec 24, 2024)
- [Debian Auto-Update Repository Manager - Sonatype Nexus Repository - Sonatype Community](/content/community/t/debian-auto-update-repository-manager/14079/1/index.html): Hello, 
since I can’t find the latest versions of the community edition of the repository manager on repo.sonatype.com. I would like to ask if there’s anyone whos knows how to update the repository manager automatically &hellip; (296 words, Dec 22, 2024)
- [Several reports NexusIQ ADO in tab Nexus IQ Summary Report - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/several-reports-nexusiq-ado-in-tab-nexus-iq-summary-report/14042/2/index.html): Hello. In my ADO pipeline, we have several stages with NexusIqPipelineTask@1 for multiple repositories. Can I publish several Nexus IQ reports on the ‘Nexus IQ Summary Report’ tab? (237 words, Dec 19, 2024)
- [NPM Component-Unknown: How long does Sonatype take to register new versions of packages? - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/npm-component-unknown-how-long-does-sonatype-take-to-register-new-versions-of-packages/14062/2/index.html): As titled, how long does Sonatype take to register a new version of a component? I had previously heard or read that it takes minutes, at least with Maven, and had assumed it was somewhere in the same ballpark with NPM. &hellip; (235 words, Dec 19, 2024)
- [Looking for retention policy/mechanism for H2 backup - Sonatype Nexus Repository - Sonatype Community](/content/community/t/looking-for-retention-policy-mechanism-for-h2-backup/14073/index.html): Hello, 
we are currently using Sonatype Nexus 3.73.0 in a Docker container with a volume. 
The task “Admin - Backup H2 Database” is executed daily and the entire volume (H2 backup, blob files, etc.) is backed up. The pro&hellip; (195 words, Dec 18, 2024)
- [Looking for retention policy/mechanism for H2 backup - Sonatype Nexus Repository - Sonatype Community](/content/community/t/looking-for-retention-policy-mechanism-for-h2-backup/14073/1/index.html): Hello, 
we are currently using Sonatype Nexus 3.73.0 in a Docker container with a volume. 
The task “Admin - Backup H2 Database” is executed daily and the entire volume (H2 backup, blob files, etc.) is backed up. The pro&hellip; (135 words, Dec 18, 2024)
- [Join us TODAY at 11am EST for December Office Hours! - Community Announcements - Sonatype Community](/content/community/t/join-us-today-at-11am-est-for-december-office-hours/14071/2/index.html): Join us in approximately one hour at 11am EST (8am PST | 4pm GMT) for our monthly, customer-exclusive Office Hours. 
This month, we’ll be discussing the following topics: 

Sonatype Lifecycle and GitHub Advanced Securi&hellip; (213 words, Dec 18, 2024)
- [Join us TODAY at 11am EST for December Office Hours! - Community Announcements - Sonatype Community](/content/community/t/join-us-today-at-11am-est-for-december-office-hours/14071/index.html): Join us in approximately one hour at 11am EST (8am PST | 4pm GMT) for our monthly, customer-exclusive Office Hours. 
This month, we’ll be discussing the following topics: 

Sonatype Lifecycle and GitHub Advanced Securi&hellip; (199 words, Dec 18, 2024)
- [Join us TODAY at 11am EST for December Office Hours! - Community Announcements - Sonatype Community](/content/community/t/join-us-today-at-11am-est-for-december-office-hours/14071/1/index.html): Join us in approximately one hour at 11am EST (8am PST | 4pm GMT) for our monthly, customer-exclusive Office Hours. 
This month, we’ll be discussing the following topics: 

Sonatype Lifecycle and GitHub Advanced Securi&hellip; (119 words, Dec 18, 2024)
- ["Log4j Visualizer" only displays 2 errors after the Nexus OSS upgrade from 3.74 to 3.75 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/log4j-visualizer-only-displays-2-errors-after-the-nexus-oss-upgrade-from-3-74-to-3-75/14069/index.html): Since updating to Nexus OSS 3.75.1, the capability “Log4j Visualizer” only displays the following 2 error messages: 
Uncaught TypeError: (0 , i.useId) is not a function
(https://hostname:port/static/nexus-rapture-bundle.&hellip; (102 words, Dec 18, 2024)
- [Issue Uploading Python Packages to Nexus: "Metadata is missing required fields" - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/issue-uploading-python-packages-to-nexus-metadata-is-missing-required-fields/14065/2/index.html): Hello, 
I often encounter the following issue when uploading Python packages to Nexus. I’m using the following command: 
python3 -m twine upload -u &quot;admin&quot; -p &quot;****&quot; --repository-url &quot;http://192.168.163.30:8081/repositor&hellip; (206 words, Dec 18, 2024)
- [Issue Uploading Python Packages to Nexus: "Metadata is missing required fields" - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/issue-uploading-python-packages-to-nexus-metadata-is-missing-required-fields/14065/index.html): Hello, 
I often encounter the following issue when uploading Python packages to Nexus. I’m using the following command: 
python3 -m twine upload -u &quot;admin&quot; -p &quot;****&quot; --repository-url &quot;http://192.168.163.30:8081/repositor&hellip; (206 words, Dec 18, 2024)
- [Issue Uploading Python Packages to Nexus: "Metadata is missing required fields" - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/issue-uploading-python-packages-to-nexus-metadata-is-missing-required-fields/14065/1/index.html): Hello, 
I often encounter the following issue when uploading Python packages to Nexus. I’m using the following command: 
python3 -m twine upload -u &quot;admin&quot; -p &quot;****&quot; --repository-url &quot;http://192.168.163.30:8081/repositor&hellip; (206 words, Dec 18, 2024)
- [NPM Component-Unknown: How long does Sonatype take to register new versions of packages? - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/npm-component-unknown-how-long-does-sonatype-take-to-register-new-versions-of-packages/14062/index.html): As titled, how long does Sonatype take to register a new version of a component? I had previously heard or read that it takes minutes, at least with Maven, and had assumed it was somewhere in the same ballpark with NPM. &hellip; (231 words, Dec 17, 2024)
- [NPM Component-Unknown: How long does Sonatype take to register new versions of packages? - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/npm-component-unknown-how-long-does-sonatype-take-to-register-new-versions-of-packages/14062/1/index.html): As titled, how long does Sonatype take to register a new version of a component? I had previously heard or read that it takes minutes, at least with Maven, and had assumed it was somewhere in the same ballpark with NPM. &hellip; (237 words, Dec 17, 2024)
- [RUT authentication and M2M communication - Sonatype Nexus Repository - Sonatype Community](/content/community/t/rut-authentication-and-m2m-communication/14058/index.html): Hello all, 
In my organization due to Multi Factorial Authentication upcoming changes, we have started using setup with RUT authentication via Apache reverse proxy, where we are using Azure AD for authentication. 
With a&hellip; (140 words, Dec 17, 2024)
- [RUT authentication and M2M communication - Sonatype Nexus Repository - Sonatype Community](/content/community/t/rut-authentication-and-m2m-communication/14058/1/index.html): Hello all, 
In my organization due to Multi Factorial Authentication upcoming changes, we have started using setup with RUT authentication via Apache reverse proxy, where we are using Azure AD for authentication. 
With a&hellip; (145 words, Dec 17, 2024)
- [Using Nexus as a proxy registry for a disconnected OpenShift install - Sonatype Nexus Repository - Sonatype Community](/content/community/t/using-nexus-as-a-proxy-registry-for-a-disconnected-openshift-install/13118/4/index.html): Hi all, 
I’m attempting to use Nexus as a local proxy registry for deploying OCP clusters. 
I’ve configured upstream docker proxy repos to quay.io, registry.redhat.io and a few others. 
Then, I’ve aggregated those repos &hellip; (404 words, Dec 16, 2024)
- [Update Your IQ Server License Threat Groups - Sonatype Labs - Sonatype Community](/content/community/t/update-your-iq-server-license-threat-groups/3094/49/index.html): The license threat group updater will apply the latest Sonatype provided license classification to your running IQ server’s license threat groups. This will alleviate any “License Threat Group not Assigned” policy violat&hellip; (582 words, Dec 13, 2024)
- [Several reports NexusIQ ADO in tab Nexus IQ Summary Report - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/several-reports-nexusiq-ado-in-tab-nexus-iq-summary-report/14042/index.html): Hello. In my ADO pipeline, we have several stages with NexusIqPipelineTask@1 for multiple repositories. Can I publish several Nexus IQ reports on the ‘Nexus IQ Summary Report’ tab? (237 words, Dec 13, 2024)
- [Several reports NexusIQ ADO in tab Nexus IQ Summary Report - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/several-reports-nexusiq-ado-in-tab-nexus-iq-summary-report/14042/1/index.html): Hello. In my ADO pipeline, we have several stages with NexusIqPipelineTask@1 for multiple repositories. Can I publish several Nexus IQ reports on the ‘Nexus IQ Summary Report’ tab? (241 words, Dec 13, 2024)
- ["npm error 405 Method Not Allowed - PUT" with npm-publish - Sonatype Nexus Repository - Sonatype Community](/content/community/t/npm-error-405-method-not-allowed-put-with-npm-publish/14035/index.html): Hi there, 
I have been struggling with NPM package publication for a while now and can’t find the solution… 
We have a Nexus repos installed in our infra (Sonatype Nexus RepositoryOSS 3.74.0-05) inside which I created an&hellip; (230 words, Dec 12, 2024)
- ["npm error 405 Method Not Allowed - PUT" with npm-publish - Sonatype Nexus Repository - Sonatype Community](/content/community/t/npm-error-405-method-not-allowed-put-with-npm-publish/14035/1/index.html): Hi there, 
I have been struggling with NPM package publication for a while now and can’t find the solution… 
We have a Nexus repos installed in our infra (Sonatype Nexus RepositoryOSS 3.74.0-05) inside which I created an&hellip; (228 words, Dec 12, 2024)
- [Join us for December Office Hours - Wednesday, December 18th at 11am EST - Community Announcements - Sonatype Community](/content/community/t/join-us-for-december-office-hours-wednesday-december-18th-at-11am-est/14032/2/index.html): Join us Wednesday, December 18th at 11am EST (8am PST | 4pm GMT) for our monthly, customer-exclusive Office Hours. 
This month, we’ll be discussing the following topics: 

Sonatype Lifecycle and GitHub Advanced Securit&hellip; (207 words, Dec 11, 2024)
- [Join us for December Office Hours - Wednesday, December 18th at 11am EST - Community Announcements - Sonatype Community](/content/community/t/join-us-for-december-office-hours-wednesday-december-18th-at-11am-est/14032/index.html): Join us Wednesday, December 18th at 11am EST (8am PST | 4pm GMT) for our monthly, customer-exclusive Office Hours. 
This month, we’ll be discussing the following topics: 

Sonatype Lifecycle and GitHub Advanced Securit&hellip; (196 words, Dec 11, 2024)
- [Join us for December Office Hours - Wednesday, December 18th at 11am EST - Community Announcements - Sonatype Community](/content/community/t/join-us-for-december-office-hours-wednesday-december-18th-at-11am-est/14032/1/index.html): Join us Wednesday, December 18th at 11am EST (8am PST | 4pm GMT) for our monthly, customer-exclusive Office Hours. 
This month, we’ll be discussing the following topics: 

Sonatype Lifecycle and GitHub Advanced Securit&hellip; (202 words, Dec 11, 2024)
- [Upload to proxy - Sonatype Nexus Repository - Sonatype Community](/content/community/t/upload-to-proxy/14023/3/index.html): Hi. There is a local docker proxy configured for a remote repository at https://registry-1.docker.io. I have discovered that I (and other users) are able to docker push images to this repository using LDAP authentication&hellip; (239 words, Dec 11, 2024)
- [Cannot push to repo; access to the requested resource is not authorized - Sonatype Nexus Repository - Sonatype Community](/content/community/t/cannot-push-to-repo-access-to-the-requested-resource-is-not-authorized/14026/index.html): I am having trouble pushing to a nexus hosted docker repository, run on rhel9 behind nginx, which is configured to listen on 443 with ssl. 
trying: docker push my-repo.my-domain.com/v2/repository/repo/ubuntu 
results in 
&hellip; (354 words, Dec 10, 2024)
- [Cannot push to repo; access to the requested resource is not authorized - Sonatype Nexus Repository - Sonatype Community](/content/community/t/cannot-push-to-repo-access-to-the-requested-resource-is-not-authorized/14026/1/index.html): I am having trouble pushing to a nexus hosted docker repository, run on rhel9 behind nginx, which is configured to listen on 443 with ssl. 
trying: docker push my-repo.my-domain.com/v2/repository/repo/ubuntu 
results in 
&hellip; (353 words, Dec 10, 2024)
- [Upload to proxy - Sonatype Nexus Repository - Sonatype Community](/content/community/t/upload-to-proxy/14023/index.html): Hi. There is a local docker proxy configured for a remote repository at https://registry-1.docker.io. I have discovered that I (and other users) are able to docker push images to this repository using LDAP authentication&hellip; (239 words, Dec 10, 2024)
- [Blocking large number of components in Nexus - Sonatype Nexus Repository - Sonatype Community](/content/community/t/blocking-large-number-of-components-in-nexus/13986/3/index.html): We often get requests from our internal Vulnerability Mgmt. team to block certain versions of a component cached in Nexus across repos, due to vulnerabilities being reported against it. 
What is the best way of blocking &hellip; (255 words, Dec 6, 2024)
- [Sonatype Nexus Repository 3.75.1 Released - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-repository-3-75-1-released/14003/index.html): Sonatype Nexus Repository 3.75.1 is now available. This release fixes an issue that caused some anonymous Docker pull requests to unexpectedly fail in 3.75.0 instances using a reverse proxy. See the Sonatype Nexus Reposi&hellip; (128 words, Dec 6, 2024)
- [Sonatype Nexus Repository 3.75.1 Released - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-repository-3-75-1-released/14003/1/index.html): Sonatype Nexus Repository 3.75.1 is now available. This release fixes an issue that caused some anonymous Docker pull requests to unexpectedly fail in 3.75.0 instances using a reverse proxy. See the Sonatype Nexus Reposi&hellip; (176 words, Dec 6, 2024)
- [December 2024 Learn Package - Sonatype Learn - Sonatype Community](/content/community/t/december-2024-learn-package/13987/index.html): Happy December! It’s a month where we often slow down and reflect. But don’t slow down too much, because we’ve got a Learn package that’s jam-packed with extremely topical learning. 


Component End-of-Life Lesson: A lac&hellip; (278 words, Dec 4, 2024)
- [Blocking large number of components in Nexus - Sonatype Nexus Repository - Sonatype Community](/content/community/t/blocking-large-number-of-components-in-nexus/13986/index.html): We often get requests from our internal Vulnerability Mgmt. team to block certain versions of a component cached in Nexus across repos, due to vulnerabilities being reported against it. 
What is the best way of blocking &hellip; (250 words, Dec 4, 2024)
- [Sonatype Nexus Repository 3.75.0 Released - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-repository-3-75-0-released/13983/index.html): Sonatype Nexus Repository 3.75.0 is now available. This release includes native support for PHP/Composer proxy repositories for Pro customers and integration with Google Cloud Key Management Service (KMS) to manage encry&hellip; (120 words, Dec 4, 2024)
- [API to get the components based on the lastModified column? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/api-to-get-the-components-based-on-the-lastmodified-column/13974/1/index.html): Hi, 
I have a requirement to retrieve components based on the last modified date… Is there an API I can use with query? 
Thanks In advance. 
Deepika (113 words, Dec 3, 2024)
- [Error Message after the migration of Nexus to a new Server: Failed to stream response due to: Missing blob and no handler set to recover - Sonatype Nexus Repository - Sonatype Community](/content/community/t/error-message-after-the-migration-of-nexus-to-a-new-server-failed-to-stream-response-due-to-missing-blob-and-no-handler-set-to-recover/13959/2/index.html): Hi, 
we tried to migrate Nexus (Sonatype Nexus Repository Manager OSS 3.51.0-01 =&gt; upgrade to the latest version is planned after the migration) to a new server. We set up Nexus on the new server and copied all data (we &hellip; (197 words, Dec 2, 2024)
- [Nexus Repository 3.74 - Alpine Linux (APK) - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-repository-3-74-alpine-linux-apk/13966/index.html): Hi, I’d like to know if anyone has a problem  to migrate a APK repository from 3.70 to 3.74 , because java version is not the same and a pre-compiled project do not work with Nexus repository 3.74. (146 words, Dec 2, 2024)
- [Nexus Repository 3.74 - Alpine Linux (APK) - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-repository-3-74-alpine-linux-apk/13966/1/index.html): Hi, I’d like to know if anyone has a problem  to migrate a APK repository from 3.70 to 3.74 , because java version is not the same and a pre-compiled project do not work with Nexus repository 3.74. (132 words, Dec 2, 2024)
- [Nexus repository nuget proxy repo deleted assets appears in search - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-repository-nuget-proxy-repo-deleted-assets-appears-in-search/13925/6/index.html): We have a nuget proxy repo that connects to jfrog artifactory. When a package of specific version is being removed from jfrog artifactory our nexus repo does not show that package version in Browse index(html view) but w&hellip; (475 words, Nov 30, 2024)
- [Error Message after the migration of Nexus to a new Server: Failed to stream response due to: Missing blob and no handler set to recover - Sonatype Nexus Repository - Sonatype Community](/content/community/t/error-message-after-the-migration-of-nexus-to-a-new-server-failed-to-stream-response-due-to-missing-blob-and-no-handler-set-to-recover/13959/index.html): Hi, 
we tried to migrate Nexus (Sonatype Nexus Repository Manager OSS 3.51.0-01 =&gt; upgrade to the latest version is planned after the migration) to a new server. We set up Nexus on the new server and copied all data (we &hellip; (201 words, Nov 30, 2024)
- [Error Message after the migration of Nexus to a new Server: Failed to stream response due to: Missing blob and no handler set to recover - Sonatype Nexus Repository - Sonatype Community](/content/community/t/error-message-after-the-migration-of-nexus-to-a-new-server-failed-to-stream-response-due-to-missing-blob-and-no-handler-set-to-recover/13959/1/index.html): Hi, 
we tried to migrate Nexus (Sonatype Nexus Repository Manager OSS 3.51.0-01 =&gt; upgrade to the latest version is planned after the migration) to a new server. We set up Nexus on the new server and copied all data (we &hellip; (197 words, Nov 30, 2024)
- [Missing newer deb-packages of repository manager on repo.sonatype.com - Sonatype Nexus Repository - Sonatype Community](/content/community/t/missing-newer-deb-packages-of-repository-manager-on-repo-sonatype-com/13946/index.html): Hello, 
I am missing newer versions of the nexus-repository-manager in the official repository? 
The latest deb-package I can find is 3.69. Where can I find the newer ones? 
Best regards (120 words, Nov 28, 2024)
- [Missing newer deb-packages of repository manager on repo.sonatype.com - Sonatype Nexus Repository - Sonatype Community](/content/community/t/missing-newer-deb-packages-of-repository-manager-on-repo-sonatype-com/13946/1/index.html): Hello, 
I am missing newer versions of the nexus-repository-manager in the official repository? 
The latest deb-package I can find is 3.69. Where can I find the newer ones? 
Best regards (48 words, Nov 28, 2024)
- [Problems with the APT repository after updating the nexus to version 3.74.0 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/problems-with-the-apt-repository-after-updating-the-nexus-to-version-3-74-0/13817/3/index.html): We created a hosted apt repository and saved the deb package in it. Then we download the deb package using the utilities in debian debmirror. 
I noticed that when downloading a package, there is an extra slash “/” in the&hellip; (211 words, Nov 28, 2024)
- [Cleanup deleted repositories - Sonatype Nexus Repository - Sonatype Community](/content/community/t/cleanup-deleted-repositories/6552/10/index.html): Hi! 
As par of our housekeeping activities, I have recently removed several repositories from Nexus (maven proxy). However, I have noticed that they are still around and consuming space. From the query I ran, I can see t&hellip; (409 words, Nov 28, 2024)
- [Nexus 3.74.0 Nuget Feed Cleanup Polices does not cleanup V3 index - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-3-74-0-nuget-feed-cleanup-polices-does-not-cleanup-v3-index/13897/7/index.html): Hey guys, 
we are working with nexus repository 3.74.0 and having several nuget v3 feeds. We enabled the cleanup policies for some test repositories and want to delete assets which are older than 10 days. 
We hosting cho&hellip; (653 words, Nov 27, 2024)
- [Set Nexus repo with H2 database read-only - Sonatype Nexus Repository - Sonatype Community](/content/community/t/set-nexus-repo-with-h2-database-read-only/13934/3/index.html): The newest Nexus version 3.74 offers via API the read-only mode, but as the description suggests just for the old OrientDB. 
  
Ist it possible to set a Nexus repo instance completely to read only? 
Background is, that o&hellip; (154 words, Nov 27, 2024)
- [Set Nexus repo with H2 database read-only - Sonatype Nexus Repository - Sonatype Community](/content/community/t/set-nexus-repo-with-h2-database-read-only/13934/index.html): The newest Nexus version 3.74 offers via API the read-only mode, but as the description suggests just for the old OrientDB. 
  
Ist it possible to set a Nexus repo instance completely to read only? 
Background is, that o&hellip; (157 words, Nov 26, 2024)
- [Set Nexus repo with H2 database read-only - Sonatype Nexus Repository - Sonatype Community](/content/community/t/set-nexus-repo-with-h2-database-read-only/13934/1/index.html): The newest Nexus version 3.74 offers via API the read-only mode, but as the description suggests just for the old OrientDB. 
  
Ist it possible to set a Nexus repo instance completely to read only? 
Background is, that o&hellip; (161 words, Nov 26, 2024)
- [Nexus 3.74.0 Nuget Feed Cleanup Polices does not cleanup V3 index - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-3-74-0-nuget-feed-cleanup-polices-does-not-cleanup-v3-index/13897/6/index.html): Hey guys, 
we are working with nexus repository 3.74.0 and having several nuget v3 feeds. We enabled the cleanup policies for some test repositories and want to delete assets which are older than 10 days. 
We hosting cho&hellip; (652 words, Nov 25, 2024)
- [GET components API is responding with two columns of same name. how do I differentiate them? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/get-components-api-is-responding-with-two-columns-of-same-name-how-do-i-differentiate-them/13748/8/index.html): I am using GET components  using APEX_WEB_SERVICE.MAKE_REST_REQUEST . 
But the response for is showing the same column twice. How do I differentiate . 
Thanks, 
Deepika (325 words, Nov 25, 2024)
- [Nexus repository nuget proxy repo deleted assets appears in search - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-repository-nuget-proxy-repo-deleted-assets-appears-in-search/13925/index.html): We have a nuget proxy repo that connects to jfrog artifactory. When a package of specific version is being removed from jfrog artifactory our nexus repo does not show that package version in Browse index(html view) but w&hellip; (475 words, Nov 25, 2024)
- [Nexus repository nuget proxy repo deleted assets appears in search - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-repository-nuget-proxy-repo-deleted-assets-appears-in-search/13925/1/index.html): We have a nuget proxy repo that connects to jfrog artifactory. When a package of specific version is being removed from jfrog artifactory our nexus repo does not show that package version in Browse index(html view) but w&hellip; (475 words, Nov 25, 2024)
- [NEXUS R Repository does not download from POSIT Packagemanager - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-r-repository-does-not-download-from-posit-packagemanager/13924/index.html): I’ve confiugred a r-proxy repository to provide R-Packages from POSIT Packagemanager using the following URL [https://packagemanager.posit.co/cran/__linux__/rhel9/latest]. 
  
 
Unfortunately the r-proxy repository didn’&hellip; (1,115 words, Nov 25, 2024)
- [NEXUS R Repository does not download from POSIT Packagemanager - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-r-repository-does-not-download-from-posit-packagemanager/13924/1/index.html): I’ve confiugred a r-proxy repository to provide R-Packages from POSIT Packagemanager using the following URL [https://packagemanager.posit.co/cran/__linux__/rhel9/latest]. 
  
 
Unfortunately the r-proxy repository didn’&hellip; (1,116 words, Nov 25, 2024)
- [Issue with HTTPRequest Jenkins Plugin in JenkinsFile for Deleting Nexus Components via API - Sonatype Nexus Repository - Sonatype Community](/content/community/t/issue-with-httprequest-jenkins-plugin-in-jenkinsfile-for-deleting-nexus-components-via-api/13921/index.html): Hi everyone, 
I’m trying to delete components in Nexus using the httpRequest plugin in a Jenkins pipeline. The deletion works — the component gets deleted from Nexus — but I never receive the expected 204 No Content resp&hellip; (295 words, Nov 25, 2024)
- [Issue with HTTPRequest Jenkins Plugin in JenkinsFile for Deleting Nexus Components via API - Sonatype Nexus Repository - Sonatype Community](/content/community/t/issue-with-httprequest-jenkins-plugin-in-jenkinsfile-for-deleting-nexus-components-via-api/13921/1/index.html): Hi everyone, 
I’m trying to delete components in Nexus using the httpRequest plugin in a Jenkins pipeline. The deletion works — the component gets deleted from Nexus — but I never receive the expected 204 No Content resp&hellip; (294 words, Nov 25, 2024)
- [Nexus 3.74.0 Nuget Feed Cleanup Polices does not cleanup V3 index - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-3-74-0-nuget-feed-cleanup-polices-does-not-cleanup-v3-index/13897/5/index.html): Hey guys, 
we are working with nexus repository 3.74.0 and having several nuget v3 feeds. We enabled the cleanup policies for some test repositories and want to delete assets which are older than 10 days. 
We hosting cho&hellip; (652 words, Nov 25, 2024)
- [Nexus 3.74.0 Nuget Feed Cleanup Polices does not cleanup V3 index - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-3-74-0-nuget-feed-cleanup-polices-does-not-cleanup-v3-index/13897/4/index.html): Hey guys, 
we are working with nexus repository 3.74.0 and having several nuget v3 feeds. We enabled the cleanup policies for some test repositories and want to delete assets which are older than 10 days. 
We hosting cho&hellip; (652 words, Nov 22, 2024)
- [Issue with downloading Podman package via Nexus due to illegal character in dependency version - Sonatype Nexus Repository - Sonatype Community](/content/community/t/issue-with-downloading-podman-package-via-nexus-due-to-illegal-character-in-dependency-version/13906/index.html): Hi, 
I’m encountering an issue when trying to download the Podman package via my Nexus repository proxy. The problem occurs because one of the dependencies (passt) contains an illegal character (^) in its version string.&hellip; (264 words, Nov 22, 2024)
- [Issue with downloading Podman package via Nexus due to illegal character in dependency version - Sonatype Nexus Repository - Sonatype Community](/content/community/t/issue-with-downloading-podman-package-via-nexus-due-to-illegal-character-in-dependency-version/13906/1/index.html): Hi, 
I’m encountering an issue when trying to download the Podman package via my Nexus repository proxy. The problem occurs because one of the dependencies (passt) contains an illegal character (^) in its version string.&hellip; (260 words, Nov 22, 2024)
- [Nexus 3.74.0 Nuget Feed Cleanup Polices does not cleanup V3 index - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-3-74-0-nuget-feed-cleanup-polices-does-not-cleanup-v3-index/13897/3/index.html): Hey guys, 
we are working with nexus repository 3.74.0 and having several nuget v3 feeds. We enabled the cleanup policies for some test repositories and want to delete assets which are older than 10 days. 
We hosting cho&hellip; (653 words, Nov 22, 2024)
- [Outbound requests to clm.sonatype.com/user-telemetry - Sonatype Nexus Repository - Sonatype Community](/content/community/t/outbound-requests-to-clm-sonatype-com-user-telemetry/13901/index.html): Hello everyone, I have raised Outbound requests to clm.sonatype.com/user-telemetry · Issue #518 · sonatype/nexus-public · GitHub. 
I just wanted to enquire here in the community if somebody is experiencing the same behav&hellip; (332 words, Nov 21, 2024)
- [Outbound requests to clm.sonatype.com/user-telemetry - Sonatype Nexus Repository - Sonatype Community](/content/community/t/outbound-requests-to-clm-sonatype-com-user-telemetry/13901/1/index.html): Hello everyone, I have raised Outbound requests to clm.sonatype.com/user-telemetry · Issue #518 · sonatype/nexus-public · GitHub. 
I just wanted to enquire here in the community if somebody is experiencing the same behav&hellip; (291 words, Nov 21, 2024)
- [Nexus 3.74.0 Nuget Feed Cleanup Polices does not cleanup V3 index - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-3-74-0-nuget-feed-cleanup-polices-does-not-cleanup-v3-index/13897/2/index.html): Hey guys, 
we are working with nexus repository 3.74.0 and having several nuget v3 feeds. We enabled the cleanup policies for some test repositories and want to delete assets which are older than 10 days. 
We hosting cho&hellip; (652 words, Nov 21, 2024)
- [Join us TODAY at 12pm EST for November Office Hours! - Community Announcements - Sonatype Community](/content/community/t/join-us-today-at-12pm-est-for-november-office-hours/13898/index.html): Join us today at 12pm EST (9am PST | 5pm GMT) for our monthly, customer-exclusive Office Hours. 
This month, we’ll be discussing the following topics: 

Lifecycle Dashboard Performance Improvements
Updates from Sonatyp&hellip; (186 words, Nov 21, 2024)
- [Join us TODAY at 12pm EST for November Office Hours! - Community Announcements - Sonatype Community](/content/community/t/join-us-today-at-12pm-est-for-november-office-hours/13898/1/index.html): Join us today at 12pm EST (9am PST | 5pm GMT) for our monthly, customer-exclusive Office Hours. 
This month, we’ll be discussing the following topics: 

Lifecycle Dashboard Performance Improvements
Updates from Sonatyp&hellip; (197 words, Nov 21, 2024)
- [Nexus 3.74.0 Nuget Feed Cleanup Polices does not cleanup V3 index - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-3-74-0-nuget-feed-cleanup-polices-does-not-cleanup-v3-index/13897/1/index.html): Hey guys, 
we are working with nexus repository 3.74.0 and having several nuget v3 feeds. We enabled the cleanup policies for some test repositories and want to delete assets which are older than 10 days. 
We hosting cho&hellip; (652 words, Nov 21, 2024)
- [Blobs have 0 count and size after OrientDB to H2 migration completed for 3.70.3-01 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/blobs-have-0-count-and-size-after-orientdb-to-h2-migration-completed-for-3-70-3-01/13889/index.html): Hi. 
I have an issue with OrientDB to H2 migration. 
nexus version is OSS 3.70.3-01 ( Installing and Running with the Distribution Archive on Rhel9 ) 
migration tool version is 3.70.3-01 
JAVA: 
OpenJDK Runtime Environme&hellip; (188 words, Nov 20, 2024)
- [Blobs have 0 count and size after OrientDB to H2 migration completed for 3.70.3-01 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/blobs-have-0-count-and-size-after-orientdb-to-h2-migration-completed-for-3-70-3-01/13889/1/index.html): Hi. 
I have an issue with OrientDB to H2 migration. 
nexus version is OSS 3.70.3-01 ( Installing and Running with the Distribution Archive on Rhel9 ) 
migration tool version is 3.70.3-01 
JAVA: 
OpenJDK Runtime Environme&hellip; (186 words, Nov 20, 2024)
- [Gradle not using proxy repo? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/gradle-not-using-proxy-repo/13870/3/index.html): Using Nexus-OSS 3.70.2 
I set up a proxy repo for the Apache Maven2 repo, like this 
  
However, my Gradle builds still show, for example, 
Download https://repo.maven.apache.org/maven2/com/amazonaws/aws-java-sdk-models/&hellip; (131 words, Nov 20, 2024)
- [Migrate OrientDB to H2 stuck on "userToken" - Sonatype Nexus Repository - Sonatype Community](/content/community/t/migrate-orientdb-to-h2-stuck-on-usertoken/13872/3/index.html): Hello I have a problem migrating the OrientDB to H2 on our Nexus 3.70.3-01 OSS instance. 
As an important info: Some years ago we were running the instance on Nexus PRO, but switched back to OSS. 
When running the db-mig&hellip; (301 words, Nov 19, 2024)
- [java.lang.IllegalArgumentException: NTFS ADS separator (':') in file name is forbidden. - Sonatype Nexus Repository - Sonatype Community](/content/community/t/java-lang-illegalargumentexception-ntfs-ads-separator-in-file-name-is-forbidden/13874/2/index.html): Hi, 
I am running Sonatype Nexus Repository OSS 3.69.0-02 on Windows. 
I have set up a proxied Helm repo for the Bitnami helm charts (source https://charts.bitnami.com/bitnami). This was working fine. 
Starting from toda&hellip; (188 words, Nov 19, 2024)
- [java.lang.IllegalArgumentException: NTFS ADS separator (':') in file name is forbidden. - Sonatype Nexus Repository - Sonatype Community](/content/community/t/java-lang-illegalargumentexception-ntfs-ads-separator-in-file-name-is-forbidden/13874/index.html): Hi, 
I am running Sonatype Nexus Repository OSS 3.69.0-02 on Windows. 
I have set up a proxied Helm repo for the Bitnami helm charts (source https://charts.bitnami.com/bitnami). This was working fine. 
Starting from toda&hellip; (126 words, Nov 18, 2024)
- [java.lang.IllegalArgumentException: NTFS ADS separator (':') in file name is forbidden. - Sonatype Nexus Repository - Sonatype Community](/content/community/t/java-lang-illegalargumentexception-ntfs-ads-separator-in-file-name-is-forbidden/13874/1/index.html): Hi, 
I am running Sonatype Nexus Repository OSS 3.69.0-02 on Windows. 
I have set up a proxied Helm repo for the Bitnami helm charts (source https://charts.bitnami.com/bitnami). This was working fine. 
Starting from toda&hellip; (120 words, Nov 18, 2024)
- [Migrate OrientDB to H2 stuck on "userToken" - Sonatype Nexus Repository - Sonatype Community](/content/community/t/migrate-orientdb-to-h2-stuck-on-usertoken/13872/index.html): Hello I have a problem migrating the OrientDB to H2 on our Nexus 3.70.3-01 OSS instance. 
As an important info: Some years ago we were running the instance on Nexus PRO, but switched back to OSS. 
When running the db-mig&hellip; (301 words, Nov 18, 2024)
- [Migrate OrientDB to H2 stuck on "userToken" - Sonatype Nexus Repository - Sonatype Community](/content/community/t/migrate-orientdb-to-h2-stuck-on-usertoken/13872/1/index.html): Hello I have a problem migrating the OrientDB to H2 on our Nexus 3.70.3-01 OSS instance. 
As an important info: Some years ago we were running the instance on Nexus PRO, but switched back to OSS. 
When running the db-mig&hellip; (301 words, Nov 18, 2024)
- [Gradle not using proxy repo? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/gradle-not-using-proxy-repo/13870/index.html): Using Nexus-OSS 3.70.2 
I set up a proxy repo for the Apache Maven2 repo, like this 
  
However, my Gradle builds still show, for example, 
Download https://repo.maven.apache.org/maven2/com/amazonaws/aws-java-sdk-models/&hellip; (130 words, Nov 16, 2024)
- [Gradle not using proxy repo? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/gradle-not-using-proxy-repo/13870/1/index.html): Using Nexus-OSS 3.70.2 
I set up a proxy repo for the Apache Maven2 repo, like this 
  
However, my Gradle builds still show, for example, 
Download https://repo.maven.apache.org/maven2/com/amazonaws/aws-java-sdk-models/&hellip; (130 words, Nov 16, 2024)
- [From November 10, 2024, it is no longer possible to retrieve container images from proxy repositories on DockerHub - Sonatype Nexus Repository - Sonatype Community](/content/community/t/from-november-10-2024-it-is-no-longer-possible-to-retrieve-container-images-from-proxy-repositories-on-dockerhub/13831/2/index.html): We are using version 3.18 and 3.20 of sonatype nexus. 
From November 10, 2024, it is no longer possible to retrieve container images from proxy repositories on DockerHub. 
Docker pull command 
docker pull &lt;nexus-dockerhu&hellip; (161 words, Nov 15, 2024)
- [Join us for November Office Hours - Thursday, November 21st at 12pm EST - Community Announcements - Sonatype Community](/content/community/t/join-us-for-november-office-hours-thursday-november-21st-at-12pm-est/13862/index.html): Join us Thursday, November 21st at 12pm EST (9am PST | 5pm GMT) for our monthly, customer-exclusive Office Hours. 
This month, we’ll be discussing the following topics: 

Lifecycle Dashboard Performance Improvements
Up&hellip; (200 words, Nov 14, 2024)
- [Join us for November Office Hours - Thursday, November 21st at 12pm EST - Community Announcements - Sonatype Community](/content/community/t/join-us-for-november-office-hours-thursday-november-21st-at-12pm-est/13862/1/index.html): Join us Thursday, November 21st at 12pm EST (9am PST | 5pm GMT) for our monthly, customer-exclusive Office Hours. 
This month, we’ll be discussing the following topics: 

Lifecycle Dashboard Performance Improvements
Up&hellip; (207 words, Nov 14, 2024)
- [Nexus Repository 2 Security Advisory - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-repository-2-security-advisory/13861/index.html): Date: November 14, 2024 
Affected Versions: All Sonatype Nexus Repository Manager 2.x OSS/Pro versions up to and including 2.15.1 
Fixed in Version: 2.15.2 
Sonatype has been made aware of a Remote Code Execution vulnera&hellip; (107 words, Nov 14, 2024)
- [Nexus Repository 2 Security Advisory - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-repository-2-security-advisory/13861/1/index.html): Date: November 14, 2024 
Affected Versions: All Sonatype Nexus Repository Manager 2.x OSS/Pro versions up to and including 2.15.1 
Fixed in Version: 2.15.2 
Sonatype has been made aware of a Remote Code Execution vulnera&hellip; (114 words, Nov 14, 2024)
- [Nexus Repository 2.15.2 Released - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-repository-2-15-2-released/13859/index.html): We are pleased to announce Nexus Repository 2.15.2. This release fixes a couple of security vulnerabilities that were previously in the application. 
If upgrading from a release prior to 2.15, please review the 2.15.0 re&hellip; (127 words, Nov 14, 2024)
- [Nexus Repository 2.15.2 Released - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-repository-2-15-2-released/13859/1/index.html): We are pleased to announce Nexus Repository 2.15.2. This release fixes a couple of security vulnerabilities that were previously in the application. 
If upgrading from a release prior to 2.15, please review the 2.15.0 re&hellip; (52 words, Nov 14, 2024)
- [Does Nexus Repository supports external MSSQL DB? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/does-nexus-repository-supports-external-mssql-db/13845/3/index.html): What is the compatible version of MSSQL supported in the latest Nexus release (i.e., 3.74.0 or earlier)? 
Does Nexus OSS support High Availability? 
What is the last version that supports MSSQL as a database? (195 words, Nov 13, 2024)
- [Does Nexus Repository supports external MSSQL DB? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/does-nexus-repository-supports-external-mssql-db/13845/1/index.html): What is the compatible version of MSSQL supported in the latest Nexus release (i.e., 3.74.0 or earlier)? 
Does Nexus OSS support High Availability? 
What is the last version that supports MSSQL as a database? (109 words, Nov 12, 2024)
- [nuget.datastore.internal.v2.NugetV2FeedHandler - Unknown error - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nuget-datastore-internal-v2-nugetv2feedhandler-unknown-error/13842/1/index.html): After updating the database on H2 I see an error in the logs 
ERROR [qtp1724704171-67537668] usrNexusReader com.sonatype.nexus.repository.nuget.datastore.internal.v2.NugetV2FeedHandler - Unknown error 
org.sonatype.nexus&hellip; (64 words, Nov 12, 2024)
- [Error while restoring asset: blob store: - Sonatype Nexus Repository - Sonatype Community](/content/community/t/error-while-restoring-asset-blob-store/13841/index.html): After updating the database on H2, I see an error in the logs when running Repair - Reconcile component database from blob store 
2024-11-12 15:30:47,606+0000 ERROR [quartz-9-thread-19] *SYSTEM com.sonatype.nexus.blobsto&hellip; (174 words, Nov 12, 2024)
- [Error while restoring asset: blob store: - Sonatype Nexus Repository - Sonatype Community](/content/community/t/error-while-restoring-asset-blob-store/13841/1/index.html): After updating the database on H2, I see an error in the logs when running Repair - Reconcile component database from blob store 
2024-11-12 15:30:47,606+0000 ERROR [quartz-9-thread-19] *SYSTEM com.sonatype.nexus.blobsto&hellip; (178 words, Nov 12, 2024)
- [Update Your IQ Server License Threat Groups - Sonatype Labs - Sonatype Community](/content/community/t/update-your-iq-server-license-threat-groups/3094/48/index.html): The license threat group updater will apply the latest Sonatype provided license classification to your running IQ server’s license threat groups. This will alleviate any “License Threat Group not Assigned” policy violat&hellip; (692 words, Nov 12, 2024)
- [Problems with the APT repository after updating the nexus to version 3.74.0 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/problems-with-the-apt-repository-after-updating-the-nexus-to-version-3-74-0/13817/index.html): We created a hosted apt repository and saved the deb package in it. Then we download the deb package using the utilities in debian debmirror. 
I noticed that when downloading a package, there is an extra slash “/” in the&hellip; (211 words, Nov 7, 2024)
- [Problems with the APT repository after updating the nexus to version 3.74.0 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/problems-with-the-apt-repository-after-updating-the-nexus-to-version-3-74-0/13817/1/index.html): We created a hosted apt repository and saved the deb package in it. Then we download the deb package using the utilities in debian debmirror. 
I noticed that when downloading a package, there is an extra slash “/” in the&hellip; (211 words, Nov 7, 2024)
- [Migrate OrientDB to H2 with nexus-db-migrator-3.70.3-01.jar - How does migration finds the OrientDB? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/migrate-orientdb-to-h2-with-nexus-db-migrator-3-70-3-01-jar-how-does-migration-finds-the-orientdb/13816/index.html): Hello, 
we are using Nexus 3.70.3 OSS and I want to upgrade the OrientDB to H2 for upgrading to 3.74.0 OSS. 
When running the migrator 
java -jar nexus-db-migrator-3.70.3-01.jar --healthcheck 
I get in the healthcheck lo&hellip; (787 words, Nov 7, 2024)
- [Migrate OrientDB to H2 with nexus-db-migrator-3.70.3-01.jar - How does migration finds the OrientDB? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/migrate-orientdb-to-h2-with-nexus-db-migrator-3-70-3-01-jar-how-does-migration-finds-the-orientdb/13816/1/index.html): Hello, 
we are using Nexus 3.70.3 OSS and I want to upgrade the OrientDB to H2 for upgrading to 3.74.0 OSS. 
When running the migrator 
java -jar nexus-db-migrator-3.70.3-01.jar --healthcheck 
I get in the healthcheck lo&hellip; (791 words, Nov 7, 2024)
- [Sonatype Nexus Repository 3.74.0 Released - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-repository-3-74-0-released/13793/index.html): Sonatype Nexus Repository 3.74.0 is now available. 
This release includes support for Highly Available (HA) and resilient Nexus Repository Pro deployments to Google Cloud Platform (GCP). It also includes support for Goog&hellip; (181 words, Nov 5, 2024)
- [Sonatype Nexus Repository 3.74.0 Released - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-repository-3-74-0-released/13793/1/index.html): Sonatype Nexus Repository 3.74.0 is now available. 
This release includes support for Highly Available (HA) and resilient Nexus Repository Pro deployments to Google Cloud Platform (GCP). It also includes support for Goog&hellip; (173 words, Nov 5, 2024)
- [Nexus startup failed, version Nexus 3.70.3-01 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-startup-failed-version-nexus-3-70-3-01/13735/4/index.html): Nexus failed to start, I found 2 error messages as follows: ERROR1, ERROR2. 
ERROR1： 
2024-10-27 06:51:51,468+0800 WARN  [FelixStartLevel]  *SYSTEM Sisu - Problem adding: org.eclipse.sisu.inject.LazyBeanEntry@250bfa46 to&hellip; (279 words, Nov 2, 2024)
- [Update Your IQ Server License Threat Groups - Sonatype Labs - Sonatype Community](/content/community/t/update-your-iq-server-license-threat-groups/3094/47/index.html): The license threat group updater will apply the latest Sonatype provided license classification to your running IQ server’s license threat groups. This will alleviate any “License Threat Group not Assigned” policy violat&hellip; (674 words, Nov 1, 2024)
- [Maintenance Downtime of Community on Friday, November 1st at 5 a.m EDT - Community Announcements - Sonatype Community](/content/community/t/maintenance-downtime-of-community-on-friday-november-1st-at-5-a-m-edt/13762/6/index.html): Starting around 5:00 AM EDT on Friday, November 1st, the Community forum will be brought offline to perform necessary maintenance and upgrades. 
This downtime is localized to just the community forum, and will not affect&hellip; (258 words, Nov 1, 2024)
- [Hosting Gradle Plugins - Nexus is removing files randomly - Sonatype Nexus Repository - Sonatype Community](/content/community/t/hosting-gradle-plugins-nexus-is-removing-files-randomly/13756/2/index.html): Hello, 
I’m using Nexus OSS 3.68.1-02. I have created a maven-type hosted repository, to which I’m publishing my custom Gradle plugins. 
Gradle is a bit “special”. Let’s say that you my plugin is in group “org.foo”, with&hellip; (253 words, Oct 31, 2024)
- [Maintenance Downtime of Community on Friday, November 1st at 5 a.m EDT - Community Announcements - Sonatype Community](/content/community/t/maintenance-downtime-of-community-on-friday-november-1st-at-5-a-m-edt/13762/index.html): Starting around 5:00 AM EDT on Friday, November 1st, the Community forum will be brought offline to perform necessary maintenance and upgrades. 
This downtime is localized to just the community forum, and will not affect&hellip; (134 words, Oct 31, 2024)
- [Maintenance Downtime of Community on Friday, November 1st at 5 a.m EDT - Community Announcements - Sonatype Community](/content/community/t/maintenance-downtime-of-community-on-friday-november-1st-at-5-a-m-edt/13762/1/index.html): Starting around 5:00 AM EDT on Friday, November 1st, the Community forum will be brought offline to perform necessary maintenance and upgrades. 
This downtime is localized to just the community forum, and will not affect&hellip; (260 words, Oct 31, 2024)
- [Hosting Gradle Plugins - Nexus is removing files randomly - Sonatype Nexus Repository - Sonatype Community](/content/community/t/hosting-gradle-plugins-nexus-is-removing-files-randomly/13756/index.html): Hello, 
I’m using Nexus OSS 3.68.1-02. I have created a maven-type hosted repository, to which I’m publishing my custom Gradle plugins. 
Gradle is a bit “special”. Let’s say that you my plugin is in group “org.foo”, with&hellip; (249 words, Oct 30, 2024)
- [Hosting Gradle Plugins - Nexus is removing files randomly - Sonatype Nexus Repository - Sonatype Community](/content/community/t/hosting-gradle-plugins-nexus-is-removing-files-randomly/13756/1/index.html): Hello, 
I’m using Nexus OSS 3.68.1-02. I have created a maven-type hosted repository, to which I’m publishing my custom Gradle plugins. 
Gradle is a bit “special”. Let’s say that you my plugin is in group “org.foo”, with&hellip; (250 words, Oct 30, 2024)
- [Join us in one hour for October Office Hours - 11 a.m EDT! - Community Announcements - Sonatype Community](/content/community/t/join-us-in-one-hour-for-october-office-hours-11-a-m-edt/13747/2/index.html): Join us in one hour at 11am EDT (8am PDT | 3pm GMT) for our monthly, customer-exclusive Office Hours. 
This month, we’ll be discussing the following topics: 

Sonatype + GitLab Integration: Security Feature
Sonatype Li&hellip; (192 words, Oct 29, 2024)
- [Join us in one hour for October Office Hours - 11 a.m EDT! - Community Announcements - Sonatype Community](/content/community/t/join-us-in-one-hour-for-october-office-hours-11-a-m-edt/13747/index.html): Join us in one hour at 11am EDT (8am PDT | 3pm GMT) for our monthly, customer-exclusive Office Hours. 
This month, we’ll be discussing the following topics: 

Sonatype + GitLab Integration: Security Feature
Sonatype Li&hellip; (200 words, Oct 29, 2024)
- [Join us in one hour for October Office Hours - 11 a.m EDT! - Community Announcements - Sonatype Community](/content/community/t/join-us-in-one-hour-for-october-office-hours-11-a-m-edt/13747/1/index.html): Join us in one hour at 11am EDT (8am PDT | 3pm GMT) for our monthly, customer-exclusive Office Hours. 
This month, we’ll be discussing the following topics: 

Sonatype + GitLab Integration: Security Feature
Sonatype Li&hellip; (225 words, Oct 29, 2024)
- [Is there no risk of DB corruption even if the nexus repository oss version, which uses the H2 database as the embedded database, is used in a kubernetes environment? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/is-there-no-risk-of-db-corruption-even-if-the-nexus-repository-oss-version-which-uses-the-h2-database-as-the-embedded-database-is-used-in-a-kubernetes-environment/13651/4/index.html): I am using the oss version of the nexus repository in a kubernetes environment. 
Previously, the following web page stated that using the oss version of the embedded DB, orientDB, in combination with a kubernetes environ&hellip; (269 words, Oct 28, 2024)
- [OrientDB Database health check failed with database integrity: BROKEN - Sonatype Nexus Repository - Sonatype Community](/content/community/t/orientdb-database-health-check-failed-with-database-integrity-broken/13621/7/index.html): Hello, 
We are trying to upgrade the Sonatype Nexus Repository OSS 3.70.2 database from OrientDb to H2. We ran the health check on the back up taken from OrientDb using admin task and got below error: 
12:54:52 [main] IN&hellip; (473 words, Oct 28, 2024)
- [Disable outbound connections to clm.sonatype.com - Sonatype Nexus Repository - Sonatype Community](/content/community/t/disable-outbound-connections-to-clm-sonatype-com/13738/index.html): I have a Nexus Repository OSS instance running on DMZ where only access to nuget.org is available (for nuget proxy repository). The problem is that Nexus tries to access clm.sonatype.com and constantly throws exceptions &hellip; (111 words, Oct 28, 2024)
- [Disable outbound connections to clm.sonatype.com - Sonatype Nexus Repository - Sonatype Community](/content/community/t/disable-outbound-connections-to-clm-sonatype-com/13738/1/index.html): I have a Nexus Repository OSS instance running on DMZ where only access to nuget.org is available (for nuget proxy repository). The problem is that Nexus tries to access clm.sonatype.com and constantly throws exceptions &hellip; (111 words, Oct 28, 2024)
- [Nexus startup failed, version Nexus 3.70.3-01 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-startup-failed-version-nexus-3-70-3-01/13735/1/index.html): Nexus failed to start, I found 2 error messages as follows: ERROR1, ERROR2. 
ERROR1： 
2024-10-27 06:51:51,468+0800 WARN  [FelixStartLevel]  *SYSTEM Sisu - Problem adding: org.eclipse.sisu.inject.LazyBeanEntry@250bfa46 to&hellip; (352 words, Oct 26, 2024)
- [How to browse/cleanup components/assets in groovy script with H2 instead of OrientDB (e.g. without StorageFacet) - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-to-browse-cleanup-components-assets-in-groovy-script-with-h2-instead-of-orientdb-e-g-without-storagefacet/13733/index.html): Hi, 
There are many examples how to browse/cleanup components/assets via groovy scripts like so - GitHub - PhilSwiss/nexus-cleanup: Remove old releases from a Maven2-repository on Nexus3 - but after switching to H2 inste&hellip; (430 words, Oct 25, 2024)
- [How to browse/cleanup components/assets in groovy script with H2 instead of OrientDB (e.g. without StorageFacet) - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-to-browse-cleanup-components-assets-in-groovy-script-with-h2-instead-of-orientdb-e-g-without-storagefacet/13733/1/index.html): Hi, 
There are many examples how to browse/cleanup components/assets via groovy scripts like so - GitHub - PhilSwiss/nexus-cleanup: Remove old releases from a Maven2-repository on Nexus3 - but after switching to H2 inste&hellip; (413 words, Oct 25, 2024)
- [How to Configure Nexus 3 to Send Email Notifications for Low Disk Space? - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/how-to-configure-nexus-3-to-send-email-notifications-for-low-disk-space/13723/index.html): Hi all, 
I’m running Nexus 3.51.0-01, and I’m looking for a way to set up email notifications when the disk space is running low. I know there are options to check the blob store usage, but I can’t find any settings to t&hellip; (284 words, Oct 24, 2024)
- [How to Configure Nexus 3 to Send Email Notifications for Low Disk Space? - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/how-to-configure-nexus-3-to-send-email-notifications-for-low-disk-space/13723/1/index.html): Hi all, 
I’m running Nexus 3.51.0-01, and I’m looking for a way to set up email notifications when the disk space is running low. I know there are options to check the blob store usage, but I can’t find any settings to t&hellip; (284 words, Oct 24, 2024)
- [Sonatype Nexus Repository warns "1 Malware Component Found" - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-repository-warns-1-malware-component-found/13718/index.html): Since upgrading our free local standalone version of Nexus Repository to version 3.73.0, we are seeing a Big Red Warning stating 1 Malware Component Found. 
From the guide below, my understanding is that we would need th&hellip; (1,437 words, Oct 23, 2024)
- [Sonatype Nexus Repository warns "1 Malware Component Found" - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-repository-warns-1-malware-component-found/13718/1/index.html): Since upgrading our free local standalone version of Nexus Repository to version 3.73.0, we are seeing a Big Red Warning stating 1 Malware Component Found. 
From the guide below, my understanding is that we would need th&hellip; (1,194 words, Oct 23, 2024)
- [Announcing a New Integration with GitLab Ultimate! - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/announcing-a-new-integration-with-gitlab-ultimate/13716/index.html): We’re excited to announce our new integration with GitLab Ultimate! With this update, you can now view detailed vulnerability findings from Lifecycle scans right in your GitLab Vulnerability Report. Plus, your project’s &hellip; (234 words, Oct 23, 2024)
- [Announcing a New Integration with GitLab Ultimate! - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/announcing-a-new-integration-with-gitlab-ultimate/13716/1/index.html): We’re excited to announce our new integration with GitLab Ultimate! With this update, you can now view detailed vulnerability findings from Lifecycle scans right in your GitLab Vulnerability Report. Plus, your project’s &hellip; (248 words, Oct 23, 2024)
- [Join us for October Office Hours - Tuesday, October 29th at 11am EDT - Community Announcements - Sonatype Community](/content/community/t/join-us-for-october-office-hours-tuesday-october-29th-at-11am-edt/13714/2/index.html): Join us Tuesday, October 29th at 11am EDT (8am PDT | 3pm GMT) for our monthly, customer-exclusive Office Hours. 
This month, we’ll be discussing the following topics: 

Sonatype + GitLab Integration: Security Feature
S&hellip; (201 words, Oct 23, 2024)
- [Join us for October Office Hours - Tuesday, October 29th at 11am EDT - Community Announcements - Sonatype Community](/content/community/t/join-us-for-october-office-hours-tuesday-october-29th-at-11am-edt/13714/index.html): Join us Tuesday, October 29th at 11am EDT (8am PDT | 3pm GMT) for our monthly, customer-exclusive Office Hours. 
This month, we’ll be discussing the following topics: 

Sonatype + GitLab Integration: Security Feature
S&hellip; (197 words, Oct 23, 2024)
- [Join us for October Office Hours - Tuesday, October 29th at 11am EDT - Community Announcements - Sonatype Community](/content/community/t/join-us-for-october-office-hours-tuesday-october-29th-at-11am-edt/13714/1/index.html): Join us Tuesday, October 29th at 11am EDT (8am PDT | 3pm GMT) for our monthly, customer-exclusive Office Hours. 
This month, we’ll be discussing the following topics: 

Sonatype + GitLab Integration: Security Feature
S&hellip; (127 words, Oct 23, 2024)
- [Statistics - recalculate vulnerabilities statistics failure - Sonatype Nexus Repository - Sonatype Community](/content/community/t/statistics-recalculate-vulnerabilities-statistics-failure/13630/2/index.html): Hi, 
my “Statistics - recalculate vulnerabilities statistics” task isn’t working. 
I get 
==&gt; nexus.log &lt;==
2024-10-11 10:23:33,547+0000 INFO  [quartz-9-thread-19]  *SYSTEM com.sonatype.nexus.vulnerability.internal.log.V&hellip; (188 words, Oct 22, 2024)
- [Sonatype Nexus Repository 3.73.0 Released - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-repository-3-73-0-released/13627/2/index.html): Sonatype Nexus Repository 3.73.0 is now available. This release adds native support for Rust/Cargo in the Pro edition. This release also includes a malware risk banner and enhanced security for sensitive data through re-&hellip; (156 words, Oct 22, 2024)
- [Building plugins for Nexus RM 3.70.3 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/building-plugins-for-nexus-rm-3-70-3/13705/index.html): Hello 
I’m preparing to update our Nexus RM instances to 3.70.3 and one of the steps is to build our custom plugins for the new version, but I don’t see updated jars on Maven Central matching the Nexus RM version. Latest&hellip; (143 words, Oct 22, 2024)
- [Building plugins for Nexus RM 3.70.3 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/building-plugins-for-nexus-rm-3-70-3/13705/1/index.html): Hello 
I’m preparing to update our Nexus RM instances to 3.70.3 and one of the steps is to build our custom plugins for the new version, but I don’t see updated jars on Maven Central matching the Nexus RM version. Latest&hellip; (139 words, Oct 22, 2024)
- [Increase Requests Per Day in Sonatype Nexus 3.72.0 OSS - Sonatype Nexus Repository - Sonatype Community](/content/community/t/increase-requests-per-day-in-sonatype-nexus-3-72-0-oss/13689/2/index.html): Hello, 
I need to increase the daily request limit, which is currently set at 20,000. Are these limits applicable to GET requests, or do they also apply to PUT/POST requests? What are the possible solutions for raising t&hellip; (180 words, Oct 20, 2024)
- [Increase Requests Per Day in Sonatype Nexus 3.72.0 OSS - Sonatype Nexus Repository - Sonatype Community](/content/community/t/increase-requests-per-day-in-sonatype-nexus-3-72-0-oss/13689/index.html): Hello, 
I need to increase the daily request limit, which is currently set at 20,000. Are these limits applicable to GET requests, or do they also apply to PUT/POST requests? What are the possible solutions for raising t&hellip; (176 words, Oct 20, 2024)
- [Increase Requests Per Day in Sonatype Nexus 3.72.0 OSS - Sonatype Nexus Repository - Sonatype Community](/content/community/t/increase-requests-per-day-in-sonatype-nexus-3-72-0-oss/13689/1/index.html): Hello, 
I need to increase the daily request limit, which is currently set at 20,000. Are these limits applicable to GET requests, or do they also apply to PUT/POST requests? What are the possible solutions for raising t&hellip; (175 words, Oct 20, 2024)
- [Failed task "Delete unused manifests" due to "invalid asset"? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/failed-task-delete-unused-manifests-due-to-invalid-asset/13597/7/index.html): Does anyone face this issue? my Task &quot; Delete unused manifests and images&quot; does not work anymore because of one invalid asset. I assume the side effect is a never ending growing blob storage. 
I am on the most recent ver&hellip; (889 words, Oct 16, 2024)
- [Fails to start nexus repository manager OSS (keystore issue) - Sonatype Nexus Repository - Sonatype Community](/content/community/t/fails-to-start-nexus-repository-manager-oss-keystore-issue/13660/index.html): I reinstalled from scratch my (custom docker container) NxRM, using the same keystore.jks, file. I re-checked its password validity with keytool -list, and the password is valid. 
The only difference between the new cont&hellip; (149 words, Oct 15, 2024)
- [Fails to start nexus repository manager OSS (keystore issue) - Sonatype Nexus Repository - Sonatype Community](/content/community/t/fails-to-start-nexus-repository-manager-oss-keystore-issue/13660/1/index.html): I reinstalled from scratch my (custom docker container) NxRM, using the same keystore.jks, file. I re-checked its password validity with keytool -list, and the password is valid. 
The only difference between the new cont&hellip; (82 words, Oct 15, 2024)
- [Default Secret Encryption Key - Sonatype Nexus Repository - Sonatype Community](/content/community/t/default-secret-encryption-key/13658/1/index.html): Default Secret Encryption Key 
After upgrade Nexus sso from 3.72 to 3.73 
I get Default Secret Encryption Key 
Nexus was not configured with an encryption key and is using the Default key.	 
Is there aguide to fix that? (529 words, Oct 15, 2024)
- [Is there no risk of DB corruption even if the nexus repository oss version, which uses the H2 database as the embedded database, is used in a kubernetes environment? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/is-there-no-risk-of-db-corruption-even-if-the-nexus-repository-oss-version-which-uses-the-h2-database-as-the-embedded-database-is-used-in-a-kubernetes-environment/13651/index.html): I am using the oss version of the nexus repository in a kubernetes environment. 
Previously, the following web page stated that using the oss version of the embedded DB, orientDB, in combination with a kubernetes environ&hellip; (268 words, Oct 14, 2024)
- [Is there no risk of DB corruption even if the nexus repository oss version, which uses the H2 database as the embedded database, is used in a kubernetes environment? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/is-there-no-risk-of-db-corruption-even-if-the-nexus-repository-oss-version-which-uses-the-h2-database-as-the-embedded-database-is-used-in-a-kubernetes-environment/13651/1/index.html): I am using the oss version of the nexus repository in a kubernetes environment. 
Previously, the following web page stated that using the oss version of the embedded DB, orientDB, in combination with a kubernetes environ&hellip; (269 words, Oct 14, 2024)
- [Statistics - recalculate vulnerabilities statistics failure - Sonatype Nexus Repository - Sonatype Community](/content/community/t/statistics-recalculate-vulnerabilities-statistics-failure/13630/index.html): Hi, 
my “Statistics - recalculate vulnerabilities statistics” task isn’t working. 
I get 
==&gt; nexus.log &lt;==
2024-10-11 10:23:33,547+0000 INFO  [quartz-9-thread-19]  *SYSTEM com.sonatype.nexus.vulnerability.internal.log.V&hellip; (186 words, Oct 11, 2024)
- [Statistics - recalculate vulnerabilities statistics failure - Sonatype Nexus Repository - Sonatype Community](/content/community/t/statistics-recalculate-vulnerabilities-statistics-failure/13630/1/index.html): Hi, 
my “Statistics - recalculate vulnerabilities statistics” task isn’t working. 
I get 
==&gt; nexus.log &lt;==
2024-10-11 10:23:33,547+0000 INFO  [quartz-9-thread-19]  *SYSTEM com.sonatype.nexus.vulnerability.internal.log.V&hellip; (188 words, Oct 11, 2024)
- [Sonatype Nexus Repository 3.73.0 Released - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-repository-3-73-0-released/13627/index.html): Sonatype Nexus Repository 3.73.0 is now available. This release adds native support for Rust/Cargo in the Pro edition. This release also includes a malware risk banner and enhanced security for sensitive data through re-&hellip; (158 words, Oct 10, 2024)
- [Sonatype Nexus Repository 3.73.0 Released - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-repository-3-73-0-released/13627/1/index.html): Sonatype Nexus Repository 3.73.0 is now available. This release adds native support for Rust/Cargo in the Pro edition. This release also includes a malware risk banner and enhanced security for sensitive data through re-&hellip; (98 words, Oct 10, 2024)
- [Failed task "Delete unused manifests" due to "invalid asset"? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/failed-task-delete-unused-manifests-due-to-invalid-asset/13597/6/index.html): Does anyone face this issue? my Task &quot; Delete unused manifests and images&quot; does not work anymore because of one invalid asset. I assume the side effect is a never ending growing blob storage. 
I am on the most recent ver&hellip; (864 words, Oct 10, 2024)
- [OrientDB Database health check failed with database integrity: BROKEN - Sonatype Nexus Repository - Sonatype Community](/content/community/t/orientdb-database-health-check-failed-with-database-integrity-broken/13621/index.html): Hello, 
We are trying to upgrade the Sonatype Nexus Repository OSS 3.70.2 database from OrientDb to H2. We ran the health check on the back up taken from OrientDb using admin task and got below error: 
12:54:52 [main] IN&hellip; (471 words, Oct 9, 2024)
- [OrientDB Database health check failed with database integrity: BROKEN - Sonatype Nexus Repository - Sonatype Community](/content/community/t/orientdb-database-health-check-failed-with-database-integrity-broken/13621/1/index.html): Hello, 
We are trying to upgrade the Sonatype Nexus Repository OSS 3.70.2 database from OrientDb to H2. We ran the health check on the back up taken from OrientDb using admin task and got below error: 
12:54:52 [main] IN&hellip; (474 words, Oct 9, 2024)
- [How to recover from 'Attempt to access non-existent blob' - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-to-recover-from-attempt-to-access-non-existent-blob/2648/17/index.html): Hello, 
in case of disaster (e.g. filesystem failure or accidental files removal) some blobs may be lost. 
In this case, the way to find such blobs is running “Repair - Reconcile component database from blob store” task. &hellip; (1,357 words, Oct 9, 2024)
- [Failed task "Delete unused manifests" due to "invalid asset"? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/failed-task-delete-unused-manifests-due-to-invalid-asset/13597/5/index.html): Does anyone face this issue? my Task &quot; Delete unused manifests and images&quot; does not work anymore because of one invalid asset. I assume the side effect is a never ending growing blob storage. 
I am on the most recent ver&hellip; (885 words, Oct 9, 2024)
- [Change Java Version - Sonatype Nexus Repository - Sonatype Community](/content/community/t/change-java-version/13581/9/index.html): Hello 
Have upgraded Nexus to OSS 3.7.2-01 and migrated Database to H2. 
I need to change the Java Version to point to version 11. 
In the following Documentation I could find anything that describe it: 
https://help.son&hellip; (322 words, Oct 8, 2024)
- [Update Your IQ Server License Threat Groups - Sonatype Labs - Sonatype Community](/content/community/t/update-your-iq-server-license-threat-groups/3094/46/index.html): The license threat group updater will apply the latest Sonatype provided license classification to your running IQ server’s license threat groups. This will alleviate any “License Threat Group not Assigned” policy violat&hellip; (5,161 words, Oct 7, 2024)
- [3 days until All Day DevOps 2024! - Community Announcements - Sonatype Community](/content/community/t/3-days-until-all-day-devops-2024/13611/2/index.html): Join us in three days on 10/10/24 for the world’s largest DevOps conference, All Day DevOps, bringing together developers and industry leaders from around the globe to share insights, innovations, and best practices in t&hellip; (213 words, Oct 7, 2024)
- [3 days until All Day DevOps 2024! - Community Announcements - Sonatype Community](/content/community/t/3-days-until-all-day-devops-2024/13611/index.html): Join us in three days on 10/10/24 for the world’s largest DevOps conference, All Day DevOps, bringing together developers and industry leaders from around the globe to share insights, innovations, and best practices in t&hellip; (214 words, Oct 7, 2024)
- [3 days until All Day DevOps 2024! - Community Announcements - Sonatype Community](/content/community/t/3-days-until-all-day-devops-2024/13611/1/index.html): Join us in three days on 10/10/24 for the world’s largest DevOps conference, All Day DevOps, bringing together developers and industry leaders from around the globe to share insights, innovations, and best practices in t&hellip; (145 words, Oct 7, 2024)
- [Archiving Strategy for sonatype lifecycle - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/archiving-strategy-for-sonatype-lifecycle/13607/2/index.html): Hi 
Can we delete the trash fodler content in Nexus IQ server to claim space? 
Thanks 
Jai (166 words, Oct 7, 2024)
- [Failed task "Delete unused manifests" due to "invalid asset"? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/failed-task-delete-unused-manifests-due-to-invalid-asset/13597/3/index.html): Does anyone face this issue? my Task &quot; Delete unused manifests and images&quot; does not work anymore because of one invalid asset. I assume the side effect is a never ending growing blob storage. 
I am on the most recent ver&hellip; (812 words, Oct 7, 2024)
- [Archiving Strategy for sonatype lifecycle - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/archiving-strategy-for-sonatype-lifecycle/13607/1/index.html): Hi 
Can we delete the trash fodler content in Nexus IQ server to claim space? 
Thanks 
Jai (169 words, Oct 7, 2024)
- [Integrate Sonatype Nexus with Google Artifact Registry for RPM - Sonatype Nexus Repository - Sonatype Community](/content/community/t/integrate-sonatype-nexus-with-google-artifact-registry-for-rpm/13481/9/index.html): Need to configure Sonatype Nexus has a proxy (format yum / proxy) to Google Artifact Registry for RPM. For the authentication on Google used the an service account and on the configuration for the user put Username =_jso&hellip; (452 words, Oct 5, 2024)
- [Failed task "Delete unused manifests" due to "invalid asset"? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/failed-task-delete-unused-manifests-due-to-invalid-asset/13597/2/index.html): Does anyone face this issue? my Task &quot; Delete unused manifests and images&quot; does not work anymore because of one invalid asset. I assume the side effect is a never ending growing blob storage. 
I am on the most recent ver&hellip; (866 words, Oct 4, 2024)
- [Failed task "Delete unused manifests" due to "invalid asset"? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/failed-task-delete-unused-manifests-due-to-invalid-asset/13597/index.html): Does anyone face this issue? my Task &quot; Delete unused manifests and images&quot; does not work anymore because of one invalid asset. I assume the side effect is a never ending growing blob storage. 
I am on the most recent ver&hellip; (900 words, Oct 4, 2024)
- [Failed task "Delete unused manifests" due to "invalid asset"? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/failed-task-delete-unused-manifests-due-to-invalid-asset/13597/1/index.html): Does anyone face this issue? my Task &quot; Delete unused manifests and images&quot; does not work anymore because of one invalid asset. I assume the side effect is a never ending growing blob storage. 
I am on the most recent ver&hellip; (776 words, Oct 4, 2024)
- [can't download from gitlab.com - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/cant-download-from-gitlab-com/13582/index.html): Hello everyone, 
i don’t know why but seems gitlab changed repos and now my nexus can’t download package from that repo. 
From the server the curls going 200 but nexus do not download the current package. 
Can anyone hel&hellip; (53 words, Oct 2, 2024)
- [Change Java Version - Sonatype Nexus Repository - Sonatype Community](/content/community/t/change-java-version/13581/1/index.html): Hello 
Have upgraded Nexus to OSS 3.7.2-01 and migrated Database to H2. 
I need to change the Java Version to point to version 11. 
In the following Documentation I could find anything that describe it: 
https://help.son&hellip; (339 words, Oct 2, 2024)
- [How to setup SSL certs for Nexus IQ CLI Installed using linux binary - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/how-to-setup-ssl-certs-for-nexus-iq-cli-installed-using-linux-binary/13519/2/index.html): I am a beginner to sonatype products, currently exploring lifecycle scanning capabilities. While attempting to scan a code repo using nexus-iq-cli I run into SSL related errors.  I am unable to find documentation for res&hellip; (215 words, Sep 30, 2024)
- [HandlerContributor not extending custom ContributedHandler with datastore enabled - Sonatype Nexus Repository - Sonatype Community](/content/community/t/handlercontributor-not-extending-custom-contributedhandler-with-datastore-enabled/13560/3/index.html): Hello! 
Im developing plugin extension for nexus3, using 3.59.0 version with docker. With default run settings everyting is ok, but for some reason, if run a container with datastore enabled(Dnexus.datastore.enabled=true&hellip; (263 words, Sep 30, 2024)
- [NPM Group Repository Fetching Metadata from Second Proxy Despite Artifact Found in First Proxy (Nexus 3) - Sonatype Nexus Repository - Sonatype Community](/content/community/t/npm-group-repository-fetching-metadata-from-second-proxy-despite-artifact-found-in-first-proxy-nexus-3/13568/index.html): Hi everyone, 
I’m using Sonatype Nexus 3 for both NPM and Maven artifacts. I’ve set up group repositories for both NPM and Maven, each containing two proxy repositories: 

First proxy: internal upstream (for artifacts st&hellip; (665 words, Sep 29, 2024)
- [NPM Group Repository Fetching Metadata from Second Proxy Despite Artifact Found in First Proxy (Nexus 3) - Sonatype Nexus Repository - Sonatype Community](/content/community/t/npm-group-repository-fetching-metadata-from-second-proxy-despite-artifact-found-in-first-proxy-nexus-3/13568/1/index.html): Hi everyone, 
I’m using Sonatype Nexus 3 for both NPM and Maven artifacts. I’ve set up group repositories for both NPM and Maven, each containing two proxy repositories: 

First proxy: internal upstream (for artifacts st&hellip; (666 words, Sep 29, 2024)
- [HandlerContributor not extending custom ContributedHandler with datastore enabled - Sonatype Nexus Repository - Sonatype Community](/content/community/t/handlercontributor-not-extending-custom-contributedhandler-with-datastore-enabled/13560/2/index.html): Hello! 
Im developing plugin extension for nexus3, using 3.59.0 version with docker. With default run settings everyting is ok, but for some reason, if run a container with datastore enabled(Dnexus.datastore.enabled=true&hellip; (180 words, Sep 27, 2024)
- [HandlerContributor not extending custom ContributedHandler with datastore enabled - Sonatype Nexus Repository - Sonatype Community](/content/community/t/handlercontributor-not-extending-custom-contributedhandler-with-datastore-enabled/13560/index.html): Hello! 
Im developing plugin extension for nexus3, using 3.59.0 version with docker. With default run settings everyting is ok, but for some reason, if run a container with datastore enabled(Dnexus.datastore.enabled=true&hellip; (180 words, Sep 27, 2024)
- [HandlerContributor not extending custom ContributedHandler with datastore enabled - Sonatype Nexus Repository - Sonatype Community](/content/community/t/handlercontributor-not-extending-custom-contributedhandler-with-datastore-enabled/13560/1/index.html): Hello! 
Im developing plugin extension for nexus3, using 3.59.0 version with docker. With default run settings everyting is ok, but for some reason, if run a container with datastore enabled(Dnexus.datastore.enabled=true&hellip; (180 words, Sep 27, 2024)
- [Upgrading to H2 database - Sonatype Nexus Repository - Sonatype Community](/content/community/t/upgrading-to-h2-database/13479/5/index.html): Hallo all 
This might seem like asking to ask but I want to make sure. 
Reading Upgrading to 3.71.0+ for Instances Using OrientDB, Nexus Repository 3.70.x, and Java 8 or 11 
as I have 3.70 version using OrientDB and java&hellip; (576 words, Sep 27, 2024)
- [Upgrading to H2 database - Sonatype Nexus Repository - Sonatype Community](/content/community/t/upgrading-to-h2-database/13479/4/index.html): Hallo all 
This might seem like asking to ask but I want to make sure. 
Reading Upgrading to 3.71.0+ for Instances Using OrientDB, Nexus Repository 3.70.x, and Java 8 or 11 
as I have 3.70 version using OrientDB and java&hellip; (575 words, Sep 27, 2024)
- [How to trace what has uploaded to nexus3 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-to-trace-what-has-uploaded-to-nexus3/13539/4/index.html): Hello There, 
We are using nexus 3.69 , we want to investigate what has been uploaded on day so that we can verify and remove unwanted artifacts. 
Use case : to check data uploaded on nexus on specific date (example Yest&hellip; (258 words, Sep 26, 2024)
- [Join us in one hour for September Office Hours - 11 a.m EDT! - Community Announcements - Sonatype Community](/content/community/t/join-us-in-one-hour-for-september-office-hours-11-a-m-edt/13547/2/index.html): Join us in one hour at 11am EDT (8am PDT | 4pm BST) for our monthly, customer-exclusive Office Hours. 
This month, we’ll be discussing the following topics: 

Shaded Vulnerability Detection
All Day DevOps 2024
Sonatype&hellip; (127 words, Sep 26, 2024)
- [Join us in one hour for September Office Hours - 11 a.m EDT! - Community Announcements - Sonatype Community](/content/community/t/join-us-in-one-hour-for-september-office-hours-11-a-m-edt/13547/1/index.html): Join us in one hour at 11am EDT (8am PDT | 4pm BST) for our monthly, customer-exclusive Office Hours. 
This month, we’ll be discussing the following topics: 

Shaded Vulnerability Detection
All Day DevOps 2024
Sonatype&hellip; (201 words, Sep 26, 2024)
- [How to trace what has uploaded to nexus3 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-to-trace-what-has-uploaded-to-nexus3/13539/index.html): Hello There, 
We are using nexus 3.69 , we want to investigate what has been uploaded on day so that we can verify and remove unwanted artifacts. 
Use case : to check data uploaded on nexus on specific date (example Yest&hellip; (258 words, Sep 25, 2024)
- [How to trace what has uploaded to nexus3 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-to-trace-what-has-uploaded-to-nexus3/13539/1/index.html): Hello There, 
We are using nexus 3.69 , we want to investigate what has been uploaded on day so that we can verify and remove unwanted artifacts. 
Use case : to check data uploaded on nexus on specific date (example Yest&hellip; (258 words, Sep 25, 2024)
- [Repository Firewall Best Practices: Policy Compliant Component Selection - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/repository-firewall-best-practices-policy-compliant-component-selection/12225/7/index.html): Protecting yourself from software supply chain attack with Sonatype Repository Firewall is a bit of a balancing act. Quarantining components protects you from risk, but it also creates some development friction. Quaranti&hellip; (432 words, Sep 24, 2024)
- [Can I install Nexus OSS in kubernetes(EKS) with external database using helm charts? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/can-i-install-nexus-oss-in-kubernetes-eks-with-external-database-using-helm-charts/13528/1/index.html): Hello, 
I am part of a non profit organisation and wondering if we can install the Nexus open source(community) version in EKS with external database using helm charts? Do I need paid license to use external database? Al&hellip; (159 words, Sep 24, 2024)
- [docker login failed - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/docker-login-failed/13501/3/index.html): Hello Team, 
I have installed nexus-3.69.0-02 on standalone server. I have also created docker hosted Repositories  URL:- https://testnexusrepo.xxx.com/repository/dockertest/ 
and I have also installed nginx on the same &hellip; (264 words, Sep 24, 2024)
- [How to setup SSL certs for Nexus IQ CLI Installed using linux binary - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/how-to-setup-ssl-certs-for-nexus-iq-cli-installed-using-linux-binary/13519/index.html): I am a beginner to sonatype products, currently exploring lifecycle scanning capabilities. While attempting to scan a code repo using nexus-iq-cli I run into SSL related errors.  I am unable to find documentation for res&hellip; (263 words, Sep 23, 2024)
- [How to setup SSL certs for Nexus IQ CLI Installed using linux binary - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/how-to-setup-ssl-certs-for-nexus-iq-cli-installed-using-linux-binary/13519/1/index.html): I am a beginner to sonatype products, currently exploring lifecycle scanning capabilities. While attempting to scan a code repo using nexus-iq-cli I run into SSL related errors.  I am unable to find documentation for res&hellip; (263 words, Sep 23, 2024)
- [Sonatype Nexus OSS 3.69.0 Npm Issue - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-oss-3-69-0-npm-issue/13419/11/index.html): I am using a Nexus (3.69.0 oss) Docker image with Maven, npm, and Docker repositories feeded in it. This image needed to be deployed across different environment and use as an artifact central. 
For Maven and Docker, it &hellip; (1,489 words, Sep 20, 2024)
- [docker login failed - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/docker-login-failed/13501/2/index.html): Hello Team, 
I have installed nexus-3.69.0-02 on standalone server. I have also created docker hosted Repositories  URL:- https://testnexusrepo.xxx.com/repository/dockertest/ 
and I have also installed nginx on the same &hellip; (308 words, Sep 20, 2024)
- [Is Nexus supports NetApp S3 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/is-nexus-supports-netapp-s3/13502/index.html): Hello, 
Is Nexus Repository support NetApp S3 as a blob store. If yes, could you please point me to some documentation. 
We have deployed Nexus on Openshift cluster which is running on Vsphere. 
Best Regards, 
Swamy. (91 words, Sep 20, 2024)
- [Is Nexus supports NetApp S3 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/is-nexus-supports-netapp-s3/13502/1/index.html): Hello, 
Is Nexus Repository support NetApp S3 as a blob store. If yes, could you please point me to some documentation. 
We have deployed Nexus on Openshift cluster which is running on Vsphere. 
Best Regards, 
Swamy. (91 words, Sep 20, 2024)
- [docker login failed - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/docker-login-failed/13501/index.html): Hello Team, 
I have installed nexus-3.69.0-02 on standalone server. I have also created docker hosted Repositories  URL:- https://testnexusrepo.xxx.com/repository/dockertest/ 
and I have also installed nginx on the same &hellip; (310 words, Sep 20, 2024)
- [docker login failed - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/docker-login-failed/13501/1/index.html): Hello Team, 
I have installed nexus-3.69.0-02 on standalone server. I have also created docker hosted Repositories  URL:- https://testnexusrepo.xxx.com/repository/dockertest/ 
and I have also installed nginx on the same &hellip; (310 words, Sep 20, 2024)
- [Nexus API endpoint for community recipe composer - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-api-endpoint-for-community-recipe-composer/13492/index.html): Hey all 
I am currently working on a cac (configuration as code) setup for my nexus with Ansible. 
And I am stuck with the composer recipe (GitHub - sonatype-nexus-community/nexus-repository-composer: Composer support fo&hellip; (146 words, Sep 19, 2024)
- [Nexus API endpoint for community recipe composer - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-api-endpoint-for-community-recipe-composer/13492/1/index.html): Hey all 
I am currently working on a cac (configuration as code) setup for my nexus with Ansible. 
And I am stuck with the composer recipe (GitHub - sonatype-nexus-community/nexus-repository-composer: Composer support fo&hellip; (150 words, Sep 19, 2024)
- [Join us for September Office Hours - Thursday, September 26th at 11am EDT - Community Announcements - Sonatype Community](/content/community/t/join-us-for-september-office-hours-thursday-september-26th-at-11am-edt/13490/2/index.html): Join us Thursday, September 26th at 11am EDT (8am PDT | 4pm BST) for our monthly, customer-exclusive Office Hours. 
This month, we’ll be discussing the following topics: 

Shaded Vulnerability Detection
All Day DevOps &hellip; (126 words, Sep 19, 2024)
- [Join us for September Office Hours - Thursday, September 26th at 11am EDT - Community Announcements - Sonatype Community](/content/community/t/join-us-for-september-office-hours-thursday-september-26th-at-11am-edt/13490/index.html): Join us Thursday, September 26th at 11am EDT (8am PDT | 4pm BST) for our monthly, customer-exclusive Office Hours. 
This month, we’ll be discussing the following topics: 

Shaded Vulnerability Detection
All Day DevOps &hellip; (200 words, Sep 19, 2024)
- [Join us for September Office Hours - Thursday, September 26th at 11am EDT - Community Announcements - Sonatype Community](/content/community/t/join-us-for-september-office-hours-thursday-september-26th-at-11am-edt/13490/1/index.html): Join us Thursday, September 26th at 11am EDT (8am PDT | 4pm BST) for our monthly, customer-exclusive Office Hours. 
This month, we’ll be discussing the following topics: 

Shaded Vulnerability Detection
All Day DevOps &hellip; (126 words, Sep 19, 2024)
- [Register for All Day DevOps 2024 - October 10th, 2024! - Community Announcements - Sonatype Community](/content/community/t/register-for-all-day-devops-2024-october-10th-2024/13484/2/index.html): Join us on October 10th for the world’s largest DevOps conference, All Day DevOps, bringing together developers and industry leaders from around the globe to share insights, innovations, and best practices in the ever-ev&hellip; (108 words, Sep 18, 2024)
- [Register for All Day DevOps 2024 - October 10th, 2024! - Community Announcements - Sonatype Community](/content/community/t/register-for-all-day-devops-2024-october-10th-2024/13484/index.html): Join us on October 10th for the world’s largest DevOps conference, All Day DevOps, bringing together developers and industry leaders from around the globe to share insights, innovations, and best practices in the ever-ev&hellip; (108 words, Sep 18, 2024)
- [Register for All Day DevOps 2024 - October 10th, 2024! - Community Announcements - Sonatype Community](/content/community/t/register-for-all-day-devops-2024-october-10th-2024/13484/1/index.html): Join us on October 10th for the world’s largest DevOps conference, All Day DevOps, bringing together developers and industry leaders from around the globe to share insights, innovations, and best practices in the ever-ev&hellip; (108 words, Sep 18, 2024)
- [Integrate Sonatype Nexus with Google Artifact Registry for RPM - Sonatype Nexus Repository - Sonatype Community](/content/community/t/integrate-sonatype-nexus-with-google-artifact-registry-for-rpm/13481/1/index.html): Need to configure Sonatype Nexus has a proxy (format yum / proxy) to Google Artifact Registry for RPM. For the authentication on Google used the an service account and on the configuration for the user put Username =_jso&hellip; (452 words, Sep 18, 2024)
- [Upgrading to H2 database - Sonatype Nexus Repository - Sonatype Community](/content/community/t/upgrading-to-h2-database/13479/1/index.html): Hallo all 
This might seem like asking to ask but I want to make sure. 
Reading Upgrading to 3.71.0+ for Instances Using OrientDB, Nexus Repository 3.70.x, and Java 8 or 11 
as I have 3.70 version using OrientDB and java&hellip; (576 words, Sep 18, 2024)
- [Update Your IQ Server License Threat Groups - Sonatype Labs - Sonatype Community](/content/community/t/update-your-iq-server-license-threat-groups/3094/45/index.html): The license threat group updater will apply the latest Sonatype provided license classification to your running IQ server’s license threat groups. This will alleviate any “License Threat Group not Assigned” policy violat&hellip; (691 words, Sep 17, 2024)
- [Migration from orientDB to H2, upload of new artifact returns 500 - official solution 3.71.0 OSS - Sonatype Nexus Repository - Sonatype Community](/content/community/t/migration-from-orientdb-to-h2-upload-of-new-artifact-returns-500-official-solution-3-71-0-oss/13098/3/index.html): Referring to the topic Update from v3.70.1 to 3.71.0 - #10 by wwojciechp  which is already closed the problem is about auto-increment in migrated database to H2. 
The resourceful question is whether a fix for nexus-db-mi&hellip; (201 words, Sep 13, 2024)
- [Nexus 3 as a Pypi mirror - how do I get the **json** data for a given package? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-3-as-a-pypi-mirror-how-do-i-get-the-json-data-for-a-given-package/13448/index.html): Using uv as an example… 
If I go to Links for uv I get a simple list of links to just artifacts (no metadata) 
If I go there with header Accept: application/vnd.pypi.simple.v1+json I get a json output with metadata (part&hellip; (688 words, Sep 12, 2024)
- [Nexus 3 as a Pypi mirror - how do I get the **json** data for a given package? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-3-as-a-pypi-mirror-how-do-i-get-the-json-data-for-a-given-package/13448/1/index.html): Using uv as an example… 
If I go to Links for uv I get a simple list of links to just artifacts (no metadata) 
If I go there with header Accept: application/vnd.pypi.simple.v1+json I get a json output with metadata (part&hellip; (676 words, Sep 12, 2024)
- [Migrating Nexus3 data to Nexus3 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/migrating-nexus3-data-to-nexus3/13444/2/index.html): Hello all, 
I have two Nexus, Nexus A (having data) to Nexus B (having data), now I want to migrate data from nexus A to Nexus B but migration should not wipe data of Nexus B. I want both the Nexus data in Nexus B, how w&hellip; (108 words, Sep 12, 2024)
- [Migrating Nexus3 data to Nexus3 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/migrating-nexus3-data-to-nexus3/13444/1/index.html): Hello all, 
I have two Nexus, Nexus A (having data) to Nexus B (having data), now I want to migrate data from nexus A to Nexus B but migration should not wipe data of Nexus B. I want both the Nexus data in Nexus B, how w&hellip; (111 words, Sep 12, 2024)
- [Error, "Failed to fetch results from V2 feed", When downloading from group repo using nuget.exe - Sonatype Nexus Repository - Sonatype Community](/content/community/t/error-failed-to-fetch-results-from-v2-feed-when-downloading-from-group-repo-using-nuget-exe/11367/4/index.html): When I tried to download a package from group repo using nuget.exe, I failed with the error saying “Failed to fetch results from V2 feed”.  When I download from hosted repo, I don’t have any issue. 
Detail message I see &hellip; (334 words, Sep 10, 2024)
- [Sonatype Nexus OSS 3.69.0 Npm Issue - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-oss-3-69-0-npm-issue/13419/index.html): I am using a Nexus (3.69.0 oss) Docker image with Maven, npm, and Docker repositories feeded in it. This image needed to be deployed across different environment and use as an artifact central. 
For Maven and Docker, it &hellip; (1,421 words, Sep 6, 2024)
- [Sonatype Nexus OSS 3.69.0 Npm Issue - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-oss-3-69-0-npm-issue/13419/1/index.html): I am using a Nexus (3.69.0 oss) Docker image with Maven, npm, and Docker repositories feeded in it. This image needed to be deployed across different environment and use as an artifact central. 
For Maven and Docker, it &hellip; (1,286 words, Sep 6, 2024)
- [A problem about download npm-package after invalidate cache - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/a-problem-about-download-npm-package-after-invalidate-cache/13405/3/index.html): Hello team: 
When I press invalidate cache of a group_nexus_repo, I can not download some npm package，the key logs as shown: 
  
There are many logs of this type, causing the service to be unavailable for short periods o&hellip; (219 words, Sep 5, 2024)
- [A problem about download npm-package after invalidate cache - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/a-problem-about-download-npm-package-after-invalidate-cache/13405/2/index.html): Hello team: 
When I press invalidate cache of a group_nexus_repo, I can not download some npm package，the key logs as shown: 
  
There are many logs of this type, causing the service to be unavailable for short periods o&hellip; (218 words, Sep 5, 2024)
- [A problem about download npm-package after invalidate cache - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/a-problem-about-download-npm-package-after-invalidate-cache/13405/index.html): Hello team: 
When I press invalidate cache of a group_nexus_repo, I can not download some npm package，the key logs as shown: 
  
There are many logs of this type, causing the service to be unavailable for short periods o&hellip; (220 words, Sep 5, 2024)
- [A problem about download npm-package after invalidate cache - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/a-problem-about-download-npm-package-after-invalidate-cache/13405/1/index.html): Hello team: 
When I press invalidate cache of a group_nexus_repo, I can not download some npm package，the key logs as shown: 
  
There are many logs of this type, causing the service to be unavailable for short periods o&hellip; (220 words, Sep 5, 2024)
- [Sonatype Nexus Repository 3.72.0 Released - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-repository-3-72-0-released/13404/index.html): Sonatype Nexus Repository 3.72.0 is now available. 
This is the first release to which those using High Availability (HA) deployments may upgrade without downtime (i.e., rolling upgrades, zero-downtime upgrades). To do s&hellip; (464 words, Sep 4, 2024)
- [Sonatype Nexus Repository 3.70.2 Released - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-repository-3-70-2-released/13400/1/index.html): Sonatype Nexus Repository 3.70.2 is now available. This release fixes a Database Migrator issue that caused some users to see duplicate key errors after migrating from OrientDB to H2. See the 3.70.2 Release Notes for ful&hellip; (131 words, Sep 3, 2024)
- [Default database for Nexus OSS 3.70.0 and 3.70.1 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/default-database-for-nexus-oss-3-70-0-and-3-70-1/13128/5/index.html): Hi All, 
Currently we have Nexus OSS 3.69.0 with Orient DB as database as per the details mentioned in this link Upgrading to 3.71.0+ for Instances Using OrientDB, a Pre-3.70.1 Nexus Repository Version, and Java 8 or 11 
&hellip; (513 words, Sep 2, 2024)
- [Problem after migration to H2 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/problem-after-migration-to-h2/13180/6/index.html): Hi, 
after migration to H2 (which makes no fun) I have now next problem 
==&gt; nexus.log &lt;==
2024-08-28 14:02:14,255+0000 WARN  [qtp95736789-1369]  *UNKNOWN org.sonatype.nexus.transaction.RetryController - Exceeded retry l&hellip; (212 words, Aug 30, 2024)
- [Automated Pull Requests vs Policy Compliant Component Selection - Sonatype Lifecycle & Repository Firewall / Best Practices - Sonatype Community](/content/community/t/automated-pull-requests-vs-policy-compliant-component-selection/13361/index.html): When it comes to automating version updates to remediate vulnerabilities, Sonatype appears to offer two conflicting solutions: 

Automated Pull Requests

Requires version pinning


Policy Compliant Component Selection

R&hellip; (254 words, Aug 29, 2024)
- [Automated Pull Requests vs Policy Compliant Component Selection - Sonatype Lifecycle & Repository Firewall / Best Practices - Sonatype Community](/content/community/t/automated-pull-requests-vs-policy-compliant-component-selection/13361/1/index.html): When it comes to automating version updates to remediate vulnerabilities, Sonatype appears to offer two conflicting solutions: 

Automated Pull Requests

Requires version pinning


Policy Compliant Component Selection

R&hellip; (254 words, Aug 29, 2024)
- [Problem after migration to H2 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/problem-after-migration-to-h2/13180/index.html): Hi, 
after migration to H2 (which makes no fun) I have now next problem 
==&gt; nexus.log &lt;==
2024-08-28 14:02:14,255+0000 WARN  [qtp95736789-1369]  *UNKNOWN org.sonatype.nexus.transaction.RetryController - Exceeded retry l&hellip; (214 words, Aug 28, 2024)
- [Problem after migration to H2 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/problem-after-migration-to-h2/13180/1/index.html): Hi, 
after migration to H2 (which makes no fun) I have now next problem 
==&gt; nexus.log &lt;==
2024-08-28 14:02:14,255+0000 WARN  [qtp95736789-1369]  *UNKNOWN org.sonatype.nexus.transaction.RetryController - Exceeded retry l&hellip; (231 words, Aug 28, 2024)
- [Content Replication Metadata - Sonatype Nexus Repository - Sonatype Community](/content/community/t/content-replication-metadata/13129/5/index.html): Hi, understand that Content Replication for nexus only works for proxy repository (destination) from hosted repository (source), whereby the metadata are not replicated. 
For my current use case, i would like to implemen&hellip; (739 words, Aug 28, 2024)
- [Nexus keep old components in blob store - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-keep-old-components-in-blob-store/13131/index.html): The clean up tasks and compact blob are successfully executing daily. The clean up policy remove components published over 3 days ago, but there are a lots of components created in december 2023 that policy ignores and s&hellip; (88 words, Aug 27, 2024)
- [Nexus keep old components in blob store - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-keep-old-components-in-blob-store/13131/1/index.html): The clean up tasks and compact blob are successfully executing daily. The clean up policy remove components published over 3 days ago, but there are a lots of components created in december 2023 that policy ignores and s&hellip; (107 words, Aug 27, 2024)
- [Content Replication Metadata - Sonatype Nexus Repository - Sonatype Community](/content/community/t/content-replication-metadata/13129/index.html): Hi, understand that Content Replication for nexus only works for proxy repository (destination) from hosted repository (source), whereby the metadata are not replicated. 
For my current use case, i would like to implemen&hellip; (739 words, Aug 27, 2024)
- [Content Replication Metadata - Sonatype Nexus Repository - Sonatype Community](/content/community/t/content-replication-metadata/13129/1/index.html): Hi, understand that Content Replication for nexus only works for proxy repository (destination) from hosted repository (source), whereby the metadata are not replicated. 
For my current use case, i would like to implemen&hellip; (740 words, Aug 27, 2024)
- [Default database for Nexus OSS 3.70.0 and 3.70.1 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/default-database-for-nexus-oss-3-70-0-and-3-70-1/13128/index.html): Hi All, 
Currently we have Nexus OSS 3.69.0 with Orient DB as database as per the details mentioned in this link Upgrading to 3.71.0+ for Instances Using OrientDB, a Pre-3.70.1 Nexus Repository Version, and Java 8 or 11 
&hellip; (513 words, Aug 27, 2024)
- [Default database for Nexus OSS 3.70.0 and 3.70.1 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/default-database-for-nexus-oss-3-70-0-and-3-70-1/13128/1/index.html): Hi All, 
Currently we have Nexus OSS 3.69.0 with Orient DB as database as per the details mentioned in this link Upgrading to 3.71.0+ for Instances Using OrientDB, a Pre-3.70.1 Nexus Repository Version, and Java 8 or 11 
&hellip; (507 words, Aug 27, 2024)
- [Using Nexus as a proxy registry for a disconnected OpenShift install - Sonatype Nexus Repository - Sonatype Community](/content/community/t/using-nexus-as-a-proxy-registry-for-a-disconnected-openshift-install/13118/index.html): Hi all, 
I’m attempting to use Nexus as a local proxy registry for deploying OCP clusters. 
I’ve configured upstream docker proxy repos to quay.io, registry.redhat.io and a few others. 
Then, I’ve aggregated those repos &hellip; (358 words, Aug 26, 2024)
- [Using Nexus as a proxy registry for a disconnected OpenShift install - Sonatype Nexus Repository - Sonatype Community](/content/community/t/using-nexus-as-a-proxy-registry-for-a-disconnected-openshift-install/13118/1/index.html): Hi all, 
I’m attempting to use Nexus as a local proxy registry for deploying OCP clusters. 
I’ve configured upstream docker proxy repos to quay.io, registry.redhat.io and a few others. 
Then, I’ve aggregated those repos &hellip; (358 words, Aug 26, 2024)
- [Tags/list yields 'null' as first tag - Sonatype Nexus Repository - Sonatype Community](/content/community/t/tags-list-yields-null-as-first-tag/13117/1/index.html): Hello! 
We are running nexus 3.58 OSS and have a hosted docker repository. 
While working with skopeo we have a problem with some of our images which we could track down to the following: 
If we use the tags/list URL (ht&hellip; (133 words, Aug 26, 2024)
- [Nexus -> SIEM integration - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/nexus-siem-integration/10093/4/index.html): Hello. 
I am learning to use Nexus, and I’d like to pass its logs to ELK. In settings I didn’t find SIEM connectors. Are there any? Or I need to pass logs to stdout (for example) and then process them with my own connect&hellip; (158 words, Aug 26, 2024)
- [Can't migrate from OrientDB to PG - Sonatype Nexus Repository - Sonatype Community](/content/community/t/cant-migrate-from-orientdb-to-pg/13110/index.html): Hi, 
I try to migrate my Nexus t3.70.1.x o 3.71.x. But first I have to migrate my OrienDB to PG16. 
I did all the stuff described in Migrating to a New Database 
And when I start the migration 

java -Xmx10G -Xms10G -XX:&hellip; (891 words, Aug 25, 2024)
- [Can't migrate from OrientDB to PG - Sonatype Nexus Repository - Sonatype Community](/content/community/t/cant-migrate-from-orientdb-to-pg/13110/1/index.html): Hi, 
I try to migrate my Nexus t3.70.1.x o 3.71.x. But first I have to migrate my OrienDB to PG16. 
I did all the stuff described in Migrating to a New Database 
And when I start the migration 

java -Xmx10G -Xms10G -XX:&hellip; (1,057 words, Aug 25, 2024)
- [Migrating to 3.71 on a docker-based installation - Sonatype Nexus Repository - Sonatype Community](/content/community/t/migrating-to-3-71-on-a-docker-based-installation/13045/11/index.html): I’m currently running Nexus from the sonatype/nexus3:3.70.1-java11-ubi image. 
The documentation available at Upgrading to Nexus Repository 3.71.0 and Beyond is… lacking. It does not describe a scenario where the whole t&hellip; (1,126 words, Aug 23, 2024)
- [Sonatype Nexus OSS 3.41.0-01 and LDAPS : failed to connect - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-oss-3-41-0-01-and-ldaps-failed-to-connect/9604/5/index.html): hI, 
I’m using nexus OSS 3.41 and I want to acces to my Activive Directory with LDAPS 
When I use LDAP, it’s OK, Nexus is connected to my AD. 
BUT 
When à use LDAPS, I have the following error : 
Failed to connect to LDA&hellip; (425 words, Aug 23, 2024)
- [Can we set nologin on nexus account of Linux server? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/can-we-set-nologin-on-nexus-account-of-linux-server/13104/index.html): Hi 
It was required to set nologin on any accounts which is used as service account. 
If nologin is set on nexus account linux server, Sonatype Nexus Repository can work without any problem? (53 words, Aug 23, 2024)
- [Migration from orientDB to H2, upload of new artifact returns 500 - official solution 3.71.0 OSS - Sonatype Nexus Repository - Sonatype Community](/content/community/t/migration-from-orientdb-to-h2-upload-of-new-artifact-returns-500-official-solution-3-71-0-oss/13098/1/index.html): Referring to the topic Update from v3.70.1 to 3.71.0 - #10 by wwojciechp  which is already closed the problem is about auto-increment in migrated database to H2. 
The resourceful question is whether a fix for nexus-db-mi&hellip; (204 words, Aug 22, 2024)
- [Join us in one hour for August Office Hours - 12 p.m EDT! - Community Announcements - Sonatype Community](/content/community/t/join-us-in-one-hour-for-august-office-hours-12-p-m-edt/13097/2/index.html): Join us in one hour at 12pm EDT (9am PDT | 5pm BST) for our monthly, customer-exclusive Office Hours . 
This month, we’ll be discussing the following topics: 

New Sonatype GitHub Actions
August Learn Package: Sonatype&hellip; (213 words, Aug 22, 2024)
- [Join us in one hour for August Office Hours - 12 p.m EDT! - Community Announcements - Sonatype Community](/content/community/t/join-us-in-one-hour-for-august-office-hours-12-p-m-edt/13097/index.html): Join us in one hour at 12pm EDT (9am PDT | 5pm BST) for our monthly, customer-exclusive Office Hours . 
This month, we’ll be discussing the following topics: 

New Sonatype GitHub Actions
August Learn Package: Sonatype&hellip; (128 words, Aug 22, 2024)
- [Join us in one hour for August Office Hours - 12 p.m EDT! - Community Announcements - Sonatype Community](/content/community/t/join-us-in-one-hour-for-august-office-hours-12-p-m-edt/13097/1/index.html): Join us in one hour at 12pm EDT (9am PDT | 5pm BST) for our monthly, customer-exclusive Office Hours . 
This month, we’ll be discussing the following topics: 

New Sonatype GitHub Actions
August Learn Package: Sonatype&hellip; (204 words, Aug 22, 2024)
- [NEXUS OSS Database Migration from Orient DB - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-oss-database-migration-from-orient-db/13089/4/index.html): Hello All, 
Currently we have a Nexus Repository OSS 3.69.0 version with OrientDb as a database. 
As per the latest announcement to upgrade to 3.71.* versions we need to upgrade the Db from OrientDb to either H2 or Postg&hellip; (172 words, Aug 22, 2024)
- [Clean up policy does not work does not work after upgrade Nexus OSS 3.59 to 3.69 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/clean-up-policy-does-not-work-does-not-work-after-upgrade-nexus-oss-3-59-to-3-69/13092/2/index.html): Hello, 
I have an issue with storage on our nexus Server version OSS 3.69 , that’s why you have implement a cleanup policy and create a tasks to purge old artifacts but the problem that the tasks keep always the status r&hellip; (171 words, Aug 21, 2024)
- [OrientDB migration: Database integrity: BROKEN - Sonatype Nexus Repository - Sonatype Community](/content/community/t/orientdb-migration-database-integrity-broken/13091/2/index.html): Hi! 
We’re running 2 standalone Nexus OSS installations. 
Currently it is Nexus/3.70.1-02 (OSS). 
I ran the following command to check the health status of the database before I can try the Migration to H2: 
java --add-e&hellip; (296 words, Aug 21, 2024)
- [Job for nexus.service failed because the control process exited with error code. See "systemctl status nexus.service" and "journalctl -xe" for details - Sonatype Nexus Repository - Sonatype Community](/content/community/t/job-for-nexus-service-failed-because-the-control-process-exited-with-error-code-see-systemctl-status-nexus-service-and-journalctl-xe-for-details/13071/3/index.html): Job for nexus.service failed because the control process exited with error code. See “systemctl status nexus.service” and “journalctl -xe” for details. 
nexus.service - nexus service 
Loaded: loaded (/etc/systemd/system/&hellip; (322 words, Aug 21, 2024)
- [Clean up policy does not work does not work after upgrade Nexus OSS 3.59 to 3.69 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/clean-up-policy-does-not-work-does-not-work-after-upgrade-nexus-oss-3-59-to-3-69/13092/index.html): Hello, 
I have an issue with storage on our nexus Server version OSS 3.69 , that’s why you have implement a cleanup policy and create a tasks to purge old artifacts but the problem that the tasks keep always the status r&hellip; (281 words, Aug 21, 2024)
- [Clean up policy does not work does not work after upgrade Nexus OSS 3.59 to 3.69 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/clean-up-policy-does-not-work-does-not-work-after-upgrade-nexus-oss-3-59-to-3-69/13092/1/index.html): Hello, 
I have an issue with storage on our nexus Server version OSS 3.69 , that’s why you have implement a cleanup policy and create a tasks to purge old artifacts but the problem that the tasks keep always the status r&hellip; (233 words, Aug 21, 2024)
- [OrientDB migration: Database integrity: BROKEN - Sonatype Nexus Repository - Sonatype Community](/content/community/t/orientdb-migration-database-integrity-broken/13091/index.html): Hi! 
We’re running 2 standalone Nexus OSS installations. 
Currently it is Nexus/3.70.1-02 (OSS). 
I ran the following command to check the health status of the database before I can try the Migration to H2: 
java --add-e&hellip; (306 words, Aug 21, 2024)
- [OrientDB migration: Database integrity: BROKEN - Sonatype Nexus Repository - Sonatype Community](/content/community/t/orientdb-migration-database-integrity-broken/13091/1/index.html): Hi! 
We’re running 2 standalone Nexus OSS installations. 
Currently it is Nexus/3.70.1-02 (OSS). 
I ran the following command to check the health status of the database before I can try the Migration to H2: 
java --add-e&hellip; (296 words, Aug 21, 2024)
- [NEXUS OSS Database Migration from Orient DB - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-oss-database-migration-from-orient-db/13089/index.html): Hello All, 
Currently we have a Nexus Repository OSS 3.69.0 version with OrientDb as a database. 
As per the latest announcement to upgrade to 3.71.* versions we need to upgrade the Db from OrientDb to either H2 or Postg&hellip; (166 words, Aug 21, 2024)
- [Yum/apt proxy snapshot error - Failure servicing MKCOL - Sonatype Nexus Repository - Sonatype Community](/content/community/t/yum-apt-proxy-snapshot-error-failure-servicing-mkcol/8547/6/index.html): Hi All, 
We’re using nexus repo OSS 3.30.1-01. I’m trying to create meta snapshots for yum/apt proxy repos however we’re getting an HTTP 500 response. We can’t find any documentation for the snapshot method either. 
This&hellip; (371 words, Aug 19, 2024)
- [Sonatype Nexus Docker Registry - Disc Consumption - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-docker-registry-disc-consumption/13034/3/index.html): I recently switched to using the Sonatype Nexus Repository for hosting my Docker images. Previously, I used the Docker registry image to store my Docker images. 
With approximately 30 Docker images, the Docker registry i&hellip; (218 words, Aug 19, 2024)
- [Join us for August Office Hours - Thursday, August 22nd at 12pm EDT - Community Announcements - Sonatype Community](/content/community/t/join-us-for-august-office-hours-thursday-august-22nd-at-12pm-edt/13076/index.html): Join us Thursday, August 22nd at 12pm EDT (9am PDT | 5pm BST) for our monthly, customer-exclusive Office Hours. 
This month, we’ll be discussing the following topics: 

New Sonatype GitHub Actions
August Learn Package: &hellip; (208 words, Aug 16, 2024)
- [Join us for August Office Hours - Thursday, August 22nd at 12pm EDT - Community Announcements - Sonatype Community](/content/community/t/join-us-for-august-office-hours-thursday-august-22nd-at-12pm-edt/13076/1/index.html): Join us Thursday, August 22nd at 12pm EDT (9am PDT | 5pm BST) for our monthly, customer-exclusive Office Hours. 
This month, we’ll be discussing the following topics: 

New Sonatype GitHub Actions
August Learn Package: &hellip; (134 words, Aug 16, 2024)
- [Job for nexus.service failed because the control process exited with error code. See "systemctl status nexus.service" and "journalctl -xe" for details - Sonatype Nexus Repository - Sonatype Community](/content/community/t/job-for-nexus-service-failed-because-the-control-process-exited-with-error-code-see-systemctl-status-nexus-service-and-journalctl-xe-for-details/13071/index.html): Job for nexus.service failed because the control process exited with error code. See “systemctl status nexus.service” and “journalctl -xe” for details. 
nexus.service - nexus service 
Loaded: loaded (/etc/systemd/system/&hellip; (334 words, Aug 16, 2024)
- [Job for nexus.service failed because the control process exited with error code. See "systemctl status nexus.service" and "journalctl -xe" for details - Sonatype Nexus Repository - Sonatype Community](/content/community/t/job-for-nexus-service-failed-because-the-control-process-exited-with-error-code-see-systemctl-status-nexus-service-and-journalctl-xe-for-details/13071/1/index.html): Job for nexus.service failed because the control process exited with error code. See “systemctl status nexus.service” and “journalctl -xe” for details. 
nexus.service - nexus service 
Loaded: loaded (/etc/systemd/system/&hellip; (314 words, Aug 16, 2024)
- [DB migrator failing - Sonatype Nexus Repository - Sonatype Community](/content/community/t/db-migrator-failing/13060/2/index.html): I’m trying to somehow upgrade the docker-based Orient DB installation to H2 so that the latest Nexus3 image can use it. Alas, so far, I’m not having any successes. At a glance it seems the migration jar is simply broken.&hellip; (521 words, Aug 14, 2024)
- [DB migrator failing - Sonatype Nexus Repository - Sonatype Community](/content/community/t/db-migrator-failing/13060/index.html): I’m trying to somehow upgrade the docker-based Orient DB installation to H2 so that the latest Nexus3 image can use it. Alas, so far, I’m not having any successes. At a glance it seems the migration jar is simply broken.&hellip; (618 words, Aug 14, 2024)
- [DB migrator failing - Sonatype Nexus Repository - Sonatype Community](/content/community/t/db-migrator-failing/13060/1/index.html): I’m trying to somehow upgrade the docker-based Orient DB installation to H2 so that the latest Nexus3 image can use it. Alas, so far, I’m not having any successes. At a glance it seems the migration jar is simply broken.&hellip; (701 words, Aug 14, 2024)
- [How to make cleanup rules avoid the "latest" tag? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-to-make-cleanup-rules-avoid-the-latest-tag/13026/5/index.html): I can’t see it mentioned anywhere… how can I create a cleanup rule which would avoid removing the “latest” tag? 
I’m worried that for some images we might be updating really infrequently a “generic” rule (like, say, dele&hellip; (444 words, Aug 14, 2024)
- [Update from v3.70.1 to 3.71.0 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/update-from-v3-70-1-to-3-71-0/13055/index.html): I updated Nexus from v3.70.1 to 3.71.0 (Docker version) and had to migrate legacy OrientDB to H2 because I use OSS version without licence. After successful DB migration to H2, I receive Error 500 in deployment process: 
&hellip; (2,094 words, Aug 14, 2024)
- [Update from v3.70.1 to 3.71.0 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/update-from-v3-70-1-to-3-71-0/13055/1/index.html): I updated Nexus from v3.70.1 to 3.71.0 (Docker version) and had to migrate legacy OrientDB to H2 because I use OSS version without licence. After successful DB migration to H2, I receive Error 500 in deployment process: 
&hellip; (509 words, Aug 14, 2024)
- [Sonatype Nexus Docker Registry - Disc Consumption - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-docker-registry-disc-consumption/13034/2/index.html): I recently switched to using the Sonatype Nexus Repository for hosting my Docker images. Previously, I used the Docker registry image to store my Docker images. 
With approximately 30 Docker images, the Docker registry i&hellip; (218 words, Aug 13, 2024)
- [Migrating to 3.71 on a docker-based installation - Sonatype Nexus Repository - Sonatype Community](/content/community/t/migrating-to-3-71-on-a-docker-based-installation/13045/index.html): I’m currently running Nexus from the sonatype/nexus3:3.70.1-java11-ubi image. 
The documentation available at Upgrading to Nexus Repository 3.71.0 and Beyond is… lacking. It does not describe a scenario where the whole t&hellip; (1,124 words, Aug 13, 2024)
- [Migrating to 3.71 on a docker-based installation - Sonatype Nexus Repository - Sonatype Community](/content/community/t/migrating-to-3-71-on-a-docker-based-installation/13045/1/index.html): I’m currently running Nexus from the sonatype/nexus3:3.70.1-java11-ubi image. 
The documentation available at Upgrading to Nexus Repository 3.71.0 and Beyond is… lacking. It does not describe a scenario where the whole t&hellip; (1,113 words, Aug 13, 2024)
- [Nexus crash on Kubernetes - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-crash-on-kubernetes/13041/2/index.html): We deployed Nexus3 as a StatefulSet on Kubernetes a few years ago. We always face the same error right after a Kubernetes automatic upgrade (on GKE). It happens at least every month. 
Right after the upgrade, the pod is &hellip; (245 words, Aug 13, 2024)
- [Nexus crash on Kubernetes - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-crash-on-kubernetes/13041/index.html): We deployed Nexus3 as a StatefulSet on Kubernetes a few years ago. We always face the same error right after a Kubernetes automatic upgrade (on GKE). It happens at least every month. 
Right after the upgrade, the pod is &hellip; (245 words, Aug 13, 2024)
- [Nexus crash on Kubernetes - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-crash-on-kubernetes/13041/1/index.html): We deployed Nexus3 as a StatefulSet on Kubernetes a few years ago. We always face the same error right after a Kubernetes automatic upgrade (on GKE). It happens at least every month. 
Right after the upgrade, the pod is &hellip; (245 words, Aug 13, 2024)
- [Missing repositories in Nexus 2.15.1-02 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/missing-repositories-in-nexus-2-15-1-02/13023/3/index.html): I have set up Nexus 2.15 on a RHEL 8 server and confirmed the Nexus process is running as expected. When I log into the Nexus Repository Manager UI, I cannot see all of the repositories that are in the storage directory &hellip; (281 words, Aug 12, 2024)
- [Sonatype Nexus Docker Registry - Disc Consumption - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-docker-registry-disc-consumption/13034/1/index.html): I recently switched to using the Sonatype Nexus Repository for hosting my Docker images. Previously, I used the Docker registry image to store my Docker images. 
With approximately 30 Docker images, the Docker registry i&hellip; (211 words, Aug 12, 2024)
- [Proxy Repository for Docker Unable to pull images - Sonatype Nexus Repository - Sonatype Community](/content/community/t/proxy-repository-for-docker-unable-to-pull-images/13005/6/index.html): Sonatype Nexus Repository [OSS 3.59.0-01]

Dear Community members, I currently evaluating nexus repository manger to be use instead of JFrog Artifactory (Pro); I’m currently on the “remote repository” part. 
I manage to&hellip; (350 words, Aug 12, 2024)
- [Getting HTTP 403 when trying to publish Java artifacts - Central Repository - Sonatype Community](/content/community/t/getting-http-403-when-trying-to-publish-java-artifacts/13028/1/index.html): Hello, 
I used to publish my artifacts fine in the past, but in the recent several months it stopped working. It’s an OSS repository with this POM: jmeter-plugins-webdriver/pom.xml at master · undera/jmeter-plugins-webdr&hellip; (138 words, Aug 11, 2024)
- [How to make cleanup rules avoid the "latest" tag? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-to-make-cleanup-rules-avoid-the-latest-tag/13026/index.html): I can’t see it mentioned anywhere… how can I create a cleanup rule which would avoid removing the “latest” tag? 
I’m worried that for some images we might be updating really infrequently a “generic” rule (like, say, dele&hellip; (444 words, Aug 10, 2024)
- [How to make cleanup rules avoid the "latest" tag? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-to-make-cleanup-rules-avoid-the-latest-tag/13026/1/index.html): I can’t see it mentioned anywhere… how can I create a cleanup rule which would avoid removing the “latest” tag? 
I’m worried that for some images we might be updating really infrequently a “generic” rule (like, say, dele&hellip; (442 words, Aug 10, 2024)
- [Missing repositories in Nexus 2.15.1-02 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/missing-repositories-in-nexus-2-15-1-02/13023/index.html): I have set up Nexus 2.15 on a RHEL 8 server and confirmed the Nexus process is running as expected. When I log into the Nexus Repository Manager UI, I cannot see all of the repositories that are in the storage directory &hellip; (277 words, Aug 9, 2024)
- [Missing repositories in Nexus 2.15.1-02 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/missing-repositories-in-nexus-2-15-1-02/13023/1/index.html): I have set up Nexus 2.15 on a RHEL 8 server and confirmed the Nexus process is running as expected. When I log into the Nexus Repository Manager UI, I cannot see all of the repositories that are in the storage directory &hellip; (277 words, Aug 9, 2024)
- [Ask Sona is Now Available in the Community! - Community Announcements - Sonatype Community](/content/community/t/ask-sona-is-now-available-in-the-community/13013/index.html): Sonatype’s Tech Support team is happy to introduce Ask Sona, our Sonatype-trained AI Support, to the Sonatype Community! 
Sona is designed to help you quickly find answers to your product-related questions. It’s trained &hellip; (195 words, Aug 7, 2024)
- [Ask Sona is Now Available in the Community! - Community Announcements - Sonatype Community](/content/community/t/ask-sona-is-now-available-in-the-community/13013/1/index.html): Sonatype’s Tech Support team is happy to introduce Ask Sona, our Sonatype-trained AI Support, to the Sonatype Community! 
Sona is designed to help you quickly find answers to your product-related questions. It’s trained &hellip; (182 words, Aug 7, 2024)
- [Update Your IQ Server License Threat Groups - Sonatype Labs - Sonatype Community](/content/community/t/update-your-iq-server-license-threat-groups/3094/43/index.html): The license threat group updater will apply the latest Sonatype provided license classification to your running IQ server’s license threat groups. This will alleviate any “License Threat Group not Assigned” policy violat&hellip; (686 words, Aug 6, 2024)
- [Proxy Repository for Docker Unable to pull images - Sonatype Nexus Repository - Sonatype Community](/content/community/t/proxy-repository-for-docker-unable-to-pull-images/13005/5/index.html): Sonatype Nexus Repository [OSS 3.59.0-01]

Dear Community members, I currently evaluating nexus repository manger to be use instead of JFrog Artifactory (Pro); I’m currently on the “remote repository” part. 
I manage to&hellip; (498 words, Aug 6, 2024)
- [Proxy Repository for Docker Unable to pull images - Sonatype Nexus Repository - Sonatype Community](/content/community/t/proxy-repository-for-docker-unable-to-pull-images/13005/4/index.html): Sonatype Nexus Repository [OSS 3.59.0-01]

Dear Community members, I currently evaluating nexus repository manger to be use instead of JFrog Artifactory (Pro); I’m currently on the “remote repository” part. 
I manage to&hellip; (497 words, Aug 6, 2024)
- [Proxy Repository for Docker Unable to pull images - Sonatype Nexus Repository - Sonatype Community](/content/community/t/proxy-repository-for-docker-unable-to-pull-images/13005/3/index.html): Sonatype Nexus Repository [OSS 3.59.0-01]

Dear Community members, I currently evaluating nexus repository manger to be use instead of JFrog Artifactory (Pro); I’m currently on the “remote repository” part. 
I manage to&hellip; (505 words, Aug 6, 2024)
- [Proxy Repository for Docker Unable to pull images - Sonatype Nexus Repository - Sonatype Community](/content/community/t/proxy-repository-for-docker-unable-to-pull-images/13005/2/index.html): Sonatype Nexus Repository [OSS 3.59.0-01]

Dear Community members, I currently evaluating nexus repository manger to be use instead of JFrog Artifactory (Pro); I’m currently on the “remote repository” part. 
I manage to&hellip; (503 words, Aug 6, 2024)
- [Proxy Repository for Docker Unable to pull images - Sonatype Nexus Repository - Sonatype Community](/content/community/t/proxy-repository-for-docker-unable-to-pull-images/13005/index.html): Sonatype Nexus Repository [OSS 3.59.0-01]

Dear Community members, I currently evaluating nexus repository manger to be use instead of JFrog Artifactory (Pro); I’m currently on the “remote repository” part. 
I manage to&hellip; (360 words, Aug 6, 2024)
- [Proxy Repository for Docker Unable to pull images - Sonatype Nexus Repository - Sonatype Community](/content/community/t/proxy-repository-for-docker-unable-to-pull-images/13005/1/index.html): Sonatype Nexus Repository [OSS 3.59.0-01]

Dear Community members, I currently evaluating nexus repository manger to be use instead of JFrog Artifactory (Pro); I’m currently on the “remote repository” part. 
I manage to&hellip; (500 words, Aug 6, 2024)
- [How to enable "skip duplicate" NuGet feature? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-to-enable-skip-duplicate-nuget-feature/13001/index.html): Hi everyone, 
I’ve been using the “dotnet nuget push” command with the “–skip-duplicate” flag. As I understand it, if the NuGet package already exists in the repository, it should return a “Conflict” (409) HTTP status co&hellip; (471 words, Aug 5, 2024)
- [How to enable "skip duplicate" NuGet feature? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-to-enable-skip-duplicate-nuget-feature/13001/1/index.html): Hi everyone, 
I’ve been using the “dotnet nuget push” command with the “–skip-duplicate” flag. As I understand it, if the NuGet package already exists in the repository, it should return a “Conflict” (409) HTTP status co&hellip; (479 words, Aug 5, 2024)
- [Status code: 401, reason phrase: Content access is protected by token - Central Repository - Sonatype Community](/content/community/t/status-code-401-reason-phrase-content-access-is-protected-by-token/12978/5/index.html): Dear Support Team, 
I am currently experiencing an issue while trying to deploy a dependency using a user token generated from Maven Central: My Account. 
Despite following the necessary steps, I encounter the following &hellip; (419 words, Aug 1, 2024)
- [Unable to login to Nexus Repo - Central Repository - Sonatype Community](/content/community/t/unable-to-login-to-nexus-repo/12992/index.html): Hi - How to Signup for the Nexus Repo : https://s01.oss.sonatype.org/ 
When I try to login with the credentials that I created for https://central.sonatype.com, I am getting the error as Incorrect username, password, or &hellip; (84 words, Aug 1, 2024)
- [Unable to login to Nexus Repo - Central Repository - Sonatype Community](/content/community/t/unable-to-login-to-nexus-repo/12992/1/index.html): Hi - How to Signup for the Nexus Repo : https://s01.oss.sonatype.org/ 
When I try to login with the credentials that I created for https://central.sonatype.com, I am getting the error as Incorrect username, password, or &hellip; (151 words, Aug 1, 2024)
- [Status code: 401, reason phrase: Content access is protected by token - Central Repository - Sonatype Community](/content/community/t/status-code-401-reason-phrase-content-access-is-protected-by-token/12978/4/index.html): Dear Support Team, 
I am currently experiencing an issue while trying to deploy a dependency using a user token generated from Maven Central: My Account. 
Despite following the necessary steps, I encounter the following &hellip; (420 words, Aug 1, 2024)
- [Unable to access Nexus Repository manager using cloud formation stack - Sonatype Nexus Repository - Sonatype Community](/content/community/t/unable-to-access-nexus-repository-manager-using-cloud-formation-stack/12988/index.html): CloudFormation - Repository Manager (sonatype.com) 
I followed this doc, and able to spin up the EC2 instance. But when I access the website URL, i get cant reach page error (114 words, Aug 1, 2024)
- [Unable to access Nexus Repository manager using cloud formation stack - Sonatype Nexus Repository - Sonatype Community](/content/community/t/unable-to-access-nexus-repository-manager-using-cloud-formation-stack/12988/1/index.html): CloudFormation - Repository Manager (sonatype.com) 
I followed this doc, and able to spin up the EC2 instance. But when I access the website URL, i get cant reach page error (44 words, Aug 1, 2024)
- [Status code: 401, reason phrase: Content access is protected by token - Central Repository - Sonatype Community](/content/community/t/status-code-401-reason-phrase-content-access-is-protected-by-token/12978/3/index.html): Dear Support Team, 
I am currently experiencing an issue while trying to deploy a dependency using a user token generated from Maven Central: My Account. 
Despite following the necessary steps, I encounter the following &hellip; (418 words, Jul 31, 2024)
- [Status code: 401, reason phrase: Content access is protected by token - Central Repository - Sonatype Community](/content/community/t/status-code-401-reason-phrase-content-access-is-protected-by-token/12978/2/index.html): Dear Support Team, 
I am currently experiencing an issue while trying to deploy a dependency using a user token generated from Maven Central: My Account. 
Despite following the necessary steps, I encounter the following &hellip; (419 words, Jul 31, 2024)
- [The requested URL returned error 400 when uploading .mar file - org.sonatype.nexus.repository.InvalidContentException: Content type could not be determined - Sonatype Nexus Repository - Sonatype Community](/content/community/t/the-requested-url-returned-error-400-when-uploading-mar-file-org-sonatype-nexus-repository-invalidcontentexception-content-type-could-not-be-determined/12984/2/index.html): I’m on OSS 3.70.0-03 
If I upload with curl a zip or exe file, it works, but when I want to upload a .mar file, it says : 
(22) The requested URL returned error: 400 
Are there any file extension restrictions for uploadi&hellip; (102 words, Jul 31, 2024)
- [The requested URL returned error 400 when uploading .mar file - org.sonatype.nexus.repository.InvalidContentException: Content type could not be determined - Sonatype Nexus Repository - Sonatype Community](/content/community/t/the-requested-url-returned-error-400-when-uploading-mar-file-org-sonatype-nexus-repository-invalidcontentexception-content-type-could-not-be-determined/12984/index.html): I’m on OSS 3.70.0-03 
If I upload with curl a zip or exe file, it works, but when I want to upload a .mar file, it says : 
(22) The requested URL returned error: 400 
Are there any file extension restrictions for uploadi&hellip; (168 words, Jul 31, 2024)
- [Status code: 401, reason phrase: Content access is protected by token - Central Repository - Sonatype Community](/content/community/t/status-code-401-reason-phrase-content-access-is-protected-by-token/12978/1/index.html): Dear Support Team, 
I am currently experiencing an issue while trying to deploy a dependency using a user token generated from Maven Central: My Account. 
Despite following the necessary steps, I encounter the following &hellip; (419 words, Jul 30, 2024)
- [Can I use same account between s01.oss.sonatype.org and oss.sonatype.org? - Central Repository - Sonatype Community](/content/community/t/can-i-use-same-account-between-s01-oss-sonatype-org-and-oss-sonatype-org/12970/3/index.html): Hello everyone, 
We’re considering adding an additional mirror due to recent issues with maven.central.org. However, we’ve encountered a problem. We weren’t able to use our user credentials from oss.sonatype.org with s01&hellip; (168 words, Jul 29, 2024)
- [Upload via ant/Maven stopped working with "reason phrase: Unauthorized (401)" - Central Repository - Sonatype Community](/content/community/t/upload-via-ant-maven-stopped-working-with-reason-phrase-unauthorized-401/12933/19/index.html): I have a pretty stable environment to upload to Sonatype my Java packages like fastutil. It has been pretty stable for the last +20 years so unfortunately I’ve become a bit rusty with the details. 
Suddenly my tentative &hellip; (780 words, Jul 29, 2024)
- [Upload to OSSRH varying error codes since July 22nd - Central Repository - Sonatype Community](/content/community/t/upload-to-ossrh-varying-error-codes-since-july-22nd/12944/4/index.html): Hi guys, 
As announced a while ago I switched everything from username/password to token/password but since two days I can’t upload new artefacts to OSSRH via the Maven plugin with varying error codes: 
Sometimes it is 4&hellip; (218 words, Jul 29, 2024)
- [Nexus OOS database support - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-oos-database-support/12891/4/index.html): Hello, 
There are some conflicting information on the forum and in the documentation about database support in Nexus OOS. I believe most forum users understand the Nexus documentation as stating that Nexus OOS only suppo&hellip; (442 words, Jul 29, 2024)
- [Download more than 10000 artifacts from Nexus 3.65 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/download-more-than-10000-artifacts-from-nexus-3-65/12960/3/index.html): I am unable to download more than 10000 artifacts from Nexus 3.65 . 
I even set index.max_result_window to 50000 , but its not working . Can someone please suggest what next can be done ? (285 words, Jul 29, 2024)
- [Can I use same account between s01.oss.sonatype.org and oss.sonatype.org? - Central Repository - Sonatype Community](/content/community/t/can-i-use-same-account-between-s01-oss-sonatype-org-and-oss-sonatype-org/12970/index.html): Hello everyone, 
We’re considering adding an additional mirror due to recent issues with maven.central.org. However, we’ve encountered a problem. We weren’t able to use our user credentials from oss.sonatype.org with s01&hellip; (174 words, Jul 29, 2024)
- [Can I use same account between s01.oss.sonatype.org and oss.sonatype.org? - Central Repository - Sonatype Community](/content/community/t/can-i-use-same-account-between-s01-oss-sonatype-org-and-oss-sonatype-org/12970/1/index.html): Hello everyone, 
We’re considering adding an additional mirror due to recent issues with maven.central.org. However, we’ve encountered a problem. We weren’t able to use our user credentials from oss.sonatype.org with s01&hellip; (168 words, Jul 29, 2024)
- [502 error Nexus failed to resolve the artifact - Sonatype Nexus Repository - Sonatype Community](/content/community/t/502-error-nexus-failed-to-resolve-the-artifact/12963/index.html): Nexus was not able to be reached and we are getting a 502 error. We had the same issue a couple of months ago, which we resolved by upgrading the version from 3.41.0-01 to 3.50.0-01. At that time, we determined that the &hellip; (676 words, Jul 28, 2024)
- [502 error Nexus failed to resolve the artifact - Sonatype Nexus Repository - Sonatype Community](/content/community/t/502-error-nexus-failed-to-resolve-the-artifact/12963/1/index.html): Nexus was not able to be reached and we are getting a 502 error. We had the same issue a couple of months ago, which we resolved by upgrading the version from 3.41.0-01 to 3.50.0-01. At that time, we determined that the &hellip; (750 words, Jul 28, 2024)
- [Nexus3 container + docker format repo, need a nginx config example - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus3-container-docker-format-repo-need-a-nginx-config-example/12896/5/index.html): Hi 
I’m having trouble setting up a new docker repo on an established / fully working nexus3 install that sits behind an nginx reverse proxy (that terminates the SSL and sends HTTP requests to nexus). 
Does anyone have a&hellip; (524 words, Jul 27, 2024)
- [Update Your IQ Server License Threat Groups - Sonatype Labs - Sonatype Community](/content/community/t/update-your-iq-server-license-threat-groups/3094/42/index.html): The license threat group updater will apply the latest Sonatype provided license classification to your running IQ server’s license threat groups. This will alleviate any “License Threat Group not Assigned” policy violat&hellip; (686 words, Jul 26, 2024)
- [Download more than 10000 artifacts from Nexus 3.65 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/download-more-than-10000-artifacts-from-nexus-3-65/12960/index.html): I am unable to download more than 10000 artifacts from Nexus 3.65 . 
I even set index.max_result_window to 50000 , but its not working . Can someone please suggest what next can be done ? (271 words, Jul 26, 2024)
- [Download more than 10000 artifacts from Nexus 3.65 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/download-more-than-10000-artifacts-from-nexus-3-65/12960/1/index.html): I am unable to download more than 10000 artifacts from Nexus 3.65 . 
I even set index.max_result_window to 50000 , but its not working . Can someone please suggest what next can be done ? (264 words, Jul 26, 2024)
- [Column Status - Sonatype Nexus Repository - Sonatype Community](/content/community/t/column-status/12958/index.html): Hello everyone!!! 
When I want to sort the Status column in ascending or descending order it doesn’t work for me in Nexus 3.69.0 
Thanks (137 words, Jul 26, 2024)
- [Nexus Upgrade 3.49.0-02 to 3.68.1 or later - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-upgrade-3-49-0-02-to-3-68-1-or-later/12851/4/index.html): Hi Team, 
we are using on-prem open source nexus repository for our docker images, currently we are seeing critical security vulnerability so we need to upgrade later version, could you please someone help on this, like &hellip; (168 words, Jul 25, 2024)
- [I am running Sonatype Nexus Maven Repo 3.41.1-01 i want to upgrade to Nexus 3.69.x-xx - Sonatype Nexus Repository - Sonatype Community](/content/community/t/i-am-running-sonatype-nexus-maven-repo-3-41-1-01-i-want-to-upgrade-to-nexus-3-69-x-xx/12752/2/index.html): I am running Sonatype Nexus Maven Repo 3.41.1-01 i want to upgrade to Nexus 3.69.x-xx without loosing my data and settings. 
Current Directory 
/opt/nexus3 
/opt/sonatype-work 
Can someone help me with details steps? (101 words, Jul 25, 2024)
- [Rule failure while closing the staging repository - Central Repository - Sonatype Community](/content/community/t/rule-failure-while-closing-the-staging-repository/12937/5/index.html): I am running into the following error while uploading the artifacts to staging repository. Any help is appreciated. 

Uploaded: https://oss.sonatype.org:443/service/local/staging/deployByRepositoryId/comgithubjitsni-1022&hellip; (192 words, Jul 25, 2024)
- [MAINTENANCE ALERT: July 24, 2024 at 8:00pm EDT - Community Announcements - Sonatype Community](/content/community/t/maintenance-alert-july-24-2024-at-8-00pm-edt/12941/4/index.html): Starting around 8:00 pm EDT on Wednesday, July 24th, customers will be unable to log in to my.sonatype.com and the following customer-facing resources for a brief period during necessary maintenance: 

Support.sonatype.c&hellip; (190 words, Jul 25, 2024)
- [Nexus3 migration from CentOS to RHEL - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/nexus3-migration-from-centos-to-rhel/12948/index.html): We are migrating Nexus Repository 3 from a CentOS server to a RHEL server following the official documentation https://support.sonatype.com/hc/en-us/articles/360010352014-Moving-a-Nexus-Repo-3-Instance-to-a-New-Locati&hellip; (64 words, Jul 24, 2024)
- [Nexus3 migration from CentOS to RHEL - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/nexus3-migration-from-centos-to-rhel/12948/1/index.html): We are migrating Nexus Repository 3 from a CentOS server to a RHEL server following the official documentation https://support.sonatype.com/hc/en-us/articles/360010352014-Moving-a-Nexus-Repo-3-Instance-to-a-New-Locati&hellip; (131 words, Jul 24, 2024)
- [Join us in one hour for July Office Hours - 10 a.m EDT! - Community Announcements - Sonatype Community](/content/community/t/join-us-in-one-hour-for-july-office-hours-10-a-m-edt/12946/index.html): Join us in one hour at 10am EDT (7am PDT | 3pm BST) for our monthly, customer-exclusive Office Hours . 
This month, we’ll be discussing the following topics: 

Sonatype Developer Preview
2024 Elevate Awards
July Learn &hellip; (197 words, Jul 24, 2024)
- [Upload to OSSRH varying error codes since July 22nd - Central Repository - Sonatype Community](/content/community/t/upload-to-ossrh-varying-error-codes-since-july-22nd/12944/index.html): Hi guys, 
As announced a while ago I switched everything from username/password to token/password but since two days I can’t upload new artefacts to OSSRH via the Maven plugin with varying error codes: 
Sometimes it is 4&hellip; (218 words, Jul 24, 2024)
- [Upload to OSSRH varying error codes since July 22nd - Central Repository - Sonatype Community](/content/community/t/upload-to-ossrh-varying-error-codes-since-july-22nd/12944/1/index.html): Hi guys, 
As announced a while ago I switched everything from username/password to token/password but since two days I can’t upload new artefacts to OSSRH via the Maven plugin with varying error codes: 
Sometimes it is 4&hellip; (218 words, Jul 24, 2024)
- [Getting 502 Bad Gateway from https://oss.sonatype.org/content/repositories/snapshots/ - Central Repository - Sonatype Community](/content/community/t/getting-502-bad-gateway-from-https-oss-sonatype-org-content-repositories-snapshots/12939/3/index.html): I know this is probably the wrong place to ask, but could not find anything else. 
I am getting 502 Bad Gateway from https://oss.sonatype.org/content/repositories/snapshots/ since a few hours, which is badly affecting a &hellip; (118 words, Jul 24, 2024)
- [The Elevate Awards are Back! | Submit Your Nomination Today - Community Announcements - Sonatype Community](/content/community/t/the-elevate-awards-are-back-submit-your-nomination-today/12904/7/index.html): We’re excited to announce that nominations for our prestigious Sonatype Elevate Awards are now open! The Elevate Awards celebrate you–the leaders, organizations, and teams of bold innovators delivering remarkable results&hellip; (199 words, Jul 23, 2024)
- [MAINTENANCE ALERT: July 24, 2024 at 8:00pm EDT - Community Announcements - Sonatype Community](/content/community/t/maintenance-alert-july-24-2024-at-8-00pm-edt/12941/1/index.html): Starting around 8:00 pm EDT on Wednesday, July 24th, customers will be unable to log in to my.sonatype.com and the following customer-facing resources for a brief period during necessary maintenance: 

Support.sonatype.c&hellip; (190 words, Jul 23, 2024)
- [Rule failure while closing the staging repository - Central Repository - Sonatype Community](/content/community/t/rule-failure-while-closing-the-staging-repository/12937/2/index.html): I am running into the following error while uploading the artifacts to staging repository. Any help is appreciated. 

Uploaded: https://oss.sonatype.org:443/service/local/staging/deployByRepositoryId/comgithubjitsni-1022&hellip; (226 words, Jul 23, 2024)
- [Getting 502 Bad Gateway from https://oss.sonatype.org/content/repositories/snapshots/ - Central Repository - Sonatype Community](/content/community/t/getting-502-bad-gateway-from-https-oss-sonatype-org-content-repositories-snapshots/12939/index.html): I know this is probably the wrong place to ask, but could not find anything else. 
I am getting 502 Bad Gateway from https://oss.sonatype.org/content/repositories/snapshots/ since a few hours, which is badly affecting a &hellip; (118 words, Jul 23, 2024)
- [Rule failure while closing the staging repository - Central Repository - Sonatype Community](/content/community/t/rule-failure-while-closing-the-staging-repository/12937/index.html): I am running into the following error while uploading the artifacts to staging repository. Any help is appreciated. 

Uploaded: https://oss.sonatype.org:443/service/local/staging/deployByRepositoryId/comgithubjitsni-1022&hellip; (227 words, Jul 23, 2024)
- [Rule failure while closing the staging repository - Central Repository - Sonatype Community](/content/community/t/rule-failure-while-closing-the-staging-repository/12937/1/index.html): I am running into the following error while uploading the artifacts to staging repository. Any help is appreciated. 

Uploaded: https://oss.sonatype.org:443/service/local/staging/deployByRepositoryId/comgithubjitsni-1022&hellip; (227 words, Jul 23, 2024)
- [Reference to configuration properties - uid in docker container - Sonatype Nexus Repository - Sonatype Community](/content/community/t/reference-to-configuration-properties-uid-in-docker-container/7765/6/index.html): Hi, 
is there a complete reference for all nexus OSS configuration properties? 
How can I change the uid nexus OSS is running as in a container? (like not 200?) 
thank you 
best regards 
Torsten (633 words, Jul 22, 2024)
- [Nexus OSS in docker + SSL Inspection: Which keystore and how? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-oss-in-docker-ssl-inspection-which-keystore-and-how/12928/3/index.html): We’re running our Nexus OSS in a docker environment as documented. 
Our company is doing SSL inspection for security reasons. So, all outgoing HTTPS connections are getting “hijacked” with a 3rd party CA certificate. Thi&hellip; (314 words, Jul 22, 2024)
- [Upload via ant/Maven stopped working with "reason phrase: Unauthorized (401)" - Central Repository - Sonatype Community](/content/community/t/upload-via-ant-maven-stopped-working-with-reason-phrase-unauthorized-401/12933/index.html): I have a pretty stable environment to upload to Sonatype my Java packages like fastutil. It has been pretty stable for the last +20 years so unfortunately I’ve become a bit rusty with the details. 
Suddenly my tentative &hellip; (775 words, Jul 21, 2024)
- [Upload via ant/Maven stopped working with "reason phrase: Unauthorized (401)" - Central Repository - Sonatype Community](/content/community/t/upload-via-ant-maven-stopped-working-with-reason-phrase-unauthorized-401/12933/1/index.html): I have a pretty stable environment to upload to Sonatype my Java packages like fastutil. It has been pretty stable for the last +20 years so unfortunately I’ve become a bit rusty with the details. 
Suddenly my tentative &hellip; (794 words, Jul 21, 2024)
- [Sonatype Statement Regarding CrowdStrike Incident - Community Announcements - Sonatype Community](/content/community/t/sonatype-statement-regarding-crowdstrike-incident/12929/2/index.html): Sonatype Community, 
Friday’s CrowdStrike incident, where a routine software update caused a cascading failure across thousands of critical systems worldwide, is a stark reminder of the fragile interconnectedness of our &hellip; (107 words, Jul 19, 2024)
- [Sonatype Statement Regarding CrowdStrike Incident - Community Announcements - Sonatype Community](/content/community/t/sonatype-statement-regarding-crowdstrike-incident/12929/index.html): Sonatype Community, 
Friday’s CrowdStrike incident, where a routine software update caused a cascading failure across thousands of critical systems worldwide, is a stark reminder of the fragile interconnectedness of our &hellip; (177 words, Jul 19, 2024)
- [Sonatype Statement Regarding CrowdStrike Incident - Community Announcements - Sonatype Community](/content/community/t/sonatype-statement-regarding-crowdstrike-incident/12929/1/index.html): Sonatype Community, 
Friday’s CrowdStrike incident, where a routine software update caused a cascading failure across thousands of critical systems worldwide, is a stark reminder of the fragile interconnectedness of our &hellip; (107 words, Jul 19, 2024)
- [Update Your IQ Server License Threat Groups - Sonatype Labs - Sonatype Community](/content/community/t/update-your-iq-server-license-threat-groups/3094/41/index.html): The license threat group updater will apply the latest Sonatype provided license classification to your running IQ server’s license threat groups. This will alleviate any “License Threat Group not Assigned” policy violat&hellip; (593 words, Jul 19, 2024)
- [Nexus OSS in docker + SSL Inspection: Which keystore and how? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-oss-in-docker-ssl-inspection-which-keystore-and-how/12928/index.html): We’re running our Nexus OSS in a docker environment as documented. 
Our company is doing SSL inspection for security reasons. So, all outgoing HTTPS connections are getting “hijacked” with a 3rd party CA certificate. Thi&hellip; (314 words, Jul 19, 2024)
- [Nexus OSS in docker + SSL Inspection: Which keystore and how? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-oss-in-docker-ssl-inspection-which-keystore-and-how/12928/1/index.html): We’re running our Nexus OSS in a docker environment as documented. 
Our company is doing SSL inspection for security reasons. So, all outgoing HTTPS connections are getting “hijacked” with a 3rd party CA certificate. Thi&hellip; (314 words, Jul 19, 2024)
- [Issue in upgrading from 3.59 to 3.69 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/issue-in-upgrading-from-3-59-to-3-69/12794/4/index.html): 1)Took the backup of nexus folder “mv nexus nexus_bck” 
2)Took the backup of sonatype-work folder “mv sonatype-work sonatype-work_bck” 
2)wget https://download.sonatype.com/nexus/3/nexus-3.69.0-02-java8-unix.tar.gz 
3)un&hellip; (290 words, Jul 19, 2024)
- [Prompt for user login when clicking Nexus permalink - Sonatype Nexus Repository - Sonatype Community](/content/community/t/prompt-for-user-login-when-clicking-nexus-permalink/12922/index.html): We have internal customers who need to download software from our Nexus repository. We provide them with a permalink to the asset, but if they are not yet authenticated, the link will return a blank page with the message&hellip; (98 words, Jul 18, 2024)
- [Prompt for user login when clicking Nexus permalink - Sonatype Nexus Repository - Sonatype Community](/content/community/t/prompt-for-user-login-when-clicking-nexus-permalink/12922/1/index.html): We have internal customers who need to download software from our Nexus repository. We provide them with a permalink to the asset, but if they are not yet authenticated, the link will return a blank page with the message&hellip; (98 words, Jul 18, 2024)
- [Introducing "Ask Sona": AI-Powered Support - Community Announcements - Sonatype Community](/content/community/t/introducing-ask-sona-ai-powered-support/12088/8/index.html): Sonatype’s Tech Support team is happy to introduce Ask Sona, our Sonatype-trained AI Support, designed to help you quickly find answers to your product-related questions. 
Ask Sona is trained on all public-facing custome&hellip; (85 words, Jul 18, 2024)
- [Urgent: Sonatype Nexus Repository 3.68.1 Released - Sonatype Nexus Repository - Sonatype Community](/content/community/t/urgent-sonatype-nexus-repository-3-68-1-released/12592/14/index.html): Sonatype Nexus Repository 3.68.1 fixes a critical vulnerability impacting all Sonatype Nexus Repository 3 deployments. All Sonatype Nexus Repository 3 Pro and OSS customers should upgrade to 3.68.1 as soon as possible. 
W&hellip; (682 words, Jul 17, 2024)
- [Is it possible to disable ANONYMOUS access on docker deployment stage? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/is-it-possible-to-disable-anonymous-access-on-docker-deployment-stage/12915/2/index.html): Hello, 
I would like to know if it is possible to disable ANONYMOUS access without going through the onboarding panel. (Docker Compose file) 
Thank you! (76 words, Jul 17, 2024)
- [Failed to scan nexusiq artifacts - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/failed-to-scan-nexusiq-artifacts/12654/5/index.html): We are currently working on developing a Java -21 application and encountering an error while scanning artifacts in NexusIQ. Can  any faced similar issue? our nexusiq version is 175. 
Could not parse class file Controlle&hellip; (164 words, Jul 17, 2024)
- [Is it possible to disable ANONYMOUS access on docker deployment stage? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/is-it-possible-to-disable-anonymous-access-on-docker-deployment-stage/12915/index.html): Hello, 
I would like to know if it is possible to disable ANONYMOUS access without going through the onboarding panel. (Docker Compose file) 
Thank you! (139 words, Jul 17, 2024)
- [Is it possible to disable ANONYMOUS access on docker deployment stage? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/is-it-possible-to-disable-anonymous-access-on-docker-deployment-stage/12915/1/index.html): Hello, 
I would like to know if it is possible to disable ANONYMOUS access without going through the onboarding panel. (Docker Compose file) 
Thank you! (138 words, Jul 17, 2024)
- [Join us for July Office Hours - Wednesday, July 24th at 10am EDT - Community Announcements - Sonatype Community](/content/community/t/join-us-for-july-office-hours-wednesday-july-24th-at-10am-edt/12913/2/index.html): Join us Wednesday, July 24th at 10am EDT (7am PDT | 3pm BST) for our monthly, customer-exclusive Office Hours. 
This month, we’ll be discussing the following topics: 

Sonatype Developer Preview
2024 Elevate Awards

Dr&hellip; (203 words, Jul 17, 2024)
- [Join us for July Office Hours - Wednesday, July 24th at 10am EDT - Community Announcements - Sonatype Community](/content/community/t/join-us-for-july-office-hours-wednesday-july-24th-at-10am-edt/12913/index.html): Join us Wednesday, July 24th at 10am EDT (7am PDT | 3pm BST) for our monthly, customer-exclusive Office Hours. 
This month, we’ll be discussing the following topics: 

Sonatype Developer Preview
2024 Elevate Awards

Dr&hellip; (195 words, Jul 17, 2024)
- [Join us for July Office Hours - Wednesday, July 24th at 10am EDT - Community Announcements - Sonatype Community](/content/community/t/join-us-for-july-office-hours-wednesday-july-24th-at-10am-edt/12913/1/index.html): Join us Wednesday, July 24th at 10am EDT (7am PDT | 3pm BST) for our monthly, customer-exclusive Office Hours. 
This month, we’ll be discussing the following topics: 

Sonatype Developer Preview
2024 Elevate Awards

Dr&hellip; (192 words, Jul 17, 2024)
- [Error on nexus starts - Sonatype Nexus Repository - Sonatype Community](/content/community/t/error-on-nexus-starts/12912/3/index.html): since few days, we’ve got an issue when starting nexus service 
we’ve got a lot of issue trying to access to 
Central Repository: org/sonatype/nexus/assemblies… 
first error like this look like that : 
2024-07-17 09:07:0&hellip; (379 words, Jul 17, 2024)
- [Error on nexus starts - Sonatype Nexus Repository - Sonatype Community](/content/community/t/error-on-nexus-starts/12912/index.html): since few days, we’ve got an issue when starting nexus service 
we’ve got a lot of issue trying to access to 
Central Repository: org/sonatype/nexus/assemblies… 
first error like this look like that : 
2024-07-17 09:07:0&hellip; (163 words, Jul 17, 2024)
- [Error on nexus starts - Sonatype Nexus Repository - Sonatype Community](/content/community/t/error-on-nexus-starts/12912/1/index.html): since few days, we’ve got an issue when starting nexus service 
we’ve got a lot of issue trying to access to 
Central Repository: org/sonatype/nexus/assemblies… 
first error like this look like that : 
2024-07-17 09:07:0&hellip; (333 words, Jul 17, 2024)
- [Nexus Running w FIPS - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-running-w-fips/12901/2/index.html): Any news running Nexus on Linux hosts with FIPS enabled? I am running RHEL8 and spun up a docker container but run into Java errors. I am able to run the same container on another dev instance and seems to work with no i&hellip; (134 words, Jul 16, 2024)
- [Nexus OOS database support - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-oos-database-support/12891/3/index.html): Hello, 
There are some conflicting information on the forum and in the documentation about database support in Nexus OOS. I believe most forum users understand the Nexus documentation as stating that Nexus OOS only suppo&hellip; (445 words, Jul 15, 2024)
- [The Elevate Awards are Back! | Submit Your Nomination Today - Community Announcements - Sonatype Community](/content/community/t/the-elevate-awards-are-back-submit-your-nomination-today/12904/index.html): We’re excited to announce that nominations for our prestigious Sonatype Elevate Awards are now open! The Elevate Awards celebrate you–the leaders, organizations, and teams of bold innovators delivering remarkable results&hellip; (22 words, Jul 15, 2024)
- [The Elevate Awards are Back! | Submit Your Nomination Today - Community Announcements - Sonatype Community](/content/community/t/the-elevate-awards-are-back-submit-your-nomination-today/12904/1/index.html): We’re excited to announce that nominations for our prestigious Sonatype Elevate Awards are now open! The Elevate Awards celebrate you–the leaders, organizations, and teams of bold innovators delivering remarkable results&hellip; (199 words, Jul 15, 2024)
- [Nexus OOS database support - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-oos-database-support/12891/2/index.html): Hello, 
There are some conflicting information on the forum and in the documentation about database support in Nexus OOS. I believe most forum users understand the Nexus documentation as stating that Nexus OOS only suppo&hellip; (441 words, Jul 15, 2024)
- [Nexus Running w FIPS - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-running-w-fips/12901/index.html): Any news running Nexus on Linux hosts with FIPS enabled? I am running RHEL8 and spun up a docker container but run into Java errors. I am able to run the same container on another dev instance and seems to work with no i&hellip; (133 words, Jul 14, 2024)
- [Nexus Running w FIPS - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-running-w-fips/12901/1/index.html): Any news running Nexus on Linux hosts with FIPS enabled? I am running RHEL8 and spun up a docker container but run into Java errors. I am able to run the same container on another dev instance and seems to work with no i&hellip; (152 words, Jul 14, 2024)
- [Realtime Containerscanning - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/realtime-containerscanning/12898/index.html): Hello all, 
we wanna use Nexus Container Registry &amp; Nexus Firewall to Proxy registries like DockerHub or Quay.io and also scan the layers of the Images in Realtime, is that possible in the same way how it works with Arti&hellip; (191 words, Jul 12, 2024)
- [Realtime Containerscanning - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/realtime-containerscanning/12898/1/index.html): Hello all, 
we wanna use Nexus Container Registry &amp; Nexus Firewall to Proxy registries like DockerHub or Quay.io and also scan the layers of the Images in Realtime, is that possible in the same way how it works with Arti&hellip; (204 words, Jul 12, 2024)
- [Nexus3 container + docker format repo, need a nginx config example - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus3-container-docker-format-repo-need-a-nginx-config-example/12896/1/index.html): Hi 
I’m having trouble setting up a new docker repo on an established / fully working nexus3 install that sits behind an nginx reverse proxy (that terminates the SSL and sends HTTP requests to nexus). 
Does anyone have a&hellip; (523 words, Jul 12, 2024)
- [Potential bug in Nexus OSS 3.69 - not making /public files available for download - Sonatype Nexus Repository - Sonatype Community](/content/community/t/potential-bug-in-nexus-oss-3-69-not-making-public-files-available-for-download/12888/3/index.html): Ansible expects to be able to download a powershell script called install.ps1 from the local Nexus server in order to install chocolatey.  This is achieved by placing the file in our environment under c:\programfiles\nex&hellip; (197 words, Jul 12, 2024)
- [Nexus OOS database support - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-oos-database-support/12891/1/index.html): Hello, 
There are some conflicting information on the forum and in the documentation about database support in Nexus OOS. I believe most forum users understand the Nexus documentation as stating that Nexus OOS only suppo&hellip; (436 words, Jul 11, 2024)
- [Potential bug in Nexus OSS 3.69 - not making /public files available for download - Sonatype Nexus Repository - Sonatype Community](/content/community/t/potential-bug-in-nexus-oss-3-69-not-making-public-files-available-for-download/12888/index.html): Ansible expects to be able to download a powershell script called install.ps1 from the local Nexus server in order to install chocolatey.  This is achieved by placing the file in our environment under c:\programfiles\nex&hellip; (195 words, Jul 11, 2024)
- [Potential bug in Nexus OSS 3.69 - not making /public files available for download - Sonatype Nexus Repository - Sonatype Community](/content/community/t/potential-bug-in-nexus-oss-3-69-not-making-public-files-available-for-download/12888/1/index.html): Ansible expects to be able to download a powershell script called install.ps1 from the local Nexus server in order to install chocolatey.  This is achieved by placing the file in our environment under c:\programfiles\nex&hellip; (195 words, Jul 11, 2024)
- [Sonatype Nexus Repository 3.70.1 Released - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-repository-3-70-1-released/12886/index.html): Sonatype Nexus Repository 3.70.1 is now available. 
This release fixes an issue that broke UI functionality in 3.70.0 instances using a custom context path. This issue only impacted the UI and did not impact other functi&hellip; (70 words, Jul 11, 2024)
- [Sonatype Nexus Repository 3.70.1 Released - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-repository-3-70-1-released/12886/1/index.html): Sonatype Nexus Repository 3.70.1 is now available. 
This release fixes an issue that broke UI functionality in 3.70.0 instances using a custom context path. This issue only impacted the UI and did not impact other functi&hellip; (126 words, Jul 11, 2024)
- [Sonatype Nexus Repository 3.70.0 Released - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-repository-3-70-0-released/12879/index.html): We are pleased to announce Sonatype Nexus Repository 3.70.0. This is a big release with several major changes! 
This release upgrades the H2 database from version 1.4.200 to version 2.2.244. 
If you are using an H2 datab&hellip; (213 words, Jul 10, 2024)
- [Sonatype Nexus Repository 3.70.0 Released - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-repository-3-70-0-released/12879/1/index.html): We are pleased to announce Sonatype Nexus Repository 3.70.0. This is a big release with several major changes! 
This release upgrades the H2 database from version 1.4.200 to version 2.2.244. 
If you are using an H2 datab&hellip; (213 words, Jul 10, 2024)
- [404 when pulling from chocolatey repo - Sonatype Nexus Repository - Sonatype Community](/content/community/t/404-when-pulling-from-chocolatey-repo/8278/2/index.html): I am trying to set up access to pull down packages from my repo. I can push packages without error. 
Below are two examples of what I’m trying to do. I’m assuming I’m missing a setup step or authorization step in the rep&hellip; (132 words, Jul 9, 2024)
- [Uploading checksum through client - Sonatype Nexus Repository - Sonatype Community](/content/community/t/uploading-checksum-through-client/12873/index.html): I want to upload checksum along with the artifact that I upload to NEXUS repository. Is there a REST API header or any other means that can be used to do that? 
JFrog Artifactory allows to do this by passing checksum hea&hellip; (250 words, Jul 9, 2024)
- [Uploading checksum through client - Sonatype Nexus Repository - Sonatype Community](/content/community/t/uploading-checksum-through-client/12873/1/index.html): I want to upload checksum along with the artifact that I upload to NEXUS repository. Is there a REST API header or any other means that can be used to do that? 
JFrog Artifactory allows to do this by passing checksum hea&hellip; (250 words, Jul 9, 2024)
- [How to update Apache Commons Compress in nexus - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-to-update-apache-commons-compress-in-nexus/12854/2/index.html): Cybersecurity staff discovered that the version of Apache Commons Compress, which is used even in the latest Nexus release, is susceptible to vulnerabilities CVE-2024-26308 and CVE-2024-25710. 
Does anyone know how to co&hellip; (119 words, Jul 8, 2024)
- [Yum hosted repository -> repomd.xml upload - Sonatype Nexus Repository - Sonatype Community](/content/community/t/yum-hosted-repository-repomd-xml-upload/12855/2/index.html): Hi Everyone 
I configured a yum hosted repo using Nexus Repository. I uploaded the packages I want to store locally to the hosted repo, and I plan to use the yum install command during development. However, since the rep&hellip; (124 words, Jul 8, 2024)
- [CVE-2024-34750 not reported on org.apache.tomcat.embed:tomcat-embed-core on ossindex - Sonatype Exchange / Sonatype Exchange Discussion - Sonatype Community](/content/community/t/cve-2024-34750-not-reported-on-org-apache-tomcat-embed-tomcat-embed-core-on-ossindex/12869/index.html): Hello, 
I noticed CVE-2024-34750 is correctly reported on org.apache.tomcat:tomcat (https://ossindex.sonatype.org/component/pkg:maven/org.apache.tomcat/tomcat@9.0.86), but it is not reported on tomcat-embed-core Maven - &hellip; (162 words, Jul 8, 2024)
- [CVE-2024-34750 not reported on org.apache.tomcat.embed:tomcat-embed-core on ossindex - Sonatype Exchange / Sonatype Exchange Discussion - Sonatype Community](/content/community/t/cve-2024-34750-not-reported-on-org-apache-tomcat-embed-tomcat-embed-core-on-ossindex/12869/1/index.html): Hello, 
I noticed CVE-2024-34750 is correctly reported on org.apache.tomcat:tomcat (https://ossindex.sonatype.org/component/pkg:maven/org.apache.tomcat/tomcat@9.0.86), but it is not reported on tomcat-embed-core Maven - &hellip; (150 words, Jul 8, 2024)
- [Yum hosted repository -> repomd.xml upload - Sonatype Nexus Repository - Sonatype Community](/content/community/t/yum-hosted-repository-repomd-xml-upload/12855/1/index.html): Hi Everyone 
I configured a yum hosted repo using Nexus Repository. I uploaded the packages I want to store locally to the hosted repo, and I plan to use the yum install command during development. However, since the rep&hellip; (123 words, Jul 4, 2024)
- [How to update Apache Commons Compress in nexus - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-to-update-apache-commons-compress-in-nexus/12854/index.html): Cybersecurity staff discovered that the version of Apache Commons Compress, which is used even in the latest Nexus release, is susceptible to vulnerabilities CVE-2024-26308 and CVE-2024-25710. 
Does anyone know how to co&hellip; (192 words, Jul 3, 2024)
- [How to update Apache Commons Compress in nexus - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-to-update-apache-commons-compress-in-nexus/12854/1/index.html): Cybersecurity staff discovered that the version of Apache Commons Compress, which is used even in the latest Nexus release, is susceptible to vulnerabilities CVE-2024-26308 and CVE-2024-25710. 
Does anyone know how to co&hellip; (119 words, Jul 3, 2024)
- [Sonatype doesn't get npm package license from package repo - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/sonatype-doesnt-get-npm-package-license-from-package-repo/12850/index.html): Is there a way to inform Sonatype about npm package licenses if they are not included within the package? 
We’re using redoc to generate API reference documentation. Among the packages that redoc depends on, there are a &hellip; (85 words, Jul 3, 2024)
- [Sonatype doesn't get npm package license from package repo - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/sonatype-doesnt-get-npm-package-license-from-package-repo/12850/1/index.html): Is there a way to inform Sonatype about npm package licenses if they are not included within the package? 
We’re using redoc to generate API reference documentation. Among the packages that redoc depends on, there are a &hellip; (168 words, Jul 3, 2024)
- [Received status code 403 from server: Forbidden when publish to sonatype maven by using cmd ./gradlew publish - Central Repository - Sonatype Community](/content/community/t/received-status-code-403-from-server-forbidden-when-publish-to-sonatype-maven-by-using-cmd-gradlew-publish/12800/3/index.html): How to fix it? (129 words, Jul 2, 2024)
- [Shaded Vulnerability Detection Data - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/shaded-vulnerability-detection-data/12694/14/index.html): NOTE: This is an ongoing release. Stay tuned to this community post for updates and educational materials. 
The initial release of the highest severity vulnerabilities with a CVSS of 10 will begin on Monday, September 9,&hellip; (797 words, Jul 1, 2024)
- [Data Insights Tab Absent After IQ Firewall Upgrade from 174 to 178 - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/data-insights-tab-absent-after-iq-firewall-upgrade-from-174-to-178/12820/2/index.html): The Data Insights tab is absent after upgrading to 178. Is this expected behavior? Or is this a sign of a corrupt installation? All other functionality appears normal. Note: we only have a license for Firewall not Life&hellip; (199 words, Jun 27, 2024)
- [Join us in one hour for June Office Hours - 10 a.m EDT! - Community Announcements - Sonatype Community](/content/community/t/join-us-in-one-hour-for-june-office-hours-10-a-m-edt/12825/2/index.html): Join us in one hour at 10am EDT (7am PDT | 3pm BST) for our monthly, customer-exclusive Office Hours . 
This month, we’ll be discussing the following topics: 

SBOM Manager: Overview and Demo
June Learn Package: All Ab&hellip; (204 words, Jun 27, 2024)
- [Join us in one hour for June Office Hours - 10 a.m EDT! - Community Announcements - Sonatype Community](/content/community/t/join-us-in-one-hour-for-june-office-hours-10-a-m-edt/12825/index.html): Join us in one hour at 10am EDT (7am PDT | 3pm BST) for our monthly, customer-exclusive Office Hours . 
This month, we’ll be discussing the following topics: 

SBOM Manager: Overview and Demo
June Learn Package: All Ab&hellip; (205 words, Jun 27, 2024)
- [Join us in one hour for June Office Hours - 10 a.m EDT! - Community Announcements - Sonatype Community](/content/community/t/join-us-in-one-hour-for-june-office-hours-10-a-m-edt/12825/1/index.html): Join us in one hour at 10am EDT (7am PDT | 3pm BST) for our monthly, customer-exclusive Office Hours . 
This month, we’ll be discussing the following topics: 

SBOM Manager: Overview and Demo
June Learn Package: All Ab&hellip; (223 words, Jun 27, 2024)
- [Data Insights Tab Absent After IQ Firewall Upgrade from 174 to 178 - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/data-insights-tab-absent-after-iq-firewall-upgrade-from-174-to-178/12820/index.html): The Data Insights tab is absent after upgrading to 178. Is this expected behavior? Or is this a sign of a corrupt installation? All other functionality appears normal. Note: we only have a license for Firewall not Life&hellip; (105 words, Jun 26, 2024)
- [Data Insights Tab Absent After IQ Firewall Upgrade from 174 to 178 - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/data-insights-tab-absent-after-iq-firewall-upgrade-from-174-to-178/12820/1/index.html): The Data Insights tab is absent after upgrading to 178. Is this expected behavior? Or is this a sign of a corrupt installation? All other functionality appears normal. Note: we only have a license for Firewall not Life&hellip; (109 words, Jun 26, 2024)
- [Is there a way to Integrate Splunk to Nexus OSS - Sonatype Nexus Repository - Sonatype Community](/content/community/t/is-there-a-way-to-integrate-splunk-to-nexus-oss/12809/index.html): Please let me know if there is a way I can push nexus OSS (NRM 3) logs to splunk as i don’t see any sonatype documents related to this topic (54 words, Jun 25, 2024)
- [Is there a way to Integrate Splunk to Nexus OSS - Sonatype Nexus Repository - Sonatype Community](/content/community/t/is-there-a-way-to-integrate-splunk-to-nexus-oss/12809/1/index.html): Please let me know if there is a way I can push nexus OSS (NRM 3) logs to splunk as i don’t see any sonatype documents related to this topic (114 words, Jun 25, 2024)
- [Save the Date: All Day DevOps is Back! - Community Announcements - Sonatype Community](/content/community/t/save-the-date-all-day-devops-is-back/12807/index.html): Mark your calendars for October 10, 2024, because All Day DevOps (ADDO) is back for 24 hours of free, online, non-stop learning! You’re invited to join us for an unparalleled experience with forward-thinking sessions, &hellip; (194 words, Jun 25, 2024)
- [Save the Date: All Day DevOps is Back! - Community Announcements - Sonatype Community](/content/community/t/save-the-date-all-day-devops-is-back/12807/1/index.html): Mark your calendars for October 10, 2024, because All Day DevOps (ADDO) is back for 24 hours of free, online, non-stop learning! You’re invited to join us for an unparalleled experience with forward-thinking sessions, &hellip; (110 words, Jun 25, 2024)
- [Nexus OSS beyond Java11? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-oss-beyond-java11/12801/index.html): AFAICS Java 11 is already EOL (see Oracle Java SE Support Roadmap). Nexus for Java 17 is “postgresql and H2 only”, according to the Download page. The database migrator is available for the Pro version only (Migrating to&hellip; (97 words, Jun 25, 2024)
- [Nexus OSS beyond Java11? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-oss-beyond-java11/12801/1/index.html): AFAICS Java 11 is already EOL (see Oracle Java SE Support Roadmap). Nexus for Java 17 is “postgresql and H2 only”, according to the Download page. The database migrator is available for the Pro version only (Migrating to&hellip; (92 words, Jun 25, 2024)
- [Received status code 403 from server: Forbidden when publish to sonatype maven by using cmd ./gradlew publish - Central Repository - Sonatype Community](/content/community/t/received-status-code-403-from-server-forbidden-when-publish-to-sonatype-maven-by-using-cmd-gradlew-publish/12800/index.html): How to fix it? (129 words, Jun 25, 2024)
- [Received status code 403 from server: Forbidden when publish to sonatype maven by using cmd ./gradlew publish - Central Repository - Sonatype Community](/content/community/t/received-status-code-403-from-server-forbidden-when-publish-to-sonatype-maven-by-using-cmd-gradlew-publish/12800/1/index.html): How to fix it? (135 words, Jun 25, 2024)
- [Issue in upgrading from 3.59 to 3.69 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/issue-in-upgrading-from-3-59-to-3-69/12794/index.html): 1)Took the backup of nexus folder “mv nexus nexus_bck” 
2)Took the backup of sonatype-work folder “mv sonatype-work sonatype-work_bck” 
2)wget https://download.sonatype.com/nexus/3/nexus-3.69.0-02-java8-unix.tar.gz 
3)un&hellip; (275 words, Jun 24, 2024)
- [Issue in upgrading from 3.59 to 3.69 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/issue-in-upgrading-from-3-59-to-3-69/12794/1/index.html): 1)Took the backup of nexus folder “mv nexus nexus_bck” 
2)Took the backup of sonatype-work folder “mv sonatype-work sonatype-work_bck” 
2)wget https://download.sonatype.com/nexus/3/nexus-3.69.0-02-java8-unix.tar.gz 
3)un&hellip; (321 words, Jun 24, 2024)
- [Does Nexus Repository Pro Plan Include LDAP Users in Pricing? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/does-nexus-repository-pro-plan-include-ldap-users-in-pricing/12783/2/index.html): Hi, 
Our company is considering the Nexus Repository Pro plan for utilizing an external database and a high-availability setup. 
On the pricing page, the term ‘user’ is defined as “each individual who produces, consumes,&hellip; (153 words, Jun 24, 2024)
- [`401 Content access is protected by token` even though I'm using my token - Sonatype Nexus Repository - Sonatype Community](/content/community/t/401-content-access-is-protected-by-token-even-though-im-using-my-token/12777/2/index.html): I have an existing project that publishes to oss.sonatype.org. I’ve accessed my token, stored it in my private gradle.properties, and replaced my old username / password configuration with: 
    maven {
      name = &quot;nex&hellip; (154 words, Jun 24, 2024)
- [Does Nexus Repository Pro Plan Include LDAP Users in Pricing? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/does-nexus-repository-pro-plan-include-ldap-users-in-pricing/12783/index.html): Hi, 
Our company is considering the Nexus Repository Pro plan for utilizing an external database and a high-availability setup. 
On the pricing page, the term ‘user’ is defined as “each individual who produces, consumes,&hellip; (157 words, Jun 24, 2024)
- [Does Nexus Repository Pro Plan Include LDAP Users in Pricing? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/does-nexus-repository-pro-plan-include-ldap-users-in-pricing/12783/1/index.html): Hi, 
Our company is considering the Nexus Repository Pro plan for utilizing an external database and a high-availability setup. 
On the pricing page, the term ‘user’ is defined as “each individual who produces, consumes,&hellip; (152 words, Jun 24, 2024)
- ["User Token" option not avaiable under profile - Central Repository - Sonatype Community](/content/community/t/user-token-option-not-avaiable-under-profile/12774/2/index.html): Hi, we are trying to update our builds to use tokens generated through the “User Token” section of our profile on oss.sonatype.org. However, we only seem to have the “Summary” option available to us. Is there something w&hellip; (90 words, Jun 23, 2024)
- [Cache issue with NuGet publish and Nexus groups - Sonatype Nexus Repository - Sonatype Community](/content/community/t/cache-issue-with-nuget-publish-and-nexus-groups/12781/index.html): Version:3.39.0 
When we publish a NuGetto NuGet.org, it is not immediately available in the proxy repository  So far I understand there is cache on the proxy and I need to clear it on this proxy, nothing strange. 
But wh&hellip; (214 words, Jun 23, 2024)
- [Cache issue with NuGet publish and Nexus groups - Sonatype Nexus Repository - Sonatype Community](/content/community/t/cache-issue-with-nuget-publish-and-nexus-groups/12781/1/index.html): Version:3.39.0 
When we publish a NuGetto NuGet.org, it is not immediately available in the proxy repository  So far I understand there is cache on the proxy and I need to clear it on this proxy, nothing strange. 
But wh&hellip; (124 words, Jun 23, 2024)
- [`401 Content access is protected by token` even though I'm using my token - Sonatype Nexus Repository - Sonatype Community](/content/community/t/401-content-access-is-protected-by-token-even-though-im-using-my-token/12777/index.html): I have an existing project that publishes to oss.sonatype.org. I’ve accessed my token, stored it in my private gradle.properties, and replaced my old username / password configuration with: 
    maven {
      name = &quot;nex&hellip; (154 words, Jun 22, 2024)
- [`401 Content access is protected by token` even though I'm using my token - Sonatype Nexus Repository - Sonatype Community](/content/community/t/401-content-access-is-protected-by-token-even-though-im-using-my-token/12777/1/index.html): I have an existing project that publishes to oss.sonatype.org. I’ve accessed my token, stored it in my private gradle.properties, and replaced my old username / password configuration with: 
    maven {
      name = &quot;nex&hellip; (150 words, Jun 22, 2024)
- ["User Token" option not avaiable under profile - Central Repository - Sonatype Community](/content/community/t/user-token-option-not-avaiable-under-profile/12774/index.html): Hi, we are trying to update our builds to use tokens generated through the “User Token” section of our profile on oss.sonatype.org. However, we only seem to have the “Summary” option available to us. Is there something w&hellip; (161 words, Jun 20, 2024)
- ["User Token" option not avaiable under profile - Central Repository - Sonatype Community](/content/community/t/user-token-option-not-avaiable-under-profile/12774/1/index.html): Hi, we are trying to update our builds to use tokens generated through the “User Token” section of our profile on oss.sonatype.org. However, we only seem to have the “Summary” option available to us. Is there something w&hellip; (152 words, Jun 20, 2024)
- [Bug in api for creating npm proxy repository with bearerToken - Sonatype Nexus Repository - Sonatype Community](/content/community/t/bug-in-api-for-creating-npm-proxy-repository-with-bearertoken/12728/2/index.html): I am using Nexus oss version 3.69.0-02. 
I have “npm Bearer Token Realm” set to active. 
I am trying to create an npm repo using the following json: 
{
  &quot;name&quot;: &quot;npm_proxy&quot;,
  &quot;online&quot;: true,
  &quot;storage&quot;: {
    &quot;blobSto&hellip; (178 words, Jun 20, 2024)
- [Database Migration Fails (Key (repository_id)=(14) is not present in table "npm_content_repository".) - Sonatype Nexus Repository - Sonatype Community](/content/community/t/database-migration-fails-key-repository-id-14-is-not-present-in-table-npm-content-repository/12765/2/index.html): Hi 
we are using nexus Pro 3.68.1 and try to migraton to PostgreSQL with the latest database migration tool. 
The Migration Fails with the following error: 
10:09:42 [main] ERROR o.s.batch.core.step.AbstractStep - Encoun&hellip; (307 words, Jun 20, 2024)
- [Clean artefact - nexus 3 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/clean-artefact-nexus-3/12722/4/index.html): Hi, 
I wrote a python script to clean artefacts, but I don’t see the free space disque increase. 
...
   response = requests.delete(url, auth=(username, password))
...

Why ? 
thx 
MPichel (198 words, Jun 20, 2024)
- [Nexus3 disk space cannot be released - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus3-disk-space-cannot-be-released/12754/2/index.html): Hi : 
I am currently encountering a problem with Nexus3, version 3.69.0. I have many repositories using the default blob store, including Docker and some raw type repositories. I have deleted the Docker repository from t&hellip; (165 words, Jun 20, 2024)
- [Join us for June Office Hours - Thursday, June 27th at 10am EDT - Community Announcements - Sonatype Community](/content/community/t/join-us-for-june-office-hours-thursday-june-27th-at-10am-edt/12768/2/index.html): Join us Thursday, June 27th at 10am EDT (7am PDT | 3pm BST) for our monthly, customer-exclusive Office Hours . 
This month, we’ll be discussing the following topics: 

SBOM Manager: Overview and Demo
June Learn Package&hellip; (193 words, Jun 20, 2024)
- [Join us for June Office Hours - Thursday, June 27th at 10am EDT - Community Announcements - Sonatype Community](/content/community/t/join-us-for-june-office-hours-thursday-june-27th-at-10am-edt/12768/index.html): Join us Thursday, June 27th at 10am EDT (7am PDT | 3pm BST) for our monthly, customer-exclusive Office Hours . 
This month, we’ll be discussing the following topics: 

SBOM Manager: Overview and Demo
June Learn Package&hellip; (227 words, Jun 20, 2024)
- [Database issue is preventing new users to login with docker - Sonatype Nexus Repository - Sonatype Community](/content/community/t/database-issue-is-preventing-new-users-to-login-with-docker/12756/2/index.html): Hello there. I am having issues with new users of docker repositories not being able to log in. Pre-existing users have no issues whatsoever. 
When a “new” user tries to login (“docker login docker.mercator-ocean.fr”) th&hellip; (244 words, Jun 20, 2024)
- [Database Migration Fails (Key (repository_id)=(14) is not present in table "npm_content_repository".) - Sonatype Nexus Repository - Sonatype Community](/content/community/t/database-migration-fails-key-repository-id-14-is-not-present-in-table-npm-content-repository/12765/index.html): Hi 
we are using nexus Pro 3.68.1 and try to migraton to PostgreSQL with the latest database migration tool. 
The Migration Fails with the following error: 
10:09:42 [main] ERROR o.s.batch.core.step.AbstractStep - Encoun&hellip; (301 words, Jun 20, 2024)
- [Database Migration Fails (Key (repository_id)=(14) is not present in table "npm_content_repository".) - Sonatype Nexus Repository - Sonatype Community](/content/community/t/database-migration-fails-key-repository-id-14-is-not-present-in-table-npm-content-repository/12765/1/index.html): Hi 
we are using nexus Pro 3.68.1 and try to migraton to PostgreSQL with the latest database migration tool. 
The Migration Fails with the following error: 
10:09:42 [main] ERROR o.s.batch.core.step.AbstractStep - Encoun&hellip; (301 words, Jun 20, 2024)
- [Cannot view docker token, database error - Sonatype Nexus Repository - Sonatype Community](/content/community/t/cannot-view-docker-token-database-error/12758/index.html): Users (including admin users) cannot view their token. Authentication seems to fail (message: You must authenticate successfully to access your token) 
Nexus PRO 3.69.0-02 
The nexus.log reports this error: 
024-06-19 16&hellip; (422 words, Jun 19, 2024)
- [Cannot view docker token, database error - Sonatype Nexus Repository - Sonatype Community](/content/community/t/cannot-view-docker-token-database-error/12758/1/index.html): Users (including admin users) cannot view their token. Authentication seems to fail (message: You must authenticate successfully to access your token) 
Nexus PRO 3.69.0-02 
The nexus.log reports this error: 
024-06-19 16&hellip; (445 words, Jun 19, 2024)
- [Database issue is preventing new users to login with docker - Sonatype Nexus Repository - Sonatype Community](/content/community/t/database-issue-is-preventing-new-users-to-login-with-docker/12756/index.html): Hello there. I am having issues with new users of docker repositories not being able to log in. Pre-existing users have no issues whatsoever. 
When a “new” user tries to login (“docker login docker.mercator-ocean.fr”) th&hellip; (241 words, Jun 19, 2024)
- [Database issue is preventing new users to login with docker - Sonatype Nexus Repository - Sonatype Community](/content/community/t/database-issue-is-preventing-new-users-to-login-with-docker/12756/1/index.html): Hello there. I am having issues with new users of docker repositories not being able to log in. Pre-existing users have no issues whatsoever. 
When a “new” user tries to login (“docker login docker.mercator-ocean.fr”) th&hellip; (237 words, Jun 19, 2024)
- [Nexus3 disk space cannot be released - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus3-disk-space-cannot-be-released/12754/index.html): Hi : 
I am currently encountering a problem with Nexus3, version 3.69.0. I have many repositories using the default blob store, including Docker and some raw type repositories. I have deleted the Docker repository from t&hellip; (165 words, Jun 19, 2024)
- [Nexus3 disk space cannot be released - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus3-disk-space-cannot-be-released/12754/1/index.html): Hi : 
I am currently encountering a problem with Nexus3, version 3.69.0. I have many repositories using the default blob store, including Docker and some raw type repositories. I have deleted the Docker repository from t&hellip; (165 words, Jun 19, 2024)
- [I am running Sonatype Nexus Maven Repo 3.41.1-01 i want to upgrade to Nexus 3.69.x-xx - Sonatype Nexus Repository - Sonatype Community](/content/community/t/i-am-running-sonatype-nexus-maven-repo-3-41-1-01-i-want-to-upgrade-to-nexus-3-69-x-xx/12752/index.html): I am running Sonatype Nexus Maven Repo 3.41.1-01 i want to upgrade to Nexus 3.69.x-xx without loosing my data and settings. 
Current Directory 
/opt/nexus3 
/opt/sonatype-work 
Can someone help me with details steps? (108 words, Jun 18, 2024)
- [I am running Sonatype Nexus Maven Repo 3.41.1-01 i want to upgrade to Nexus 3.69.x-xx - Sonatype Nexus Repository - Sonatype Community](/content/community/t/i-am-running-sonatype-nexus-maven-repo-3-41-1-01-i-want-to-upgrade-to-nexus-3-69-x-xx/12752/1/index.html): I am running Sonatype Nexus Maven Repo 3.41.1-01 i want to upgrade to Nexus 3.69.x-xx without loosing my data and settings. 
Current Directory 
/opt/nexus3 
/opt/sonatype-work 
Can someone help me with details steps? (97 words, Jun 18, 2024)
- [Update Your IQ Server License Threat Groups - Sonatype Labs - Sonatype Community](/content/community/t/update-your-iq-server-license-threat-groups/3094/40/index.html): The license threat group updater will apply the latest Sonatype provided license classification to your running IQ server’s license threat groups. This will alleviate any “License Threat Group not Assigned” policy violat&hellip; (588 words, Jun 18, 2024)
- [Delete SNAPSHOT Task failed and could not deploy JAR files - Sonatype Nexus Repository - Sonatype Community](/content/community/t/delete-snapshot-task-failed-and-could-not-deploy-jar-files/12746/1/index.html): Sonatype Nexus Repository: OSS 3.55.0-01 
2024-06-18 12:00:00,010+0800 INFO  [quartz-10-thread-19]  *SYSTEM org.sonatype.nexus.repository.maven.tasks.RemoveSnapshotsTask - Task information: 2024-06-18 12:00:00,011+0800 I&hellip; (391 words, Jun 18, 2024)
- ["401 Content access is protected by token" authentication failure while performing maven release - Central Repository - Sonatype Community](/content/community/t/401-content-access-is-protected-by-token-authentication-failure-while-performing-maven-release/12741/index.html): I am getting a “401 Content access is protected by token” authentication failure while performing maven release. But I did not make any changes regarding Sonatype/Nexus. 
[ERROR] Failed to execute goal org.sonatype.plugi&hellip; (625 words, Jun 17, 2024)
- ["401 Content access is protected by token" authentication failure while performing maven release - Central Repository - Sonatype Community](/content/community/t/401-content-access-is-protected-by-token-authentication-failure-while-performing-maven-release/12741/1/index.html): I am getting a “401 Content access is protected by token” authentication failure while performing maven release. But I did not make any changes regarding Sonatype/Nexus. 
[ERROR] Failed to execute goal org.sonatype.plugi&hellip; (662 words, Jun 17, 2024)
- [Stack traces handling - Sonatype Nexus Repository - Sonatype Community](/content/community/t/stack-traces-handling/12736/index.html): Hello :wave:, when I make a POST request to the URL http://my_server_nexus.com/nexus/service/extdirect  with the body: 
{“action”:“coreui_Repository”,“method”:“invalidateCache”,“data”:[1],“type”:“rpc”,“tid”:13} 
(“data” &hellip; (157 words, Jun 17, 2024)
- [Bug in api for creating npm proxy repository with bearerToken - Sonatype Nexus Repository - Sonatype Community](/content/community/t/bug-in-api-for-creating-npm-proxy-repository-with-bearertoken/12728/1/index.html): I am using Nexus oss version 3.69.0-02. 
I have “npm Bearer Token Realm” set to active. 
I am trying to create an npm repo using the following json: 
{
  &quot;name&quot;: &quot;npm_proxy&quot;,
  &quot;online&quot;: true,
  &quot;storage&quot;: {
    &quot;blobSto&hellip; (178 words, Jun 14, 2024)
- [Sonatype account email - Community Announcements / Welcome - Sonatype Community](/content/community/t/sonatype-account-email/12612/4/index.html): I’d like to change my email on my.sonatype.com . however when I try I get “An error occurred saving data. Event object failed validation” 
is it possible to change that please (105 words, Jun 14, 2024)
- [Uploading nar (maven plugin) file error - Sonatype Nexus Repository - Sonatype Community](/content/community/t/uploading-nar-maven-plugin-file-error/12724/index.html): I’m trying upload a .nar file to a nexus repository using curl.  I get the following error when attempting to do so: 

400 Detected content type [application/zip, application/x-zip-compressed], but expected [application/&hellip; (331 words, Jun 14, 2024)
- [Uploading nar (maven plugin) file error - Sonatype Nexus Repository - Sonatype Community](/content/community/t/uploading-nar-maven-plugin-file-error/12724/1/index.html): I’m trying upload a .nar file to a nexus repository using curl.  I get the following error when attempting to do so: 

400 Detected content type [application/zip, application/x-zip-compressed], but expected [application/&hellip; (351 words, Jun 14, 2024)
- [Clean artefact - nexus 3 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/clean-artefact-nexus-3/12722/1/index.html): Hi, 
I wrote a python script to clean artefacts, but I don’t see the free space disque increase. 
...
   response = requests.delete(url, auth=(username, password))
...

Why ? 
thx 
MPichel (196 words, Jun 14, 2024)
- [Now Available: SBOM Manager - Sonatype SBOM Manager - Sonatype Community](/content/community/t/now-available-sbom-manager/12720/index.html): We’re excited to announce that our SBOM Manager is now available in both SaaS and On-Premise deployments - your one-stop shop for software compliance! This gives you flexibility as you look to stay ahead of 2024 global r&hellip; (177 words, Jun 13, 2024)
- [Now Available: SBOM Manager - Sonatype SBOM Manager - Sonatype Community](/content/community/t/now-available-sbom-manager/12720/1/index.html): We’re excited to announce that our SBOM Manager is now available in both SaaS and On-Premise deployments - your one-stop shop for software compliance! This gives you flexibility as you look to stay ahead of 2024 global r&hellip; (90 words, Jun 13, 2024)
- [About the Sonatype SBOM Manager category - Sonatype SBOM Manager - Sonatype Community](/content/community/t/about-the-sonatype-sbom-manager-category/12719/index.html): Ask questions and follow discussions about Sonatype SBOM Manager. (104 words, Jun 13, 2024)
- [About the Sonatype SBOM Manager category - Sonatype SBOM Manager - Sonatype Community](/content/community/t/about-the-sonatype-sbom-manager-category/12719/1/index.html): Ask questions and follow discussions about Sonatype SBOM Manager. (108 words, Jun 13, 2024)
- [Download Speed had been limited by nexus？ - Sonatype Nexus Repository - Sonatype Community](/content/community/t/download-speed-had-been-limited-by-nexus/11610/5/index.html): hi， 
when I try to download from nexus repos using IB network, it seems the download speed had been limited, 
1.download directly from the httpd service, 
[root@h19r2n05 tmp]# wget http://11.8.19.46:8881/tmp_10g_1.tar
--&hellip; (197 words, Jun 13, 2024)
- [Create YUM repo to sync till a lockdown date - Sonatype Nexus Repository - Sonatype Community](/content/community/t/create-yum-repo-to-sync-till-a-lockdown-date/12643/2/index.html): We created Nexus repo and it is getting sync with Red Hat immediately as and when new packages are uploaded. We would like to introduce a filter or somehow to sync only till a specific date so that we can have more contr&hellip; (194 words, Jun 11, 2024)
- [Update policies using API - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/update-policies-using-api/7516/10/index.html): I wanted to ask if we can update the policies of Nexus IQ Server using APIs? Our current version is 103. (613 words, Jun 11, 2024)
- [OSS / maven central not showing my projects? - Central Repository - Sonatype Community](/content/community/t/oss-maven-central-not-showing-my-projects/12701/index.html): Hi, 
When I login to oss.sonatype.org I can no longer select any projects for the central statistics, and my repositories are not showing either. 
I tested with Safari and Chrome on OSX. 
Any ideas? 
Thanks 
Guy (125 words, Jun 11, 2024)
- [OSS / maven central not showing my projects? - Central Repository - Sonatype Community](/content/community/t/oss-maven-central-not-showing-my-projects/12701/1/index.html): Hi, 
When I login to oss.sonatype.org I can no longer select any projects for the central statistics, and my repositories are not showing either. 
I tested with Safari and Chrome on OSX. 
Any ideas? 
Thanks 
Guy (128 words, Jun 11, 2024)
- [Nexus 3.67 not starting, no logs - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-3-67-not-starting-no-logs/12434/5/index.html): hello as stated in the title im having issues after updating nexus repository from 3.66.0-02 to 3.67.1-01, im running nexus as a service with user “nexus” before the update everything worked fine, thanks in advance (211 words, Jun 10, 2024)
- [Configurations - Sonatype Nexus Repository - Sonatype Community](/content/community/t/configurations/12692/5/index.html): It would be too smart way to give the details of integration against each integration as part of Browse view… 
It is quite painful to know all such configurations… unless it has been fixed only for the commercial vers&hellip; (346 words, Jun 10, 2024)
- [Shaded Vulnerability Detection Data - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/shaded-vulnerability-detection-data/12694/index.html): NOTE: This is an ongoing release. Stay tuned to this community post for updates and educational materials. 
The initial release of the highest severity vulnerabilities with a CVSS of 10 will begin on Monday, September 9,&hellip; (861 words, Jun 7, 2024)
- [Shaded Vulnerability Detection Data - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/shaded-vulnerability-detection-data/12694/1/index.html): NOTE: This is an ongoing release. Stay tuned to this community post for updates and educational materials. 
The initial release of the highest severity vulnerabilities with a CVSS of 10 will begin on Monday, September 9,&hellip; (861 words, Jun 7, 2024)
- [Nexus windows 'jdk17' version failing to start - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-windows-jdk17-version-failing-to-start/12684/3/index.html): 2024-06-05 19:54:40,353+0530 INFO  [FelixStartLevel]  *SYSTEM org.sonatype.nexus.pax.logging.NexusLogActivator - start 
2024-06-05 19:54:40,587+0530 WARN  [FelixStartLevel]  *SYSTEM javax.xml.bind - Using non-standard p&hellip; (692 words, Jun 7, 2024)
- [Refresh log - Sonatype Nexus Repository - Sonatype Community](/content/community/t/refresh-log/12688/2/index.html): I have installed version 3.68.1, but in the UI part in logs when I click logs-&gt; view nexus.log and modify Resfresh Rate I get the error: 
Uncaught ref error: newPeriod is not defined (https://my_url/static/nexus-rapture-&hellip; (124 words, Jun 7, 2024)
- [Configurations - Sonatype Nexus Repository - Sonatype Community](/content/community/t/configurations/12692/index.html): It would be too smart way to give the details of integration against each integration as part of Browse view… 
It is quite painful to know all such configurations… unless it has been fixed only for the commercial vers&hellip; (340 words, Jun 7, 2024)
- [Configurations - Sonatype Nexus Repository - Sonatype Community](/content/community/t/configurations/12692/1/index.html): It would be too smart way to give the details of integration against each integration as part of Browse view… 
It is quite painful to know all such configurations… unless it has been fixed only for the commercial vers&hellip; (343 words, Jun 7, 2024)
- [Refresh log - Sonatype Nexus Repository - Sonatype Community](/content/community/t/refresh-log/12688/index.html): I have installed version 3.68.1, but in the UI part in logs when I click logs-&gt; view nexus.log and modify Resfresh Rate I get the error: 
Uncaught ref error: newPeriod is not defined (https://my_url/static/nexus-rapture-&hellip; (134 words, Jun 7, 2024)
- [Refresh log - Sonatype Nexus Repository - Sonatype Community](/content/community/t/refresh-log/12688/1/index.html): I have installed version 3.68.1, but in the UI part in logs when I click logs-&gt; view nexus.log and modify Resfresh Rate I get the error: 
Uncaught ref error: newPeriod is not defined (https://my_url/static/nexus-rapture-&hellip; (119 words, Jun 7, 2024)
- [Sonatype Nexus Repository 3.69.0 Relased - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-repository-3-69-0-relased/12682/2/index.html): Sonatype Nexus Repository 3.69.0 is now available. This release introduces customizable user token expiration, Java 17 support for deployments using PostgreSQL or H2, and multiple improvements to our SAML integration. 
S&hellip; (225 words, Jun 7, 2024)
- [Nexus windows 'jdk17' version failing to start - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-windows-jdk17-version-failing-to-start/12684/2/index.html): 2024-06-05 19:54:40,353+0530 INFO  [FelixStartLevel]  *SYSTEM org.sonatype.nexus.pax.logging.NexusLogActivator - start 
2024-06-05 19:54:40,587+0530 WARN  [FelixStartLevel]  *SYSTEM javax.xml.bind - Using non-standard p&hellip; (613 words, Jun 6, 2024)
- [Nexus windows 'jdk17' version failing to start - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-windows-jdk17-version-failing-to-start/12684/index.html): 2024-06-05 19:54:40,353+0530 INFO  [FelixStartLevel]  *SYSTEM org.sonatype.nexus.pax.logging.NexusLogActivator - start 
2024-06-05 19:54:40,587+0530 WARN  [FelixStartLevel]  *SYSTEM javax.xml.bind - Using non-standard p&hellip; (572 words, Jun 5, 2024)
- [Nexus windows 'jdk17' version failing to start - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-windows-jdk17-version-failing-to-start/12684/1/index.html): 2024-06-05 19:54:40,353+0530 INFO  [FelixStartLevel]  *SYSTEM org.sonatype.nexus.pax.logging.NexusLogActivator - start 
2024-06-05 19:54:40,587+0530 WARN  [FelixStartLevel]  *SYSTEM javax.xml.bind - Using non-standard p&hellip; (159 words, Jun 5, 2024)
- [Sonatype Nexus Repository 3.69.0 Relased - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-repository-3-69-0-relased/12682/index.html): Sonatype Nexus Repository 3.69.0 is now available. This release introduces customizable user token expiration, Java 17 support for deployments using PostgreSQL or H2, and multiple improvements to our SAML integration. 
S&hellip; (226 words, Jun 5, 2024)
- [Nexus-3.68.1-02-unix Service Not Starting - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-3-68-1-02-unix-service-not-starting/12680/index.html): I am writing to seek urgent assistance regarding an issue we are experiencing with our Nexus Repository Manager. The service is failing to start, and despite multiple troubleshooting attempts, we have been unable to reso&hellip; (364 words, Jun 5, 2024)
- [Nexus-3.68.1-02-unix Service Not Starting - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-3-68-1-02-unix-service-not-starting/12680/1/index.html): I am writing to seek urgent assistance regarding an issue we are experiencing with our Nexus Repository Manager. The service is failing to start, and despite multiple troubleshooting attempts, we have been unable to reso&hellip; (364 words, Jun 5, 2024)
- [Api to pre fetch artifacts from proxy repo - Sonatype Nexus Repository - Sonatype Community](/content/community/t/api-to-pre-fetch-artifacts-from-proxy-repo/12677/index.html): Hey, 
Is there any api that can make Get request to download artifact from proxy repo without downloading contents on requesting server? 
Thanks. (45 words, Jun 4, 2024)
- [Api to pre fetch artifacts from proxy repo - Sonatype Nexus Repository - Sonatype Community](/content/community/t/api-to-pre-fetch-artifacts-from-proxy-repo/12677/1/index.html): Hey, 
Is there any api that can make Get request to download artifact from proxy repo without downloading contents on requesting server? 
Thanks. (40 words, Jun 4, 2024)
- [Nexus service get stop with file genration as hs_err_pid file - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-service-get-stop-with-file-genration-as-hs-err-pid-file/12675/index.html): Hi, 
we are using nexus 3.29 from last couple of few days we are seeing nexus service get stop and while stop it generated the file hs_err_pid file. 
would like to know why suddenly we are seeing this error of jvm crash &hellip; (98 words, Jun 4, 2024)
- [Nexus service get stop with file genration as hs_err_pid file - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-service-get-stop-with-file-genration-as-hs-err-pid-file/12675/1/index.html): Hi, 
we are using nexus 3.29 from last couple of few days we are seeing nexus service get stop and while stop it generated the file hs_err_pid file. 
would like to know why suddenly we are seeing this error of jvm crash &hellip; (108 words, Jun 4, 2024)
- [Tip Tuesday: Zero-Day Vulnerability Best Practices - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/tip-tuesday-zero-day-vulnerability-best-practices/12674/index.html): Welcome back to Tip Tuesday, where we share a helpful tip from our Sonatype team to help you find more success with Sonatype solutions. 
A zero-day event is when a previously unknown vulnerability is discovered in a popu&hellip; (91 words, Jun 4, 2024)
- [Tip Tuesday: Zero-Day Vulnerability Best Practices - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/tip-tuesday-zero-day-vulnerability-best-practices/12674/1/index.html): Welcome back to Tip Tuesday, where we share a helpful tip from our Sonatype team to help you find more success with Sonatype solutions. 
A zero-day event is when a previously unknown vulnerability is discovered in a popu&hellip; (206 words, Jun 4, 2024)
- [Nexus 3.64.0-04 NPE Error While Login - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-3-64-0-04-npe-error-while-login/12485/4/index.html): Hey there, 
I’ve a Nexus Repository server running on Docker. I’ve also configured an LDAP for log-ins. Also SSL is configured with a certificate. There was around a 30-45 min time period where some of the users could no&hellip; (612 words, Jun 2, 2024)
- [Nexus cannot generate URL in helm index when version contains a '+' or url contains a ' ' - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-cannot-generate-url-in-helm-index-when-version-contains-a-or-url-contains-a/12659/3/index.html): We have a proxy helm repo where some of the versions contain a ‘+’. The URL in the index.yaml from the upstream has a space instead of the +. I’m not sure if Nexus builds the URL from the version, or if it does something&hellip; (269 words, May 30, 2024)
- [Nexus cannot generate URL in helm index when version contains a '+' or url contains a ' ' - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-cannot-generate-url-in-helm-index-when-version-contains-a-or-url-contains-a/12659/2/index.html): We have a proxy helm repo where some of the versions contain a ‘+’. The URL in the index.yaml from the upstream has a space instead of the +. I’m not sure if Nexus builds the URL from the version, or if it does something&hellip; (329 words, May 30, 2024)
- [Nexus cannot generate URL in helm index when version contains a '+' or url contains a ' ' - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-cannot-generate-url-in-helm-index-when-version-contains-a-or-url-contains-a/12659/index.html): We have a proxy helm repo where some of the versions contain a ‘+’. The URL in the index.yaml from the upstream has a space instead of the +. I’m not sure if Nexus builds the URL from the version, or if it does something&hellip; (330 words, May 30, 2024)
- [Nexus cannot generate URL in helm index when version contains a '+' or url contains a ' ' - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-cannot-generate-url-in-helm-index-when-version-contains-a-or-url-contains-a/12659/1/index.html): We have a proxy helm repo where some of the versions contain a ‘+’. The URL in the index.yaml from the upstream has a space instead of the +. I’m not sure if Nexus builds the URL from the version, or if it does something&hellip; (278 words, May 30, 2024)
- [How should APT Repository Metadata be handled? - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/how-should-apt-repository-metadata-be-handled/12625/2/index.html): Hello, 
I have created an APT hosted repository and have pushed my components to it using the POST API. I can see my components have appeared in the repository, however the APT repository only supports ‘.deb’ and ‘.udeb’&hellip; (228 words, May 30, 2024)
- [Nexus 3 : size by repository - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-3-size-by-repository/12656/index.html): Hi, 
is it possible to have the size of all repositories 
I would like to assign a cleanup policy according to the size of the repositories. 
Thx 
Michel (125 words, May 30, 2024)
- [Nexus 3 : size by repository - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-3-size-by-repository/12656/1/index.html): Hi, 
is it possible to have the size of all repositories 
I would like to assign a cleanup policy according to the size of the repositories. 
Thx 
Michel (48 words, May 30, 2024)
- [Failed to scan nexusiq artifacts - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/failed-to-scan-nexusiq-artifacts/12654/index.html): We are currently working on developing a Java -21 application and encountering an error while scanning artifacts in NexusIQ. Can  any faced similar issue? our nexusiq version is 175. 
Could not parse class file Controlle&hellip; (164 words, May 29, 2024)
- [Failed to scan nexusiq artifacts - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/failed-to-scan-nexusiq-artifacts/12654/1/index.html): We are currently working on developing a Java -21 application and encountering an error while scanning artifacts in NexusIQ. Can  any faced similar issue? our nexusiq version is 175. 
Could not parse class file Controlle&hellip; (174 words, May 29, 2024)
- [Transitioning Nexus Repository LDAP Integration: From Active Directory to Azure Security Groups - Sonatype Nexus Repository - Sonatype Community](/content/community/t/transitioning-nexus-repository-ldap-integration-from-active-directory-to-azure-security-groups/12648/index.html): Hi, 
We are currently using LDAP to sync users from Active Directory groups in our Nexus Repository application. Our company is transitioning to Azure Security Groups, and we need guidance on how to integrate Azure Secur&hellip; (196 words, May 29, 2024)
- [Transitioning Nexus Repository LDAP Integration: From Active Directory to Azure Security Groups - Sonatype Nexus Repository - Sonatype Community](/content/community/t/transitioning-nexus-repository-ldap-integration-from-active-directory-to-azure-security-groups/12648/1/index.html): Hi, 
We are currently using LDAP to sync users from Active Directory groups in our Nexus Repository application. Our company is transitioning to Azure Security Groups, and we need guidance on how to integrate Azure Secur&hellip; (108 words, May 29, 2024)
- [Join us in one hour for May Office Hours - 12pm EDT - Community Announcements - Sonatype Community](/content/community/t/join-us-in-one-hour-for-may-office-hours-12pm-edt/12645/2/index.html): Join us in one hour at 12pm EDT (9am PDT | 5pm BST) for our monthly, customer-exclusive Office Hours . 
This month, we’ll be discussing the following topics: 

New Sonatype Learn and May Learn Package
My Sonatype Redes&hellip; (208 words, May 28, 2024)
- [Join us in one hour for May Office Hours - 12pm EDT - Community Announcements - Sonatype Community](/content/community/t/join-us-in-one-hour-for-may-office-hours-12pm-edt/12645/index.html): Join us in one hour at 12pm EDT (9am PDT | 5pm BST) for our monthly, customer-exclusive Office Hours . 
This month, we’ll be discussing the following topics: 

New Sonatype Learn and May Learn Package
My Sonatype Redes&hellip; (191 words, May 28, 2024)
- [Join us in one hour for May Office Hours - 12pm EDT - Community Announcements - Sonatype Community](/content/community/t/join-us-in-one-hour-for-may-office-hours-12pm-edt/12645/1/index.html): Join us in one hour at 12pm EDT (9am PDT | 5pm BST) for our monthly, customer-exclusive Office Hours . 
This month, we’ll be discussing the following topics: 

New Sonatype Learn and May Learn Package
My Sonatype Redes&hellip; (202 words, May 28, 2024)
- [Create YUM repo to sync till a lockdown date - Sonatype Nexus Repository - Sonatype Community](/content/community/t/create-yum-repo-to-sync-till-a-lockdown-date/12643/index.html): We created Nexus repo and it is getting sync with Red Hat immediately as and when new packages are uploaded. We would like to introduce a filter or somehow to sync only till a specific date so that we can have more contr&hellip; (89 words, May 28, 2024)
- [Create YUM repo to sync till a lockdown date - Sonatype Nexus Repository - Sonatype Community](/content/community/t/create-yum-repo-to-sync-till-a-lockdown-date/12643/1/index.html): We created Nexus repo and it is getting sync with Red Hat immediately as and when new packages are uploaded. We would like to introduce a filter or somehow to sync only till a specific date so that we can have more contr&hellip; (87 words, May 28, 2024)
- [Privilege to view metrics in v3.68.1 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/privilege-to-view-metrics-in-v3-68-1/12638/index.html): We updated the Nexus Repository to v3.67.1 around April. 
The update added a new feature that allowed us to see Usage metrics, so we created a nexus:metrics:read privilege and used it while reading the documentation. 
Ho&hellip; (181 words, May 27, 2024)
- [How to test that the vulnerability CVE-2024-4956 has been mitigated? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-to-test-that-the-vulnerability-cve-2024-4956-has-been-mitigated/12637/index.html): Hi, we recently followed the guide to mitigate vulernability CVE-2024-4956: https://support.sonatype.com/hc/en-us/articles/29412417068819-Mitigations-for-CVE-2024-4956-Nexus-Repository-3-Vulnerability 
We ssh into the se&hellip; (231 words, May 27, 2024)
- [How to test that the vulnerability CVE-2024-4956 has been mitigated? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-to-test-that-the-vulnerability-cve-2024-4956-has-been-mitigated/12637/1/index.html): Hi, we recently followed the guide to mitigate vulernability CVE-2024-4956: https://support.sonatype.com/hc/en-us/articles/29412417068819-Mitigations-for-CVE-2024-4956-Nexus-Repository-3-Vulnerability 
We ssh into the se&hellip; (231 words, May 27, 2024)
- [Nexus SSO Postgres - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-sso-postgres/12621/3/index.html): Can I migrate the OrientDB database to PostgreSQL in the Nexus Community Edition? 
Thanks (189 words, May 25, 2024)
- [How to customize the url of "Homepage"? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-to-customize-the-url-of-homepage/12631/index.html): “My English is too good”, look up a lot of information, I’m already confused by all this stuff. 
The artifacts I uploaded using Nexus Repository Manager((https://s01.oss.sonatype.org/) were synchronized here. 
(https://c&hellip; (123 words, May 24, 2024)
- [How to customize the url of "Homepage"? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-to-customize-the-url-of-homepage/12631/1/index.html): “My English is too good”, look up a lot of information, I’m already confused by all this stuff. 
The artifacts I uploaded using Nexus Repository Manager((https://s01.oss.sonatype.org/) were synchronized here. 
(https://c&hellip; (195 words, May 24, 2024)
- [How should APT Repository Metadata be handled? - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/how-should-apt-repository-metadata-be-handled/12625/index.html): Hello, 
I have created an APT hosted repository and have pushed my components to it using the POST API. I can see my components have appeared in the repository, however the APT repository only supports ‘.deb’ and ‘.udeb’&hellip; (224 words, May 24, 2024)
- [How should APT Repository Metadata be handled? - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/how-should-apt-repository-metadata-be-handled/12625/1/index.html): Hello, 
I have created an APT hosted repository and have pushed my components to it using the POST API. I can see my components have appeared in the repository, however the APT repository only supports ‘.deb’ and ‘.udeb’&hellip; (228 words, May 24, 2024)
- [Need help in migration of nexus repository oss 2.14.4 from CentOS 7 to Alma Linux 9.3 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/need-help-in-migration-of-nexus-repository-oss-2-14-4-from-centos-7-to-alma-linux-9-3/12623/index.html): Hi Team 
Kindly help me with the steps of migrating nexus from CentOS 7 to Alma 9.3 (101 words, May 23, 2024)
- [Nexus SSO Postgres - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-sso-postgres/12621/index.html): Can I migrate the OrientDB database to PostgreSQL in the Nexus Community Edition? 
Thanks (246 words, May 23, 2024)
- [Nexus SSO Postgres - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-sso-postgres/12621/1/index.html): Can I migrate the OrientDB database to PostgreSQL in the Nexus Community Edition? 
Thanks (256 words, May 23, 2024)
- [Join us for May Office Hours - Tuesday, May 28th at 12pm EDT - Community Announcements - Sonatype Community](/content/community/t/join-us-for-may-office-hours-tuesday-may-28th-at-12pm-edt/12618/2/index.html): Join us Tuesday, May 28th at 12pm EDT (9am PDT | 5pm BST) for our monthly, customer-exclusive Office Hours . 
This month, we’ll be discussing the following topics: 

New Sonatype Learn and May Learn Package
My Sonatype&hellip; (138 words, May 22, 2024)
- [Join us for May Office Hours - Tuesday, May 28th at 12pm EDT - Community Announcements - Sonatype Community](/content/community/t/join-us-for-may-office-hours-tuesday-may-28th-at-12pm-edt/12618/1/index.html): Join us Tuesday, May 28th at 12pm EDT (9am PDT | 5pm BST) for our monthly, customer-exclusive Office Hours . 
This month, we’ll be discussing the following topics: 

New Sonatype Learn and May Learn Package
My Sonatype&hellip; (125 words, May 22, 2024)
- [BaseURL - Sonatype Nexus Repository - Sonatype Community](/content/community/t/baseurl/12615/index.html): We have installed nexus on Linux backed with ALB with SSL offloading and custom DNS name on ALB 
Application is accessible with https://localhost:8081 . However, after setting baseURL with https://:8081 (https:// applica&hellip; (56 words, May 22, 2024)
- [BaseURL - Sonatype Nexus Repository - Sonatype Community](/content/community/t/baseurl/12615/1/index.html): We have installed nexus on Linux backed with ALB with SSL offloading and custom DNS name on ALB 
Application is accessible with https://localhost:8081 . However, after setting baseURL with https://:8081 (https:// applica&hellip; (142 words, May 22, 2024)
- [Sonatype account email - Community Announcements / Welcome - Sonatype Community](/content/community/t/sonatype-account-email/12612/index.html): I’d like to change my email on my.sonatype.com . however when I try I get “An error occurred saving data. Event object failed validation” 
is it possible to change that please (105 words, May 21, 2024)
- [Sonatype account email - Community Announcements / Welcome - Sonatype Community](/content/community/t/sonatype-account-email/12612/1/index.html): I’d like to change my email on my.sonatype.com . however when I try I get “An error occurred saving data. Event object failed validation” 
is it possible to change that please (105 words, May 21, 2024)
- [A Blueprint for Success: Best Practices in Sonatype Learn - Sonatype Learn - Sonatype Community](/content/community/t/a-blueprint-for-success-best-practices-in-sonatype-learn/12605/index.html): Hello, Learners! 
We are excited to share 13 new best practices lessons in Sonatype Learn! Our Customer Education team crafted these lessons to provide you with comprehensive insights and strategies to optimize your use &hellip; (423 words, May 21, 2024)
- [Update Your IQ Server License Threat Groups - Sonatype Labs - Sonatype Community](/content/community/t/update-your-iq-server-license-threat-groups/3094/39/index.html): The license threat group updater will apply the latest Sonatype provided license classification to your running IQ server’s license threat groups. This will alleviate any “License Threat Group not Assigned” policy violat&hellip; (661 words, May 16, 2024)
- [Urgent: Sonatype Nexus Repository 3.68.1 Released - Sonatype Nexus Repository - Sonatype Community](/content/community/t/urgent-sonatype-nexus-repository-3-68-1-released/12592/index.html): Sonatype Nexus Repository 3.68.1 fixes a critical vulnerability impacting all Sonatype Nexus Repository 3 deployments. All Sonatype Nexus Repository 3 Pro and OSS customers should upgrade to 3.68.1 as soon as possible. 
W&hellip; (726 words, May 16, 2024)
- [Urgent: Sonatype Nexus Repository 3.68.1 Released - Sonatype Nexus Repository - Sonatype Community](/content/community/t/urgent-sonatype-nexus-repository-3-68-1-released/12592/1/index.html): Sonatype Nexus Repository 3.68.1 fixes a critical vulnerability impacting all Sonatype Nexus Repository 3 deployments. All Sonatype Nexus Repository 3 Pro and OSS customers should upgrade to 3.68.1 as soon as possible. 
W&hellip; (660 words, May 16, 2024)
- [Can I Proxy a Sonatype Hosted Repository? - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/can-i-proxy-a-sonatype-hosted-repository/12584/2/index.html): Im using Sonatype Nexus Repo OSS In my company 
Is it possible to set up a Proxy Repo, that proxies data from another Sonatype Hosted Repo? 
My idea is to have: 

Datacenter 1 : Hosted Repo
Datacenter 2 : Proxy Repo of t&hellip; (152 words, May 16, 2024)
- [Can I Proxy a Sonatype Hosted Repository? - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/can-i-proxy-a-sonatype-hosted-repository/12584/index.html): Im using Sonatype Nexus Repo OSS In my company 
Is it possible to set up a Proxy Repo, that proxies data from another Sonatype Hosted Repo? 
My idea is to have: 

Datacenter 1 : Hosted Repo
Datacenter 2 : Proxy Repo of t&hellip; (166 words, May 15, 2024)
- [Can I Proxy a Sonatype Hosted Repository? - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/can-i-proxy-a-sonatype-hosted-repository/12584/1/index.html): Im using Sonatype Nexus Repo OSS In my company 
Is it possible to set up a Proxy Repo, that proxies data from another Sonatype Hosted Repo? 
My idea is to have: 

Datacenter 1 : Hosted Repo
Datacenter 2 : Proxy Repo of t&hellip; (90 words, May 15, 2024)
- [Nexus OSS is running, but UI is not accessible - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-oss-is-running-but-ui-is-not-accessible/12532/4/index.html): I’m installing Nexus OSS 2.15.1-02 on a RHEL 8 Server. The Nexus process is running but when I try to reach the Nexus Repository site, I receive the error “site cannot be reached”. I confirmed port 8081 was open on the s&hellip; (244 words, May 15, 2024)
- [Privilege not visible at selection in role interface - Sonatype Nexus Repository - Sonatype Community](/content/community/t/privilege-not-visible-at-selection-in-role-interface/12583/index.html): Hello, 
i have created a privilege named mcs-mem 
  
hen, I have created a role and when I tried to select my privilege, it is not visible in the list : 
  
My nexus version is: 
Sonatype Nexus RepositoryOSS 3.68.0-04 
A&hellip; (186 words, May 15, 2024)
- [Privilege not visible at selection in role interface - Sonatype Nexus Repository - Sonatype Community](/content/community/t/privilege-not-visible-at-selection-in-role-interface/12583/1/index.html): Hello, 
i have created a privilege named mcs-mem 
  
hen, I have created a role and when I tried to select my privilege, it is not visible in the list : 
  
My nexus version is: 
Sonatype Nexus RepositoryOSS 3.68.0-04 
A&hellip; (166 words, May 15, 2024)
- [Link a SBOM to a given artefact - Sonatype Nexus Repository - Sonatype Community](/content/community/t/link-a-sbom-to-a-given-artefact/12582/index.html): Hi 
I have a question related to SBOMs. I can upload artefacts and also the associated SBOM, but those seem to be managed as two independent files, it is, the product doesn’t understand that the SBOM belongs to that arte&hellip; (146 words, May 15, 2024)
- [Link a SBOM to a given artefact - Sonatype Nexus Repository - Sonatype Community](/content/community/t/link-a-sbom-to-a-given-artefact/12582/1/index.html): Hi 
I have a question related to SBOMs. I can upload artefacts and also the associated SBOM, but those seem to be managed as two independent files, it is, the product doesn’t understand that the SBOM belongs to that arte&hellip; (74 words, May 15, 2024)
- [Maintenance Downtime of My Sonatype on Tuesday, May 14th at 2pm EDT - Community Announcements - Sonatype Community](/content/community/t/maintenance-downtime-of-my-sonatype-on-tuesday-may-14th-at-2pm-edt/12574/3/index.html): Starting around 2:00 pm EDT on Tuesday, May 14th, My Sonatype (my.sonatype.com) will be brought offline briefly for necessary maintenance. 
This downtime is localized to just my.sonatype.com, and will not affect other my&hellip; (156 words, May 13, 2024)
- [Maintenance Downtime of My Sonatype on Tuesday, May 14th at 2pm EDT - Community Announcements - Sonatype Community](/content/community/t/maintenance-downtime-of-my-sonatype-on-tuesday-may-14th-at-2pm-edt/12574/index.html): Starting around 2:00 pm EDT on Tuesday, May 14th, My Sonatype (my.sonatype.com) will be brought offline briefly for necessary maintenance. 
This downtime is localized to just my.sonatype.com, and will not affect other my&hellip; (144 words, May 13, 2024)
- [Maintenance Downtime of My Sonatype on Tuesday, May 14th at 2pm EDT - Community Announcements - Sonatype Community](/content/community/t/maintenance-downtime-of-my-sonatype-on-tuesday-may-14th-at-2pm-edt/12574/1/index.html): Starting around 2:00 pm EDT on Tuesday, May 14th, My Sonatype (my.sonatype.com) will be brought offline briefly for necessary maintenance. 
This downtime is localized to just my.sonatype.com, and will not affect other my&hellip; (167 words, May 13, 2024)
- [Error with Logs Refresh Rate - Nexus 3.67.1-01 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/error-with-logs-refresh-rate-nexus-3-67-1-01/12487/4/index.html): Recently upgraded to Nexus 3.67, but noticed a weird behaviour. When I access the logs within the UI, they display without issue. However, changing the Refresh Rate from manual to any other option produces the following &hellip; (190 words, May 13, 2024)
- [Proxy repository not refreshing metadata even with max age 0 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/proxy-repository-not-refreshing-metadata-even-with-max-age-0/12555/3/index.html): Currently running nexus repo 3.64.0-04 on 3 front end machines acting as pull through caching proxies 
I have a nuget proxy repo with the following settings 
Nuget V2 
Metadata query cache age: 0 
Remote Storage: &lt;intern&hellip; (252 words, May 13, 2024)
- [Proxy repository not refreshing metadata even with max age 0 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/proxy-repository-not-refreshing-metadata-even-with-max-age-0/12555/2/index.html): Currently running nexus repo 3.64.0-04 on 3 front end machines acting as pull through caching proxies 
I have a nuget proxy repo with the following settings 
Nuget V2 
Metadata query cache age: 0 
Remote Storage: &lt;intern&hellip; (243 words, May 10, 2024)
- [Proxy repository not refreshing metadata even with max age 0 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/proxy-repository-not-refreshing-metadata-even-with-max-age-0/12555/index.html): Currently running nexus repo 3.64.0-04 on 3 front end machines acting as pull through caching proxies 
I have a nuget proxy repo with the following settings 
Nuget V2 
Metadata query cache age: 0 
Remote Storage: &lt;intern&hellip; (244 words, May 9, 2024)
- [Proxy repository not refreshing metadata even with max age 0 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/proxy-repository-not-refreshing-metadata-even-with-max-age-0/12555/1/index.html): Currently running nexus repo 3.64.0-04 on 3 front end machines acting as pull through caching proxies 
I have a nuget proxy repo with the following settings 
Nuget V2 
Metadata query cache age: 0 
Remote Storage: &lt;intern&hellip; (243 words, May 9, 2024)
- [Nexus version 2 to 3 upgrade - File System Hard Linking - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-version-2-to-3-upgrade-file-system-hard-linking/12549/index.html): Hi, 
We have been working on to upgrade nexus version 2 of our existing env to nexus 3 version using ‘File System Hard Linking’ method which is mentioned as fastest ways to migrate. 
However our nexus 2 repository consis&hellip; (124 words, May 9, 2024)
- [Nexus version 2 to 3 upgrade - File System Hard Linking - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-version-2-to-3-upgrade-file-system-hard-linking/12549/1/index.html): Hi, 
We have been working on to upgrade nexus version 2 of our existing env to nexus 3 version using ‘File System Hard Linking’ method which is mentioned as fastest ways to migrate. 
However our nexus 2 repository consis&hellip; (133 words, May 9, 2024)
- [I want to use a method to limit the ip that hosts with Nexus Repository 3 installed - Sonatype Nexus Repository - Sonatype Community](/content/community/t/i-want-to-use-a-method-to-limit-the-ip-that-hosts-with-nexus-repository-3-installed/12541/index.html): https://help.sonatype.com/en/securing-nexus-repository-manager.html?&amp;_ga=2.137942647.69920269.1715128294-1230241385.1710724776#limit-ips-that-can-be-reached-from-your-nexus-repository-host 
I want to use a method to limi&hellip; (92 words, May 8, 2024)
- [Nexus Maven repo migration to AWS - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-maven-repo-migration-to-aws/12538/index.html): We have Nexus Maven Repo OSS 3.41.1-01 on-prem. 
I have 2 questions. 
1- When does support ends for v3.41.1-01 
2- Can we migrate Nexus to AWS from on-prem (43 words, May 7, 2024)
- [Nexus Maven repo migration to AWS - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-maven-repo-migration-to-aws/12538/1/index.html): We have Nexus Maven Repo OSS 3.41.1-01 on-prem. 
I have 2 questions. 
1- When does support ends for v3.41.1-01 
2- Can we migrate Nexus to AWS from on-prem (42 words, May 7, 2024)
- [GitHub Packages as npm proxy - Sonatype Nexus Repository - Sonatype Community](/content/community/t/github-packages-as-npm-proxy/5034/8/index.html): Hello, 
is it possible to configure Nexus to use GitHub Packages as a npm proxy? HTTP authentication option doesn’t seem to work. 
Here are GitHub docs how to do it locally: https://docs.github.com/en/free-pro-team@lates&hellip; (710 words, May 7, 2024)
- [Nexus 3 OSS yum (hosted repo) rebuild metadata fails - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-3-oss-yum-hosted-repo-rebuild-metadata-fails/12534/index.html): The steps taken and issues observed are: 

Uploaded rpm files into yum hosted repository
Executing “yum list” command on client side and realised the rpm files are not updated, hence unable to yum install the newly uploa&hellip; (126 words, May 7, 2024)
- [Nexus 3 OSS yum (hosted repo) rebuild metadata fails - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-3-oss-yum-hosted-repo-rebuild-metadata-fails/12534/1/index.html): The steps taken and issues observed are: 

Uploaded rpm files into yum hosted repository
Executing “yum list” command on client side and realised the rpm files are not updated, hence unable to yum install the newly uploa&hellip; (125 words, May 7, 2024)
- [Nexus OSS is running, but UI is not accessible - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-oss-is-running-but-ui-is-not-accessible/12532/index.html): I’m installing Nexus OSS 2.15.1-02 on a RHEL 8 Server. The Nexus process is running but when I try to reach the Nexus Repository site, I receive the error “site cannot be reached”. I confirmed port 8081 was open on the s&hellip; (244 words, May 6, 2024)
- [Migration from Jfrog antifactory to Nexus OSS - Sonatype Nexus Repository - Sonatype Community](/content/community/t/migration-from-jfrog-antifactory-to-nexus-oss/12474/3/index.html): Hello There, 
Has anyone did data migration from Jfrog Artifactory to Nexus Repository Manager OSS ,  if yes please guide. 
We have also raised  same concern to Jfrog support, 
Regards, 
SAM (313 words, May 6, 2024)
- [Can´t pull Dockerhub Official Images - Sonatype Nexus Repository - Sonatype Community](/content/community/t/can-t-pull-dockerhub-official-images/12530/3/index.html): Hi, 
i try to pull some Docker Officials Images through a Docker Proxy Repositorie. 
Unfortunately i getting a “manifest unknown” message. 
Docker Official Images (like docker.io/ redis) don´t have a subfolder in the pat&hellip; (173 words, May 6, 2024)
- [Can´t pull Dockerhub Official Images - Sonatype Nexus Repository - Sonatype Community](/content/community/t/can-t-pull-dockerhub-official-images/12530/index.html): Hi, 
i try to pull some Docker Officials Images through a Docker Proxy Repositorie. 
Unfortunately i getting a “manifest unknown” message. 
Docker Official Images (like docker.io/ redis) don´t have a subfolder in the pat&hellip; (176 words, May 6, 2024)
- [Unable to login - Sonatype Nexus Repository - Sonatype Community](/content/community/t/unable-to-login/12511/2/index.html): I am not able to login https://oss.sonatype.org/ (149 words, May 5, 2024)
- [Unable to login - Sonatype Nexus Repository - Sonatype Community](/content/community/t/unable-to-login/12511/1/index.html): I am not able to login https://oss.sonatype.org/ (148 words, May 2, 2024)
- [Cannot open local storage 'D:/nexusrepository/sonatype-work/nexs3/db/config' with mode=rw - Sonatype Nexus Repository - Sonatype Community](/content/community/t/cannot-open-local-storage-d-nexusrepository-sonatype-work-nexs3-db-config-with-mode-rw/12510/index.html): [image] (104 words, May 2, 2024)
- [Cannot open local storage 'D:/nexusrepository/sonatype-work/nexs3/db/config' with mode=rw - Sonatype Nexus Repository - Sonatype Community](/content/community/t/cannot-open-local-storage-d-nexusrepository-sonatype-work-nexs3-db-config-with-mode-rw/12510/1/index.html): [image] (82 words, May 2, 2024)
- [Bug in p2 proxy repository jar fetching fails - Sonatype Nexus Repository - Sonatype Community](/content/community/t/bug-in-p2-proxy-repository-jar-fetching-fails/12469/5/index.html): Hi, 
We have just upgraded to nexus3 and there is a bug in the p2 proxy repository for nexus 3, where it cannot fetch all jars from old eclipse repositories, causing builds to fail. 
This is not an issue in the last vers&hellip; (471 words, May 1, 2024)
- [Error on rebuild index * - Sonatype Nexus Repository - Sonatype Community](/content/community/t/error-on-rebuild-index/12490/index.html): Hi, good afternoon: 
We have Sonatype Nexus Repository ManagerOSS 3.15.2-01, and today we tried to do a REBUILD INDEX * to the database. 
The process returns this error, and is canceled: 
Rebuilding index(es)…Exception 0&hellip; (92 words, Apr 25, 2024)
- [Error on rebuild index * - Sonatype Nexus Repository - Sonatype Community](/content/community/t/error-on-rebuild-index/12490/1/index.html): Hi, good afternoon: 
We have Sonatype Nexus Repository ManagerOSS 3.15.2-01, and today we tried to do a REBUILD INDEX * to the database. 
The process returns this error, and is canceled: 
Rebuilding index(es)…Exception 0&hellip; (161 words, Apr 25, 2024)
- [Error with Logs Refresh Rate - Nexus 3.67.1-01 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/error-with-logs-refresh-rate-nexus-3-67-1-01/12487/index.html): Recently upgraded to Nexus 3.67, but noticed a weird behaviour. When I access the logs within the UI, they display without issue. However, changing the Refresh Rate from manual to any other option produces the following &hellip; (190 words, Apr 25, 2024)
- [Error with Logs Refresh Rate - Nexus 3.67.1-01 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/error-with-logs-refresh-rate-nexus-3-67-1-01/12487/1/index.html): Recently upgraded to Nexus 3.67, but noticed a weird behaviour. When I access the logs within the UI, they display without issue. However, changing the Refresh Rate from manual to any other option produces the following &hellip; (190 words, Apr 25, 2024)
- [Nexus 3.64.0-04 NPE Error While Login - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-3-64-0-04-npe-error-while-login/12485/index.html): Hey there, 
I’ve a Nexus Repository server running on Docker. I’ve also configured an LDAP for log-ins. Also SSL is configured with a certificate. There was around a 30-45 min time period where some of the users could no&hellip; (603 words, Apr 25, 2024)
- [Nexus 3.64.0-04 NPE Error While Login - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-3-64-0-04-npe-error-while-login/12485/1/index.html): Hey there, 
I’ve a Nexus Repository server running on Docker. I’ve also configured an LDAP for log-ins. Also SSL is configured with a certificate. There was around a 30-45 min time period where some of the users could no&hellip; (595 words, Apr 25, 2024)
- [Join us in one hour for April Office Hours - 11am EDT! - Community Announcements - Sonatype Community](/content/community/t/join-us-in-one-hour-for-april-office-hours-11am-edt/12483/2/index.html): Join us in one hour at 11 am EDT (8 am PDT | 4 pm GMT) for our monthly, customer-exclusive Office Hours . 
This month, we’ll be discussing the following topics: 

Sonatype for VS Code Extension
Usage Alerts in Sonatype&hellip; (220 words, Apr 25, 2024)
- [Join us in one hour for April Office Hours - 11am EDT! - Community Announcements - Sonatype Community](/content/community/t/join-us-in-one-hour-for-april-office-hours-11am-edt/12483/index.html): Join us in one hour at 11 am EDT (8 am PDT | 4 pm GMT) for our monthly, customer-exclusive Office Hours . 
This month, we’ll be discussing the following topics: 

Sonatype for VS Code Extension
Usage Alerts in Sonatype&hellip; (213 words, Apr 25, 2024)
- [Join us in one hour for April Office Hours - 11am EDT! - Community Announcements - Sonatype Community](/content/community/t/join-us-in-one-hour-for-april-office-hours-11am-edt/12483/1/index.html): Join us in one hour at 11 am EDT (8 am PDT | 4 pm GMT) for our monthly, customer-exclusive Office Hours . 
This month, we’ll be discussing the following topics: 

Sonatype for VS Code Extension
Usage Alerts in Sonatype&hellip; (128 words, Apr 25, 2024)
- [Transitioning Nexus Repository LDAP Integration from Active Directory to Azure Security Groups - Sonatype Nexus Repository - Sonatype Community](/content/community/t/transitioning-nexus-repository-ldap-integration-from-active-directory-to-azure-security-groups/12478/index.html): Hi! 
We are currently using LDAP to sync users from Active Directory groups in our Nexus Repository application. However, our company is transitioning away from Active Directory to Azure Security Groups. We’re looking fo&hellip; (94 words, Apr 25, 2024)
- [Transitioning Nexus Repository LDAP Integration from Active Directory to Azure Security Groups - Sonatype Nexus Repository - Sonatype Community](/content/community/t/transitioning-nexus-repository-ldap-integration-from-active-directory-to-azure-security-groups/12478/1/index.html): Hi! 
We are currently using LDAP to sync users from Active Directory groups in our Nexus Repository application. However, our company is transitioning away from Active Directory to Azure Security Groups. We’re looking fo&hellip; (94 words, Apr 25, 2024)
- [Migration from Jfrog antifactory to Nexus OSS - Sonatype Nexus Repository - Sonatype Community](/content/community/t/migration-from-jfrog-antifactory-to-nexus-oss/12474/1/index.html): Hello There, 
Has anyone did data migration from Jfrog Artifactory to Nexus Repository Manager OSS ,  if yes please guide. 
We have also raised  same concern to Jfrog support, 
Regards, 
SAM (325 words, Apr 25, 2024)
- [Help #docker_registery #login I can log to nexus with my public ip while i can with the localhost address - Sonatype Nexus Repository - Sonatype Community](/content/community/t/help-docker-registery-login-i-can-log-to-nexus-with-my-public-ip-while-i-can-with-the-localhost-address/12473/index.html): Hi im running my nexus as docker container i create a docker private repository (hosted) in port 18085 when  i log in with docker login -u admin localhost:18085  it log in Succeeded but when i try replace localhost with &hellip; (278 words, Apr 24, 2024)
- [Help #docker_registery #login I can log to nexus with my public ip while i can with the localhost address - Sonatype Nexus Repository - Sonatype Community](/content/community/t/help-docker-registery-login-i-can-log-to-nexus-with-my-public-ip-while-i-can-with-the-localhost-address/12473/1/index.html): Hi im running my nexus as docker container i create a docker private repository (hosted) in port 18085 when  i log in with docker login -u admin localhost:18085  it log in Succeeded but when i try replace localhost with &hellip; (278 words, Apr 24, 2024)
- [Bug in p2 proxy repository jar fetching fails - Sonatype Nexus Repository - Sonatype Community](/content/community/t/bug-in-p2-proxy-repository-jar-fetching-fails/12469/index.html): Hi, 
We have just upgraded to nexus3 and there is a bug in the p2 proxy repository for nexus 3, where it cannot fetch all jars from old eclipse repositories, causing builds to fail. 
This is not an issue in the last vers&hellip; (491 words, Apr 24, 2024)
- [Bug in p2 proxy repository jar fetching fails - Sonatype Nexus Repository - Sonatype Community](/content/community/t/bug-in-p2-proxy-repository-jar-fetching-fails/12469/1/index.html): Hi, 
We have just upgraded to nexus3 and there is a bug in the p2 proxy repository for nexus 3, where it cannot fetch all jars from old eclipse repositories, causing builds to fail. 
This is not an issue in the last vers&hellip; (492 words, Apr 24, 2024)
- [Problem with search scoped packages since 3.42.0 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/problem-with-search-scoped-packages-since-3-42-0/12467/index.html): hello! 
Has anyone encountered a problem finding scope packages in Nexus? 
An example of a problematic search: 
There are two packages in one repository: 
mobile-test 
@xxx/mobile-test 
“npm search mobile-test” shows onl&hellip; (478 words, Apr 24, 2024)
- [Problem with search scoped packages since 3.42.0 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/problem-with-search-scoped-packages-since-3-42-0/12467/1/index.html): hello! 
Has anyone encountered a problem finding scope packages in Nexus? 
An example of a problematic search: 
There are two packages in one repository: 
mobile-test 
@xxx/mobile-test 
“npm search mobile-test” shows onl&hellip; (482 words, Apr 24, 2024)
- [Is there complete documentation for the "nexus.properties" file? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/is-there-complete-documentation-for-the-nexus-properties-file/12457/3/index.html): I am using the OSS version of NexusRepository. 
I recently checked the release notes and found a topic of interest. 
According to the release notes, variables can be changed in the “nexus.properties” file. 
However, I co&hellip; (187 words, Apr 24, 2024)
- [COMING SOON: My Sonatype —A Unified Platform Experience - Community Announcements - Sonatype Community](/content/community/t/coming-soon-my-sonatype-a-unified-platform-experience/12460/2/index.html): As Sonatype has progressed to a Run Anywhere Platform, we’ve prioritized customer experience, including creating a unified look and feel across our platform. 
One key aspect of the unified platform is redesigning My Sona&hellip; (171 words, Apr 22, 2024)
- [COMING SOON: My Sonatype —A Unified Platform Experience - Community Announcements - Sonatype Community](/content/community/t/coming-soon-my-sonatype-a-unified-platform-experience/12460/index.html): As Sonatype has progressed to a Run Anywhere Platform, we’ve prioritized customer experience, including creating a unified look and feel across our platform. 
One key aspect of the unified platform is redesigning My Sona&hellip; (93 words, Apr 22, 2024)
- [COMING SOON: My Sonatype —A Unified Platform Experience - Community Announcements - Sonatype Community](/content/community/t/coming-soon-my-sonatype-a-unified-platform-experience/12460/1/index.html): As Sonatype has progressed to a Run Anywhere Platform, we’ve prioritized customer experience, including creating a unified look and feel across our platform. 
One key aspect of the unified platform is redesigning My Sona&hellip; (91 words, Apr 22, 2024)
- [Gitlab container scanning with Nexus Sonatype 3.66 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/gitlab-container-scanning-with-nexus-sonatype-3-66/12444/3/index.html): Hi All, 
I’m using this template in gitlab, 
include:
  - template: Jobs/Container-Scanning.gitlab-ci.yml

to scan for image vulnerabilities with nexus-sonatype 3.66, only works fine if anonymous is enabled. 
I will have&hellip; (269 words, Apr 22, 2024)
- [Deleted Nexus blobs remain on disk - Sonatype Nexus Repository - Sonatype Community](/content/community/t/deleted-nexus-blobs-remain-on-disk/12424/3/index.html): Hi, 
(v3.67.1) 
I’m seeing that blob stores deleted in the UI are still present on disk.  I’m not referring to repositories, which I’ve compacted successfully.  Deleted blob stores can’t be compacted (to nothing) because&hellip; (163 words, Apr 22, 2024)
- [Is there complete documentation for the "nexus.properties" file? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/is-there-complete-documentation-for-the-nexus-properties-file/12457/index.html): I am using the OSS version of NexusRepository. 
I recently checked the release notes and found a topic of interest. 
According to the release notes, variables can be changed in the “nexus.properties” file. 
However, I co&hellip; (187 words, Apr 22, 2024)
- [Is there complete documentation for the "nexus.properties" file? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/is-there-complete-documentation-for-the-nexus-properties-file/12457/1/index.html): I am using the OSS version of NexusRepository. 
I recently checked the release notes and found a topic of interest. 
According to the release notes, variables can be changed in the “nexus.properties” file. 
However, I co&hellip; (187 words, Apr 22, 2024)
- [Join us for April Office Hours - Thursday, April 25th at 11am EDT - Community Announcements - Sonatype Community](/content/community/t/join-us-for-april-office-hours-thursday-april-25th-at-11am-edt/12448/2/index.html): Join us Thursday, April 25th at 11 am EDT (8 am PDT | 4 pm GMT) for our monthly, customer-exclusive Office Hours . 
This month, we’ll be discussing the following topics: 

Sonatype for VS Code Extension
Usage Alerts in&hellip; (213 words, Apr 19, 2024)
- [Join us for April Office Hours - Thursday, April 25th at 11am EDT - Community Announcements - Sonatype Community](/content/community/t/join-us-for-april-office-hours-thursday-april-25th-at-11am-edt/12448/index.html): Join us Thursday, April 25th at 11 am EDT (8 am PDT | 4 pm GMT) for our monthly, customer-exclusive Office Hours . 
This month, we’ll be discussing the following topics: 

Sonatype for VS Code Extension
Usage Alerts in&hellip; (225 words, Apr 19, 2024)
- [Update Your IQ Server License Threat Groups - Sonatype Labs - Sonatype Community](/content/community/t/update-your-iq-server-license-threat-groups/3094/38/index.html): The license threat group updater will apply the latest Sonatype provided license classification to your running IQ server’s license threat groups. This will alleviate any “License Threat Group not Assigned” policy violat&hellip; (596 words, Apr 19, 2024)
- [Nexus Hosted repository - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-hosted-repository/12430/4/index.html): I’ve encountered an issue with a Nexus hosted repository I set up. Previously, I had an older version of “example.jar” stored in the repository. Later, I manually uploaded an updated version of “example.jar” to the same &hellip; (358 words, Apr 19, 2024)
- [Block certain file types from being uploaded to nuget repository - Sonatype Nexus Repository - Sonatype Community](/content/community/t/block-certain-file-types-from-being-uploaded-to-nuget-repository/12447/index.html): I have a Hosted Nuget Repository where I would like to include a rule that .nupkg packages containing a certain file extension are blocked from being uploaded to that repository. Is there any standard functionality for t&hellip; (73 words, Apr 19, 2024)
- [Block certain file types from being uploaded to nuget repository - Sonatype Nexus Repository - Sonatype Community](/content/community/t/block-certain-file-types-from-being-uploaded-to-nuget-repository/12447/1/index.html): I have a Hosted Nuget Repository where I would like to include a rule that .nupkg packages containing a certain file extension are blocked from being uploaded to that repository. Is there any standard functionality for t&hellip; (143 words, Apr 19, 2024)
- [Update Your IQ Server License Threat Groups - Sonatype Labs - Sonatype Community](/content/community/t/update-your-iq-server-license-threat-groups/3094/37/index.html): The license threat group updater will apply the latest Sonatype provided license classification to your running IQ server’s license threat groups. This will alleviate any “License Threat Group not Assigned” policy violat&hellip; (539 words, Apr 18, 2024)
- [Gitlab container scanning with Nexus Sonatype 3.66 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/gitlab-container-scanning-with-nexus-sonatype-3-66/12444/index.html): Hi All, 
I’m using this template in gitlab, 
include:
  - template: Jobs/Container-Scanning.gitlab-ci.yml

to scan for image vulnerabilities with nexus-sonatype 3.66, only works fine if anonymous is enabled. 
I will have&hellip; (269 words, Apr 18, 2024)
- [Gitlab container scanning with Nexus Sonatype 3.66 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/gitlab-container-scanning-with-nexus-sonatype-3-66/12444/1/index.html): Hi All, 
I’m using this template in gitlab, 
include:
  - template: Jobs/Container-Scanning.gitlab-ci.yml

to scan for image vulnerabilities with nexus-sonatype 3.66, only works fine if anonymous is enabled. 
I will have&hellip; (269 words, Apr 18, 2024)
- [Nuget v3 proxy not redirecting to https through Reverse Proxy IIS - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nuget-v3-proxy-not-redirecting-to-https-through-reverse-proxy-iis/12417/2/index.html): I have set up a Nexus Client which runs behind a reverse proxy redirecting http traffic to https. The reverse proxy is configured with IIS follwoing this guide: 
How to Configure IIS as a Reverse Proxy for Sonatype Produ&hellip; (195 words, Apr 18, 2024)
- [Unable to connect to Nexus apt repository - Sonatype Nexus Repository - Sonatype Community](/content/community/t/unable-to-connect-to-nexus-apt-repository/12442/index.html): I have a hosted apt repo configured in nexus which I am trying to configure in my local Debian machine. 
/etc/apt/sources.list.d/cust-repository.list file: 
deb [trusted=yes] https://nexusrepourl.org/repository/apt/ bull&hellip; (234 words, Apr 18, 2024)
- [Unable to connect to Nexus apt repository - Sonatype Nexus Repository - Sonatype Community](/content/community/t/unable-to-connect-to-nexus-apt-repository/12442/1/index.html): I have a hosted apt repo configured in nexus which I am trying to configure in my local Debian machine. 
/etc/apt/sources.list.d/cust-repository.list file: 
deb [trusted=yes] https://nexusrepourl.org/repository/apt/ bull&hellip; (228 words, Apr 18, 2024)
- [ICYMI: Shift Left With Our Latest Plugins and Integrations - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/icymi-shift-left-with-our-latest-plugins-and-integrations/12440/index.html): We’re excited to announce that we have multiple new integrations and plugins to help empower your development teams and get the most out of Sonatype Lifecycle: 

Sonatype for VS Code
Sonatype Lifecycle - ServiceNow Integ&hellip; (436 words, Apr 18, 2024)
- [ICYMI: Shift Left With Our Latest Plugins and Integrations - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/icymi-shift-left-with-our-latest-plugins-and-integrations/12440/1/index.html): We’re excited to announce that we have multiple new integrations and plugins to help empower your development teams and get the most out of Sonatype Lifecycle: 

Sonatype for VS Code
Sonatype Lifecycle - ServiceNow Integ&hellip; (349 words, Apr 18, 2024)
- [Nexus 3.67 not starting, no logs - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-3-67-not-starting-no-logs/12434/index.html): hello as stated in the title im having issues after updating nexus repository from 3.66.0-02 to 3.67.1-01, im running nexus as a service with user “nexus” before the update everything worked fine, thanks in advance (206 words, Apr 17, 2024)
- [Nexus 3.67 not starting, no logs - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-3-67-not-starting-no-logs/12434/1/index.html): hello as stated in the title im having issues after updating nexus repository from 3.66.0-02 to 3.67.1-01, im running nexus as a service with user “nexus” before the update everything worked fine, thanks in advance (211 words, Apr 17, 2024)
- [Nexus Hosted repository - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-hosted-repository/12430/index.html): I’ve encountered an issue with a Nexus hosted repository I set up. Previously, I had an older version of “example.jar” stored in the repository. Later, I manually uploaded an updated version of “example.jar” to the same &hellip; (358 words, Apr 17, 2024)
- [Nexus Hosted repository - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-hosted-repository/12430/1/index.html): I’ve encountered an issue with a Nexus hosted repository I set up. Previously, I had an older version of “example.jar” stored in the repository. Later, I manually uploaded an updated version of “example.jar” to the same &hellip; (358 words, Apr 17, 2024)
- [Deleted Nexus blobs remain on disk - Sonatype Nexus Repository - Sonatype Community](/content/community/t/deleted-nexus-blobs-remain-on-disk/12424/index.html): Hi, 
(v3.67.1) 
I’m seeing that blob stores deleted in the UI are still present on disk.  I’m not referring to repositories, which I’ve compacted successfully.  Deleted blob stores can’t be compacted (to nothing) because&hellip; (225 words, Apr 16, 2024)
- [Deleted Nexus blobs remain on disk - Sonatype Nexus Repository - Sonatype Community](/content/community/t/deleted-nexus-blobs-remain-on-disk/12424/1/index.html): Hi, 
(v3.67.1) 
I’m seeing that blob stores deleted in the UI are still present on disk.  I’m not referring to repositories, which I’ve compacted successfully.  Deleted blob stores can’t be compacted (to nothing) because&hellip; (163 words, Apr 16, 2024)
- [Offline repositories still used via group repositories - Sonatype Nexus Repository - Sonatype Community](/content/community/t/offline-repositories-still-used-via-group-repositories/12408/3/index.html): I have noticed that if you have a proxy repository which is uncheck the online checkbox and is still in a group repository that it is still used and requests are being sent. Then I see status saying “Offline - Remote Ava&hellip; (257 words, Apr 16, 2024)
- [Nuget v3 proxy not redirecting to https through Reverse Proxy IIS - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nuget-v3-proxy-not-redirecting-to-https-through-reverse-proxy-iis/12417/1/index.html): I have set up a Nexus Client which runs behind a reverse proxy redirecting http traffic to https. The reverse proxy is configured with IIS follwoing this guide: 
How to Configure IIS as a Reverse Proxy for Sonatype Produ&hellip; (193 words, Apr 16, 2024)
- [Is there any way to restrict access IP that hosts with Nexus Repository 3 can access? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/is-there-any-way-to-restrict-access-ip-that-hosts-with-nexus-repository-3-can-access/12415/index.html): version : Sonatype Nexus Repository 3.60.0 
summary 
when configured Sonatype Nexus Repository IQ Server 
If you do not have IP access control as shown in the document below, 
Port scanning using SSRF is possible. 
https&hellip; (336 words, Apr 16, 2024)
- [Is there any way to restrict access IP that hosts with Nexus Repository 3 can access? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/is-there-any-way-to-restrict-access-ip-that-hosts-with-nexus-repository-3-can-access/12415/1/index.html): version : Sonatype Nexus Repository 3.60.0 
summary 
when configured Sonatype Nexus Repository IQ Server 
If you do not have IP access control as shown in the document below, 
Port scanning using SSRF is possible. 
https&hellip; (415 words, Apr 16, 2024)
- [Disable html index of a repository/group - Sonatype Nexus Repository - Sonatype Community](/content/community/t/disable-html-index-of-a-repository-group/12386/2/index.html): How do I disable HTML INDEX for a repository/group on Nexus? (119 words, Apr 15, 2024)
- [Offline repositories still used via group repositories - Sonatype Nexus Repository - Sonatype Community](/content/community/t/offline-repositories-still-used-via-group-repositories/12408/index.html): I have noticed that if you have a proxy repository which is uncheck the online checkbox and is still in a group repository that it is still used and requests are being sent. Then I see status saying “Offline - Remote Ava&hellip; (255 words, Apr 15, 2024)
- [Offline repositories still used via group repositories - Sonatype Nexus Repository - Sonatype Community](/content/community/t/offline-repositories-still-used-via-group-repositories/12408/1/index.html): I have noticed that if you have a proxy repository which is uncheck the online checkbox and is still in a group repository that it is still used and requests are being sent. Then I see status saying “Offline - Remote Ava&hellip; (251 words, Apr 15, 2024)
- [Cleaning up /nexus-data/tmp - Sonatype Nexus Repository - Sonatype Community](/content/community/t/cleaning-up-nexus-data-tmp/12399/2/index.html): Hi all, I’m currently running Nexus as a docker container. The directory, inside the container, /data/tmp is using a large amount of data that appears to be just text files and I would like to clear them out or at least &hellip; (127 words, Apr 11, 2024)
- [Cleaning up /nexus-data/tmp - Sonatype Nexus Repository - Sonatype Community](/content/community/t/cleaning-up-nexus-data-tmp/12399/index.html): Hi all, I’m currently running Nexus as a docker container. The directory, inside the container, /data/tmp is using a large amount of data that appears to be just text files and I would like to clear them out or at least &hellip; (131 words, Apr 11, 2024)
- [Cleaning up /nexus-data/tmp - Sonatype Nexus Repository - Sonatype Community](/content/community/t/cleaning-up-nexus-data-tmp/12399/1/index.html): Hi all, I’m currently running Nexus as a docker container. The directory, inside the container, /data/tmp is using a large amount of data that appears to be just text files and I would like to clear them out or at least &hellip; (230 words, Apr 11, 2024)
- [Disable html index of a repository/group - Sonatype Nexus Repository - Sonatype Community](/content/community/t/disable-html-index-of-a-repository-group/12386/index.html): How do I disable HTML INDEX for a repository/group on Nexus? (39 words, Apr 8, 2024)
- [Disable html index of a repository/group - Sonatype Nexus Repository - Sonatype Community](/content/community/t/disable-html-index-of-a-repository-group/12386/1/index.html): How do I disable HTML INDEX for a repository/group on Nexus? (37 words, Apr 8, 2024)
- [How to update my nexus repository manager email address? - Central Repository - Sonatype Community](/content/community/t/how-to-update-my-nexus-repository-manager-email-address/12383/index.html): Hello there, 
I am the maintainer of the following repository: GitHub - voidburn/cron-expression-descriptor: A Java library that converts cron expressions into human readable descriptions (Maven Central: it.burning:cron-&hellip; (174 words, Apr 8, 2024)
- [How to update my nexus repository manager email address? - Central Repository - Sonatype Community](/content/community/t/how-to-update-my-nexus-repository-manager-email-address/12383/1/index.html): Hello there, 
I am the maintainer of the following repository: GitHub - voidburn/cron-expression-descriptor: A Java library that converts cron expressions into human readable descriptions (Maven Central: it.burning:cron-&hellip; (168 words, Apr 8, 2024)
- [How to upload .deb files using the jenkins pipeline and your credentials to the Nexus OSS - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/how-to-upload-deb-files-using-the-jenkins-pipeline-and-your-credentials-to-the-nexus-oss/7010/2/index.html): I I’m trying to use the Nexus repository to manage *.deb packages generated by jenkins, but when trying to upload these packages to nexus I’m getting a lot of errors, what is the best way to publish the packages in deb f&hellip; (224 words, Apr 5, 2024)
- [Update Your IQ Server License Threat Groups - Sonatype Labs - Sonatype Community](/content/community/t/update-your-iq-server-license-threat-groups/3094/35/index.html): The license threat group updater will apply the latest Sonatype provided license classification to your running IQ server’s license threat groups. This will alleviate any “License Threat Group not Assigned” policy violat&hellip; (617 words, Apr 3, 2024)
- [IQServer REST API for violation details - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/iqserver-rest-api-for-violation-details/12343/2/index.html): Reports API provides list of policy violations for a given application that includes policyId and a policyViolationId. I am unable to find an API that takes policyViolationId and respond with details of that specific vio&hellip; (192 words, Apr 2, 2024)
- [IQServer REST API for violation details - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/iqserver-rest-api-for-violation-details/12343/index.html): Reports API provides list of policy violations for a given application that includes policyId and a policyViolationId. I am unable to find an API that takes policyViolationId and respond with details of that specific vio&hellip; (192 words, Mar 29, 2024)
- [IQServer REST API for violation details - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/iqserver-rest-api-for-violation-details/12343/1/index.html): Reports API provides list of policy violations for a given application that includes policyId and a policyViolationId. I am unable to find an API that takes policyViolationId and respond with details of that specific vio&hellip; (196 words, Mar 29, 2024)
- [Publishing API returns 401 'Authentication Failed' with valid user token - Central Repository - Sonatype Community](/content/community/t/publishing-api-returns-401-authentication-failed-with-valid-user-token/12330/3/index.html): Yesterday, I started getting 401 ‘Authentication Failed’. However, I didn’t change anything on my build script, and I’ve been able to publish to Central Repository for 20+ days straight. 
I even generated a new user toke&hellip; (200 words, Mar 29, 2024)
- [Join us in 1 hour for March Office Hours - 10 a.m EDT! - Community Announcements - Sonatype Community](/content/community/t/join-us-in-1-hour-for-march-office-hours-10-a-m-edt/12331/index.html): Join us in one hour at 10 am EDT (7 am PDT | 2 pm GMT) for our monthly, customer-exclusive Office Hours . 
This month, we’ll be discussing the following topics: 

Sonatype/Atlassian Plugins: Jira Cloud, Jira Server &amp; B&hellip; (243 words, Mar 27, 2024)
- [Join us in 1 hour for March Office Hours - 10 a.m EDT! - Community Announcements - Sonatype Community](/content/community/t/join-us-in-1-hour-for-march-office-hours-10-a-m-edt/12331/1/index.html): Join us in one hour at 10 am EDT (7 am PDT | 2 pm GMT) for our monthly, customer-exclusive Office Hours . 
This month, we’ll be discussing the following topics: 

Sonatype/Atlassian Plugins: Jira Cloud, Jira Server &amp; B&hellip; (229 words, Mar 27, 2024)
- [Publishing API returns 401 'Authentication Failed' with valid user token - Central Repository - Sonatype Community](/content/community/t/publishing-api-returns-401-authentication-failed-with-valid-user-token/12330/index.html): Yesterday, I started getting 401 ‘Authentication Failed’. However, I didn’t change anything on my build script, and I’ve been able to publish to Central Repository for 20+ days straight. 
I even generated a new user toke&hellip; (215 words, Mar 27, 2024)
- [Not able to publish my components on Central SonaType - Central Repository - Sonatype Community](/content/community/t/not-able-to-publish-my-components-on-central-sonatype/12093/5/index.html): I am trying to publish my components to Maven Central SonaType Maven Central: Publishing. 
I have signed them with the keys generated via gpg. 
But It giving such errors like: 
My Deployment 

File path ‘io/github/niflhe&hellip; (318 words, Mar 27, 2024)
- [Nexus repository OSS vs PRO - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-repository-oss-vs-pro/12322/2/index.html): Hello, 
I am considering setting up a Nexus repository, and we anticipate approximately 250 developers to use it, with the need to download Docker files of 1TB or more. I am curious about any limitations on the number of&hellip; (277 words, Mar 26, 2024)
- [How to configure ldap in the nexus.properties file of Nexus Repository Manager 3 to take effect - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-to-configure-ldap-in-the-nexus-properties-file-of-nexus-repository-manager-3-to-take-effect/9512/4/index.html): I’m a novice. I don’t know how to set the configuration information of ldap to make it work in nexus. I’ve searched Google for a long time, but I haven’t found the answer I want. 
I referred to this article: Setting Adva&hellip; (194 words, Mar 26, 2024)
- [Nexus repository OSS vs PRO - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-repository-oss-vs-pro/12322/index.html): Hello, 
I am considering setting up a Nexus repository, and we anticipate approximately 250 developers to use it, with the need to download Docker files of 1TB or more. I am curious about any limitations on the number of&hellip; (283 words, Mar 26, 2024)
- [Nexus repository OSS vs PRO - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-repository-oss-vs-pro/12322/1/index.html): Hello, 
I am considering setting up a Nexus repository, and we anticipate approximately 250 developers to use it, with the need to download Docker files of 1TB or more. I am curious about any limitations on the number of&hellip; (277 words, Mar 26, 2024)
- [Error 500 when downloading package from group repository - Sonatype Nexus Repository - Sonatype Community](/content/community/t/error-500-when-downloading-package-from-group-repository/12318/4/index.html): Hello! We have a private proxy repository (A proxy repository → local other repository) and encountered a problem after upgrading from version 3.61.0 to version 3.66.0. A proxy repository became inaccessible in the group&hellip; (247 words, Mar 26, 2024)
- [Problem with Proprietary Components and npm packages - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/problem-with-proprietary-components-and-npm-packages/12303/3/index.html): I have a frontend application that is pulling a couple of proprietary dependencies from our nexus repository. 
Sonatype Lifecycle will flag these dependencies for critical policy violations against “License-None” because&hellip; (494 words, Mar 25, 2024)
- [Status code: 401, reason phrase: Unauthorized (401) - Central Repository - Sonatype Community](/content/community/t/status-code-401-reason-phrase-unauthorized-401/12315/3/index.html): Hi Sonatype community, 
I am sorry, but I can’t anymore. After following the article on how to publish to maven central, maven deploy still refuses to corporate with me. To my setup: I have a settings.xml file with the t&hellip; (418 words, Mar 25, 2024)
- [Status code: 401, reason phrase: Unauthorized (401) - Central Repository - Sonatype Community](/content/community/t/status-code-401-reason-phrase-unauthorized-401/12315/2/index.html): Hi Sonatype community, 
I am sorry, but I can’t anymore. After following the article on how to publish to maven central, maven deploy still refuses to corporate with me. To my setup: I have a settings.xml file with the t&hellip; (238 words, Mar 25, 2024)
- [Error 500 when downloading package from group repository - Sonatype Nexus Repository - Sonatype Community](/content/community/t/error-500-when-downloading-package-from-group-repository/12318/index.html): Hello! We have a private proxy repository (A proxy repository → local other repository) and encountered a problem after upgrading from version 3.61.0 to version 3.66.0. A proxy repository became inaccessible in the group&hellip; (257 words, Mar 24, 2024)
- [Error 500 when downloading package from group repository - Sonatype Nexus Repository - Sonatype Community](/content/community/t/error-500-when-downloading-package-from-group-repository/12318/1/index.html): Hello! We have a private proxy repository (A proxy repository → local other repository) and encountered a problem after upgrading from version 3.61.0 to version 3.66.0. A proxy repository became inaccessible in the group&hellip; (263 words, Mar 24, 2024)
- [Status code: 401, reason phrase: Unauthorized (401) - Central Repository - Sonatype Community](/content/community/t/status-code-401-reason-phrase-unauthorized-401/12315/index.html): Hi Sonatype community, 
I am sorry, but I can’t anymore. After following the article on how to publish to maven central, maven deploy still refuses to corporate with me. To my setup: I have a settings.xml file with the t&hellip; (270 words, Mar 23, 2024)
- [Status code: 401, reason phrase: Unauthorized (401) - Central Repository - Sonatype Community](/content/community/t/status-code-401-reason-phrase-unauthorized-401/12315/1/index.html): Hi Sonatype community, 
I am sorry, but I can’t anymore. After following the article on how to publish to maven central, maven deploy still refuses to corporate with me. To my setup: I have a settings.xml file with the t&hellip; (242 words, Mar 23, 2024)
- [Maven.java.net certificate expired - Sonatype Nexus Repository - Sonatype Community](/content/community/t/maven-java-net-certificate-expired/12311/index.html): Does anyone know where I can report an issue about the maven.java.net repository. Their certificate has expired: 
[WARNING] Failed to access maven repository https://maven.java.net/content/repositories/snapshots 
javax.n&hellip; (66 words, Mar 22, 2024)
- [Maven.java.net certificate expired - Sonatype Nexus Repository - Sonatype Community](/content/community/t/maven-java-net-certificate-expired/12311/1/index.html): Does anyone know where I can report an issue about the maven.java.net repository. Their certificate has expired: 
[WARNING] Failed to access maven repository https://maven.java.net/content/repositories/snapshots 
javax.n&hellip; (62 words, Mar 22, 2024)
- [Problem with Proprietary Components and npm packages - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/problem-with-proprietary-components-and-npm-packages/12303/index.html): I have a frontend application that is pulling a couple of proprietary dependencies from our nexus repository. 
Sonatype Lifecycle will flag these dependencies for critical policy violations against “License-None” because&hellip; (494 words, Mar 21, 2024)
- [Problem with Proprietary Components and npm packages - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/problem-with-proprietary-components-and-npm-packages/12303/1/index.html): I have a frontend application that is pulling a couple of proprietary dependencies from our nexus repository. 
Sonatype Lifecycle will flag these dependencies for critical policy violations against “License-None” because&hellip; (503 words, Mar 21, 2024)
- [401 Unauthorized when trying to publish artifacts to sonatype repository with new url with snapshots as well as release - Sonatype Nexus Repository - Sonatype Community](/content/community/t/401-unauthorized-when-trying-to-publish-artifacts-to-sonatype-repository-with-new-url-with-snapshots-as-well-as-release/12280/2/index.html): This is the content of my build.gradle.kts file 
import org.gradle.api.publish.maven.MavenPublication 
import org.gradle.api.tasks.bundling.Jar 
import java.util.* 
plugins { 
id(“maven-publish”) 
id(“signing”) 
} 
// St&hellip; (357 words, Mar 20, 2024)
- [Join us for March Office Hours - Wednesday, March 27th at 10am EDT - Community Announcements - Sonatype Community](/content/community/t/join-us-for-march-office-hours-wednesday-march-27th-at-10am-edt/12292/2/index.html): Join us Wednesday, March 27th at 10 am EDT (7 am PDT | 2 pm GMT) for our monthly, customer-exclusive Office Hours . 
This month, we’ll be discussing the following topics: 

Sonatype/Atlassian Plugins: Jira Cloud, Jira &hellip; (221 words, Mar 20, 2024)
- [Join us for March Office Hours - Wednesday, March 27th at 10am EDT - Community Announcements - Sonatype Community](/content/community/t/join-us-for-march-office-hours-wednesday-march-27th-at-10am-edt/12292/1/index.html): Join us Wednesday, March 27th at 10 am EDT (7 am PDT | 2 pm GMT) for our monthly, customer-exclusive Office Hours . 
This month, we’ll be discussing the following topics: 

Sonatype/Atlassian Plugins: Jira Cloud, Jira &hellip; (133 words, Mar 20, 2024)
- [Caused by: java.io.IOException - Sonatype Nexus Repository - Sonatype Community](/content/community/t/caused-by-java-io-ioexception/12286/index.html): Hi All, 
could you please help for below error while running shedule task getting this error 
Caused by: java.io.IOException: An established connection was aborted by the software in your host machine 
Caused by: java.io&hellip; (170 words, Mar 20, 2024)
- [401 Unauthorized when trying to publish artifacts to sonatype repository with new url with snapshots as well as release - Sonatype Nexus Repository - Sonatype Community](/content/community/t/401-unauthorized-when-trying-to-publish-artifacts-to-sonatype-repository-with-new-url-with-snapshots-as-well-as-release/12280/index.html): This is the content of my build.gradle.kts file 
import org.gradle.api.publish.maven.MavenPublication 
import org.gradle.api.tasks.bundling.Jar 
import java.util.* 
plugins { 
id(“maven-publish”) 
id(“signing”) 
} 
// St&hellip; (326 words, Mar 19, 2024)
- [401 Unauthorized when trying to publish artifacts to sonatype repository with new url with snapshots as well as release - Sonatype Nexus Repository - Sonatype Community](/content/community/t/401-unauthorized-when-trying-to-publish-artifacts-to-sonatype-repository-with-new-url-with-snapshots-as-well-as-release/12280/1/index.html): This is the content of my build.gradle.kts file 
import org.gradle.api.publish.maven.MavenPublication 
import org.gradle.api.tasks.bundling.Jar 
import java.util.* 
plugins { 
id(“maven-publish”) 
id(“signing”) 
} 
// St&hellip; (358 words, Mar 19, 2024)
- [How to hide nexus version header - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-to-hide-nexus-version-header/11845/2/index.html): Hello. 
when i do “curl -I localhost:[port]” 

HTTP/1.1 200 OK 
Server : Nexus/3.40.1-01 (OSS) 
… 

so i want to hide Server header. because it is not secure. 
help me please (139 words, Mar 18, 2024)
- [Upgrade from v3.20.1 to v3.65.0 with oritentdb errors - Sonatype Nexus Repository - Sonatype Community](/content/community/t/upgrade-from-v3-20-1-to-v3-65-0-with-oritentdb-errors/12272/index.html): hi, we are upgrading nxrm oss from v3.20.1 to v3.65.0. 
but wo got a lot of  oritentdb errors. 
when nxrm is up, nothing can be seen in repositories from UI. It seems that database has not been migrated properly. 

Error&hellip; (285 words, Mar 18, 2024)
- [Upgrade from v3.20.1 to v3.65.0 with oritentdb errors - Sonatype Nexus Repository - Sonatype Community](/content/community/t/upgrade-from-v3-20-1-to-v3-65-0-with-oritentdb-errors/12272/1/index.html): hi, we are upgrading nxrm oss from v3.20.1 to v3.65.0. 
but wo got a lot of  oritentdb errors. 
when nxrm is up, nothing can be seen in repositories from UI. It seems that database has not been migrated properly. 

Error&hellip; (317 words, Mar 18, 2024)
- [Nexus3-ha installation failed on RKE Kubernetes - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus3-ha-installation-failed-on-rke-kubernetes/12268/3/index.html): I was trying to install the Nexus on the RKE Kubernetes cluster on-prem using Helm … 
URL :  nxrm-ha 66.0.0 · sonatype/sonatype 
But I got the below error — 
  
I hope Nexus is free and open source, so why is it looking &hellip; (103 words, Mar 15, 2024)
- [Nexus3-ha installation failed on RKE Kubernetes - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus3-ha-installation-failed-on-rke-kubernetes/12268/index.html): I was trying to install the Nexus on the RKE Kubernetes cluster on-prem using Helm … 
URL :  nxrm-ha 66.0.0 · sonatype/sonatype 
But I got the below error — 
  
I hope Nexus is free and open source, so why is it looking &hellip; (170 words, Mar 15, 2024)
- [Nexus3-ha installation failed on RKE Kubernetes - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus3-ha-installation-failed-on-rke-kubernetes/12268/1/index.html): I was trying to install the Nexus on the RKE Kubernetes cluster on-prem using Helm … 
URL :  nxrm-ha 66.0.0 · sonatype/sonatype 
But I got the below error — 
  
I hope Nexus is free and open source, so why is it looking &hellip; (103 words, Mar 15, 2024)
- [Error downloading artifacts from maven hosted repository after 2 weeks from upload - Sonatype Nexus Repository - Sonatype Community](/content/community/t/error-downloading-artifacts-from-maven-hosted-repository-after-2-weeks-from-upload/12188/3/index.html): Dear Support team and Nexus community, 
Your support please for below error while downloading artifacts from maven hosted repository after 2 weeks from upload. 
1- admin org.sonatype.nexus.blobstore.file.FileBlobStore - &hellip; (159 words, Mar 14, 2024)
- [Gettiing 401 unathorized error for image replication - Sonatype Nexus Repository - Sonatype Community](/content/community/t/gettiing-401-unathorized-error-for-image-replication/12245/3/index.html): Hi Team, 
We have set up a proxy Docker registry in Nexus, with a remote repository being proxied from https://registry.opencode.de. In Harbor, we configured a replication rule with a pull-based replication mode. The sou&hellip; (350 words, Mar 14, 2024)
- [What is the difference between Mixed policy and Snapshot policy in Maven2 repositories? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/what-is-the-difference-between-mixed-policy-and-snapshot-policy-in-maven2-repositories/12233/3/index.html): Hello, 
I have a naive question about the difference between Mixed policy and Snapshot policy in maven2 repositories. 
According to the document, 

The Mixed version policy allows you to support both approaches within on&hellip; (174 words, Mar 14, 2024)
- [Issue with nexus shedule task plugin - Sonatype Nexus Repository - Sonatype Community](/content/community/t/issue-with-nexus-shedule-task-plugin/12248/index.html): Hi All, 
we have schedule task for deleting old snapshots for every day, but in task its showing like waiting and also I checked in log too but i could identify the root cause can you please help on this to know what sho&hellip; (178 words, Mar 12, 2024)
- [Issue with nexus shedule task plugin - Sonatype Nexus Repository - Sonatype Community](/content/community/t/issue-with-nexus-shedule-task-plugin/12248/1/index.html): Hi All, 
we have schedule task for deleting old snapshots for every day, but in task its showing like waiting and also I checked in log too but i could identify the root cause can you please help on this to know what sho&hellip; (75 words, Mar 12, 2024)
- [Gettiing 401 unathorized error for image replication - Sonatype Nexus Repository - Sonatype Community](/content/community/t/gettiing-401-unathorized-error-for-image-replication/12245/index.html): Hi Team, 
We have set up a proxy Docker registry in Nexus, with a remote repository being proxied from https://registry.opencode.de. In Harbor, we configured a replication rule with a pull-based replication mode. The sou&hellip; (427 words, Mar 12, 2024)
- [Gettiing 401 unathorized error for image replication - Sonatype Nexus Repository - Sonatype Community](/content/community/t/gettiing-401-unathorized-error-for-image-replication/12245/1/index.html): Hi Team, 
We have set up a proxy Docker registry in Nexus, with a remote repository being proxied from https://registry.opencode.de. In Harbor, we configured a replication rule with a pull-based replication mode. The sou&hellip; (276 words, Mar 12, 2024)
- [Nexus Repository OSS 3.12.1, and LTS version support - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-repository-oss-3-12-1-and-lts-version-support/12227/3/index.html): Dear Nexus Support, 
I hope this email finds you well. We are currently using Nexus Repository version 3.12.1 in our environment. As part of our maintenance planning, we would like to inquire about the end of life date f&hellip; (309 words, Mar 11, 2024)
- [What is the difference between Mixed policy and Snapshot policy in Maven2 repositories? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/what-is-the-difference-between-mixed-policy-and-snapshot-policy-in-maven2-repositories/12233/2/index.html): Hello, 
I have a naive question about the difference between Mixed policy and Snapshot policy in maven2 repositories. 
According to the document, 

The Mixed version policy allows you to support both approaches within on&hellip; (174 words, Mar 11, 2024)
- [Ivy compiled node module not able to upload to nexus - Sonatype Nexus Repository - Sonatype Community](/content/community/t/ivy-compiled-node-module-not-able-to-upload-to-nexus/12235/2/index.html): Hello , I have a node-angular project which is compiled from ivy complier and i want to upload it to my self hosted nexus repository. I have done the prequisite for setting up the repository and user. When i build the co&hellip; (267 words, Mar 11, 2024)
- [Unable to do docker login from linux machine to nexus docker repository - Sonatype Nexus Repository - Sonatype Community](/content/community/t/unable-to-do-docker-login-from-linux-machine-to-nexus-docker-repository/12237/index.html): i have installed free version of sonatype 3.x and created docker repo(allowed port-8142 for http and 8143 for https) to host my docker images, i am trying to do docker login from gitlab runner which has RHEL but facing i&hellip; (169 words, Mar 11, 2024)
- [What is the difference between Mixed policy and Snapshot policy in Maven2 repositories? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/what-is-the-difference-between-mixed-policy-and-snapshot-policy-in-maven2-repositories/12233/index.html): Hello, 
I have a naive question about the difference between Mixed policy and Snapshot policy in maven2 repositories. 
According to the document, 

The Mixed version policy allows you to support both approaches within on&hellip; (174 words, Mar 11, 2024)
- [What is the difference between Mixed policy and Snapshot policy in Maven2 repositories? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/what-is-the-difference-between-mixed-policy-and-snapshot-policy-in-maven2-repositories/12233/1/index.html): Hello, 
I have a naive question about the difference between Mixed policy and Snapshot policy in maven2 repositories. 
According to the document, 

The Mixed version policy allows you to support both approaches within on&hellip; (174 words, Mar 11, 2024)
- [Can't transition from trial to paid plan - Sonatype Nexus Repository - Sonatype Community](/content/community/t/cant-transition-from-trial-to-paid-plan/12231/index.html): Hi everyone, 
The company I work for subscribed to the Nexus Pro plan, and we started with a trial license; But now the license is expired and we can’t seem to find where to transition to a fully paid plan, and our Nexus&hellip; (117 words, Mar 11, 2024)
- [Can't transition from trial to paid plan - Sonatype Nexus Repository - Sonatype Community](/content/community/t/cant-transition-from-trial-to-paid-plan/12231/1/index.html): Hi everyone, 
The company I work for subscribed to the Nexus Pro plan, and we started with a trial license; But now the license is expired and we can’t seem to find where to transition to a fully paid plan, and our Nexus&hellip; (188 words, Mar 11, 2024)
- [Nexus Repository OSS 3.12.1, and LTS version support - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-repository-oss-3-12-1-and-lts-version-support/12227/1/index.html): Dear Nexus Support, 
I hope this email finds you well. We are currently using Nexus Repository version 3.12.1 in our environment. As part of our maintenance planning, we would like to inquire about the end of life date f&hellip; (309 words, Mar 8, 2024)
- [Repository Firewall Best Practices: Policy Compliant Component Selection - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/repository-firewall-best-practices-policy-compliant-component-selection/12225/index.html): Protecting yourself from software supply chain attack with Sonatype Repository Firewall is a bit of a balancing act. Quarantining components protects you from risk, but it also creates some development friction. Quaranti&hellip; (694 words, Mar 8, 2024)
- [Help - C# - API - Upload Component - No assets found in upload - Sonatype Nexus Repository - Sonatype Community](/content/community/t/help-c-api-upload-component-no-assets-found-in-upload/12221/index.html): I am new to Nexus and I am trying to upload a file to a Nexus Repo. I have pulled the swagger endpoint and looked through the help documentation and everything seems to be correct, in fact it worked once prior to just st&hellip; (639 words, Mar 8, 2024)
- [IQ Firewall - When waivers expire, vulnerable packages do not revert to a quarantined status - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/iq-firewall-when-waivers-expire-vulnerable-packages-do-not-revert-to-a-quarantined-status/12215/2/index.html): When granted waivers in IQ Firewall expire, vulnerable packages do not revert to a quarantined status. Is there a way to use a firewall API to set the quarantined attribute back to “true” once the waver expires; or is th&hellip; (214 words, Mar 8, 2024)
- [IQ Firewall - When waivers expire, vulnerable packages do not revert to a quarantined status - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/iq-firewall-when-waivers-expire-vulnerable-packages-do-not-revert-to-a-quarantined-status/12215/index.html): When granted waivers in IQ Firewall expire, vulnerable packages do not revert to a quarantined status. Is there a way to use a firewall API to set the quarantined attribute back to “true” once the waver expires; or is th&hellip; (220 words, Mar 7, 2024)
- [IQ Firewall - When waivers expire, vulnerable packages do not revert to a quarantined status - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/iq-firewall-when-waivers-expire-vulnerable-packages-do-not-revert-to-a-quarantined-status/12215/1/index.html): When granted waivers in IQ Firewall expire, vulnerable packages do not revert to a quarantined status. Is there a way to use a firewall API to set the quarantined attribute back to “true” once the waver expires; or is th&hellip; (216 words, Mar 7, 2024)
- [How to handle $basesearch in a Nexus Proxy Repo - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-to-handle-basesearch-in-a-nexus-proxy-repo/12205/4/index.html): We are using Oracle Linux 9 and are introducing Nexus as a local proxy repo for the yum/dnf repos. Idea is to proxy those we need then combine them to a single group repo that we use from the servers. 
When creating the &hellip; (290 words, Mar 7, 2024)
- [REST API to identify Stable Maven Version of any dependency - Central Repository - Sonatype Community](/content/community/t/rest-api-to-identify-stable-maven-version-of-any-dependency/12211/1/index.html): Do we have any REST API from Sonatype that gives long tern stable Maven Version excluding apha and beta versions from Maven web repository. 
If anyone knows any other API please comment. 
Thanks (120 words, Mar 7, 2024)
- [Raw proxy repository pointing to sonatype public repository? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/raw-proxy-repository-pointing-to-sonatype-public-repository/12208/index.html): I want to know that it’s possible to create a raw proxy repository in my Nexus3 that points to Sonatype public repo. 
Context: I have an ansible playbook that provision a Nexus instance, to do that, the playbook obtains &hellip; (123 words, Mar 7, 2024)
- [Raw proxy repository pointing to sonatype public repository? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/raw-proxy-repository-pointing-to-sonatype-public-repository/12208/1/index.html): I want to know that it’s possible to create a raw proxy repository in my Nexus3 that points to Sonatype public repo. 
Context: I have an ansible playbook that provision a Nexus instance, to do that, the playbook obtains &hellip; (123 words, Mar 7, 2024)
- [How to handle $basesearch in a Nexus Proxy Repo - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-to-handle-basesearch-in-a-nexus-proxy-repo/12205/index.html): We are using Oracle Linux 9 and are introducing Nexus as a local proxy repo for the yum/dnf repos. Idea is to proxy those we need then combine them to a single group repo that we use from the servers. 
When creating the &hellip; (279 words, Mar 7, 2024)
- [How to handle $basesearch in a Nexus Proxy Repo - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-to-handle-basesearch-in-a-nexus-proxy-repo/12205/1/index.html): We are using Oracle Linux 9 and are introducing Nexus as a local proxy repo for the yum/dnf repos. Idea is to proxy those we need then combine them to a single group repo that we use from the servers. 
When creating the &hellip; (258 words, Mar 7, 2024)
- [Nexus Repository integration with Azure Devops - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-repository-integration-with-azure-devops/12198/3/index.html): I wonder if it is possible to deploy .net artifact using Azure Devops to Nexus repository. (157 words, Mar 6, 2024)
- [Nexus Remote Repo for Homebrew on MacOS - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-remote-repo-for-homebrew-on-macos/10333/3/index.html): Is it possible to use Nexus Pro as remote repo for homebrew? 
I mean like jfrog artefactory https://jfrog.com/knowledge-base/how-to-setup-a-remote-homebrew-repository/ 
Homebrew is the biggest Package Manager under MacOS&hellip; (97 words, Mar 6, 2024)
- [Exploit and Zero-Day information for vulnerabilities - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/exploit-and-zero-day-information-for-vulnerabilities/12177/3/index.html): Hi, 
are there information in Nexus IQ of existing exploits or zero-day attacks for a vulnerability? 
I mean something like grapping information from Known Exploited Vulnerabilities Catalog | CISA. 
Greets (97 words, Mar 6, 2024)
- [Exploit and Zero-Day information for vulnerabilities - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/exploit-and-zero-day-information-for-vulnerabilities/12177/2/index.html): Hi, 
are there information in Nexus IQ of existing exploits or zero-day attacks for a vulnerability? 
I mean something like grapping information from Known Exploited Vulnerabilities Catalog | CISA. 
Greets (97 words, Mar 6, 2024)
- [Nexus Repository integration with Azure Devops - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-repository-integration-with-azure-devops/12198/1/index.html): I wonder if it is possible to deploy .net artifact using Azure Devops to Nexus repository. (160 words, Mar 6, 2024)
- [LDAP configuration in nexus.properties - Sonatype Nexus Repository - Sonatype Community](/content/community/t/ldap-configuration-in-nexus-properties/12192/3/index.html): Hello, 
since a couple of days I’m trying to configure our LDAP server inside the nexus.properties. 
But it’s very difficult to find any helpful documentation or any kind of example. 
I’m using the sonatype/nexus3 Docker&hellip; (234 words, Mar 5, 2024)
- [Nexus Repository WebUI stuck at Initializing - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-repository-webui-stuck-at-initializing/5946/8/index.html): Have just installed the Nexus Repository Manager v3.29.2-02 on a RHEL 8.3 x86_64 physical server with plenty of RAM (124 GB) and plenty of CPU (16). 
Followed the installation documentation and the install went without e&hellip; (504 words, Mar 5, 2024)
- [LDAP configuration in nexus.properties - Sonatype Nexus Repository - Sonatype Community](/content/community/t/ldap-configuration-in-nexus-properties/12192/index.html): Hello, 
since a couple of days I’m trying to configure our LDAP server inside the nexus.properties. 
But it’s very difficult to find any helpful documentation or any kind of example. 
I’m using the sonatype/nexus3 Docker&hellip; (221 words, Mar 5, 2024)
- [LDAP configuration in nexus.properties - Sonatype Nexus Repository - Sonatype Community](/content/community/t/ldap-configuration-in-nexus-properties/12192/1/index.html): Hello, 
since a couple of days I’m trying to configure our LDAP server inside the nexus.properties. 
But it’s very difficult to find any helpful documentation or any kind of example. 
I’m using the sonatype/nexus3 Docker&hellip; (214 words, Mar 5, 2024)
- [Proxy repository taking precedence over Hosted when retrieving packages - Sonatype Nexus Repository - Sonatype Community](/content/community/t/proxy-repository-taking-precedence-over-hosted-when-retrieving-packages/12184/4/index.html): Hello, 
I’m facing a very peculiar issue when fetching a package from a Nexus Group repository. 
For context, here’s the current structure of our repositories: 
“Group” npm repository 
├── “Proxy” npm repository 
└── “Ho&hellip; (631 words, Mar 4, 2024)
- [Error downloading artifacts from maven hosted repository after 2 weeks from upload - Sonatype Nexus Repository - Sonatype Community](/content/community/t/error-downloading-artifacts-from-maven-hosted-repository-after-2-weeks-from-upload/12188/index.html): Dear Support team and Nexus community, 
Your support please for below error while downloading artifacts from maven hosted repository after 2 weeks from upload. 
1- admin org.sonatype.nexus.blobstore.file.FileBlobStore - &hellip; (22 words, Mar 3, 2024)
- [Error downloading artifacts from maven hosted repository after 2 weeks from upload - Sonatype Nexus Repository - Sonatype Community](/content/community/t/error-downloading-artifacts-from-maven-hosted-repository-after-2-weeks-from-upload/12188/1/index.html): Dear Support team and Nexus community, 
Your support please for below error while downloading artifacts from maven hosted repository after 2 weeks from upload. 
1- admin org.sonatype.nexus.blobstore.file.FileBlobStore - &hellip; (157 words, Mar 3, 2024)
- [Proxy repository taking precedence over Hosted when retrieving packages - Sonatype Nexus Repository - Sonatype Community](/content/community/t/proxy-repository-taking-precedence-over-hosted-when-retrieving-packages/12184/index.html): Hello, 
I’m facing a very peculiar issue when fetching a package from a Nexus Group repository. 
For context, here’s the current structure of our repositories: 
“Group” npm repository 
├── “Proxy” npm repository 
└── “Ho&hellip; (593 words, Mar 1, 2024)
- [Proxy repository taking precedence over Hosted when retrieving packages - Sonatype Nexus Repository - Sonatype Community](/content/community/t/proxy-repository-taking-precedence-over-hosted-when-retrieving-packages/12184/1/index.html): Hello, 
I’m facing a very peculiar issue when fetching a package from a Nexus Group repository. 
For context, here’s the current structure of our repositories: 
“Group” npm repository 
├── “Proxy” npm repository 
└── “Ho&hellip; (593 words, Mar 1, 2024)
- [How to find out the size of an image in the repository? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-to-find-out-the-size-of-an-image-in-the-repository/12180/index.html): Hello, do I understand correctly that the docker image in the hosted docker nexus and the same image:tag on the local host “docker pull image:tag” has a different size?
How can I see the volume of an image in the Nexus &hellip; (362 words, Mar 1, 2024)
- [How to find out the size of an image in the repository? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-to-find-out-the-size-of-an-image-in-the-repository/12180/1/index.html): Hello, do I understand correctly that the docker image in the hosted docker nexus and the same image:tag on the local host “docker pull image:tag” has a different size?
How can I see the volume of an image in the Nexus &hellip; (353 words, Mar 1, 2024)
- [Exploit and Zero-Day information for vulnerabilities - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/exploit-and-zero-day-information-for-vulnerabilities/12177/index.html): Hi, 
are there information in Nexus IQ of existing exploits or zero-day attacks for a vulnerability? 
I mean something like grapping information from Known Exploited Vulnerabilities Catalog | CISA. 
Greets (97 words, Mar 1, 2024)
- [Exploit and Zero-Day information for vulnerabilities - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/exploit-and-zero-day-information-for-vulnerabilities/12177/1/index.html): Hi, 
are there information in Nexus IQ of existing exploits or zero-day attacks for a vulnerability? 
I mean something like grapping information from Known Exploited Vulnerabilities Catalog | CISA. 
Greets (103 words, Mar 1, 2024)
- [Tekton tasks pipeline with Maven to upload build images - Sonatype Nexus Repository - Sonatype Community](/content/community/t/tekton-tasks-pipeline-with-maven-to-upload-build-images/12173/index.html): Hi, 
Does anyone have experience of building a Tekton pipeline using maven and buildah tasks? 
I’m running a simple java springboot app as a proof of concept. Running on an OpenShift platform, but kubernetes examples wou&hellip; (91 words, Feb 29, 2024)
- [Tekton tasks pipeline with Maven to upload build images - Sonatype Nexus Repository - Sonatype Community](/content/community/t/tekton-tasks-pipeline-with-maven-to-upload-build-images/12173/1/index.html): Hi, 
Does anyone have experience of building a Tekton pipeline using maven and buildah tasks? 
I’m running a simple java springboot app as a proof of concept. Running on an OpenShift platform, but kubernetes examples wou&hellip; (87 words, Feb 29, 2024)
- [S3 Storage increased 10x over 8 months - Sonatype Nexus Repository - Sonatype Community](/content/community/t/s3-storage-increased-10x-over-8-months/12171/index.html): Previously our nexus repo bucket was stable at 2TB, early July we upgraded the version of Nexus to 3.32.0-03 from 3.17.0-01. The date of this coincides with the increase in storage. 
  
I’ve used the S3 Storagelens to ge&hellip; (866 words, Feb 29, 2024)
- [S3 Storage increased 10x over 8 months - Sonatype Nexus Repository - Sonatype Community](/content/community/t/s3-storage-increased-10x-over-8-months/12171/1/index.html): Previously our nexus repo bucket was stable at 2TB, early July we upgraded the version of Nexus to 3.32.0-03 from 3.17.0-01. The date of this coincides with the increase in storage. 
  
I’ve used the S3 Storagelens to ge&hellip; (866 words, Feb 29, 2024)
- [Update Your IQ Server License Threat Groups - Sonatype Labs - Sonatype Community](/content/community/t/update-your-iq-server-license-threat-groups/3094/33/index.html): The license threat group updater will apply the latest Sonatype provided license classification to your running IQ server’s license threat groups. This will alleviate any “License Threat Group not Assigned” policy violat&hellip; (687 words, Feb 28, 2024)
- [Get a list of all the packages in my repository exceeding the limit of 250 versions - Sonatype Nexus Repository - Sonatype Community](/content/community/t/get-a-list-of-all-the-packages-in-my-repository-exceeding-the-limit-of-250-versions/11900/4/index.html): Hello everyone, 
Do you know how I can get a complete list of my packages, or at least just the names of them. 
I’m currently using npm registry API, but there are issues with pagination as it skips packages randomly and&hellip; (187 words, Feb 28, 2024)
- [Publishing static sites archives (React/Nextjs)? - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/publishing-static-sites-archives-react-nextjs/12147/4/index.html): In the end of the build of React or Next.js I have a static site (a directory with HTML/CSS/JS/fonts/jpeg files). 
I want to “release” the site to Nexus repository. 
I don’t understand package/repository format to choose&hellip; (347 words, Feb 27, 2024)
- [Publishing static sites archives (React/Nextjs)? - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/publishing-static-sites-archives-react-nextjs/12147/3/index.html): In the end of the build of React or Next.js I have a static site (a directory with HTML/CSS/JS/fonts/jpeg files). 
I want to “release” the site to Nexus repository. 
I don’t understand package/repository format to choose&hellip; (347 words, Feb 26, 2024)
- [Publishing static sites archives (React/Nextjs)? - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/publishing-static-sites-archives-react-nextjs/12147/2/index.html): In the end of the build of React or Next.js I have a static site (a directory with HTML/CSS/JS/fonts/jpeg files). 
I want to “release” the site to Nexus repository. 
I don’t understand package/repository format to choose&hellip; (347 words, Feb 26, 2024)
- [Publishing static sites archives (React/Nextjs)? - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/publishing-static-sites-archives-react-nextjs/12147/index.html): In the end of the build of React or Next.js I have a static site (a directory with HTML/CSS/JS/fonts/jpeg files). 
I want to “release” the site to Nexus repository. 
I don’t understand package/repository format to choose&hellip; (347 words, Feb 25, 2024)
- [Publishing static sites archives (React/Nextjs)? - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/publishing-static-sites-archives-react-nextjs/12147/1/index.html): In the end of the build of React or Next.js I have a static site (a directory with HTML/CSS/JS/fonts/jpeg files). 
I want to “release” the site to Nexus repository. 
I don’t understand package/repository format to choose&hellip; (347 words, Feb 25, 2024)
- [How can I find the number of components in each repository instance(for example，maven- release，npm-hosted)? - Sonatype Exchange / Sonatype Exchange Discussion - Sonatype Community](/content/community/t/how-can-i-find-the-number-of-components-in-each-repository-instance-for-example-maven-release-npm-hosted/12111/7/index.html): How can I find the number of components in each repository instance（for example，maven- release，npm-hosted ）, and how can I get a list of components for a repository instance? (441 words, Feb 23, 2024)
- [Join us in 1 hour for February Office Hours! - Community Announcements - Sonatype Community](/content/community/t/join-us-in-1-hour-for-february-office-hours/12137/2/index.html): Join us in one hour at 10 am EST (7 am PST | 3 pm GMT) for our monthly, customer-exclusive Office Hours! 
This month, we’ll be discussing the following topics: 

February Learn Package: Just Show Me Videos
Sonatype Dev&hellip; (219 words, Feb 22, 2024)
- [Join us in 1 hour for February Office Hours! - Community Announcements - Sonatype Community](/content/community/t/join-us-in-1-hour-for-february-office-hours/12137/index.html): Join us in one hour at 10 am EST (7 am PST | 3 pm GMT) for our monthly, customer-exclusive Office Hours! 
This month, we’ll be discussing the following topics: 

February Learn Package: Just Show Me Videos
Sonatype Dev&hellip; (192 words, Feb 22, 2024)
- [Join us in 1 hour for February Office Hours! - Community Announcements - Sonatype Community](/content/community/t/join-us-in-1-hour-for-february-office-hours/12137/1/index.html): Join us in one hour at 10 am EST (7 am PST | 3 pm GMT) for our monthly, customer-exclusive Office Hours! 
This month, we’ll be discussing the following topics: 

February Learn Package: Just Show Me Videos
Sonatype Dev&hellip; (197 words, Feb 22, 2024)
- [How to get the last scan date (not CM or re-evaluation)? - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/how-to-get-the-last-scan-date-not-cm-or-re-evaluation/12136/1/index.html): Hello everyone, 
I am using IQ Server with Continuous Monitoring on the released applications so when I look at the reports, they are always dated less than 24 hours ago. 
But I need to know if the BOM is really the BOM &hellip; (199 words, Feb 22, 2024)
- [How to store locally Nexus credentials? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-to-store-locally-nexus-credentials/12134/index.html): Hello, 
I need CMake download artefacts on a Nexus server, but I don’t want to provide any L/P. I’d like the access be locally granted by credentials stored by the client PC wishing download the artefact. Because I don’t&hellip; (94 words, Feb 22, 2024)
- [How to store locally Nexus credentials? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-to-store-locally-nexus-credentials/12134/1/index.html): Hello, 
I need CMake download artefacts on a Nexus server, but I don’t want to provide any L/P. I’d like the access be locally granted by credentials stored by the client PC wishing download the artefact. Because I don’t&hellip; (156 words, Feb 22, 2024)
- [Does Nexus support Arm64 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/does-nexus-support-arm64/12129/2/index.html): I want to run Nexus on an instance in a Graviton EC2 environment. 
Does it support arm64? 
If so, is there a document on which version is supported starting? 
I can’t find it. (153 words, Feb 22, 2024)
- [Does Nexus support Arm64 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/does-nexus-support-arm64/12129/index.html): I want to run Nexus on an instance in a Graviton EC2 environment. 
Does it support arm64? 
If so, is there a document on which version is supported starting? 
I can’t find it. (105 words, Feb 22, 2024)
- [Does Nexus support Arm64 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/does-nexus-support-arm64/12129/1/index.html): I want to run Nexus on an instance in a Graviton EC2 environment. 
Does it support arm64? 
If so, is there a document on which version is supported starting? 
I can’t find it. (163 words, Feb 22, 2024)
- [Scaling with Proxy Nodes - Sonatype Nexus Repository - Sonatype Community](/content/community/t/scaling-with-proxy-nodes/12126/index.html): I have a few questions about setting up the proxy nodes as described here: Scaling with Proxy Nodes 
Is this a Pro Feature? 
How do I best implement this? I already have a Nexus that has an internal maven repo as well as&hellip; (169 words, Feb 21, 2024)
- [Scaling with Proxy Nodes - Sonatype Nexus Repository - Sonatype Community](/content/community/t/scaling-with-proxy-nodes/12126/1/index.html): I have a few questions about setting up the proxy nodes as described here: Scaling with Proxy Nodes 
Is this a Pro Feature? 
How do I best implement this? I already have a Nexus that has an internal maven repo as well as&hellip; (216 words, Feb 21, 2024)
- [Issues with container proxy repo - Sonatype Nexus Repository - Sonatype Community](/content/community/t/issues-with-container-proxy-repo/12010/7/index.html): I’m trying to setup a docker/container Proxy repo on Nexus3 OSS. 
Yet it seems the URL or are not correct, I always get this error: 
docker pull nexus.demodomain.net/repository/opencode/bwi/bundesmessenger/backend/contai&hellip; (537 words, Feb 21, 2024)
- [Issues with container proxy repo - Sonatype Nexus Repository - Sonatype Community](/content/community/t/issues-with-container-proxy-repo/12010/6/index.html): I’m trying to setup a docker/container Proxy repo on Nexus3 OSS. 
Yet it seems the URL or are not correct, I always get this error: 
docker pull nexus.demodomain.net/repository/opencode/bwi/bundesmessenger/backend/contai&hellip; (553 words, Feb 20, 2024)
- [Issues with container proxy repo - Sonatype Nexus Repository - Sonatype Community](/content/community/t/issues-with-container-proxy-repo/12010/5/index.html): I’m trying to setup a docker/container Proxy repo on Nexus3 OSS. 
Yet it seems the URL or are not correct, I always get this error: 
docker pull nexus.demodomain.net/repository/opencode/bwi/bundesmessenger/backend/contai&hellip; (538 words, Feb 20, 2024)
- [Customized clean-up policy - Sonatype Nexus Repository - Sonatype Community](/content/community/t/customized-clean-up-policy/12117/3/index.html): I am using Sonatype Nexus RepositoryOSS 3.61.0-02. I have configured a clean-up policy such that artifacts are deleted after 30 days (Published Before). That works fine and deletion works. I am wondering if it is possibl&hellip; (260 words, Feb 20, 2024)
- [Customized clean-up policy - Sonatype Nexus Repository - Sonatype Community](/content/community/t/customized-clean-up-policy/12117/2/index.html): I am using Sonatype Nexus RepositoryOSS 3.61.0-02. I have configured a clean-up policy such that artifacts are deleted after 30 days (Published Before). That works fine and deletion works. I am wondering if it is possibl&hellip; (260 words, Feb 20, 2024)
- [Customized clean-up policy - Sonatype Nexus Repository - Sonatype Community](/content/community/t/customized-clean-up-policy/12117/index.html): I am using Sonatype Nexus RepositoryOSS 3.61.0-02. I have configured a clean-up policy such that artifacts are deleted after 30 days (Published Before). That works fine and deletion works. I am wondering if it is possibl&hellip; (260 words, Feb 19, 2024)
- [Customized clean-up policy - Sonatype Nexus Repository - Sonatype Community](/content/community/t/customized-clean-up-policy/12117/1/index.html): I am using Sonatype Nexus RepositoryOSS 3.61.0-02. I have configured a clean-up policy such that artifacts are deleted after 30 days (Published Before). That works fine and deletion works. I am wondering if it is possibl&hellip; (260 words, Feb 19, 2024)
- [Issues with container proxy repo - Sonatype Nexus Repository - Sonatype Community](/content/community/t/issues-with-container-proxy-repo/12010/4/index.html): I’m trying to setup a docker/container Proxy repo on Nexus3 OSS. 
Yet it seems the URL or are not correct, I always get this error: 
docker pull nexus.demodomain.net/repository/opencode/bwi/bundesmessenger/backend/contai&hellip; (528 words, Feb 19, 2024)
- [How can I find the number of components in each repository instance(for example，maven- release，npm-hosted)? - Sonatype Exchange / Sonatype Exchange Discussion - Sonatype Community](/content/community/t/how-can-i-find-the-number-of-components-in-each-repository-instance-for-example-maven-release-npm-hosted/12111/index.html): How can I find the number of components in each repository instance（for example，maven- release，npm-hosted ）, and how can I get a list of components for a repository instance? (442 words, Feb 19, 2024)
- [How can I find the number of components in each repository instance(for example，maven- release，npm-hosted)? - Sonatype Exchange / Sonatype Exchange Discussion - Sonatype Community](/content/community/t/how-can-i-find-the-number-of-components-in-each-repository-instance-for-example-maven-release-npm-hosted/12111/1/index.html): How can I find the number of components in each repository instance（for example，maven- release，npm-hosted ）, and how can I get a list of components for a repository instance? (438 words, Feb 19, 2024)
- [How to add the default task 'Cleanup service' - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-to-add-the-default-task-cleanup-service/12082/3/index.html): Hi, 
we inadvertently deleted the “Cleanup service” task aka “Admin - Cleanup repositories using their associated policies” 
how can we recreate it? 
Thanks (162 words, Feb 16, 2024)
- [Not able to publish my components on Central SonaType - Central Repository - Sonatype Community](/content/community/t/not-able-to-publish-my-components-on-central-sonatype/12093/1/index.html): I am trying to publish my components to Maven Central SonaType Maven Central: Publishing. 
I have signed them with the keys generated via gpg. 
But It giving such errors like: 
My Deployment 

File path ‘io/github/niflhe&hellip; (318 words, Feb 15, 2024)
- [How to download the sonatype gpg public key - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-to-download-the-sonatype-gpg-public-key/12091/index.html): Hi, 
It seems that the public gpg key change recently. 
We used to verify it with this public key 
pub   dsa1024 2009-02-27 [SC]
      2BCBDD0F23EA1CAFCC11D4860374CF2E8DD1BDFD
uid           [ unknown] Sonatype, Inc. (Son&hellip; (193 words, Feb 15, 2024)
- [How to download the sonatype gpg public key - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-to-download-the-sonatype-gpg-public-key/12091/1/index.html): Hi, 
It seems that the public gpg key change recently. 
We used to verify it with this public key 
pub   dsa1024 2009-02-27 [SC]
      2BCBDD0F23EA1CAFCC11D4860374CF2E8DD1BDFD
uid           [ unknown] Sonatype, Inc. (Son&hellip; (90 words, Feb 15, 2024)
- [Introducing "Ask Sona": AI-Powered Support - Community Announcements - Sonatype Community](/content/community/t/introducing-ask-sona-ai-powered-support/12088/index.html): Sonatype’s Tech Support team is happy to introduce Ask Sona, our Sonatype-trained AI Support, designed to help you quickly find answers to your product-related questions. 
Ask Sona is trained on all public-facing custome&hellip; (85 words, Feb 14, 2024)
- [Introducing "Ask Sona": AI-Powered Support - Community Announcements - Sonatype Community](/content/community/t/introducing-ask-sona-ai-powered-support/12088/1/index.html): Sonatype’s Tech Support team is happy to introduce Ask Sona, our Sonatype-trained AI Support, designed to help you quickly find answers to your product-related questions. 
Ask Sona is trained on all public-facing custome&hellip; (149 words, Feb 14, 2024)
- [How to add the default task 'Cleanup service' - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-to-add-the-default-task-cleanup-service/12082/index.html): Hi, 
we inadvertently deleted the “Cleanup service” task aka “Admin - Cleanup repositories using their associated policies” 
how can we recreate it? 
Thanks (80 words, Feb 14, 2024)
- [How to add the default task 'Cleanup service' - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-to-add-the-default-task-cleanup-service/12082/1/index.html): Hi, 
we inadvertently deleted the “Cleanup service” task aka “Admin - Cleanup repositories using their associated policies” 
how can we recreate it? 
Thanks (92 words, Feb 14, 2024)
- [NPM Proxy Cache Issues - Sonatype Nexus Repository - Sonatype Community](/content/community/t/npm-proxy-cache-issues/12068/3/index.html): We are seeing an issue that I believe is a result of the way that Nexus’ NPM Proxy handles the cache settings for maximum component age and maximum metadata age. Intermittently we are seeing failures of NPM install due t&hellip; (317 words, Feb 13, 2024)
- [NPM Proxy Cache Issues - Sonatype Nexus Repository - Sonatype Community](/content/community/t/npm-proxy-cache-issues/12068/index.html): We are seeing an issue that I believe is a result of the way that Nexus’ NPM Proxy handles the cache settings for maximum component age and maximum metadata age. Intermittently we are seeing failures of NPM install due t&hellip; (308 words, Feb 12, 2024)
- [NPM Proxy Cache Issues - Sonatype Nexus Repository - Sonatype Community](/content/community/t/npm-proxy-cache-issues/12068/1/index.html): We are seeing an issue that I believe is a result of the way that Nexus’ NPM Proxy handles the cache settings for maximum component age and maximum metadata age. Intermittently we are seeing failures of NPM install due t&hellip; (316 words, Feb 12, 2024)
- [Nexus repository SSL error - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-repository-ssl-error/12049/8/index.html): Can u help me guys? i got this error when I try to add rhel7 repo (150 words, Feb 12, 2024)
- [CPU Spike - Sonatype Nexus Repository - Sonatype Community](/content/community/t/cpu-spike/12055/index.html): CPU usage went up to 100%, there’re some tasks running retarted nexus and still have CPU usage too high, no tasks running now. Couldn’t find much from the logs. 
After restart re-indexing, and now now task running at all&hellip; (116 words, Feb 9, 2024)
- [CPU Spike - Sonatype Nexus Repository - Sonatype Community](/content/community/t/cpu-spike/12055/1/index.html): CPU usage went up to 100%, there’re some tasks running retarted nexus and still have CPU usage too high, no tasks running now. Couldn’t find much from the logs. 
After restart re-indexing, and now now task running at all&hellip; (59 words, Feb 9, 2024)
- [Will Nexus Firewall only scan a component as it enters a proxy repository or will it keep taps on it over time? - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/will-nexus-firewall-only-scan-a-component-as-it-enters-a-proxy-repository-or-will-it-keep-taps-on-it-over-time/12029/2/index.html): Hello 
I just saw an old video about (Sonatype Nexus) repository firewall which makes the product look like an interesting addition to our Sonatype nexus repositories. However in the demonstration video the demonstrator &hellip; (595 words, Feb 9, 2024)
- [How To Use Sonatype if it only has 1 level file system? - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/how-to-use-sonatype-if-it-only-has-1-level-file-system/11999/5/index.html): Hi There, 
My company is adopting Sonatype Nexus OSS for the first time. 
Upon our POC, we found that Sonatype only has a single level file system. But we have many different products, from different development teams. I&hellip; (322 words, Feb 9, 2024)
- [Nexus repository SSL error - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-repository-ssl-error/12049/index.html): Can u help me guys? i got this error when I try to add rhel7 repo (147 words, Feb 9, 2024)
- [Nexus repository SSL error - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-repository-ssl-error/12049/1/index.html): Can u help me guys? i got this error when I try to add rhel7 repo (150 words, Feb 9, 2024)
- [Maven Deploy validation failed: Invalid signature for file - Central Repository - Sonatype Community](/content/community/t/maven-deploy-validation-failed-invalid-signature-for-file/12023/4/index.html): I tried to validate in other places and it works, because I didn’t change anything other than updating to 0.3.0 of the central-publishing-maven-plugin (previous versions receive a 500 error from sonatype) 
My pom.xml i&hellip; (437 words, Feb 9, 2024)
- [Jenkins import artifact in Nexus - Sonatype Nexus Repository - Sonatype Community](/content/community/t/jenkins-import-artifact-in-nexus/12042/5/index.html): Hello, 
I’m making a new installation of Jenkins and I’m now encountering a problem when publishing an artifact in Nexus. 
Currently I am with Jenkins 2.426.3. I use the Nexus Platform Plugin 3.19.1-01. 
Here is the mess&hellip; (151 words, Feb 8, 2024)
- [Proxy Error when downloading package from group repository - Sonatype Nexus Repository - Sonatype Community](/content/community/t/proxy-error-when-downloading-package-from-group-repository/12035/6/index.html): I have a group repo called “chocolatey-all” which contains 2 members a hosted repository called “chocolatey-hosted” and a proxy repo called “chocolatey-proxy” which is a proxy for https://community.chocolatey.org/api/v2/.&hellip; (321 words, Feb 8, 2024)
- [Jenkins import artifact in Nexus - Sonatype Nexus Repository - Sonatype Community](/content/community/t/jenkins-import-artifact-in-nexus/12042/1/index.html): Hello, 
I’m making a new installation of Jenkins and I’m now encountering a problem when publishing an artifact in Nexus. 
Currently I am with Jenkins 2.426.3. I use the Nexus Platform Plugin 3.19.1-01. 
Here is the mess&hellip; (178 words, Feb 8, 2024)
- [Sonatype Nexus Repository Components and Assets API Issues - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-repository-components-and-assets-api-issues/12037/3/index.html): Hello, we are currently using version 3.62.0 of Nexus Repository in High Availability Mode, and we’re running into issues with the Components and Assets API. Mainly, with the following API Endpoints: 



DELETE /service/&hellip; (118 words, Feb 7, 2024)
- [Sonatype Nexus Repository Components and Assets API Issues - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-repository-components-and-assets-api-issues/12037/index.html): Hello, we are currently using version 3.62.0 of Nexus Repository in High Availability Mode, and we’re running into issues with the Components and Assets API. Mainly, with the following API Endpoints: 



DELETE /service/&hellip; (118 words, Feb 7, 2024)
- [Sonatype Nexus Repository Components and Assets API Issues - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-repository-components-and-assets-api-issues/12037/1/index.html): Hello, we are currently using version 3.62.0 of Nexus Repository in High Availability Mode, and we’re running into issues with the Components and Assets API. Mainly, with the following API Endpoints: 



DELETE /service/&hellip; (215 words, Feb 7, 2024)
- [Sonatype Nexus Repository 3.65.0 Released - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-repository-3-65-0-released/12032/index.html): We are pleased to announce Sonatype Nexus Repository 3.65.0. 
This release includes major performance improvements to Cleanup Policies for Pro customers using a PostgreSQL database. Pro customers on PostgreSQL can also c&hellip; (160 words, Feb 7, 2024)
- [Maven Deploy validation failed: Invalid signature for file - Central Repository - Sonatype Community](/content/community/t/maven-deploy-validation-failed-invalid-signature-for-file/12023/index.html): I tried to validate in other places and it works, because I didn’t change anything other than updating to 0.3.0 of the central-publishing-maven-plugin (previous versions receive a 500 error from sonatype) 
My pom.xml i&hellip; (748 words, Feb 6, 2024)
- [Maven Deploy validation failed: Invalid signature for file - Central Repository - Sonatype Community](/content/community/t/maven-deploy-validation-failed-invalid-signature-for-file/12023/1/index.html): I tried to validate in other places and it works, because I didn’t change anything other than updating to 0.3.0 of the central-publishing-maven-plugin (previous versions receive a 500 error from sonatype) 
My pom.xml i&hellip; (601 words, Feb 6, 2024)
- [Issues with container proxy repo - Sonatype Nexus Repository - Sonatype Community](/content/community/t/issues-with-container-proxy-repo/12010/3/index.html): I’m trying to setup a docker/container Proxy repo on Nexus3 OSS. 
Yet it seems the URL or are not correct, I always get this error: 
docker pull nexus.demodomain.net/repository/opencode/bwi/bundesmessenger/backend/contai&hellip; (538 words, Feb 5, 2024)
- [Issues with container proxy repo - Sonatype Nexus Repository - Sonatype Community](/content/community/t/issues-with-container-proxy-repo/12010/2/index.html): I’m trying to setup a docker/container Proxy repo on Nexus3 OSS. 
Yet it seems the URL or are not correct, I always get this error: 
docker pull nexus.demodomain.net/repository/opencode/bwi/bundesmessenger/backend/contai&hellip; (554 words, Feb 5, 2024)
- [Issues with container proxy repo - Sonatype Nexus Repository - Sonatype Community](/content/community/t/issues-with-container-proxy-repo/12010/index.html): I’m trying to setup a docker/container Proxy repo on Nexus3 OSS. 
Yet it seems the URL or are not correct, I always get this error: 
docker pull nexus.demodomain.net/repository/opencode/bwi/bundesmessenger/backend/contai&hellip; (537 words, Feb 5, 2024)
- [Issues with container proxy repo - Sonatype Nexus Repository - Sonatype Community](/content/community/t/issues-with-container-proxy-repo/12010/1/index.html): I’m trying to setup a docker/container Proxy repo on Nexus3 OSS. 
Yet it seems the URL or are not correct, I always get this error: 
docker pull nexus.demodomain.net/repository/opencode/bwi/bundesmessenger/backend/contai&hellip; (577 words, Feb 5, 2024)
- [How To Use Sonatype if it only has 1 level file system? - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/how-to-use-sonatype-if-it-only-has-1-level-file-system/11999/3/index.html): Hi There, 
My company is adopting Sonatype Nexus OSS for the first time. 
Upon our POC, we found that Sonatype only has a single level file system. But we have many different products, from different development teams. I&hellip; (320 words, Feb 3, 2024)
- [How To Use Sonatype if it only has 1 level file system? - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/how-to-use-sonatype-if-it-only-has-1-level-file-system/11999/2/index.html): Hi There, 
My company is adopting Sonatype Nexus OSS for the first time. 
Upon our POC, we found that Sonatype only has a single level file system. But we have many different products, from different development teams. I&hellip; (321 words, Feb 2, 2024)
- [How To Use Sonatype if it only has 1 level file system? - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/how-to-use-sonatype-if-it-only-has-1-level-file-system/11999/index.html): Hi There, 
My company is adopting Sonatype Nexus OSS for the first time. 
Upon our POC, we found that Sonatype only has a single level file system. But we have many different products, from different development teams. I&hellip; (320 words, Feb 2, 2024)
- [How To Use Sonatype if it only has 1 level file system? - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/how-to-use-sonatype-if-it-only-has-1-level-file-system/11999/1/index.html): Hi There, 
My company is adopting Sonatype Nexus OSS for the first time. 
Upon our POC, we found that Sonatype only has a single level file system. But we have many different products, from different development teams. I&hellip; (318 words, Feb 2, 2024)
- ["Rebuild index" doesn't - Sonatype Nexus Repository - Sonatype Community](/content/community/t/rebuild-index-doesnt/11987/3/index.html): Due to a database corruption issue, we had to reload a slightly old backup op db/component 
However, now (obviously) our most recently released components do not show up in the repository. The contents of these under nex&hellip; (146 words, Feb 1, 2024)
- ["Rebuild index" doesn't - Sonatype Nexus Repository - Sonatype Community](/content/community/t/rebuild-index-doesnt/11987/index.html): Due to a database corruption issue, we had to reload a slightly old backup op db/component 
However, now (obviously) our most recently released components do not show up in the repository. The contents of these under nex&hellip; (227 words, Feb 1, 2024)
- [How to undo Asset Soft-Delete in NXRM3? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-to-undo-asset-soft-delete-in-nxrm3/271/11/index.html): As part of a test with NEXUS3 as nuget package repo, we ran into the problem of vanishing assets. For our users it is unclear if this is a system or a user error, and even though there’s a gut feeling, there is no proof &hellip; (1,323 words, Jan 28, 2024)
- [Nexus yum group and yum proxy have different repository metadata - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-yum-group-and-yum-proxy-have-different-repository-metadata/11935/5/index.html): Hi, 
I’m using Nexus3 in private cloud environment, and I configured yum group repository and yum proxy repository. 
Yum-proxy repository is a member of yum-group repository. 
In VM of private cloud, I made repofile of r&hellip; (833 words, Jan 26, 2024)
- [IndexNotFoundException[no such index [500] 'ERROR' - Sonatype Nexus Repository - Sonatype Community](/content/community/t/indexnotfoundexception-no-such-index-500-error/11942/2/index.html): Hello, 
We are encountering issues while downloading .jar files from Nexus. 


The command used is: 
curl --cacert Cert.crt --location &quot;https://nexus.example.com/service/rest/v1/search/assets/download?/*****&quot; --output da&hellip; (187 words, Jan 25, 2024)
- [Join us at 10am EST for January Office Hours! - Community Announcements - Sonatype Community](/content/community/t/join-us-at-10am-est-for-january-office-hours/11948/2/index.html): Join us in one hour at 10 am EST (7 am PST | 3 pm GMT) for our monthly, customer-exclusive Office Hours . 
This month, we’ll be discussing the following topics: 

Sonatype Lifecycle: Advanced Search
January 2024 Learn &hellip; (212 words, Jan 25, 2024)
- [Join us at 10am EST for January Office Hours! - Community Announcements - Sonatype Community](/content/community/t/join-us-at-10am-est-for-january-office-hours/11948/index.html): Join us in one hour at 10 am EST (7 am PST | 3 pm GMT) for our monthly, customer-exclusive Office Hours . 
This month, we’ll be discussing the following topics: 

Sonatype Lifecycle: Advanced Search
January 2024 Learn &hellip; (197 words, Jan 25, 2024)
- [Join us at 10am EST for January Office Hours! - Community Announcements - Sonatype Community](/content/community/t/join-us-at-10am-est-for-january-office-hours/11948/1/index.html): Join us in one hour at 10 am EST (7 am PST | 3 pm GMT) for our monthly, customer-exclusive Office Hours . 
This month, we’ll be discussing the following topics: 

Sonatype Lifecycle: Advanced Search
January 2024 Learn &hellip; (199 words, Jan 25, 2024)
- [File with name 'OUser.name.irs' does not exist in storage 'component' - Sonatype Nexus Repository - Sonatype Community](/content/community/t/file-with-name-ouser-name-irs-does-not-exist-in-storage-component/11182/2/index.html): Hello, 
while pushing a new image to nexus i get the following error: 
com.orientechnologies.orient.core.exception.OStorageException: File with name ‘OUser.name.irs’ does not exist in storage ‘component’ 
I already check&hellip; (104 words, Jan 24, 2024)
- [Sonatype nexus repository oss. Upload error. Invalid header - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-repository-oss-upload-error-invalid-header/11945/index.html): Nexus 3.63.0 is running in a docker container. 
Trying to upload a file to the repository results in an error. No matter what type of repository, what type of file I try to upload, the result is the same. 
Has anyone enc&hellip; (198 words, Jan 24, 2024)
- [Sonatype nexus repository oss. Upload error. Invalid header - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-repository-oss-upload-error-invalid-header/11945/1/index.html): Nexus 3.63.0 is running in a docker container. 
Trying to upload a file to the repository results in an error. No matter what type of repository, what type of file I try to upload, the result is the same. 
Has anyone enc&hellip; (198 words, Jan 24, 2024)
- [IndexNotFoundException[no such index [500] 'ERROR' - Sonatype Nexus Repository - Sonatype Community](/content/community/t/indexnotfoundexception-no-such-index-500-error/11942/index.html): Hello, 
We are encountering issues while downloading .jar files from Nexus. 


The command used is: 
curl --cacert Cert.crt --location &quot;https://nexus.example.com/service/rest/v1/search/assets/download?/*****&quot; --output da&hellip; (354 words, Jan 24, 2024)
- [IndexNotFoundException[no such index [500] 'ERROR' - Sonatype Nexus Repository - Sonatype Community](/content/community/t/indexnotfoundexception-no-such-index-500-error/11942/1/index.html): Hello, 
We are encountering issues while downloading .jar files from Nexus. 


The command used is: 
curl --cacert Cert.crt --location &quot;https://nexus.example.com/service/rest/v1/search/assets/download?/*****&quot; --output da&hellip; (150 words, Jan 24, 2024)
- [Nexus yum group and yum proxy have different repository metadata - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-yum-group-and-yum-proxy-have-different-repository-metadata/11935/index.html): Hi, 
I’m using Nexus3 in private cloud environment, and I configured yum group repository and yum proxy repository. 
Yum-proxy repository is a member of yum-group repository. 
In VM of private cloud, I made repofile of r&hellip; (836 words, Jan 23, 2024)
- [Nexus yum group and yum proxy have different repository metadata - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-yum-group-and-yum-proxy-have-different-repository-metadata/11935/1/index.html): Hi, 
I’m using Nexus3 in private cloud environment, and I configured yum group repository and yum proxy repository. 
Yum-proxy repository is a member of yum-group repository. 
In VM of private cloud, I made repofile of r&hellip; (836 words, Jan 23, 2024)
- [Sonatype lifecycle tenant account - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/sonatype-lifecycle-tenant-account/11924/2/index.html): I have setup my organization account and the finger print of my trial license version has been verifed. 
Now, I am thinking of creating tenant account, and access Sonatype Lifecycle on the cloud by visiting tenant URL, w&hellip; (224 words, Jan 19, 2024)
- [Sonatype lifecycle tenant account - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/sonatype-lifecycle-tenant-account/11924/index.html): I have setup my organization account and the finger print of my trial license version has been verifed. 
Now, I am thinking of creating tenant account, and access Sonatype Lifecycle on the cloud by visiting tenant URL, w&hellip; (136 words, Jan 19, 2024)
- [Sonatype lifecycle tenant account - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/sonatype-lifecycle-tenant-account/11924/1/index.html): I have setup my organization account and the finger print of my trial license version has been verifed. 
Now, I am thinking of creating tenant account, and access Sonatype Lifecycle on the cloud by visiting tenant URL, w&hellip; (196 words, Jan 19, 2024)
- [Seeking help with solving the issue of Nexus restart caused by Nexus Healthy Check failure - Sonatype Nexus Repository - Sonatype Community](/content/community/t/seeking-help-with-solving-the-issue-of-nexus-restart-caused-by-nexus-healthy-check-failure/11922/index.html): Hello everyone, 
Recently, I have encountered an issue while using Sonatype Nexus Repository and I am hoping to get some assistance here. The problem is that the Nexus restarts due to Nexus Healthy Check failure. I am se&hellip; (324 words, Jan 19, 2024)
- [Seeking help with solving the issue of Nexus restart caused by Nexus Healthy Check failure - Sonatype Nexus Repository - Sonatype Community](/content/community/t/seeking-help-with-solving-the-issue-of-nexus-restart-caused-by-nexus-healthy-check-failure/11922/1/index.html): Hello everyone, 
Recently, I have encountered an issue while using Sonatype Nexus Repository and I am hoping to get some assistance here. The problem is that the Nexus restarts due to Nexus Healthy Check failure. I am se&hellip; (317 words, Jan 19, 2024)
- [Clone ubuntu apt repos - Sonatype Nexus Repository - Sonatype Community](/content/community/t/clone-ubuntu-apt-repos/11911/7/index.html): Hello. 
Is it possible use nexus not as just proxy, but like full standalone repos of ubuntu, or debian for example? 
If it is, how to do it? (230 words, Jan 18, 2024)
- [Join us for January Office Hours - Thursday, January 25th at 10am EST - Community Announcements - Sonatype Community](/content/community/t/join-us-for-january-office-hours-thursday-january-25th-at-10am-est/11920/2/index.html): Join us Thursday, January 25th at 10 am EST (7 am PST | 3 pm GMT) for our monthly, customer-exclusive Office Hours. 
This month, we’ll be discussing the following topics: 

Sonatype Lifecycle: Advanced Search
January 2&hellip; (136 words, Jan 18, 2024)
- [Join us for January Office Hours - Thursday, January 25th at 10am EST - Community Announcements - Sonatype Community](/content/community/t/join-us-for-january-office-hours-thursday-january-25th-at-10am-est/11920/index.html): Join us Thursday, January 25th at 10 am EST (7 am PST | 3 pm GMT) for our monthly, customer-exclusive Office Hours. 
This month, we’ll be discussing the following topics: 

Sonatype Lifecycle: Advanced Search
January 2&hellip; (136 words, Jan 18, 2024)
- [Join us for January Office Hours - Thursday, January 25th at 10am EST - Community Announcements - Sonatype Community](/content/community/t/join-us-for-january-office-hours-thursday-january-25th-at-10am-est/11920/1/index.html): Join us Thursday, January 25th at 10 am EST (7 am PST | 3 pm GMT) for our monthly, customer-exclusive Office Hours. 
This month, we’ll be discussing the following topics: 

Sonatype Lifecycle: Advanced Search
January 2&hellip; (147 words, Jan 18, 2024)
- [Clone ubuntu apt repos - Sonatype Nexus Repository - Sonatype Community](/content/community/t/clone-ubuntu-apt-repos/11911/1/index.html): Hello. 
Is it possible use nexus not as just proxy, but like full standalone repos of ubuntu, or debian for example? 
If it is, how to do it? (230 words, Jan 17, 2024)
- [I can't pull docker images by my own anonymous in nexus - Sonatype Nexus Repository - Sonatype Community](/content/community/t/i-cant-pull-docker-images-by-my-own-anonymous-in-nexus/11883/2/index.html): I wanna pull docker images from docker proxy repo, however I can’t do it. 
It’s successful when I try doing it built-in anonymous user but I fail to pull by my own anonymous (privilege is nx-anonymous. 

in the nexus set&hellip; (216 words, Jan 15, 2024)
- [Installing Nexus Repo 3 onto OpenShift issue with creation of Route - Sonatype Nexus Repository - Sonatype Community](/content/community/t/installing-nexus-repo-3-onto-openshift-issue-with-creation-of-route/11896/2/index.html): I’m attempting installation of the Nexus Repo Operator onto OpenShift v4.13 platform. 
The Operator installs, however no Service or Route is created, so I can’t access the dashboard. 
The install seems to complete succes&hellip; (176 words, Jan 15, 2024)
- [Get a list of all the packages in my repository exceeding the limit of 250 versions - Sonatype Nexus Repository - Sonatype Community](/content/community/t/get-a-list-of-all-the-packages-in-my-repository-exceeding-the-limit-of-250-versions/11900/index.html): Hello everyone, 
Do you know how I can get a complete list of my packages, or at least just the names of them. 
I’m currently using npm registry API, but there are issues with pagination as it skips packages randomly and&hellip; (186 words, Jan 15, 2024)
- [Get a list of all the packages in my repository exceeding the limit of 250 versions - Sonatype Nexus Repository - Sonatype Community](/content/community/t/get-a-list-of-all-the-packages-in-my-repository-exceeding-the-limit-of-250-versions/11900/1/index.html): Hello everyone, 
Do you know how I can get a complete list of my packages, or at least just the names of them. 
I’m currently using npm registry API, but there are issues with pagination as it skips packages randomly and&hellip; (186 words, Jan 15, 2024)
- [Installing Nexus Repo 3 onto OpenShift issue with creation of Route - Sonatype Nexus Repository - Sonatype Community](/content/community/t/installing-nexus-repo-3-onto-openshift-issue-with-creation-of-route/11896/index.html): I’m attempting installation of the Nexus Repo Operator onto OpenShift v4.13 platform. 
The Operator installs, however no Service or Route is created, so I can’t access the dashboard. 
The install seems to complete succes&hellip; (180 words, Jan 15, 2024)
- [Nexus deletes maven-metadata.xml - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-deletes-maven-metadata-xml/11848/3/index.html): Hello, 
in my Nexus instance’s (Sonatype Nexus Repository OSS 3.63.0-01) maven repository I’ve got these kind of artifacts: 
1. 
 
&lt;groupId&gt;a&lt;/groupId&gt; 
&lt;artifactId&gt;b&lt;/artifactId&gt; 
 
2. 
 
&lt;groupId&gt;a.b&lt;/groupId&gt; 
&lt;artifa&hellip; (161 words, Jan 12, 2024)
- [Upload RPM/DEB packages to NxRM repo ends up with http 500 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/upload-rpm-deb-packages-to-nxrm-repo-ends-up-with-http-500/11860/2/index.html): I am building my own GO tool to upload DEBs or RPMs to my NxRM-hosted repos. 
The source code is at GitHub - jeanfrancoisgratton/nxrmuploader: Nexus Repository Manager binary packages uploader. 
My environment file (that&hellip; (242 words, Jan 11, 2024)
- [Nexus deletes maven-metadata.xml - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-deletes-maven-metadata-xml/11848/2/index.html): Hello, 
in my Nexus instance’s (Sonatype Nexus Repository OSS 3.63.0-01) maven repository I’ve got these kind of artifacts: 
1. 
 
&lt;groupId&gt;a&lt;/groupId&gt; 
&lt;artifactId&gt;b&lt;/artifactId&gt; 
 
2. 
 
&lt;groupId&gt;a.b&lt;/groupId&gt; 
&lt;artifa&hellip; (161 words, Jan 11, 2024)
- [Nexus Reposiroty Upgrade from version 3.15 to 3.62 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-reposiroty-upgrade-from-version-3-15-to-3-62/11881/2/index.html): We are currently using nexus repository version of 3.15.2 and we are planning to upgarde to latest version ( 3.62 ). 
Do we have any documents we need to refer to perform upgarde ? Or what are the prerequisite checks i n&hellip; (177 words, Jan 11, 2024)
- [I can't pull docker images by my own anonymous in nexus - Sonatype Nexus Repository - Sonatype Community](/content/community/t/i-cant-pull-docker-images-by-my-own-anonymous-in-nexus/11883/index.html): I wanna pull docker images from docker proxy repo, however I can’t do it. 
It’s successful when I try doing it built-in anonymous user but I fail to pull by my own anonymous (privilege is nx-anonymous. 

in the nexus set&hellip; (216 words, Jan 11, 2024)
- [I can't pull docker images by my own anonymous in nexus - Sonatype Nexus Repository - Sonatype Community](/content/community/t/i-cant-pull-docker-images-by-my-own-anonymous-in-nexus/11883/1/index.html): I wanna pull docker images from docker proxy repo, however I can’t do it. 
It’s successful when I try doing it built-in anonymous user but I fail to pull by my own anonymous (privilege is nx-anonymous. 

in the nexus set&hellip; (221 words, Jan 11, 2024)
- [Nexus Reposiroty Upgrade from version 3.15 to 3.62 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-reposiroty-upgrade-from-version-3-15-to-3-62/11881/index.html): We are currently using nexus repository version of 3.15.2 and we are planning to upgarde to latest version ( 3.62 ). 
Do we have any documents we need to refer to perform upgarde ? Or what are the prerequisite checks i n&hellip; (102 words, Jan 11, 2024)
- [Nexus Reposiroty Upgrade from version 3.15 to 3.62 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-reposiroty-upgrade-from-version-3-15-to-3-62/11881/1/index.html): We are currently using nexus repository version of 3.15.2 and we are planning to upgarde to latest version ( 3.62 ). 
Do we have any documents we need to refer to perform upgarde ? Or what are the prerequisite checks i n&hellip; (99 words, Jan 11, 2024)
- [Maintenance Downtime of Community on Wednesday, January 11th at 7pm EST - Community Announcements - Sonatype Community](/content/community/t/maintenance-downtime-of-community-on-wednesday-january-11th-at-7pm-est/11879/index.html): Starting around 7:00 PM EST on Wednesday, January 11th, the Community forum will be brought offline to perform necessary maintenance and upgrades. 
This downtime is localized to just the community forum, and will not aff&hellip; (56 words, Jan 10, 2024)
- [Maintenance Downtime of Community on Wednesday, January 11th at 7pm EST - Community Announcements - Sonatype Community](/content/community/t/maintenance-downtime-of-community-on-wednesday-january-11th-at-7pm-est/11879/1/index.html): Starting around 7:00 PM EST on Wednesday, January 11th, the Community forum will be brought offline to perform necessary maintenance and upgrades. 
This downtime is localized to just the community forum, and will not aff&hellip; (125 words, Jan 10, 2024)
- [Purge old docker images and keep X number of image in repo - Sonatype Nexus Repository - Sonatype Community](/content/community/t/purge-old-docker-images-and-keep-x-number-of-image-in-repo/677/5/index.html): Hi 
Using Nexus 3.13 version and i wanted to purge my docker mainfiest and images and keep only X number of images for all my microservices. 
Could any one tell how can i do that . 
Regards 
abhinav D (154 words, Jan 10, 2024)
- [Component Labels REST API Request to Assign Labels Throws 405 Error - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/component-labels-rest-api-request-to-assign-labels-throws-405-error/11877/index.html): According to the documentation Component Labels REST API - v2  it is possible assign component lables to organizations and applications. This is documented as a POST HTTP request. Unfortunately it throws a 405 Error. 
Ca&hellip; (121 words, Jan 10, 2024)
- [Component Labels REST API Request to Assign Labels Throws 405 Error - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/component-labels-rest-api-request-to-assign-labels-throws-405-error/11877/1/index.html): According to the documentation Component Labels REST API - v2  it is possible assign component lables to organizations and applications. This is documented as a POST HTTP request. Unfortunately it throws a 405 Error. 
Ca&hellip; (121 words, Jan 10, 2024)
- [Public Registry API - Sonatype Nexus Repository - Sonatype Community](/content/community/t/public-registry-api/11865/2/index.html): Hi guys, 
I’m trying to use the public npm registry API to get packages from my private Nexus repository and I have some issues. 
Registry documentation: https://github.com/npm/registry/blob/master/docs/REGISTRY-API.md#g&hellip; (100 words, Jan 10, 2024)
- [Upcoming Changes to the Debian and Alpine Ecosystems - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/upcoming-changes-to-the-debian-and-alpine-ecosystems/11873/index.html): Hi Sonatype Community, 
Sonatype’s mission is to help you develop software fearlessly. An essential part of that mission is regularly examining our solutions, some of which will eventually reach the end of their useful l&hellip; (266 words, Jan 9, 2024)
- [Upcoming Changes to the Debian and Alpine Ecosystems - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/upcoming-changes-to-the-debian-and-alpine-ecosystems/11873/1/index.html): Hi Sonatype Community, 
Sonatype’s mission is to help you develop software fearlessly. An essential part of that mission is regularly examining our solutions, some of which will eventually reach the end of their useful l&hellip; (264 words, Jan 9, 2024)
- [100% CPU Usage after reconcile - Sonatype Nexus Repository - Sonatype Community](/content/community/t/100-cpu-usage-after-reconcile/11870/index.html): Hi 
We are using Nexus 3.54.1 
Last week our Component DB damaged during a false service shutdown. I wasnt able to fix the Orient database so i exported it and it only exported the valid fields. And Re-Imported it. After&hellip; (216 words, Jan 9, 2024)
- [100% CPU Usage after reconcile - Sonatype Nexus Repository - Sonatype Community](/content/community/t/100-cpu-usage-after-reconcile/11870/1/index.html): Hi 
We are using Nexus 3.54.1 
Last week our Component DB damaged during a false service shutdown. I wasnt able to fix the Orient database so i exported it and it only exported the valid fields. And Re-Imported it. After&hellip; (219 words, Jan 9, 2024)
- [Public Registry API - Sonatype Nexus Repository - Sonatype Community](/content/community/t/public-registry-api/11865/index.html): Hi guys, 
I’m trying to use the public npm registry API to get packages from my private Nexus repository and I have some issues. 
Registry documentation: https://github.com/npm/registry/blob/master/docs/REGISTRY-API.md#g&hellip; (100 words, Jan 8, 2024)
- [Public Registry API - Sonatype Nexus Repository - Sonatype Community](/content/community/t/public-registry-api/11865/1/index.html): Hi guys, 
I’m trying to use the public npm registry API to get packages from my private Nexus repository and I have some issues. 
Registry documentation: https://github.com/npm/registry/blob/master/docs/REGISTRY-API.md#g&hellip; (173 words, Jan 8, 2024)
- [Upload RPM/DEB packages to NxRM repo ends up with http 500 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/upload-rpm-deb-packages-to-nxrm-repo-ends-up-with-http-500/11860/index.html): I am building my own GO tool to upload DEBs or RPMs to my NxRM-hosted repos. 
The source code is at GitHub - jeanfrancoisgratton/nxrmuploader: Nexus Repository Manager binary packages uploader. 
My environment file (that&hellip; (238 words, Jan 5, 2024)
- [Upload RPM/DEB packages to NxRM repo ends up with http 500 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/upload-rpm-deb-packages-to-nxrm-repo-ends-up-with-http-500/11860/1/index.html): I am building my own GO tool to upload DEBs or RPMs to my NxRM-hosted repos. 
The source code is at GitHub - jeanfrancoisgratton/nxrmuploader: Nexus Repository Manager binary packages uploader. 
My environment file (that&hellip; (242 words, Jan 5, 2024)
- [Docker push to hosted registry fails with "Missing upload with uuid" - Sonatype Nexus Repository - Sonatype Community](/content/community/t/docker-push-to-hosted-registry-fails-with-missing-upload-with-uuid/10361/2/index.html): Hello! 
I’m asking help about a peculiar issue I’ve not found many instances of on the Internets. 
I’ve set up a hosted Docker registry with Nexus 3.49.0-02 running inside the official container. The container is reverse&hellip; (357 words, Jan 5, 2024)
- [Internal Server Error: REST API v2 Source Control Evaluation - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/internal-server-error-rest-api-v2-source-control-evaluation/11847/2/index.html): Hello, 
currently we are migrating from Jenkins to Github Actions. In Jenkins we used this plugin to evaluate our policies, which unfortunately doesn’t exist for Github Actions. Therefore we are using the Rest API 
But u&hellip; (215 words, Jan 4, 2024)
- [Nexus deletes maven-metadata.xml - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-deletes-maven-metadata-xml/11848/index.html): Hello, 
in my Nexus instance’s (Sonatype Nexus Repository OSS 3.63.0-01) maven repository I’ve got these kind of artifacts: 
1. 
 
&lt;groupId&gt;a&lt;/groupId&gt; 
&lt;artifactId&gt;b&lt;/artifactId&gt; 
 
2. 
 
&lt;groupId&gt;a.b&lt;/groupId&gt; 
&lt;artifa&hellip; (161 words, Jan 4, 2024)
- [Internal Server Error: REST API v2 Source Control Evaluation - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/internal-server-error-rest-api-v2-source-control-evaluation/11847/index.html): Hello, 
currently we are migrating from Jenkins to Github Actions. In Jenkins we used this plugin to evaluate our policies, which unfortunately doesn’t exist for Github Actions. Therefore we are using the Rest API 
But u&hellip; (215 words, Jan 4, 2024)
- [Internal Server Error: REST API v2 Source Control Evaluation - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/internal-server-error-rest-api-v2-source-control-evaluation/11847/1/index.html): Hello, 
currently we are migrating from Jenkins to Github Actions. In Jenkins we used this plugin to evaluate our policies, which unfortunately doesn’t exist for Github Actions. Therefore we are using the Rest API 
But u&hellip; (215 words, Jan 4, 2024)
- [How to hide nexus version header - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-to-hide-nexus-version-header/11845/index.html): Hello. 
when i do “curl -I localhost:[port]” 

HTTP/1.1 200 OK 
Server : Nexus/3.40.1-01 (OSS) 
… 

so i want to hide Server header. because it is not secure. 
help me please (121 words, Jan 4, 2024)
- [How to hide nexus version header - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-to-hide-nexus-version-header/11845/1/index.html): Hello. 
when i do “curl -I localhost:[port]” 

HTTP/1.1 200 OK 
Server : Nexus/3.40.1-01 (OSS) 
… 

so i want to hide Server header. because it is not secure. 
help me please (128 words, Jan 4, 2024)
- [How to upload a file to nexus repository from Jenkinspipeline, The Project is not a maven repository - Central Repository - Sonatype Community](/content/community/t/how-to-upload-a-file-to-nexus-repository-from-jenkinspipeline-the-project-is-not-a-maven-repository/11841/1/index.html): I am new here and trying to upload one single file to nexus from Jenkinsfile (Jenkins pipeline) . The nexus artifacts uploader plugin is not maintained. So I am looking for options. (135 words, Jan 3, 2024)
- [NexuShell - a PowerShell CLI for Nexus Repository - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexushell-a-powershell-cli-for-nexus-repository/11669/7/index.html): I work for Chocolatey Software and as such I need to build repository servers…a LOT. I got tired of manual effort and clunky scripts so I createdNexuShell, a PowerShell wrapper module for the Nexus Repository API. It’s n&hellip; (527 words, Jan 3, 2024)
- [Release Notes for Nexus 3.64.0 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/release-notes-for-nexus-3-64-0/11836/5/index.html): It looks like https://download.sonatype.com/nexus/3/latest-unix.tar.gz is downloading version 3.64.0, but I don’t see any release notes about this version. Does anyone know what updates are included? (243 words, Jan 3, 2024)
- [Unable to publish the library to the Sonatype Nexus repository - Sonatype Nexus Repository - Sonatype Community](/content/community/t/unable-to-publish-the-library-to-the-sonatype-nexus-repository/11812/2/index.html): When I try to publish the library to the Sonatype Nexus repository, I get this: 

Task :image-preview:publishReleasePublicationToMyImagePreviewSnapshotRepository FAILED 

FAILURE: Build failed with an exception. 

What w&hellip; (111 words, Jan 3, 2024)
- [Release Notes for Nexus 3.64.0 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/release-notes-for-nexus-3-64-0/11836/index.html): It looks like https://download.sonatype.com/nexus/3/latest-unix.tar.gz is downloading version 3.64.0, but I don’t see any release notes about this version. Does anyone know what updates are included? (268 words, Jan 2, 2024)
- [Release Notes for Nexus 3.64.0 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/release-notes-for-nexus-3-64-0/11836/1/index.html): It looks like https://download.sonatype.com/nexus/3/latest-unix.tar.gz is downloading version 3.64.0, but I don’t see any release notes about this version. Does anyone know what updates are included? (239 words, Jan 2, 2024)
- [Chronic AD account lockout from Sonatype Nexus Repository Pro 3.6.2.0-01 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/chronic-ad-account-lockout-from-sonatype-nexus-repository-pro-3-6-2-0-01/11820/2/index.html): Hi, we’re facing a chronic AD account lockout on Sonatype Nexus Repository Pro, end user claims they did some deployments maybe a year ago with their credentials that have since been deleted (deployments removed ) but I &hellip; (112 words, Dec 28, 2023)
- [Chronic AD account lockout from Sonatype Nexus Repository Pro 3.6.2.0-01 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/chronic-ad-account-lockout-from-sonatype-nexus-repository-pro-3-6-2-0-01/11820/index.html): Hi, we’re facing a chronic AD account lockout on Sonatype Nexus Repository Pro, end user claims they did some deployments maybe a year ago with their credentials that have since been deleted (deployments removed ) but I &hellip; (113 words, Dec 27, 2023)
- [Chronic AD account lockout from Sonatype Nexus Repository Pro 3.6.2.0-01 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/chronic-ad-account-lockout-from-sonatype-nexus-repository-pro-3-6-2-0-01/11820/1/index.html): Hi, we’re facing a chronic AD account lockout on Sonatype Nexus Repository Pro, end user claims they did some deployments maybe a year ago with their credentials that have since been deleted (deployments removed ) but I &hellip; (114 words, Dec 27, 2023)
- [Invalid go version - Sonatype Nexus Repository - Sonatype Community](/content/community/t/invalid-go-version/11818/index.html): go: errors parsing go.mod: 
/home/vsts/work/1/s/go.mod:3: invalid go version ‘1.21.5’: must match format 1.23 (98 words, Dec 27, 2023)
- [Invalid go version - Sonatype Nexus Repository - Sonatype Community](/content/community/t/invalid-go-version/11818/1/index.html): go: errors parsing go.mod: 
/home/vsts/work/1/s/go.mod:3: invalid go version ‘1.21.5’: must match format 1.23 (30 words, Dec 27, 2023)
- [Unable to publish the library to the Sonatype Nexus repository - Sonatype Nexus Repository - Sonatype Community](/content/community/t/unable-to-publish-the-library-to-the-sonatype-nexus-repository/11812/index.html): When I try to publish the library to the Sonatype Nexus repository, I get this: 

Task :image-preview:publishReleasePublicationToMyImagePreviewSnapshotRepository FAILED 

FAILURE: Build failed with an exception. 

What w&hellip; (108 words, Dec 25, 2023)
- [Unable to publish the library to the Sonatype Nexus repository - Sonatype Nexus Repository - Sonatype Community](/content/community/t/unable-to-publish-the-library-to-the-sonatype-nexus-repository/11812/1/index.html): When I try to publish the library to the Sonatype Nexus repository, I get this: 

Task :image-preview:publishReleasePublicationToMyImagePreviewSnapshotRepository FAILED 

FAILURE: Build failed with an exception. 

What w&hellip; (169 words, Dec 25, 2023)
- [Cannot DELETE from private docker repo - Sonatype Nexus Repository - Sonatype Community](/content/community/t/cannot-delete-from-private-docker-repo/11810/index.html): Hi 
I’m run sonatype/nexus3:3.63.0 from docker. There’s also nginx reverse proxy with SSL cert. 
When trying to delete from private docker repo using docker’s API (as wrote at https://support.sonatype.com/hc/en-us/articl&hellip; (86 words, Dec 25, 2023)
- [Cannot DELETE from private docker repo - Sonatype Nexus Repository - Sonatype Community](/content/community/t/cannot-delete-from-private-docker-repo/11810/1/index.html): Hi 
I’m run sonatype/nexus3:3.63.0 from docker. There’s also nginx reverse proxy with SSL cert. 
When trying to delete from private docker repo using docker’s API (as wrote at https://support.sonatype.com/hc/en-us/articl&hellip; (93 words, Dec 25, 2023)
- [Join us at 12pm EST for December Office Hours! - Community Announcements - Sonatype Community](/content/community/t/join-us-at-12pm-est-for-december-office-hours/11788/2/index.html): Join us at 12 pm EST (9 am PST | 5 pm GMT) for our monthly, customer-exclusive Office Hours . This month, we’ll be discussing the following topics: 

December Learn Package: Our Favorite Things
Jira Cloud Integration

D&hellip; (193 words, Dec 19, 2023)
- [Join us at 12pm EST for December Office Hours! - Community Announcements - Sonatype Community](/content/community/t/join-us-at-12pm-est-for-december-office-hours/11788/index.html): Join us at 12 pm EST (9 am PST | 5 pm GMT) for our monthly, customer-exclusive Office Hours . This month, we’ll be discussing the following topics: 

December Learn Package: Our Favorite Things
Jira Cloud Integration

D&hellip; (121 words, Dec 19, 2023)
- [Join us at 12pm EST for December Office Hours! - Community Announcements - Sonatype Community](/content/community/t/join-us-at-12pm-est-for-december-office-hours/11788/1/index.html): Join us at 12 pm EST (9 am PST | 5 pm GMT) for our monthly, customer-exclusive Office Hours . This month, we’ll be discussing the following topics: 

December Learn Package: Our Favorite Things
Jira Cloud Integration

D&hellip; (191 words, Dec 19, 2023)
- [Help setting up Docker Proxy - Sonatype Nexus Repository - Sonatype Community](/content/community/t/help-setting-up-docker-proxy/11772/12/index.html): Hello! 
What do I need? 
I have trouble setting up a proxy Docker repository. 
My objective is to have the possibility to pull a Jupyter Notebook image from my Nexus repository. 
So I would want to set up a proxy Docker &hellip; (952 words, Dec 19, 2023)
- [Help setting up Docker Proxy - Sonatype Nexus Repository - Sonatype Community](/content/community/t/help-setting-up-docker-proxy/11772/index.html): Hello! 
What do I need? 
I have trouble setting up a proxy Docker repository. 
My objective is to have the possibility to pull a Jupyter Notebook image from my Nexus repository. 
So I would want to set up a proxy Docker &hellip; (871 words, Dec 15, 2023)
- [Help setting up Docker Proxy - Sonatype Nexus Repository - Sonatype Community](/content/community/t/help-setting-up-docker-proxy/11772/1/index.html): Hello! 
What do I need? 
I have trouble setting up a proxy Docker repository. 
My objective is to have the possibility to pull a Jupyter Notebook image from my Nexus repository. 
So I would want to set up a proxy Docker &hellip; (1,010 words, Dec 15, 2023)
- [Join us for December Office Hours - Tuesday, December 19th at 12pm EST - Community Announcements - Sonatype Community](/content/community/t/join-us-for-december-office-hours-tuesday-december-19th-at-12pm-est/11758/2/index.html): Join us Tuesday, December 19th at 12 pm EST (9 am PST | 5 pm GMT) for our monthly, customer-exclusive Office Hours . This month, we’ll be discussing the following topics: 

December Learn Package: Our Favorite Things
J&hellip; (134 words, Dec 13, 2023)
- [Join us for December Office Hours - Tuesday, December 19th at 12pm EST - Community Announcements - Sonatype Community](/content/community/t/join-us-for-december-office-hours-tuesday-december-19th-at-12pm-est/11758/index.html): Join us Tuesday, December 19th at 12 pm EST (9 am PST | 5 pm GMT) for our monthly, customer-exclusive Office Hours . This month, we’ll be discussing the following topics: 

December Learn Package: Our Favorite Things
J&hellip; (206 words, Dec 13, 2023)
- [Join us for December Office Hours - Tuesday, December 19th at 12pm EST - Community Announcements - Sonatype Community](/content/community/t/join-us-for-december-office-hours-tuesday-december-19th-at-12pm-est/11758/1/index.html): Join us Tuesday, December 19th at 12 pm EST (9 am PST | 5 pm GMT) for our monthly, customer-exclusive Office Hours . This month, we’ll be discussing the following topics: 

December Learn Package: Our Favorite Things
J&hellip; (230 words, Dec 13, 2023)
- [Apt repo snapshot failing with dists/jammy/Contents-amd64 404 Not Found Error - Sonatype Nexus Repository - Sonatype Community](/content/community/t/apt-repo-snapshot-failing-with-dists-jammy-contents-amd64-404-not-found-error/9793/4/index.html): Hello Folks 
created a snapshot using apt repo proxy and the same has been given in the sources.list file but failing with “dists/jammy/Contents-amd64  404  Not Found”  error. 
There is no file with that name in the snap&hellip; (179 words, Dec 13, 2023)
- [Sonatype nexus access issue - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-access-issue/11744/3/index.html): Error response from daemon: Get https://10.10.10.25:1234/v2/: http: server gave HTTP response to HTTPS client 
This error came while i tried to access nexus installed at 10.10.10.25 .i tried to docker login from 10.10.10&hellip; (128 words, Dec 13, 2023)
- [Nexus does not download .pbf files - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-does-not-download-pbf-files/11741/3/index.html): Hi, everyone. 
I created a raw repository in Nexus to proxy https://download.geofabrik.de/ to my internal network. This website is used to download OpenStreetMap files. The problem is when I try to download .pbf files fr&hellip; (177 words, Dec 11, 2023)
- [Sonatype nexus access issue - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-access-issue/11744/index.html): Error response from daemon: Get https://10.10.10.25:1234/v2/: http: server gave HTTP response to HTTPS client 
This error came while i tried to access nexus installed at 10.10.10.25 .i tried to docker login from 10.10.10&hellip; (119 words, Dec 11, 2023)
- [Sonatype nexus access issue - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-access-issue/11744/1/index.html): Error response from daemon: Get https://10.10.10.25:1234/v2/: http: server gave HTTP response to HTTPS client 
This error came while i tried to access nexus installed at 10.10.10.25 .i tried to docker login from 10.10.10&hellip; (125 words, Dec 11, 2023)
- [Nexus does not download .pbf files - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-does-not-download-pbf-files/11741/index.html): Hi, everyone. 
I created a raw repository in Nexus to proxy https://download.geofabrik.de/ to my internal network. This website is used to download OpenStreetMap files. The problem is when I try to download .pbf files fr&hellip; (181 words, Dec 11, 2023)
- [Nexus does not download .pbf files - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-does-not-download-pbf-files/11741/1/index.html): Hi, everyone. 
I created a raw repository in Nexus to proxy https://download.geofabrik.de/ to my internal network. This website is used to download OpenStreetMap files. The problem is when I try to download .pbf files fr&hellip; (173 words, Dec 11, 2023)
- [Nexus Set cookie and http - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-set-cookie-and-http/11720/3/index.html): Need guidance on how I can change the nexus application to the following: 

Set settings on this specific cookie

e.g.: Set-Cookie: &lt; cookie-name &gt;=&lt; cookie-value &gt;; secure; HttpOnly; SameSite= ‘Lax’ or ‘Strict’ 

Set se&hellip; (138 words, Dec 7, 2023)
- [December 2023 Learn Package - Our Favorite Things - Sonatype Learn - Sonatype Community](/content/community/t/december-2023-learn-package-our-favorite-things/11730/index.html): Happy holidays from the Sonatype Customer Education team! As we wrap up the year, we’re taking the month of December to highlight a few of our favorite things (I promise, there’s no singing). Some of these are throwbacks&hellip; (659 words, Dec 7, 2023)
- [December 2023 Learn Package - Our Favorite Things - Sonatype Learn - Sonatype Community](/content/community/t/december-2023-learn-package-our-favorite-things/11730/1/index.html): Happy holidays from the Sonatype Customer Education team! As we wrap up the year, we’re taking the month of December to highlight a few of our favorite things (I promise, there’s no singing). Some of these are throwbacks&hellip; (660 words, Dec 7, 2023)
- [Some error on random page - Sonatype Nexus Repository - Sonatype Community](/content/community/t/some-error-on-random-page/11719/3/index.html): Hi. 
My NRM vers 3.39 based on a docker container. 
After some time, NMR gave an error: 

Uncaught TypeError: Cannot read properties of null (reading ‘ownerContext’) (http://domain.io:8081/static/rapture/baseapp-prod.js?&hellip; (153 words, Dec 7, 2023)
- [Discrepancy in Nexus Repository Manager Images on catalog.redhat.com - Sonatype Nexus Repository - Sonatype Community](/content/community/t/discrepancy-in-nexus-repository-manager-images-on-catalog-redhat-com/11717/2/index.html): Hello everyone, 
I’ve encountered an issue regarding the container images for sonatype/nexus-repository-manager 2 on https://catalog.redhat.com/ 5 (redhat.io). The current version available is 3.43.0-ubi-1, whereas the e&hellip; (143 words, Dec 6, 2023)
- [Some error on random page - Sonatype Nexus Repository - Sonatype Community](/content/community/t/some-error-on-random-page/11719/index.html): Hi. 
My NRM vers 3.39 based on a docker container. 
After some time, NMR gave an error: 

Uncaught TypeError: Cannot read properties of null (reading ‘ownerContext’) (http://domain.io:8081/static/rapture/baseapp-prod.js?&hellip; (230 words, Dec 6, 2023)
- [Some error on random page - Sonatype Nexus Repository - Sonatype Community](/content/community/t/some-error-on-random-page/11719/1/index.html): Hi. 
My NRM vers 3.39 based on a docker container. 
After some time, NMR gave an error: 

Uncaught TypeError: Cannot read properties of null (reading ‘ownerContext’) (http://domain.io:8081/static/rapture/baseapp-prod.js?&hellip; (156 words, Dec 6, 2023)
- [Discrepancy in Nexus Repository Manager Images on catalog.redhat.com - Sonatype Nexus Repository - Sonatype Community](/content/community/t/discrepancy-in-nexus-repository-manager-images-on-catalog-redhat-com/11717/index.html): Hello everyone, 
I’ve encountered an issue regarding the container images for sonatype/nexus-repository-manager 2 on https://catalog.redhat.com/ 5 (redhat.io). The current version available is 3.43.0-ubi-1, whereas the e&hellip; (143 words, Dec 6, 2023)
- [Discrepancy in Nexus Repository Manager Images on catalog.redhat.com - Sonatype Nexus Repository - Sonatype Community](/content/community/t/discrepancy-in-nexus-repository-manager-images-on-catalog-redhat-com/11717/1/index.html): Hello everyone, 
I’ve encountered an issue regarding the container images for sonatype/nexus-repository-manager 2 on https://catalog.redhat.com/ 5 (redhat.io). The current version available is 3.43.0-ubi-1, whereas the e&hellip; (143 words, Dec 6, 2023)
- [Update Your IQ Server License Threat Groups - Sonatype Labs - Sonatype Community](/content/community/t/update-your-iq-server-license-threat-groups/3094/32/index.html): The license threat group updater will apply the latest Sonatype provided license classification to your running IQ server’s license threat groups. This will alleviate any “License Threat Group not Assigned” policy violat&hellip; (690 words, Dec 5, 2023)
- [Update Your IQ Server License Threat Groups - Sonatype Labs - Sonatype Community](/content/community/t/update-your-iq-server-license-threat-groups/3094/31/index.html): The license threat group updater will apply the latest Sonatype provided license classification to your running IQ server’s license threat groups. This will alleviate any “License Threat Group not Assigned” policy violat&hellip; (687 words, Dec 4, 2023)
- [How to migrate Nexus from one server to another one - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-to-migrate-nexus-from-one-server-to-another-one/11691/2/index.html): Hello everyone, 
I want to migrate Nexus (Server: Nexus/3.55.0-01 (OSS))  from one machine to another without losing any existing data. (72 words, Dec 4, 2023)
- [Bulk Moves & Bulk Updates - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/bulk-moves-bulk-updates/5037/2/index.html): Currently if I had to move a few apps from one organization to another , I have to do it one by one. There is no option to move it in bulk. Sometimes you have a bunch of apps being handled by one team which then moves un&hellip; (203 words, Dec 4, 2023)
- [Getting paginated results from REST API with continuation token - Sonatype Nexus Repository - Sonatype Community](/content/community/t/getting-paginated-results-from-rest-api-with-continuation-token/8813/2/index.html): Posted this here: 


Can anyone recommend a strategy in Node for retrieving the full list of results from the REST API with continuation token using recursive fetch? (426 words, Dec 1, 2023)
- [How to migrate Nexus from one server to another one - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-to-migrate-nexus-from-one-server-to-another-one/11691/index.html): Hello everyone, 
I want to migrate Nexus (Server: Nexus/3.55.0-01 (OSS))  from one machine to another without losing any existing data. (143 words, Dec 1, 2023)
- [How to migrate Nexus from one server to another one - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-to-migrate-nexus-from-one-server-to-another-one/11691/1/index.html): Hello everyone, 
I want to migrate Nexus (Server: Nexus/3.55.0-01 (OSS))  from one machine to another without losing any existing data. (140 words, Dec 1, 2023)
- [Apt repo: metadata folder is not created - Sonatype Nexus Repository - Sonatype Community](/content/community/t/apt-repo-metadata-folder-is-not-created/11685/3/index.html): We use the apt repository build in Nexus OSS 3.62…0-01. 
Two old apt repositories created in an earlier version work as expected. But two new ones created in the now used version doesn’t create the metadata folder after &hellip; (177 words, Nov 30, 2023)
- [Apt repo: metadata folder is not created - Sonatype Nexus Repository - Sonatype Community](/content/community/t/apt-repo-metadata-folder-is-not-created/11685/2/index.html): We use the apt repository build in Nexus OSS 3.62…0-01. 
Two old apt repositories created in an earlier version work as expected. But two new ones created in the now used version doesn’t create the metadata folder after &hellip; (117 words, Nov 30, 2023)
- ["Server Disconnected: There is a problem communicating with the server: - Sonatype Nexus Repository - Sonatype Community](/content/community/t/server-disconnected-there-is-a-problem-communicating-with-the-server/1450/11/index.html): Hi Everyone, 
I’m attempting to use Nexus as a proxy to cache Chocolatey packages for my organization. I’ve installed Nexus on a Intel NUC running W10 Pro. Unfortunately, when I load the GUI in the web-browser I’m inform&hellip; (805 words, Nov 30, 2023)
- [Apt repo: metadata folder is not created - Sonatype Nexus Repository - Sonatype Community](/content/community/t/apt-repo-metadata-folder-is-not-created/11685/index.html): We use the apt repository build in Nexus OSS 3.62…0-01. 
Two old apt repositories created in an earlier version work as expected. But two new ones created in the now used version doesn’t create the metadata folder after &hellip; (117 words, Nov 30, 2023)
- [Apt repo: metadata folder is not created - Sonatype Nexus Repository - Sonatype Community](/content/community/t/apt-repo-metadata-folder-is-not-created/11685/1/index.html): We use the apt repository build in Nexus OSS 3.62…0-01. 
Two old apt repositories created in an earlier version work as expected. But two new ones created in the now used version doesn’t create the metadata folder after &hellip; (93 words, Nov 30, 2023)
- [What is the maximum length of a regex pattern in a Routing Rule? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/what-is-the-maximum-length-of-a-regex-pattern-in-a-routing-rule/11677/4/index.html): I’m creating a blocking routing rule with many matchers to prevent dependency namespace confusion attacks. In my case this requires enumerating all component names that I’m trying to block, and there are a few hundred of&hellip; (256 words, Nov 29, 2023)
- [TimeoutException: Idle timeout expired: 30000/30000 ms - Sonatype Nexus Repository - Sonatype Community](/content/community/t/timeoutexception-idle-timeout-expired-30000-30000-ms/11649/2/index.html): Used software 
Sonatype Nexus Repository 
Version	3.54.1-01 
Edition: OSS 
Build Revision: 1d4cfb6677ff22546a9484428082eb35a10dbf24 
Docker image: moby/buildkit:v0.11.3 
Hi community. 
We are using Sonatype Nexus Reposit&hellip; (218 words, Nov 29, 2023)
- [What is the maximum length of a regex pattern in a Routing Rule? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/what-is-the-maximum-length-of-a-regex-pattern-in-a-routing-rule/11677/index.html): I’m creating a blocking routing rule with many matchers to prevent dependency namespace confusion attacks. In my case this requires enumerating all component names that I’m trying to block, and there are a few hundred of&hellip; (256 words, Nov 29, 2023)
- [What is the maximum length of a regex pattern in a Routing Rule? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/what-is-the-maximum-length-of-a-regex-pattern-in-a-routing-rule/11677/1/index.html): I’m creating a blocking routing rule with many matchers to prevent dependency namespace confusion attacks. In my case this requires enumerating all component names that I’m trying to block, and there are a few hundred of&hellip; (256 words, Nov 29, 2023)
- [NexuShell - a PowerShell CLI for Nexus Repository - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexushell-a-powershell-cli-for-nexus-repository/11669/2/index.html): I work for Chocolatey Software and as such I need to build repository servers…a LOT. I got tired of manual effort and clunky scripts so I createdNexuShell, a PowerShell wrapper module for the Nexus Repository API. It’s n&hellip; (510 words, Nov 28, 2023)
- [NexuShell - a PowerShell CLI for Nexus Repository - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexushell-a-powershell-cli-for-nexus-repository/11669/index.html): I work for Chocolatey Software and as such I need to build repository servers…a LOT. I got tired of manual effort and clunky scripts so I createdNexuShell, a PowerShell wrapper module for the Nexus Repository API. It’s n&hellip; (510 words, Nov 27, 2023)
- [NexuShell - a PowerShell CLI for Nexus Repository - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexushell-a-powershell-cli-for-nexus-repository/11669/1/index.html): I work for Chocolatey Software and as such I need to build repository servers…a LOT. I got tired of manual effort and clunky scripts so I createdNexuShell, a PowerShell wrapper module for the Nexus Repository API. It’s n&hellip; (507 words, Nov 27, 2023)
- [Nexus RM3 OSS h2 vulnerability - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-rm3-oss-h2-vulnerability/9179/6/index.html): NXRM3 version: 3.41.1-01 
h2 DB: 1.4.200 
Current version of h2 DB contains a few critical vulnerabilities: 

CVE-2021-23463
CVE-2021-42392
CVE-2022-23221

It seems these are fixed in latest 2.0.206+ versions. 
What’s th&hellip; (294 words, Nov 27, 2023)
- [Trouble when try to update nexus manager 3 from version 3.41 to 3.62 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/trouble-when-try-to-update-nexus-manager-3-from-version-3-41-to-3-62/11652/index.html): hi, when updating nexus manager 3 from version 3.41 to 3.62 I get the following error 
database created with orientdb version not supported anymore, use export+import to migrate the database
	DB name=&quot;analytics&quot;

and ful&hellip; (279 words, Nov 23, 2023)
- [Trouble when try to update nexus manager 3 from version 3.41 to 3.62 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/trouble-when-try-to-update-nexus-manager-3-from-version-3-41-to-3-62/11652/1/index.html): hi, when updating nexus manager 3 from version 3.41 to 3.62 I get the following error 
database created with orientdb version not supported anymore, use export+import to migrate the database
	DB name=&quot;analytics&quot;

and ful&hellip; (266 words, Nov 23, 2023)
- [TimeoutException: Idle timeout expired: 30000/30000 ms - Sonatype Nexus Repository - Sonatype Community](/content/community/t/timeoutexception-idle-timeout-expired-30000-30000-ms/11649/index.html): Used software 
Sonatype Nexus Repository 
Version	3.54.1-01 
Edition: OSS 
Build Revision: 1d4cfb6677ff22546a9484428082eb35a10dbf24 
Docker image: moby/buildkit:v0.11.3 
Hi community. 
We are using Sonatype Nexus Reposit&hellip; (217 words, Nov 23, 2023)
- [TimeoutException: Idle timeout expired: 30000/30000 ms - Sonatype Nexus Repository - Sonatype Community](/content/community/t/timeoutexception-idle-timeout-expired-30000-30000-ms/11649/1/index.html): Used software 
Sonatype Nexus Repository 
Version	3.54.1-01 
Edition: OSS 
Build Revision: 1d4cfb6677ff22546a9484428082eb35a10dbf24 
Docker image: moby/buildkit:v0.11.3 
Hi community. 
We are using Sonatype Nexus Reposit&hellip; (214 words, Nov 23, 2023)
- [Custom headers for proxy maven repository to Gitlab package repo? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/custom-headers-for-proxy-maven-repository-to-gitlab-package-repo/11117/3/index.html): I’m trying to add a proxy Maven repository for a Gitlab package repository. 
Gitlab repositories require authentication via a custom header. 
e.g. 
Private-Token: abcdefghijk

I can’t find a way to configure this. Any id&hellip; (77 words, Nov 22, 2023)
- [Error en el botón "Analyze Application" - Sonatype Nexus Repository - Sonatype Community](/content/community/t/error-en-el-boton-analyze-application/11627/index.html): Hola, 
¿sabéis por qué el botón “Analyze Application” da este error? (ver captura de pantalla adjunta) 
Estoy usando Sonaype Nexus OSS 3.62.0-01 
Gracias! (62 words, Nov 17, 2023)
- [Error en el botón "Analyze Application" - Sonatype Nexus Repository - Sonatype Community](/content/community/t/error-en-el-boton-analyze-application/11627/1/index.html): Hola, 
¿sabéis por qué el botón “Analyze Application” da este error? (ver captura de pantalla adjunta) 
Estoy usando Sonaype Nexus OSS 3.62.0-01 
Gracias! (56 words, Nov 17, 2023)
- [Join us in 1 hour for November Office Hours - 10 a.m EST - Community Announcements - Sonatype Community](/content/community/t/join-us-in-1-hour-for-november-office-hours-10-a-m-est/11620/index.html): Join us in one hour at 10 am EST (7 am PST | 3 pm GMT) for our monthly, customer-exclusive Office Hours . This month, we’ll be discussing the following topics: 


Sonatype IDE Plugins: Quick Wins

Sonatype Nexus Reposi&hellip; (141 words, Nov 16, 2023)
- [Newbie here. My angular project got 0 violation - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/newbie-here-my-angular-project-got-0-violation/11587/5/index.html): It’s quite surprising that I received zero violations. 
While having zero violations is a positive outcome, it hasn’t convinced my boss :(. 
There is no ‘package-lock.json’ in my repository. 
What did I miss in my CI pro&hellip; (333 words, Nov 16, 2023)
- [Missing "Apt - Rebuild Apt metadata" - Sonatype Nexus Repository - Sonatype Community](/content/community/t/missing-apt-rebuild-apt-metadata/11618/index.html): Hello, I am looking for task called “Apt - Rebuild Apt metadata” because cleanup policy does not rebuild metadata when deleting files. Task was added with version &quot; 3.48.0&quot; and I am using Nexus “OSS 3.51.0-01”, but can’t&hellip; (129 words, Nov 16, 2023)
- [ERROR: there is no unique or exclusion constraint matching the ON CONFLICT specification to upload packages - Sonatype Nexus Repository - Sonatype Community](/content/community/t/error-there-is-no-unique-or-exclusion-constraint-matching-the-on-conflict-specification-to-upload-packages/11547/3/index.html): Hello everyone! 
Take these error. When i want to upload npm package in repository, nexus given error : 
ERROR: there is no unique or exclusion constraint matching the ON CONFLICT specification

It’s strange, cause i was&hellip; (180 words, Nov 15, 2023)
- [Download Speed had been limited by nexus？ - Sonatype Nexus Repository - Sonatype Community](/content/community/t/download-speed-had-been-limited-by-nexus/11610/index.html): hi， 
when I try to download from nexus repos using IB network, it seems the download speed had been limited, 
1.download directly from the httpd service, 
[root@h19r2n05 tmp]# wget http://11.8.19.46:8881/tmp_10g_1.tar
--&hellip; (197 words, Nov 15, 2023)
- [Nexus Repository Best Practices: Cleanup Policies - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/nexus-repository-best-practices-cleanup-policies/11467/7/index.html): Quiz time: imagine a Nexus Repository instance used by a Javascript team that builds once every two weeks. How can an administrator remove components from the repo that aren’t being used? And how long should a component &hellip; (631 words, Nov 13, 2023)
- [Nexus Repository Best Practices: Cleanup Policies, Part 2 - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/nexus-repository-best-practices-cleanup-policies-part-2/11593/index.html): In our last Best Practices post (which you can read here) we talked a little about cleanup policies. The operative word there is “little” – there’s a lot more to say. 
This one may be obvious, but a best practice is to s&hellip; (415 words, Nov 13, 2023)
- [Nexus Repository Best Practices: Cleanup Policies, Part 2 - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/nexus-repository-best-practices-cleanup-policies-part-2/11593/1/index.html): In our last Best Practices post (which you can read here) we talked a little about cleanup policies. The operative word there is “little” – there’s a lot more to say. 
This one may be obvious, but a best practice is to s&hellip; (578 words, Nov 13, 2023)
- [java.io.IOException: Invalid keystore format - Sonatype Nexus Repository - Sonatype Community](/content/community/t/java-io-ioexception-invalid-keystore-format/11580/3/index.html): Dear all, 
I’ve created an new key- and truststore with an new certificate. 
With this new keystore the Nexus doesn’t work. 
This is written in the Nexus-logfile: 
ERROR [jetty-main-1]  *SYSTEM org.sonatype.nexus.bootstr&hellip; (147 words, Nov 13, 2023)
- [Newbie here. My angular project got 0 violation - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/newbie-here-my-angular-project-got-0-violation/11587/index.html): It’s quite surprising that I received zero violations. 
While having zero violations is a positive outcome, it hasn’t convinced my boss :(. 
There is no ‘package-lock.json’ in my repository. 
What did I miss in my CI pro&hellip; (627 words, Nov 13, 2023)
- [Newbie here. My angular project got 0 violation - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/newbie-here-my-angular-project-got-0-violation/11587/1/index.html): It’s quite surprising that I received zero violations. 
While having zero violations is a positive outcome, it hasn’t convinced my boss :(. 
There is no ‘package-lock.json’ in my repository. 
What did I miss in my CI pro&hellip; (520 words, Nov 13, 2023)
- [Nexus ldap issue - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-ldap-issue/8190/6/index.html): I am using Sonatype Nexus Repository ManagerOSS 3.37.3-02. 
I can establish the connection with the LDAP server, and I can verify the user mapping as well. 
I am able to login with LDAP users, but sometimes, it throws an&hellip; (583 words, Nov 11, 2023)
- [java.io.IOException: Invalid keystore format - Sonatype Nexus Repository - Sonatype Community](/content/community/t/java-io-ioexception-invalid-keystore-format/11580/index.html): Dear all, 
I’ve created an new key- and truststore with an new certificate. 
With this new keystore the Nexus doesn’t work. 
This is written in the Nexus-logfile: 
ERROR [jetty-main-1]  *SYSTEM org.sonatype.nexus.bootstr&hellip; (146 words, Nov 10, 2023)
- [java.io.IOException: Invalid keystore format - Sonatype Nexus Repository - Sonatype Community](/content/community/t/java-io-ioexception-invalid-keystore-format/11580/1/index.html): Dear all, 
I’ve created an new key- and truststore with an new certificate. 
With this new keystore the Nexus doesn’t work. 
This is written in the Nexus-logfile: 
ERROR [jetty-main-1]  *SYSTEM org.sonatype.nexus.bootstr&hellip; (146 words, Nov 10, 2023)
- [Join us for November Office Hours - Thursday, November 16th at 10am EST - Community Announcements - Sonatype Community](/content/community/t/join-us-for-november-office-hours-thursday-november-16th-at-10am-est/11575/index.html): Join us Thursday, November 16th at 10 am EST (7 am PST | 3 pm GMT) for our monthly, customer-exclusive Office Hours . This month, we’ll be discussing the following topics: 


Sonatype IDE Plugins: Quick Wins

Sonatype &hellip; (216 words, Nov 9, 2023)
- [Upgrade issue from 3.21.1 to 3.29.0 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/upgrade-issue-from-3-21-1-to-3-29-0/11574/index.html): Hello Team, 
I am trying to upgrade container based nexus 3.21.1 to 3.29.0 using the images available. 
But, found that, new version is modifying the URL of repository with appended PORT. 
Steps: just replaced the image &hellip; (291 words, Nov 8, 2023)
- [Upgrade issue from 3.21.1 to 3.29.0 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/upgrade-issue-from-3-21-1-to-3-29-0/11574/1/index.html): Hello Team, 
I am trying to upgrade container based nexus 3.21.1 to 3.29.0 using the images available. 
But, found that, new version is modifying the URL of repository with appended PORT. 
Steps: just replaced the image &hellip; (289 words, Nov 8, 2023)
- [Where are the swagger files for nexus iq apis? - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/where-are-the-swagger-files-for-nexus-iq-apis/11534/3/index.html): I found some nexus iq/sonatype apis that are useful and now I want to be able to use them.  Is there a swagger file so I can generate a client api for it? (186 words, Nov 2, 2023)
- [ERROR: there is no unique or exclusion constraint matching the ON CONFLICT specification to upload packages - Sonatype Nexus Repository - Sonatype Community](/content/community/t/error-there-is-no-unique-or-exclusion-constraint-matching-the-on-conflict-specification-to-upload-packages/11547/index.html): Hello everyone! 
Take these error. When i want to upload npm package in repository, nexus given error : 
ERROR: there is no unique or exclusion constraint matching the ON CONFLICT specification

It’s strange, cause i was&hellip; (156 words, Nov 2, 2023)
- [ERROR: there is no unique or exclusion constraint matching the ON CONFLICT specification to upload packages - Sonatype Nexus Repository - Sonatype Community](/content/community/t/error-there-is-no-unique-or-exclusion-constraint-matching-the-on-conflict-specification-to-upload-packages/11547/1/index.html): Hello everyone! 
Take these error. When i want to upload npm package in repository, nexus given error : 
ERROR: there is no unique or exclusion constraint matching the ON CONFLICT specification

It’s strange, cause i was&hellip; (150 words, Nov 2, 2023)
- [Where are the swagger files for nexus iq apis? - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/where-are-the-swagger-files-for-nexus-iq-apis/11534/index.html): I found some nexus iq/sonatype apis that are useful and now I want to be able to use them.  Is there a swagger file so I can generate a client api for it? (120 words, Oct 30, 2023)
- [Where are the swagger files for nexus iq apis? - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/where-are-the-swagger-files-for-nexus-iq-apis/11534/1/index.html): I found some nexus iq/sonatype apis that are useful and now I want to be able to use them.  Is there a swagger file so I can generate a client api for it? (126 words, Oct 30, 2023)
- [Rest API to get all the component labels - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/rest-api-to-get-all-the-component-labels/11348/3/index.html): I have a requirement where I need to fetch all the component label of all applications in one API call. One API is there in documentation but with that one you need to provide application id. I have hundreds of applicati&hellip; (214 words, Oct 30, 2023)
- [How to control publishing file to nexus 2 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-to-control-publishing-file-to-nexus-2/11512/2/index.html): Hi, right now I’m trying to publish a artifact to nexus 2, I was able to do that but at the donwload section it showing we a lot of check-sum file (sha256, sha512) which I didn’t need can we some home hide them ? 
I want&hellip; (157 words, Oct 30, 2023)
- [Is there bulk api for component remediation for multiple components - Sonatype Exchange / Sonatype Exchange Discussion - Sonatype Community](/content/community/t/is-there-bulk-api-for-component-remediation-for-multiple-components/11514/3/index.html): Is there bulk api for component remediation for multiple components (164 words, Oct 30, 2023)
- [componentIdentifier null in policyViolation api - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/componentidentifier-null-in-policyviolation-api/11502/7/index.html): https://help.sonatype.com/iqserver/automating/rest-apis/policy-violation-rest-api---v2 
I have been requesting data from the above api with success, but the reason I am trying to use this api is to get application name a&hellip; (504 words, Oct 27, 2023)
- [Is there bulk api for component remediation for multiple components - Sonatype Exchange / Sonatype Exchange Discussion - Sonatype Community](/content/community/t/is-there-bulk-api-for-component-remediation-for-multiple-components/11514/index.html): Is there bulk api for component remediation for multiple components (96 words, Oct 27, 2023)
- [Is there bulk api for component remediation for multiple components - Sonatype Exchange / Sonatype Exchange Discussion - Sonatype Community](/content/community/t/is-there-bulk-api-for-component-remediation-for-multiple-components/11514/1/index.html): Is there bulk api for component remediation for multiple components (155 words, Oct 27, 2023)
- [How to control publishing file to nexus 2 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-to-control-publishing-file-to-nexus-2/11512/index.html): Hi, right now I’m trying to publish a artifact to nexus 2, I was able to do that but at the donwload section it showing we a lot of check-sum file (sha256, sha512) which I didn’t need can we some home hide them ? 
I want&hellip; (151 words, Oct 27, 2023)
- [How to control publishing file to nexus 2 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-to-control-publishing-file-to-nexus-2/11512/1/index.html): Hi, right now I’m trying to publish a artifact to nexus 2, I was able to do that but at the donwload section it showing we a lot of check-sum file (sha256, sha512) which I didn’t need can we some home hide them ? 
I want&hellip; (156 words, Oct 27, 2023)
- [componentIdentifier null in policyViolation api - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/componentidentifier-null-in-policyviolation-api/11502/6/index.html): https://help.sonatype.com/iqserver/automating/rest-apis/policy-violation-rest-api---v2 
I have been requesting data from the above api with success, but the reason I am trying to use this api is to get application name a&hellip; (503 words, Oct 26, 2023)
- [componentIdentifier null in policyViolation api - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/componentidentifier-null-in-policyviolation-api/11502/5/index.html): https://help.sonatype.com/iqserver/automating/rest-apis/policy-violation-rest-api---v2 
I have been requesting data from the above api with success, but the reason I am trying to use this api is to get application name a&hellip; (504 words, Oct 26, 2023)
- [NexusIQ Unable to Scan SBOM - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/nexusiq-unable-to-scan-sbom/11489/2/index.html): Hello, 
We’ve been using nexus iq in our pipelines to read an SBOM generated via Cyclonedx to create reports for vulnerabilities. It seems that the newer Sonatype IQ server release (168) has broken our SBOM scanning. We’&hellip; (198 words, Oct 26, 2023)
- [componentIdentifier null in policyViolation api - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/componentidentifier-null-in-policyviolation-api/11502/4/index.html): https://help.sonatype.com/iqserver/automating/rest-apis/policy-violation-rest-api---v2 
I have been requesting data from the above api with success, but the reason I am trying to use this api is to get application name a&hellip; (503 words, Oct 26, 2023)
- [Join us in 1 hour for October Office Hours - 11 a.m EDT - Community Announcements - Sonatype Community](/content/community/t/join-us-in-1-hour-for-october-office-hours-11-a-m-edt/11504/index.html): Join us in one hour at 11 am EDT (8 am PDT | 4 pm BST) for our monthly, customer-exclusive Office Hours . This month, we’ll be discussing the following topics: 

October 2023 Learn Package: Training and Education
Visual &hellip; (136 words, Oct 25, 2023)
- [Join us in 1 hour for October Office Hours - 11 a.m EDT - Community Announcements - Sonatype Community](/content/community/t/join-us-in-1-hour-for-october-office-hours-11-a-m-edt/11504/1/index.html): Join us in one hour at 11 am EDT (8 am PDT | 4 pm BST) for our monthly, customer-exclusive Office Hours . This month, we’ll be discussing the following topics: 

October 2023 Learn Package: Training and Education
Visual &hellip; (149 words, Oct 25, 2023)
- [componentIdentifier null in policyViolation api - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/componentidentifier-null-in-policyviolation-api/11502/3/index.html): https://help.sonatype.com/iqserver/automating/rest-apis/policy-violation-rest-api---v2 
I have been requesting data from the above api with success, but the reason I am trying to use this api is to get application name a&hellip; (504 words, Oct 25, 2023)
- [componentIdentifier null in policyViolation api - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/componentidentifier-null-in-policyviolation-api/11502/2/index.html): https://help.sonatype.com/iqserver/automating/rest-apis/policy-violation-rest-api---v2 
I have been requesting data from the above api with success, but the reason I am trying to use this api is to get application name a&hellip; (505 words, Oct 25, 2023)
- [componentIdentifier null in policyViolation api - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/componentidentifier-null-in-policyviolation-api/11502/index.html): https://help.sonatype.com/iqserver/automating/rest-apis/policy-violation-rest-api---v2 
I have been requesting data from the above api with success, but the reason I am trying to use this api is to get application name a&hellip; (504 words, Oct 25, 2023)
- [componentIdentifier null in policyViolation api - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/componentidentifier-null-in-policyviolation-api/11502/1/index.html): https://help.sonatype.com/iqserver/automating/rest-apis/policy-violation-rest-api---v2 
I have been requesting data from the above api with success, but the reason I am trying to use this api is to get application name a&hellip; (504 words, Oct 25, 2023)
- [The only file for Open Source scans with Golang is NOT supported - Sonatype Lifecycle & Repository Firewall / Best Practices - Sonatype Community](/content/community/t/the-only-file-for-open-source-scans-with-golang-is-not-supported/11491/index.html): https://help.sonatype.com/iqserver/analysis/go-application-analysis 
According to this page go.sum may be used for dependency scanning, but is not recommended. I think it should be removed from this help page if it is no&hellip; (920 words, Oct 24, 2023)
- [The only file for Open Source scans with Golang is NOT supported - Sonatype Lifecycle & Repository Firewall / Best Practices - Sonatype Community](/content/community/t/the-only-file-for-open-source-scans-with-golang-is-not-supported/11491/1/index.html): https://help.sonatype.com/iqserver/analysis/go-application-analysis 
According to this page go.sum may be used for dependency scanning, but is not recommended. I think it should be removed from this help page if it is no&hellip; (919 words, Oct 24, 2023)
- [NexusIQ Unable to Scan SBOM - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/nexusiq-unable-to-scan-sbom/11489/index.html): Hello, 
We’ve been using nexus iq in our pipelines to read an SBOM generated via Cyclonedx to create reports for vulnerabilities. It seems that the newer Sonatype IQ server release (168) has broken our SBOM scanning. We’&hellip; (196 words, Oct 24, 2023)
- [NexusIQ Unable to Scan SBOM - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/nexusiq-unable-to-scan-sbom/11489/1/index.html): Hello, 
We’ve been using nexus iq in our pipelines to read an SBOM generated via Cyclonedx to create reports for vulnerabilities. It seems that the newer Sonatype IQ server release (168) has broken our SBOM scanning. We’&hellip; (194 words, Oct 24, 2023)
- [Raw Repository with HTTPS endpoint - Sonatype Nexus Repository - Sonatype Community](/content/community/t/raw-repository-with-https-endpoint/11471/3/index.html): Hello, 
I am new to nexus repo manager and I am trying to get a raw repository setup to simply host a binary that we can download from. We recently migrated our instance from one network to another. This new network does&hellip; (225 words, Oct 24, 2023)
- [Raw Repository with HTTPS endpoint - Sonatype Nexus Repository - Sonatype Community](/content/community/t/raw-repository-with-https-endpoint/11471/index.html): Hello, 
I am new to nexus repo manager and I am trying to get a raw repository setup to simply host a binary that we can download from. We recently migrated our instance from one network to another. This new network does&hellip; (225 words, Oct 20, 2023)
- [Raw Repository with HTTPS endpoint - Sonatype Nexus Repository - Sonatype Community](/content/community/t/raw-repository-with-https-endpoint/11471/1/index.html): Hello, 
I am new to nexus repo manager and I am trying to get a raw repository setup to simply host a binary that we can download from. We recently migrated our instance from one network to another. This new network does&hellip; (225 words, Oct 20, 2023)
- [Nexus Repository Best Practices: Cleanup Policies - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/nexus-repository-best-practices-cleanup-policies/11467/index.html): Quiz time: imagine a Nexus Repository instance used by a Javascript team that builds once every two weeks. How can an administrator remove components from the repo that aren’t being used? And how long should a component &hellip; (376 words, Oct 19, 2023)
- [Nexus Repository Best Practices: Cleanup Policies - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/nexus-repository-best-practices-cleanup-policies/11467/1/index.html): Quiz time: imagine a Nexus Repository instance used by a Javascript team that builds once every two weeks. How can an administrator remove components from the repo that aren’t being used? And how long should a component &hellip; (545 words, Oct 19, 2023)
- [Join us for October Office Hours - Wednesday, October 25th at 11am EDT - Community Announcements - Sonatype Community](/content/community/t/join-us-for-october-office-hours-wednesday-october-25th-at-11am-edt/11460/2/index.html): Join us Wednesday, October 25th at 11 am EDT (8 am PDT | 4 pm BST) for our monthly, customer-exclusive Office Hours . This month, we’ll be discussing the following topics: 

October 2023 Learn Package: Training and Edu&hellip; (221 words, Oct 18, 2023)
- [Join us for October Office Hours - Wednesday, October 25th at 11am EDT - Community Announcements - Sonatype Community](/content/community/t/join-us-for-october-office-hours-wednesday-october-25th-at-11am-edt/11460/index.html): Join us Wednesday, October 25th at 11 am EDT (8 am PDT | 4 pm BST) for our monthly, customer-exclusive Office Hours . This month, we’ll be discussing the following topics: 

October 2023 Learn Package: Training and Edu&hellip; (227 words, Oct 18, 2023)
- [Join us for October Office Hours - Wednesday, October 25th at 11am EDT - Community Announcements - Sonatype Community](/content/community/t/join-us-for-october-office-hours-wednesday-october-25th-at-11am-edt/11460/1/index.html): Join us Wednesday, October 25th at 11 am EDT (8 am PDT | 4 pm BST) for our monthly, customer-exclusive Office Hours . This month, we’ll be discussing the following topics: 

October 2023 Learn Package: Training and Edu&hellip; (137 words, Oct 18, 2023)
- [Getting Could not find artifact after yesterday release - Sonatype Nexus Repository - Sonatype Community](/content/community/t/getting-could-not-find-artifact-after-yesterday-release/11424/3/index.html): Failed to collect dependencies at com.jayway.jsonpath:json-path:jar:2.4.0: Failed to read artifact descriptor for com.jayway.jsonpath:json-path:jar:2.4.0: Could not find artifact org.eclipse.sensinact.gateway.nthbnd:pare&hellip; (146 words, Oct 11, 2023)
- [Getting Could not find artifact after yesterday release - Sonatype Nexus Repository - Sonatype Community](/content/community/t/getting-could-not-find-artifact-after-yesterday-release/11424/index.html): Failed to collect dependencies at com.jayway.jsonpath:json-path:jar:2.4.0: Failed to read artifact descriptor for com.jayway.jsonpath:json-path:jar:2.4.0: Could not find artifact org.eclipse.sensinact.gateway.nthbnd:pare&hellip; (142 words, Oct 10, 2023)
- [Getting Could not find artifact after yesterday release - Sonatype Nexus Repository - Sonatype Community](/content/community/t/getting-could-not-find-artifact-after-yesterday-release/11424/1/index.html): Failed to collect dependencies at com.jayway.jsonpath:json-path:jar:2.4.0: Failed to read artifact descriptor for com.jayway.jsonpath:json-path:jar:2.4.0: Could not find artifact org.eclipse.sensinact.gateway.nthbnd:pare&hellip; (142 words, Oct 10, 2023)
- [Need details about Total Nexus artifact size,Total # of artifact,Min/Max/Avg Artifact size - Sonatype Nexus Repository - Sonatype Community](/content/community/t/need-details-about-total-nexus-artifact-size-total-of-artifact-min-max-avg-artifact-size/11420/index.html): Hello Community, 
I need the list of details Total Nexus artifact size,Total # of artifact,Min/Max/Avg Artifact size from nexus repository. Could you please help me to get details. 
Regards, 
Bhaskar (55 words, Oct 10, 2023)
- [Need details about Total Nexus artifact size,Total # of artifact,Min/Max/Avg Artifact size - Sonatype Nexus Repository - Sonatype Community](/content/community/t/need-details-about-total-nexus-artifact-size-total-of-artifact-min-max-avg-artifact-size/11420/1/index.html): Hello Community, 
I need the list of details Total Nexus artifact size,Total # of artifact,Min/Max/Avg Artifact size from nexus repository. Could you please help me to get details. 
Regards, 
Bhaskar (60 words, Oct 10, 2023)
- [Error: Could not find or load main class com.install4j.runtime.launcher.UnixLauncher - Sonatype Nexus Repository - Sonatype Community](/content/community/t/error-could-not-find-or-load-main-class-com-install4j-runtime-launcher-unixlauncher/11412/3/index.html): I am receiving an error message: “Error: Could not find or load main class com.install4j.runtime.launcher.UnixLauncher”. 
Here is some information about my environment: 

OS: Ubuntu 22.04.3 LTS
Kernel: 6.2.0-1009-aws
CPU&hellip; (307 words, Oct 9, 2023)
- [Error: Could not find or load main class com.install4j.runtime.launcher.UnixLauncher - Sonatype Nexus Repository - Sonatype Community](/content/community/t/error-could-not-find-or-load-main-class-com-install4j-runtime-launcher-unixlauncher/11412/index.html): I am receiving an error message: “Error: Could not find or load main class com.install4j.runtime.launcher.UnixLauncher”. 
Here is some information about my environment: 

OS: Ubuntu 22.04.3 LTS
Kernel: 6.2.0-1009-aws
CPU&hellip; (330 words, Oct 6, 2023)
- [Error: Could not find or load main class com.install4j.runtime.launcher.UnixLauncher - Sonatype Nexus Repository - Sonatype Community](/content/community/t/error-could-not-find-or-load-main-class-com-install4j-runtime-launcher-unixlauncher/11412/1/index.html): I am receiving an error message: “Error: Could not find or load main class com.install4j.runtime.launcher.UnixLauncher”. 
Here is some information about my environment: 

OS: Ubuntu 22.04.3 LTS
Kernel: 6.2.0-1009-aws
CPU&hellip; (315 words, Oct 6, 2023)
- [Firewall Best Practices: Quarantine for Copyleft Licenses - Sonatype Lifecycle & Repository Firewall / Best Practices - Sonatype Community](/content/community/t/firewall-best-practices-quarantine-for-copyleft-licenses/11328/6/index.html): Quarantine for Copyleft Licenses 
Have you rolled out quarantine to all your repositories? I’m always eager to learn more about what you’re blocking and why you’re blocking it – especially for apps that won’t ever be dis&hellip; (634 words, Oct 5, 2023)
- [Update Your IQ Server License Threat Groups - Sonatype Labs - Sonatype Community](/content/community/t/update-your-iq-server-license-threat-groups/3094/30/index.html): The license threat group updater will apply the latest Sonatype provided license classification to your running IQ server’s license threat groups. This will alleviate any “License Threat Group not Assigned” policy violat&hellip; (610 words, Oct 5, 2023)
- [Update Your IQ Server License Threat Groups - Sonatype Labs - Sonatype Community](/content/community/t/update-your-iq-server-license-threat-groups/3094/29/index.html): The license threat group updater will apply the latest Sonatype provided license classification to your running IQ server’s license threat groups. This will alleviate any “License Threat Group not Assigned” policy violat&hellip; (532 words, Sep 28, 2023)
- [Join us in 1 hour for September Office Hours - 10 a.m EDT - Community Announcements - Sonatype Community](/content/community/t/join-us-in-1-hour-for-september-office-hours-10-a-m-edt/11374/2/index.html): Join us in one hour at 10 am EDT (7 am PDT | 3 pm BST) for our monthly, customer-exclusive Office Hours . This month, we’ll be discussing the following topics: 

September 2023 Learn Package: Sonatype Developer Tools
S&hellip; (263 words, Sep 28, 2023)
- [Join us in 1 hour for September Office Hours - 10 a.m EDT - Community Announcements - Sonatype Community](/content/community/t/join-us-in-1-hour-for-september-office-hours-10-a-m-edt/11374/index.html): Join us in one hour at 10 am EDT (7 am PDT | 3 pm BST) for our monthly, customer-exclusive Office Hours . This month, we’ll be discussing the following topics: 

September 2023 Learn Package: Sonatype Developer Tools
S&hellip; (154 words, Sep 28, 2023)
- [Join us in 1 hour for September Office Hours - 10 a.m EDT - Community Announcements - Sonatype Community](/content/community/t/join-us-in-1-hour-for-september-office-hours-10-a-m-edt/11374/1/index.html): Join us in one hour at 10 am EDT (7 am PDT | 3 pm BST) for our monthly, customer-exclusive Office Hours . This month, we’ll be discussing the following topics: 

September 2023 Learn Package: Sonatype Developer Tools
S&hellip; (223 words, Sep 28, 2023)
- [Error, "Failed to fetch results from V2 feed", When downloading from group repo using nuget.exe - Sonatype Nexus Repository - Sonatype Community](/content/community/t/error-failed-to-fetch-results-from-v2-feed-when-downloading-from-group-repo-using-nuget-exe/11367/index.html): When I tried to download a package from group repo using nuget.exe, I failed with the error saying “Failed to fetch results from V2 feed”.  When I download from hosted repo, I don’t have any issue. 
Detail message I see &hellip; (335 words, Sep 27, 2023)
- [Error, "Failed to fetch results from V2 feed", When downloading from group repo using nuget.exe - Sonatype Nexus Repository - Sonatype Community](/content/community/t/error-failed-to-fetch-results-from-v2-feed-when-downloading-from-group-repo-using-nuget-exe/11367/1/index.html): When I tried to download a package from group repo using nuget.exe, I failed with the error saying “Failed to fetch results from V2 feed”.  When I download from hosted repo, I don’t have any issue. 
Detail message I see &hellip; (328 words, Sep 27, 2023)
- [Nexus3 yum proxy repodata force refresh - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus3-yum-proxy-repodata-force-refresh/11362/index.html): Noticed multiple times that yum proxy repository not refreshing metadata  (repodata) that was updated on remote side (Invalidate cache, rebuild index  didnt help) 
to solve it is possible: 

to recreate whole proxy repo
v&hellip; (100 words, Sep 26, 2023)
- [Nexus3 yum proxy repodata force refresh - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus3-yum-proxy-repodata-force-refresh/11362/1/index.html): Noticed multiple times that yum proxy repository not refreshing metadata  (repodata) that was updated on remote side (Invalidate cache, rebuild index  didnt help) 
to solve it is possible: 

to recreate whole proxy repo
v&hellip; (104 words, Sep 26, 2023)
- [Publish npm artifact tar package on nexus - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/publish-npm-artifact-tar-package-on-nexus/11352/3/index.html): Hi Team, 
I want to publish npm package on nexus 3. For which I have already created repositories. I am able to create user and roles and also added realm. 
But still I am struggling with exact permission or role to gran&hellip; (243 words, Sep 25, 2023)
- [Publish npm artifact tar package on nexus - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/publish-npm-artifact-tar-package-on-nexus/11352/index.html): Hi Team, 
I want to publish npm package on nexus 3. For which I have already created repositories. I am able to create user and roles and also added realm. 
But still I am struggling with exact permission or role to gran&hellip; (249 words, Sep 23, 2023)
- [Publish npm artifact tar package on nexus - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/publish-npm-artifact-tar-package-on-nexus/11352/1/index.html): Hi Team, 
I want to publish npm package on nexus 3. For which I have already created repositories. I am able to create user and roles and also added realm. 
But still I am struggling with exact permission or role to gran&hellip; (246 words, Sep 23, 2023)
- [Rest API to get all the component labels - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/rest-api-to-get-all-the-component-labels/11348/index.html): I have a requirement where I need to fetch all the component label of all applications in one API call. One API is there in documentation but with that one you need to provide application id. I have hundreds of applicati&hellip; (213 words, Sep 22, 2023)
- [Rest API to get all the component labels - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/rest-api-to-get-all-the-component-labels/11348/1/index.html): I have a requirement where I need to fetch all the component label of all applications in one API call. One API is there in documentation but with that one you need to provide application id. I have hundreds of applicati&hellip; (219 words, Sep 22, 2023)
- [Join us for September Office Hours - Thursday, September 28th at 10am EDT - Community Announcements - Sonatype Community](/content/community/t/join-us-for-september-office-hours-thursday-september-28th-at-10am-edt/11343/1/index.html): Join us Thursday, September 28th at 10 am EDT (7 am PDT | 3 pm BST) for our monthly, customer-exclusive Office Hours. This month, we’ll be discussing the following topics: 

September 2023 Learn Package: Sonatype Devel&hellip; (247 words, Sep 21, 2023)
- [Is my Jenkins version 2.289.2 is compatible with Nexus IQ plugin(nexus-platform) and nexus platform plugin not listed in Jenkins - Sonatype Nexus Repository - Sonatype Community](/content/community/t/is-my-jenkins-version-2-289-2-is-compatible-with-nexus-iq-plugin-nexus-platform-and-nexus-platform-plugin-not-listed-in-jenkins/11341/2/index.html): I am going to use nexus IQ in my project ,trying to configure nexus repository with my Jenkins server but I am not able to find the nexus platform plugin which is related to Nexus IQ. 
is there any way to find or is it d&hellip; (120 words, Sep 21, 2023)
- [Is my Jenkins version 2.289.2 is compatible with Nexus IQ plugin(nexus-platform) and nexus platform plugin not listed in Jenkins - Sonatype Nexus Repository - Sonatype Community](/content/community/t/is-my-jenkins-version-2-289-2-is-compatible-with-nexus-iq-plugin-nexus-platform-and-nexus-platform-plugin-not-listed-in-jenkins/11341/index.html): I am going to use nexus IQ in my project ,trying to configure nexus repository with my Jenkins server but I am not able to find the nexus platform plugin which is related to Nexus IQ. 
is there any way to find or is it d&hellip; (122 words, Sep 21, 2023)
- [Is my Jenkins version 2.289.2 is compatible with Nexus IQ plugin(nexus-platform) and nexus platform plugin not listed in Jenkins - Sonatype Nexus Repository - Sonatype Community](/content/community/t/is-my-jenkins-version-2-289-2-is-compatible-with-nexus-iq-plugin-nexus-platform-and-nexus-platform-plugin-not-listed-in-jenkins/11341/1/index.html): I am going to use nexus IQ in my project ,trying to configure nexus repository with my Jenkins server but I am not able to find the nexus platform plugin which is related to Nexus IQ. 
is there any way to find or is it d&hellip; (120 words, Sep 21, 2023)
- [Violations details - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/violations-details/11333/2/index.html): please i would like to get reports in excel format that should include all these information. 
1 all organizations and apps 
2 all violations with their status(open status when first time was open and for fixed the date &hellip; (228 words, Sep 20, 2023)
- [Nexus IQ CLI 167 | CycloneDX JSON null version is not supported - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/nexus-iq-cli-167-cyclonedx-json-null-version-is-not-supported/11334/1/index.html): Getting following error: 
[ERROR] CycloneDX JSON null version is not supported
[ERROR] Error details:
com.sonatype.insight.scan.file.InvalidSbomException: CycloneDX JSON null version is not supported (46 words, Sep 20, 2023)
- [Issue : Cannot execute query "SELECT * FROM quartz_trigger WHERE state IN [ ?,?,? ]": low heap memory - Sonatype Nexus Repository - Sonatype Community](/content/community/t/issue-cannot-execute-query-select-from-quartz-trigger-where-state-in-low-heap-memory/11249/4/index.html): Hi All, 
we are using below nexu3 in production setup : 




Version
3.37.3-02




Edition
OSS


Build Revision
43b5a0e9e1ce21baf3f0ccbf7cb2811b6bbcf580



We are getting below mentioned error very frequently post which &hellip; (473 words, Sep 20, 2023)
- [Violations details - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/violations-details/11333/index.html): please i would like to get reports in excel format that should include all these information. 
1 all organizations and apps 
2 all violations with their status(open status when first time was open and for fixed the date &hellip; (205 words, Sep 20, 2023)
- [Firewall Best Practices: Quarantine for Copyleft Licenses - Sonatype Lifecycle & Repository Firewall / Best Practices - Sonatype Community](/content/community/t/firewall-best-practices-quarantine-for-copyleft-licenses/11328/index.html): Quarantine for Copyleft Licenses 
Have you rolled out quarantine to all your repositories? I’m always eager to learn more about what you’re blocking and why you’re blocking it – especially for apps that won’t ever be dis&hellip; (675 words, Sep 19, 2023)
- [Firewall Best Practices: Quarantine for Copyleft Licenses - Sonatype Lifecycle & Repository Firewall / Best Practices - Sonatype Community](/content/community/t/firewall-best-practices-quarantine-for-copyleft-licenses/11328/1/index.html): Quarantine for Copyleft Licenses 
Have you rolled out quarantine to all your repositories? I’m always eager to learn more about what you’re blocking and why you’re blocking it – especially for apps that won’t ever be dis&hellip; (687 words, Sep 19, 2023)
- [GitHub Packages as npm proxy - Sonatype Nexus Repository - Sonatype Community](/content/community/t/github-packages-as-npm-proxy/5034/7/index.html): Hello, 
is it possible to configure Nexus to use GitHub Packages as a npm proxy? HTTP authentication option doesn’t seem to work. 
Here are GitHub docs how to do it locally: https://docs.github.com/en/free-pro-team@lates&hellip; (685 words, Sep 18, 2023)
- [Get last downloaded date of an asset from Nexus repository manager 3.26.1 - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/get-last-downloaded-date-of-an-asset-from-nexus-repository-manager-3-26-1/11319/index.html): Hello, 
I am trying to get the details of assets related to last downloaded date from Nexus repository manager 3.26.1. 
But I am unable to find an api to get this information. 
Is there any way to get this detail in this&hellip; (135 words, Sep 18, 2023)
- [Get last downloaded date of an asset from Nexus repository manager 3.26.1 - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/get-last-downloaded-date-of-an-asset-from-nexus-repository-manager-3-26-1/11319/1/index.html): Hello, 
I am trying to get the details of assets related to last downloaded date from Nexus repository manager 3.26.1. 
But I am unable to find an api to get this information. 
Is there any way to get this detail in this&hellip; (135 words, Sep 18, 2023)
- [Slow proxy groups connections containing https://registry.npmjs.org/ as remote storage options - Sonatype Nexus Repository - Sonatype Community](/content/community/t/slow-proxy-groups-connections-containing-https-registry-npmjs-org-as-remote-storage-options/11309/index.html): Sonatype Nexus Repository ManagerOSS 3.41.1-01 
We are experiencing slow npm installing packages affecting builds local or triggered by ci pipelines 
When installing/packing from from hosted repos is quite quick, but vas&hellip; (236 words, Sep 15, 2023)
- [Slow proxy groups connections containing https://registry.npmjs.org/ as remote storage options - Sonatype Nexus Repository - Sonatype Community](/content/community/t/slow-proxy-groups-connections-containing-https-registry-npmjs-org-as-remote-storage-options/11309/1/index.html): Sonatype Nexus Repository ManagerOSS 3.41.1-01 
We are experiencing slow npm installing packages affecting builds local or triggered by ci pipelines 
When installing/packing from from hosted repos is quite quick, but vas&hellip; (141 words, Sep 15, 2023)
- [Nexus S3 blobstore doesn't work with S3 interface endpoint in AWS - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-s3-blobstore-doesnt-work-with-s3-interface-endpoint-in-aws/11306/index.html): I have an EC2 instance in one private subnet. And I have an S3 interface endpoint in another private subnet. Both are in same VPC. 
In my NACL rules, I have below 
Outbound 0.0.0.0 All-traffic
Inbound VPC-CIDR All-traffi&hellip; (151 words, Sep 14, 2023)
- [Nexus S3 blobstore doesn't work with S3 interface endpoint in AWS - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-s3-blobstore-doesnt-work-with-s3-interface-endpoint-in-aws/11306/1/index.html): I have an EC2 instance in one private subnet. And I have an S3 interface endpoint in another private subnet. Both are in same VPC. 
In my NACL rules, I have below 
Outbound 0.0.0.0 All-traffic
Inbound VPC-CIDR All-traffi&hellip; (155 words, Sep 14, 2023)
- [Correct use of apt proxy - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/correct-use-of-apt-proxy/9352/4/index.html): When creating an apt proxy, we are asked for the “distribution”. So I went ahead and created two apt proxies for bionic and focal called bionic and focal. 
I then configured the apt repos on my hosts like so: 
deb http:/&hellip; (369 words, Sep 14, 2023)
- [org.eclipse.jetty.io.EofException: timeout - Sonatype Nexus Repository - Sonatype Community](/content/community/t/org-eclipse-jetty-io-eofexception-timeout/9175/3/index.html): Hi , 
We are getting error while downloading artifacts from Nexus. We have bunch of servers and failure is coming randomly on any of the server. Below is the error in Nexus logs. 
2022-08-22 05:18:21,073+0000 ERROR [qtp4&hellip; (125 words, Sep 14, 2023)
- [Error with nexus-staging-maven-plugin - Central Repository - Sonatype Community](/content/community/t/error-with-nexus-staging-maven-plugin/11297/index.html): Hello, I am trying to deploy to Maven central with the nexus-staging-maven-plugin and I am getting this error 
Java version: 11.0.18 
Maven: 3.9.2 
[INFO] [ERROR] Failed to execute goal org.sonatype.plugins:nexus-staging&hellip; (76 words, Sep 13, 2023)
- [Error with nexus-staging-maven-plugin - Central Repository - Sonatype Community](/content/community/t/error-with-nexus-staging-maven-plugin/11297/1/index.html): Hello, I am trying to deploy to Maven central with the nexus-staging-maven-plugin and I am getting this error 
Java version: 11.0.18 
Maven: 3.9.2 
[INFO] [ERROR] Failed to execute goal org.sonatype.plugins:nexus-staging&hellip; (143 words, Sep 13, 2023)
- [How to configure settings.xml file in Nexus server for proxy maven mirror - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/how-to-configure-settings-xml-file-in-nexus-server-for-proxy-maven-mirror/11295/index.html): Hi Team 
I work in Data Platform team in which we use Talend as ETL software. 
We are facing some issue to configure a proxy maven repository  in our On-Premise Nexus3 server for download third-part libraries in the Tale&hellip; (143 words, Sep 13, 2023)
- [How to configure settings.xml file in Nexus server for proxy maven mirror - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/how-to-configure-settings-xml-file-in-nexus-server-for-proxy-maven-mirror/11295/1/index.html): Hi Team 
I work in Data Platform team in which we use Talend as ETL software. 
We are facing some issue to configure a proxy maven repository  in our On-Premise Nexus3 server for download third-part libraries in the Tale&hellip; (143 words, Sep 13, 2023)
- [Whenever I Run NPM Publish Command, I Get Error like this npm ERR! 429 Too Many Requests - PUT https://registry.npmjs.org/ - Sonatype Exchange / Sonatype Exchange Discussion - Sonatype Community](/content/community/t/whenever-i-run-npm-publish-command-i-get-error-like-this-npm-err-429-too-many-requests-put-https-registry-npmjs-org/11288/2/index.html): This problem message appears whenever I run NPM Publish.  Please, if you can, assist me. 
npm notice === Tarball Details === 
npm notice name:          sample-web 
npm notice version:       0.0.0 
npm notice package size&hellip; (129 words, Sep 13, 2023)
- [Whenever I Run NPM Publish Command, I Get Error like this npm ERR! 429 Too Many Requests - PUT https://registry.npmjs.org/ - Sonatype Exchange / Sonatype Exchange Discussion - Sonatype Community](/content/community/t/whenever-i-run-npm-publish-command-i-get-error-like-this-npm-err-429-too-many-requests-put-https-registry-npmjs-org/11288/index.html): This problem message appears whenever I run NPM Publish.  Please, if you can, assist me. 
npm notice === Tarball Details === 
npm notice name:          sample-web 
npm notice version:       0.0.0 
npm notice package size&hellip; (129 words, Sep 13, 2023)
- [Whenever I Run NPM Publish Command, I Get Error like this npm ERR! 429 Too Many Requests - PUT https://registry.npmjs.org/ - Sonatype Exchange / Sonatype Exchange Discussion - Sonatype Community](/content/community/t/whenever-i-run-npm-publish-command-i-get-error-like-this-npm-err-429-too-many-requests-put-https-registry-npmjs-org/11288/1/index.html): This problem message appears whenever I run NPM Publish.  Please, if you can, assist me. 
npm notice === Tarball Details === 
npm notice name:          sample-web 
npm notice version:       0.0.0 
npm notice package size&hellip; (131 words, Sep 13, 2023)
- [Helm push failed - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/helm-push-failed/11271/3/index.html): Hi Team, 
I was created helm repo in sonartype nexus while pushing the chart to repo getting an error as ( http: server gave HTTP response to HTTPS client) how to resolve that can you assist on that. 
helm version - 3.10&hellip; (138 words, Sep 12, 2023)
- [Helm push failed - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/helm-push-failed/11271/2/index.html): Hi Team, 
I was created helm repo in sonartype nexus while pushing the chart to repo getting an error as ( http: server gave HTTP response to HTTPS client) how to resolve that can you assist on that. 
helm version - 3.10&hellip; (142 words, Sep 12, 2023)
- [Helm push failed - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/helm-push-failed/11271/index.html): Hi Team, 
I was created helm repo in sonartype nexus while pushing the chart to repo getting an error as ( http: server gave HTTP response to HTTPS client) how to resolve that can you assist on that. 
helm version - 3.10&hellip; (142 words, Sep 11, 2023)
- [Helm push failed - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/helm-push-failed/11271/1/index.html): Hi Team, 
I was created helm repo in sonartype nexus while pushing the chart to repo getting an error as ( http: server gave HTTP response to HTTPS client) how to resolve that can you assist on that. 
helm version - 3.10&hellip; (138 words, Sep 11, 2023)
- [How to create repository for registry.access.redhat.com - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-to-create-repository-for-registry-access-redhat-com/11255/index.html): how to create repository for registry.access.redhat.com? Does it need custom index? (118 words, Sep 7, 2023)
- [How to create repository for registry.access.redhat.com - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-to-create-repository-for-registry-access-redhat-com/11255/1/index.html): how to create repository for registry.access.redhat.com? Does it need custom index? (93 words, Sep 7, 2023)
- [List assets with API based on creation date in nexus repository manager 3.26.1 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/list-assets-with-api-based-on-creation-date-in-nexus-repository-manager-3-26-1/11253/index.html): Hi! 
Can I get a list of assets by creation date in nexus repo manager 3.26.1? 
Please advice. (115 words, Sep 7, 2023)
- [Issue : Cannot execute query "SELECT * FROM quartz_trigger WHERE state IN [ ?,?,? ]": low heap memory - Sonatype Nexus Repository - Sonatype Community](/content/community/t/issue-cannot-execute-query-select-from-quartz-trigger-where-state-in-low-heap-memory/11249/index.html): Hi All, 
we are using below nexu3 in production setup : 




Version
3.37.3-02




Edition
OSS


Build Revision
43b5a0e9e1ce21baf3f0ccbf7cb2811b6bbcf580



We are getting below mentioned error very frequently post which &hellip; (452 words, Sep 7, 2023)
- [Issue : Cannot execute query "SELECT * FROM quartz_trigger WHERE state IN [ ?,?,? ]": low heap memory - Sonatype Nexus Repository - Sonatype Community](/content/community/t/issue-cannot-execute-query-select-from-quartz-trigger-where-state-in-low-heap-memory/11249/1/index.html): Hi All, 
we are using below nexu3 in production setup : 




Version
3.37.3-02




Edition
OSS


Build Revision
43b5a0e9e1ce21baf3f0ccbf7cb2811b6bbcf580



We are getting below mentioned error very frequently post which &hellip; (474 words, Sep 7, 2023)
- [Issues? Or something changed - cannot download artifact without user/pass prompt - Central Repository - Sonatype Community](/content/community/t/issues-or-something-changed-cannot-download-artifact-without-user-pass-prompt/10593/14/index.html): Trying to download in a script from maven central using a URL I’ve used plenty before – this fails. 
Has something changed? The URL still seems to be in the current docs? 

➜  /tmp wget “http://repository.sonatype.org/se&hellip; (544 words, Sep 6, 2023)
- [What is the best way to auto maintain snapshots with classifier? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/what-is-the-best-way-to-auto-maintain-snapshots-with-classifier/11227/3/index.html): Hi guys, 
Currently we’re using &quot;Delete SNAPSHOT Task’ to automate delete the old snapshots, here are the key parameters of the task: 
Minimum snapshot count: 5 
Snapshot retention (days): 30 
The task runs as our expect&hellip; (236 words, Sep 6, 2023)
- [What is the best way to auto maintain snapshots with classifier? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/what-is-the-best-way-to-auto-maintain-snapshots-with-classifier/11227/2/index.html): Hi guys, 
Currently we’re using &quot;Delete SNAPSHOT Task’ to automate delete the old snapshots, here are the key parameters of the task: 
Minimum snapshot count: 5 
Snapshot retention (days): 30 
The task runs as our expect&hellip; (237 words, Sep 5, 2023)
- [What is the best way to auto maintain snapshots with classifier? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/what-is-the-best-way-to-auto-maintain-snapshots-with-classifier/11227/index.html): Hi guys, 
Currently we’re using &quot;Delete SNAPSHOT Task’ to automate delete the old snapshots, here are the key parameters of the task: 
Minimum snapshot count: 5 
Snapshot retention (days): 30 
The task runs as our expect&hellip; (237 words, Sep 5, 2023)
- [What is the best way to auto maintain snapshots with classifier? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/what-is-the-best-way-to-auto-maintain-snapshots-with-classifier/11227/1/index.html): Hi guys, 
Currently we’re using &quot;Delete SNAPSHOT Task’ to automate delete the old snapshots, here are the key parameters of the task: 
Minimum snapshot count: 5 
Snapshot retention (days): 30 
The task runs as our expect&hellip; (237 words, Sep 5, 2023)
- [Lifecycle Best Practices: Remediation Tips, part 3 - Sonatype Lifecycle & Repository Firewall / Best Practices - Sonatype Community](/content/community/t/lifecycle-best-practices-remediation-tips-part-3/11214/index.html): Hi, folks! 
Ready to talk more about remediation? This is part three in a series. In the first post, we talked about the best-case remediation scenario. In the last post, we covered best practices for trickier remediatio&hellip; (370 words, Sep 1, 2023)
- [Lifecycle Best Practices: Remediation Tips, part 3 - Sonatype Lifecycle & Repository Firewall / Best Practices - Sonatype Community](/content/community/t/lifecycle-best-practices-remediation-tips-part-3/11214/1/index.html): Hi, folks! 
Ready to talk more about remediation? This is part three in a series. In the first post, we talked about the best-case remediation scenario. In the last post, we covered best practices for trickier remediatio&hellip; (375 words, Sep 1, 2023)
- [Lifecycle Best Practices; Remediation Tips, part 2 - Sonatype Lifecycle & Repository Firewall / Best Practices - Sonatype Community](/content/community/t/lifecycle-best-practices-remediation-tips-part-2/11148/4/index.html): Hi, folks! 
Ready to talk more about remediation? In the last post, we talked about the best-case remediation scenario. In this post, I’ll share some best practices for more tricky remediation scenarios. And in the third&hellip; (520 words, Sep 1, 2023)
- [Spdx.org used in Nexus IQ extension for Azure DevOps version 1.7.5 - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/spdx-org-used-in-nexus-iq-extension-for-azure-devops-version-1-7-5/11203/4/index.html): Question for the Sonatype team: 
Since version 1.7.5 of the Sonatype extension called “Nexus IQ for Azure DevOps” (Nexus IQ for Azure DevOps - Visual Studio Marketplace) a call is done to spdx.org to check on some licens&hellip; (378 words, Sep 1, 2023)
- [How to download all folders inside my nexus repositories? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-to-download-all-folders-inside-my-nexus-repositories/11211/2/index.html): Hi Team, 
I wanted to download all folders inside myrepository repositories. Could you please assist here ? 
Nexus url : http://nexus.labs.com/content/repositories/myrepository (73 words, Sep 1, 2023)
- [Retrieve a list of components programmatically via tag - Sonatype Nexus Repository - Sonatype Community](/content/community/t/retrieve-a-list-of-components-programmatically-via-tag/11207/2/index.html): Hello - I’m experimenting with potential workflows for Nexus Repository Pro and am trying to retrieve a list of components via API (or some other fashion that can be automated). Is this currently possible? Thanks! (90 words, Sep 1, 2023)
- [How to download all folders inside my nexus repositories? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-to-download-all-folders-inside-my-nexus-repositories/11211/index.html): Hi Team, 
I wanted to download all folders inside myrepository repositories. Could you please assist here ? 
Nexus url : http://nexus.labs.com/content/repositories/myrepository (73 words, Sep 1, 2023)
- [How to download all folders inside my nexus repositories? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-to-download-all-folders-inside-my-nexus-repositories/11211/1/index.html): Hi Team, 
I wanted to download all folders inside myrepository repositories. Could you please assist here ? 
Nexus url : http://nexus.labs.com/content/repositories/myrepository (73 words, Sep 1, 2023)
- [Nexus IQ CLI download fails on Fedora dnf/yum GPG key issue - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/nexus-iq-cli-download-fails-on-fedora-dnf-yum-gpg-key-issue/11208/index.html): Hi there, 
I’ve tried to install nexus-iq-cli tool via yum/dnf on Fedora 38. 
Followed the instructions here: 
https://help.sonatype.com/iqserver/integrations/nexus-iq-cli#NexusIQCLI-Linux 
Installation fails: 
Downloadi&hellip; (142 words, Sep 1, 2023)
- [Nexus IQ CLI download fails on Fedora dnf/yum GPG key issue - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/nexus-iq-cli-download-fails-on-fedora-dnf-yum-gpg-key-issue/11208/1/index.html): Hi there, 
I’ve tried to install nexus-iq-cli tool via yum/dnf on Fedora 38. 
Followed the instructions here: 
https://help.sonatype.com/iqserver/integrations/nexus-iq-cli#NexusIQCLI-Linux 
Installation fails: 
Downloadi&hellip; (234 words, Sep 1, 2023)
- [Retrieve a list of components programmatically via tag - Sonatype Nexus Repository - Sonatype Community](/content/community/t/retrieve-a-list-of-components-programmatically-via-tag/11207/index.html): Hello - I’m experimenting with potential workflows for Nexus Repository Pro and am trying to retrieve a list of components via API (or some other fashion that can be automated). Is this currently possible? Thanks! (88 words, Aug 31, 2023)
- [Retrieve a list of components programmatically via tag - Sonatype Nexus Repository - Sonatype Community](/content/community/t/retrieve-a-list-of-components-programmatically-via-tag/11207/1/index.html): Hello - I’m experimenting with potential workflows for Nexus Repository Pro and am trying to retrieve a list of components via API (or some other fashion that can be automated). Is this currently possible? Thanks! (190 words, Aug 31, 2023)
- [Spdx.org used in Nexus IQ extension for Azure DevOps version 1.7.5 - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/spdx-org-used-in-nexus-iq-extension-for-azure-devops-version-1-7-5/11203/index.html): Question for the Sonatype team: 
Since version 1.7.5 of the Sonatype extension called “Nexus IQ for Azure DevOps” (Nexus IQ for Azure DevOps - Visual Studio Marketplace) a call is done to spdx.org to check on some licens&hellip; (378 words, Aug 31, 2023)
- [Spdx.org used in Nexus IQ extension for Azure DevOps version 1.7.5 - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/spdx-org-used-in-nexus-iq-extension-for-azure-devops-version-1-7-5/11203/1/index.html): Question for the Sonatype team: 
Since version 1.7.5 of the Sonatype extension called “Nexus IQ for Azure DevOps” (Nexus IQ for Azure DevOps - Visual Studio Marketplace) a call is done to spdx.org to check on some licens&hellip; (400 words, Aug 31, 2023)
- [Broken Pages in DB - Sonatype Nexus Repository - Sonatype Community](/content/community/t/broken-pages-in-db/11187/index.html): Hi, 
we are using Nexus Storage manager. After a crash of the the Nexus application, the storage has been switched to readonly mode. The storage has a size of about 400 GB. 
Here is the error output 
2023-08-29 09:40:41,&hellip; (199 words, Aug 29, 2023)
- [Broken Pages in DB - Sonatype Nexus Repository - Sonatype Community](/content/community/t/broken-pages-in-db/11187/1/index.html): Hi, 
we are using Nexus Storage manager. After a crash of the the Nexus application, the storage has been switched to readonly mode. The storage has a size of about 400 GB. 
Here is the error output 
2023-08-29 09:40:41,&hellip; (196 words, Aug 29, 2023)
- [Join us in 1 hour for August Office Hours - 12 p.m EDT - Community Announcements - Sonatype Community](/content/community/t/join-us-in-1-hour-for-august-office-hours-12-p-m-edt/11183/index.html): Join us in one hour at 12 pm EDT (9 am PDT | 5 pm BST) for our monthly, customer-exclusive Office Hours. This month, we’ll be discussing the following topics: 


August 2023 Learn Package - New to Sonatype Repository F&hellip; (240 words, Aug 29, 2023)
- [Join us in 1 hour for August Office Hours - 12 p.m EDT - Community Announcements - Sonatype Community](/content/community/t/join-us-in-1-hour-for-august-office-hours-12-p-m-edt/11183/1/index.html): Join us in one hour at 12 pm EDT (9 am PDT | 5 pm BST) for our monthly, customer-exclusive Office Hours. This month, we’ll be discussing the following topics: 


August 2023 Learn Package - New to Sonatype Repository F&hellip; (237 words, Aug 29, 2023)
- [File with name 'OUser.name.irs' does not exist in storage 'component' - Sonatype Nexus Repository - Sonatype Community](/content/community/t/file-with-name-ouser-name-irs-does-not-exist-in-storage-component/11182/index.html): Hello, 
while pushing a new image to nexus i get the following error: 
com.orientechnologies.orient.core.exception.OStorageException: File with name ‘OUser.name.irs’ does not exist in storage ‘component’ 
I already check&hellip; (104 words, Aug 29, 2023)
- [File with name 'OUser.name.irs' does not exist in storage 'component' - Sonatype Nexus Repository - Sonatype Community](/content/community/t/file-with-name-ouser-name-irs-does-not-exist-in-storage-component/11182/1/index.html): Hello, 
while pushing a new image to nexus i get the following error: 
com.orientechnologies.orient.core.exception.OStorageException: File with name ‘OUser.name.irs’ does not exist in storage ‘component’ 
I already check&hellip; (169 words, Aug 29, 2023)
- [Oss.sonatype.org `snapshots` repository slow download - Central Repository - Sonatype Community](/content/community/t/oss-sonatype-org-snapshots-repository-slow-download/11176/index.html): I’m getting slow download speed, but only from the snapshots repository. 
Take the following two artifacts: 
https://oss.sonatype.org/content/repositories/snapshots/net/iakovlev/timeshape/2022g.18-SNAPSHOT/timeshape-2022&hellip; (142 words, Aug 29, 2023)
- [Oss.sonatype.org `snapshots` repository slow download - Central Repository - Sonatype Community](/content/community/t/oss-sonatype-org-snapshots-repository-slow-download/11176/1/index.html): I’m getting slow download speed, but only from the snapshots repository. 
Take the following two artifacts: 
https://oss.sonatype.org/content/repositories/snapshots/net/iakovlev/timeshape/2022g.18-SNAPSHOT/timeshape-2022&hellip; (148 words, Aug 29, 2023)
- [Automate the initial "Onboarding" process with API calls - Sonatype Nexus Repository - Sonatype Community](/content/community/t/automate-the-initial-onboarding-process-with-api-calls/11157/index.html): I’m trying to automate the initial “onboarding” process with the API. I tried doing this: sonatype - Use Nexus 3 API to change admin password - Stack Overflow 
Unfortunately, this failed with a 401 http code. 
I’d like t&hellip; (62 words, Aug 23, 2023)
- [Automate the initial "Onboarding" process with API calls - Sonatype Nexus Repository - Sonatype Community](/content/community/t/automate-the-initial-onboarding-process-with-api-calls/11157/1/index.html): I’m trying to automate the initial “onboarding” process with the API. I tried doing this: sonatype - Use Nexus 3 API to change admin password - Stack Overflow 
Unfortunately, this failed with a 401 http code. 
I’d like t&hellip; (61 words, Aug 23, 2023)
- [Lifecycle Best Practices; Remediation Tips, part 2 - Sonatype Lifecycle & Repository Firewall / Best Practices - Sonatype Community](/content/community/t/lifecycle-best-practices-remediation-tips-part-2/11148/index.html): Hi, folks! 
Ready to talk more about remediation? In the last post, we talked about the best-case remediation scenario. In this post, I’ll share some best practices for more tricky remediation scenarios. And in the third&hellip; (521 words, Aug 22, 2023)
- [Lifecycle Best Practices; Remediation Tips, part 2 - Sonatype Lifecycle & Repository Firewall / Best Practices - Sonatype Community](/content/community/t/lifecycle-best-practices-remediation-tips-part-2/11148/1/index.html): Hi, folks! 
Ready to talk more about remediation? In the last post, we talked about the best-case remediation scenario. In this post, I’ll share some best practices for more tricky remediation scenarios. And in the third&hellip; (520 words, Aug 22, 2023)
- [Unable to resolve dependencies (gradle) - Sonatype Nexus Repository - Sonatype Community](/content/community/t/unable-to-resolve-dependencies-gradle/11147/index.html): We recently setup nexus respository on one of our aws ec2 accounts and to test the repo, we uploaded a jar file and tried using that jar in my build.gradle file. But seems like gradle is unable to find the artifact. I am&hellip; (117 words, Aug 22, 2023)
- [Unable to resolve dependencies (gradle) - Sonatype Nexus Repository - Sonatype Community](/content/community/t/unable-to-resolve-dependencies-gradle/11147/1/index.html): We recently setup nexus respository on one of our aws ec2 accounts and to test the repo, we uploaded a jar file and tried using that jar in my build.gradle file. But seems like gradle is unable to find the artifact. I am&hellip; (114 words, Aug 22, 2023)
- [Join us for August Office Hours - Tuesday, August 29th at 12pm EDT - Community Announcements - Sonatype Community](/content/community/t/join-us-for-august-office-hours-tuesday-august-29th-at-12pm-edt/11145/2/index.html): Join us Tuesday, August 29th at 12 pm EDT (9 am PDT | 5 pm BST) for our monthly, customer-exclusive Office Hours. This month, we’ll be discussing the following topics: 


August 2023 Learn Package - New to Sonatype Rep&hellip; (269 words, Aug 22, 2023)
- [Join us for August Office Hours - Tuesday, August 29th at 12pm EDT - Community Announcements - Sonatype Community](/content/community/t/join-us-for-august-office-hours-tuesday-august-29th-at-12pm-edt/11145/index.html): Join us Tuesday, August 29th at 12 pm EDT (9 am PDT | 5 pm BST) for our monthly, customer-exclusive Office Hours. This month, we’ll be discussing the following topics: 


August 2023 Learn Package - New to Sonatype Rep&hellip; (254 words, Aug 22, 2023)
- [Join us for August Office Hours - Tuesday, August 29th at 12pm EDT - Community Announcements - Sonatype Community](/content/community/t/join-us-for-august-office-hours-tuesday-august-29th-at-12pm-edt/11145/1/index.html): Join us Tuesday, August 29th at 12 pm EDT (9 am PDT | 5 pm BST) for our monthly, customer-exclusive Office Hours. This month, we’ll be discussing the following topics: 


August 2023 Learn Package - New to Sonatype Rep&hellip; (248 words, Aug 22, 2023)
- [Getting latest resultID of an applicationID - Sonatype Nexus Repository - Sonatype Community](/content/community/t/getting-latest-resultid-of-an-applicationid/11132/2/index.html): Is it possible to get the last resultID of an applicationID? 
which endpoint could I use? (52 words, Aug 21, 2023)
- [Waivers not applied for a Nexus containers scan - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/waivers-not-applied-for-a-nexus-containers-scan/11138/index.html): Hello 
I have a java test application containing a vulnerable component: 

com.google.guava:guava : 19.0

CVE-2018-10237
CVE-2023-2976



There is more vulnerabilities, I kept only the ones with CVSS &gt;= 4 
This jar app i&hellip; (527 words, Aug 21, 2023)
- [Waivers not applied for a Nexus containers scan - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/waivers-not-applied-for-a-nexus-containers-scan/11138/1/index.html): Hello 
I have a java test application containing a vulnerable component: 

com.google.guava:guava : 19.0

CVE-2018-10237
CVE-2023-2976



There is more vulnerabilities, I kept only the ones with CVSS &gt;= 4 
This jar app i&hellip; (528 words, Aug 21, 2023)
- [NexusIQ Rest API - evaluate a file - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/nexusiq-rest-api-evaluate-a-file/11119/2/index.html): We onboarded a large number of apps and most didn’t evaluate transitive dependencies. However, if in the web UI I select the app, go to more actions, and choose ‘evaluate a file,’ I can upload the compiled jar for the ap&hellip; (137 words, Aug 18, 2023)
- [Getting latest resultID of an applicationID - Sonatype Nexus Repository - Sonatype Community](/content/community/t/getting-latest-resultid-of-an-applicationid/11132/index.html): Is it possible to get the last resultID of an applicationID? 
which endpoint could I use? (109 words, Aug 18, 2023)
- [Getting latest resultID of an applicationID - Sonatype Nexus Repository - Sonatype Community](/content/community/t/getting-latest-resultid-of-an-applicationid/11132/1/index.html): Is it possible to get the last resultID of an applicationID? 
which endpoint could I use? (48 words, Aug 18, 2023)
- [.NET Core assemblies are flagged unknown - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/net-core-assemblies-are-flagged-unknown/11125/index.html): All .NET Core assemblies are reported as Level 2, Component-Unknown.  I am the only .NET developer.  Everyone is else is Java.  Is this just a matter of getting updated definitions?  We are using licensed products of you&hellip; (158 words, Aug 17, 2023)
- [.NET Core assemblies are flagged unknown - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/net-core-assemblies-are-flagged-unknown/11125/1/index.html): All .NET Core assemblies are reported as Level 2, Component-Unknown.  I am the only .NET developer.  Everyone is else is Java.  Is this just a matter of getting updated definitions?  We are using licensed products of you&hellip; (78 words, Aug 17, 2023)
- [NexusIQ Rest API - evaluate a file - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/nexusiq-rest-api-evaluate-a-file/11119/index.html): We onboarded a large number of apps and most didn’t evaluate transitive dependencies. However, if in the web UI I select the app, go to more actions, and choose ‘evaluate a file,’ I can upload the compiled jar for the ap&hellip; (133 words, Aug 16, 2023)
- [NexusIQ Rest API - evaluate a file - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/nexusiq-rest-api-evaluate-a-file/11119/1/index.html): We onboarded a large number of apps and most didn’t evaluate transitive dependencies. However, if in the web UI I select the app, go to more actions, and choose ‘evaluate a file,’ I can upload the compiled jar for the ap&hellip; (132 words, Aug 16, 2023)
- [Custom headers for proxy maven repository to Gitlab package repo? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/custom-headers-for-proxy-maven-repository-to-gitlab-package-repo/11117/index.html): I’m trying to add a proxy Maven repository for a Gitlab package repository. 
Gitlab repositories require authentication via a custom header. 
e.g. 
Private-Token: abcdefghijk

I can’t find a way to configure this. Any id&hellip; (81 words, Aug 16, 2023)
- [Custom headers for proxy maven repository to Gitlab package repo? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/custom-headers-for-proxy-maven-repository-to-gitlab-package-repo/11117/1/index.html): I’m trying to add a proxy Maven repository for a Gitlab package repository. 
Gitlab repositories require authentication via a custom header. 
e.g. 
Private-Token: abcdefghijk

I can’t find a way to configure this. Any id&hellip; (63 words, Aug 16, 2023)
- [Systemic user - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/systemic-user/11094/2/index.html): It is possible my application use a SYSTEMIC USER to access NEXUS Repository without infringing the license rules? (229 words, Aug 14, 2023)
- [Nexus repository not displaying settings icon - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-repository-not-displaying-settings-icon/11101/2/index.html): I installed a fresh copy of the nexus repository on a digital ocean droplet. I am able to sign in as admin but the settings cog is not showing. It’s like I have limited access to the features. I’ve been trying to fix thi&hellip; (152 words, Aug 14, 2023)
- [Source control checkout issues - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/source-control-checkout-issues/11104/index.html): I’ve had a couple of issues with pull request commenting where IQ would see a new PR, but where cloning it fails due to issues with the PAT. Once the issue has been resolved it still won’t retry the PR evaluation. Is the&hellip; (155 words, Aug 14, 2023)
- [Source control checkout issues - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/source-control-checkout-issues/11104/1/index.html): I’ve had a couple of issues with pull request commenting where IQ would see a new PR, but where cloning it fails due to issues with the PAT. Once the issue has been resolved it still won’t retry the PR evaluation. Is the&hellip; (172 words, Aug 14, 2023)
- [Nexus repository not displaying settings icon - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-repository-not-displaying-settings-icon/11101/index.html): I installed a fresh copy of the nexus repository on a digital ocean droplet. I am able to sign in as admin but the settings cog is not showing. It’s like I have limited access to the features. I’ve been trying to fix thi&hellip; (159 words, Aug 14, 2023)
- [Question to teams on how they define Internally and Externally facing applications - Sonatype Lifecycle & Repository Firewall / Best Practices - Sonatype Community](/content/community/t/question-to-teams-on-how-they-define-internally-and-externally-facing-applications/11090/6/index.html): Our team is attempting to define guardrails on certain license types.  We’d like to take the stance of “internally” vs. “externally” facing applications for a guardrail.  For example:  Internally Facing applications can &hellip; (594 words, Aug 11, 2023)
- [Lifecycle Best Practices; Remediation Tips, part 1 - Sonatype Lifecycle & Repository Firewall / Best Practices - Sonatype Community](/content/community/t/lifecycle-best-practices-remediation-tips-part-1/11095/index.html): Hi, folks! 
I wanted to take a second to share some best practices about component remediation. There’s lots to say, so this will be a three-parter! In this first post, we’ll talk about the best-case scenario. In the sec&hellip; (424 words, Aug 11, 2023)
- [Lifecycle Best Practices; Remediation Tips, part 1 - Sonatype Lifecycle & Repository Firewall / Best Practices - Sonatype Community](/content/community/t/lifecycle-best-practices-remediation-tips-part-1/11095/1/index.html): Hi, folks! 
I wanted to take a second to share some best practices about component remediation. There’s lots to say, so this will be a three-parter! In this first post, we’ll talk about the best-case scenario. In the sec&hellip; (415 words, Aug 11, 2023)
- [Systemic user - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/systemic-user/11094/index.html): It is possible my application use a SYSTEMIC USER to access NEXUS Repository without infringing the license rules? (211 words, Aug 11, 2023)
- [Systemic user - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/systemic-user/11094/1/index.html): It is possible my application use a SYSTEMIC USER to access NEXUS Repository without infringing the license rules? (146 words, Aug 11, 2023)
- [Question to teams on how they define Internally and Externally facing applications - Sonatype Lifecycle & Repository Firewall / Best Practices - Sonatype Community](/content/community/t/question-to-teams-on-how-they-define-internally-and-externally-facing-applications/11090/index.html): Our team is attempting to define guardrails on certain license types.  We’d like to take the stance of “internally” vs. “externally” facing applications for a guardrail.  For example:  Internally Facing applications can &hellip; (613 words, Aug 10, 2023)
- [Question to teams on how they define Internally and Externally facing applications - Sonatype Lifecycle & Repository Firewall / Best Practices - Sonatype Community](/content/community/t/question-to-teams-on-how-they-define-internally-and-externally-facing-applications/11090/1/index.html): Our team is attempting to define guardrails on certain license types.  We’d like to take the stance of “internally” vs. “externally” facing applications for a guardrail.  For example:  Internally Facing applications can &hellip; (615 words, Aug 10, 2023)
- [Evaluate Scan Results in Jenkins Job - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/evaluate-scan-results-in-jenkins-job/11081/index.html): Hi, 
we are searching for a possibility to evaluate the scan results of the NexusIQ during the run of the jenkins job. We are using the Nexus Jenkins Plugin and want to use the results of the NexusIQ scan to decide next &hellip; (69 words, Aug 8, 2023)
- [Evaluate Scan Results in Jenkins Job - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/evaluate-scan-results-in-jenkins-job/11081/1/index.html): Hi, 
we are searching for a possibility to evaluate the scan results of the NexusIQ during the run of the jenkins job. We are using the Nexus Jenkins Plugin and want to use the results of the NexusIQ scan to decide next &hellip; (172 words, Aug 8, 2023)
- [Occasional java.lang.reflect.InvocationTargetException when using S3 blob storage - Sonatype Nexus Repository - Sonatype Community](/content/community/t/occasional-java-lang-reflect-invocationtargetexception-when-using-s3-blob-storage/10891/8/index.html): When running Nexus Repository 3 (OSS 3.55.0-01), we occasionally see a java.lang.reflect.InvocationTargetException when accessing artifacts stored in S3. 
This causes any applications/systems accessing the Nexus at that &hellip; (1,000 words, Aug 8, 2023)
- [Lifecycle Best Practices; Use the Browser Extension - Sonatype Lifecycle & Repository Firewall / Best Practices - Sonatype Community](/content/community/t/lifecycle-best-practices-use-the-browser-extension/11062/3/index.html): Hi, folks! 
The Customer Education team here is always looking to learn from our most successful customers. Something we know that successful Lifecycle customers are doing is using the Sonatype Platform browser extension&hellip; (551 words, Aug 8, 2023)
- [Getting 504 bad gateway error - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/getting-504-bad-gateway-error/11013/7/index.html): Hi, 
This is Viswanadh, Our gradle builds are failing at the task :audit with the error of 504 bad gateway time-out. We are using the registered user only for running audit in oss index. 
The failure rate is very high, a&hellip; (385 words, Aug 1, 2023)
- [OSS Index Instability (5xx Errors) - Central Repository - Sonatype Community](/content/community/t/oss-index-instability-5xx-errors/11064/index.html): Hello Community, 
Over the last couple of weeks we’ve noticed an increase in 5xx errors in OSS Index web and API requests. We apologize for the inconvenience it has cause to all those who are reliant on the service. The &hellip; (212 words, Aug 1, 2023)
- [OSS Index Instability (5xx Errors) - Central Repository - Sonatype Community](/content/community/t/oss-index-instability-5xx-errors/11064/1/index.html): Hello Community, 
Over the last couple of weeks we’ve noticed an increase in 5xx errors in OSS Index web and API requests. We apologize for the inconvenience it has cause to all those who are reliant on the service. The &hellip; (211 words, Aug 1, 2023)
- [Cannot install with gem from a rubugems group - Sonatype Nexus Repository - Sonatype Community](/content/community/t/cannot-install-with-gem-from-a-rubugems-group/11063/index.html): Hello Community, 
I have an issue concerning installation of a gem package from a group of type rubygems. 
Here is my scenario: 
I am using Nexus   3.58.1-02 
I have created a proxy repo proxying https://rubygems.org, na&hellip; (556 words, Aug 1, 2023)
- [Cannot install with gem from a rubugems group - Sonatype Nexus Repository - Sonatype Community](/content/community/t/cannot-install-with-gem-from-a-rubugems-group/11063/1/index.html): Hello Community, 
I have an issue concerning installation of a gem package from a group of type rubygems. 
Here is my scenario: 
I am using Nexus   3.58.1-02 
I have created a proxy repo proxying https://rubygems.org, na&hellip; (535 words, Aug 1, 2023)
- [Lifecycle Best Practices; Use the Browser Extension - Sonatype Lifecycle & Repository Firewall / Best Practices - Sonatype Community](/content/community/t/lifecycle-best-practices-use-the-browser-extension/11062/index.html): Hi, folks! 
The Customer Education team here is always looking to learn from our most successful customers. Something we know that successful Lifecycle customers are doing is using the Sonatype Platform browser extension&hellip; (547 words, Aug 1, 2023)
- [Lifecycle Best Practices; Use the Browser Extension - Sonatype Lifecycle & Repository Firewall / Best Practices - Sonatype Community](/content/community/t/lifecycle-best-practices-use-the-browser-extension/11062/1/index.html): Hi, folks! 
The Customer Education team here is always looking to learn from our most successful customers. Something we know that successful Lifecycle customers are doing is using the Sonatype Platform browser extension&hellip; (543 words, Aug 1, 2023)
- [Best Practices for Organizing and Scanning Frontend and Backend Applications in Nexus IQ Server - Sonatype Lifecycle & Repository Firewall / Best Practices - Sonatype Community](/content/community/t/best-practices-for-organizing-and-scanning-frontend-and-backend-applications-in-nexus-iq-server/11036/2/index.html): Hello, 
We are currently in the process of onboarding our self-developed applications and are very unsure about how we should organize them. In most cases, our applications consist of a frontend (npm) and a backend (Java&hellip; (365 words, Aug 1, 2023)
- [Importing of dot-files - Sonatype Nexus Repository - Sonatype Community](/content/community/t/importing-of-dot-files/11027/3/index.html): Hi, I want to import iso from RHEL (rhel-9.2-x86_64-dvd.iso) and use this repo when doing a kickstart of nodes. I follow the Repository Import Guide. My problem is that Nexus do not import file “/.treeinfo” (rpm-files ar&hellip; (119 words, Aug 1, 2023)
- [How to create new blob store to store release artifacts using AWS EBS Volumes - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-to-create-new-blob-store-to-store-release-artifacts-using-aws-ebs-volumes/11046/2/index.html): Hello everyone. I have configured Nexus PRO version 3.58.0-01 which is running as docker container in EC2 instance. I am having trouble to understand how we can attach new volume to the existing nexus repository to host &hellip; (282 words, Jul 31, 2023)
- [How to create new blob store to store release artifacts using AWS EBS Volumes - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-to-create-new-blob-store-to-store-release-artifacts-using-aws-ebs-volumes/11046/index.html): Hello everyone. I have configured Nexus PRO version 3.58.0-01 which is running as docker container in EC2 instance. I am having trouble to understand how we can attach new volume to the existing nexus repository to host &hellip; (282 words, Jul 28, 2023)
- [Best Practices for Organizing and Scanning Frontend and Backend Applications in Nexus IQ Server - Sonatype Lifecycle & Repository Firewall / Best Practices - Sonatype Community](/content/community/t/best-practices-for-organizing-and-scanning-frontend-and-backend-applications-in-nexus-iq-server/11036/index.html): Hello, 
We are currently in the process of onboarding our self-developed applications and are very unsure about how we should organize them. In most cases, our applications consist of a frontend (npm) and a backend (Java&hellip; (369 words, Jul 27, 2023)
- [Best Practices for Organizing and Scanning Frontend and Backend Applications in Nexus IQ Server - Sonatype Lifecycle & Repository Firewall / Best Practices - Sonatype Community](/content/community/t/best-practices-for-organizing-and-scanning-frontend-and-backend-applications-in-nexus-iq-server/11036/1/index.html): Hello, 
We are currently in the process of onboarding our self-developed applications and are very unsure about how we should organize them. In most cases, our applications consist of a frontend (npm) and a backend (Java&hellip; (375 words, Jul 27, 2023)
- [Oh NGINX how do I love thee - Sonatype Nexus Repository - Sonatype Community](/content/community/t/oh-nginx-how-do-i-love-thee/11033/index.html): We are on Sonatype Nexus Repository Pro v3.56.0-01 
I have it running ssl behind a nginx proxy 
I am able to push items into a RAW repository but not HELM or Docker… with HELM it acts like it’s being pushed but give no r&hellip; (637 words, Jul 26, 2023)
- [Oh NGINX how do I love thee - Sonatype Nexus Repository - Sonatype Community](/content/community/t/oh-nginx-how-do-i-love-thee/11033/1/index.html): We are on Sonatype Nexus Repository Pro v3.56.0-01 
I have it running ssl behind a nginx proxy 
I am able to push items into a RAW repository but not HELM or Docker… with HELM it acts like it’s being pushed but give no r&hellip; (635 words, Jul 26, 2023)
- [Importing of dot-files - Sonatype Nexus Repository - Sonatype Community](/content/community/t/importing-of-dot-files/11027/index.html): Hi, I want to import iso from RHEL (rhel-9.2-x86_64-dvd.iso) and use this repo when doing a kickstart of nodes. I follow the Repository Import Guide. My problem is that Nexus do not import file “/.treeinfo” (rpm-files ar&hellip; (119 words, Jul 26, 2023)
- [Importing of dot-files - Sonatype Nexus Repository - Sonatype Community](/content/community/t/importing-of-dot-files/11027/1/index.html): Hi, I want to import iso from RHEL (rhel-9.2-x86_64-dvd.iso) and use this repo when doing a kickstart of nodes. I follow the Repository Import Guide. My problem is that Nexus do not import file “/.treeinfo” (rpm-files ar&hellip; (119 words, Jul 26, 2023)
- [Getting 504 bad gateway error - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/getting-504-bad-gateway-error/11013/index.html): Hi, 
This is Viswanadh, Our gradle builds are failing at the task :audit with the error of 504 bad gateway time-out. We are using the registered user only for running audit in oss index. 
The failure rate is very high, a&hellip; (385 words, Jul 25, 2023)
- [Getting 504 bad gateway error - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/getting-504-bad-gateway-error/11013/1/index.html): Hi, 
This is Viswanadh, Our gradle builds are failing at the task :audit with the error of 504 bad gateway time-out. We are using the registered user only for running audit in oss index. 
The failure rate is very high, a&hellip; (385 words, Jul 25, 2023)
- [Rclone support with Sonatype nexus repo - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/rclone-support-with-sonatype-nexus-repo/10985/index.html): Hello, I have hosted some binary files in sonatype nexus OSS artifactory repo and try to copy it remotely to other machine. I am not able to find any information from the docs to know whether this supported at present or&hellip; (147 words, Jul 21, 2023)
- [Rclone support with Sonatype nexus repo - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/rclone-support-with-sonatype-nexus-repo/10985/1/index.html): Hello, I have hosted some binary files in sonatype nexus OSS artifactory repo and try to copy it remotely to other machine. I am not able to find any information from the docs to know whether this supported at present or&hellip; (144 words, Jul 21, 2023)
- [Join us in 1 hour for July Office Hours - 12 p.m EDT - Community Announcements - Sonatype Community](/content/community/t/join-us-in-1-hour-for-july-office-hours-12-p-m-edt/10971/2/index.html): Join us in an hour at 12 p.m. EDT (9 a.m. PDT | 5 p.m. BST) for our monthly, customer-exclusive Office Hours. This month, we’ll be discussing the following topic: 


Sonatype Repository Firewall Guided Setup - Get up a&hellip; (244 words, Jul 19, 2023)
- [Join us in 1 hour for July Office Hours - 12 p.m EDT - Community Announcements - Sonatype Community](/content/community/t/join-us-in-1-hour-for-july-office-hours-12-p-m-edt/10971/index.html): Join us in an hour at 12 p.m. EDT (9 a.m. PDT | 5 p.m. BST) for our monthly, customer-exclusive Office Hours. This month, we’ll be discussing the following topic: 


Sonatype Repository Firewall Guided Setup - Get up a&hellip; (230 words, Jul 19, 2023)
- [Join us in 1 hour for July Office Hours - 12 p.m EDT - Community Announcements - Sonatype Community](/content/community/t/join-us-in-1-hour-for-july-office-hours-12-p-m-edt/10971/1/index.html): Join us in an hour at 12 p.m. EDT (9 a.m. PDT | 5 p.m. BST) for our monthly, customer-exclusive Office Hours. This month, we’ll be discussing the following topic: 


Sonatype Repository Firewall Guided Setup - Get up a&hellip; (165 words, Jul 19, 2023)
- [Hi Guys, - Sonatype Nexus Repository - Sonatype Community](/content/community/t/hi-guys/10965/index.html): Hello guys, 
I am trying install and use Nexus but I am having problem with few things. As per document 
we cannot change the nexus-default.properties so I created another nexus.properties inside /nexus/etc/nexus.propert&hellip; (187 words, Jul 18, 2023)
- [Hi Guys, - Sonatype Nexus Repository - Sonatype Community](/content/community/t/hi-guys/10965/1/index.html): Hello guys, 
I am trying install and use Nexus but I am having problem with few things. As per document 
we cannot change the nexus-default.properties so I created another nexus.properties inside /nexus/etc/nexus.propert&hellip; (128 words, Jul 18, 2023)
- [We're Updating Our Product Names and Logos - Community Announcements - Sonatype Community](/content/community/t/were-updating-our-product-names-and-logos/10540/3/index.html): As we roll out our updated Sonatype brand, you will see product names and logos begin to change across my.sonatype.com, including here in our Community. 
These name changes and logo updates are now reflected in the corre&hellip; (261 words, Jul 13, 2023)
- [Firewall Best Practices; Have a Pilot Program - Sonatype Lifecycle & Repository Firewall / Best Practices - Sonatype Community](/content/community/t/firewall-best-practices-have-a-pilot-program/10950/index.html): Hi, folks! 
The Customer Education team at Sonatype has noticed that successful customers get started with Repository Firewall in a very specific way. I wanted to take a second to share some of that knowledge with you. 
T&hellip; (461 words, Jul 13, 2023)
- [Firewall Best Practices; Have a Pilot Program - Sonatype Lifecycle & Repository Firewall / Best Practices - Sonatype Community](/content/community/t/firewall-best-practices-have-a-pilot-program/10950/1/index.html): Hi, folks! 
The Customer Education team at Sonatype has noticed that successful customers get started with Repository Firewall in a very specific way. I wanted to take a second to share some of that knowledge with you. 
T&hellip; (459 words, Jul 13, 2023)
- [Join us for July Office Hours - Wednesday, July 19th at 12pm EDT - Community Announcements - Sonatype Community](/content/community/t/join-us-for-july-office-hours-wednesday-july-19th-at-12pm-edt/10939/2/index.html): Join us Wednesday, July 19th at 12 p.m. EDT (9 a.m. PDT | 5 p.m. BST) for our monthly, customer-exclusive Office Hours. This month, we’ll be discussing the following topic: 


Sonatype Repository Firewall Guided Setup &hellip; (161 words, Jul 12, 2023)
- [Join us for July Office Hours - Wednesday, July 19th at 12pm EDT - Community Announcements - Sonatype Community](/content/community/t/join-us-for-july-office-hours-wednesday-july-19th-at-12pm-edt/10939/index.html): Join us Wednesday, July 19th at 12 p.m. EDT (9 a.m. PDT | 5 p.m. BST) for our monthly, customer-exclusive Office Hours. This month, we’ll be discussing the following topic: 


Sonatype Repository Firewall Guided Setup &hellip; (163 words, Jul 12, 2023)
- [Join us for July Office Hours - Wednesday, July 19th at 12pm EDT - Community Announcements - Sonatype Community](/content/community/t/join-us-for-july-office-hours-wednesday-july-19th-at-12pm-edt/10939/1/index.html): Join us Wednesday, July 19th at 12 p.m. EDT (9 a.m. PDT | 5 p.m. BST) for our monthly, customer-exclusive Office Hours. This month, we’ll be discussing the following topic: 


Sonatype Repository Firewall Guided Setup &hellip; (239 words, Jul 12, 2023)
- [Nexus 3 OSS - can't stay logged in as admin, can't see Security (or any other settings) - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-3-oss-cant-stay-logged-in-as-admin-cant-see-security-or-any-other-settings/171/14/index.html): Hi all, 
I just installed Nexus 3 OSS via docker, and I can log in as admin/admin123, but it’s behaving pretty strangely and is not really usable: 

Simply refreshing the page will log me out as admin user and I have to &hellip; (717 words, Jul 10, 2023)
- [NEXUS Repository 3 - YUM Hosted - No metadata for package - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-repository-3-yum-hosted-no-metadata-for-package/7805/4/index.html): Hello Team, 
I need some help to understand an issue with my Nexus Repository OSS v3. 
I created a YUM Hosted repository to host default repo from a Redhat CDROM. 
So i used CURL to post all my RPMS from a local folder, &hellip; (378 words, Jul 10, 2023)
- [Nexus OSS under Istio Ingress with TLS - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-oss-under-istio-ingress-with-tls/10929/index.html): Hi team! 
First of all, thanks for amazing work that you do and your support.I personally appreciate it. 
My questions is about using Nexus OSS in AKS (Azure Kubernetes Cluster) under Istio Ingress(Istio / Ingress) using&hellip; (128 words, Jul 10, 2023)
- [Nexus OSS under Istio Ingress with TLS - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-oss-under-istio-ingress-with-tls/10929/1/index.html): Hi team! 
First of all, thanks for amazing work that you do and your support.I personally appreciate it. 
My questions is about using Nexus OSS in AKS (Azure Kubernetes Cluster) under Istio Ingress(Istio / Ingress) using&hellip; (139 words, Jul 10, 2023)
- [Nothing happend vhen I click on "execue" on page 'API' : /v1/security/ldap Create LDAP server -- v: 3.56.0-01 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nothing-happend-vhen-i-click-on-execue-on-page-api-v1-security-ldap-create-ldap-server-v-3-56-0-01/10913/index.html): Hi, 
I try to create a LDAP accès from the API page of nexus3 
here is the page :frowning: 
  
but, when I clique on the button, nothing happend. 
below the complete body : 
{ 
“name”: “xxxxx”, 
“protocol”: “LDAPS”, 
“us&hellip; (164 words, Jul 7, 2023)
- [Nothing happend vhen I click on "execue" on page 'API' : /v1/security/ldap Create LDAP server -- v: 3.56.0-01 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nothing-happend-vhen-i-click-on-execue-on-page-api-v1-security-ldap-create-ldap-server-v-3-56-0-01/10913/1/index.html): Hi, 
I try to create a LDAP accès from the API page of nexus3 
here is the page :frowning: 
  
but, when I clique on the button, nothing happend. 
below the complete body : 
{ 
“name”: “xxxxx”, 
“protocol”: “LDAPS”, 
“us&hellip; (163 words, Jul 7, 2023)
- [What is the correct endpoint to delete an artifact from nexus using api/curl? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/what-is-the-correct-endpoint-to-delete-an-artifact-from-nexus-using-api-curl/10904/index.html): I have tried below command to delete and artifact but i receive error “HTTP/1.1 405 Http method DELETE is not supported by this URL” 
The command i used was: 
curl --request DELETE http://nexus.prod.aws.about.com/service&hellip; (85 words, Jul 6, 2023)
- [What is the correct endpoint to delete an artifact from nexus using api/curl? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/what-is-the-correct-endpoint-to-delete-an-artifact-from-nexus-using-api-curl/10904/1/index.html): I have tried below command to delete and artifact but i receive error “HTTP/1.1 405 Http method DELETE is not supported by this URL” 
The command i used was: 
curl --request DELETE http://nexus.prod.aws.about.com/service&hellip; (88 words, Jul 6, 2023)
- [Unable to start nexus on Centos9 or RedHat 9 with SSL - access denied error to keystore.jks - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/unable-to-start-nexus-on-centos9-or-redhat-9-with-ssl-access-denied-error-to-keystore-jks/10749/10/index.html): Hello, 
Trying to install and configure nexusVersion=“3.32.0” on centos 9 and redhat 9. And came accross the following error: 
Failed to start 
java.nio.file.AccessDeniedException: /opt/sonatype/nexus/etc/ssl/keystore.jk&hellip; (427 words, Jul 4, 2023)
- [Occasional java.lang.reflect.InvocationTargetException when using S3 blob storage - Sonatype Nexus Repository - Sonatype Community](/content/community/t/occasional-java-lang-reflect-invocationtargetexception-when-using-s3-blob-storage/10891/index.html): When running Nexus Repository 3 (OSS 3.55.0-01), we occasionally see a java.lang.reflect.InvocationTargetException when accessing artifacts stored in S3. 
This causes any applications/systems accessing the Nexus at that &hellip; (1,000 words, Jul 4, 2023)
- [Occasional java.lang.reflect.InvocationTargetException when using S3 blob storage - Sonatype Nexus Repository - Sonatype Community](/content/community/t/occasional-java-lang-reflect-invocationtargetexception-when-using-s3-blob-storage/10891/1/index.html): When running Nexus Repository 3 (OSS 3.55.0-01), we occasionally see a java.lang.reflect.InvocationTargetException when accessing artifacts stored in S3. 
This causes any applications/systems accessing the Nexus at that &hellip; (975 words, Jul 4, 2023)
- [Nexus. Auditing failure login attempts - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-auditing-failure-login-attempts/10864/2/index.html): Hi all! 
Sonatype Nexus Repository Manager OSS 3.43.0-0 
Please tell me in what type of logs can I find unsuccessful authorization attempts in the nexus web interface? (107 words, Jul 3, 2023)
- [Nexus Migration - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-migration/10869/index.html): Hello, 
I want to migrate data from one Nexus repo OSS 3.24.0-02 to OSS 3.24.0-02. I’ve copied the blob store and configured it in settings &gt; repository &gt; blob stores. But I dont see the files in Repositories. What files&hellip; (183 words, Jun 29, 2023)
- [Nexus Migration - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-migration/10869/1/index.html): Hello, 
I want to migrate data from one Nexus repo OSS 3.24.0-02 to OSS 3.24.0-02. I’ve copied the blob store and configured it in settings &gt; repository &gt; blob stores. But I dont see the files in Repositories. What files&hellip; (117 words, Jun 29, 2023)
- [Update Your IQ Server License Threat Groups - Sonatype Labs - Sonatype Community](/content/community/t/update-your-iq-server-license-threat-groups/3094/28/index.html): The license threat group updater will apply the latest Sonatype provided license classification to your running IQ server’s license threat groups. This will alleviate any “License Threat Group not Assigned” policy violat&hellip; (690 words, Jun 28, 2023)
- [Nexus. Auditing failure login attempts - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-auditing-failure-login-attempts/10864/index.html): Hi all! 
Sonatype Nexus Repository Manager OSS 3.43.0-0 
Please tell me in what type of logs can I find unsuccessful authorization attempts in the nexus web interface? (132 words, Jun 28, 2023)
- [Nexus. Auditing failure login attempts - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-auditing-failure-login-attempts/10864/1/index.html): Hi all! 
Sonatype Nexus Repository Manager OSS 3.43.0-0 
Please tell me in what type of logs can I find unsuccessful authorization attempts in the nexus web interface? (122 words, Jun 28, 2023)
- [Nexus IQ <-> Gitlab-Token problems - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/nexus-iq-gitlab-token-problems/10065/6/index.html): Hello, 
at first i want to say thanks for the last Bugfix in your 153 Release. Now it is possible for us to connect Nexus IQ and Gitlab. 
I try to set up the configuration and created a token with API and WRITE_REPOISTOR&hellip; (308 words, Jun 23, 2023)
- [MVN DEPLOY - 500 Server Error OStorageException - Sonatype Nexus Repository - Sonatype Community](/content/community/t/mvn-deploy-500-server-error-ostorageexception/10842/index.html): Hello, and thank you for taking a look at this thread. 
After running mvn deploy we are receiving this error in prod. Same command pointing to our test server works as expected. I am looking into OStorageException, but i&hellip; (248 words, Jun 23, 2023)
- [MVN DEPLOY - 500 Server Error OStorageException - Sonatype Nexus Repository - Sonatype Community](/content/community/t/mvn-deploy-500-server-error-ostorageexception/10842/1/index.html): Hello, and thank you for taking a look at this thread. 
After running mvn deploy we are receiving this error in prod. Same command pointing to our test server works as expected. I am looking into OStorageException, but i&hellip; (245 words, Jun 23, 2023)
- [Corrupted component database (Nexus RM on Openshift) - Sonatype Nexus Repository - Sonatype Community](/content/community/t/corrupted-component-database-nexus-rm-on-openshift/10837/index.html): Hi all, yesterday my Nexus Repository Manager running as container on Openshift 3.11, after working well for 2 years, suddenly crashed. 
Image used is 
registry.connect.redhat.com/sonatype/nexus-repository-manager:3.28.1&hellip; (298 words, Jun 22, 2023)
- [Corrupted component database (Nexus RM on Openshift) - Sonatype Nexus Repository - Sonatype Community](/content/community/t/corrupted-component-database-nexus-rm-on-openshift/10837/1/index.html): Hi all, yesterday my Nexus Repository Manager running as container on Openshift 3.11, after working well for 2 years, suddenly crashed. 
Image used is 
registry.connect.redhat.com/sonatype/nexus-repository-manager:3.28.1&hellip; (298 words, Jun 22, 2023)
- [Join us in 1 hour for June Office Hours - 10 a.m EDT - Community Announcements - Sonatype Community](/content/community/t/join-us-in-1-hour-for-june-office-hours-10-a-m-edt/10833/2/index.html): Join us in one hour at 10 a.m. EDT (7 a.m. PDT | 3 p.m. BST) for our monthly, customer-exclusive Office Hours. This month, we’ll be discussing the following topics: 

Sonatype Repository Firewall Updates
Sonatype Nexu&hellip; (109 words, Jun 22, 2023)
- [Join us in 1 hour for June Office Hours - 10 a.m EDT - Community Announcements - Sonatype Community](/content/community/t/join-us-in-1-hour-for-june-office-hours-10-a-m-edt/10833/1/index.html): Join us in one hour at 10 a.m. EDT (7 a.m. PDT | 3 p.m. BST) for our monthly, customer-exclusive Office Hours. This month, we’ll be discussing the following topics: 

Sonatype Repository Firewall Updates
Sonatype Nexu&hellip; (201 words, Jun 22, 2023)
- [Nexus Cleanup service was faild - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-cleanup-service-was-faild/10830/index.html): when I create a task for clean repository, running faild, the error as follows: 
2023-06-22 15:22:57,828+0800 ERROR [quartz-3-thread-1]  *SYSTEM org.sonatype.nexus.cleanup.internal.task.CleanupTask - Failed to run task ‘&hellip; (109 words, Jun 22, 2023)
- [Nexus Cleanup service was faild - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-cleanup-service-was-faild/10830/1/index.html): when I create a task for clean repository, running faild, the error as follows: 
2023-06-22 15:22:57,828+0800 ERROR [quartz-3-thread-1]  *SYSTEM org.sonatype.nexus.cleanup.internal.task.CleanupTask - Failed to run task ‘&hellip; (109 words, Jun 22, 2023)
- [Updated Sonatype Lifecycle UI Tour Video - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/updated-sonatype-lifecycle-ui-tour-video/10822/index.html): We’ve just dropped a new video! Take a tour of Sonatype Lifecycle’s user interface and get to know the dashboard features! (103 words, Jun 20, 2023)
- [Updated Sonatype Lifecycle UI Tour Video - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/updated-sonatype-lifecycle-ui-tour-video/10822/1/index.html): We’ve just dropped a new video! Take a tour of Sonatype Lifecycle’s user interface and get to know the dashboard features! (121 words, Jun 20, 2023)
- [Name is Null - Sonatype Nexus Repository - Sonatype Community](/content/community/t/name-is-null/10811/index.html): Hello Team, 
we are using nexus 3.41.1 we can see below error on logs. 

2023-06-19 14:18:03,629+0200 ERROR [qtp1686616688-101] user1 org.sonatype.nexus.extdirect.internal.ExtDirectExceptionHandler - Failed to invoke act&hellip; (91 words, Jun 19, 2023)
- [Name is Null - Sonatype Nexus Repository - Sonatype Community](/content/community/t/name-is-null/10811/1/index.html): Hello Team, 
we are using nexus 3.41.1 we can see below error on logs. 

2023-06-19 14:18:03,629+0200 ERROR [qtp1686616688-101] user1 org.sonatype.nexus.extdirect.internal.ExtDirectExceptionHandler - Failed to invoke act&hellip; (85 words, Jun 19, 2023)
- [Join us for June Office Hours - Thursday, June 22nd at 10am EDT - Community Announcements - Sonatype Community](/content/community/t/join-us-for-june-office-hours-thursday-june-22nd-at-10am-edt/10802/2/index.html): Join us Thursday, June 22nd at 10 a.m. EDT (7 a.m. PDT | 3 p.m. BST) for our monthly, customer-exclusive Office Hours. This month, we’ll be discussing the following topics: 

Sonatype Repository Firewall Updates
Sonaty&hellip; (198 words, Jun 15, 2023)
- [Join us for June Office Hours - Thursday, June 22nd at 10am EDT - Community Announcements - Sonatype Community](/content/community/t/join-us-for-june-office-hours-thursday-june-22nd-at-10am-edt/10802/index.html): Join us Thursday, June 22nd at 10 a.m. EDT (7 a.m. PDT | 3 p.m. BST) for our monthly, customer-exclusive Office Hours. This month, we’ll be discussing the following topics: 

Sonatype Repository Firewall Updates
Sonaty&hellip; (104 words, Jun 15, 2023)
- [Join us for June Office Hours - Thursday, June 22nd at 10am EDT - Community Announcements - Sonatype Community](/content/community/t/join-us-for-june-office-hours-thursday-june-22nd-at-10am-edt/10802/1/index.html): Join us Thursday, June 22nd at 10 a.m. EDT (7 a.m. PDT | 3 p.m. BST) for our monthly, customer-exclusive Office Hours. This month, we’ll be discussing the following topics: 

Sonatype Repository Firewall Updates
Sonaty&hellip; (176 words, Jun 15, 2023)
- [Cannot restart Nexus nexus-3.54.1-01 after shutdown and DB issues - Sonatype Nexus Repository - Sonatype Community](/content/community/t/cannot-restart-nexus-nexus-3-54-1-01-after-shutdown-and-db-issues/10784/2/index.html): Hello, I upgraded from 3.52.0 to 3.54.1 on May 31. I had no issues and everything worked fine. 
Our IT dept. increased the disk quota on which the software is installed sometimes last week. 
On June 9  the logs show the &hellip; (330 words, Jun 13, 2023)
- [Cannot restart Nexus nexus-3.54.1-01 after shutdown and DB issues - Sonatype Nexus Repository - Sonatype Community](/content/community/t/cannot-restart-nexus-nexus-3-54-1-01-after-shutdown-and-db-issues/10784/index.html): Hello, I upgraded from 3.52.0 to 3.54.1 on May 31. I had no issues and everything worked fine. 
Our IT dept. increased the disk quota on which the software is installed sometimes last week. 
On June 9  the logs show the &hellip; (324 words, Jun 12, 2023)
- [Cannot restart Nexus nexus-3.54.1-01 after shutdown and DB issues - Sonatype Nexus Repository - Sonatype Community](/content/community/t/cannot-restart-nexus-nexus-3-54-1-01-after-shutdown-and-db-issues/10784/1/index.html): Hello, I upgraded from 3.52.0 to 3.54.1 on May 31. I had no issues and everything worked fine. 
Our IT dept. increased the disk quota on which the software is installed sometimes last week. 
On June 9  the logs show the &hellip; (330 words, Jun 12, 2023)
- [Move the GitLab packages to nexus repository - Sonatype Nexus Repository - Sonatype Community](/content/community/t/move-the-gitlab-packages-to-nexus-repository/10782/index.html): Hi, 
We want to dump the packages in gitlab package registry to nexus repository and also maintain a continuous sync from GitLab package registry to nexus repository so that nexus repository can be used as a mirroring st&hellip; (90 words, Jun 12, 2023)
- [Move the GitLab packages to nexus repository - Sonatype Nexus Repository - Sonatype Community](/content/community/t/move-the-gitlab-packages-to-nexus-repository/10782/1/index.html): Hi, 
We want to dump the packages in gitlab package registry to nexus repository and also maintain a continuous sync from GitLab package registry to nexus repository so that nexus repository can be used as a mirroring st&hellip; (145 words, Jun 12, 2023)
- [Cannot load database configuration. The database seems corrupted - Sonatype Nexus Repository - Sonatype Community](/content/community/t/cannot-load-database-configuration-the-database-seems-corrupted/10763/3/index.html): we have a containerized Nexus Repository ManagerOSS 3.48.0-0 which is running on centos 7 base image and our data’s are stored on mount which is totally 700+GB. 
our client want to move nexus to dedicated server which Ro&hellip; (249 words, Jun 8, 2023)
- [Cannot load database configuration. The database seems corrupted - Sonatype Nexus Repository - Sonatype Community](/content/community/t/cannot-load-database-configuration-the-database-seems-corrupted/10763/index.html): we have a containerized Nexus Repository ManagerOSS 3.48.0-0 which is running on centos 7 base image and our data’s are stored on mount which is totally 700+GB. 
our client want to move nexus to dedicated server which Ro&hellip; (288 words, Jun 8, 2023)
- [Cannot load database configuration. The database seems corrupted - Sonatype Nexus Repository - Sonatype Community](/content/community/t/cannot-load-database-configuration-the-database-seems-corrupted/10763/1/index.html): we have a containerized Nexus Repository ManagerOSS 3.48.0-0 which is running on centos 7 base image and our data’s are stored on mount which is totally 700+GB. 
our client want to move nexus to dedicated server which Ro&hellip; (284 words, Jun 8, 2023)
- [How to install specifc version of NexusIQ extension for Azure Devops - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/how-to-install-specifc-version-of-nexusiq-extension-for-azure-devops/10699/2/index.html): Hi team 
when I install nexus IQ ext form Azure DevOps market place(Nexus IQ for Azure DevOps - Visual Studio Marketplace) it always install the  latest version but I want to install a specific version of exrenstion, wou&hellip; (197 words, Jun 7, 2023)
- [Anonymous Access got vanished post restart of Nexus3 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/anonymous-access-got-vanished-post-restart-of-nexus3/10758/index.html): Hello All, 
we are using Nexus3 version 3.41.1 for artifactory storage for my project. I have enabled Anonymous Access, in Incase Nexus got restarted Anonymous Access disabled the option automatically. Is there anything &hellip; (63 words, Jun 7, 2023)
- [Anonymous Access got vanished post restart of Nexus3 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/anonymous-access-got-vanished-post-restart-of-nexus3/10758/1/index.html): Hello All, 
we are using Nexus3 version 3.41.1 for artifactory storage for my project. I have enabled Anonymous Access, in Incase Nexus got restarted Anonymous Access disabled the option automatically. Is there anything &hellip; (76 words, Jun 7, 2023)
- [About Nexus IQ - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/about-nexus-iq/10591/3/index.html): Hi Team, 
We are using Nexus IQ 1.155.0.-01 licensed edition (on-premises) 
I have few questions regarding configuring below settings as part of Nexus IQ; 


Does Nexus IQ authentication support enforcing of minimum pass&hellip; (271 words, Jun 7, 2023)
- [API /v1/status/check only works with nx-all privileges - Sonatype Nexus Repository - Sonatype Community](/content/community/t/api-v1-status-check-only-works-with-nx-all-privileges/10744/3/index.html): Hi all, 
I’m creating an Icinga2 check plugin for our Nexus OSS instance. 
This should be easy as Nexus provides a perfect API call for that: 
https://nexus.company.org/service/rest/v1/status/check

Indeed, it works perf&hellip; (185 words, Jun 7, 2023)
- [Unable to start nexus on Centos9 or RedHat 9 with SSL - access denied error to keystore.jks - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/unable-to-start-nexus-on-centos9-or-redhat-9-with-ssl-access-denied-error-to-keystore-jks/10749/index.html): Hello, 
Trying to install and configure nexusVersion=“3.32.0” on centos 9 and redhat 9. And came accross the following error: 
Failed to start 
java.nio.file.AccessDeniedException: /opt/sonatype/nexus/etc/ssl/keystore.jk&hellip; (430 words, Jun 6, 2023)
- [Unable to start nexus on Centos9 or RedHat 9 with SSL - access denied error to keystore.jks - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/unable-to-start-nexus-on-centos9-or-redhat-9-with-ssl-access-denied-error-to-keystore-jks/10749/1/index.html): Hello, 
Trying to install and configure nexusVersion=“3.32.0” on centos 9 and redhat 9. And came accross the following error: 
Failed to start 
java.nio.file.AccessDeniedException: /opt/sonatype/nexus/etc/ssl/keystore.jk&hellip; (427 words, Jun 6, 2023)
- [API /v1/status/check only works with nx-all privileges - Sonatype Nexus Repository - Sonatype Community](/content/community/t/api-v1-status-check-only-works-with-nx-all-privileges/10744/index.html): Hi all, 
I’m creating an Icinga2 check plugin for our Nexus OSS instance. 
This should be easy as Nexus provides a perfect API call for that: 
https://nexus.company.org/service/rest/v1/status/check

Indeed, it works perf&hellip; (185 words, Jun 6, 2023)
- [API /v1/status/check only works with nx-all privileges - Sonatype Nexus Repository - Sonatype Community](/content/community/t/api-v1-status-check-only-works-with-nx-all-privileges/10744/1/index.html): Hi all, 
I’m creating an Icinga2 check plugin for our Nexus OSS instance. 
This should be easy as Nexus provides a perfect API call for that: 
https://nexus.company.org/service/rest/v1/status/check

Indeed, it works perf&hellip; (186 words, Jun 6, 2023)
- [Sonatype forum account management - Community Announcements / Welcome - Sonatype Community](/content/community/t/sonatype-forum-account-management/10734/2/index.html): Hi 
not sure in which category to post this thread , feel free to move it where it should be 
i have two questions 
1 = how do i change my username ? 
2 = how do i change my email adress associated to my account ? authen&hellip; (185 words, Jun 5, 2023)
- [After transferring Nexus blobs from one VM to another VM i can't able to see that blobs fils in GUI Repo - Sonatype Nexus Repository - Sonatype Community](/content/community/t/after-transferring-nexus-blobs-from-one-vm-to-another-vm-i-cant-able-to-see-that-blobs-fils-in-gui-repo/10741/index.html): I have Nexus Repo with multiple blobs files, via Rsync i transferred blobs storage from one vm to another vm. in that new vm i can see that blobs files present in /sonatype-work/nexus3/. but that New Vm repo GUI i can’t &hellip; (187 words, Jun 5, 2023)
- [Making a repository for a single file available via an URL - Sonatype Nexus Repository - Sonatype Community](/content/community/t/making-a-repository-for-a-single-file-available-via-an-url/10738/3/index.html): Hi community, 
I’m trying to setup a repository in Nexus for a single file. Is this possible and how would one implement this? 
If not, is there some mechanism to automatically pull files to a hosted repository with Nexu&hellip; (150 words, Jun 5, 2023)
- [Making a repository for a single file available via an URL - Sonatype Nexus Repository - Sonatype Community](/content/community/t/making-a-repository-for-a-single-file-available-via-an-url/10738/2/index.html): Hi community, 
I’m trying to setup a repository in Nexus for a single file. Is this possible and how would one implement this? 
If not, is there some mechanism to automatically pull files to a hosted repository with Nexu&hellip; (171 words, Jun 5, 2023)
- [Making a repository for a single file available via an URL - Sonatype Nexus Repository - Sonatype Community](/content/community/t/making-a-repository-for-a-single-file-available-via-an-url/10738/index.html): Hi community, 
I’m trying to setup a repository in Nexus for a single file. Is this possible and how would one implement this? 
If not, is there some mechanism to automatically pull files to a hosted repository with Nexu&hellip; (171 words, Jun 5, 2023)
- [Making a repository for a single file available via an URL - Sonatype Nexus Repository - Sonatype Community](/content/community/t/making-a-repository-for-a-single-file-available-via-an-url/10738/1/index.html): Hi community, 
I’m trying to setup a repository in Nexus for a single file. Is this possible and how would one implement this? 
If not, is there some mechanism to automatically pull files to a hosted repository with Nexu&hellip; (170 words, Jun 5, 2023)
- [Unable to delete repository when database is frozen.. Database not writable on node - Sonatype Nexus Repository - Sonatype Community](/content/community/t/unable-to-delete-repository-when-database-is-frozen-database-not-writable-on-node/10737/index.html): hi, i get this error when trying to delete or to push to repository: 
Unable to delete repository when database is frozen… Database not writable on node! 
any help please? (376 words, Jun 5, 2023)
- [Sonatype forum account management - Community Announcements / Welcome - Sonatype Community](/content/community/t/sonatype-forum-account-management/10734/index.html): Hi 
not sure in which category to post this thread , feel free to move it where it should be 
i have two questions 
1 = how do i change my username ? 
2 = how do i change my email adress associated to my account ? authen&hellip; (195 words, Jun 5, 2023)
- [Overwrite the Nexus UI - Sonatype Nexus Repository - Sonatype Community](/content/community/t/overwrite-the-nexus-ui/10728/index.html): Is it possible to overwrite the Nexus plugin UI(Users, Repositories)? Or if I want to add a new plugin in Nexus how can I do it? (122 words, Jun 2, 2023)
- [Overwrite the Nexus UI - Sonatype Nexus Repository - Sonatype Community](/content/community/t/overwrite-the-nexus-ui/10728/1/index.html): Is it possible to overwrite the Nexus plugin UI(Users, Repositories)? Or if I want to add a new plugin in Nexus how can I do it? (138 words, Jun 2, 2023)
- [Conan 2.x Support - Sonatype Nexus Repository - Sonatype Community](/content/community/t/conan-2-x-support/10722/index.html): Hello, 
As far as I know Nexus doesn’t support yet Conan 2.x , Will it be supported in the future and is there any timeline for when it will be supported ? (244 words, May 31, 2023)
- [Conan 2.x Support - Sonatype Nexus Repository - Sonatype Community](/content/community/t/conan-2-x-support/10722/1/index.html): Hello, 
As far as I know Nexus doesn’t support yet Conan 2.x , Will it be supported in the future and is there any timeline for when it will be supported ? (246 words, May 31, 2023)
- [Is it possible to add a licensing system while a dependency download from the Nexus repo? - Sonatype Lifecycle & Repository Firewall / Best Practices - Sonatype Community](/content/community/t/is-it-possible-to-add-a-licensing-system-while-a-dependency-download-from-the-nexus-repo/10715/index.html): I have a requirement regarding adding a subscription system while downloading dependency from the Nexus repo. The scenario is like this- 
I have a Java project that is deployed in nexus maven releases. I can import this &hellip; (143 words, May 31, 2023)
- [Is it possible to add a licensing system while a dependency download from the Nexus repo? - Sonatype Lifecycle & Repository Firewall / Best Practices - Sonatype Community](/content/community/t/is-it-possible-to-add-a-licensing-system-while-a-dependency-download-from-the-nexus-repo/10715/1/index.html): I have a requirement regarding adding a subscription system while downloading dependency from the Nexus repo. The scenario is like this- 
I have a Java project that is deployed in nexus maven releases. I can import this &hellip; (142 words, May 31, 2023)
- [Error when pulling source code from azure devops - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/error-when-pulling-source-code-from-azure-devops/10688/2/index.html): Hello, 
I successfully configured my Source control (it’s an azure devops 2020 on-premise) in Nexus Lifecycle, but when I take a look at the logs I have the following error: 
2023-05-25 08:32:37,969+0000 ERROR [PullReque&hellip; (218 words, May 30, 2023)
- [Nexus IQ CLI - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/nexus-iq-cli/10706/2/index.html): Hi, apparently there wasn’t a timestamp generated on any of the json files after i trigger nexus IQ CLI to scan my files. 
Can’t be found in the json /sonatype/reports/policy-eval-results.json or http://nexus-iq-server:8&hellip; (254 words, May 29, 2023)
- [Problems with Nexus - Sonatype Nexus Repository - Sonatype Community](/content/community/t/problems-with-nexus/10681/4/index.html): Returns a non-existing file. 
The repo itself is empty. I deleted everything through the interface. The mirror from which the repo takes the data has also been cleaned. 
Trying to load file via curl. 
nexus/sonatype-work&hellip; (201 words, May 29, 2023)
- [Docker Proxy for registry.gitlab.com not working - Sonatype Nexus Repository - Sonatype Community](/content/community/t/docker-proxy-for-registry-gitlab-com-not-working/10695/2/index.html): I’m trying to configure Nexus with a Docker Proxy for registry.gitlab.com to proxy the gitlab-runner-helper image (registry.gitlab.com/gitlab-org/gitlab-runner/gitlab-runner-helper:x86_64-dcfb4b66) - but an error appears&hellip; (125 words, May 29, 2023)
- [Nexus IQ - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-iq/10680/3/index.html): Hello 
I’ve been working with the Nexus IQ Lifecycle Release 124 API and have run into a question that I hope you can help with. 
I would like to know if there is an API available to retrieve all the reports under the Or&hellip; (231 words, May 29, 2023)
- [Create or update repository with API, disable Strict Content Type Validation - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/create-or-update-repository-with-api-disable-strict-content-type-validation/10536/2/index.html): Hello, I would like to change some repository settings with scripts. 
By default there are some settings which I would like to edit, for example: “Strict Content Type Validation” is enabled, “Maximum component age”, “Max&hellip; (145 words, May 29, 2023)
- [Nexus IQ CLI - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/nexus-iq-cli/10706/index.html): Hi, apparently there wasn’t a timestamp generated on any of the json files after i trigger nexus IQ CLI to scan my files. 
Can’t be found in the json /sonatype/reports/policy-eval-results.json or http://nexus-iq-server:8&hellip; (253 words, May 29, 2023)
- [Nexus IQ CLI - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/nexus-iq-cli/10706/1/index.html): Hi, apparently there wasn’t a timestamp generated on any of the json files after i trigger nexus IQ CLI to scan my files. 
Can’t be found in the json /sonatype/reports/policy-eval-results.json or http://nexus-iq-server:8&hellip; (252 words, May 29, 2023)
- [Exception running CLI tool in Java 17 - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/exception-running-cli-tool-in-java-17/8937/3/index.html): I am having this issue when running CLI tool (version 136) on Java 17. Our developer tells us there are no changes to their build platform. Here is the error: 
at com.sonatype.insight.scan.cli.PolicyEvaluatorCli.instanti&hellip; (189 words, May 26, 2023)
- [Success Metric dashboard error after update - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/success-metric-dashboard-error-after-update/10687/4/index.html): Hello, 
I have updated recently updated from version 150 to 161 and one of my Success Metric dashboard is in error, I have tried to delete it (via api), but I received an error. I can’t access it via the interface and th&hellip; (194 words, May 26, 2023)
- [How to install specifc version of NexusIQ extension for Azure Devops - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/how-to-install-specifc-version-of-nexusiq-extension-for-azure-devops/10699/index.html): Hi team 
when I install nexus IQ ext form Azure DevOps market place(Nexus IQ for Azure DevOps - Visual Studio Marketplace) it always install the  latest version but I want to install a specific version of exrenstion, wou&hellip; (83 words, May 26, 2023)
- [Docker Proxy for registry.gitlab.com not working - Sonatype Nexus Repository - Sonatype Community](/content/community/t/docker-proxy-for-registry-gitlab-com-not-working/10695/index.html): I’m trying to configure Nexus with a Docker Proxy for registry.gitlab.com to proxy the gitlab-runner-helper image (registry.gitlab.com/gitlab-org/gitlab-runner/gitlab-runner-helper:x86_64-dcfb4b66) - but an error appears&hellip; (125 words, May 25, 2023)
- [Docker Proxy for registry.gitlab.com not working - Sonatype Nexus Repository - Sonatype Community](/content/community/t/docker-proxy-for-registry-gitlab-com-not-working/10695/1/index.html): I’m trying to configure Nexus with a Docker Proxy for registry.gitlab.com to proxy the gitlab-runner-helper image (registry.gitlab.com/gitlab-org/gitlab-runner/gitlab-runner-helper:x86_64-dcfb4b66) - but an error appears&hellip; (129 words, May 25, 2023)
- [Error when pulling source code from azure devops - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/error-when-pulling-source-code-from-azure-devops/10688/index.html): Hello, 
I successfully configured my Source control (it’s an azure devops 2020 on-premise) in Nexus Lifecycle, but when I take a look at the logs I have the following error: 
2023-05-25 08:32:37,969+0000 ERROR [PullReque&hellip; (216 words, May 25, 2023)
- [Error when pulling source code from azure devops - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/error-when-pulling-source-code-from-azure-devops/10688/1/index.html): Hello, 
I successfully configured my Source control (it’s an azure devops 2020 on-premise) in Nexus Lifecycle, but when I take a look at the logs I have the following error: 
2023-05-25 08:32:37,969+0000 ERROR [PullReque&hellip; (216 words, May 25, 2023)
- [Success Metric dashboard error after update - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/success-metric-dashboard-error-after-update/10687/index.html): Hello, 
I have updated recently updated from version 150 to 161 and one of my Success Metric dashboard is in error, I have tried to delete it (via api), but I received an error. I can’t access it via the interface and th&hellip; (189 words, May 25, 2023)
- [Success Metric dashboard error after update - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/success-metric-dashboard-error-after-update/10687/1/index.html): Hello, 
I have updated recently updated from version 150 to 161 and one of my Success Metric dashboard is in error, I have tried to delete it (via api), but I received an error. I can’t access it via the interface and th&hellip; (190 words, May 25, 2023)
- [Join us in 1 hour for May Office Hours - 12 p.m EDT - Community Announcements - Sonatype Community](/content/community/t/join-us-in-1-hour-for-may-office-hours-12-p-m-edt/10683/2/index.html): Join us in one hour at 12 p.m. EDT (9 a.m. PDT | 5 p.m. BST) for our monthly, customer-exclusive Office Hours. This month, we’ll be discussing the following topic: 

Sonatype Product Name Changes and New Capabilities

D&hellip; (172 words, May 24, 2023)
- [Join us in 1 hour for May Office Hours - 12 p.m EDT - Community Announcements - Sonatype Community](/content/community/t/join-us-in-1-hour-for-may-office-hours-12-p-m-edt/10683/1/index.html): Join us in one hour at 12 p.m. EDT (9 a.m. PDT | 5 p.m. BST) for our monthly, customer-exclusive Office Hours. This month, we’ll be discussing the following topic: 

Sonatype Product Name Changes and New Capabilities

D&hellip; (107 words, May 24, 2023)
- [Problems with Nexus - Sonatype Nexus Repository - Sonatype Community](/content/community/t/problems-with-nexus/10681/index.html): Returns a non-existing file. 
The repo itself is empty. I deleted everything through the interface. The mirror from which the repo takes the data has also been cleaned. 
Trying to load file via curl. 
nexus/sonatype-work&hellip; (201 words, May 24, 2023)
- [Problems with Nexus - Sonatype Nexus Repository - Sonatype Community](/content/community/t/problems-with-nexus/10681/1/index.html): Returns a non-existing file. 
The repo itself is empty. I deleted everything through the interface. The mirror from which the repo takes the data has also been cleaned. 
Trying to load file via curl. 
nexus/sonatype-work&hellip; (201 words, May 24, 2023)
- [Nexus IQ - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-iq/10680/1/index.html): Hello 
I’ve been working with the Nexus IQ Lifecycle Release 124 API and have run into a question that I hope you can help with. 
I would like to know if there is an API available to retrieve all the reports under the Or&hellip; (164 words, May 24, 2023)
- [GitHub Packages as npm proxy - Sonatype Nexus Repository - Sonatype Community](/content/community/t/github-packages-as-npm-proxy/5034/6/index.html): Hello, 
is it possible to configure Nexus to use GitHub Packages as a npm proxy? HTTP authentication option doesn’t seem to work. 
Here are GitHub docs how to do it locally: https://docs.github.com/en/free-pro-team@lates&hellip; (709 words, May 24, 2023)
- [If a group repository contains two repos and each one has a package with the same path and same name, which one will the group repo take precedence?What are the rules in this situation? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/if-a-group-repository-contains-two-repos-and-each-one-has-a-package-with-the-same-path-and-same-name-which-one-will-the-group-repo-take-precedence-what-are-the-rules-in-this-situation/10637/5/index.html): If a group repository contains two repos and each one has a package with the same path and same name, which one will the group repo take precedence?What are the rules in this situation? 
For example, I have two hosted ra&hellip; (256 words, May 19, 2023)
- [Maven proxy repository 404 error - Sonatype Nexus Repository - Sonatype Community](/content/community/t/maven-proxy-repository-404-error/10643/index.html): Hi, 
we have maven proxy repository, when try to download package we got many 401 errors did some search and enabled pre-emptive authentication in repository settings after that receiving 404 error for some of the packag&hellip; (151 words, May 18, 2023)
- [Maven proxy repository 404 error - Sonatype Nexus Repository - Sonatype Community](/content/community/t/maven-proxy-repository-404-error/10643/1/index.html): Hi, 
we have maven proxy repository, when try to download package we got many 401 errors did some search and enabled pre-emptive authentication in repository settings after that receiving 404 error for some of the packag&hellip; (149 words, May 18, 2023)
- [If a group repository contains two repos and each one has a package with the same path and same name, which one will the group repo take precedence?What are the rules in this situation? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/if-a-group-repository-contains-two-repos-and-each-one-has-a-package-with-the-same-path-and-same-name-which-one-will-the-group-repo-take-precedence-what-are-the-rules-in-this-situation/10637/index.html): If a group repository contains two repos and each one has a package with the same path and same name, which one will the group repo take precedence?What are the rules in this situation? 
For example, I have two hosted ra&hellip; (256 words, May 18, 2023)
- [If a group repository contains two repos and each one has a package with the same path and same name, which one will the group repo take precedence?What are the rules in this situation? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/if-a-group-repository-contains-two-repos-and-each-one-has-a-package-with-the-same-path-and-same-name-which-one-will-the-group-repo-take-precedence-what-are-the-rules-in-this-situation/10637/1/index.html): If a group repository contains two repos and each one has a package with the same path and same name, which one will the group repo take precedence?What are the rules in this situation? 
For example, I have two hosted ra&hellip; (264 words, May 18, 2023)
- [Join us for May Office Hours - Wednesday, May 24th at 12pm EDT - Community Announcements - Sonatype Community](/content/community/t/join-us-for-may-office-hours-wednesday-may-24th-at-12pm-edt/10634/2/index.html): Join us Wednesday, May 24th at 12 p.m. EDT (9 a.m. PDT | 5 p.m. BST) for our monthly, customer-exclusive Office Hours. This month, we’ll be discussing the following topic: 

Sonatype Product Name Changes and New Capabi&hellip; (183 words, May 17, 2023)
- [Join us for May Office Hours - Wednesday, May 24th at 12pm EDT - Community Announcements - Sonatype Community](/content/community/t/join-us-for-may-office-hours-wednesday-may-24th-at-12pm-edt/10634/index.html): Join us Wednesday, May 24th at 12 p.m. EDT (9 a.m. PDT | 5 p.m. BST) for our monthly, customer-exclusive Office Hours. This month, we’ll be discussing the following topic: 

Sonatype Product Name Changes and New Capabi&hellip; (200 words, May 17, 2023)
- [Colon in URL off proxied yum repository doesn't work - Sonatype Nexus Repository - Sonatype Community](/content/community/t/colon-in-url-off-proxied-yum-repository-doesnt-work/10627/index.html): hi, 
to install cri-o as container runtime for kubernetes in our production infrastructure I need to proxy the yum repositroy /repositories/devel:/kubic:/libcontainers: - openSUSE Download 
but i get an 502 error code wh&hellip; (139 words, May 16, 2023)
- [Colon in URL off proxied yum repository doesn't work - Sonatype Nexus Repository - Sonatype Community](/content/community/t/colon-in-url-off-proxied-yum-repository-doesnt-work/10627/1/index.html): hi, 
to install cri-o as container runtime for kubernetes in our production infrastructure I need to proxy the yum repositroy /repositories/devel:/kubic:/libcontainers: - openSUSE Download 
but i get an 502 error code wh&hellip; (133 words, May 16, 2023)
- [How to create soft links in nexus repositories - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-to-create-soft-links-in-nexus-repositories/10610/3/index.html): Suppose I created a repo named repo-test, and there are two subpaths called centos7 and common. I hope to link centos7 to common. That is, the packages in centos7 are soft links to common packages. How should I do it? 
  &hellip; (91 words, May 15, 2023)
- [How to create soft links in nexus repositories - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-to-create-soft-links-in-nexus-repositories/10610/index.html): Suppose I created a repo named repo-test, and there are two subpaths called centos7 and common. I hope to link centos7 to common. That is, the packages in centos7 are soft links to common packages. How should I do it? 
  &hellip; (91 words, May 12, 2023)
- [How to create soft links in nexus repositories - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-to-create-soft-links-in-nexus-repositories/10610/1/index.html): Suppose I created a repo named repo-test, and there are two subpaths called centos7 and common. I hope to link centos7 to common. That is, the packages in centos7 are soft links to common packages. How should I do it? 
  &hellip; (91 words, May 12, 2023)
- [Nexus 3 Maven Repo Group Cache Invalidation Persistence - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-3-maven-repo-group-cache-invalidation-persistence/10604/index.html): Hello, 
With Nexus OSS 3.52.0-01 using OrientDB, is the cache invalidation timestamp (when you click clear cache) persisted to disk? 
We are finding that when our Nexus VM is restarted the previously invalidated cache be&hellip; (184 words, May 11, 2023)
- [Issues? Or something changed - cannot download artifact without user/pass prompt - Central Repository - Sonatype Community](/content/community/t/issues-or-something-changed-cannot-download-artifact-without-user-pass-prompt/10593/index.html): Trying to download in a script from maven central using a URL I’ve used plenty before – this fails. 
Has something changed? The URL still seems to be in the current docs? 

➜  /tmp wget “http://repository.sonatype.org/se&hellip; (570 words, May 9, 2023)
- [About Nexus IQ - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/about-nexus-iq/10591/index.html): Hi Team, 
We are using Nexus IQ 1.155.0.-01 licensed edition (on-premises) 
I have few questions regarding configuring below settings as part of Nexus IQ; 


Does Nexus IQ authentication support enforcing of minimum pass&hellip; (274 words, May 8, 2023)
- [Set Node Friendly Name - Sonatype Nexus Repository - Sonatype Community](/content/community/t/set-node-friendly-name/10575/4/index.html): Nexus 3.50.0 Pro HA, is there a way to give each node a friendly name? 
The Nodes API does not return any results. (146 words, May 4, 2023)
- [Nexus Repo 3 Logging - Log Viewer - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-repo-3-logging-log-viewer/6796/7/index.html): As an admin I want to look at the log viewer and monitor what has been downloaded, uploaded, and changed from Origin IP and User ID. But I cannot figure out which default logger Nexus 3 would show this information. 
I se&hellip; (421 words, May 4, 2023)
- [Is it possible to download specific files from maven repository using python? - Central Repository - Sonatype Community](/content/community/t/is-it-possible-to-download-specific-files-from-maven-repository-using-python/10542/7/index.html): Is it possible to search and download specific files (pom or jar) using python? 
for example: 
        url = &quot;https://search.maven.org/solrsearch/select?q=&quot;
        src = &quot;g:javax.servlet a:javax.servlet-api v:4.0.1&quot;

  &hellip; (810 words, May 4, 2023)
- [Set Node Friendly Name - Sonatype Nexus Repository - Sonatype Community](/content/community/t/set-node-friendly-name/10575/3/index.html): Nexus 3.50.0 Pro HA, is there a way to give each node a friendly name? 
The Nodes API does not return any results. (152 words, May 3, 2023)
- [Set Node Friendly Name - Sonatype Nexus Repository - Sonatype Community](/content/community/t/set-node-friendly-name/10575/2/index.html): Nexus 3.50.0 Pro HA, is there a way to give each node a friendly name? 
The Nodes API does not return any results. (156 words, May 3, 2023)
- [Nexus Repository Manager v3 doesn't show add option - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-repository-manager-v3-doesnt-show-add-option/10573/3/index.html): Hi, 
I currently have a staging repository access on oss.sonatype.org. I would like to create Virtual Repository for the same to get unzipped artifact content. But the “Add Repository” Button is not visible to me. Do I h&hellip; (180 words, May 3, 2023)
- [Set Node Friendly Name - Sonatype Nexus Repository - Sonatype Community](/content/community/t/set-node-friendly-name/10575/index.html): Nexus 3.50.0 Pro HA, is there a way to give each node a friendly name? 
The Nodes API does not return any results. (156 words, May 3, 2023)
- [Set Node Friendly Name - Sonatype Nexus Repository - Sonatype Community](/content/community/t/set-node-friendly-name/10575/1/index.html): Nexus 3.50.0 Pro HA, is there a way to give each node a friendly name? 
The Nodes API does not return any results. (152 words, May 3, 2023)
- [Nexus Repository Manager v3 doesn't show add option - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-repository-manager-v3-doesnt-show-add-option/10573/2/index.html): Hi, 
I currently have a staging repository access on oss.sonatype.org. I would like to create Virtual Repository for the same to get unzipped artifact content. But the “Add Repository” Button is not visible to me. Do I h&hellip; (169 words, May 3, 2023)
- [Nexus Repository Manager v3 doesn't show add option - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-repository-manager-v3-doesnt-show-add-option/10573/index.html): Hi, 
I currently have a staging repository access on oss.sonatype.org. I would like to create Virtual Repository for the same to get unzipped artifact content. But the “Add Repository” Button is not visible to me. Do I h&hellip; (191 words, May 3, 2023)
- [Nexus Repository Manager v3 doesn't show add option - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-repository-manager-v3-doesnt-show-add-option/10573/1/index.html): Hi, 
I currently have a staging repository access on oss.sonatype.org. I would like to create Virtual Repository for the same to get unzipped artifact content. But the “Add Repository” Button is not visible to me. Do I h&hellip; (104 words, May 3, 2023)
- [Is it possible to download specific files from maven repository using python? - Central Repository - Sonatype Community](/content/community/t/is-it-possible-to-download-specific-files-from-maven-repository-using-python/10542/2/index.html): Is it possible to search and download specific files (pom or jar) using python? 
for example: 
        url = &quot;https://search.maven.org/solrsearch/select?q=&quot;
        src = &quot;g:javax.servlet a:javax.servlet-api v:4.0.1&quot;

  &hellip; (816 words, May 1, 2023)
- [Join us in 1 hour for April Office Hours - 12 p.m EDT - Community Announcements - Sonatype Community](/content/community/t/join-us-in-1-hour-for-april-office-hours-12-p-m-edt/10546/index.html): Join us in one hour at 12 p.m EDT (9 a.m. PDT | 5 p.m. BST) for our monthly, customer-exclusive Office Hours. This month, we’ll be discussing the following topics: 

Updated Data Insights in Nexus Lifecycle
Insights fr&hellip; (107 words, Apr 26, 2023)
- [Join us in 1 hour for April Office Hours - 12 p.m EDT - Community Announcements - Sonatype Community](/content/community/t/join-us-in-1-hour-for-april-office-hours-12-p-m-edt/10546/1/index.html): Join us in one hour at 12 p.m EDT (9 a.m. PDT | 5 p.m. BST) for our monthly, customer-exclusive Office Hours. This month, we’ll be discussing the following topics: 

Updated Data Insights in Nexus Lifecycle
Insights fr&hellip; (191 words, Apr 26, 2023)
- [Is it possible to download specific files from maven repository using python? - Central Repository - Sonatype Community](/content/community/t/is-it-possible-to-download-specific-files-from-maven-repository-using-python/10542/index.html): Is it possible to search and download specific files (pom or jar) using python? 
for example: 
        url = &quot;https://search.maven.org/solrsearch/select?q=&quot;
        src = &quot;g:javax.servlet a:javax.servlet-api v:4.0.1&quot;

  &hellip; (831 words, Apr 26, 2023)
- [Is it possible to download specific files from maven repository using python? - Central Repository - Sonatype Community](/content/community/t/is-it-possible-to-download-specific-files-from-maven-repository-using-python/10542/1/index.html): Is it possible to search and download specific files (pom or jar) using python? 
for example: 
        url = &quot;https://search.maven.org/solrsearch/select?q=&quot;
        src = &quot;g:javax.servlet a:javax.servlet-api v:4.0.1&quot;

  &hellip; (806 words, Apr 26, 2023)
- [We're Updating Our Product Names and Logos - Community Announcements - Sonatype Community](/content/community/t/were-updating-our-product-names-and-logos/10540/index.html): As we roll out our updated Sonatype brand, you will see product names and logos begin to change across my.sonatype.com, including here in our Community. 
These name changes and logo updates are now reflected in the corre&hellip; (102 words, Apr 25, 2023)
- [We're Updating Our Product Names and Logos - Community Announcements - Sonatype Community](/content/community/t/were-updating-our-product-names-and-logos/10540/1/index.html): As we roll out our updated Sonatype brand, you will see product names and logos begin to change across my.sonatype.com, including here in our Community. 
These name changes and logo updates are now reflected in the corre&hellip; (145 words, Apr 25, 2023)
- [Join us for April Office Hours - Wednesday, April 26th at 12pm EDT - Community Announcements - Sonatype Community](/content/community/t/join-us-for-april-office-hours-wednesday-april-26th-at-12pm-edt/10498/5/index.html): Join us Wednesday, April 26th at 12 p.m. EDT (9 a.m. PDT | 5 p.m. BST) for our monthly, customer-exclusive Office Hours. This month, we’ll be discussing the following topics: 

Updated Data Insights in Nexus Lifecycle
I&hellip; (121 words, Apr 25, 2023)
- [Create or update repository with API, disable Strict Content Type Validation - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/create-or-update-repository-with-api-disable-strict-content-type-validation/10536/index.html): Hello, I would like to change some repository settings with scripts. 
By default there are some settings which I would like to edit, for example: “Strict Content Type Validation” is enabled, “Maximum component age”, “Max&hellip; (145 words, Apr 25, 2023)
- [Create or update repository with API, disable Strict Content Type Validation - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/create-or-update-repository-with-api-disable-strict-content-type-validation/10536/1/index.html): Hello, I would like to change some repository settings with scripts. 
By default there are some settings which I would like to edit, for example: “Strict Content Type Validation” is enabled, “Maximum component age”, “Max&hellip; (94 words, Apr 25, 2023)
- [Apt as a proxy , release file cache and package resolution - Sonatype Nexus Repository - Sonatype Community](/content/community/t/apt-as-a-proxy-release-file-cache-and-package-resolution/10534/index.html): Hi All, 
We’re currently PoCing sonatype nexus and I’m trying to understand if it can help on our usecase. 
So we have an apt server where we are uploading several debian packages very similarly to archive.ubuntu.com, le&hellip; (751 words, Apr 24, 2023)
- [Apt as a proxy , release file cache and package resolution - Sonatype Nexus Repository - Sonatype Community](/content/community/t/apt-as-a-proxy-release-file-cache-and-package-resolution/10534/1/index.html): Hi All, 
We’re currently PoCing sonatype nexus and I’m trying to understand if it can help on our usecase. 
So we have an apt server where we are uploading several debian packages very similarly to archive.ubuntu.com, le&hellip; (748 words, Apr 24, 2023)
- [Nexus IQ CLI - GPG signature key is expired - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/nexus-iq-cli-gpg-signature-key-is-expired/10515/index.html): Attempting to install nexus iq cli on ubuntu but facing the below error 
GPG error: https://repo.sonatype.com/repository/sonatype-apt-hosted stable InRelease: The following signatures were invalid: EXPKEYSIG 68930BE5F3F2&hellip; (332 words, Apr 21, 2023)
- [Nexus IQ CLI - GPG signature key is expired - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/nexus-iq-cli-gpg-signature-key-is-expired/10515/1/index.html): Attempting to install nexus iq cli on ubuntu but facing the below error 
GPG error: https://repo.sonatype.com/repository/sonatype-apt-hosted stable InRelease: The following signatures were invalid: EXPKEYSIG 68930BE5F3F2&hellip; (332 words, Apr 21, 2023)
- [Alert needed to monitoring nexus repository manager - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/alert-needed-to-monitoring-nexus-repository-manager/10301/2/index.html): Hi, guys. 
I’m a newbie in Nexus repository and i have one question, please. 
I already looked around this community, but found nothing about. 
The question is: 
What kind of alert do I need to monitoring nexus repositor&hellip; (138 words, Apr 20, 2023)
- [Join us for April Office Hours - Wednesday, April 26th at 12pm EDT - Community Announcements - Sonatype Community](/content/community/t/join-us-for-april-office-hours-wednesday-april-26th-at-12pm-edt/10498/index.html): Join us Wednesday, April 26th at 12 p.m. EDT (9 a.m. PDT | 5 p.m. BST) for our monthly, customer-exclusive Office Hours. This month, we’ll be discussing the following topics: 

Updated Data Insights in Nexus Lifecycle
I&hellip; (110 words, Apr 19, 2023)
- [Join us for April Office Hours - Wednesday, April 26th at 12pm EDT - Community Announcements - Sonatype Community](/content/community/t/join-us-for-april-office-hours-wednesday-april-26th-at-12pm-edt/10498/1/index.html): Join us Wednesday, April 26th at 12 p.m. EDT (9 a.m. PDT | 5 p.m. BST) for our monthly, customer-exclusive Office Hours. This month, we’ll be discussing the following topics: 

Updated Data Insights in Nexus Lifecycle
I&hellip; (112 words, Apr 19, 2023)
- [Upgrade of OSS Nexus Repository Manager from 3.29.2 to 3.48.0 fails on exception during index creation - Sonatype Nexus Repository - Sonatype Community](/content/community/t/upgrade-of-oss-nexus-repository-manager-from-3-29-2-to-3-48-0-fails-on-exception-during-index-creation/10295/2/index.html): Hi, I am trying to upgrade Nexus from version 3.29.2 to 3.48.0. For deployment of Nexus we use Official Docker container (originally 3.29.2; target version 3.48.0). Environment i test it on is: 
OS: Ubuntu 22.04.2 LTS (J&hellip; (872 words, Apr 17, 2023)
- [Updated Data Insights Available in Nexus Lifecycle - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/updated-data-insights-available-in-nexus-lifecycle/10456/1/index.html): Sonatype Labs continues to evolve and add experimental features to our products. Our latest updates include two for Lifecycle Data Insights. 
1. Rolling Recap 
Your Nexus Lifecycle Year in Review is now Rolling Recap. Re&hellip; (267 words, Apr 11, 2023)
- [Nexus running on docker failed to run after update - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-running-on-docker-failed-to-run-after-update/6026/6/index.html): I was upgrading my nexus image from 3.19 to 3.30, after upgrade nexus is failing to start with below error: 
2021-03-08 11:34:01,911+0000 ERROR [FelixStartLevel] *SYSTEM org.sonatype.nexus.extender.NexusContextListener -&hellip; (319 words, Apr 10, 2023)
- [High blob count in group repositories - Sonatype Nexus Repository - Sonatype Community](/content/community/t/high-blob-count-in-group-repositories/10439/index.html): Hello! 
I am using Sonatype Nexus Repository Manager 
OSS 3.49.0-02 with embedded OrientDB. I started to analyze the potential cause of repetitive application errors that occur even after scaling the host to 32GB RAM, wi&hellip; (290 words, Apr 9, 2023)
- [High blob count in group repositories - Sonatype Nexus Repository - Sonatype Community](/content/community/t/high-blob-count-in-group-repositories/10439/1/index.html): Hello! 
I am using Sonatype Nexus Repository Manager 
OSS 3.49.0-02 with embedded OrientDB. I started to analyze the potential cause of repetitive application errors that occur even after scaling the host to 32GB RAM, wi&hellip; (290 words, Apr 9, 2023)
- [How can i upload a folder of dependencies to a nuget hosted repo in nexus by commands? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-can-i-upload-a-folder-of-dependencies-to-a-nuget-hosted-repo-in-nexus-by-commands/10412/7/index.html): I need to upload a folder of dependencies to a nuget hosted repo by commands, how can i do that? (195 words, Apr 5, 2023)
- [How can i upload a folder of dependencies to a nuget hosted repo in nexus by commands? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-can-i-upload-a-folder-of-dependencies-to-a-nuget-hosted-repo-in-nexus-by-commands/10412/index.html): I need to upload a folder of dependencies to a nuget hosted repo by commands, how can i do that? (220 words, Apr 5, 2023)
- [Sonar cloud authentication method - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/sonar-cloud-authentication-method/10365/2/index.html): Hello good afternoon. 
I couldn’t find it in the documentation for sonar cloud. 
Is there federation authentication method to be configured via NAM and NDS tool in sonar cloud? (121 words, Mar 29, 2023)
- [OrientDB Studio has been deprecated and it's no longer available - Sonatype Nexus Repository - Sonatype Community](/content/community/t/orientdb-studio-has-been-deprecated-and-its-no-longer-available/10379/index.html): What about OrientDB Studio alternatives for OSS ??? 
…if new Nexus OSS releases will deprecate OrientDB Studio, what alternatives will be implemented for  OSS? (358 words, Mar 29, 2023)
- [OrientDB Studio has been deprecated and it's no longer available - Sonatype Nexus Repository - Sonatype Community](/content/community/t/orientdb-studio-has-been-deprecated-and-its-no-longer-available/10379/1/index.html): What about OrientDB Studio alternatives for OSS ??? 
…if new Nexus OSS releases will deprecate OrientDB Studio, what alternatives will be implemented for  OSS? (358 words, Mar 29, 2023)
- [JENKINS prompts "Invalid Username Password" in Enable Nexus Pro support - Sonatype Nexus Repository - Sonatype Community](/content/community/t/jenkins-prompts-invalid-username-password-in-enable-nexus-pro-support/10378/index.html): Hi All 
We are in the process of upgrading our Jenkins version and as a best practise we have created test environment. We use “Nexus Pro support” to close staged artefacts in the Nexus. The live environment behaves as i&hellip; (199 words, Mar 29, 2023)
- [JENKINS prompts "Invalid Username Password" in Enable Nexus Pro support - Sonatype Nexus Repository - Sonatype Community](/content/community/t/jenkins-prompts-invalid-username-password-in-enable-nexus-pro-support/10378/1/index.html): Hi All 
We are in the process of upgrading our Jenkins version and as a best practise we have created test environment. We use “Nexus Pro support” to close staged artefacts in the Nexus. The live environment behaves as i&hellip; (205 words, Mar 29, 2023)
- [Nexus container integration with Nexus IQ and continuous monitoring - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/nexus-container-integration-with-nexus-iq-and-continuous-monitoring/10353/2/index.html): Hello, 
I use Nexus IQ integration for Nexus Container: 
https://help.sonatype.com/iqserver/integrations/nexus-container-scanning 
and it’s working like a charm, I now have a simple and unique solution to scan all kind o&hellip; (232 words, Mar 28, 2023)
- [Sonar cloud authentication method - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/sonar-cloud-authentication-method/10365/index.html): Hello good afternoon. 
I couldn’t find it in the documentation for sonar cloud. 
Is there federation authentication method to be configured via NAM and NDS tool in sonar cloud? (52 words, Mar 27, 2023)
- [Sonar cloud authentication method - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/sonar-cloud-authentication-method/10365/1/index.html): Hello good afternoon. 
I couldn’t find it in the documentation for sonar cloud. 
Is there federation authentication method to be configured via NAM and NDS tool in sonar cloud? (117 words, Mar 27, 2023)
- [Docker push to hosted registry fails with "Missing upload with uuid" - Sonatype Nexus Repository - Sonatype Community](/content/community/t/docker-push-to-hosted-registry-fails-with-missing-upload-with-uuid/10361/index.html): Hello! 
I’m asking help about a peculiar issue I’ve not found many instances of on the Internets. 
I’ve set up a hosted Docker registry with Nexus 3.49.0-02 running inside the official container. The container is reverse&hellip; (364 words, Mar 26, 2023)
- [Docker push to hosted registry fails with "Missing upload with uuid" - Sonatype Nexus Repository - Sonatype Community](/content/community/t/docker-push-to-hosted-registry-fails-with-missing-upload-with-uuid/10361/1/index.html): Hello! 
I’m asking help about a peculiar issue I’ve not found many instances of on the Internets. 
I’ve set up a hosted Docker registry with Nexus 3.49.0-02 running inside the official container. The container is reverse&hellip; (362 words, Mar 26, 2023)
- [Nexus container integration with Nexus IQ and continuous monitoring - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/nexus-container-integration-with-nexus-iq-and-continuous-monitoring/10353/index.html): Hello, 
I use Nexus IQ integration for Nexus Container: 
https://help.sonatype.com/iqserver/integrations/nexus-container-scanning 
and it’s working like a charm, I now have a simple and unique solution to scan all kind o&hellip; (232 words, Mar 23, 2023)
- [Nexus container integration with Nexus IQ and continuous monitoring - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/nexus-container-integration-with-nexus-iq-and-continuous-monitoring/10353/1/index.html): Hello, 
I use Nexus IQ integration for Nexus Container: 
https://help.sonatype.com/iqserver/integrations/nexus-container-scanning 
and it’s working like a charm, I now have a simple and unique solution to scan all kind o&hellip; (232 words, Mar 23, 2023)
- [Is it possible to view the size of several repositories via the nexus API? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/is-it-possible-to-view-the-size-of-several-repositories-via-the-nexus-api/10344/2/index.html): Hey guys! Is it possible to view the size of several repositories via the nexus API? 
I am using nexus on OSS version 3.33.1-01 (78 words, Mar 22, 2023)
- [Nexus rest search for multiple groups in a repository - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-rest-search-for-multiple-groups-in-a-repository/10325/2/index.html): Hello All, 
My goal is to get jar files from all groups inside a specific repository. 
My query = 

curl -u admin:password -X GET ‘https://mynexus3.internal/service/rest/v1/search?repository=maven-repo1&amp;group=abc-workspa&hellip; (152 words, Mar 22, 2023)
- [We have been facing TLS handshake timeout issue intermittently from Nexus when docker login to Nexus docker repo - Sonatype Nexus Repository - Sonatype Community](/content/community/t/we-have-been-facing-tls-handshake-timeout-issue-intermittently-from-nexus-when-docker-login-to-nexus-docker-repo/10348/1/index.html): Facing below issue while docker login to Nexus docker repo 
Using the existing docker config file.Removing blacklisted property: auths$ docker login -u user -p ******** https://nexus*********:18444 Error response from da&hellip; (88 words, Mar 22, 2023)
- [As per the requirement we need to scan the vulnerability of project using NexusIQ , please guide how to install the scanner and binaries for the same - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/as-per-the-requirement-we-need-to-scan-the-vulnerability-of-project-using-nexusiq-please-guide-how-to-install-the-scanner-and-binaries-for-the-same/10340/2/index.html): As per the requirement we need to scan the vulnerability of project using NexusIQ , please guide how to install the scanner and binaries for the same. (169 words, Mar 21, 2023)
- [Is it possible to view the size of several repositories via the nexus API? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/is-it-possible-to-view-the-size-of-several-repositories-via-the-nexus-api/10344/index.html): Hey guys! Is it possible to view the size of several repositories via the nexus API? 
I am using nexus on OSS version 3.33.1-01 (78 words, Mar 21, 2023)
- [Is it possible to view the size of several repositories via the nexus API? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/is-it-possible-to-view-the-size-of-several-repositories-via-the-nexus-api/10344/1/index.html): Hey guys! Is it possible to view the size of several repositories via the nexus API? 
I am using nexus on OSS version 3.33.1-01 (83 words, Mar 21, 2023)
- [Join us in 1 hour for March Office Hours - 12 p.m EDT - Community Announcements - Sonatype Community](/content/community/t/join-us-in-1-hour-for-march-office-hours-12-p-m-edt/10341/2/index.html): Join us in one hour at 12 p.m. EDT (9 a.m. PDT | 4 p.m. GMT) for our monthly, customer-exclusive Office Hours. This month, we’ll be discussing the following topic: 

Nexus Lifecycle and Nexus Firewall: Q1 Launches

Dro&hellip; (166 words, Mar 21, 2023)
- [Join us in 1 hour for March Office Hours - 12 p.m EDT - Community Announcements - Sonatype Community](/content/community/t/join-us-in-1-hour-for-march-office-hours-12-p-m-edt/10341/1/index.html): Join us in one hour at 12 p.m. EDT (9 a.m. PDT | 4 p.m. GMT) for our monthly, customer-exclusive Office Hours. This month, we’ll be discussing the following topic: 

Nexus Lifecycle and Nexus Firewall: Q1 Launches

Dro&hellip; (176 words, Mar 21, 2023)
- [Page in file browse_node_2.pcl with index 22604 was placed in wrong free list, this error will be fixed automatically - Sonatype Nexus Repository - Sonatype Community](/content/community/t/page-in-file-browse-node-2-pcl-with-index-22604-was-placed-in-wrong-free-list-this-error-will-be-fixed-automatically/10162/2/index.html): OSS Nexus version : OSS 3.37.3-02 
Our log file nexus.log i being flooded with orientDB warnings about browse_node_2.pcl like this: 
com.orientechnologies.orient.core.storage.impl.local.paginated.OPaginatedCluster - $ANS&hellip; (689 words, Mar 21, 2023)
- [As per the requirement we need to scan the vulnerability of project using NexusIQ , please guide how to install the scanner and binaries for the same - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/as-per-the-requirement-we-need-to-scan-the-vulnerability-of-project-using-nexusiq-please-guide-how-to-install-the-scanner-and-binaries-for-the-same/10340/index.html): As per the requirement we need to scan the vulnerability of project using NexusIQ , please guide how to install the scanner and binaries for the same. (167 words, Mar 21, 2023)
- [As per the requirement we need to scan the vulnerability of project using NexusIQ , please guide how to install the scanner and binaries for the same - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/as-per-the-requirement-we-need-to-scan-the-vulnerability-of-project-using-nexusiq-please-guide-how-to-install-the-scanner-and-binaries-for-the-same/10340/1/index.html): As per the requirement we need to scan the vulnerability of project using NexusIQ , please guide how to install the scanner and binaries for the same. (167 words, Mar 21, 2023)
- [Update Your IQ Server License Threat Groups - Sonatype Labs - Sonatype Community](/content/community/t/update-your-iq-server-license-threat-groups/3094/27/index.html): The license threat group updater will apply the latest Sonatype provided license classification to your running IQ server’s license threat groups. This will alleviate any “License Threat Group not Assigned” policy violat&hellip; (688 words, Mar 20, 2023)
- [Nexus Remote Repo for Homebrew on MacOS - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-remote-repo-for-homebrew-on-macos/10333/index.html): Is it possible to use Nexus Pro as remote repo for homebrew? 
I mean like jfrog artefactory https://jfrog.com/knowledge-base/how-to-setup-a-remote-homebrew-repository/ 
Homebrew is the biggest Package Manager under MacOS&hellip; (97 words, Mar 20, 2023)
- [Nexus Remote Repo for Homebrew on MacOS - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-remote-repo-for-homebrew-on-macos/10333/1/index.html): Is it possible to use Nexus Pro as remote repo for homebrew? 
I mean like jfrog artefactory https://jfrog.com/knowledge-base/how-to-setup-a-remote-homebrew-repository/ 
Homebrew is the biggest Package Manager under MacOS&hellip; (97 words, Mar 20, 2023)
- [Retrieving the latest snapshot - Central Repository - Sonatype Community](/content/community/t/retrieving-the-latest-snapshot/10311/2/index.html): We publish maven artifacts to the release repository (for releases), and to the snapshot repository (for snapshots ie merge build) 
I can get the latest version of a released artifact using something like 
http://reposit&hellip; (198 words, Mar 19, 2023)
- [Maintenance Downtime of Community at 12 p.m EDT - 3/17/23 - Community Announcements - Sonatype Community](/content/community/t/maintenance-downtime-of-community-at-12-p-m-edt-3-17-23/10326/3/index.html): Starting around 12:00p.m EDT, the Community forum will be brought offline to perform necessary maintenance and upgrades. 
This downtime is localized to just the community forum, and will not affect other my.sonatype.com &hellip; (144 words, Mar 17, 2023)
- [Maintenance Downtime of Community at 12 p.m EDT - 3/17/23 - Community Announcements - Sonatype Community](/content/community/t/maintenance-downtime-of-community-at-12-p-m-edt-3-17-23/10326/index.html): Starting around 12:00p.m EDT, the Community forum will be brought offline to perform necessary maintenance and upgrades. 
This downtime is localized to just the community forum, and will not affect other my.sonatype.com &hellip; (183 words, Mar 17, 2023)
- [Maintenance Downtime of Community at 12 p.m EDT - 3/17/23 - Community Announcements - Sonatype Community](/content/community/t/maintenance-downtime-of-community-at-12-p-m-edt-3-17-23/10326/1/index.html): Starting around 12:00p.m EDT, the Community forum will be brought offline to perform necessary maintenance and upgrades. 
This downtime is localized to just the community forum, and will not affect other my.sonatype.com &hellip; (139 words, Mar 17, 2023)
- [Nexus rest search for multiple groups in a repository - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-rest-search-for-multiple-groups-in-a-repository/10325/1/index.html): Hello All, 
My goal is to get jar files from all groups inside a specific repository. 
My query = 

curl -u admin:password -X GET ‘https://mynexus3.internal/service/rest/v1/search?repository=maven-repo1&amp;group=abc-workspa&hellip; (152 words, Mar 17, 2023)
- [Https://ossindex.sonatype.org is down due to which dependecy check is failing - Central Repository - Sonatype Community](/content/community/t/https-ossindex-sonatype-org-is-down-due-to-which-dependecy-check-is-failing/10319/2/index.html): Hi Team, 
It seems https://ossindex.sonatype.org/rest is down due to which we are having a lot of impact during dependecy check as we use oss index in it. 
So any news on it when it will get up ? (234 words, Mar 17, 2023)
- [Https://ossindex.sonatype.org is down due to which dependecy check is failing - Central Repository - Sonatype Community](/content/community/t/https-ossindex-sonatype-org-is-down-due-to-which-dependecy-check-is-failing/10319/index.html): Hi Team, 
It seems https://ossindex.sonatype.org/rest is down due to which we are having a lot of impact during dependecy check as we use oss index in it. 
So any news on it when it will get up ? (217 words, Mar 17, 2023)
- [Https://ossindex.sonatype.org is down due to which dependecy check is failing - Central Repository - Sonatype Community](/content/community/t/https-ossindex-sonatype-org-is-down-due-to-which-dependecy-check-is-failing/10319/1/index.html): Hi Team, 
It seems https://ossindex.sonatype.org/rest is down due to which we are having a lot of impact during dependecy check as we use oss index in it. 
So any news on it when it will get up ? (216 words, Mar 17, 2023)
- [Join us for March Office Hours - Tuesday, March 21st at 12pm EDT - Community Announcements - Sonatype Community](/content/community/t/join-us-for-march-office-hours-tuesday-march-21st-at-12pm-edt/10316/2/index.html): Join us Tuesday, March 21st at 12 p.m. EDT (9 a.m. PDT | 4 p.m. GMT) for our monthly, customer-exclusive Office Hours. This month, we’ll be discussing the following topic: 

Nexus Lifecycle and Nexus Firewall: Q1 Launc&hellip; (193 words, Mar 16, 2023)
- [Join us for March Office Hours - Tuesday, March 21st at 12pm EDT - Community Announcements - Sonatype Community](/content/community/t/join-us-for-march-office-hours-tuesday-march-21st-at-12pm-edt/10316/index.html): Join us Tuesday, March 21st at 12 p.m. EDT (9 a.m. PDT | 4 p.m. GMT) for our monthly, customer-exclusive Office Hours. This month, we’ll be discussing the following topic: 

Nexus Lifecycle and Nexus Firewall: Q1 Launc&hellip; (193 words, Mar 16, 2023)
- [Join us for March Office Hours - Tuesday, March 21st at 12pm EDT - Community Announcements - Sonatype Community](/content/community/t/join-us-for-march-office-hours-tuesday-march-21st-at-12pm-edt/10316/1/index.html): Join us Tuesday, March 21st at 12 p.m. EDT (9 a.m. PDT | 4 p.m. GMT) for our monthly, customer-exclusive Office Hours. This month, we’ll be discussing the following topic: 

Nexus Lifecycle and Nexus Firewall: Q1 Launc&hellip; (190 words, Mar 16, 2023)
- [Retrieving the latest snapshot - Central Repository - Sonatype Community](/content/community/t/retrieving-the-latest-snapshot/10311/index.html): We publish maven artifacts to the release repository (for releases), and to the snapshot repository (for snapshots ie merge build) 
I can get the latest version of a released artifact using something like 
http://reposit&hellip; (133 words, Mar 16, 2023)
- [Alert needed to monitoring nexus repository manager - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/alert-needed-to-monitoring-nexus-repository-manager/10301/index.html): Hi, guys. 
I’m a newbie in Nexus repository and i have one question, please. 
I already looked around this community, but found nothing about. 
The question is: 
What kind of alert do I need to monitoring nexus repositor&hellip; (144 words, Mar 15, 2023)
- [Alert needed to monitoring nexus repository manager - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/alert-needed-to-monitoring-nexus-repository-manager/10301/1/index.html): Hi, guys. 
I’m a newbie in Nexus repository and i have one question, please. 
I already looked around this community, but found nothing about. 
The question is: 
What kind of alert do I need to monitoring nexus repositor&hellip; (199 words, Mar 15, 2023)
- [Upgrade of OSS Nexus Repository Manager from 3.29.2 to 3.48.0 fails on exception during index creation - Sonatype Nexus Repository - Sonatype Community](/content/community/t/upgrade-of-oss-nexus-repository-manager-from-3-29-2-to-3-48-0-fails-on-exception-during-index-creation/10295/index.html): Hi, I am trying to upgrade Nexus from version 3.29.2 to 3.48.0. For deployment of Nexus we use Official Docker container (originally 3.29.2; target version 3.48.0). Environment i test it on is: 
OS: Ubuntu 22.04.2 LTS (J&hellip; (869 words, Mar 14, 2023)
- [Upgrade of OSS Nexus Repository Manager from 3.29.2 to 3.48.0 fails on exception during index creation - Sonatype Nexus Repository - Sonatype Community](/content/community/t/upgrade-of-oss-nexus-repository-manager-from-3-29-2-to-3-48-0-fails-on-exception-during-index-creation/10295/1/index.html): Hi, I am trying to upgrade Nexus from version 3.29.2 to 3.48.0. For deployment of Nexus we use Official Docker container (originally 3.29.2; target version 3.48.0). Environment i test it on is: 
OS: Ubuntu 22.04.2 LTS (J&hellip; (946 words, Mar 14, 2023)
- [Upgrade/Nexus Migration errors - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/upgrade-nexus-migration-errors/10276/index.html): I am trying to migrate nexus from one nexus instance to another. Current instance version “Sonatype Nexus Repository Manager - OSS 3.22.0-02” installed on “Ubuntu 16.04.7 LTS” which is not supported any more in AWS, need&hellip; (221 words, Mar 9, 2023)
- [Upgrade/Nexus Migration errors - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/upgrade-nexus-migration-errors/10276/1/index.html): I am trying to migrate nexus from one nexus instance to another. Current instance version “Sonatype Nexus Repository Manager - OSS 3.22.0-02” installed on “Ubuntu 16.04.7 LTS” which is not supported any more in AWS, need&hellip; (284 words, Mar 9, 2023)
- [Retrieve ReportId from Maven-Plugin - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/retrieve-reportid-from-maven-plugin/10198/3/index.html): Hello, 
When using the mvn-plugin in this way 
mvn com.sonatype.clm:clm-maven-plugin:index com.sonatype.clm:clm-maven-plugin:evaluate … 
I want to access the generated report in the ongoing build-process. Therefore, I ne&hellip; (160 words, Mar 7, 2023)
- [Jetty HTTPS clear text passwords in jetty-https.xml - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/jetty-https-clear-text-passwords-in-jetty-https-xml/10266/1/index.html): We have a mandate to eliminate or encrypt existing clear text passwords in application configurations for security reasons. Is it possible to eliminate or encrypt the passwords in jetty-https.xml in Nexus OSS, i.e. keySt&hellip; (44 words, Mar 7, 2023)
- [My nexus service stopped running - Sonatype Nexus Repository - Sonatype Community](/content/community/t/my-nexus-service-stopped-running/10197/8/index.html): my nexus service stoppedd running. attaching log. i can’t find what’s changes between morning and evening :frowning: using nexus nexus-2.14.15-01 
using java 8 
jvm 1    | 2023-02-27 05:21:15,977+0200 ERROR [WrapperListe&hellip; (618 words, Mar 6, 2023)
- [Upload packages to Nexus repository using python scripts - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/upload-packages-to-nexus-repository-using-python-scripts/9807/4/index.html): Hello, 
I am trying to upload packages (APT,YUM,PYPI,RAW,DOCKER) to nexus using python. I have only find a way to upload maven packages. I would like to upload some other formats of packages using similar scripts as belo&hellip; (295 words, Mar 6, 2023)
- [Upload packages to Nexus repository using python scripts - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/upload-packages-to-nexus-repository-using-python-scripts/9807/3/index.html): Hello, 
I am trying to upload packages (APT,YUM,PYPI,RAW,DOCKER) to nexus using python. I have only find a way to upload maven packages. I would like to upload some other formats of packages using similar scripts as belo&hellip; (321 words, Mar 2, 2023)
- [Uploading packages to nexus3 using python script - Sonatype Nexus Repository - Sonatype Community](/content/community/t/uploading-packages-to-nexus3-using-python-script/10227/index.html): I am using the following code to upload a sample file to nexus repository. I found this on one of the answers 
import requests
from requests.auth import HTTPBasicAuth

url =&#39;https://localhost:8081/nexus/service/rest/v1/c&hellip; (143 words, Mar 1, 2023)
- [Uploading packages to nexus3 using python script - Sonatype Nexus Repository - Sonatype Community](/content/community/t/uploading-packages-to-nexus3-using-python-script/10227/1/index.html): I am using the following code to upload a sample file to nexus repository. I found this on one of the answers 
import requests
from requests.auth import HTTPBasicAuth

url =&#39;https://localhost:8081/nexus/service/rest/v1/c&hellip; (137 words, Mar 1, 2023)
- [Retrieve ReportId from Maven-Plugin - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/retrieve-reportid-from-maven-plugin/10198/2/index.html): Hello, 
When using the mvn-plugin in this way 
mvn com.sonatype.clm:clm-maven-plugin:index com.sonatype.clm:clm-maven-plugin:evaluate … 
I want to access the generated report in the ongoing build-process. Therefore, I ne&hellip; (160 words, Feb 28, 2023)
- [Creating repos via Rest API works; however some undesired settings are set - Sonatype Nexus Repository - Sonatype Community](/content/community/t/creating-repos-via-rest-api-works-however-some-undesired-settings-are-set/10221/5/index.html): Hi all! 
First post here. I’m a big fan of Nexus. I’m running the sonatype/nexus3:latest docker image with great success. I love the splash screen! I love most things about it to be honest. I just wish there was a dark m&hellip; (553 words, Feb 28, 2023)
- [Hi, We want to implement SSO login in Sonatype Nexus Repository ManagerOSS 3.30.1-01. Can anyone please let know if it is possible to implement in OSS version or SSO is available only for Nexus pro - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/hi-we-want-to-implement-sso-login-in-sonatype-nexus-repository-manageross-3-30-1-01-can-anyone-please-let-know-if-it-is-possible-to-implement-in-oss-version-or-sso-is-available-only-for-nexus-pro/10219/4/index.html): Hi, We want to implement SSO login in Sonatype Nexus Repository ManagerOSS 3.30.1-01. Can anyone please let know if it is possible to implement SSO login in OSS version or SSO is available only for Nexus pro? 
Any docume&hellip; (309 words, Feb 28, 2023)
- [Creating repos via Rest API works; however some undesired settings are set - Sonatype Nexus Repository - Sonatype Community](/content/community/t/creating-repos-via-rest-api-works-however-some-undesired-settings-are-set/10221/index.html): Hi all! 
First post here. I’m a big fan of Nexus. I’m running the sonatype/nexus3:latest docker image with great success. I love the splash screen! I love most things about it to be honest. I just wish there was a dark m&hellip; (590 words, Feb 28, 2023)
- [Creating repos via Rest API works; however some undesired settings are set - Sonatype Nexus Repository - Sonatype Community](/content/community/t/creating-repos-via-rest-api-works-however-some-undesired-settings-are-set/10221/1/index.html): Hi all! 
First post here. I’m a big fan of Nexus. I’m running the sonatype/nexus3:latest docker image with great success. I love the splash screen! I love most things about it to be honest. I just wish there was a dark m&hellip; (554 words, Feb 28, 2023)
- [Hi, We want to implement SSO login in Sonatype Nexus Repository ManagerOSS 3.30.1-01. Can anyone please let know if it is possible to implement in OSS version or SSO is available only for Nexus pro - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/hi-we-want-to-implement-sso-login-in-sonatype-nexus-repository-manageross-3-30-1-01-can-anyone-please-let-know-if-it-is-possible-to-implement-in-oss-version-or-sso-is-available-only-for-nexus-pro/10219/2/index.html): Hi, We want to implement SSO login in Sonatype Nexus Repository ManagerOSS 3.30.1-01. Can anyone please let know if it is possible to implement SSO login in OSS version or SSO is available only for Nexus pro? 
Any docume&hellip; (306 words, Feb 28, 2023)
- [Hi, We want to implement SSO login in Sonatype Nexus Repository ManagerOSS 3.30.1-01. Can anyone please let know if it is possible to implement in OSS version or SSO is available only for Nexus pro - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/hi-we-want-to-implement-sso-login-in-sonatype-nexus-repository-manageross-3-30-1-01-can-anyone-please-let-know-if-it-is-possible-to-implement-in-oss-version-or-sso-is-available-only-for-nexus-pro/10219/index.html): Hi, We want to implement SSO login in Sonatype Nexus Repository ManagerOSS 3.30.1-01. Can anyone please let know if it is possible to implement SSO login in OSS version or SSO is available only for Nexus pro? 
Any docume&hellip; (310 words, Feb 28, 2023)
- [Hi, We want to implement SSO login in Sonatype Nexus Repository ManagerOSS 3.30.1-01. Can anyone please let know if it is possible to implement in OSS version or SSO is available only for Nexus pro - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/hi-we-want-to-implement-sso-login-in-sonatype-nexus-repository-manageross-3-30-1-01-can-anyone-please-let-know-if-it-is-possible-to-implement-in-oss-version-or-sso-is-available-only-for-nexus-pro/10219/1/index.html): Hi, We want to implement SSO login in Sonatype Nexus Repository ManagerOSS 3.30.1-01. Can anyone please let know if it is possible to implement SSO login in OSS version or SSO is available only for Nexus pro? 
Any docume&hellip; (311 words, Feb 28, 2023)
- [Retrieve ReportId from Maven-Plugin - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/retrieve-reportid-from-maven-plugin/10198/index.html): Hello, 
When using the mvn-plugin in this way 
mvn com.sonatype.clm:clm-maven-plugin:index com.sonatype.clm:clm-maven-plugin:evaluate … 
I want to access the generated report in the ongoing build-process. Therefore, I ne&hellip; (160 words, Feb 27, 2023)
- [Retrieve ReportId from Maven-Plugin - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/retrieve-reportid-from-maven-plugin/10198/1/index.html): Hello, 
When using the mvn-plugin in this way 
mvn com.sonatype.clm:clm-maven-plugin:index com.sonatype.clm:clm-maven-plugin:evaluate … 
I want to access the generated report in the ongoing build-process. Therefore, I ne&hellip; (160 words, Feb 27, 2023)
- [My nexus service stopped running - Sonatype Nexus Repository - Sonatype Community](/content/community/t/my-nexus-service-stopped-running/10197/index.html): my nexus service stoppedd running. attaching log. i can’t find what’s changes between morning and evening :frowning: using nexus nexus-2.14.15-01 
using java 8 
jvm 1    | 2023-02-27 05:21:15,977+0200 ERROR [WrapperListe&hellip; (333 words, Feb 26, 2023)
- [My nexus service stopped running - Sonatype Nexus Repository - Sonatype Community](/content/community/t/my-nexus-service-stopped-running/10197/1/index.html): my nexus service stoppedd running. attaching log. i can’t find what’s changes between morning and evening :frowning: using nexus nexus-2.14.15-01 
using java 8 
jvm 1    | 2023-02-27 05:21:15,977+0200 ERROR [WrapperListe&hellip; (341 words, Feb 26, 2023)
- [Nexus License on AWS Secrets manager - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/nexus-license-on-aws-secrets-manager/10168/2/index.html): Hey, 
I am trying to setup Nexus3 Pro on EKS following https://github.com/sonatype/nxrm3-helm-repository/tree/main/nxrm-aws-resiliency. 
have a couple of questions here: 
I have Nexus Firewall License, is the same licens&hellip; (87 words, Feb 22, 2023)
- [Error trying to get ubuntu via Nexus Docker Proxy registry - Sonatype Nexus Repository - Sonatype Community](/content/community/t/error-trying-to-get-ubuntu-via-nexus-docker-proxy-registry/10180/index.html): Set ubuntu:18.04 to FROM of Dockerfile. 
When executing the docker build pipeline, it ends with an error at the FROM part. 
■ Error details 
Error response from daemon: manifest for XXXXX.wwws.nri.co.jp/ubuntu:18.04 not &hellip; (101 words, Feb 22, 2023)
- [Error trying to get ubuntu via Nexus Docker Proxy registry - Sonatype Nexus Repository - Sonatype Community](/content/community/t/error-trying-to-get-ubuntu-via-nexus-docker-proxy-registry/10180/1/index.html): Set ubuntu:18.04 to FROM of Dockerfile. 
When executing the docker build pipeline, it ends with an error at the FROM part. 
■ Error details 
Error response from daemon: manifest for XXXXX.wwws.nri.co.jp/ubuntu:18.04 not &hellip; (101 words, Feb 22, 2023)
- [Nexus License on AWS Secrets manager - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/nexus-license-on-aws-secrets-manager/10168/index.html): Hey, 
I am trying to setup Nexus3 Pro on EKS following https://github.com/sonatype/nxrm3-helm-repository/tree/main/nxrm-aws-resiliency. 
have a couple of questions here: 
I have Nexus Firewall License, is the same licens&hellip; (86 words, Feb 20, 2023)
- [Nexus License on AWS Secrets manager - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/nexus-license-on-aws-secrets-manager/10168/1/index.html): Hey, 
I am trying to setup Nexus3 Pro on EKS following https://github.com/sonatype/nxrm3-helm-repository/tree/main/nxrm-aws-resiliency. 
have a couple of questions here: 
I have Nexus Firewall License, is the same licens&hellip; (86 words, Feb 20, 2023)
- [Page in file browse_node_2.pcl with index 22604 was placed in wrong free list, this error will be fixed automatically - Sonatype Nexus Repository - Sonatype Community](/content/community/t/page-in-file-browse-node-2-pcl-with-index-22604-was-placed-in-wrong-free-list-this-error-will-be-fixed-automatically/10162/index.html): OSS Nexus version : OSS 3.37.3-02 
Our log file nexus.log i being flooded with orientDB warnings about browse_node_2.pcl like this: 
com.orientechnologies.orient.core.storage.impl.local.paginated.OPaginatedCluster - $ANS&hellip; (686 words, Feb 19, 2023)
- [Join us for February Office Hours - Tuesday, February 21st at 12pm EST - Community Announcements - Sonatype Community](/content/community/t/join-us-for-february-office-hours-tuesday-february-21st-at-12pm-est/10149/2/index.html): Join us Tuesday, February 21st at 12 p.m. EST (9 a.m. PST | 5 p.m. GMT) for our monthly, customer-exclusive Office Hours. This month, we’ll be discussing the following topics: 


Nexus Firewall: Malicious Package Prote&hellip; (128 words, Feb 16, 2023)
- [Join us for February Office Hours - Tuesday, February 21st at 12pm EST - Community Announcements - Sonatype Community](/content/community/t/join-us-for-february-office-hours-tuesday-february-21st-at-12pm-est/10149/index.html): Join us Tuesday, February 21st at 12 p.m. EST (9 a.m. PST | 5 p.m. GMT) for our monthly, customer-exclusive Office Hours. This month, we’ll be discussing the following topics: 


Nexus Firewall: Malicious Package Prote&hellip; (135 words, Feb 16, 2023)
- [Join us for February Office Hours - Tuesday, February 21st at 12pm EST - Community Announcements - Sonatype Community](/content/community/t/join-us-for-february-office-hours-tuesday-february-21st-at-12pm-est/10149/1/index.html): Join us Tuesday, February 21st at 12 p.m. EST (9 a.m. PST | 5 p.m. GMT) for our monthly, customer-exclusive Office Hours. This month, we’ll be discussing the following topics: 


Nexus Firewall: Malicious Package Prote&hellip; (204 words, Feb 16, 2023)
- [Response: [500] 'ERROR: (ID xxx) Failed to execute phase [fetch], [reduce] ; shardFailures - Sonatype Nexus Repository - Sonatype Community](/content/community/t/response-500-error-id-xxx-failed-to-execute-phase-fetch-reduce-shardfailures/10114/index.html): Hi All, 
We are facing the below error while fetching artifact from Nexus, response 500. 
Error: 
org.sonatype.nexus.siesta.internal.UnexpectedExceptionMapper - (ID xxx) Response: [500] &#39;ERROR: (ID xxx) Failed to execute&hellip; (152 words, Feb 10, 2023)
- [Response: [500] 'ERROR: (ID xxx) Failed to execute phase [fetch], [reduce] ; shardFailures - Sonatype Nexus Repository - Sonatype Community](/content/community/t/response-500-error-id-xxx-failed-to-execute-phase-fetch-reduce-shardfailures/10114/1/index.html): Hi All, 
We are facing the below error while fetching artifact from Nexus, response 500. 
Error: 
org.sonatype.nexus.siesta.internal.UnexpectedExceptionMapper - (ID xxx) Response: [500] &#39;ERROR: (ID xxx) Failed to execute&hellip; (150 words, Feb 10, 2023)
- [What is the difference between the '{sonartype_host}/rest/integration/applications/{APPID}/evaluations/ci/stages/{STAGE_ID}?scanType=SONATYPE' interface and the implementation of 'Evaluate a file' in the sonartype lifecycle page? - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/what-is-the-difference-between-the-sonartype-host-rest-integration-applications-appid-evaluations-ci-stages-stage-id-scantype-sonatype-interface-and-the-implementation-of-evaluate-a-file-in-the-sonartype-lifecycle-page/10099/index.html): Hi nexus team, 
Recently, I found that when calling the ‘{sonartype_host}/rest/integration/applications/{APPID}/evaluations/ci/stages/{STAGE_ID}?scanType=SONATYPE’ API to evaluate a file vulnerability, the returned repor&hellip; (185 words, Feb 9, 2023)
- [What is the difference between the '{sonartype_host}/rest/integration/applications/{APPID}/evaluations/ci/stages/{STAGE_ID}?scanType=SONATYPE' interface and the implementation of 'Evaluate a file' in the sonartype lifecycle page? - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/what-is-the-difference-between-the-sonartype-host-rest-integration-applications-appid-evaluations-ci-stages-stage-id-scantype-sonatype-interface-and-the-implementation-of-evaluate-a-file-in-the-sonartype-lifecycle-page/10099/1/index.html): Hi nexus team, 
Recently, I found that when calling the ‘{sonartype_host}/rest/integration/applications/{APPID}/evaluations/ci/stages/{STAGE_ID}?scanType=SONATYPE’ API to evaluate a file vulnerability, the returned repor&hellip; (89 words, Feb 9, 2023)
- [Nexus -> SIEM integration - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/nexus-siem-integration/10093/1/index.html): Hello. 
I am learning to use Nexus, and I’d like to pass its logs to ELK. In settings I didn’t find SIEM connectors. Are there any? Or I need to pass logs to stdout (for example) and then process them with my own connect&hellip; (155 words, Feb 9, 2023)
- [Database Error Occurred - Sonatype Nexus Repository - Sonatype Community](/content/community/t/database-error-occurred/10079/index.html): Hi Everyone! 
I am on OSS 3.21.2-03 and when I try to view a specific folder through the nexus UI portal I receive an error message that states “A database error occurred”. 
This folder is one of the many folders that ar&hellip; (211 words, Feb 7, 2023)
- [RebuildMaven2MetadataTask fails - Sonatype Nexus Repository - Sonatype Community](/content/community/t/rebuildmaven2metadatatask-fails/10072/3/index.html): I have the problem that the Repair task fails everytime I try to run it, but the metadata is visible on the Nexus UI: 
2023-02-06 22:14:52,218+0100 INFO  [quartz-3-thread-18]  *SYSTEM org.sonatype.nexus.repository.maven.&hellip; (249 words, Feb 7, 2023)
- [API to get all Waivers (Application & Repository) - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/api-to-get-all-waivers-application-repository/9976/7/index.html): Hi, 
i have seen in the new Version the possibility, to show all waiver in the new dashboard and to export these waivers as CSV. 
Our Security-Team want to load this data over an API with a nightly batch. 
Is there a API&hellip; (445 words, Feb 7, 2023)
- [RebuildMaven2MetadataTask fails - Sonatype Nexus Repository - Sonatype Community](/content/community/t/rebuildmaven2metadatatask-fails/10072/2/index.html): I have the problem that the Repair task fails everytime I try to run it, but the metadata is visible on the Nexus UI: 
2023-02-06 22:14:52,218+0100 INFO  [quartz-3-thread-18]  *SYSTEM org.sonatype.nexus.repository.maven.&hellip; (370 words, Feb 7, 2023)
- [RebuildMaven2MetadataTask fails - Sonatype Nexus Repository - Sonatype Community](/content/community/t/rebuildmaven2metadatatask-fails/10072/index.html): I have the problem that the Repair task fails everytime I try to run it, but the metadata is visible on the Nexus UI: 
2023-02-06 22:14:52,218+0100 INFO  [quartz-3-thread-18]  *SYSTEM org.sonatype.nexus.repository.maven.&hellip; (257 words, Feb 6, 2023)
- [RebuildMaven2MetadataTask fails - Sonatype Nexus Repository - Sonatype Community](/content/community/t/rebuildmaven2metadatatask-fails/10072/1/index.html): I have the problem that the Repair task fails everytime I try to run it, but the metadata is visible on the Nexus UI: 
2023-02-06 22:14:52,218+0100 INFO  [quartz-3-thread-18]  *SYSTEM org.sonatype.nexus.repository.maven.&hellip; (242 words, Feb 6, 2023)
- [Nexus IQ <-> Gitlab-Token problems - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/nexus-iq-gitlab-token-problems/10065/index.html): Hello, 
at first i want to say thanks for the last Bugfix in your 153 Release. Now it is possible for us to connect Nexus IQ and Gitlab. 
I try to set up the configuration and created a token with API and WRITE_REPOISTOR&hellip; (308 words, Feb 6, 2023)
- [Nexus IQ <-> Gitlab-Token problems - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/nexus-iq-gitlab-token-problems/10065/1/index.html): Hello, 
at first i want to say thanks for the last Bugfix in your 153 Release. Now it is possible for us to connect Nexus IQ and Gitlab. 
I try to set up the configuration and created a token with API and WRITE_REPOISTOR&hellip; (308 words, Feb 6, 2023)
- [Task "Compact Blob Store" does not reclaim disk space - Sonatype Nexus Repository - Sonatype Community](/content/community/t/task-compact-blob-store-does-not-reclaim-disk-space/10058/index.html): We have a large maven-snapshots repository with over 3 TB of reclaimable bytes, but nothing is deleted from disk when we run the “Compact blob store” task. 
Output from the nx-blob-repo-space-report script (https://suppo&hellip; (567 words, Feb 3, 2023)
- [Task "Compact Blob Store" does not reclaim disk space - Sonatype Nexus Repository - Sonatype Community](/content/community/t/task-compact-blob-store-does-not-reclaim-disk-space/10058/1/index.html): We have a large maven-snapshots repository with over 3 TB of reclaimable bytes, but nothing is deleted from disk when we run the “Compact blob store” task. 
Output from the nx-blob-repo-space-report script (https://suppo&hellip; (545 words, Feb 3, 2023)
- [Error while restoring asset - Reconcile component database from blob store - Sonatype Nexus Repository - Sonatype Community](/content/community/t/error-while-restoring-asset-reconcile-component-database-from-blob-store/10049/3/index.html): I get the following error message, when I try to run the task: 
Repair - Reconcile component database from blob store: 
2023-02-02 11:38:48,948+0100 ERROR [quartz-3-thread-18] *SYSTEM org.sonatype.nexus.blobstore.restore&hellip; (238 words, Feb 3, 2023)
- [Delete unused manifests and images task - Is it safe to run in 3.20.1 version - Sonatype Nexus Repository - Sonatype Community](/content/community/t/delete-unused-manifests-and-images-task-is-it-safe-to-run-in-3-20-1-version/10047/2/index.html): We have deleted most of the project related tags and ran the compact  blob task as well. It released only small amount of memory, But still the blob storage occupied with huge storage. 1.9T. Is it safe to run Delete unus&hellip; (174 words, Feb 2, 2023)
- [Error while restoring asset - Reconcile component database from blob store - Sonatype Nexus Repository - Sonatype Community](/content/community/t/error-while-restoring-asset-reconcile-component-database-from-blob-store/10049/index.html): I get the following error message, when I try to run the task: 
Repair - Reconcile component database from blob store: 
2023-02-02 11:38:48,948+0100 ERROR [quartz-3-thread-18] *SYSTEM org.sonatype.nexus.blobstore.restore&hellip; (239 words, Feb 2, 2023)
- [Error while restoring asset - Reconcile component database from blob store - Sonatype Nexus Repository - Sonatype Community](/content/community/t/error-while-restoring-asset-reconcile-component-database-from-blob-store/10049/1/index.html): I get the following error message, when I try to run the task: 
Repair - Reconcile component database from blob store: 
2023-02-02 11:38:48,948+0100 ERROR [quartz-3-thread-18] *SYSTEM org.sonatype.nexus.blobstore.restore&hellip; (145 words, Feb 2, 2023)
- [Delete unused manifests and images task - Is it safe to run in 3.20.1 version - Sonatype Nexus Repository - Sonatype Community](/content/community/t/delete-unused-manifests-and-images-task-is-it-safe-to-run-in-3-20-1-version/10047/index.html): We have deleted most of the project related tags and ran the compact  blob task as well. It released only small amount of memory, But still the blob storage occupied with huge storage. 1.9T. Is it safe to run Delete unus&hellip; (168 words, Feb 2, 2023)
- [Delete unused manifests and images task - Is it safe to run in 3.20.1 version - Sonatype Nexus Repository - Sonatype Community](/content/community/t/delete-unused-manifests-and-images-task-is-it-safe-to-run-in-3-20-1-version/10047/1/index.html): We have deleted most of the project related tags and ran the compact  blob task as well. It released only small amount of memory, But still the blob storage occupied with huge storage. 1.9T. Is it safe to run Delete unus&hellip; (168 words, Feb 2, 2023)
- [After Updating to 3.45.0, downloading filenames default to the file PATH - Sonatype Nexus Repository - Sonatype Community](/content/community/t/after-updating-to-3-45-0-downloading-filenames-default-to-the-file-path/10042/2/index.html): In our previous version, 3.38.1, it was defaulting to the file name only. 
folder1\folder2\myfile.tar.gz - this was download as myfile.tar.gz 
In our current version, 3.45.0, it is now defaulting to the entire path. 
fol&hellip; (189 words, Feb 1, 2023)
- [After Updating to 3.45.0, downloading filenames default to the file PATH - Sonatype Nexus Repository - Sonatype Community](/content/community/t/after-updating-to-3-45-0-downloading-filenames-default-to-the-file-path/10042/index.html): In our previous version, 3.38.1, it was defaulting to the file name only. 
folder1\folder2\myfile.tar.gz - this was download as myfile.tar.gz 
In our current version, 3.45.0, it is now defaulting to the entire path. 
fol&hellip; (113 words, Feb 1, 2023)
- [After Updating to 3.45.0, downloading filenames default to the file PATH - Sonatype Nexus Repository - Sonatype Community](/content/community/t/after-updating-to-3-45-0-downloading-filenames-default-to-the-file-path/10042/1/index.html): In our previous version, 3.38.1, it was defaulting to the file name only. 
folder1\folder2\myfile.tar.gz - this was download as myfile.tar.gz 
In our current version, 3.45.0, it is now defaulting to the entire path. 
fol&hellip; (210 words, Feb 1, 2023)
- [Rename the file in a conan hosted nexus repository - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/rename-the-file-in-a-conan-hosted-nexus-repository/10035/index.html): I have a file in nexus conan hosted repository (conan.tgz) 
The path of file like, demoo/hello/೦.2-kiran/packages/abcefjjsjejbvvhjb/conan.tgz 
So I have downloaded the conan.tgz file from the conan hosted repository. 
I &hellip; (71 words, Feb 1, 2023)
- [Rename the file in a conan hosted nexus repository - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/rename-the-file-in-a-conan-hosted-nexus-repository/10035/1/index.html): I have a file in nexus conan hosted repository (conan.tgz) 
The path of file like, demoo/hello/೦.2-kiran/packages/abcefjjsjejbvvhjb/conan.tgz 
So I have downloaded the conan.tgz file from the conan hosted repository. 
I &hellip; (83 words, Feb 1, 2023)
- [A New Look for my.sonatype.com - Community Announcements / News - Sonatype Community](/content/community/t/a-new-look-for-my-sonatype-com/10006/3/index.html): If you are a regular visitor of our customer portal, my.sonatype.com, you’ll notice we’ve given it a refresh. Everything you expect from the portal is still there, but you’ll find a better user experience with simplified&hellip; (329 words, Jan 31, 2023)
- [A New Look for my.sonatype.com - Community Announcements / News - Sonatype Community](/content/community/t/a-new-look-for-my-sonatype-com/10006/1/index.html): If you are a regular visitor of our customer portal, my.sonatype.com, you’ll notice we’ve given it a refresh. Everything you expect from the portal is still there, but you’ll find a better user experience with simplified&hellip; (249 words, Jan 24, 2023)
- [Nexus IQ yum analysis not working - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/nexus-iq-yum-analysis-not-working/9996/2/index.html): Hello 
I followed the Nexus IQ documentation to scan RPM components: 
https://help.sonatype.com/iqserver/analysis/yum-package-analysis 
When my yum-packages.txt contains: 

git.x86_64                                    2&hellip; (179 words, Jan 24, 2023)
- [Can't Log In With New Users - Sonatype Nexus Repository - Sonatype Community](/content/community/t/cant-log-in-with-new-users/343/7/index.html): I’ve created a new user and have granted them nx-admin. Initially I was having a more refined set of roles, but was having issues logging in. I thought I’d try seeing if I could log in with the new user by granting them &hellip; (392 words, Jan 23, 2023)
- [Is there a way to set the password complexity policy for Nexus IQ Server? - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/is-there-a-way-to-set-the-password-complexity-policy-for-nexus-iq-server/9942/2/index.html): I have set up Nexus IQ Server with Docker-compose, and I would like to enforce a password complexity policy so that users will not be able to set weak passwords (e.g. enforcing a minimum password length policy). I have m&hellip; (174 words, Jan 23, 2023)
- [Nexus IQ yum analysis not working - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/nexus-iq-yum-analysis-not-working/9996/index.html): Hello 
I followed the Nexus IQ documentation to scan RPM components: 
https://help.sonatype.com/iqserver/analysis/yum-package-analysis 
When my yum-packages.txt contains: 

git.x86_64                                    2&hellip; (180 words, Jan 23, 2023)
- [Nexus IQ yum analysis not working - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/nexus-iq-yum-analysis-not-working/9996/1/index.html): Hello 
I followed the Nexus IQ documentation to scan RPM components: 
https://help.sonatype.com/iqserver/analysis/yum-package-analysis 
When my yum-packages.txt contains: 

git.x86_64                                    2&hellip; (179 words, Jan 23, 2023)
- [Files not deleted after blobstore remove - Sonatype Nexus Repository - Sonatype Community](/content/community/t/files-not-deleted-after-blobstore-remove/9990/index.html): Hi! 
We had a “file” blobstore and a raw repository attached to it. 
Later it was decided that we don’t need it anymore and the repository then the blobstore have been deleted from the UI. 
However the files are still th&hellip; (207 words, Jan 23, 2023)
- [Files not deleted after blobstore remove - Sonatype Nexus Repository - Sonatype Community](/content/community/t/files-not-deleted-after-blobstore-remove/9990/1/index.html): Hi! 
We had a “file” blobstore and a raw repository attached to it. 
Later it was decided that we don’t need it anymore and the repository then the blobstore have been deleted from the UI. 
However the files are still th&hellip; (216 words, Jan 23, 2023)
- [API to get all Waivers (Application & Repository) - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/api-to-get-all-waivers-application-repository/9976/index.html): Hi, 
i have seen in the new Version the possibility, to show all waiver in the new dashboard and to export these waivers as CSV. 
Our Security-Team want to load this data over an API with a nightly batch. 
Is there a API&hellip; (446 words, Jan 20, 2023)
- [API to get all Waivers (Application & Repository) - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/api-to-get-all-waivers-application-repository/9976/1/index.html): Hi, 
i have seen in the new Version the possibility, to show all waiver in the new dashboard and to export these waivers as CSV. 
Our Security-Team want to load this data over an API with a nightly batch. 
Is there a API&hellip; (445 words, Jan 20, 2023)
- [Join us in 30 minutes for January Office Hours - 10am EST - Community Announcements - Sonatype Community](/content/community/t/join-us-in-30-minutes-for-january-office-hours-10am-est/9968/2/index.html): Join us in 30 minutes at 10 a.m. EST (7 a.m. PST | 3 p.m. GMT) for our monthly, customer-exclusive Office Hours. This month, we’ll be discussing the following topics: 

Nexus Lifecycle Year in Review
Nexus Repository M&hellip; (192 words, Jan 19, 2023)
- [Join us in 30 minutes for January Office Hours - 10am EST - Community Announcements - Sonatype Community](/content/community/t/join-us-in-30-minutes-for-january-office-hours-10am-est/9968/index.html): Join us in 30 minutes at 10 a.m. EST (7 a.m. PST | 3 p.m. GMT) for our monthly, customer-exclusive Office Hours. This month, we’ll be discussing the following topics: 

Nexus Lifecycle Year in Review
Nexus Repository M&hellip; (128 words, Jan 19, 2023)
- [TFS Nexus IQ for Azure DevOps task scan targets question - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/tfs-nexus-iq-for-azure-devops-task-scan-targets-question/9963/index.html): The TFS build Nexus IQ for Azure DevOps task works well for solutions that are downloading NuGet packages to the local source.  It’s able to scan for packages. 
 
For more modern solutions that use project.nuget.cache, d&hellip; (152 words, Jan 18, 2023)
- [TFS Nexus IQ for Azure DevOps task scan targets question - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/tfs-nexus-iq-for-azure-devops-task-scan-targets-question/9963/1/index.html): The TFS build Nexus IQ for Azure DevOps task works well for solutions that are downloading NuGet packages to the local source.  It’s able to scan for packages. 
 
For more modern solutions that use project.nuget.cache, d&hellip; (66 words, Jan 18, 2023)
- [TOMORROW: January Office Hours at 10am EST - Community Announcements - Sonatype Community](/content/community/t/tomorrow-january-office-hours-at-10am-est/9961/index.html): Join us tomorrow, Thursday, January 19th at 10 a.m. EST (7 a.m. PST | 3 p.m. GMT), for our monthly, customer-exclusive Office Hours. This month, we’ll be discussing the following topics: 

Nexus Lifecycle Year in Revie&hellip; (102 words, Jan 18, 2023)
- [Nexus IQ nupkg scan capabilities - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/nexus-iq-nupkg-scan-capabilities/9953/index.html): Hello 
I read this documentation about Nuget package scan powered by Nexus IQ : 

Lifecycle ABF scans identify both NuGet packages (.nupkg) and the following Pecoff extensions: .acm, .ax, .cpl, .dll, .drv, .efi, .exe, .m&hellip; (281 words, Jan 17, 2023)
- [Nexus IQ nupkg scan capabilities - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/nexus-iq-nupkg-scan-capabilities/9953/1/index.html): Hello 
I read this documentation about Nuget package scan powered by Nexus IQ : 

Lifecycle ABF scans identify both NuGet packages (.nupkg) and the following Pecoff extensions: .acm, .ax, .cpl, .dll, .drv, .efi, .exe, .m&hellip; (267 words, Jan 17, 2023)
- [Is there a way to set the password complexity policy for Nexus IQ Server? - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/is-there-a-way-to-set-the-password-complexity-policy-for-nexus-iq-server/9942/1/index.html): I have set up Nexus IQ Server with Docker-compose, and I would like to enforce a password complexity policy so that users will not be able to set weak passwords (e.g. enforcing a minimum password length policy). I have m&hellip; (178 words, Jan 16, 2023)
- [Callflow in IQ CLI - Remediation Prioritization - Sonatype Labs - Sonatype Community](/content/community/t/callflow-in-iq-cli-remediation-prioritization/9915/2/index.html): Description
We’ve heard your feedback regarding call flow analysis (CFA), particularly how developers want to prioritize vulnerability remediation and the role that call flow analysis plays in that process. We’re excited&hellip; (316 words, Jan 13, 2023)
- [Nexus marks version with vulnerability patch as vulnerable - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/nexus-marks-version-with-vulnerability-patch-as-vulnerable/9910/2/index.html): According to the package owner, System.Data.SqlClient 4.8.5 is the fix version for the vulnerability issue CVE-2022-41064 but Nexus still reports it. If the  package is indeed safe then shouldn’t Nexus update this issue? &hellip; (148 words, Jan 12, 2023)
- [Callflow in IQ CLI - Remediation Prioritization - Sonatype Labs - Sonatype Community](/content/community/t/callflow-in-iq-cli-remediation-prioritization/9915/index.html): Description
We’ve heard your feedback regarding call flow analysis (CFA), particularly how developers want to prioritize vulnerability remediation and the role that call flow analysis plays in that process. We’re excited&hellip; (316 words, Jan 12, 2023)
- [Callflow in IQ CLI - Remediation Prioritization - Sonatype Labs - Sonatype Community](/content/community/t/callflow-in-iq-cli-remediation-prioritization/9915/1/index.html): Description
We’ve heard your feedback regarding call flow analysis (CFA), particularly how developers want to prioritize vulnerability remediation and the role that call flow analysis plays in that process. We’re excited&hellip; (325 words, Jan 12, 2023)
- [ADP integration in Lifecycle and Firewall, what does it mean? - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/adp-integration-in-lifecycle-and-firewall-what-does-it-mean/9914/2/index.html): Hi, i read that ADP is not offered separately anymore moving forward but that it’s integrated in Lifecycle and Firewall now. What does that mean and where can i find more information? (110 words, Jan 12, 2023)
- [ADP integration in Lifecycle and Firewall, what does it mean? - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/adp-integration-in-lifecycle-and-firewall-what-does-it-mean/9914/index.html): Hi, i read that ADP is not offered separately anymore moving forward but that it’s integrated in Lifecycle and Firewall now. What does that mean and where can i find more information? (112 words, Jan 12, 2023)
- [ADP integration in Lifecycle and Firewall, what does it mean? - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/adp-integration-in-lifecycle-and-firewall-what-does-it-mean/9914/1/index.html): Hi, i read that ADP is not offered separately anymore moving forward but that it’s integrated in Lifecycle and Firewall now. What does that mean and where can i find more information? (173 words, Jan 12, 2023)
- [Join us for January Office Hours - Thursday, January 19th at 10am EST - Community Announcements - Sonatype Community](/content/community/t/join-us-for-january-office-hours-thursday-january-19th-at-10am-est/9912/2/index.html): Join us Thursday, January 19th at 10 a.m. EST (7 a.m. PST | 3 p.m. GMT) for our monthly, customer-exclusive Office Hours. This month, we’ll be discussing the following topics: 


Nexus Lifecycle Year in Review 


Nexus&hellip; (112 words, Jan 12, 2023)
- [Join us for January Office Hours - Thursday, January 19th at 10am EST - Community Announcements - Sonatype Community](/content/community/t/join-us-for-january-office-hours-thursday-january-19th-at-10am-est/9912/index.html): Join us Thursday, January 19th at 10 a.m. EST (7 a.m. PST | 3 p.m. GMT) for our monthly, customer-exclusive Office Hours. This month, we’ll be discussing the following topics: 


Nexus Lifecycle Year in Review 


Nexus&hellip; (112 words, Jan 12, 2023)
- [Join us for January Office Hours - Thursday, January 19th at 10am EST - Community Announcements - Sonatype Community](/content/community/t/join-us-for-january-office-hours-thursday-january-19th-at-10am-est/9912/1/index.html): Join us Thursday, January 19th at 10 a.m. EST (7 a.m. PST | 3 p.m. GMT) for our monthly, customer-exclusive Office Hours. This month, we’ll be discussing the following topics: 


Nexus Lifecycle Year in Review 


Nexus&hellip; (203 words, Jan 12, 2023)
- [Upload packages to Nexus repository using python scripts - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/upload-packages-to-nexus-repository-using-python-scripts/9807/2/index.html): Hello, 
I am trying to upload packages (APT,YUM,PYPI,RAW,DOCKER) to nexus using python. I have only find a way to upload maven packages. I would like to upload some other formats of packages using similar scripts as belo&hellip; (315 words, Jan 12, 2023)
- [Nexus marks version with vulnerability patch as vulnerable - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/nexus-marks-version-with-vulnerability-patch-as-vulnerable/9910/index.html): According to the package owner, System.Data.SqlClient 4.8.5 is the fix version for the vulnerability issue CVE-2022-41064 but Nexus still reports it. If the  package is indeed safe then shouldn’t Nexus update this issue? &hellip; (144 words, Jan 12, 2023)
- [Nexus marks version with vulnerability patch as vulnerable - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/nexus-marks-version-with-vulnerability-patch-as-vulnerable/9910/1/index.html): According to the package owner, System.Data.SqlClient 4.8.5 is the fix version for the vulnerability issue CVE-2022-41064 but Nexus still reports it. If the  package is indeed safe then shouldn’t Nexus update this issue? &hellip; (218 words, Jan 12, 2023)
- [Filter by language/package type - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/filter-by-language-package-type/9903/2/index.html): HI All– 
I’m in a situation where I’d like to break down my vulnerabilities list by language/package manager (i.e. “Show me the PyPI criticals”). Doesn’t seem to be possible through the console UI. Is this possible via A&hellip; (209 words, Jan 11, 2023)
- [Unable to authenticate to Nexus OSS 2 registry - Sonatype Nexus Repository - Sonatype Community](/content/community/t/unable-to-authenticate-to-nexus-oss-2-registry/9905/index.html): Hi everyone, 
I’m facing this error: &quot;Unable to authenticate, need: BASIC realm=“Sonatype Nexus Repository Manager”. 

Nexus version: 2.15.0
npm: 8.19.2 
My user has all necessary rights I need to publish my package on t&hellip; (125 words, Jan 11, 2023)
- [Unable to authenticate to Nexus OSS 2 registry - Sonatype Nexus Repository - Sonatype Community](/content/community/t/unable-to-authenticate-to-nexus-oss-2-registry/9905/1/index.html): Hi everyone, 
I’m facing this error: &quot;Unable to authenticate, need: BASIC realm=“Sonatype Nexus Repository Manager”. 

Nexus version: 2.15.0
npm: 8.19.2 
My user has all necessary rights I need to publish my package on t&hellip; (130 words, Jan 11, 2023)
- [Update Your IQ Server License Threat Groups - Sonatype Labs - Sonatype Community](/content/community/t/update-your-iq-server-license-threat-groups/3094/26/index.html): The license threat group updater will apply the latest Sonatype provided license classification to your running IQ server’s license threat groups. This will alleviate any “License Threat Group not Assigned” policy violat&hellip; (613 words, Jan 11, 2023)
- [Filter by language/package type - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/filter-by-language-package-type/9903/index.html): HI All– 
I’m in a situation where I’d like to break down my vulnerabilities list by language/package manager (i.e. “Show me the PyPI criticals”). Doesn’t seem to be possible through the console UI. Is this possible via A&hellip; (183 words, Jan 11, 2023)
- [Filter by language/package type - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/filter-by-language-package-type/9903/1/index.html): HI All– 
I’m in a situation where I’d like to break down my vulnerabilities list by language/package manager (i.e. “Show me the PyPI criticals”). Doesn’t seem to be possible through the console UI. Is this possible via A&hellip; (192 words, Jan 11, 2023)
- [Getting 400 response code for api /security/roles for v1 rest whil creating roles - Sonatype Nexus Repository - Sonatype Community](/content/community/t/getting-400-response-code-for-api-security-roles-for-v1-rest-whil-creating-roles/9901/index.html): Getting 400 response code for api /security/roles for v1 rest whil creating roles with below error on nexus version 3.40, 
&#39;An error occurred saving data. Privilege ‘All M2 Repositories - (create)’ contained in role &#39;XXX&hellip; (146 words, Jan 11, 2023)
- [Getting 400 response code for api /security/roles for v1 rest whil creating roles - Sonatype Nexus Repository - Sonatype Community](/content/community/t/getting-400-response-code-for-api-security-roles-for-v1-rest-whil-creating-roles/9901/1/index.html): Getting 400 response code for api /security/roles for v1 rest whil creating roles with below error on nexus version 3.40, 
&#39;An error occurred saving data. Privilege ‘All M2 Repositories - (create)’ contained in role &#39;XXX&hellip; (134 words, Jan 11, 2023)
- [Apt repositories (hosted & proxy) snapshots creating method does not work - Sonatype Nexus Repository - Sonatype Community](/content/community/t/apt-repositories-hosted-proxy-snapshots-creating-method-does-not-work/6198/8/index.html): Sonatype Nexus Repository Manager OSS: 3.29.2-02 
According to the manual “Taking a Snapshot of a repository metadata” - the method returns Error 500. 
$ curl -vvvv -u &#39;changedadmin:changedpassword&#39; -X MKCOL  https://nex&hellip; (574 words, Jan 11, 2023)
- [Receiving error when trying to use source code scan API - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/receiving-error-when-trying-to-use-source-code-scan-api/9825/2/index.html): Hello, my org just installed nexusiq, so we’re really still getting. Some of our apps haven’t been built since we installed nexusiq, so only a handful currently have reports. 
I was trying to use this info to perform a s&hellip; (382 words, Jan 9, 2023)
- [Ways to keep specific artifact(s) forever? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/ways-to-keep-specific-artifact-s-forever/9879/3/index.html): Hey guys, 
I was wondering if there is a way we can achieve something like “Keep build forever” in Nexus OSS. Similar functionality exists in Jenkins which keeps the cleanup policies simpler. 
I am imaging a cleanup poli&hellip; (165 words, Jan 9, 2023)
- [Ways to keep specific artifact(s) forever? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/ways-to-keep-specific-artifact-s-forever/9879/index.html): Hey guys, 
I was wondering if there is a way we can achieve something like “Keep build forever” in Nexus OSS. Similar functionality exists in Jenkins which keeps the cleanup policies simpler. 
I am imaging a cleanup poli&hellip; (166 words, Jan 7, 2023)
- [Ways to keep specific artifact(s) forever? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/ways-to-keep-specific-artifact-s-forever/9879/1/index.html): Hey guys, 
I was wondering if there is a way we can achieve something like “Keep build forever” in Nexus OSS. Similar functionality exists in Jenkins which keeps the cleanup policies simpler. 
I am imaging a cleanup poli&hellip; (165 words, Jan 7, 2023)
- [Best Practice - Waivers for Environment Specific Vulnerabilities - Sonatype Lifecycle & Repository Firewall / Best Practices - Sonatype Community](/content/community/t/best-practice-waivers-for-environment-specific-vulnerabilities/958/2/index.html): One of the most common types of questions that we get asked is “Every version is vulnerable. What should I do?” 
In many cases this is cited as a reason for delaying the upgrade of a project dependency. Even when this si&hellip; (659 words, Jan 5, 2023)
- [User Feedback: PR Reviews - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/user-feedback-pr-reviews/3811/7/index.html): PR Reviews 
PR reviews create a PR comment with summary of violations introduced in a specific PR. Learn more at our blog. 
:white_check_mark: REPLY to give FEEDBACK! :white_check_mark: (363 words, Jan 5, 2023)
- [Invalidate cache of Nexus group repository via Groovy - Sonatype Nexus Repository - Sonatype Community](/content/community/t/invalidate-cache-of-nexus-group-repository-via-groovy/9865/index.html): Hello Community, 
Is there any preferred method to invalidate cache via a Groovy script which can be executed by Nexus task executor? 
Following the groovy scripting guide provided at (GitHub - sonatype-nexus-community/n&hellip; (288 words, Jan 5, 2023)
- [Invalidate cache of Nexus group repository via Groovy - Sonatype Nexus Repository - Sonatype Community](/content/community/t/invalidate-cache-of-nexus-group-repository-via-groovy/9865/1/index.html): Hello Community, 
Is there any preferred method to invalidate cache via a Groovy script which can be executed by Nexus task executor? 
Following the groovy scripting guide provided at (GitHub - sonatype-nexus-community/n&hellip; (288 words, Jan 5, 2023)
- [How to proxy Google Distroless docker registry - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/how-to-proxy-google-distroless-docker-registry/9849/2/index.html): I want to proxy docker distroless docker registry in nexus. 
The problem is when I try to pull gcr.io/distroless/java11-debian11 it redirects to another URL (https://console.cloud.google.com/m/gcr/images/redirect?project&hellip; (107 words, Jan 4, 2023)
- [What's the way in integrate a new format into Sonatype community github - Sonatype Nexus Repository - Sonatype Community](/content/community/t/whats-the-way-in-integrate-a-new-format-into-sonatype-community-github/9857/2/index.html): Hi everybody, 
For my company, we are using sonatype Nexus for multiples formats, but one was missing: Ansible Galaxy. 
Ansible is a great tool to automate tasks in general for a server, for everything 
Ansible galaxy ar&hellip; (670 words, Jan 4, 2023)
- [What's the way in integrate a new format into Sonatype community github - Sonatype Nexus Repository - Sonatype Community](/content/community/t/whats-the-way-in-integrate-a-new-format-into-sonatype-community-github/9857/index.html): Hi everybody, 
For my company, we are using sonatype Nexus for multiples formats, but one was missing: Ansible Galaxy. 
Ansible is a great tool to automate tasks in general for a server, for everything 
Ansible galaxy ar&hellip; (671 words, Jan 4, 2023)
- [NPM Update AND Install Issues - Sonatype Nexus Repository - Sonatype Community](/content/community/t/npm-update-and-install-issues/5860/8/index.html): Hello, 
We are working on Sonatype Nexus Repository Manager 3.29.2-02 that running on docker. 
After upgrading from version 3.23.0 to the new version we have many issues with the Jenkins builds. 
We have an npm group rep&hellip; (423 words, Jan 3, 2023)
- [Okta/Nexus Repo 3 automated user lifecycle management - Sonatype Nexus Repository - Sonatype Community](/content/community/t/okta-nexus-repo-3-automated-user-lifecycle-management/9843/2/index.html): Hi all, 
Im sure Im not the first one to have this need, and hoping someone else might have already solved it. 
As Nexus Repo doesn’t currently support SCIM, I am in need of some method to automate user lifecycle. 
Somet&hellip; (191 words, Jan 3, 2023)
- [How to proxy Google Distroless docker registry - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/how-to-proxy-google-distroless-docker-registry/9849/index.html): I want to proxy docker distroless docker registry in nexus. 
The problem is when I try to pull gcr.io/distroless/java11-debian11 it redirects to another URL (https://console.cloud.google.com/m/gcr/images/redirect?project&hellip; (111 words, Jan 2, 2023)
- [How to proxy Google Distroless docker registry - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/how-to-proxy-google-distroless-docker-registry/9849/1/index.html): I want to proxy docker distroless docker registry in nexus. 
The problem is when I try to pull gcr.io/distroless/java11-debian11 it redirects to another URL (https://console.cloud.google.com/m/gcr/images/redirect?project&hellip; (111 words, Jan 2, 2023)
- [Okta/Nexus Repo 3 automated user lifecycle management - Sonatype Nexus Repository - Sonatype Community](/content/community/t/okta-nexus-repo-3-automated-user-lifecycle-management/9843/index.html): Hi all, 
Im sure Im not the first one to have this need, and hoping someone else might have already solved it. 
As Nexus Repo doesn’t currently support SCIM, I am in need of some method to automate user lifecycle. 
Somet&hellip; (125 words, Jan 1, 2023)
- [Okta/Nexus Repo 3 automated user lifecycle management - Sonatype Nexus Repository - Sonatype Community](/content/community/t/okta-nexus-repo-3-automated-user-lifecycle-management/9843/1/index.html): Hi all, 
Im sure Im not the first one to have this need, and hoping someone else might have already solved it. 
As Nexus Repo doesn’t currently support SCIM, I am in need of some method to automate user lifecycle. 
Somet&hellip; (190 words, Jan 1, 2023)
- [Swift Package Manager (SPM / SwiftPM) repositories support - Sonatype Nexus Repository - Sonatype Community](/content/community/t/swift-package-manager-spm-swiftpm-repositories-support/9835/index.html): Good morning, 
With the release of Swift 5.7, SwiftPM now supports Package Registry Service. We are very interested on migrating from CocoaPods to SwiftPM while still using Nexus to manage our repositories. 
Is this on y&hellip; (255 words, Dec 30, 2022)
- [Swift Package Manager (SPM / SwiftPM) repositories support - Sonatype Nexus Repository - Sonatype Community](/content/community/t/swift-package-manager-spm-swiftpm-repositories-support/9835/1/index.html): Good morning, 
With the release of Swift 5.7, SwiftPM now supports Package Registry Service. We are very interested on migrating from CocoaPods to SwiftPM while still using Nexus to manage our repositories. 
Is this on y&hellip; (255 words, Dec 30, 2022)
- [Receiving error when trying to use source code scan API - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/receiving-error-when-trying-to-use-source-code-scan-api/9825/index.html): Hello, my org just installed nexusiq, so we’re really still getting. Some of our apps haven’t been built since we installed nexusiq, so only a handful currently have reports. 
I was trying to use this info to perform a s&hellip; (385 words, Dec 27, 2022)
- [Upload packages to Nexus repository using python scripts - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/upload-packages-to-nexus-repository-using-python-scripts/9807/index.html): Hello, 
I am trying to upload packages (APT,YUM,PYPI,RAW,DOCKER) to nexus using python. I have only find a way to upload maven packages. I would like to upload some other formats of packages using similar scripts as belo&hellip; (295 words, Dec 22, 2022)
- [Upload packages to Nexus repository using python scripts - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/upload-packages-to-nexus-repository-using-python-scripts/9807/1/index.html): Hello, 
I am trying to upload packages (APT,YUM,PYPI,RAW,DOCKER) to nexus using python. I have only find a way to upload maven packages. I would like to upload some other formats of packages using similar scripts as belo&hellip; (317 words, Dec 22, 2022)
- [Http 443 jenkins - Sonatype Nexus Repository - Sonatype Community](/content/community/t/http-443-jenkins/9805/index.html): Hi, i updated a Nexus to 3.43.0 but when i want downlod from jenkins pipeline an artefact returned an error with redirect http://nexus-dir:433/repo-dir bad request ( http 443 ???) where redirect nexus? (I have a nginx re&hellip; (148 words, Dec 21, 2022)
- [Http 443 jenkins - Sonatype Nexus Repository - Sonatype Community](/content/community/t/http-443-jenkins/9805/1/index.html): Hi, i updated a Nexus to 3.43.0 but when i want downlod from jenkins pipeline an artefact returned an error with redirect http://nexus-dir:433/repo-dir bad request ( http 443 ???) where redirect nexus? (I have a nginx re&hellip; (51 words, Dec 21, 2022)
- [How to check download size from nexus - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-to-check-download-size-from-nexus/9802/index.html): Hi Team, 
we are using Nexus repo manager(community edition) and deployed on ESXi in our LAB and we are planning to migrate into AWS with redundancy before doing that  we wanted to check the download size from nexus for &hellip; (95 words, Dec 21, 2022)
- [How to check download size from nexus - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-to-check-download-size-from-nexus/9802/1/index.html): Hi Team, 
we are using Nexus repo manager(community edition) and deployed on ESXi in our LAB and we are planning to migrate into AWS with redundancy before doing that  we wanted to check the download size from nexus for &hellip; (163 words, Dec 21, 2022)
- [Your Nexus Lifecycle Year In Review - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/your-nexus-lifecycle-year-in-review/9801/index.html): Your 2022 Nexus Lifecycle Year In Review is ready! Celebrate the end of the year with a look back at your software supply chain journey. 
Explore everything you’ve scanned this year, compare your Nexus Lifecycle usage wi&hellip; (171 words, Dec 20, 2022)
- [Your Nexus Lifecycle Year In Review - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/your-nexus-lifecycle-year-in-review/9801/1/index.html): Your 2022 Nexus Lifecycle Year In Review is ready! Celebrate the end of the year with a look back at your software supply chain journey. 
Explore everything you’ve scanned this year, compare your Nexus Lifecycle usage wi&hellip; (171 words, Dec 20, 2022)
- [Sonatype Guides have Moved to Help and Learn - Community Announcements - Sonatype Community](/content/community/t/sonatype-guides-have-moved-to-help-and-learn/9794/index.html): Dear users and members of our community, 
To streamline your learning experience, all guides originally published on (guides.sonatype.com) now live among the pages of help.sonatype.com and learn.sonatype.com. We believe &hellip; (191 words, Dec 19, 2022)
- [Apt repo snapshot failing with dists/jammy/Contents-amd64 404 Not Found Error - Sonatype Nexus Repository - Sonatype Community](/content/community/t/apt-repo-snapshot-failing-with-dists-jammy-contents-amd64-404-not-found-error/9793/index.html): Hello Folks 
created a snapshot using apt repo proxy and the same has been given in the sources.list file but failing with “dists/jammy/Contents-amd64  404  Not Found”  error. 
There is no file with that name in the snap&hellip; (189 words, Dec 19, 2022)
- [Apt repo snapshot failing with dists/jammy/Contents-amd64 404 Not Found Error - Sonatype Nexus Repository - Sonatype Community](/content/community/t/apt-repo-snapshot-failing-with-dists-jammy-contents-amd64-404-not-found-error/9793/1/index.html): Hello Folks 
created a snapshot using apt repo proxy and the same has been given in the sources.list file but failing with “dists/jammy/Contents-amd64  404  Not Found”  error. 
There is no file with that name in the snap&hellip; (183 words, Dec 19, 2022)
- [Choose Proxy Settings for a Repo - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/choose-proxy-settings-for-a-repo/9686/2/index.html): Hi, 
in the new IQ Version you can set, that the Policie Actions can be overriden. 
Also the Proxy Stage actions can be overriden. But how make it an effect? 
Is it possible to set (for example for npm), that an develope&hellip; (179 words, Dec 14, 2022)
- [Join us in 30 mins for December Office Hours - 10 a.m EST - Community Announcements - Sonatype Community](/content/community/t/join-us-in-30-mins-for-december-office-hours-10-a-m-est/9766/2/index.html): Join us in 30 minutes at 10 a.m. EST (7 a.m. PST | 3 p.m. GMT) for our monthly, customer-exclusive Office Hours. This month, we’ll be discussing the following topics: 

Nexus Lifecycle: SBOM Overview
Sonatype Innovate:&hellip; (120 words, Dec 14, 2022)
- [Join us in 30 mins for December Office Hours - 10 a.m EST - Community Announcements - Sonatype Community](/content/community/t/join-us-in-30-mins-for-december-office-hours-10-a-m-est/9766/index.html): Join us in 30 minutes at 10 a.m. EST (7 a.m. PST | 3 p.m. GMT) for our monthly, customer-exclusive Office Hours. This month, we’ll be discussing the following topics: 

Nexus Lifecycle: SBOM Overview
Sonatype Innovate:&hellip; (196 words, Dec 14, 2022)
- [Join us in 30 mins for December Office Hours - 10 a.m EST - Community Announcements - Sonatype Community](/content/community/t/join-us-in-30-mins-for-december-office-hours-10-a-m-est/9766/1/index.html): Join us in 30 minutes at 10 a.m. EST (7 a.m. PST | 3 p.m. GMT) for our monthly, customer-exclusive Office Hours. This month, we’ll be discussing the following topics: 

Nexus Lifecycle: SBOM Overview
Sonatype Innovate:&hellip; (203 words, Dec 14, 2022)
- [TOMORROW: December Office Hours at 10am EST - Community Announcements - Sonatype Community](/content/community/t/tomorrow-december-office-hours-at-10am-est/9761/index.html): Join us Wednesday, December 14th at 10 a.m. EST (7 a.m. PST | 3 p.m. GMT) for our monthly, customer-exclusive Office Hours. This month, we’ll be discussing the following topics: 

Nexus Lifecycle: SBOM Overview
Sonatyp&hellip; (183 words, Dec 13, 2022)
- [How to upload docker image using API？ - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-to-upload-docker-image-using-api/7112/5/index.html): How to upload docker image using API？ 
Version:Sonatype Nexus Repository ManagerOSS 3.32.0-03 
I use docker save -o a.tar nginx:v1 to save the image, and then upload it through the API interface with an error of 500. 
Am&hellip; (235 words, Dec 13, 2022)
- [A way in Nexus Lifecycle to a get notification/email when a waiver is about to expire - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/a-way-in-nexus-lifecycle-to-a-get-notification-email-when-a-waiver-is-about-to-expire/9735/2/index.html): Hello, I’m trying to set up a way to automatically get a notification/email when a waiver is about to expire, so I don’t forget about a waiver being removed without me knowing. (95 words, Dec 13, 2022)
- [A way in Nexus Lifecycle to view expired waviers - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/a-way-in-nexus-lifecycle-to-view-expired-waviers/9736/2/index.html): Hi, I’m looking for a way to view past waiver comments, any advice to see them? (136 words, Dec 12, 2022)
- [A way in Nexus Lifecycle to view expired waviers - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/a-way-in-nexus-lifecycle-to-view-expired-waviers/9736/index.html): Hi, I’m looking for a way to view past waiver comments, any advice to see them? (138 words, Dec 8, 2022)
- [A way in Nexus Lifecycle to view expired waviers - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/a-way-in-nexus-lifecycle-to-view-expired-waviers/9736/1/index.html): Hi, I’m looking for a way to view past waiver comments, any advice to see them? (152 words, Dec 8, 2022)
- [A way in Nexus Lifecycle to a get notification/email when a waiver is about to expire - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/a-way-in-nexus-lifecycle-to-a-get-notification-email-when-a-waiver-is-about-to-expire/9735/index.html): Hello, I’m trying to set up a way to automatically get a notification/email when a waiver is about to expire, so I don’t forget about a waiver being removed without me knowing. (95 words, Dec 8, 2022)
- [A way in Nexus Lifecycle to a get notification/email when a waiver is about to expire - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/a-way-in-nexus-lifecycle-to-a-get-notification-email-when-a-waiver-is-about-to-expire/9735/1/index.html): Hello, I’m trying to set up a way to automatically get a notification/email when a waiver is about to expire, so I don’t forget about a waiver being removed without me knowing. (95 words, Dec 8, 2022)
- [Join us for December Office Hours - Wednesday, December 14th at 10am EST - Community Announcements - Sonatype Community](/content/community/t/join-us-for-december-office-hours-wednesday-december-14th-at-10am-est/9727/2/index.html): Join us Wednesday, December 14th at 10 a.m. EST (7 a.m. PST | 3 p.m. GMT) for our monthly, customer-exclusive Office Hours. This month, we’ll be discussing the following topics: 

Nexus Lifecycle: SBOM Overview
Sonatyp&hellip; (203 words, Dec 7, 2022)
- [Join us for December Office Hours - Wednesday, December 14th at 10am EST - Community Announcements - Sonatype Community](/content/community/t/join-us-for-december-office-hours-wednesday-december-14th-at-10am-est/9727/index.html): Join us Wednesday, December 14th at 10 a.m. EST (7 a.m. PST | 3 p.m. GMT) for our monthly, customer-exclusive Office Hours. This month, we’ll be discussing the following topics: 

Nexus Lifecycle: SBOM Overview
Sonatyp&hellip; (178 words, Dec 7, 2022)
- [Join us for December Office Hours - Wednesday, December 14th at 10am EST - Community Announcements - Sonatype Community](/content/community/t/join-us-for-december-office-hours-wednesday-december-14th-at-10am-est/9727/1/index.html): Join us Wednesday, December 14th at 10 a.m. EST (7 a.m. PST | 3 p.m. GMT) for our monthly, customer-exclusive Office Hours. This month, we’ll be discussing the following topics: 

Nexus Lifecycle: SBOM Overview
Sonatyp&hellip; (181 words, Dec 7, 2022)
- [Upgrade to Node 16, npm 8.5, doesn't always install new packages - Sonatype Nexus Repository - Sonatype Community](/content/community/t/upgrade-to-node-16-npm-8-5-doesnt-always-install-new-packages/9714/4/index.html): We’re running Sonatype Nexus Repository Manager OSS 3.27.0-03. We’ve been using it great for years with our dev machines using node 10.22, npm 6.x. 
We recently upgraded our dev envs to node 16.15, npm 8.5.5. Many packag&hellip; (390 words, Dec 6, 2022)
- [Upgrade to Node 16, npm 8.5, doesn't always install new packages - Sonatype Nexus Repository - Sonatype Community](/content/community/t/upgrade-to-node-16-npm-8-5-doesnt-always-install-new-packages/9714/index.html): We’re running Sonatype Nexus Repository Manager OSS 3.27.0-03. We’ve been using it great for years with our dev machines using node 10.22, npm 6.x. 
We recently upgraded our dev envs to node 16.15, npm 8.5.5. Many packag&hellip; (390 words, Dec 5, 2022)
- [Upgrade to Node 16, npm 8.5, doesn't always install new packages - Sonatype Nexus Repository - Sonatype Community](/content/community/t/upgrade-to-node-16-npm-8-5-doesnt-always-install-new-packages/9714/1/index.html): We’re running Sonatype Nexus Repository Manager OSS 3.27.0-03. We’ve been using it great for years with our dev machines using node 10.22, npm 6.x. 
We recently upgraded our dev envs to node 16.15, npm 8.5.5. Many packag&hellip; (390 words, Dec 5, 2022)
- [Search not showing content by default - Sonatype Nexus Repository - Sonatype Community](/content/community/t/search-not-showing-content-by-default/9712/2/index.html): Hello, 
Couple of days ago I update my Nexus installation to version OSS 3.43.0-01, everything went according to plan but I lost an important feature for me on the way. On the older versions when I clicked on, for exampl&hellip; (233 words, Dec 5, 2022)
- [Search not showing content by default - Sonatype Nexus Repository - Sonatype Community](/content/community/t/search-not-showing-content-by-default/9712/index.html): Hello, 
Couple of days ago I update my Nexus installation to version OSS 3.43.0-01, everything went according to plan but I lost an important feature for me on the way. On the older versions when I clicked on, for exampl&hellip; (239 words, Dec 5, 2022)
- [Search not showing content by default - Sonatype Nexus Repository - Sonatype Community](/content/community/t/search-not-showing-content-by-default/9712/1/index.html): Hello, 
Couple of days ago I update my Nexus installation to version OSS 3.43.0-01, everything went according to plan but I lost an important feature for me on the way. On the older versions when I clicked on, for exampl&hellip; (249 words, Dec 5, 2022)
- [Choose Proxy Settings for a Repo - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/choose-proxy-settings-for-a-repo/9686/index.html): Hi, 
in the new IQ Version you can set, that the Policie Actions can be overriden. 
Also the Proxy Stage actions can be overriden. But how make it an effect? 
Is it possible to set (for example for npm), that an develope&hellip; (266 words, Nov 30, 2022)
- [Choose Proxy Settings for a Repo - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/choose-proxy-settings-for-a-repo/9686/1/index.html): Hi, 
in the new IQ Version you can set, that the Policie Actions can be overriden. 
Also the Proxy Stage actions can be overriden. But how make it an effect? 
Is it possible to set (for example for npm), that an develope&hellip; (266 words, Nov 30, 2022)
- [Webhook return 503 error - Sonatype Nexus Repository - Sonatype Community](/content/community/t/webhook-return-503-error/9662/5/index.html): Hi, 
The proxy server is currently connected to Nexus repository and is in use. 
nexus repository (localhost:8081) → Squid proxy(192.168.0.XXX:3611) → NHN proxy (133.XXX.XXX.XXX:8081) 
Due to security policy, I cannot co&hellip; (228 words, Nov 29, 2022)
- [Webhook return 503 error - Sonatype Nexus Repository - Sonatype Community](/content/community/t/webhook-return-503-error/9662/4/index.html): Hi, 
The proxy server is currently connected to Nexus repository and is in use. 
nexus repository (localhost:8081) → Squid proxy(192.168.0.XXX:3611) → NHN proxy (133.XXX.XXX.XXX:8081) 
Due to security policy, I cannot co&hellip; (311 words, Nov 29, 2022)
- [Google SSO authentication with Nexus - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/google-sso-authentication-with-nexus/9647/2/index.html): Hi Team, 
I found the documentation : Authentication via Remote User Token to add SSO Authentication with Nexus. I am trying to figure out a way to use Google SSO. Can someone please help me with it? 
Thank you, (126 words, Nov 28, 2022)
- [Webhook return 503 error - Sonatype Nexus Repository - Sonatype Community](/content/community/t/webhook-return-503-error/9662/3/index.html): Hi, 
The proxy server is currently connected to Nexus repository and is in use. 
nexus repository (localhost:8081) → Squid proxy(192.168.0.XXX:3611) → NHN proxy (133.XXX.XXX.XXX:8081) 
Due to security policy, I cannot co&hellip; (228 words, Nov 28, 2022)
- [Webhook return 503 error - Sonatype Nexus Repository - Sonatype Community](/content/community/t/webhook-return-503-error/9662/2/index.html): Hi, 
The proxy server is currently connected to Nexus repository and is in use. 
nexus repository (localhost:8081) → Squid proxy(192.168.0.XXX:3611) → NHN proxy (133.XXX.XXX.XXX:8081) 
Due to security policy, I cannot co&hellip; (228 words, Nov 28, 2022)
- [Webhook return 503 error - Sonatype Nexus Repository - Sonatype Community](/content/community/t/webhook-return-503-error/9662/index.html): Hi, 
The proxy server is currently connected to Nexus repository and is in use. 
nexus repository (localhost:8081) → Squid proxy(192.168.0.XXX:3611) → NHN proxy (133.XXX.XXX.XXX:8081) 
Due to security policy, I cannot co&hellip; (229 words, Nov 28, 2022)
- [Webhook return 503 error - Sonatype Nexus Repository - Sonatype Community](/content/community/t/webhook-return-503-error/9662/1/index.html): Hi, 
The proxy server is currently connected to Nexus repository and is in use. 
nexus repository (localhost:8081) → Squid proxy(192.168.0.XXX:3611) → NHN proxy (133.XXX.XXX.XXX:8081) 
Due to security policy, I cannot co&hellip; (228 words, Nov 28, 2022)
- [Google SSO authentication with Nexus - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/google-sso-authentication-with-nexus/9647/index.html): Hi Team, 
I found the documentation : Authentication via Remote User Token to add SSO Authentication with Nexus. I am trying to figure out a way to use Google SSO. Can someone please help me with it? 
Thank you, (126 words, Nov 22, 2022)
- [Google SSO authentication with Nexus - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/google-sso-authentication-with-nexus/9647/1/index.html): Hi Team, 
I found the documentation : Authentication via Remote User Token to add SSO Authentication with Nexus. I am trying to figure out a way to use Google SSO. Can someone please help me with it? 
Thank you, (126 words, Nov 22, 2022)
- [Max threads - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/max-threads/9646/index.html): How calculate max threads and cores for a machine? (85 words, Nov 22, 2022)
- [How can use nexus as mirror registry for docker - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/how-can-use-nexus-as-mirror-registry-for-docker/9142/2/index.html): I want use nexus as mirror registry in my docker .  Actually I want when I am perform pull and image from docker hub it could also reside image in nexus repository. Now I can pull image from docker hub but a copy from th&hellip; (225 words, Nov 19, 2022)
- [TOMORROW: November Office Hours at 12pm EST - Community Announcements - Sonatype Community](/content/community/t/tomorrow-november-office-hours-at-12pm-est/9607/2/index.html): Join us tomorrow, Tuesday, November 15th at 12 p.m. EST (9 a.m. PST | 5 p.m. GMT), for our monthly, customer-exclusive Office Hours. This month, we’ll be discussing the following topics: 

Nexus Lifecycle: New Waivers &hellip; (178 words, Nov 17, 2022)
- [Please help to analyze the reason of abnormal shutdown - Sonatype Nexus Repository - Sonatype Community](/content/community/t/please-help-to-analyze-the-reason-of-abnormal-shutdown/9633/index.html): We are using Sonatype Nexus Manager OSS 3.20.1-01 in AWS EKS for production. 
Resource spec is 
cpu: 4000m 
memory: 60Gi 
ENV: 
INSTALL4J_ADD_VM_PARAMS: -Xms12G -Xmx12G -XX:MaxDirectMemorySize=35158M -Djava.util.prefs.us&hellip; (239 words, Nov 17, 2022)
- [Please help to analyze the reason of abnormal shutdown - Sonatype Nexus Repository - Sonatype Community](/content/community/t/please-help-to-analyze-the-reason-of-abnormal-shutdown/9633/1/index.html): We are using Sonatype Nexus Manager OSS 3.20.1-01 in AWS EKS for production. 
Resource spec is 
cpu: 4000m 
memory: 60Gi 
ENV: 
INSTALL4J_ADD_VM_PARAMS: -Xms12G -Xmx12G -XX:MaxDirectMemorySize=35158M -Djava.util.prefs.us&hellip; (251 words, Nov 17, 2022)
- [API not found when accessing from localhost - Sonatype Nexus Repository - Sonatype Community](/content/community/t/api-not-found-when-accessing-from-localhost/9625/3/index.html): Hi, 
We have a straightforward Nexus Repo 3 running behind our firewall with a reverse proxy in front for access: 
Internet (443) &gt; Reverse Proxy &gt; Nexus (8081) 
When we access the following API we can retrieve the resul&hellip; (129 words, Nov 16, 2022)
- [Is there any good document to learn how to connect Nexus withGoogle, to allow to authenticate with Google account into Nexus? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/is-there-any-good-document-to-learn-how-to-connect-nexus-withgoogle-to-allow-to-authenticate-with-google-account-into-nexus/9631/index.html): Is there any good document to learn how to connect Nexus with Google, to allow to authenticate with Google account into Nexus? (109 words, Nov 16, 2022)
- [Is there any good document to learn how to connect Nexus withGoogle, to allow to authenticate with Google account into Nexus? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/is-there-any-good-document-to-learn-how-to-connect-nexus-withgoogle-to-allow-to-authenticate-with-google-account-into-nexus/9631/1/index.html): Is there any good document to learn how to connect Nexus with Google, to allow to authenticate with Google account into Nexus? (113 words, Nov 16, 2022)
- [API not found when accessing from localhost - Sonatype Nexus Repository - Sonatype Community](/content/community/t/api-not-found-when-accessing-from-localhost/9625/2/index.html): Hi, 
We have a straightforward Nexus Repo 3 running behind our firewall with a reverse proxy in front for access: 
Internet (443) &gt; Reverse Proxy &gt; Nexus (8081) 
When we access the following API we can retrieve the resul&hellip; (129 words, Nov 16, 2022)
- [Maintenance Downtime of Community on Tuesday, November 15th at 8pm EST - Community Announcements - Sonatype Community](/content/community/t/maintenance-downtime-of-community-on-tuesday-november-15th-at-8pm-est/9608/3/index.html): Starting around 8:00 PM EST on Tuesday, November 15th, the Community forum will be brought offline to perform necessary maintenance and upgrades. 
This downtime is localized to just the community forum, and will not affe&hellip; (173 words, Nov 16, 2022)
- [Feedback about openssl vulnerability blog post - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/feedback-about-openssl-vulnerability-blog-post/9605/3/index.html): Hello 
As a new Nexus User, I read your blog post about the new openssl vulnerability and I know that sometimes the purpose of blog posts is simply to create awareness and attract new people to a website and not just to &hellip; (1,064 words, Nov 16, 2022)
- [API not found when accessing from localhost - Sonatype Nexus Repository - Sonatype Community](/content/community/t/api-not-found-when-accessing-from-localhost/9625/index.html): Hi, 
We have a straightforward Nexus Repo 3 running behind our firewall with a reverse proxy in front for access: 
Internet (443) &gt; Reverse Proxy &gt; Nexus (8081) 
When we access the following API we can retrieve the resul&hellip; (134 words, Nov 16, 2022)
- [API not found when accessing from localhost - Sonatype Nexus Repository - Sonatype Community](/content/community/t/api-not-found-when-accessing-from-localhost/9625/1/index.html): Hi, 
We have a straightforward Nexus Repo 3 running behind our firewall with a reverse proxy in front for access: 
Internet (443) &gt; Reverse Proxy &gt; Nexus (8081) 
When we access the following API we can retrieve the resul&hellip; (129 words, Nov 16, 2022)
- [Join us in 1 hour for November Office Hours - 12 p.m EST - Community Announcements - Sonatype Community](/content/community/t/join-us-in-1-hour-for-november-office-hours-12-p-m-est/9619/2/index.html): Join us in one hour at 12 p.m. EST (9 a.m. PST | 5 p.m. GMT), for our monthly, customer-exclusive Office Hours. This month, we’ll be discussing the following topics: 

Nexus Lifecycle: New Waivers View
Nexus Repository&hellip; (110 words, Nov 15, 2022)
- [Join us in 1 hour for November Office Hours - 12 p.m EST - Community Announcements - Sonatype Community](/content/community/t/join-us-in-1-hour-for-november-office-hours-12-p-m-est/9619/index.html): Join us in one hour at 12 p.m. EST (9 a.m. PST | 5 p.m. GMT), for our monthly, customer-exclusive Office Hours. This month, we’ll be discussing the following topics: 

Nexus Lifecycle: New Waivers View
Nexus Repository&hellip; (196 words, Nov 15, 2022)
- [Join us in 1 hour for November Office Hours - 12 p.m EST - Community Announcements - Sonatype Community](/content/community/t/join-us-in-1-hour-for-november-office-hours-12-p-m-est/9619/1/index.html): Join us in one hour at 12 p.m. EST (9 a.m. PST | 5 p.m. GMT), for our monthly, customer-exclusive Office Hours. This month, we’ll be discussing the following topics: 

Nexus Lifecycle: New Waivers View
Nexus Repository&hellip; (112 words, Nov 15, 2022)
- [Nexus3.4.2 couldn't list artifacts in descending order - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/nexus3-4-2-couldnt-list-artifacts-in-descending-order/9612/index.html): Hi, as part of our deployment in Rundeck, we are doing curl to get/list the artifacts in the repositories from nexus3. 
we are trying to limit the artifact to 25 and sort the version in a descending order. However, limit&hellip; (77 words, Nov 15, 2022)
- [Maintenance Downtime of Community on Tuesday, November 15th at 8pm EST - Community Announcements - Sonatype Community](/content/community/t/maintenance-downtime-of-community-on-tuesday-november-15th-at-8pm-est/9608/index.html): Starting around 8:00 PM EST on Tuesday, November 15th, the Community forum will be brought offline to perform necessary maintenance and upgrades. 
This downtime is localized to just the community forum, and will not affe&hellip; (139 words, Nov 14, 2022)
- [Maintenance Downtime of Community on Tuesday, November 15th at 8pm EST - Community Announcements - Sonatype Community](/content/community/t/maintenance-downtime-of-community-on-tuesday-november-15th-at-8pm-est/9608/1/index.html): Starting around 8:00 PM EST on Tuesday, November 15th, the Community forum will be brought offline to perform necessary maintenance and upgrades. 
This downtime is localized to just the community forum, and will not affe&hellip; (145 words, Nov 14, 2022)
- [TOMORROW: November Office Hours at 12pm EST - Community Announcements - Sonatype Community](/content/community/t/tomorrow-november-office-hours-at-12pm-est/9607/index.html): Join us tomorrow, Tuesday, November 15th at 12 p.m. EST (9 a.m. PST | 5 p.m. GMT), for our monthly, customer-exclusive Office Hours. This month, we’ll be discussing the following topics: 

Nexus Lifecycle: New Waivers &hellip; (186 words, Nov 14, 2022)
- [Feedback about openssl vulnerability blog post - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/feedback-about-openssl-vulnerability-blog-post/9605/index.html): Hello 
As a new Nexus User, I read your blog post about the new openssl vulnerability and I know that sometimes the purpose of blog posts is simply to create awareness and attract new people to a website and not just to &hellip; (1,064 words, Nov 14, 2022)
- [Feedback about openssl vulnerability blog post - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/feedback-about-openssl-vulnerability-blog-post/9605/1/index.html): Hello 
As a new Nexus User, I read your blog post about the new openssl vulnerability and I know that sometimes the purpose of blog posts is simply to create awareness and attract new people to a website and not just to &hellip; (913 words, Nov 14, 2022)
- [Sonatype Nexus OSS 3.41.0-01 and LDAPS : failed to connect - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-oss-3-41-0-01-and-ldaps-failed-to-connect/9604/index.html): hI, 
I’m using nexus OSS 3.41 and I want to acces to my Activive Directory with LDAPS 
When I use LDAP, it’s OK, Nexus is connected to my AD. 
BUT 
When à use LDAPS, I have the following error : 
Failed to connect to LDA&hellip; (431 words, Nov 14, 2022)
- [Sonatype Nexus OSS 3.41.0-01 and LDAPS : failed to connect - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonatype-nexus-oss-3-41-0-01-and-ldaps-failed-to-connect/9604/1/index.html): hI, 
I’m using nexus OSS 3.41 and I want to acces to my Activive Directory with LDAPS 
When I use LDAP, it’s OK, Nexus is connected to my AD. 
BUT 
When à use LDAPS, I have the following error : 
Failed to connect to LDA&hellip; (424 words, Nov 14, 2022)
- [Nexus 3 HTTPs on port 443 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-3-https-on-port-443/9587/2/index.html): Hi, 
I’m trying to install and configure Sonatype Nexus OSS 3.42.0-01. on Ubuntu 20.04 
I need to configure it on 443 HTTPS port. 
I configured all, and if I try to run it on the port 8443 it works fine. 
But when I try &hellip; (138 words, Nov 11, 2022)
- [NexusIQ scan for Android - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/nexusiq-scan-for-android/1089/4/index.html): Hi, 
We’re using Nexus Platform Plugin in Jenkins to carry out  Android scan vulnerabilities. 
I’m looking for how NexusIq will be scanning Android application? 
I tried to apply the parameter scanPattern as [*.apk] file&hellip; (401 words, Nov 10, 2022)
- [Nexus 3 HTTPs on port 443 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-3-https-on-port-443/9587/1/index.html): Hi, 
I’m trying to install and configure Sonatype Nexus OSS 3.42.0-01. on Ubuntu 20.04 
I need to configure it on 443 HTTPS port. 
I configured all, and if I try to run it on the port 8443 it works fine. 
But when I try &hellip; (139 words, Nov 10, 2022)
- [Join us for November Office Hours - Tuesday, November 15th at 12pm EST - Community Announcements - Sonatype Community](/content/community/t/join-us-for-november-office-hours-tuesday-november-15th-at-12pm-est/9575/2/index.html): Join us Tuesday, November 15th at 12 p.m. EST (9 a.m. PST | 5 p.m. GMT) for our monthly, customer-exclusive Office Hours. This month, we’ll be discussing the following topics: 

Nexus Lifecycle: New Waivers View
Nexus &hellip; (192 words, Nov 8, 2022)
- [Join us for November Office Hours - Tuesday, November 15th at 12pm EST - Community Announcements - Sonatype Community](/content/community/t/join-us-for-november-office-hours-tuesday-november-15th-at-12pm-est/9575/index.html): Join us Tuesday, November 15th at 12 p.m. EST (9 a.m. PST | 5 p.m. GMT) for our monthly, customer-exclusive Office Hours. This month, we’ll be discussing the following topics: 

Nexus Lifecycle: New Waivers View
Nexus &hellip; (113 words, Nov 8, 2022)
- [Join us for November Office Hours - Tuesday, November 15th at 12pm EST - Community Announcements - Sonatype Community](/content/community/t/join-us-for-november-office-hours-tuesday-november-15th-at-12pm-est/9575/1/index.html): Join us Tuesday, November 15th at 12 p.m. EST (9 a.m. PST | 5 p.m. GMT) for our monthly, customer-exclusive Office Hours. This month, we’ll be discussing the following topics: 

Nexus Lifecycle: New Waivers View
Nexus &hellip; (189 words, Nov 8, 2022)
- [Error while logging to sonatype nexus repo - Sonatype Nexus Repository - Sonatype Community](/content/community/t/error-while-logging-to-sonatype-nexus-repo/9565/index.html): Hi, 
I tried to login to a specific url which is for my organisation. I used the below command to login from Ubuntu VM in Azure got the error as “retry will retry, error on last attempt: Error: unable to verify the first&hellip; (150 words, Nov 7, 2022)
- [Error while logging to sonatype nexus repo - Sonatype Nexus Repository - Sonatype Community](/content/community/t/error-while-logging-to-sonatype-nexus-repo/9565/1/index.html): Hi, 
I tried to login to a specific url which is for my organisation. I used the below command to login from Ubuntu VM in Azure got the error as “retry will retry, error on last attempt: Error: unable to verify the first&hellip; (195 words, Nov 7, 2022)
- [Policies for internal applications - Sonatype Lifecycle & Repository Firewall / Best Practices - Sonatype Community](/content/community/t/policies-for-internal-applications/9031/2/index.html): Hi, 
I am looking for policies that are suitable for internal applications (for only corporate users) that are not exposed to internet. 
Thanks 
Saeed (136 words, Nov 6, 2022)
- [What is the difference between Nexus Firewall and Lifecycle? - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/what-is-the-difference-between-nexus-firewall-and-lifecycle/8270/5/index.html): What is the difference between Nexus Firewall and Lifecycle? (159 words, Nov 3, 2022)
- [Issue: Unable to close Evaluation Windoe Ver 145 - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/issue-unable-to-close-evaluation-windoe-ver-145/9547/4/index.html): Just noticed this not sure where to file issues so leaving here. Window states you can close but the close is greyed out. (147 words, Nov 2, 2022)
- [Issue: Unable to close Evaluation Windoe Ver 145 - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/issue-unable-to-close-evaluation-windoe-ver-145/9547/index.html): Just noticed this not sure where to file issues so leaving here. Window states you can close but the close is greyed out. (147 words, Nov 2, 2022)
- [Issue: Unable to close Evaluation Windoe Ver 145 - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/issue-unable-to-close-evaluation-windoe-ver-145/9547/1/index.html): Just noticed this not sure where to file issues so leaving here. Window states you can close but the close is greyed out. (147 words, Nov 2, 2022)
- [Automatically choose whitelisted license in an "or" clause - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/automatically-choose-whitelisted-license-in-an-or-clause/6029/5/index.html): Issue: Nexus firewall quarantines an artifact due to presence of banned license in dual license list. 
For example - 
Selected Version: 1.4.20 
Type: maven 
Group: org.jetbrains.kotlin 
Artifact: kotlin-allopen 
Extensio&hellip; (349 words, Nov 1, 2022)
- [How to configure ldap in the nexus.properties file of Nexus Repository Manager 3 to take effect - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-to-configure-ldap-in-the-nexus-properties-file-of-nexus-repository-manager-3-to-take-effect/9512/index.html): I’m a novice. I don’t know how to set the configuration information of ldap to make it work in nexus. I’ve searched Google for a long time, but I haven’t found the answer I want. 
I referred to this article: Setting Adva&hellip; (194 words, Oct 28, 2022)
- [How to configure ldap in the nexus.properties file of Nexus Repository Manager 3 to take effect - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-to-configure-ldap-in-the-nexus-properties-file-of-nexus-repository-manager-3-to-take-effect/9512/1/index.html): I’m a novice. I don’t know how to set the configuration information of ldap to make it work in nexus. I’ve searched Google for a long time, but I haven’t found the answer I want. 
I referred to this article: Setting Adva&hellip; (194 words, Oct 28, 2022)
- [Confusing quarantine of Jquery-UI - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/confusing-quarantine-of-jquery-ui/9509/index.html): The package Jquery-UI is dependent on Jquery, which is without vulnerabilities since v 3.5.0. The current version of Jquery-UI is 3 months old and depends on any Jquery version &gt; 1.8.0. 
The confusion comes from reading &hellip; (141 words, Oct 26, 2022)
- [Confusing quarantine of Jquery-UI - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/confusing-quarantine-of-jquery-ui/9509/1/index.html): The package Jquery-UI is dependent on Jquery, which is without vulnerabilities since v 3.5.0. The current version of Jquery-UI is 3 months old and depends on any Jquery version &gt; 1.8.0. 
The confusion comes from reading &hellip; (141 words, Oct 26, 2022)
- [Repositories does not show up in IQ server after connecting Repository manager - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/repositories-does-not-show-up-in-iq-server-after-connecting-repository-manager/8488/4/index.html): hi, I installed IQ server 135 and Nexus repository manager pro 3.38. I connected repository manager to IQ server using the following guide: 
https://help.sonatype.com/integrations/iq-server-and-repository-management/iq-s&hellip; (329 words, Oct 26, 2022)
- [Join us in 1 hour for October Office Hours - 11am - Community Announcements - Sonatype Community](/content/community/t/join-us-in-1-hour-for-october-office-hours-11am/9503/index.html): Join us Tuesday, October 25th at 11 a.m. EDT (8 a.m. PDT | 4 p.m. BST) for our monthly, customer-exclusive Office Hours. This month, we’ll be discussing the following topics: 

Best Practices for Sonatype Solutions
IQ &hellip; (200 words, Oct 25, 2022)
- [Join us in 1 hour for October Office Hours - 11am - Community Announcements - Sonatype Community](/content/community/t/join-us-in-1-hour-for-october-office-hours-11am/9503/1/index.html): Join us Tuesday, October 25th at 11 a.m. EDT (8 a.m. PDT | 4 p.m. BST) for our monthly, customer-exclusive Office Hours. This month, we’ll be discussing the following topics: 

Best Practices for Sonatype Solutions
IQ &hellip; (196 words, Oct 25, 2022)
- [Publish android dependency from self-hosted private repository - Sonatype Nexus Repository - Sonatype Community](/content/community/t/publish-android-dependency-from-self-hosted-private-repository/9501/1/index.html): HI Team 
We have our own organization repository on GitLab and we want to publish android artifact publically but by keeping the source code on our own private repository. Could you please suggest some references or step&hellip; (74 words, Oct 25, 2022)
- [TOMORROW: October Office Hours at 11am EDT - Community Announcements - Sonatype Community](/content/community/t/tomorrow-october-office-hours-at-11am-edt/9499/index.html): Join us tomorrow, Tuesday, October 25th at 11 a.m. EDT (8 a.m. PDT | 4 p.m. BST) for our monthly, customer-exclusive Office Hours. This month, we’ll be discussing the following topics: 

Best Practices for Sonatype Sol&hellip; (109 words, Oct 24, 2022)
- [TOMORROW: October Office Hours at 11am EDT - Community Announcements - Sonatype Community](/content/community/t/tomorrow-october-office-hours-at-11am-edt/9499/1/index.html): Join us tomorrow, Tuesday, October 25th at 11 a.m. EDT (8 a.m. PDT | 4 p.m. BST) for our monthly, customer-exclusive Office Hours. This month, we’ll be discussing the following topics: 

Best Practices for Sonatype Sol&hellip; (116 words, Oct 24, 2022)
- [Support for Sonatype Nexus - Sonatype Nexus Repository - Sonatype Community](/content/community/t/support-for-sonatype-nexus/9493/2/index.html): How many users does Sonatype Nexus support? 
Also, is there a maximum number of users that can be registered? 
Is the number of materials that can be stored determined? 
Also, what kind of impacts and problems will occur&hellip; (95 words, Oct 24, 2022)
- [Support for Sonatype Nexus - Sonatype Nexus Repository - Sonatype Community](/content/community/t/support-for-sonatype-nexus/9493/index.html): How many users does Sonatype Nexus support? 
Also, is there a maximum number of users that can be registered? 
Is the number of materials that can be stored determined? 
Also, what kind of impacts and problems will occur&hellip; (150 words, Oct 24, 2022)
- [Support for Sonatype Nexus - Sonatype Nexus Repository - Sonatype Community](/content/community/t/support-for-sonatype-nexus/9493/1/index.html): How many users does Sonatype Nexus support? 
Also, is there a maximum number of users that can be registered? 
Is the number of materials that can be stored determined? 
Also, what kind of impacts and problems will occur&hellip; (96 words, Oct 24, 2022)
- [Repositories does not show up in IQ server after connecting Repository manager - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/repositories-does-not-show-up-in-iq-server-after-connecting-repository-manager/8488/3/index.html): hi, I installed IQ server 135 and Nexus repository manager pro 3.38. I connected repository manager to IQ server using the following guide: 
https://help.sonatype.com/integrations/iq-server-and-repository-management/iq-s&hellip; (329 words, Oct 23, 2022)
- [Not able to exclude dependency in Nexus IQ - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/not-able-to-exclude-dependency-in-nexus-iq/9480/2/index.html): Hi, 
I found a strange thing, not sure if anyone can help. 
I have a project “A” which has dependency to another project “B” and “B” uses bouncycastle. 
I already put  in the dependency section in the pom.xml in “A” to e&hellip; (149 words, Oct 21, 2022)
- [Not able to exclude dependency in Nexus IQ - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/not-able-to-exclude-dependency-in-nexus-iq/9480/index.html): Hi, 
I found a strange thing, not sure if anyone can help. 
I have a project “A” which has dependency to another project “B” and “B” uses bouncycastle. 
I already put  in the dependency section in the pom.xml in “A” to e&hellip; (230 words, Oct 20, 2022)
- [Join us for October Office Hours - Tuesday, October 25th at 11am EDT - Community Announcements - Sonatype Community](/content/community/t/join-us-for-october-office-hours-tuesday-october-25th-at-11am-edt/9473/index.html): Join us Tuesday, October 25th at 11 a.m. EDT (8 a.m. PDT | 4 p.m. BST) for our monthly, customer-exclusive Office Hours. This month, we’ll be discussing the following topics: 

Best Practices for Sonatype Solutions
IQ &hellip; (110 words, Oct 18, 2022)
- [Join us for October Office Hours - Tuesday, October 25th at 11am EDT - Community Announcements - Sonatype Community](/content/community/t/join-us-for-october-office-hours-tuesday-october-25th-at-11am-edt/9473/1/index.html): Join us Tuesday, October 25th at 11 a.m. EDT (8 a.m. PDT | 4 p.m. BST) for our monthly, customer-exclusive Office Hours. This month, we’ll be discussing the following topics: 

Best Practices for Sonatype Solutions
IQ &hellip; (180 words, Oct 18, 2022)
- [Additional repositories (for java 17) - Central Repository - Sonatype Community](/content/community/t/additional-repositories-for-java-17/9446/4/index.html): I am a maintainer on ‘Egeria’ (g: org.odpi.egeria) and considering our Java 11-&gt;17 strategy. 
We publish many (100s) maven artifacts to ‘Snapshots’ as part of our merge builds, and via staging to ‘Release’ for our monthl&hellip; (612 words, Oct 17, 2022)
- [Additional repositories (for java 17) - Central Repository - Sonatype Community](/content/community/t/additional-repositories-for-java-17/9446/index.html): I am a maintainer on ‘Egeria’ (g: org.odpi.egeria) and considering our Java 11-&gt;17 strategy. 
We publish many (100s) maven artifacts to ‘Snapshots’ as part of our merge builds, and via staging to ‘Release’ for our monthl&hellip; (612 words, Oct 13, 2022)
- [Upgradation on sonatype iq server from release 131 to release 145 - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/upgradation-on-sonatype-iq-server-from-release-131-to-release-145/9445/2/index.html): I am trying to upgrade my nexus iq  from release 131 to release 145. while i have made all the changes as mention in the release document, but still i am not able to bring up the server. 
error :- 
Oct 13 05:30:08 ip-172&hellip; (250 words, Oct 13, 2022)
- [Upgradation on sonatype iq server from release 131 to release 145 - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/upgradation-on-sonatype-iq-server-from-release-131-to-release-145/9445/index.html): I am trying to upgrade my nexus iq  from release 131 to release 145. while i have made all the changes as mention in the release document, but still i am not able to bring up the server. 
error :- 
Oct 13 05:30:08 ip-172&hellip; (359 words, Oct 13, 2022)
- [Upgradation on sonatype iq server from release 131 to release 145 - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/upgradation-on-sonatype-iq-server-from-release-131-to-release-145/9445/1/index.html): I am trying to upgrade my nexus iq  from release 131 to release 145. while i have made all the changes as mention in the release document, but still i am not able to bring up the server. 
error :- 
Oct 13 05:30:08 ip-172&hellip; (356 words, Oct 13, 2022)
- [Questions regarding Reconcile component database from blob store - Sonatype Nexus Repository - Sonatype Community](/content/community/t/questions-regarding-reconcile-component-database-from-blob-store/7338/3/index.html): Hello everyone, 
We are using Nexus Repository Manager OSS, 3.30.1-01. 
Recently, around 1 - 1.5 TB of artifacts of a hosted maven repository have been accidentally removed (via cleanup and compact blob store). The blobs&hellip; (501 words, Oct 12, 2022)
- [Correct use of apt proxy - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/correct-use-of-apt-proxy/9352/2/index.html): When creating an apt proxy, we are asked for the “distribution”. So I went ahead and created two apt proxies for bionic and focal called bionic and focal. 
I then configured the apt repos on my hosts like so: 
deb http:/&hellip; (369 words, Oct 10, 2022)
- [Artifacts not released to Maven Central - Sonatype Nexus Repository - Sonatype Community](/content/community/t/artifacts-not-released-to-maven-central/9397/index.html): Hi - I have been using Nexus for about three years to deploy my library to Maven Central. Yesterday, I tried to release a new version of the library. The build and upload to Nexus seemed to succeed, but the library is no&hellip; (384 words, Oct 3, 2022)
- [Artifacts not released to Maven Central - Sonatype Nexus Repository - Sonatype Community](/content/community/t/artifacts-not-released-to-maven-central/9397/1/index.html): Hi - I have been using Nexus for about three years to deploy my library to Maven Central. Yesterday, I tried to release a new version of the library. The build and upload to Nexus seemed to succeed, but the library is no&hellip; (384 words, Oct 3, 2022)
- [Groovy script performance for StorageTx `findAssets` in Maven repo - Sonatype Nexus Repository - Sonatype Community](/content/community/t/groovy-script-performance-for-storagetx-findassets-in-maven-repo/9363/4/index.html): We are using a custom Groovy script to retrieve and filter assets from a Maven repository. We are trying to optimize the performance for the script and noticed the storage query’s execution is the culprit, regularly taki&hellip; (375 words, Oct 3, 2022)
- [Nexus is not running earlier it was up and running? any thoughts? below is the error when i checked in logs - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-is-not-running-earlier-it-was-up-and-running-any-thoughts-below-is-the-error-when-i-checked-in-logs/9376/4/index.html): 2022-09-27 14:42:09,806+0000 ERROR [FelixDispatchQueue]  *SYSTEM org.osgi.framework.FrameworkEvent - FrameworkEvent ERROR 
org.osgi.framework.BundleException: Activator start error in bundle org.sonatype.nexus.bootstrap &hellip; (319 words, Sep 30, 2022)
- [Nexus is not running earlier it was up and running? any thoughts? below is the error when i checked in logs - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-is-not-running-earlier-it-was-up-and-running-any-thoughts-below-is-the-error-when-i-checked-in-logs/9376/index.html): 2022-09-27 14:42:09,806+0000 ERROR [FelixDispatchQueue]  *SYSTEM org.osgi.framework.FrameworkEvent - FrameworkEvent ERROR 
org.osgi.framework.BundleException: Activator start error in bundle org.sonatype.nexus.bootstrap &hellip; (305 words, Sep 27, 2022)
- [Nexus is not running earlier it was up and running? any thoughts? below is the error when i checked in logs - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-is-not-running-earlier-it-was-up-and-running-any-thoughts-below-is-the-error-when-i-checked-in-logs/9376/1/index.html): 2022-09-27 14:42:09,806+0000 ERROR [FelixDispatchQueue]  *SYSTEM org.osgi.framework.FrameworkEvent - FrameworkEvent ERROR 
org.osgi.framework.BundleException: Activator start error in bundle org.sonatype.nexus.bootstrap &hellip; (315 words, Sep 27, 2022)
- [Nexus repository cluster mode (high available ) with out k8s - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-repository-cluster-mode-high-available-with-out-k8s/9348/2/index.html): Hello, 
I have read nexus documentation about resiliency-and-high-availability  and I have understood : 

Nexus can run only on kubernetes for Node with Dynamic Failover
There is a legacy mode but the problem is that the&hellip; (243 words, Sep 26, 2022)
- [Groovy script performance for StorageTx `findAssets` in Maven repo - Sonatype Nexus Repository - Sonatype Community](/content/community/t/groovy-script-performance-for-storagetx-findassets-in-maven-repo/9363/index.html): We are using a custom Groovy script to retrieve and filter assets from a Maven repository. We are trying to optimize the performance for the script and noticed the storage query’s execution is the culprit, regularly taki&hellip; (372 words, Sep 26, 2022)
- [Groovy script performance for StorageTx `findAssets` in Maven repo - Sonatype Nexus Repository - Sonatype Community](/content/community/t/groovy-script-performance-for-storagetx-findassets-in-maven-repo/9363/1/index.html): We are using a custom Groovy script to retrieve and filter assets from a Maven repository. We are trying to optimize the performance for the script and noticed the storage query’s execution is the culprit, regularly taki&hellip; (375 words, Sep 26, 2022)
- [Correct use of apt proxy - Best Practices - Sonatype Community](/content/community/t/correct-use-of-apt-proxy/9352/index.html): When creating an apt proxy, we are asked for the “distribution”. So I went ahead and created two apt proxies for bionic and focal called bionic and focal. 
I then configured the apt repos on my hosts like so: 
deb http:/&hellip; (22 words, Sep 22, 2022)
- [Correct use of apt proxy - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/correct-use-of-apt-proxy/9352/1/index.html): When creating an apt proxy, we are asked for the “distribution”. So I went ahead and created two apt proxies for bionic and focal called bionic and focal. 
I then configured the apt repos on my hosts like so: 
deb http:/&hellip; (369 words, Sep 22, 2022)
- [Additional Fields - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/additional-fields/9331/3/index.html): Hello, 
I want to add a few additional (company specific) fields to an application (e.g. link to confluence, kind of application etc.). I there a mechanism to define key-value-lists? 
Best Regards, 
Christian (97 words, Sep 22, 2022)
- [Nexus repository cluster mode (high available ) with out k8s - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-repository-cluster-mode-high-available-with-out-k8s/9348/index.html): Hello, 
I have read nexus documentation about resiliency-and-high-availability  and I have understood : 

Nexus can run only on kubernetes for Node with Dynamic Failover
There is a legacy mode but the problem is that the&hellip; (157 words, Sep 22, 2022)
- [Nexus repository cluster mode (high available ) with out k8s - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-repository-cluster-mode-high-available-with-out-k8s/9348/1/index.html): Hello, 
I have read nexus documentation about resiliency-and-high-availability  and I have understood : 

Nexus can run only on kubernetes for Node with Dynamic Failover
There is a legacy mode but the problem is that the&hellip; (224 words, Sep 22, 2022)
- [Join us in 1 HOUR for September Office Hours - 10 a.m EDT - Community Announcements - Sonatype Community](/content/community/t/join-us-in-1-hour-for-september-office-hours-10-a-m-edt/9341/index.html): Join us at 10 a.m. EDT (7 a.m. PDT | 3 p.m. BST) for our monthly, customer-exclusive Office Hours. This month, we’ll be discussing the following topics: 

Nexus Lifecycle Security Enhancements
Nexus Repository Manager:&hellip; (179 words, Sep 21, 2022)
- [Join us in 1 HOUR for September Office Hours - 10 a.m EDT - Community Announcements - Sonatype Community](/content/community/t/join-us-in-1-hour-for-september-office-hours-10-a-m-edt/9341/1/index.html): Join us at 10 a.m. EDT (7 a.m. PDT | 3 p.m. BST) for our monthly, customer-exclusive Office Hours. This month, we’ll be discussing the following topics: 

Nexus Lifecycle Security Enhancements
Nexus Repository Manager:&hellip; (109 words, Sep 21, 2022)
- [TOMORROW: September Office Hours at 10am EDT - Community Announcements - Sonatype Community](/content/community/t/tomorrow-september-office-hours-at-10am-edt/9333/2/index.html): Join us tomorrow, Wednesday, September 21st at 10 a.m. EDT (7 a.m. PDT | 3 p.m. BST), for our monthly, customer-exclusive Office Hours. This month, we’ll be discussing the following topics: 

Nexus Lifecycle Security E&hellip; (190 words, Sep 20, 2022)
- [TOMORROW: September Office Hours at 10am EDT - Community Announcements - Sonatype Community](/content/community/t/tomorrow-september-office-hours-at-10am-edt/9333/index.html): Join us tomorrow, Wednesday, September 21st at 10 a.m. EDT (7 a.m. PDT | 3 p.m. BST), for our monthly, customer-exclusive Office Hours. This month, we’ll be discussing the following topics: 

Nexus Lifecycle Security E&hellip; (218 words, Sep 20, 2022)
- [TOMORROW: September Office Hours at 10am EDT - Community Announcements - Sonatype Community](/content/community/t/tomorrow-september-office-hours-at-10am-edt/9333/1/index.html): Join us tomorrow, Wednesday, September 21st at 10 a.m. EDT (7 a.m. PDT | 3 p.m. BST), for our monthly, customer-exclusive Office Hours. This month, we’ll be discussing the following topics: 

Nexus Lifecycle Security E&hellip; (105 words, Sep 20, 2022)
- [Additional Fields - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/additional-fields/9331/index.html): Hello, 
I want to add a few additional (company specific) fields to an application (e.g. link to confluence, kind of application etc.). I there a mechanism to define key-value-lists? 
Best Regards, 
Christian (103 words, Sep 20, 2022)
- [Additional Fields - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/additional-fields/9331/1/index.html): Hello, 
I want to add a few additional (company specific) fields to an application (e.g. link to confluence, kind of application etc.). I there a mechanism to define key-value-lists? 
Best Regards, 
Christian (95 words, Sep 20, 2022)
- [Nexus firewall Custom Massages after package is quarantined - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/nexus-firewall-custom-massages-after-package-is-quarantined/9173/4/index.html): Hi Team, 
can you please let me know how we can send custom massages to developer once he/her requested package is quarantined. (289 words, Sep 18, 2022)
- [Vulnerabilities changed from transitive to other? - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/vulnerabilities-changed-from-transitive-to-other/9319/index.html): Hello everyone, hoping someone here can clarify my lack of understanding. 
Context: Running SAST scan locally through nexus-iq-cli on a web project (using react). Had a bunch of transitive vulnerabilities show up with re&hellip; (121 words, Sep 17, 2022)
- [Vulnerabilities changed from transitive to other? - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/vulnerabilities-changed-from-transitive-to-other/9319/1/index.html): Hello everyone, hoping someone here can clarify my lack of understanding. 
Context: Running SAST scan locally through nexus-iq-cli on a web project (using react). Had a bunch of transitive vulnerabilities show up with re&hellip; (128 words, Sep 17, 2022)
- [Consistently timing out after 300s when deploying to non-snapshot servers - Central Repository - Sonatype Community](/content/community/t/consistently-timing-out-after-300s-when-deploying-to-non-snapshot-servers/9271/4/index.html): I have seen several existing tickets discussing timeouts on the old servers. 
I am using the new s01.oss.sonatype.org server. 
I can deploy snapshot artifacts. However, I get a consistent timeout error when trying to dep&hellip; (309 words, Sep 16, 2022)
- [Jetty Server - Sonatype Nexus Repository - Sonatype Community](/content/community/t/jetty-server/9311/2/index.html): Hi! how configure the Jetty server for Nexus 3, for example restrict cipher algorithm, cookies, headers 
is there a book or page ? 
thanks (51 words, Sep 15, 2022)
- [Jetty Server - Sonatype Nexus Repository - Sonatype Community](/content/community/t/jetty-server/9311/1/index.html): Hi! how configure the Jetty server for Nexus 3, for example restrict cipher algorithm, cookies, headers 
is there a book or page ? 
thanks (51 words, Sep 15, 2022)
- [Nexus can not parse the /etc/crypto-policies/back-ends/krb5.config of crypto-policies.rpm, krb5-libs depend on this file that can not be installed - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-can-not-parse-the-etc-crypto-policies-back-ends-krb5-config-of-crypto-policies-rpm-krb5-libs-depend-on-this-file-that-can-not-be-installed/9306/2/index.html): i have a problem in nexus host,(version is 3.31.1) that nexus can not parse the /etc/crypto-policies/back-ends/krb5.config of crypto-policies.rpm, krb5-libs depend on this file that can not be installed (190 words, Sep 15, 2022)
- [What is Rate Limit for OSS Index Rest API - Sonatype Exchange / Sonatype Exchange Discussion - Sonatype Community](/content/community/t/what-is-rate-limit-for-oss-index-rest-api/3752/3/index.html): I went through the docs of ossindex found that there is Rate limit but can’t find its value. 
Thank you in advance. (138 words, Sep 15, 2022)
- [Nexus can not parse the /etc/crypto-policies/back-ends/krb5.config of crypto-policies.rpm, krb5-libs depend on this file that can not be installed - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-can-not-parse-the-etc-crypto-policies-back-ends-krb5-config-of-crypto-policies-rpm-krb5-libs-depend-on-this-file-that-can-not-be-installed/9306/index.html): i have a problem in nexus host,(version is 3.31.1) that nexus can not parse the /etc/crypto-policies/back-ends/krb5.config of crypto-policies.rpm, krb5-libs depend on this file that can not be installed (187 words, Sep 15, 2022)
- [Nexus can not parse the /etc/crypto-policies/back-ends/krb5.config of crypto-policies.rpm, krb5-libs depend on this file that can not be installed - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-can-not-parse-the-etc-crypto-policies-back-ends-krb5-config-of-crypto-policies-rpm-krb5-libs-depend-on-this-file-that-can-not-be-installed/9306/1/index.html): i have a problem in nexus host,(version is 3.31.1) that nexus can not parse the /etc/crypto-policies/back-ends/krb5.config of crypto-policies.rpm, krb5-libs depend on this file that can not be installed (189 words, Sep 15, 2022)
- [Join us for September Office Hours - Wednesday, September 21st at 10am EDT - Community Announcements - Sonatype Community](/content/community/t/join-us-for-september-office-hours-wednesday-september-21st-at-10am-edt/9303/2/index.html): Join us Wednesday, September 21st at 10 a.m. EDT (7 a.m. PDT | 3 p.m. BST) for our monthly, customer-exclusive Office Hours. This month, we’ll be discussing the following topics: 


Nexus Lifecycle Security Enhancement&hellip; (115 words, Sep 14, 2022)
- [Join us for September Office Hours - Wednesday, September 21st at 10am EDT - Community Announcements - Sonatype Community](/content/community/t/join-us-for-september-office-hours-wednesday-september-21st-at-10am-edt/9303/index.html): Join us Wednesday, September 21st at 10 a.m. EDT (7 a.m. PDT | 3 p.m. BST) for our monthly, customer-exclusive Office Hours. This month, we’ll be discussing the following topics: 


Nexus Lifecycle Security Enhancement&hellip; (196 words, Sep 14, 2022)
- [Join us for September Office Hours - Wednesday, September 21st at 10am EDT - Community Announcements - Sonatype Community](/content/community/t/join-us-for-september-office-hours-wednesday-september-21st-at-10am-edt/9303/1/index.html): Join us Wednesday, September 21st at 10 a.m. EDT (7 a.m. PDT | 3 p.m. BST) for our monthly, customer-exclusive Office Hours. This month, we’ll be discussing the following topics: 


Nexus Lifecycle Security Enhancement&hellip; (188 words, Sep 14, 2022)
- [Is it possible to set a certain size for a blobstore or a repository? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/is-it-possible-to-set-a-certain-size-for-a-blobstore-or-a-repository/9297/3/index.html): I am learning to use Nexus and I have a question that I have not been able to find an answer to. 
I would like to have several blobstorage, and within each one a series of groups, so that only certain users can access ce&hellip; (374 words, Sep 14, 2022)
- [Is it possible to set a certain size for a blobstore or a repository? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/is-it-possible-to-set-a-certain-size-for-a-blobstore-or-a-repository/9297/index.html): I am learning to use Nexus and I have a question that I have not been able to find an answer to. 
I would like to have several blobstorage, and within each one a series of groups, so that only certain users can access ce&hellip; (374 words, Sep 13, 2022)
- [Is it possible to set a certain size for a blobstore or a repository? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/is-it-possible-to-set-a-certain-size-for-a-blobstore-or-a-repository/9297/1/index.html): I am learning to use Nexus and I have a question that I have not been able to find an answer to. 
I would like to have several blobstorage, and within each one a series of groups, so that only certain users can access ce&hellip; (374 words, Sep 13, 2022)
- [Nexus 3 OSS - Multi Arch Docker images for Docker repository - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-3-oss-multi-arch-docker-images-for-docker-repository/1753/6/index.html): Hi all, 
I have a question regarding the compatibility of the Docker repository in the NXRM 3. 
Does the Docker repository include support for multi-arch images? I could not find anything in the 
documentation 
Thanks in&hellip; (414 words, Sep 9, 2022)
- [Maven category - Central Repository - Sonatype Community](/content/community/t/maven-category/9280/index.html): Hi all, 
I can see in maven libraries there are categories, how can I add my library a category in maven repo? 
  
Thanks 
Hagai (121 words, Sep 9, 2022)
- [Maven category - Central Repository - Sonatype Community](/content/community/t/maven-category/9280/1/index.html): Hi all, 
I can see in maven libraries there are categories, how can I add my library a category in maven repo? 
  
Thanks 
Hagai (123 words, Sep 9, 2022)
- [Consistently timing out after 300s when deploying to non-snapshot servers - Central Repository - Sonatype Community](/content/community/t/consistently-timing-out-after-300s-when-deploying-to-non-snapshot-servers/9271/1/index.html): I have seen several existing tickets discussing timeouts on the old servers. 
I am using the new s01.oss.sonatype.org server. 
I can deploy snapshot artifacts. However, I get a consistent timeout error when trying to dep&hellip; (305 words, Sep 8, 2022)
- [Build time with Nuget is too long - Sonatype Nexus Repository - Sonatype Community](/content/community/t/build-time-with-nuget-is-too-long/9269/index.html): I use Nexus OSS and the dependency build time seems to be too long to finish. On average, each pipeline build takes around 5-8 minutes to complete. 
I would like to know if there are some good practices to be adopted to &hellip; (80 words, Sep 8, 2022)
- [Build time with Nuget is too long - Sonatype Nexus Repository - Sonatype Community](/content/community/t/build-time-with-nuget-is-too-long/9269/1/index.html): I use Nexus OSS and the dependency build time seems to be too long to finish. On average, each pipeline build takes around 5-8 minutes to complete. 
I would like to know if there are some good practices to be adopted to &hellip; (151 words, Sep 8, 2022)
- [Groups gives no access with SSO over SAML - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/groups-gives-no-access-with-sso-over-saml/9116/2/index.html): Hi all, I’ve gotten single-sign-on via SAML up and running, and also have the LDAP connection working as it should. I’m able to search for AD groups and assign a group to an organization in the IQ server, but for some re&hellip; (280 words, Sep 7, 2022)
- [Yum does not display the custom message sent from Sonatype Nexus Repository Manager - Sonatype Nexus Repository - Sonatype Community](/content/community/t/yum-does-not-display-the-custom-message-sent-from-sonatype-nexus-repository-manager/9266/index.html): We are trying to implement Yum support for one of our plugins developed for Sonatype Nexus Repository Manager (NRM). The users set up Yum Proxy in NRM to download and install the packages Eg: yum install &lt;package&gt;. 
Our &hellip; (213 words, Sep 7, 2022)
- [Yum does not display the custom message sent from Sonatype Nexus Repository Manager - Sonatype Nexus Repository - Sonatype Community](/content/community/t/yum-does-not-display-the-custom-message-sent-from-sonatype-nexus-repository-manager/9266/1/index.html): We are trying to implement Yum support for one of our plugins developed for Sonatype Nexus Repository Manager (NRM). The users set up Yum Proxy in NRM to download and install the packages Eg: yum install &lt;package&gt;. 
Our &hellip; (212 words, Sep 7, 2022)
- [Path to the .whl file on the local server - Sonatype Nexus Repository - Sonatype Community](/content/community/t/path-to-the-whl-file-on-the-local-server/9254/2/index.html): Hi, Everyone 
I am currently testing the version of Nexus 3.37-3-02 installed in the redhat 8.4 OS. I received a pypi repo event call back using webhook, and I am looking for the created file. Pypi event callback is as f&hellip; (235 words, Sep 6, 2022)
- [Path to the .whl file on the local server - Sonatype Nexus Repository - Sonatype Community](/content/community/t/path-to-the-whl-file-on-the-local-server/9254/index.html): Hi, Everyone 
I am currently testing the version of Nexus 3.37-3-02 installed in the redhat 8.4 OS. I received a pypi repo event call back using webhook, and I am looking for the created file. Pypi event callback is as f&hellip; (240 words, Sep 5, 2022)
- [Path to the .whl file on the local server - Sonatype Nexus Repository - Sonatype Community](/content/community/t/path-to-the-whl-file-on-the-local-server/9254/1/index.html): Hi, Everyone 
I am currently testing the version of Nexus 3.37-3-02 installed in the redhat 8.4 OS. I received a pypi repo event call back using webhook, and I am looking for the created file. Pypi event callback is as f&hellip; (239 words, Sep 5, 2022)
- [How to restore Blob that stored in s3(Blob Stores) - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-to-restore-blob-that-stored-in-s3-blob-stores/9248/1/index.html): Hi, 
I’m currently using Blob Stores as s3, and when I go into s3 where they are stored, they are stored with .bytes and .properties extension. 
How do I restore with .bytes and .properties extension.? 
I tried zipping .&hellip; (103 words, Sep 1, 2022)
- [Explain Repair Index and Update Index Options - Sonatype Nexus Repository - Sonatype Community](/content/community/t/explain-repair-index-and-update-index-options/9158/2/index.html): Nexus Repository Manager OSS 2.15.1-02 
In light of several indexing issues we are experiencing (see here, here and here), I am confused. 
Building on some 3 year old advice, 



The lucene search indexes in your Nexus R&hellip; (1,018 words, Sep 1, 2022)
- [Pushing to Nexus Group From Jenkins Pipeline - Sonatype Nexus Repository - Sonatype Community](/content/community/t/pushing-to-nexus-group-from-jenkins-pipeline/9244/index.html): I have a project that runs in a Jenkins Pipeline that needs to both npm install from a hosted private Nexus 3 OSS Repo but also at the end of the routine npm publish. 
How can I configure both the hosted and group reposi&hellip; (136 words, Sep 1, 2022)
- [Pushing to Nexus Group From Jenkins Pipeline - Sonatype Nexus Repository - Sonatype Community](/content/community/t/pushing-to-nexus-group-from-jenkins-pipeline/9244/1/index.html): I have a project that runs in a Jenkins Pipeline that needs to both npm install from a hosted private Nexus 3 OSS Repo but also at the end of the routine npm publish. 
How can I configure both the hosted and group reposi&hellip; (55 words, Sep 1, 2022)
- [Support credly for Sonatype badges - Sonatype Learn - Sonatype Community](/content/community/t/support-credly-for-sonatype-badges/9214/index.html): I like very much the Sonatype Learn portal and I think it’s a great way to improve the teams’ overall knowledge of the best practices for the different tools usage patterns. 
What do you think about the idea to issue Son&hellip; (241 words, Aug 29, 2022)
- [Support credly for Sonatype badges - Sonatype Learn - Sonatype Community](/content/community/t/support-credly-for-sonatype-badges/9214/1/index.html): I like very much the Sonatype Learn portal and I think it’s a great way to improve the teams’ overall knowledge of the best practices for the different tools usage patterns. 
What do you think about the idea to issue Son&hellip; (315 words, Aug 29, 2022)
- [Exceptions using IQ-Server Jenkins Plugin - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/exceptions-using-iq-server-jenkins-plugin/5427/2/index.html): Getting exception while Sonatype Jenkins pipeline scanning libraries inside AWS lambda function: 
Error stack trace: 
[INFO] Scanning lambdaName-x.x.x-lambda-package.zip/lib/jersey-common-2.30.1.jar… 
[ERROR] Could not p&hellip; (165 words, Aug 29, 2022)
- [Generating metadata without internet - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/generating-metadata-without-internet/9201/index.html): Hello, 
I would like to use Nexus in isolated environment (without internet connection, local network). 
I am using only HOSTED type of repos and this formats: YUM, PYPI, APT, RAW, Docker. 
Does anyone have any experienc&hellip; (176 words, Aug 26, 2022)
- [Generating metadata without internet - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/generating-metadata-without-internet/9201/1/index.html): Hello, 
I would like to use Nexus in isolated environment (without internet connection, local network). 
I am using only HOSTED type of repos and this formats: YUM, PYPI, APT, RAW, Docker. 
Does anyone have any experienc&hellip; (173 words, Aug 26, 2022)
- [Nexus 3.41.0 NPE error when using docker proxy without supplying Host header - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-3-41-0-npe-error-when-using-docker-proxy-without-supplying-host-header/9199/2/index.html): Hello there, 
We are running nexus as a docker proxy for docker hub, and are experiencing NullPointerExceptions when we try to pull images though the proxy. 
`*SYSTEM org.eclipse.jetty.server.HttpChannel - /v2/
java.lang&hellip; (132 words, Aug 25, 2022)
- [Allow Autosigned https certificate on Maven plugin - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/allow-autosigned-https-certificate-on-maven-plugin/9183/3/index.html): Hello, 
We have a test instance for lifecycle with an autosigned certificate. 
I try to launch maven plugin on a my projet and i can’t avoid the certificate check with -Dmaven.wagon.http.ssl.insecure=true option 

mvn cl&hellip; (193 words, Aug 23, 2022)
- [Help with bounce - Sonatype Nexus Repository - Sonatype Community](/content/community/t/help-with-bounce/9186/index.html): New to Nexus, and the company purchased a Pro license. The license is now applied, but requires a bounce. There is no bounce button in the Admin console, and I read that the only way is thru the lifecycle API, which does&hellip; (156 words, Aug 23, 2022)
- [Help with bounce - Sonatype Nexus Repository - Sonatype Community](/content/community/t/help-with-bounce/9186/1/index.html): New to Nexus, and the company purchased a Pro license. The license is now applied, but requires a bounce. There is no bounce button in the Admin console, and I read that the only way is thru the lifecycle API, which does&hellip; (156 words, Aug 23, 2022)
- [Allow Autosigned https certificate on Maven plugin - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/allow-autosigned-https-certificate-on-maven-plugin/9183/index.html): Hello, 
We have a test instance for lifecycle with an autosigned certificate. 
I try to launch maven plugin on a my projet and i can’t avoid the certificate check with -Dmaven.wagon.http.ssl.insecure=true option 

mvn cl&hellip; (190 words, Aug 23, 2022)
- [Allow Autosigned https certificate on Maven plugin - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/allow-autosigned-https-certificate-on-maven-plugin/9183/1/index.html): Hello, 
We have a test instance for lifecycle with an autosigned certificate. 
I try to launch maven plugin on a my projet and i can’t avoid the certificate check with -Dmaven.wagon.http.ssl.insecure=true option 

mvn cl&hellip; (190 words, Aug 23, 2022)
- [Nexus RM3 OSS h2 vulnerability - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-rm3-oss-h2-vulnerability/9179/2/index.html): NXRM3 version: 3.41.1-01 
h2 DB: 1.4.200 
Current version of h2 DB contains a few critical vulnerabilities: 

CVE-2021-23463
CVE-2021-42392
CVE-2022-23221

It seems these are fixed in latest 2.0.206+ versions. 
What’s th&hellip; (292 words, Aug 22, 2022)
- [Nexus RM3 OSS h2 vulnerability - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-rm3-oss-h2-vulnerability/9179/index.html): NXRM3 version: 3.41.1-01 
h2 DB: 1.4.200 
Current version of h2 DB contains a few critical vulnerabilities: 

CVE-2021-23463
CVE-2021-42392
CVE-2022-23221

It seems these are fixed in latest 2.0.206+ versions. 
What’s th&hellip; (293 words, Aug 22, 2022)
- [Nexus RM3 OSS h2 vulnerability - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-rm3-oss-h2-vulnerability/9179/1/index.html): NXRM3 version: 3.41.1-01 
h2 DB: 1.4.200 
Current version of h2 DB contains a few critical vulnerabilities: 

CVE-2021-23463
CVE-2021-42392
CVE-2022-23221

It seems these are fixed in latest 2.0.206+ versions. 
What’s th&hellip; (293 words, Aug 22, 2022)
- [org.eclipse.jetty.io.EofException: timeout - Sonatype Nexus Repository - Sonatype Community](/content/community/t/org-eclipse-jetty-io-eofexception-timeout/9175/index.html): Hi , 
We are getting error while downloading artifacts from Nexus. We have bunch of servers and failure is coming randomly on any of the server. Below is the error in Nexus logs. 
2022-08-22 05:18:21,073+0000 ERROR [qtp4&hellip; (236 words, Aug 22, 2022)
- [Nexus firewall Custom Massages after package is quarantined - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/nexus-firewall-custom-massages-after-package-is-quarantined/9173/index.html): Hi Team, 
can you please let me know how we can send custom massages to developer once he/her requested package is quarantined. (289 words, Aug 22, 2022)
- [Nexus firewall Custom Massages after package is quarantined - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/nexus-firewall-custom-massages-after-package-is-quarantined/9173/1/index.html): Hi Team, 
can you please let me know how we can send custom massages to developer once he/her requested package is quarantined. (289 words, Aug 22, 2022)
- [Explain Repair Index and Update Index Options - Sonatype Nexus Repository - Sonatype Community](/content/community/t/explain-repair-index-and-update-index-options/9158/index.html): Nexus Repository Manager OSS 2.15.1-02 
In light of several indexing issues we are experiencing (see here, here and here), I am confused. 
Building on some 3 year old advice, 



The lucene search indexes in your Nexus R&hellip; (1,018 words, Aug 19, 2022)
- [Nexus repository not accessible from Talend TAC - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-repository-not-accessible-from-talend-tac/9136/2/index.html): We are using nexus 3.35.0-02 and Talend TAC 8.0.1.20211109_1610. 
After I choose releases and click on “Apply”, I get the 500 error regardless of what I enter in GroupID field or leave it empty: 
  
I can browse and down&hellip; (107 words, Aug 18, 2022)
- [What's the best approach to push images to Nexus registery - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/whats-the-best-approach-to-push-images-to-nexus-registery/9146/index.html): Hello, I m new to this community! and Hope to get some feedback orientations on the following scenario. 
I have an existing pipeline that is creating/pushing  a docker image in nexus-registry  that contain a jar file. ev&hellip; (264 words, Aug 17, 2022)
- [What's the best approach to push images to Nexus registery - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/whats-the-best-approach-to-push-images-to-nexus-registery/9146/1/index.html): Hello, I m new to this community! and Hope to get some feedback orientations on the following scenario. 
I have an existing pipeline that is creating/pushing  a docker image in nexus-registry  that contain a jar file. ev&hellip; (197 words, Aug 17, 2022)
- [How can use nexus as mirror registry for docker - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/how-can-use-nexus-as-mirror-registry-for-docker/9142/index.html): I want use nexus as mirror registry in my docker .  Actually I want when I am perform pull and image from docker hub it could also reside image in nexus repository. Now I can pull image from docker hub but a copy from th&hellip; (217 words, Aug 17, 2022)
- [Nexus repository not accessible from Talend TAC - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-repository-not-accessible-from-talend-tac/9136/index.html): We are using nexus 3.35.0-02 and Talend TAC 8.0.1.20211109_1610. 
After I choose releases and click on “Apply”, I get the 500 error regardless of what I enter in GroupID field or leave it empty: 
  
I can browse and down&hellip; (101 words, Aug 17, 2022)
- [Nexus repository not accessible from Talend TAC - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-repository-not-accessible-from-talend-tac/9136/1/index.html): We are using nexus 3.35.0-02 and Talend TAC 8.0.1.20211109_1610. 
After I choose releases and click on “Apply”, I get the 500 error regardless of what I enter in GroupID field or leave it empty: 
  
I can browse and down&hellip; (101 words, Aug 17, 2022)
- [Join us in 1 HOUR for August Office Hours - 11 a.m EDT - Community Announcements - Sonatype Community](/content/community/t/join-us-in-1-hour-for-august-office-hours-11-a-m-edt/9131/6/index.html): Join us in one hour at 11 a.m. EDT (8 a.m. PDT | 4 p.m. BST) for our monthly, customer-exclusive Office Hours. This month, we’ll be discussing the following topics: 

Ideas.Sonatype.com - My Organization View
My.Sonaty&hellip; (213 words, Aug 16, 2022)
- [Outstanding questions in Sonatype blog about Docker images - Sonatype Nexus Repository - Sonatype Community](/content/community/t/outstanding-questions-in-sonatype-blog-about-docker-images/8864/13/index.html): A number of people have posted questions regarding the blog post below, and I have the same questions/problems. 


Specifically: 

Client.Timeout exceeded while awaiting headers
“disable-legacy-registry” is not attribute&hellip; (1,802 words, Aug 16, 2022)
- [Join us in 1 HOUR for August Office Hours - 11 a.m EDT - Community Announcements - Sonatype Community](/content/community/t/join-us-in-1-hour-for-august-office-hours-11-a-m-edt/9131/4/index.html): Join us in one hour at 11 a.m. EDT (8 a.m. PDT | 4 p.m. BST) for our monthly, customer-exclusive Office Hours. This month, we’ll be discussing the following topics: 

Ideas.Sonatype.com - My Organization View
My.Sonaty&hellip; (241 words, Aug 16, 2022)
- [Join us in 1 HOUR for August Office Hours - 11 a.m EDT - Community Announcements - Sonatype Community](/content/community/t/join-us-in-1-hour-for-august-office-hours-11-a-m-edt/9131/3/index.html): Join us in one hour at 11 a.m. EDT (8 a.m. PDT | 4 p.m. BST) for our monthly, customer-exclusive Office Hours. This month, we’ll be discussing the following topics: 

Ideas.Sonatype.com - My Organization View
My.Sonaty&hellip; (301 words, Aug 16, 2022)
- [Join us in 1 HOUR for August Office Hours - 11 a.m EDT - Community Announcements - Sonatype Community](/content/community/t/join-us-in-1-hour-for-august-office-hours-11-a-m-edt/9131/2/index.html): Join us in one hour at 11 a.m. EDT (8 a.m. PDT | 4 p.m. BST) for our monthly, customer-exclusive Office Hours. This month, we’ll be discussing the following topics: 

Ideas.Sonatype.com - My Organization View
My.Sonaty&hellip; (241 words, Aug 16, 2022)
- [Nexus uses wrong "local" time for cleanup policies - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-uses-wrong-local-time-for-cleanup-policies/9130/3/index.html): Hi! 
Could please someone suggest a fix for such issue 
I noticed that Nexus cleaned one artefact and after checking logs it seems that nexus thinks it’s September 2020 now 
nexus-2022-08-11.log.gz 
2022-08-11 03:00:27,5&hellip; (200 words, Aug 16, 2022)
- [Join us in 1 HOUR for August Office Hours - 11 a.m EDT - Community Announcements - Sonatype Community](/content/community/t/join-us-in-1-hour-for-august-office-hours-11-a-m-edt/9131/index.html): Join us in one hour at 11 a.m. EDT (8 a.m. PDT | 4 p.m. BST) for our monthly, customer-exclusive Office Hours. This month, we’ll be discussing the following topics: 

Ideas.Sonatype.com - My Organization View
My.Sonaty&hellip; (241 words, Aug 16, 2022)
- [Join us in 1 HOUR for August Office Hours - 11 a.m EDT - Community Announcements - Sonatype Community](/content/community/t/join-us-in-1-hour-for-august-office-hours-11-a-m-edt/9131/1/index.html): Join us in one hour at 11 a.m. EDT (8 a.m. PDT | 4 p.m. BST) for our monthly, customer-exclusive Office Hours. This month, we’ll be discussing the following topics: 

Ideas.Sonatype.com - My Organization View
My.Sonaty&hellip; (311 words, Aug 16, 2022)
- [Nexus uses wrong "local" time for cleanup policies - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-uses-wrong-local-time-for-cleanup-policies/9130/index.html): Hi! 
Could please someone suggest a fix for such issue 
I noticed that Nexus cleaned one artefact and after checking logs it seems that nexus thinks it’s September 2020 now 
nexus-2022-08-11.log.gz 
2022-08-11 03:00:27,5&hellip; (201 words, Aug 16, 2022)
- [Nexus uses wrong "local" time for cleanup policies - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-uses-wrong-local-time-for-cleanup-policies/9130/1/index.html): Hi! 
Could please someone suggest a fix for such issue 
I noticed that Nexus cleaned one artefact and after checking logs it seems that nexus thinks it’s September 2020 now 
nexus-2022-08-11.log.gz 
2022-08-11 03:00:27,5&hellip; (200 words, Aug 16, 2022)
- [TOMORROW: August Office Hours at 11am EDT - Community Announcements - Sonatype Community](/content/community/t/tomorrow-august-office-hours-at-11am-edt/9117/1/index.html): Join us Tuesday, August 16th at 11 a.m. EDT (8 a.m. PDT | 4 p.m. BST) for our monthly, customer-exclusive Office Hours. This month, we’ll be discussing the following topics: 

Ideas.Sonatype.com - My Organization View
M&hellip; (97 words, Aug 15, 2022)
- [Groups gives no access with SSO over SAML - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/groups-gives-no-access-with-sso-over-saml/9116/index.html): Hi all, I’ve gotten single-sign-on via SAML up and running, and also have the LDAP connection working as it should. I’m able to search for AD groups and assign a group to an organization in the IQ server, but for some re&hellip; (180 words, Aug 15, 2022)
- [Groups gives no access with SSO over SAML - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/groups-gives-no-access-with-sso-over-saml/9116/1/index.html): Hi all, I’ve gotten single-sign-on via SAML up and running, and also have the LDAP connection working as it should. I’m able to search for AD groups and assign a group to an organization in the IQ server, but for some re&hellip; (181 words, Aug 15, 2022)
- [Nexus 2 : Task execution failure; Exception(s) happened during optimizeAllRepositoriesIndex() - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-2-task-execution-failure-exception-s-happened-during-optimizeallrepositoriesindex/9100/index.html): Environment: Nexus Repository Manager OSS 2.15.1-02 on Linux VM 
Observed problem was a new hosted maven repo created, added to existing Nexus group, added artifacts to repo, unable to resolve using the group. Navigating&hellip; (210 words, Aug 10, 2022)
- [Nexus 2 : Task execution failure; Exception(s) happened during optimizeAllRepositoriesIndex() - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-2-task-execution-failure-exception-s-happened-during-optimizeallrepositoriesindex/9100/1/index.html): Environment: Nexus Repository Manager OSS 2.15.1-02 on Linux VM 
Observed problem was a new hosted maven repo created, added to existing Nexus group, added artifacts to repo, unable to resolve using the group. Navigating&hellip; (214 words, Aug 10, 2022)
- [Apt proxy is not signed - Sonatype Nexus Repository - Sonatype Community](/content/community/t/apt-proxy-is-not-signed/5942/5/index.html): I’ve configured a few apt proxies (NXRM v3.29.2) and they appear to be populating correctly, however after configuring my apt client to use these proxies (just using /etc/apt/sources.list, no auth), I get this when tryin&hellip; (266 words, Aug 10, 2022)
- [Join us for August Office Hours - Tuesday, August 16th at 11am EDT - Community Announcements - Sonatype Community](/content/community/t/join-us-for-august-office-hours-tuesday-august-16th-at-11am-edt/9090/index.html): Join us Tuesday, August 16th at 11 a.m. EDT (8 a.m. PDT | 4 p.m. BST) for our monthly, customer-exclusive Office Hours. This month, we’ll be discussing the following topics: 

Ideas.Sonatype.com - My Organization View
M&hellip; (198 words, Aug 9, 2022)
- [Join us for August Office Hours - Tuesday, August 16th at 11am EDT - Community Announcements - Sonatype Community](/content/community/t/join-us-for-august-office-hours-tuesday-august-16th-at-11am-edt/9090/1/index.html): Join us Tuesday, August 16th at 11 a.m. EDT (8 a.m. PDT | 4 p.m. BST) for our monthly, customer-exclusive Office Hours. This month, we’ll be discussing the following topics: 

Ideas.Sonatype.com - My Organization View
M&hellip; (106 words, Aug 9, 2022)
- [Nexus 2 : Task execution failure; Error rendering template /repositoryContentHtml.vm - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-2-task-execution-failure-error-rendering-template-repositorycontenthtml-vm/9075/index.html): Environment: Nexus Repository Manager OSS 2.15.1-02 on Linux VM 
We have observed the following pair of errors listed at bottom, titled : Task execution failure. 
Following response on prior (old) support (#36990) 

To f&hellip; (344 words, Aug 7, 2022)
- [Nexus 2 : Task execution failure; Error rendering template /repositoryContentHtml.vm - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-2-task-execution-failure-error-rendering-template-repositorycontenthtml-vm/9075/1/index.html): Environment: Nexus Repository Manager OSS 2.15.1-02 on Linux VM 
We have observed the following pair of errors listed at bottom, titled : Task execution failure. 
Following response on prior (old) support (#36990) 

To f&hellip; (524 words, Aug 7, 2022)
- [GitHub Packages as npm proxy - Sonatype Nexus Repository - Sonatype Community](/content/community/t/github-packages-as-npm-proxy/5034/5/index.html): Hello, 
is it possible to configure Nexus to use GitHub Packages as a npm proxy? HTTP authentication option doesn’t seem to work. 
Here are GitHub docs how to do it locally: https://docs.github.com/en/free-pro-team@lates&hellip; (697 words, Aug 5, 2022)
- [Update Your IQ Server License Threat Groups - Sonatype Labs - Sonatype Community](/content/community/t/update-your-iq-server-license-threat-groups/3094/23/index.html): The license threat group updater will apply the latest Sonatype provided license classification to your running IQ server’s license threat groups. This will alleviate any “License Threat Group not Assigned” policy violat&hellip; (692 words, Aug 2, 2022)
- [Quarantine after Policy import - #2 by msingh - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/quarantine-after-policy-import/8988/2/index.html): Hi, 
i want to ask, if all quarantined Components stay in Quarantine, when we import a new Policy. 
As i understand, only the Waivers are lost, is this correct? 
We´re planning to switch to application based control, whi&hellip; (22 words, Jul 28, 2022)
- [Javascript and detecting Node version - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/javascript-and-detecting-node-version/9035/index.html): I have scanned a node based application and it is returning a finding (sonatype-2012-0022) where the remedy is to run on version of node &gt;= 0.9.4.  My application is running on &gt;= 16 and it is defined in the package-lock&hellip; (88 words, Jul 27, 2022)
- [Javascript and detecting Node version - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/javascript-and-detecting-node-version/9035/1/index.html): I have scanned a node based application and it is returning a finding (sonatype-2012-0022) where the remedy is to run on version of node &gt;= 0.9.4.  My application is running on &gt;= 16 and it is defined in the package-lock&hellip; (88 words, Jul 27, 2022)
- [Policies for internal applications - Sonatype Lifecycle & Repository Firewall / Best Practices - Sonatype Community](/content/community/t/policies-for-internal-applications/9031/index.html): Hi, 
I am looking for policies that are suitable for internal applications (for only corporate users) that are not exposed to internet. 
Thanks 
Saeed (136 words, Jul 26, 2022)
- [Join us for July Office Hours - Tuesday, July 26th at 12pm EDT - Community Announcements - Sonatype Community](/content/community/t/join-us-for-july-office-hours-tuesday-july-26th-at-12pm-edt/9009/2/index.html): Join us Tuesday, July 26th at 12 p.m. EDT (9 a.m. PDT | 5 p.m. BST) for our monthly, customer-exclusive Office Hours. This month, we’ll be discussing the following topics: 

Nexus Repository Manager: Docker Subdomain C&hellip; (209 words, Jul 26, 2022)
- [TOMORROW: July Office Hours at 12pm EDT - Community Announcements - Sonatype Community](/content/community/t/tomorrow-july-office-hours-at-12pm-edt/9022/2/index.html): Join us Tuesday, July 26th at 12 p.m. EDT (9 a.m. PDT | 5 p.m. BST) for our monthly, customer-exclusive Office Hours. This month, we’ll be discussing the following topics: 

Nexus Repository Manager: Docker Subdomain C&hellip; (173 words, Jul 26, 2022)
- [Join us in 1 HOUR for July Office Hours - 12 p.m EDT - Community Announcements - Sonatype Community](/content/community/t/join-us-in-1-hour-for-july-office-hours-12-p-m-edt/9029/2/index.html): Join us in one hour at 12 p.m. EDT (9 a.m. PDT | 5 p.m. BST) for our monthly, customer-exclusive Office Hours. This month, we’ll be discussing the following topics: 

Nexus Repository Manager: Docker Subdomain Connecto&hellip; (172 words, Jul 26, 2022)
- [Join us in 1 HOUR for July Office Hours - 12 p.m EDT - Community Announcements - Sonatype Community](/content/community/t/join-us-in-1-hour-for-july-office-hours-12-p-m-edt/9029/index.html): Join us in one hour at 12 p.m. EDT (9 a.m. PDT | 5 p.m. BST) for our monthly, customer-exclusive Office Hours. This month, we’ll be discussing the following topics: 

Nexus Repository Manager: Docker Subdomain Connecto&hellip; (172 words, Jul 26, 2022)
- [Join us in 1 HOUR for July Office Hours - 12 p.m EDT - Community Announcements - Sonatype Community](/content/community/t/join-us-in-1-hour-for-july-office-hours-12-p-m-edt/9029/1/index.html): Join us in one hour at 12 p.m. EDT (9 a.m. PDT | 5 p.m. BST) for our monthly, customer-exclusive Office Hours. This month, we’ll be discussing the following topics: 

Nexus Repository Manager: Docker Subdomain Connecto&hellip; (183 words, Jul 26, 2022)
- [Nexus can't startup due `NullInjectedIntoNonNullable` on `RemovedAssetSender.java:48` - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-cant-startup-due-nullinjectedintononnullable-on-removedassetsender-java-48/9016/3/index.html): I’m trying develop an integration. But after install my bundle, the Nexus can’t startup. 
I found the following error report in the nexus.log: 
2022-07-22 06:43:39,735+0000 WARN  [FelixStartLevel]  *SYSTEM Sisu - Problem&hellip; (339 words, Jul 26, 2022)
- [Nexus can't startup due `NullInjectedIntoNonNullable` on `RemovedAssetSender.java:48` - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-cant-startup-due-nullinjectedintononnullable-on-removedassetsender-java-48/9016/2/index.html): I’m trying develop an integration. But after install my bundle, the Nexus can’t startup. 
I found the following error report in the nexus.log: 
2022-07-22 06:43:39,735+0000 WARN  [FelixStartLevel]  *SYSTEM Sisu - Problem&hellip; (342 words, Jul 25, 2022)
- [TOMORROW: July Office Hours at 12pm EDT - Community Announcements - Sonatype Community](/content/community/t/tomorrow-july-office-hours-at-12pm-edt/9022/index.html): Join us Tuesday, July 26th at 12 p.m. EDT (9 a.m. PDT | 5 p.m. BST) for our monthly, customer-exclusive Office Hours. This month, we’ll be discussing the following topics: 

Nexus Repository Manager: Docker Subdomain C&hellip; (101 words, Jul 25, 2022)
- [TOMORROW: July Office Hours at 12pm EDT - Community Announcements - Sonatype Community](/content/community/t/tomorrow-july-office-hours-at-12pm-edt/9022/1/index.html): Join us Tuesday, July 26th at 12 p.m. EDT (9 a.m. PDT | 5 p.m. BST) for our monthly, customer-exclusive Office Hours. This month, we’ll be discussing the following topics: 

Nexus Repository Manager: Docker Subdomain C&hellip; (200 words, Jul 25, 2022)
- [Source Control Evaluation REST API - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/source-control-evaluation-rest-api/8838/4/index.html): I’ve made a scripting to automate my process of import application from GitLab to Lifecycle using API. 
Tha whole process has worked , I’ve configured via API the applications with their SCM, but when I’ve used API “Sour&hellip; (233 words, Jul 25, 2022)
- [Nexus can't startup due `NullInjectedIntoNonNullable` on `RemovedAssetSender.java:48` - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-cant-startup-due-nullinjectedintononnullable-on-removedassetsender-java-48/9016/index.html): I’m trying develop an integration. But after install my bundle, the Nexus can’t startup. 
I found the following error report in the nexus.log: 
2022-07-22 06:43:39,735+0000 WARN  [FelixStartLevel]  *SYSTEM Sisu - Problem&hellip; (342 words, Jul 22, 2022)
- [Nexus can't startup due `NullInjectedIntoNonNullable` on `RemovedAssetSender.java:48` - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-cant-startup-due-nullinjectedintononnullable-on-removedassetsender-java-48/9016/1/index.html): I’m trying develop an integration. But after install my bundle, the Nexus can’t startup. 
I found the following error report in the nexus.log: 
2022-07-22 06:43:39,735+0000 WARN  [FelixStartLevel]  *SYSTEM Sisu - Problem&hellip; (341 words, Jul 22, 2022)
- [Which signal Nexus handles for gracefully shutdown SIGINT SIGTERM or SIGKILL - Sonatype Nexus Repository - Sonatype Community](/content/community/t/which-signal-nexus-handles-for-gracefully-shutdown-sigint-sigterm-or-sigkill/9010/index.html): Hello There, 
I want to know which signal Nexus handles for gracefully shutdown SIGINT SIGTERM or SIGKILL 
which I can mention in docker file to build Nexus image. 
Regards, 
SAM (114 words, Jul 20, 2022)
- [Which signal Nexus handles for gracefully shutdown SIGINT SIGTERM or SIGKILL - Sonatype Nexus Repository - Sonatype Community](/content/community/t/which-signal-nexus-handles-for-gracefully-shutdown-sigint-sigterm-or-sigkill/9010/1/index.html): Hello There, 
I want to know which signal Nexus handles for gracefully shutdown SIGINT SIGTERM or SIGKILL 
which I can mention in docker file to build Nexus image. 
Regards, 
SAM (104 words, Jul 20, 2022)
- [Join us for July Office Hours - Tuesday, July 26th at 12pm EDT - Community Announcements - Sonatype Community](/content/community/t/join-us-for-july-office-hours-tuesday-july-26th-at-12pm-edt/9009/index.html): Join us Tuesday, July 26th at 12 p.m. EDT (9 a.m. PDT | 5 p.m. BST) for our monthly, customer-exclusive Office Hours. This month, we’ll be discussing the following topics: 

Nexus Repository Manager: Docker Subdomain C&hellip; (107 words, Jul 20, 2022)
- [Join us for July Office Hours - Tuesday, July 26th at 12pm EDT - Community Announcements - Sonatype Community](/content/community/t/join-us-for-july-office-hours-tuesday-july-26th-at-12pm-edt/9009/1/index.html): Join us Tuesday, July 26th at 12 p.m. EDT (9 a.m. PDT | 5 p.m. BST) for our monthly, customer-exclusive Office Hours. This month, we’ll be discussing the following topics: 

Nexus Repository Manager: Docker Subdomain C&hellip; (188 words, Jul 20, 2022)
- [Nexus failed to start - IllegalArgumentException: null - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-failed-to-start-illegalargumentexception-null/8995/4/index.html): Hello, 
I’m using nexus-repository-manager version 3.40.101-2 on a debian machine (5.18.5-1). 
Java is version 8. 
Recently nexus stopped to start with the following error in the nexus.log: 
root@AppArtifactory:/opt/sona&hellip; (275 words, Jul 20, 2022)
- [Outstanding questions in Sonatype blog about Docker images - Sonatype Nexus Repository - Sonatype Community](/content/community/t/outstanding-questions-in-sonatype-blog-about-docker-images/8864/12/index.html): A number of people have posted questions regarding the blog post below, and I have the same questions/problems. 


Specifically: 

Client.Timeout exceeded while awaiting headers
“disable-legacy-registry” is not attribute&hellip; (1,613 words, Jul 18, 2022)
- [Nexus failed to start - IllegalArgumentException: null - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-failed-to-start-illegalargumentexception-null/8995/1/index.html): Hello, 
I’m using nexus-repository-manager version 3.40.101-2 on a debian machine (5.18.5-1). 
Java is version 8. 
Recently nexus stopped to start with the following error in the nexus.log: 
root@AppArtifactory:/opt/sona&hellip; (275 words, Jul 17, 2022)
- [Quarantine after Policy import - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/quarantine-after-policy-import/8988/index.html): Hi, 
i want to ask, if all quarantined Components stay in Quarantine, when we import a new Policy. 
As i understand, only the Waivers are lost, is this correct? 
We´re planning to switch to application based control, whi&hellip; (240 words, Jul 15, 2022)
- [Quarantine after Policy import - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/quarantine-after-policy-import/8988/1/index.html): Hi, 
i want to ask, if all quarantined Components stay in Quarantine, when we import a new Policy. 
As i understand, only the Waivers are lost, is this correct? 
We´re planning to switch to application based control, whi&hellip; (240 words, Jul 15, 2022)
- [How to upload files stored in s3(Blob Stores) - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-to-upload-files-stored-in-s3-blob-stores/8984/index.html): Hi, 
I’m currently using Blob Stores as s3, and when I go into s3 where they are stored, they are stored with .bytes and .properties extension. 
How do I upload with .bytes and .properties extension.? 
I tried zipping .b&hellip; (99 words, Jul 14, 2022)
- [How to upload files stored in s3(Blob Stores) - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-to-upload-files-stored-in-s3-blob-stores/8984/1/index.html): Hi, 
I’m currently using Blob Stores as s3, and when I go into s3 where they are stored, they are stored with .bytes and .properties extension. 
How do I upload with .bytes and .properties extension.? 
I tried zipping .b&hellip; (104 words, Jul 14, 2022)
- [Nexxus IQ server - Sonatype Lifecycle & Repository Firewall / Best Practices - Sonatype Community](/content/community/t/nexxus-iq-server/8964/2/index.html): Hello there, 
Is there a way to request a trial license for Nexus IQ server please? 
Thanks (136 words, Jul 12, 2022)
- [Nexxus IQ server - Sonatype Lifecycle & Repository Firewall / Best Practices - Sonatype Community](/content/community/t/nexxus-iq-server/8964/index.html): Hello there, 
Is there a way to request a trial license for Nexus IQ server please? 
Thanks (144 words, Jul 12, 2022)
- [Nexxus IQ server - Sonatype Lifecycle & Repository Firewall / Best Practices - Sonatype Community](/content/community/t/nexxus-iq-server/8964/1/index.html): Hello there, 
Is there a way to request a trial license for Nexus IQ server please? 
Thanks (185 words, Jul 12, 2022)
- [Exception running CLI tool in Java 17 - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/exception-running-cli-tool-in-java-17/8937/index.html): I am having this issue when running CLI tool (version 136) on Java 17. Our developer tells us there are no changes to their build platform. Here is the error: 
at com.sonatype.insight.scan.cli.PolicyEvaluatorCli.instanti&hellip; (190 words, Jul 8, 2022)
- [Exception running CLI tool in Java 17 - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/exception-running-cli-tool-in-java-17/8937/1/index.html): I am having this issue when running CLI tool (version 136) on Java 17. Our developer tells us there are no changes to their build platform. Here is the error: 
at com.sonatype.insight.scan.cli.PolicyEvaluatorCli.instanti&hellip; (189 words, Jul 8, 2022)
- [Updated Lifecycle UI Tour Video - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/updated-lifecycle-ui-tour-video/8929/index.html): If you’ve thought that Lifecycle has a new look and feel, you are correct! Check out this video that takes you on a tour of the updated Lifecycle user interface. (130 words, Jul 6, 2022)
- [Updated Lifecycle UI Tour Video - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/updated-lifecycle-ui-tour-video/8929/1/index.html): If you’ve thought that Lifecycle has a new look and feel, you are correct! Check out this video that takes you on a tour of the updated Lifecycle user interface. (110 words, Jul 6, 2022)
- [Have you heard about the Docker Subdomain Connector? - Community Announcements / News - Sonatype Community](/content/community/t/have-you-heard-about-the-docker-subdomain-connector/8928/index.html): Hello, Sonatype Community! Have you heard about the new Docker Subdomain Connector? It’s a feature now available for Nexus Repo Pro customers. Check out this video to learn more! (127 words, Jul 6, 2022)
- [Have you heard about the Docker Subdomain Connector? - Community Announcements / News - Sonatype Community](/content/community/t/have-you-heard-about-the-docker-subdomain-connector/8928/1/index.html): Hello, Sonatype Community! Have you heard about the new Docker Subdomain Connector? It’s a feature now available for Nexus Repo Pro customers. Check out this video to learn more! (114 words, Jul 6, 2022)
- [The BIG Nexus Firewall Thread - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/the-big-nexus-firewall-thread/8910/index.html): Are you starting your journey with Nexus Firewall, want to increase adoption or you have done it all? 
This thread is the main discussion place for customers to learn about Nexus Firewall’s best practices from our learni&hellip; (278 words, Jul 1, 2022)
- [The BIG Nexus Firewall Thread - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/the-big-nexus-firewall-thread/8910/1/index.html): Are you starting your journey with Nexus Firewall, want to increase adoption or you have done it all? 
This thread is the main discussion place for customers to learn about Nexus Firewall’s best practices from our learni&hellip; (289 words, Jul 1, 2022)
- [Outstanding questions in Sonatype blog about Docker images - Sonatype Nexus Repository - Sonatype Community](/content/community/t/outstanding-questions-in-sonatype-blog-about-docker-images/8864/11/index.html): A number of people have posted questions regarding the blog post below, and I have the same questions/problems. 


Specifically: 

Client.Timeout exceeded while awaiting headers
“disable-legacy-registry” is not attribute&hellip; (1,522 words, Jun 28, 2022)
- [Outstanding questions in Sonatype blog about Docker images - Sonatype Nexus Repository - Sonatype Community](/content/community/t/outstanding-questions-in-sonatype-blog-about-docker-images/8864/10/index.html): A number of people have posted questions regarding the blog post below, and I have the same questions/problems. 


Specifically: 

Client.Timeout exceeded while awaiting headers
“disable-legacy-registry” is not attribute&hellip; (1,228 words, Jun 27, 2022)
- [Outstanding questions in Sonatype blog about Docker images - Sonatype Nexus Repository - Sonatype Community](/content/community/t/outstanding-questions-in-sonatype-blog-about-docker-images/8864/9/index.html): A number of people have posted questions regarding the blog post below, and I have the same questions/problems. 


Specifically: 

Client.Timeout exceeded while awaiting headers
“disable-legacy-registry” is not attribute&hellip; (1,579 words, Jun 27, 2022)
- [Outstanding questions in Sonatype blog about Docker images - Sonatype Nexus Repository - Sonatype Community](/content/community/t/outstanding-questions-in-sonatype-blog-about-docker-images/8864/8/index.html): A number of people have posted questions regarding the blog post below, and I have the same questions/problems. 


Specifically: 

Client.Timeout exceeded while awaiting headers
“disable-legacy-registry” is not attribute&hellip; (1,543 words, Jun 25, 2022)
- [Outstanding questions in Sonatype blog about Docker images - Sonatype Nexus Repository - Sonatype Community](/content/community/t/outstanding-questions-in-sonatype-blog-about-docker-images/8864/6/index.html): A number of people have posted questions regarding the blog post below, and I have the same questions/problems. 


Specifically: 

Client.Timeout exceeded while awaiting headers
“disable-legacy-registry” is not attribute&hellip; (1,481 words, Jun 24, 2022)
- [Outstanding questions in Sonatype blog about Docker images - Sonatype Nexus Repository - Sonatype Community](/content/community/t/outstanding-questions-in-sonatype-blog-about-docker-images/8864/5/index.html): A number of people have posted questions regarding the blog post below, and I have the same questions/problems. 


Specifically: 

Client.Timeout exceeded while awaiting headers
“disable-legacy-registry” is not attribute&hellip; (1,832 words, Jun 24, 2022)
- [Outstanding questions in Sonatype blog about Docker images - Sonatype Nexus Repository - Sonatype Community](/content/community/t/outstanding-questions-in-sonatype-blog-about-docker-images/8864/4/index.html): A number of people have posted questions regarding the blog post below, and I have the same questions/problems. 


Specifically: 

Client.Timeout exceeded while awaiting headers
“disable-legacy-registry” is not attribute&hellip; (1,526 words, Jun 24, 2022)
- [Unable to get latest version when using api - Sonatype Nexus Repository - Sonatype Community](/content/community/t/unable-to-get-latest-version-when-using-api/8043/6/index.html): i am trying to use the download api to get the latest version of a release but it looks like the artifact that i am getting is the first on the list and not the latest. nexus version is OSS 3.25.1-04 . 
curl -v -X GET “[h&hellip; (424 words, Jun 24, 2022)
- [Outstanding questions in Sonatype blog about Docker images - Sonatype Nexus Repository - Sonatype Community](/content/community/t/outstanding-questions-in-sonatype-blog-about-docker-images/8864/2/index.html): A number of people have posted questions regarding the blog post below, and I have the same questions/problems. 


Specifically: 

Client.Timeout exceeded while awaiting headers
“disable-legacy-registry” is not attribute&hellip; (1,493 words, Jun 23, 2022)
- [Outstanding questions in Sonatype blog about Docker images - Sonatype Nexus Repository - Sonatype Community](/content/community/t/outstanding-questions-in-sonatype-blog-about-docker-images/8864/index.html): A number of people have posted questions regarding the blog post below, and I have the same questions/problems. 


Specifically: 

Client.Timeout exceeded while awaiting headers
“disable-legacy-registry” is not attribute&hellip; (1,237 words, Jun 23, 2022)
- [Outstanding questions in Sonatype blog about Docker images - Sonatype Nexus Repository - Sonatype Community](/content/community/t/outstanding-questions-in-sonatype-blog-about-docker-images/8864/1/index.html): A number of people have posted questions regarding the blog post below, and I have the same questions/problems. 


Specifically: 

Client.Timeout exceeded while awaiting headers
“disable-legacy-registry” is not attribute&hellip; (1,842 words, Jun 23, 2022)
- [Logging configuration to know who up/downloaded the assets - Sonatype Nexus Repository - Sonatype Community](/content/community/t/logging-configuration-to-know-who-up-downloaded-the-assets/8859/3/index.html): Does Nexus Repository log which users up/downloaded which asset? 
Can Nexus show it to the Log Viewer by the logging settings? 
If the logging setting couldn’t, is there a possible way to know which users up/downloaded t&hellip; (148 words, Jun 22, 2022)
- [TOMORROW: June Office Hours at 12 p.m. EDT - Community Announcements - Sonatype Community](/content/community/t/tomorrow-june-office-hours-at-12-p-m-edt/8851/2/index.html): Join us Wednesday, June 22nd at 12 p.m. EDT (9 a.m. PDT | 5 p.m. BST) for our monthly, customer-exclusive Office Hours. This month, we’ll be discussing the following topics: 

Best Practices: Nexus Firewall
Advanced Le&hellip; (99 words, Jun 22, 2022)
- [Join us in 1 HOUR for June Office Hours - 12 p.m EDT - Community Announcements - Sonatype Community](/content/community/t/join-us-in-1-hour-for-june-office-hours-12-p-m-edt/8860/2/index.html): Join us in an hour at 12 p.m. EDT (9 a.m. PDT | 5 p.m. BST) for our monthly, customer-exclusive Office Hours. This month, we’ll be discussing the following topics: 

Best Practices: Nexus Firewall
Advanced Legal Pack E&hellip; (171 words, Jun 22, 2022)
- [Join us in 1 HOUR for June Office Hours - 12 p.m EDT - Community Announcements - Sonatype Community](/content/community/t/join-us-in-1-hour-for-june-office-hours-12-p-m-edt/8860/1/index.html): Join us in an hour at 12 p.m. EDT (9 a.m. PDT | 5 p.m. BST) for our monthly, customer-exclusive Office Hours. This month, we’ll be discussing the following topics: 

Best Practices: Nexus Firewall
Advanced Legal Pack E&hellip; (172 words, Jun 22, 2022)
- [Logging configuration to know who up/downloaded the assets - Sonatype Nexus Repository - Sonatype Community](/content/community/t/logging-configuration-to-know-who-up-downloaded-the-assets/8859/index.html): Does Nexus Repository log which users up/downloaded which asset? 
Can Nexus show it to the Log Viewer by the logging settings? 
If the logging setting couldn’t, is there a possible way to know which users up/downloaded t&hellip; (146 words, Jun 22, 2022)
- [Logging configuration to know who up/downloaded the assets - Sonatype Nexus Repository - Sonatype Community](/content/community/t/logging-configuration-to-know-who-up-downloaded-the-assets/8859/1/index.html): Does Nexus Repository log which users up/downloaded which asset? 
Can Nexus show it to the Log Viewer by the logging settings? 
If the logging setting couldn’t, is there a possible way to know which users up/downloaded t&hellip; (146 words, Jun 22, 2022)
- [Sonartype Nexus Repository Manager - Vulnerability Scanner option - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonartype-nexus-repository-manager-vulnerability-scanner-option/8858/index.html): Hi Team, 
We are using Sonatype Nexus Repository Manager of Version OSS 3.30.0-01 and we are looking for an option to scan the packages being downloaded from the repositories whenever team perform build on their applicat&hellip; (482 words, Jun 22, 2022)
- [Sonartype Nexus Repository Manager - Vulnerability Scanner option - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonartype-nexus-repository-manager-vulnerability-scanner-option/8858/1/index.html): Hi Team, 
We are using Sonatype Nexus Repository Manager of Version OSS 3.30.0-01 and we are looking for an option to scan the packages being downloaded from the repositories whenever team perform build on their applicat&hellip; (482 words, Jun 22, 2022)
- [NxRM 3.39 will not start, complains of tampered keystore - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nxrm-3-39-will-not-start-complains-of-tampered-keystore/8856/index.html): Hi, 
I’ve been running NxRM 3.37 forever and wanted to update to v3.39 tonight, but run into multiple issues. 
First, some description on my setup. 
NxRM runs in my own custom (Alpine-based) docker image and is serviced &hellip; (333 words, Jun 22, 2022)
- [NxRM 3.39 will not start, complains of tampered keystore - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nxrm-3-39-will-not-start-complains-of-tampered-keystore/8856/1/index.html): Hi, 
I’ve been running NxRM 3.37 forever and wanted to update to v3.39 tonight, but run into multiple issues. 
First, some description on my setup. 
NxRM runs in my own custom (Alpine-based) docker image and is serviced &hellip; (334 words, Jun 22, 2022)
- [TOMORROW: June Office Hours at 12 p.m. EDT - Community Announcements - Sonatype Community](/content/community/t/tomorrow-june-office-hours-at-12-p-m-edt/8851/index.html): Join us Wednesday, June 22nd at 12 p.m. EDT (9 a.m. PDT | 5 p.m. BST) for our monthly, customer-exclusive Office Hours. This month, we’ll be discussing the following topics: 

Best Practices: Nexus Firewall
Advanced Le&hellip; (99 words, Jun 21, 2022)
- [TOMORROW: June Office Hours at 12 p.m. EDT - Community Announcements - Sonatype Community](/content/community/t/tomorrow-june-office-hours-at-12-p-m-edt/8851/1/index.html): Join us Wednesday, June 22nd at 12 p.m. EDT (9 a.m. PDT | 5 p.m. BST) for our monthly, customer-exclusive Office Hours. This month, we’ll be discussing the following topics: 

Best Practices: Nexus Firewall
Advanced Le&hellip; (173 words, Jun 21, 2022)
- [How to create an external ldap role using the REST API? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-to-create-an-external-ldap-role-using-the-rest-api/8842/index.html): What is the best way to create an external ldap role using the REST API? 
I thought that posting something like 
{
  &quot;description&quot;: &quot;ACL_GRAFANA_editor&quot;,
  &quot;id&quot;: &quot;ACL_GRAFANA_editor&quot;,
  &quot;source&quot;: &quot;ldap&quot;,
  &quot;name&quot;: &quot;ldap-&hellip; (168 words, Jun 20, 2022)
- [How to create an external ldap role using the REST API? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-to-create-an-external-ldap-role-using-the-rest-api/8842/1/index.html): What is the best way to create an external ldap role using the REST API? 
I thought that posting something like 
{
  &quot;description&quot;: &quot;ACL_GRAFANA_editor&quot;,
  &quot;id&quot;: &quot;ACL_GRAFANA_editor&quot;,
  &quot;source&quot;: &quot;ldap&quot;,
  &quot;name&quot;: &quot;ldap-&hellip; (168 words, Jun 20, 2022)
- [Nexus Search: All shards failed. How to force fresh elasticsearch instance? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-search-all-shards-failed-how-to-force-fresh-elasticsearch-instance/8816/2/index.html): I am currently running nexus 3.35.0 in docker. The nexus-data is in a CIFS Samba folder, bind-mounted via Docker. 
Last weekend, I stopped and started it. Nexus still works, I can pull and push packages, docker images, e&hellip; (489 words, Jun 20, 2022)
- [Source Control Evaluation REST API - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/source-control-evaluation-rest-api/8838/index.html): I’ve made a scripting to automate my process of import application from GitLab to Lifecycle using API. 
Tha whole process has worked , I’ve configured via API the applications with their SCM, but when I’ve used API “Sour&hellip; (247 words, Jun 17, 2022)
- [How to allow incomming request for specific users - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/how-to-allow-incomming-request-for-specific-users/8835/2/index.html): hello i’m new to Nexus. 
i found when nexus repository doesn’t have artifacts, it automatically downloads artifacts from public repository. 
what i want is only allowed users can download from public. 
i found a reposito&hellip; (316 words, Jun 17, 2022)
- [How to allow incomming request for specific users - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/how-to-allow-incomming-request-for-specific-users/8835/index.html): hello i’m new to Nexus. 
i found when nexus repository doesn’t have artifacts, it automatically downloads artifacts from public repository. 
what i want is only allowed users can download from public. 
i found a reposito&hellip; (319 words, Jun 17, 2022)
- [How to allow incomming request for specific users - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/how-to-allow-incomming-request-for-specific-users/8835/1/index.html): hello i’m new to Nexus. 
i found when nexus repository doesn’t have artifacts, it automatically downloads artifacts from public repository. 
what i want is only allowed users can download from public. 
i found a reposito&hellip; (313 words, Jun 17, 2022)
- [Join us for June Office Hours - Wednesday, June 22nd at 12pm EDT - Community Announcements - Sonatype Community](/content/community/t/join-us-for-june-office-hours-wednesday-june-22nd-at-12pm-edt/8829/index.html): Join us Wednesday, June 22nd at 12 p.m. EDT (9 a.m. PDT | 5 p.m. BST) for our monthly, customer-exclusive Office Hours. This month, we’ll be discussing the following topics: 


Best Practices: Nexus Firewall 


Advance&hellip; (175 words, Jun 15, 2022)
- [Join us for June Office Hours - Wednesday, June 22nd at 12pm EDT - Community Announcements - Sonatype Community](/content/community/t/join-us-for-june-office-hours-wednesday-june-22nd-at-12pm-edt/8829/1/index.html): Join us Wednesday, June 22nd at 12 p.m. EDT (9 a.m. PDT | 5 p.m. BST) for our monthly, customer-exclusive Office Hours. This month, we’ll be discussing the following topics: 


Best Practices: Nexus Firewall 


Advance&hellip; (115 words, Jun 15, 2022)
- [Nexus Search: All shards failed. How to force fresh elasticsearch instance? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-search-all-shards-failed-how-to-force-fresh-elasticsearch-instance/8816/index.html): I am currently running nexus 3.35.0 in docker. The nexus-data is in a CIFS Samba folder, bind-mounted via Docker. 
Last weekend, I stopped and started it. Nexus still works, I can pull and push packages, docker images, e&hellip; (561 words, Jun 13, 2022)
- [Nexus Search: All shards failed. How to force fresh elasticsearch instance? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-search-all-shards-failed-how-to-force-fresh-elasticsearch-instance/8816/1/index.html): I am currently running nexus 3.35.0 in docker. The nexus-data is in a CIFS Samba folder, bind-mounted via Docker. 
Last weekend, I stopped and started it. Nexus still works, I can pull and push packages, docker images, e&hellip; (410 words, Jun 13, 2022)
- [Getting paginated results from REST API with continuation token - Sonatype Nexus Repository - Sonatype Community](/content/community/t/getting-paginated-results-from-rest-api-with-continuation-token/8813/index.html): Posted this here: 


Can anyone recommend a strategy in Node for retrieving the full list of results from the REST API with continuation token using recursive fetch? (423 words, Jun 11, 2022)
- [How to enable FIPS mode in nexus container for deploying in gov cloud - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-to-enable-fips-mode-in-nexus-container-for-deploying-in-gov-cloud/8786/1/index.html): Need help to enable FIPS mode in nexus container image so that we can deploy it in gov cloud. 
Base image: Photon 3.0 (117 words, Jun 7, 2022)
- [About the Central Repository category - Central Repository - Sonatype Community](/content/community/t/about-the-central-repository-category/8783/index.html): Ask questions and follow discussions about Central Repository. (86 words, Jun 7, 2022)
- [JIRA integration is not enabled; skipping issue creation - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/jira-integration-is-not-enabled-skipping-issue-creation/8750/4/index.html): Hello everyone, 
I’m trying to leverage the tickets auto-creation using the Nexus IQ jira plugin and made sure the webhook tests show SUCCESS, the applications are mapped jira projects but I found this error in the logs &hellip; (273 words, Jun 1, 2022)
- [Maintenance Downtime of Community on Friday, May 27, at 6:30 pm EDT - Community Announcements - Sonatype Community](/content/community/t/maintenance-downtime-of-community-on-friday-may-27-at-6-30-pm-edt/8734/6/index.html): Starting around 6:30 PM EDT on Friday, May 27, the Community forum will be brought offline to perform necessary maintenance and upgrades. 
This downtime is localized to just the community forum, and will not affect other&hellip; (149 words, Jun 1, 2022)
- [JIRA integration is not enabled; skipping issue creation - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/jira-integration-is-not-enabled-skipping-issue-creation/8750/index.html): Hello everyone, 
I’m trying to leverage the tickets auto-creation using the Nexus IQ jira plugin and made sure the webhook tests show SUCCESS, the applications are mapped jira projects but I found this error in the logs &hellip; (273 words, May 31, 2022)
- [JIRA integration is not enabled; skipping issue creation - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/jira-integration-is-not-enabled-skipping-issue-creation/8750/1/index.html): Hello everyone, 
I’m trying to leverage the tickets auto-creation using the Nexus IQ jira plugin and made sure the webhook tests show SUCCESS, the applications are mapped jira projects but I found this error in the logs &hellip; (274 words, May 31, 2022)
- [Nexus 2.15 upgrade to nexus 3 latest consuming a large amount of memory and stuck since hours - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-2-15-upgrade-to-nexus-3-latest-consuming-a-large-amount-of-memory-and-stuck-since-hours/8730/2/index.html): Hello, 
I’m upgrading my OSS nexus repository from version 2.15.1-02 to 3.39.0-01 
I’m using docker as my installation method and volumes to persist data 
I’m using the download method to transfer 60 GB of data from nexu&hellip; (230 words, May 30, 2022)
- [Maintenance Downtime of Community on Friday, May 27, at 6:30 pm EDT - Community Announcements - Sonatype Community](/content/community/t/maintenance-downtime-of-community-on-friday-may-27-at-6-30-pm-edt/8734/index.html): Starting around 6:30 PM EDT on Friday, May 27, the Community forum will be brought offline to perform necessary maintenance and upgrades. 
This downtime is localized to just the community forum, and will not affect other&hellip; (143 words, May 27, 2022)
- [Maintenance Downtime of Community on Friday, May 27, at 6:30 pm EDT - Community Announcements - Sonatype Community](/content/community/t/maintenance-downtime-of-community-on-friday-may-27-at-6-30-pm-edt/8734/1/index.html): Starting around 6:30 PM EDT on Friday, May 27, the Community forum will be brought offline to perform necessary maintenance and upgrades. 
This downtime is localized to just the community forum, and will not affect other&hellip; (143 words, May 27, 2022)
- [Nexus 2.15 upgrade to nexus 3 latest consuming a large amount of memory and stuck since hours - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-2-15-upgrade-to-nexus-3-latest-consuming-a-large-amount-of-memory-and-stuck-since-hours/8730/index.html): Hello, 
I’m upgrading my OSS nexus repository from version 2.15.1-02 to 3.39.0-01 
I’m using docker as my installation method and volumes to persist data 
I’m using the download method to transfer 60 GB of data from nexu&hellip; (228 words, May 27, 2022)
- [Join us in 1 HOUR for May Office Hours - 10 a.m. EDT - Community Announcements - Sonatype Community](/content/community/t/join-us-in-1-hour-for-may-office-hours-10-a-m-edt/8721/index.html): Join us in an hour for our monthly customer-exclusive Office Hours! This month, we’ll be discussing the following topics: 

Nexus Repository Manager 2 to 3 Migration Discussion
Data Insights - Nudges &amp; Anomalies
2022 E&hellip; (160 words, May 25, 2022)
- [TOMORROW: May Office Hours at 10 a.m EDT - Community Announcements - Sonatype Community](/content/community/t/tomorrow-may-office-hours-at-10-a-m-edt/8719/2/index.html): Join us tomorrow, Wednesday, May 25th at 10 a.m. EDT (7 a.m. PDT | 3 p.m. BST), for our monthly customer-exclusive Office Hours . This month, we’ll be discussing the following topics: 

Nexus Repository Manager 2 to 3 &hellip; (175 words, May 24, 2022)
- [TOMORROW: May Office Hours at 10 a.m EDT - Community Announcements - Sonatype Community](/content/community/t/tomorrow-may-office-hours-at-10-a-m-edt/8719/index.html): Join us tomorrow, Wednesday, May 25th at 10 a.m. EDT (7 a.m. PDT | 3 p.m. BST), for our monthly customer-exclusive Office Hours . This month, we’ll be discussing the following topics: 

Nexus Repository Manager 2 to 3 &hellip; (178 words, May 24, 2022)
- [TOMORROW: May Office Hours at 10 a.m EDT - Community Announcements - Sonatype Community](/content/community/t/tomorrow-may-office-hours-at-10-a-m-edt/8719/1/index.html): Join us tomorrow, Wednesday, May 25th at 10 a.m. EDT (7 a.m. PDT | 3 p.m. BST), for our monthly customer-exclusive Office Hours . This month, we’ll be discussing the following topics: 

Nexus Repository Manager 2 to 3 &hellip; (168 words, May 24, 2022)
- [Pulling NPM artifact provided by Content Selector results in 403 error - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/pulling-npm-artifact-provided-by-content-selector-results-in-403-error/8715/4/index.html): Overview 
Similar to my other post, I am using Content Selectors to provide filtered access for Company A to Company B’s hosted repositories. While in the previous post, I was able to get Maven builds to work properly, I&hellip; (884 words, May 23, 2022)
- [Pulling NPM artifact provided by Content Selector results in 403 error - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/pulling-npm-artifact-provided-by-content-selector-results-in-403-error/8715/index.html): Overview 
Similar to my other post, I am using Content Selectors to provide filtered access for Company A to Company B’s hosted repositories. While in the previous post, I was able to get Maven builds to work properly, I&hellip; (1,047 words, May 23, 2022)
- [Pulling NPM artifact provided by Content Selector results in 403 error - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/pulling-npm-artifact-provided-by-content-selector-results-in-403-error/8715/1/index.html): Overview 
Similar to my other post, I am using Content Selectors to provide filtered access for Company A to Company B’s hosted repositories. While in the previous post, I was able to get Maven builds to work properly, I&hellip; (1,046 words, May 23, 2022)
- [Join us for May Office Hours - Wednesday, May 25th at 10am EDT - Community Announcements - Sonatype Community](/content/community/t/join-us-for-may-office-hours-wednesday-may-25th-at-10am-edt/8688/2/index.html): Join us Wednesday, May 25th at 10 a.m. EDT (7 a.m. PDT | 3 p.m. BST) for our monthly customer-exclusive Office Hours . This month, we’ll be discussing the following topics: 

Nexus Repository Manager 2 to 3 Migration D&hellip; (176 words, May 18, 2022)
- [Join us for May Office Hours - Wednesday, May 25th at 10am EDT - Community Announcements - Sonatype Community](/content/community/t/join-us-for-may-office-hours-wednesday-may-25th-at-10am-edt/8688/index.html): Join us Wednesday, May 25th at 10 a.m. EDT (7 a.m. PDT | 3 p.m. BST) for our monthly customer-exclusive Office Hours . This month, we’ll be discussing the following topics: 

Nexus Repository Manager 2 to 3 Migration D&hellip; (188 words, May 18, 2022)
- [Join us for May Office Hours - Wednesday, May 25th at 10am EDT - Community Announcements - Sonatype Community](/content/community/t/join-us-for-may-office-hours-wednesday-may-25th-at-10am-edt/8688/1/index.html): Join us Wednesday, May 25th at 10 a.m. EDT (7 a.m. PDT | 3 p.m. BST) for our monthly customer-exclusive Office Hours . This month, we’ll be discussing the following topics: 

Nexus Repository Manager 2 to 3 Migration D&hellip; (178 words, May 18, 2022)
- [AWS CodeArtifact support in InnerSource configuration - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/aws-codeartifact-support-in-innersource-configuration/8657/9/index.html): Currently the InnerSource repository configuration supports only NXRM3 repositories. 
Do you plan also to add support for e.g. AWS CodeArtifact repositories? 
On that note, the “TEST” button behaviour is really misleadin&hellip; (712 words, May 16, 2022)
- [AWS CodeArtifact support in InnerSource configuration - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/aws-codeartifact-support-in-innersource-configuration/8657/index.html): Currently the InnerSource repository configuration supports only NXRM3 repositories. 
Do you plan also to add support for e.g. AWS CodeArtifact repositories? 
On that note, the “TEST” button behaviour is really misleadin&hellip; (922 words, May 13, 2022)
- [AWS CodeArtifact support in InnerSource configuration - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/aws-codeartifact-support-in-innersource-configuration/8657/1/index.html): Currently the InnerSource repository configuration supports only NXRM3 repositories. 
Do you plan also to add support for e.g. AWS CodeArtifact repositories? 
On that note, the “TEST” button behaviour is really misleadin&hellip; (890 words, May 13, 2022)
- [Get PolicyVioalationIds for Repository - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/get-policyvioalationids-for-repository/8653/index.html): Hello, 
i am investigate, how i can get all Polcy Violation for an Repository? 
Have only found the &quot; Policy Violation REST API&quot; which gives me only the applicationViolations. 
For the Background: I want to import a new &hellip; (112 words, May 13, 2022)
- [Get PolicyVioalationIds for Repository - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/get-policyvioalationids-for-repository/8653/1/index.html): Hello, 
i am investigate, how i can get all Polcy Violation for an Repository? 
Have only found the &quot; Policy Violation REST API&quot; which gives me only the applicationViolations. 
For the Background: I want to import a new &hellip; (114 words, May 13, 2022)
- [Recalculate vulnerabilities statistics with ipv6? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/recalculate-vulnerabilities-statistics-with-ipv6/8648/2/index.html): I recently upgraded to 3.38.1 and I’m attempting to try out the log4j vulnerability visualizer. But when I run the “recalculate vulnerabilities statistics” I get an error about trying to parse an ipv6 address as a date. &hellip; (183 words, May 12, 2022)
- [Recalculate vulnerabilities statistics with ipv6? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/recalculate-vulnerabilities-statistics-with-ipv6/8648/index.html): I recently upgraded to 3.38.1 and I’m attempting to try out the log4j vulnerability visualizer. But when I run the “recalculate vulnerabilities statistics” I get an error about trying to parse an ipv6 address as a date. &hellip; (186 words, May 11, 2022)
- [Automatic SCM configuration not working? - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/automatic-scm-configuration-not-working/8626/3/index.html): We are trying to set up automatic SCM application configuration. 
According to the documentation, when this is enabled, when a nexus-iq-cli scan is done, the SCM for that application should be auto-configured, which is n&hellip; (282 words, May 10, 2022)
- [Download latest snapshot artifact from Nexus Repository Manager OSS 3.30.0-01 using wget command - Sonatype Nexus Repository - Sonatype Community](/content/community/t/download-latest-snapshot-artifact-from-nexus-repository-manager-oss-3-30-0-01-using-wget-command/6286/6/index.html): I am facing difficulty downloading the latest  snapshot version from Nexus Repository Manager OSS 3.30.0-01 using wget  command 
since the format is maven artefacts snapshots version are appended with 
timestamp along wi&hellip; (247 words, May 9, 2022)
- [Azure DevOps Nexus IQ Task - Scan Targets - Configuration unclear/incomplete - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/azure-devops-nexus-iq-task-scan-targets-configuration-unclear-incomplete/8628/index.html): using: “Nexus IQ for Azure DevOps” v1.3.28 (classic mode) 
Maybe someone could help me to understand how to configure the “Scan Targets” in the right way. 
We have a node.js project which should be scanned. The following&hellip; (208 words, May 5, 2022)
- [Azure DevOps Nexus IQ Task - Scan Targets - Configuration unclear/incomplete - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/azure-devops-nexus-iq-task-scan-targets-configuration-unclear-incomplete/8628/1/index.html): using: “Nexus IQ for Azure DevOps” v1.3.28 (classic mode) 
Maybe someone could help me to understand how to configure the “Scan Targets” in the right way. 
We have a node.js project which should be scanned. The following&hellip; (208 words, May 5, 2022)
- [Automatic SCM configuration not working? - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/automatic-scm-configuration-not-working/8626/index.html): We are trying to set up automatic SCM application configuration. 
According to the documentation, when this is enabled, when a nexus-iq-cli scan is done, the SCM for that application should be auto-configured, which is n&hellip; (280 words, May 5, 2022)
- [Automatic SCM configuration not working? - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/automatic-scm-configuration-not-working/8626/1/index.html): We are trying to set up automatic SCM application configuration. 
According to the documentation, when this is enabled, when a nexus-iq-cli scan is done, the SCM for that application should be auto-configured, which is n&hellip; (275 words, May 5, 2022)
- [Sonatype repo caches error page when .module files doenst exist - Sonatype Exchange / Sonatype Exchange Discussion - Sonatype Community](/content/community/t/sonatype-repo-caches-error-page-when-module-files-doenst-exist/8623/index.html): Hi all, i’m not sure if this is the right place to address this issue, but we’re experiencing problems with the sonatype repository. 
We try to download a few gradle dependencies via maven central / sonatype repo. 
The g&hellip; (174 words, May 5, 2022)
- [Sonatype repo caches error page when .module files doenst exist - Sonatype Exchange / Sonatype Exchange Discussion - Sonatype Community](/content/community/t/sonatype-repo-caches-error-page-when-module-files-doenst-exist/8623/1/index.html): Hi all, i’m not sure if this is the right place to address this issue, but we’re experiencing problems with the sonatype repository. 
We try to download a few gradle dependencies via maven central / sonatype repo. 
The g&hellip; (177 words, May 5, 2022)
- [Nexus IQ Server: Release 136 - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/nexus-iq-server-release-136/8612/index.html): Hi Sonatype Community, 
We’re excited to announce the release of IQ Server 136 
Check out the full release notes for more information and discover some of the highlights below. 
Firewall: New Quarantined Component View (&hellip; (322 words, May 4, 2022)
- [Unable to delete repository when database is frozen - Sonatype Nexus Repository - Sonatype Community](/content/community/t/unable-to-delete-repository-when-database-is-frozen/8605/index.html): Hi Team, 
We have upgraded the Nexus application from v3.30.0-01 to v3.38.1-01. 
After upgrading, we are not able to delete a repository. 
It showing error as &quot; Unable to delete repository when database is frozen… Databa&hellip; (397 words, May 2, 2022)
- [Unable to delete repository when database is frozen - Sonatype Nexus Repository - Sonatype Community](/content/community/t/unable-to-delete-repository-when-database-is-frozen/8605/1/index.html): Hi Team, 
We have upgraded the Nexus application from v3.30.0-01 to v3.38.1-01. 
After upgrading, we are not able to delete a repository. 
It showing error as &quot; Unable to delete repository when database is frozen… Databa&hellip; (396 words, May 2, 2022)
- [Maintenance Downtime of Community on Thursday, April 28, at 7:30 pm EDT - Community Announcements - Sonatype Community](/content/community/t/maintenance-downtime-of-community-on-thursday-april-28-at-7-30-pm-edt/8594/5/index.html): Starting around 7:30 PM EDT on Thursday, April 28, the Community forum will be brought offline to perform necessary maintenance and upgrades. 
This downtime is localized to just the community forum, and will not affect o&hellip; (150 words, Apr 29, 2022)
- [Login errors might require password reset - Community Announcements - Sonatype Community](/content/community/t/login-errors-might-require-password-reset/8441/5/index.html): If you experience login errors, recent maintenance to our authentication system may require some users to reset their password. (102 words, Apr 28, 2022)
- [Maintenance Downtime of Community on Thursday, April 28, at 7:30 pm EDT - Community Announcements - Sonatype Community](/content/community/t/maintenance-downtime-of-community-on-thursday-april-28-at-7-30-pm-edt/8594/index.html): Starting around 7:30 PM EDT on Thursday, April 28, the Community forum will be brought offline to perform necessary maintenance and upgrades. 
This downtime is localized to just the community forum, and will not affect o&hellip; (162 words, Apr 28, 2022)
- [Maintenance Downtime of Community on Thursday, April 28, at 7:30 pm EDT - Community Announcements - Sonatype Community](/content/community/t/maintenance-downtime-of-community-on-thursday-april-28-at-7-30-pm-edt/8594/1/index.html): Starting around 7:30 PM EDT on Thursday, April 28, the Community forum will be brought offline to perform necessary maintenance and upgrades. 
This downtime is localized to just the community forum, and will not affect o&hellip; (158 words, Apr 28, 2022)
- [Join us in 1 HOUR for April Office Hours - 11 a.m. EDT - Community Announcements - Sonatype Community](/content/community/t/join-us-in-1-hour-for-april-office-hours-11-a-m-edt/8593/index.html): Join us in ONE HOUR for our April Office Hours call, starting at 11 a.m. EDT! 
This month, we’ll be discussing the following topics: 

Anonymous Developer View - Best Practices (Nexus Firewall)
Advanced Search Updates &hellip; (96 words, Apr 28, 2022)
- [Join us in 1 HOUR for April Office Hours - 11 a.m. EDT - Community Announcements - Sonatype Community](/content/community/t/join-us-in-1-hour-for-april-office-hours-11-a-m-edt/8593/1/index.html): Join us in ONE HOUR for our April Office Hours call, starting at 11 a.m. EDT! 
This month, we’ll be discussing the following topics: 

Anonymous Developer View - Best Practices (Nexus Firewall)
Advanced Search Updates &hellip; (166 words, Apr 28, 2022)
- [Nginx client body max size limit - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/nginx-client-body-max-size-limit/8587/2/index.html): Hi, 
Recently we faced an issue while uploading a large file to nexus with nginx throwing error, 
413 Request Entity Too Large

413 Request Entity Too Large
nginx/1.19.10
File size we are trying to upload is of 2.7G , is&hellip; (94 words, Apr 27, 2022)
- [Nginx client body max size limit - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/nginx-client-body-max-size-limit/8587/index.html): Hi, 
Recently we faced an issue while uploading a large file to nexus with nginx throwing error, 
413 Request Entity Too Large

413 Request Entity Too Large
nginx/1.19.10
File size we are trying to upload is of 2.7G , is&hellip; (98 words, Apr 27, 2022)
- [Nginx client body max size limit - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/nginx-client-body-max-size-limit/8587/1/index.html): Hi, 
Recently we faced an issue while uploading a large file to nexus with nginx throwing error, 
413 Request Entity Too Large

413 Request Entity Too Large
nginx/1.19.10
File size we are trying to upload is of 2.7G , is&hellip; (104 words, Apr 27, 2022)
- [TOMORROW: April Office Hours at 11 a.m EDT - Community Announcements - Sonatype Community](/content/community/t/tomorrow-april-office-hours-at-11-a-m-edt/8584/2/index.html): Join us tomorrow, Thursday, April 28th at 11 a.m. EDT (8 a.m. PDT | 4 p.m. BST), for our monthly customer-exclusive Office Hours . This month, we’ll be discussing the following topics: 

Anonymous Developer View - Best&hellip; (104 words, Apr 27, 2022)
- [TOMORROW: April Office Hours at 11 a.m EDT - Community Announcements - Sonatype Community](/content/community/t/tomorrow-april-office-hours-at-11-a-m-edt/8584/index.html): Join us tomorrow, Thursday, April 28th at 11 a.m. EDT (8 a.m. PDT | 4 p.m. BST), for our monthly customer-exclusive Office Hours . This month, we’ll be discussing the following topics: 

Anonymous Developer View - Best&hellip; (168 words, Apr 27, 2022)
- [Springshell Vulnerability Update - Community Announcements - Sonatype Community](/content/community/t/springshell-vulnerability-update/8453/13/index.html): Hi Sonatype Community, 
Early Wednesday morning (GMT), allegations began to appear on the Internet about a new remote code execution flaw that affects Spring Framework. This vulnerability, dubbed by some as “Springshell”&hellip; (838 words, Apr 25, 2022)
- [Join us for April Office Hours - Thursday, April 28th at 11am EDT - Community Announcements - Sonatype Community](/content/community/t/join-us-for-april-office-hours-thursday-april-28th-at-11am-edt/8557/index.html): Join us Thursday, April 28th at 11 a.m. EDT (8 a.m. PDT | 4 p.m. BST) for our monthly customer-exclusive Office Hours . This month, we’ll be discussing the following topics: 


Anonymous Developer View - Best Practices&hellip; (105 words, Apr 21, 2022)
- [Join us for April Office Hours - Thursday, April 28th at 11am EDT - Community Announcements - Sonatype Community](/content/community/t/join-us-for-april-office-hours-thursday-april-28th-at-11am-edt/8557/1/index.html): Join us Thursday, April 28th at 11 a.m. EDT (8 a.m. PDT | 4 p.m. BST) for our monthly customer-exclusive Office Hours . This month, we’ll be discussing the following topics: 


Anonymous Developer View - Best Practices&hellip; (172 words, Apr 21, 2022)
- [Yum/apt proxy snapshot error - Failure servicing MKCOL - Sonatype Nexus Repository - Sonatype Community](/content/community/t/yum-apt-proxy-snapshot-error-failure-servicing-mkcol/8547/index.html): Hi All, 
We’re using nexus repo OSS 3.30.1-01. I’m trying to create meta snapshots for yum/apt proxy repos however we’re getting an HTTP 500 response. We can’t find any documentation for the snapshot method either. 
This&hellip; (411 words, Apr 20, 2022)
- [Yum/apt proxy snapshot error - Failure servicing MKCOL - Sonatype Nexus Repository - Sonatype Community](/content/community/t/yum-apt-proxy-snapshot-error-failure-servicing-mkcol/8547/1/index.html): Hi All, 
We’re using nexus repo OSS 3.30.1-01. I’m trying to create meta snapshots for yum/apt proxy repos however we’re getting an HTTP 500 response. We can’t find any documentation for the snapshot method either. 
This&hellip; (714 words, Apr 20, 2022)
- [Pulling Nexus repository artifacts into IntelliJ (ultimate) python project - Sonatype Nexus Repository - Sonatype Community](/content/community/t/pulling-nexus-repository-artifacts-into-intellij-ultimate-python-project/8538/index.html): Hi eb 
I’d like to pull artifacts from our organization’s nexus repository, to IntelliJ’s 
(ultimate addition) python project. 
This link claims this integration is supported (since nexus 3.15): 

but listing the repo UR&hellip; (163 words, Apr 19, 2022)
- [Pulling Nexus repository artifacts into IntelliJ (ultimate) python project - Sonatype Nexus Repository - Sonatype Community](/content/community/t/pulling-nexus-repository-artifacts-into-intellij-ultimate-python-project/8538/1/index.html): Hi eb 
I’d like to pull artifacts from our organization’s nexus repository, to IntelliJ’s 
(ultimate addition) python project. 
This link claims this integration is supported (since nexus 3.15): 

but listing the repo UR&hellip; (174 words, Apr 19, 2022)
- [Docker Images for Nexus instance - Sonatype Nexus Repository - Sonatype Community](/content/community/t/docker-images-for-nexus-instance/8535/index.html): Using Nexus2-OSS 
We have been using the traditional download tarball [1] per the download [2]/ install [3]  instructions. 
My colleague happened to notice there were Docker images available at: sonatype/nexus, but I see&hellip; (112 words, Apr 19, 2022)
- [Docker Images for Nexus instance - Sonatype Nexus Repository - Sonatype Community](/content/community/t/docker-images-for-nexus-instance/8535/1/index.html): Using Nexus2-OSS 
We have been using the traditional download tarball [1] per the download [2]/ install [3]  instructions. 
My colleague happened to notice there were Docker images available at: sonatype/nexus, but I see&hellip; (182 words, Apr 19, 2022)
- [New Resource - Best Practices on Open Source Components - Community Announcements / News - Sonatype Community](/content/community/t/new-resource-best-practices-on-open-source-components/8504/3/index.html): Check out this new resource on open source components best practices – Definitive Guide to Open Source Component Best Practices. See what we think are the best practices on open source components – how to choose them and&hellip; (117 words, Apr 14, 2022)
- [Nexus IQ Gitlab Merge Request Commenting - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/nexus-iq-gitlab-merge-request-commenting/8518/index.html): After reading and following the SCM integration guidelines required to perform MR commenting I am unable to proceed. 
Functionality is discussed here: 
https://help.sonatype.com/integrations/nexus-iq-for-scm/pull-request&hellip; (147 words, Apr 13, 2022)
- [New Resource - Best Practices on Open Source Components - Community Announcements / News - Sonatype Community](/content/community/t/new-resource-best-practices-on-open-source-components/8504/index.html): Check out this new resource on open source components best practices – Definitive Guide to Open Source Component Best Practices. See what we think are the best practices on open source components – how to choose them and&hellip; (194 words, Apr 11, 2022)
- [New Resource - Best Practices on Open Source Components - Community Announcements / News - Sonatype Community](/content/community/t/new-resource-best-practices-on-open-source-components/8504/1/index.html): Check out this new resource on open source components best practices – Definitive Guide to Open Source Component Best Practices. See what we think are the best practices on open source components – how to choose them and&hellip; (207 words, Apr 11, 2022)
- [Download latest snapshot artifact from Nexus Repository Manager OSS 3.30.0-01 using wget command - Sonatype Nexus Repository - Sonatype Community](/content/community/t/download-latest-snapshot-artifact-from-nexus-repository-manager-oss-3-30-0-01-using-wget-command/6286/4/index.html): I am facing difficulty downloading the latest  snapshot version from Nexus Repository Manager OSS 3.30.0-01 using wget  command 
since the format is maven artefacts snapshots version are appended with 
timestamp along wi&hellip; (240 words, Apr 8, 2022)
- [Repositories does not show up in IQ server after connecting Repository manager - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/repositories-does-not-show-up-in-iq-server-after-connecting-repository-manager/8488/2/index.html): hi, I installed IQ server 135 and Nexus repository manager pro 3.38. I connected repository manager to IQ server using the following guide: 
https://help.sonatype.com/integrations/iq-server-and-repository-management/iq-s&hellip; (331 words, Apr 7, 2022)
- [Repositories does not show up in IQ server after connecting Repository manager - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/repositories-does-not-show-up-in-iq-server-after-connecting-repository-manager/8488/index.html): hi, I installed IQ server 135 and Nexus repository manager pro 3.38. I connected repository manager to IQ server using the following guide: 
https://help.sonatype.com/integrations/iq-server-and-repository-management/iq-s&hellip; (326 words, Apr 7, 2022)
- [Repositories does not show up in IQ server after connecting Repository manager - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/repositories-does-not-show-up-in-iq-server-after-connecting-repository-manager/8488/1/index.html): hi, I installed IQ server 135 and Nexus repository manager pro 3.38. I connected repository manager to IQ server using the following guide: 
https://help.sonatype.com/integrations/iq-server-and-repository-management/iq-s&hellip; (331 words, Apr 7, 2022)
- [NXRM3 OSS keeps showing warnings "CacheInfo missing for Content ... assuming stale content" after an upgrade - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nxrm3-oss-keeps-showing-warnings-cacheinfo-missing-for-content-assuming-stale-content-after-an-upgrade/8459/2/index.html): Hello, 
We have done an upgrade from 3.37.0 to 3.38.0 and ever since we are seeing in the nexus.log the following warnings (an example): 
2022-04-01 11:15:54,593+0200 WARN  [qtp26577241-8923] anonymous org.sonatype.nexus&hellip; (159 words, Apr 5, 2022)
- [Nexus version 2.1.2 - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/nexus-version-2-1-2/8474/3/index.html): Hello Team, 
We are using Nexus Repository version 2.1.2, can you please confirm , if this version having Log4J vulnerabilities impact? which we have recently seen. 
Regards 
Deepti (198 words, Apr 5, 2022)
- [Nexus version 2.1.2 - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/nexus-version-2-1-2/8474/index.html): Hello Team, 
We are using Nexus Repository version 2.1.2, can you please confirm , if this version having Log4J vulnerabilities impact? which we have recently seen. 
Regards 
Deepti (126 words, Apr 5, 2022)
- [Introducing: Spring4Shell Resource Center - Community Announcements - Sonatype Community](/content/community/t/introducing-spring4shell-resource-center/8467/index.html): Hi Sonatype Community, 
As you likely saw in our Sonatype Community announcement last week, news broke on March 30, 2022, of a new vulnerability, dubbed &quot;Springshell / Spring4shell,” a critical Remote Code Execution (RCE&hellip; (262 words, Apr 4, 2022)
- [Introducing: Spring4Shell Resource Center - Community Announcements - Sonatype Community](/content/community/t/introducing-spring4shell-resource-center/8467/1/index.html): Hi Sonatype Community, 
As you likely saw in our Sonatype Community announcement last week, news broke on March 30, 2022, of a new vulnerability, dubbed &quot;Springshell / Spring4shell,” a critical Remote Code Execution (RCE&hellip; (271 words, Apr 4, 2022)
- [Cannot use APT repo snapshots - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/cannot-use-apt-repo-snapshots/8462/index.html): Hi folks– 
Has anyone successfully used an APT proxy snapshot? 
Configuration is OSS 3.38.0-01 
My use case is to install Ubuntu from a proxy snapshot. 
I am able to install from a proxy that tracks the public Ubuntu rep&hellip; (217 words, Apr 2, 2022)
- [Cannot use APT repo snapshots - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/cannot-use-apt-repo-snapshots/8462/1/index.html): Hi folks– 
Has anyone successfully used an APT proxy snapshot? 
Configuration is OSS 3.38.0-01 
My use case is to install Ubuntu from a proxy snapshot. 
I am able to install from a proxy that tracks the public Ubuntu rep&hellip; (217 words, Apr 2, 2022)
- [NXRM3 OSS keeps showing warnings "CacheInfo missing for Content ... assuming stale content" after an upgrade - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nxrm3-oss-keeps-showing-warnings-cacheinfo-missing-for-content-assuming-stale-content-after-an-upgrade/8459/index.html): Hello, 
We have done an upgrade from 3.37.0 to 3.38.0 and ever since we are seeing in the nexus.log the following warnings (an example): 
2022-04-01 11:15:54,593+0200 WARN  [qtp26577241-8923] anonymous org.sonatype.nexus&hellip; (159 words, Apr 1, 2022)
- [NXRM3 OSS keeps showing warnings "CacheInfo missing for Content ... assuming stale content" after an upgrade - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nxrm3-oss-keeps-showing-warnings-cacheinfo-missing-for-content-assuming-stale-content-after-an-upgrade/8459/1/index.html): Hello, 
We have done an upgrade from 3.37.0 to 3.38.0 and ever since we are seeing in the nexus.log the following warnings (an example): 
2022-04-01 11:15:54,593+0200 WARN  [qtp26577241-8923] anonymous org.sonatype.nexus&hellip; (164 words, Apr 1, 2022)
- [Springshell Vulnerability Update - Community Announcements - Sonatype Community](/content/community/t/springshell-vulnerability-update/8453/index.html): Hi Sonatype Community, 
Early Wednesday morning (GMT), allegations began to appear on the Internet about a new remote code execution flaw that affects Spring Framework. This vulnerability, dubbed by some as “Springshell”&hellip; (823 words, Mar 31, 2022)
- [Springshell Vulnerability Update - Community Announcements - Sonatype Community](/content/community/t/springshell-vulnerability-update/8453/1/index.html): Hi Sonatype Community, 
Early Wednesday morning (GMT), allegations began to appear on the Internet about a new remote code execution flaw that affects Spring Framework. This vulnerability, dubbed by some as “Springshell”&hellip; (822 words, Mar 31, 2022)
- [Issues with vulnerabilities on transitive dependencies - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/issues-with-vulnerabilities-on-transitive-dependencies/8324/7/index.html): Dear Sonatype team. 
Working with the ONAP organization, it was noticed that few false positives were detected in one component’s transitive dependencies which shouldn’t have been marked as threats 
The report in questio&hellip; (424 words, Mar 29, 2022)
- [Login errors might require password reset - Community Announcements - Sonatype Community](/content/community/t/login-errors-might-require-password-reset/8441/index.html): If you experience login errors, recent maintenance to our authentication system may require some users to reset their password. (108 words, Mar 29, 2022)
- [Login errors might require password reset - Community Announcements - Sonatype Community](/content/community/t/login-errors-might-require-password-reset/8441/1/index.html): If you experience login errors, recent maintenance to our authentication system may require some users to reset their password. (138 words, Mar 29, 2022)
- [APT proxy metadata problems - Sonatype Nexus Repository - Sonatype Community](/content/community/t/apt-proxy-metadata-problems/8428/index.html): “apt update” command returns error: 
E: Failed to fetch http://XXXXXXXXX/repository/apt-download-docker-proxy/dists/bionic/nightly/binary-amd64/Packages.gz  File has unexpected size (71462 != 71267). Mirror sync in progr&hellip; (537 words, Mar 28, 2022)
- [APT proxy metadata problems - Sonatype Nexus Repository - Sonatype Community](/content/community/t/apt-proxy-metadata-problems/8428/1/index.html): “apt update” command returns error: 
E: Failed to fetch http://XXXXXXXXX/repository/apt-download-docker-proxy/dists/bionic/nightly/binary-amd64/Packages.gz  File has unexpected size (71462 != 71267). Mirror sync in progr&hellip; (541 words, Mar 28, 2022)
- [Join us in 1 HOUR for March Office Hours - 12 p.m. EST - Community Announcements - Sonatype Community](/content/community/t/join-us-in-1-hour-for-march-office-hours-12-p-m-est/8414/index.html): Join us in one hour for our monthly customer-exclusive Office Hours!  
This month, we’ll be discussing the following topic: 

Product Preview Program: Data Insights (Nexus Lifecycle)

Then, stick around for an Ask Me &hellip; (153 words, Mar 24, 2022)
- [Join us in 1 HOUR for March Office Hours - 12 p.m. EST - Community Announcements - Sonatype Community](/content/community/t/join-us-in-1-hour-for-march-office-hours-12-p-m-est/8414/1/index.html): Join us in one hour for our monthly customer-exclusive Office Hours!  
This month, we’ll be discussing the following topic: 

Product Preview Program: Data Insights (Nexus Lifecycle)

Then, stick around for an Ask Me &hellip; (150 words, Mar 24, 2022)
- [TOMORROW: March Office Hours at 12 p.m EDT - Community Announcements - Sonatype Community](/content/community/t/tomorrow-march-office-hours-at-12-p-m-edt/8409/index.html): Join us tomorrow, Thursday, March 24th, at 12 p.m. EDT (9 a.m. PDT | 4 p.m. GMT) for our monthly customer-exclusive Office Hours . This month, we’ll be discussing the following topic: 

Product Preview Program: Data In&hellip; (165 words, Mar 23, 2022)
- [TOMORROW: March Office Hours at 12 p.m EDT - Community Announcements - Sonatype Community](/content/community/t/tomorrow-march-office-hours-at-12-p-m-edt/8409/1/index.html): Join us tomorrow, Thursday, March 24th, at 12 p.m. EDT (9 a.m. PDT | 4 p.m. GMT) for our monthly customer-exclusive Office Hours . This month, we’ll be discussing the following topic: 

Product Preview Program: Data In&hellip; (99 words, Mar 23, 2022)
- [Nexus IQ Server: Release 135 - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/nexus-iq-server-release-135/8406/1/index.html): Hi Sonatype Community, 
We’re excited to announce the release of IQ Server 135 ! 
Check out the full release notes here  (as well as past release notes) for more information and discover some of the highlights below. 

I&hellip; (213 words, Mar 22, 2022)
- [IntelliJ IDEA - Nexus IQ Plugin failed - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/intellij-idea-nexus-iq-plugin-failed/8403/2/index.html): Hello, 
i want to use the Nexus IQ Plugin for IntelliJ, but it failed with following message: 
com.intellij.diagnostic.PluginException: Cannot load class com.sonatype.iq.idea.components.node.migration.NodeMigrationProvid&hellip; (281 words, Mar 22, 2022)
- [Migrate from Server based Nexus Repository manager to Docker Based Repository manager - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/migrate-from-server-based-nexus-repository-manager-to-docker-based-repository-manager/8384/4/index.html): Looking for step by step Guide  while migrating from Server based Nexus repository to Container based repository . 
We have already copied the DB Backup and restored for the container based appliation. Now we are looking&hellip; (190 words, Mar 22, 2022)
- [IntelliJ IDEA - Nexus IQ Plugin failed - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/intellij-idea-nexus-iq-plugin-failed/8403/index.html): Hello, 
i want to use the Nexus IQ Plugin for IntelliJ, but it failed with following message: 
com.intellij.diagnostic.PluginException: Cannot load class com.sonatype.iq.idea.components.node.migration.NodeMigrationProvid&hellip; (268 words, Mar 22, 2022)
- [IntelliJ IDEA - Nexus IQ Plugin failed - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/intellij-idea-nexus-iq-plugin-failed/8403/1/index.html): Hello, 
i want to use the Nexus IQ Plugin for IntelliJ, but it failed with following message: 
com.intellij.diagnostic.PluginException: Cannot load class com.sonatype.iq.idea.components.node.migration.NodeMigrationProvid&hellip; (279 words, Mar 22, 2022)
- [java.io.FileNotFoundException: db/insight_brain_dm/schema_incremental_0000 .sql - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/java-io-filenotfoundexception-db-insight-brain-dm-schema-incremental-0000-sql/8400/index.html): Hi 
I’m getting this error when setting up Sonatype IQ Server + Postgresql on k8s: 

java.lang.IllegalStateException: Fatal error trying to start server 
at com.sonatype.insight.brain.service.InsightBrainService$2.onErro&hellip; (304 words, Mar 21, 2022)
- [java.io.FileNotFoundException: db/insight_brain_dm/schema_incremental_0000 .sql - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/java-io-filenotfoundexception-db-insight-brain-dm-schema-incremental-0000-sql/8400/1/index.html): Hi 
I’m getting this error when setting up Sonatype IQ Server + Postgresql on k8s: 

java.lang.IllegalStateException: Fatal error trying to start server 
at com.sonatype.insight.brain.service.InsightBrainService$2.onErro&hellip; (297 words, Mar 21, 2022)
- [How to delete multiple versioned package using curl? - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/how-to-delete-multiple-versioned-package-using-curl/8393/3/index.html): I am trying to delete Nexus package which are associated with more than one version. I am running a curl command to delete it, but I want a generic command which will delete all package under a folder 
This is the curl c&hellip; (176 words, Mar 21, 2022)
- [How to delete multiple versioned package using curl? - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/how-to-delete-multiple-versioned-package-using-curl/8393/2/index.html): I am trying to delete Nexus package which are associated with more than one version. I am running a curl command to delete it, but I want a generic command which will delete all package under a folder 
This is the curl c&hellip; (153 words, Mar 21, 2022)
- [How to delete multiple versioned package using curl? - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/how-to-delete-multiple-versioned-package-using-curl/8393/1/index.html): I am trying to delete Nexus package which are associated with more than one version. I am running a curl command to delete it, but I want a generic command which will delete all package under a folder 
This is the curl c&hellip; (174 words, Mar 21, 2022)
- [Migrate from Server based Nexus Repository manager to Docker Based Repository manager - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/migrate-from-server-based-nexus-repository-manager-to-docker-based-repository-manager/8384/index.html): Looking for step by step Guide  while migrating from Server based Nexus repository to Container based repository . 
We have already copied the DB Backup and restored for the container based appliation. Now we are looking&hellip; (265 words, Mar 17, 2022)
- [Join us for March Office Hours - Thursday, March 24th at 12pm EDT - Community Announcements - Sonatype Community](/content/community/t/join-us-for-march-office-hours-thursday-march-24th-at-12pm-edt/8381/index.html): Join us Thursday, March 24th at 12 p.m. EDT (9 a.m. PDT | 4 p.m. GMT) for our monthly customer-exclusive Office Hours. This month, we’ll be discussing the following topic: 

Product Preview Program: Data Insights (Nexu&hellip; (165 words, Mar 17, 2022)
- [Join us for March Office Hours - Thursday, March 24th at 12pm EDT - Community Announcements - Sonatype Community](/content/community/t/join-us-for-march-office-hours-thursday-march-24th-at-12pm-edt/8381/1/index.html): Join us Thursday, March 24th at 12 p.m. EDT (9 a.m. PDT | 4 p.m. GMT) for our monthly customer-exclusive Office Hours. This month, we’ll be discussing the following topic: 

Product Preview Program: Data Insights (Nexu&hellip; (95 words, Mar 17, 2022)
- [New Guide: Sonatype's Solutions in the Supply Chain - Community Announcements / News - Sonatype Community](/content/community/t/new-guide-sonatypes-solutions-in-the-supply-chain/8375/index.html): Hi, all! 
The Tech Content team is pleased to announce a new guide that discusses where Sonatype’s solutions – Repo Manager, Firewall, Lifecycle, and Lift – fit into the software supply chain. It draws some strong analog&hellip; (170 words, Mar 16, 2022)
- [New Guide: Sonatype's Solutions in the Supply Chain - Community Announcements / News - Sonatype Community](/content/community/t/new-guide-sonatypes-solutions-in-the-supply-chain/8375/1/index.html): Hi, all! 
The Tech Content team is pleased to announce a new guide that discusses where Sonatype’s solutions – Repo Manager, Firewall, Lifecycle, and Lift – fit into the software supply chain. It draws some strong analog&hellip; (160 words, Mar 16, 2022)
- [Repository files view only - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/repository-files-view-only/8369/2/index.html): I am trying to make sure a file is viewable, not downloadable by a specific role. What type of configuration would I need to have on the file or repository? (149 words, Mar 14, 2022)
- [Repository files view only - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/repository-files-view-only/8369/index.html): I am trying to make sure a file is viewable, not downloadable by a specific role. What type of configuration would I need to have on the file or repository? (155 words, Mar 14, 2022)
- [Repository files view only - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/repository-files-view-only/8369/1/index.html): I am trying to make sure a file is viewable, not downloadable by a specific role. What type of configuration would I need to have on the file or repository? (160 words, Mar 14, 2022)
- [Proxi-Repos not working, remain "Online - Ready to Connect" - Sonatype Nexus Repository - Sonatype Community](/content/community/t/proxi-repos-not-working-remain-online-ready-to-connect/8349/10/index.html): Our NEXUS OSS 3.38.0 is running in a K8S Cluster. 
All proxy-repositories, even maven-central, remain in the status “Ready to Connect”, although we have tried to retrieve assets from them multiple times. 
In the Logfiles&hellip; (551 words, Mar 12, 2022)
- [Nexus IQ Server: Release 134 - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/nexus-iq-server-release-134/8363/index.html): We’re excited to announce the release of IQ Server 134 ! 
Check out the full release notes here  (as well as past release notes) for more information and discover some of the highlights below. 
Support for CycloneDX 1.4
T&hellip; (210 words, Mar 11, 2022)
- [Nexus IQ Server: Release 134 - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/nexus-iq-server-release-134/8363/1/index.html): We’re excited to announce the release of IQ Server 134 ! 
Check out the full release notes here  (as well as past release notes) for more information and discover some of the highlights below. 
Support for CycloneDX 1.4
T&hellip; (195 words, Mar 11, 2022)
- [Port range for docker hosted repos - Sonatype Nexus Repository - Sonatype Community](/content/community/t/port-range-for-docker-hosted-repos/8342/4/index.html): I have installed nexus on Kubernetes (Azure - AKS). When I created docker hosted repo, I can’t be able to reachout to nexus. 
For example, nexus is runnig at Port 8081. I have created docker hosted repo at 9090 port. I k&hellip; (404 words, Mar 8, 2022)
- [Port range for docker hosted repos - Sonatype Nexus Repository - Sonatype Community](/content/community/t/port-range-for-docker-hosted-repos/8342/3/index.html): I have installed nexus on Kubernetes (Azure - AKS). When I created docker hosted repo, I can’t be able to reachout to nexus. 
For example, nexus is runnig at Port 8081. I have created docker hosted repo at 9090 port. I k&hellip; (403 words, Mar 8, 2022)
- [Proxi-Repos not working, remain "Online - Ready to Connect" - Sonatype Nexus Repository - Sonatype Community](/content/community/t/proxi-repos-not-working-remain-online-ready-to-connect/8349/index.html): Our NEXUS OSS 3.38.0 is running in a K8S Cluster. 
All proxy-repositories, even maven-central, remain in the status “Ready to Connect”, although we have tried to retrieve assets from them multiple times. 
In the Logfiles&hellip; (595 words, Mar 8, 2022)
- [Proxi-Repos not working, remain "Online - Ready to Connect" - Sonatype Nexus Repository - Sonatype Community](/content/community/t/proxi-repos-not-working-remain-online-ready-to-connect/8349/1/index.html): Our NEXUS OSS 3.38.0 is running in a K8S Cluster. 
All proxy-repositories, even maven-central, remain in the status “Ready to Connect”, although we have tried to retrieve assets from them multiple times. 
In the Logfiles&hellip; (535 words, Mar 8, 2022)
- [Port range for docker hosted repos - Sonatype Nexus Repository - Sonatype Community](/content/community/t/port-range-for-docker-hosted-repos/8342/2/index.html): I have installed nexus on Kubernetes (Azure - AKS). When I created docker hosted repo, I can’t be able to reachout to nexus. 
For example, nexus is runnig at Port 8081. I have created docker hosted repo at 9090 port. I k&hellip; (403 words, Mar 7, 2022)
- [Port range for docker hosted repos - Sonatype Nexus Repository - Sonatype Community](/content/community/t/port-range-for-docker-hosted-repos/8342/index.html): I have installed nexus on Kubernetes (Azure - AKS). When I created docker hosted repo, I can’t be able to reachout to nexus. 
For example, nexus is runnig at Port 8081. I have created docker hosted repo at 9090 port. I k&hellip; (404 words, Mar 5, 2022)
- [Port range for docker hosted repos - Sonatype Nexus Repository - Sonatype Community](/content/community/t/port-range-for-docker-hosted-repos/8342/1/index.html): I have installed nexus on Kubernetes (Azure - AKS). When I created docker hosted repo, I can’t be able to reachout to nexus. 
For example, nexus is runnig at Port 8081. I have created docker hosted repo at 9090 port. I k&hellip; (404 words, Mar 5, 2022)
- [Security vulnerability sonatype-2021-1365 - Unable to load Violation Details - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/security-vulnerability-sonatype-2021-1365-unable-to-load-violation-details/8333/index.html): Unable to load Violation Details - security vulnerability sonatype-2021-1365 
“An error occurred loading data. Vulnerability with refId: sonatype-2021-1365 and componentIdentifier: npm: {packageId=lodash, version=4.17.21&hellip; (157 words, Mar 3, 2022)
- [Security vulnerability sonatype-2021-1365 - Unable to load Violation Details - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/security-vulnerability-sonatype-2021-1365-unable-to-load-violation-details/8333/1/index.html): Unable to load Violation Details - security vulnerability sonatype-2021-1365 
“An error occurred loading data. Vulnerability with refId: sonatype-2021-1365 and componentIdentifier: npm: {packageId=lodash, version=4.17.21&hellip; (49 words, Mar 3, 2022)
- [Nexus IQ Server: Release 133 - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/nexus-iq-server-release-133/8331/index.html): We’re excited to announce the release of IQ Server 133! 
Check out the full release notes here (as well as past release notes) for more information and discover some of the highlights below. 
Composer Matching Improvemen&hellip; (190 words, Mar 3, 2022)
- [Nexus IQ Server: Release 133 - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/nexus-iq-server-release-133/8331/1/index.html): We’re excited to announce the release of IQ Server 133! 
Check out the full release notes here (as well as past release notes) for more information and discover some of the highlights below. 
Composer Matching Improvemen&hellip; (197 words, Mar 3, 2022)
- [Issues with vulnerabilities on transitive dependencies - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/issues-with-vulnerabilities-on-transitive-dependencies/8324/1/index.html): Dear Sonatype team. 
Working with the ONAP organization, it was noticed that few false positives were detected in one component’s transitive dependencies which shouldn’t have been marked as threats 
The report in questio&hellip; (424 words, Mar 2, 2022)
- [Wrong "Total size" for blob stores - Sonatype Nexus Repository - Sonatype Community](/content/community/t/wrong-total-size-for-blob-stores/8307/2/index.html): WE are using the free version of Nexus Repository Manager (OSS 3.37.3-02) and observed that the reported total size for the blob stores is wrong. It is rather the size used. Here is a relevant screenshot: (65 words, Mar 1, 2022)
- [Wrong "Total size" for blob stores - Sonatype Nexus Repository - Sonatype Community](/content/community/t/wrong-total-size-for-blob-stores/8307/index.html): WE are using the free version of Nexus Repository Manager (OSS 3.37.3-02) and observed that the reported total size for the blob stores is wrong. It is rather the size used. Here is a relevant screenshot: (63 words, Mar 1, 2022)
- [Wrong "Total size" for blob stores - Sonatype Nexus Repository - Sonatype Community](/content/community/t/wrong-total-size-for-blob-stores/8307/1/index.html): WE are using the free version of Nexus Repository Manager (OSS 3.37.3-02) and observed that the reported total size for the blob stores is wrong. It is rather the size used. Here is a relevant screenshot: (65 words, Mar 1, 2022)
- [Is it possible to respond with an error when a request to get a module outside of a specific naming rule comes in? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/is-it-possible-to-respond-with-an-error-when-a-request-to-get-a-module-outside-of-a-specific-naming-rule-comes-in/8305/3/index.html): For the proxy repository, is it possible to respond with an error when a request to get a module outside of a specific naming rule comes in? I would like to know if there is a way to set it up like that. 
The version of &hellip; (113 words, Feb 28, 2022)
- [Is it possible to respond with an error when a request to get a module outside of a specific naming rule comes in? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/is-it-possible-to-respond-with-an-error-when-a-request-to-get-a-module-outside-of-a-specific-naming-rule-comes-in/8305/index.html): For the proxy repository, is it possible to respond with an error when a request to get a module outside of a specific naming rule comes in? I would like to know if there is a way to set it up like that. 
The version of &hellip; (118 words, Feb 28, 2022)
- [Is it possible to respond with an error when a request to get a module outside of a specific naming rule comes in? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/is-it-possible-to-respond-with-an-error-when-a-request-to-get-a-module-outside-of-a-specific-naming-rule-comes-in/8305/1/index.html): For the proxy repository, is it possible to respond with an error when a request to get a module outside of a specific naming rule comes in? I would like to know if there is a way to set it up like that. 
The version of &hellip; (116 words, Feb 28, 2022)
- [Vulnerabilities waived through API still showing on scan reports - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/vulnerabilities-waived-through-api-still-showing-on-scan-reports/8285/2/index.html): We are using the Policy Waiver REST API through some internal tooling to automate applying waivers in Sonatype, and we are encountering scenarios where a policy violation on a component has a waiver applied but the compo&hellip; (206 words, Feb 25, 2022)
- [Join us in 1 HOUR for February Office Hours - 10 a.m. EST - Community Announcements - Sonatype Community](/content/community/t/join-us-in-1-hour-for-february-office-hours-10-a-m-est/8290/index.html): Join us today at 10 a.m EST (7 a.m PST | 3 p.m GMT)**, for our monthly, customer-exclusive Office Hours. 
This is your opportunity to get your questions answered and connect with leaders from Product, Customer Success,&hellip; (113 words, Feb 23, 2022)
- [Join us in 1 HOUR for February Office Hours - 10 a.m. EST - Community Announcements - Sonatype Community](/content/community/t/join-us-in-1-hour-for-february-office-hours-10-a-m-est/8290/1/index.html): Join us today at 10 a.m EST (7 a.m PST | 3 p.m GMT)**, for our monthly, customer-exclusive Office Hours. 
This is your opportunity to get your questions answered and connect with leaders from Product, Customer Success,&hellip; (104 words, Feb 23, 2022)
- [Vulnerabilities waived through API still showing on scan reports - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/vulnerabilities-waived-through-api-still-showing-on-scan-reports/8285/index.html): We are using the Policy Waiver REST API through some internal tooling to automate applying waivers in Sonatype, and we are encountering scenarios where a policy violation on a component has a waiver applied but the compo&hellip; (209 words, Feb 23, 2022)
- [Java 8 version vulnerability in nexus repository docker image - Sonatype Nexus Repository - Sonatype Community](/content/community/t/java-8-version-vulnerability-in-nexus-repository-docker-image/8230/6/index.html): Hi team, 
We are using nexus 3.29.0 docker image  as docker image repository and maven repository. 
One of our customers reported java version 1.8.0.272 vulnerability for nexus docker image. 
We have tried to upgrade sub&hellip; (306 words, Feb 22, 2022)
- [404 when pulling from chocolatey repo - Sonatype Nexus Repository - Sonatype Community](/content/community/t/404-when-pulling-from-chocolatey-repo/8278/index.html): I am trying to set up access to pull down packages from my repo. I can push packages without error. 
Below are two examples of what I’m trying to do. I’m assuming I’m missing a setup step or authorization step in the rep&hellip; (124 words, Feb 22, 2022)
- [404 when pulling from chocolatey repo - Sonatype Nexus Repository - Sonatype Community](/content/community/t/404-when-pulling-from-chocolatey-repo/8278/1/index.html): I am trying to set up access to pull down packages from my repo. I can push packages without error. 
Below are two examples of what I’m trying to do. I’m assuming I’m missing a setup step or authorization step in the rep&hellip; (206 words, Feb 22, 2022)
- [TOMORROW: February Office Hours at 10 a.m. EST - Community Announcements - Sonatype Community](/content/community/t/tomorrow-february-office-hours-at-10-a-m-est/8276/index.html): Join us tomorrow, Wednesday, February 23rd at 10 a.m EST (7 a.m PST | 3 p.m GMT), for our monthly, customer-exclusive Office Hours. 
This is your opportunity to get your questions answered and connect with leaders from&hellip; (202 words, Feb 22, 2022)
- [TOMORROW: February Office Hours at 10 a.m. EST - Community Announcements - Sonatype Community](/content/community/t/tomorrow-february-office-hours-at-10-a-m-est/8276/1/index.html): Join us tomorrow, Wednesday, February 23rd at 10 a.m EST (7 a.m PST | 3 p.m GMT), for our monthly, customer-exclusive Office Hours. 
This is your opportunity to get your questions answered and connect with leaders from&hellip; (138 words, Feb 22, 2022)
- [What is the difference between Nexus Firewall and Lifecycle? - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/what-is-the-difference-between-nexus-firewall-and-lifecycle/8270/index.html): What is the difference between Nexus Firewall and Lifecycle? (231 words, Feb 21, 2022)
- [What is the difference between Nexus Firewall and Lifecycle? - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/what-is-the-difference-between-nexus-firewall-and-lifecycle/8270/1/index.html): What is the difference between Nexus Firewall and Lifecycle? (150 words, Feb 21, 2022)
- [How to restrict repos for anonymous users - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/how-to-restrict-repos-for-anonymous-users/8267/2/index.html): we are using nexus repo for a long time, and in our case users can browse the repository without logging in 
how can we restrict this? 
we wanted to browse only after login, if I disable this option “Allow anonymous user&hellip; (274 words, Feb 18, 2022)
- [How to restrict repos for anonymous users - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/how-to-restrict-repos-for-anonymous-users/8267/index.html): we are using nexus repo for a long time, and in our case users can browse the repository without logging in 
how can we restrict this? 
we wanted to browse only after login, if I disable this option “Allow anonymous user&hellip; (201 words, Feb 18, 2022)
- [How to restrict repos for anonymous users - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/how-to-restrict-repos-for-anonymous-users/8267/1/index.html): we are using nexus repo for a long time, and in our case users can browse the repository without logging in 
how can we restrict this? 
we wanted to browse only after login, if I disable this option “Allow anonymous user&hellip; (198 words, Feb 18, 2022)
- [Coming the End of February - Composer(PHP) Data Unification - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/coming-the-end-of-february-composer-php-data-unification/8261/1/index.html): Starting the last week of February, users of Nexus Lifecycle and Nexus Firewall who evaluate PHP may experience a change in results. 
As we roll out this initiative, you will experience the following for PHP: 

Higher qu&hellip; (380 words, Feb 17, 2022)
- [Versioning and description in raw repository - Sonatype Nexus Repository - Sonatype Community](/content/community/t/versioning-and-description-in-raw-repository/8255/2/index.html): Hi there, 
I currently use the raw repository as a repository for all possible file formats. Unfortunately, I don’t have the option to version this data in raw and to write a short description of it. Is there a way to do&hellip; (112 words, Feb 16, 2022)
- [OSS Repository UI has no menu - Sonatype Nexus Repository - Sonatype Community](/content/community/t/oss-repository-ui-has-no-menu/8250/11/index.html): The OSS Repository 3.25.1-04 UI has no menus after login.  The only user that can login is ‘admin’, yet the admin has no menus. 
The password for admin works correctly, however if I go to a known menu, i.e. https://:8443&hellip; (752 words, Feb 16, 2022)
- [Join us for February Office Hours - Wednesday, February 23rd at 10am ET - Community Announcements - Sonatype Community](/content/community/t/join-us-for-february-office-hours-wednesday-february-23rd-at-10am-et/8256/1/index.html): Join us Wednesday, February 23rd at 10 a.m. EST (7 a.m. PST | 3  p.m. GMT) for our monthly, customer-exclusive Office Hours. This month, we’ll be discussing the following topics: 

Nexus Firewall: Anonymous Developer V&hellip; (164 words, Feb 16, 2022)
- [Sonar fail to start - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonar-fail-to-start/8242/3/index.html): Hi , after installing nexus3 on my redhat server i have an issue : 
  
but i cannot access via http://ip_machine:8081 
( firewall is disabled and selinux ) 
On log file i have : 
cat /data/sonatype-work/nexus3/log/nexus.&hellip; (101 words, Feb 16, 2022)
- [Versioning and description in raw repository - Sonatype Nexus Repository - Sonatype Community](/content/community/t/versioning-and-description-in-raw-repository/8255/index.html): Hi there, 
I currently use the raw repository as a repository for all possible file formats. Unfortunately, I don’t have the option to version this data in raw and to write a short description of it. Is there a way to do&hellip; (112 words, Feb 16, 2022)
- [Versioning and description in raw repository - Sonatype Nexus Repository - Sonatype Community](/content/community/t/versioning-and-description-in-raw-repository/8255/1/index.html): Hi there, 
I currently use the raw repository as a repository for all possible file formats. Unfortunately, I don’t have the option to version this data in raw and to write a short description of it. Is there a way to do&hellip; (177 words, Feb 16, 2022)
- [OSS Repository UI has no menu - Sonatype Nexus Repository - Sonatype Community](/content/community/t/oss-repository-ui-has-no-menu/8250/index.html): The OSS Repository 3.25.1-04 UI has no menus after login.  The only user that can login is ‘admin’, yet the admin has no menus. 
The password for admin works correctly, however if I go to a known menu, i.e. https://:8443&hellip; (752 words, Feb 15, 2022)
- [OSS Repository UI has no menu - Sonatype Nexus Repository - Sonatype Community](/content/community/t/oss-repository-ui-has-no-menu/8250/1/index.html): The OSS Repository 3.25.1-04 UI has no menus after login.  The only user that can login is ‘admin’, yet the admin has no menus. 
The password for admin works correctly, however if I go to a known menu, i.e. https://:8443&hellip; (752 words, Feb 15, 2022)
- [Nexus Blob Store Size - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-blob-store-size/8236/5/index.html): Hi all 
I’ve a problem: I’ve deleted a lot of unused docker-container in my nexus-repo to get free space. I’ve also executed the job “Compact Blob Store”. 
But in the overview I’ve the same amount of used space for the B&hellip; (282 words, Feb 15, 2022)
- [How does nexus IQ server by Sonatype Lifecycle release 103 determine license threat level - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/how-does-nexus-iq-server-by-sonatype-lifecycle-release-103-determine-license-threat-level/7942/4/index.html): I have a couple decades of full stack developer experience including much use of open source. I have been tasked with helping my colleagues address attack vulnerabilities and licensing issues in their use of open source. &hellip; (383 words, Feb 15, 2022)
- [Sonar fail to start - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonar-fail-to-start/8242/index.html): Hi , after installing nexus3 on my redhat server i have an issue : 
  
but i cannot access via http://ip_machine:8081 
( firewall is disabled and selinux ) 
On log file i have : 
cat /data/sonatype-work/nexus3/log/nexus.&hellip; (99 words, Feb 15, 2022)
- [Sonar fail to start - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sonar-fail-to-start/8242/1/index.html): Hi , after installing nexus3 on my redhat server i have an issue : 
  
but i cannot access via http://ip_machine:8081 
( firewall is disabled and selinux ) 
On log file i have : 
cat /data/sonatype-work/nexus3/log/nexus.&hellip; (161 words, Feb 15, 2022)
- [[Solved] Cannot login to the Nexus Repository Manager - Sonatype Nexus Repository - Sonatype Community](/content/community/t/solved-cannot-login-to-the-nexus-repository-manager/8233/3/index.html): Hello, 
I manage several open source library and have only been able to publish one of the 4 I have. Trying to investigate, I went on to Nexus Repository Manager but my credentials are being refused. The same credentials&hellip; (241 words, Feb 14, 2022)
- [Nexus Blob Store Size - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-blob-store-size/8236/3/index.html): Hi all 
I’ve a problem: I’ve deleted a lot of unused docker-container in my nexus-repo to get free space. I’ve also executed the job “Compact Blob Store”. 
But in the overview I’ve the same amount of used space for the B&hellip; (282 words, Feb 14, 2022)
- [[Solved] Cannot login to the Nexus Repository Manager - Sonatype Nexus Repository - Sonatype Community](/content/community/t/solved-cannot-login-to-the-nexus-repository-manager/8233/2/index.html): Hello, 
I manage several open source library and have only been able to publish one of the 4 I have. Trying to investigate, I went on to Nexus Repository Manager but my credentials are being refused. The same credentials&hellip; (126 words, Feb 14, 2022)
- [Nexus Blob Store Size - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-blob-store-size/8236/2/index.html): Hi all 
I’ve a problem: I’ve deleted a lot of unused docker-container in my nexus-repo to get free space. I’ve also executed the job “Compact Blob Store”. 
But in the overview I’ve the same amount of used space for the B&hellip; (282 words, Feb 14, 2022)
- [Nexus Blob Store Size - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-blob-store-size/8236/index.html): Hi all 
I’ve a problem: I’ve deleted a lot of unused docker-container in my nexus-repo to get free space. I’ve also executed the job “Compact Blob Store”. 
But in the overview I’ve the same amount of used space for the B&hellip; (282 words, Feb 14, 2022)
- [Nexus Blob Store Size - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-blob-store-size/8236/1/index.html): Hi all 
I’ve a problem: I’ve deleted a lot of unused docker-container in my nexus-repo to get free space. I’ve also executed the job “Compact Blob Store”. 
But in the overview I’ve the same amount of used space for the B&hellip; (282 words, Feb 14, 2022)
- [[Solved] Cannot login to the Nexus Repository Manager - Sonatype Nexus Repository - Sonatype Community](/content/community/t/solved-cannot-login-to-the-nexus-repository-manager/8233/index.html): Hello, 
I manage several open source library and have only been able to publish one of the 4 I have. Trying to investigate, I went on to Nexus Repository Manager but my credentials are being refused. The same credentials&hellip; (192 words, Feb 12, 2022)
- [[Solved] Cannot login to the Nexus Repository Manager - Sonatype Nexus Repository - Sonatype Community](/content/community/t/solved-cannot-login-to-the-nexus-repository-manager/8233/1/index.html): Hello, 
I manage several open source library and have only been able to publish one of the 4 I have. Trying to investigate, I went on to Nexus Repository Manager but my credentials are being refused. The same credentials&hellip; (126 words, Feb 12, 2022)
- [Running Nexus with FIPS mode enabled (plus LDAP) - Sonatype Nexus Repository - Sonatype Community](/content/community/t/running-nexus-with-fips-mode-enabled-plus-ldap/8232/index.html): I’m running Nexus Repository Manager in Docker on a UBI8 (RedHat) base image, which uses FIPS mode when the host is also in FIPS mode. 
We then get the following error in the Nexus container logs: 
2022-02-11 16:26:34,36&hellip; (917 words, Feb 11, 2022)
- [Running Nexus with FIPS mode enabled (plus LDAP) - Sonatype Nexus Repository - Sonatype Community](/content/community/t/running-nexus-with-fips-mode-enabled-plus-ldap/8232/1/index.html): I’m running Nexus Repository Manager in Docker on a UBI8 (RedHat) base image, which uses FIPS mode when the host is also in FIPS mode. 
We then get the following error in the Nexus container logs: 
2022-02-11 16:26:34,36&hellip; (910 words, Feb 11, 2022)
- [Update Your IQ Server License Threat Groups - Sonatype Labs - Sonatype Community](/content/community/t/update-your-iq-server-license-threat-groups/3094/22/index.html): The license threat group updater will apply the latest Sonatype provided license classification to your running IQ server’s license threat groups. This will alleviate any “License Threat Group not Assigned” policy violat&hellip; (610 words, Feb 11, 2022)
- [Java 8 version vulnerability in nexus repository docker image - Sonatype Nexus Repository - Sonatype Community](/content/community/t/java-8-version-vulnerability-in-nexus-repository-docker-image/8230/1/index.html): Hi team, 
We are using nexus 3.29.0 docker image  as docker image repository and maven repository. 
One of our customers reported java version 1.8.0.272 vulnerability for nexus docker image. 
We have tried to upgrade sub&hellip; (309 words, Feb 11, 2022)
- [How set data disk space size? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-set-data-disk-space-size/8195/3/index.html): Nexus v3.x running as a Docker container. 
I setup a Ubuntu VM with 1TB disk space. However, the container seems to only use 180G, and has run out of space. Hence I can’t even log in. How can I set the amount of disk spa&hellip; (228 words, Feb 9, 2022)
- [Distinguish between multiple docker registries - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/distinguish-between-multiple-docker-registries/8206/3/index.html): Hi community, 
I’ve got a question for which I didn’t find any answer (maybe I searched wrong): 
We’ve got the use case, that we use Nexus for multiple docker registries, e.g. docker hub and github’s registry. As there m&hellip; (455 words, Feb 9, 2022)
- [Nuxeo repository manager - certificate expired - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nuxeo-repository-manager-certificate-expired/8208/2/index.html): We are using maven nuxeo internally for pulling the artifacts and dependencies for our java application. 
There is an issue with the host https://maven.nuxeo.org 
The certificate is expired on the Wed Feb 02 23:59:59 UTC&hellip; (156 words, Feb 9, 2022)
- [Nuxeo repository manager - certificate expired - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nuxeo-repository-manager-certificate-expired/8208/index.html): We are using maven nuxeo internally for pulling the artifacts and dependencies for our java application. 
There is an issue with the host https://maven.nuxeo.org 
The certificate is expired on the Wed Feb 02 23:59:59 UTC&hellip; (149 words, Feb 8, 2022)
- [Nuxeo repository manager - certificate expired - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nuxeo-repository-manager-certificate-expired/8208/1/index.html): We are using maven nuxeo internally for pulling the artifacts and dependencies for our java application. 
There is an issue with the host https://maven.nuxeo.org 
The certificate is expired on the Wed Feb 02 23:59:59 UTC&hellip; (155 words, Feb 8, 2022)
- [Distinguish between multiple docker registries - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/distinguish-between-multiple-docker-registries/8206/index.html): Hi community, 
I’ve got a question for which I didn’t find any answer (maybe I searched wrong): 
We’ve got the use case, that we use Nexus for multiple docker registries, e.g. docker hub and github’s registry. As there m&hellip; (446 words, Feb 8, 2022)
- [Distinguish between multiple docker registries - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/distinguish-between-multiple-docker-registries/8206/1/index.html): Hi community, 
I’ve got a question for which I didn’t find any answer (maybe I searched wrong): 
We’ve got the use case, that we use Nexus for multiple docker registries, e.g. docker hub and github’s registry. As there m&hellip; (447 words, Feb 8, 2022)
- [How set data disk space size? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-set-data-disk-space-size/8195/index.html): Nexus v3.x running as a Docker container. 
I setup a Ubuntu VM with 1TB disk space. However, the container seems to only use 180G, and has run out of space. Hence I can’t even log in. How can I set the amount of disk spa&hellip; (163 words, Feb 7, 2022)
- [How set data disk space size? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-set-data-disk-space-size/8195/1/index.html): Nexus v3.x running as a Docker container. 
I setup a Ubuntu VM with 1TB disk space. However, the container seems to only use 180G, and has run out of space. Hence I can’t even log in. How can I set the amount of disk spa&hellip; (163 words, Feb 7, 2022)
- [Nexus ldap issue - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-ldap-issue/8190/index.html): I am using Sonatype Nexus Repository ManagerOSS 3.37.3-02. 
I can establish the connection with the LDAP server, and I can verify the user mapping as well. 
I am able to login with LDAP users, but sometimes, it throws an&hellip; (571 words, Feb 7, 2022)
- [Nexus ldap issue - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-ldap-issue/8190/1/index.html): I am using Sonatype Nexus Repository ManagerOSS 3.37.3-02. 
I can establish the connection with the LDAP server, and I can verify the user mapping as well. 
I am able to login with LDAP users, but sometimes, it throws an&hellip; (579 words, Feb 7, 2022)
- [Syncing two nexus instances pointing to the same s3 blob storage - Sonatype Nexus Repository - Sonatype Community](/content/community/t/syncing-two-nexus-instances-pointing-to-the-same-s3-blob-storage/8158/4/index.html): I have an interesting issue. I’m responsible for syncing two different Nexus Repository instances. Both are running Nexus 3 (3.20 and 3.30 if it’s relevant). These instances are hosted in two different kubernetes cluster&hellip; (397 words, Feb 4, 2022)
- [Getting 503 service unavailable - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/getting-503-service-unavailable/8170/1/index.html): while trying to push docker images i get 
received unexpected HTTP status: 503 Service Unavailable 
this started happening from last 1 day. previously evrrything was fine. 
i have “Sonatype Nexus Repository ManagerOSS 3.&hellip; (132 words, Feb 3, 2022)
- [Access Nexus Repository from Jenkins bypassing SSO - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/access-nexus-repository-from-jenkins-bypassing-sso/8167/index.html): We are using Nexus Repository Manager OSS 3.251-01 
For authentication, we are using Shibboleth. We are covering the whole application by SSO. We are authenticated by header. I want to find a solution to be able to pass &hellip; (73 words, Feb 2, 2022)
- [Access Nexus Repository from Jenkins bypassing SSO - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/access-nexus-repository-from-jenkins-bypassing-sso/8167/1/index.html): We are using Nexus Repository Manager OSS 3.251-01 
For authentication, we are using Shibboleth. We are covering the whole application by SSO. We are authenticated by header. I want to find a solution to be able to pass &hellip; (73 words, Feb 2, 2022)
- [Syncing two nexus instances pointing to the same s3 blob storage - Sonatype Nexus Repository - Sonatype Community](/content/community/t/syncing-two-nexus-instances-pointing-to-the-same-s3-blob-storage/8158/index.html): I have an interesting issue. I’m responsible for syncing two different Nexus Repository instances. Both are running Nexus 3 (3.20 and 3.30 if it’s relevant). These instances are hosted in two different kubernetes cluster&hellip; (397 words, Feb 2, 2022)
- [Syncing two nexus instances pointing to the same s3 blob storage - Sonatype Nexus Repository - Sonatype Community](/content/community/t/syncing-two-nexus-instances-pointing-to-the-same-s3-blob-storage/8158/1/index.html): I have an interesting issue. I’m responsible for syncing two different Nexus Repository instances. Both are running Nexus 3 (3.20 and 3.30 if it’s relevant). These instances are hosted in two different kubernetes cluster&hellip; (396 words, Feb 2, 2022)
- ["cron-like expression" in backup task - Sonatype Nexus Repository - Sonatype Community](/content/community/t/cron-like-expression-in-backup-task/8153/2/index.html): I’m trying to configure “0 9,21 * * *” as the time in a daily backup task, but it is not accepted. Even “0 21 * * *”, “0 0 21 * * *” or “0 0 21 * * * *” are not accepted. Everytime I get an error “Cron expression is inva&hellip; (96 words, Feb 1, 2022)
- ["cron-like expression" in backup task - Sonatype Nexus Repository - Sonatype Community](/content/community/t/cron-like-expression-in-backup-task/8153/index.html): I’m trying to configure “0 9,21 * * *” as the time in a daily backup task, but it is not accepted. Even “0 21 * * *”, “0 0 21 * * *” or “0 0 21 * * * *” are not accepted. Everytime I get an error “Cron expression is inva&hellip; (97 words, Feb 1, 2022)
- ["cron-like expression" in backup task - Sonatype Nexus Repository - Sonatype Community](/content/community/t/cron-like-expression-in-backup-task/8153/1/index.html): I’m trying to configure “0 9,21 * * *” as the time in a daily backup task, but it is not accepted. Even “0 21 * * *”, “0 0 21 * * *” or “0 0 21 * * * *” are not accepted. Everytime I get an error “Cron expression is inva&hellip; (96 words, Feb 1, 2022)
- [Xml-apis-ext same hash multiple version other risk level - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/xml-apis-ext-same-hash-multiple-version-other-risk-level/8140/3/index.html): Our developer used xml-apis-ext Version: 1.3.04 which has a Apache license. 
However NexusIQ flags V2.5.0 which has no license. 
Hash is the same: 
sha1sum xml-apis-ext* 
41a8b86b358e87f3f13cf46069721719105aff66  xml-api&hellip; (109 words, Jan 31, 2022)
- [Migration of sonar2.x on server A to sonar 3.x on server B - Sonatype Nexus Repository - Sonatype Community](/content/community/t/migration-of-sonar2-x-on-server-a-to-sonar-3-x-on-server-b/8150/index.html): Hi , 
i have to migrate my nexus 2.x on server A to a new version 3.x on another server B 
Is there any steps to follow ? 
thanks (196 words, Jan 31, 2022)
- [Migration of sonar2.x on server A to sonar 3.x on server B - Sonatype Nexus Repository - Sonatype Community](/content/community/t/migration-of-sonar2-x-on-server-a-to-sonar-3-x-on-server-b/8150/1/index.html): Hi , 
i have to migrate my nexus 2.x on server A to a new version 3.x on another server B 
Is there any steps to follow ? 
thanks (181 words, Jan 31, 2022)
- [Xml-apis-ext same hash multiple version other risk level - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/xml-apis-ext-same-hash-multiple-version-other-risk-level/8140/1/index.html): Our developer used xml-apis-ext Version: 1.3.04 which has a Apache license. 
However NexusIQ flags V2.5.0 which has no license. 
Hash is the same: 
sha1sum xml-apis-ext* 
41a8b86b358e87f3f13cf46069721719105aff66  xml-api&hellip; (119 words, Jan 28, 2022)
- [Nexus3 shared storage startup failed - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus3-shared-storage-startup-failed/8139/index.html): I want to keep the artifacts of the validation environment and the Disaster recovery environment synchronized。monitor the environment nexus sonatype-work files through inotify, and use Rsync for data synchronization。
 &hellip; (215 words, Jan 28, 2022)
- [Have you heard about the New Dependency Tree Visualization for Lifecycle? - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/have-you-heard-about-the-new-dependency-tree-visualization-for-lifecycle/8132/index.html): ![|400x225](upload://co8qXlgEzpEC82wwvVWITzWTmf6.jpeg)  
Over the past several weeks, we have put together the Dependency Visualization feature for Lifecycle.  This product feature visualizes the dependencies of componen&hellip; (187 words, Jan 26, 2022)
- [Have you heard about the New Dependency Tree Visualization for Lifecycle? - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/have-you-heard-about-the-new-dependency-tree-visualization-for-lifecycle/8132/1/index.html): ![|400x225](upload://co8qXlgEzpEC82wwvVWITzWTmf6.jpeg)  
Over the past several weeks, we have put together the Dependency Visualization feature for Lifecycle.  This product feature visualizes the dependencies of componen&hellip; (189 words, Jan 26, 2022)
- [Nexus IQ Data Services Require Strong TLS Ciphers - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/nexus-iq-data-services-require-strong-tls-ciphers/8131/1/index.html): Beginning on March 31st, 2022, the Nexus IQ Data Services will stop accepting weak Transport Layer Security (TLS) cipher suites for HTTPS requests. From then on, only the following cipher suites can be used to initiate s&hellip; (316 words, Jan 26, 2022)
- [Join us in 1 hour for January Office Hours - 1pm ET - Community Announcements - Sonatype Community](/content/community/t/join-us-in-1-hour-for-january-office-hours-1pm-et/8128/index.html): Join us at 1 p.m ET (10 a.m PT | 6 p.m GMT) for our monthly, customer-exclusive Office Hours . 
This is your opportunity to get your questions answered and connect with leaders from Product, Customer Success, and Suppo&hellip; (120 words, Jan 26, 2022)
- [TOMORROW: January Office Hours at 1pm ET - Community Announcements - Sonatype Community](/content/community/t/tomorrow-january-office-hours-at-1pm-et/8121/index.html): Join us tomorrow, Wednesday, January 26th at 1 p.m ET (10 a.m PT | 6 p.m GMT), for our monthly, customer-exclusive Office Hours . 
This is your opportunity to get your questions answered and connect with leaders from P&hellip; (128 words, Jan 25, 2022)
- [Docker cleanup policy based on tags - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/docker-cleanup-policy-based-on-tags/8111/3/index.html): Hi, As I see in creating “cleanup policy”, I only can set “Remove components that were published over N days ago” or “Remove components that haven’t been downloaded in N days”. 
But I need to for example have last 20 tag&hellip; (166 words, Jan 24, 2022)
- [Docker cleanup policy based on tags - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/docker-cleanup-policy-based-on-tags/8111/index.html): Hi, As I see in creating “cleanup policy”, I only can set “Remove components that were published over N days ago” or “Remove components that haven’t been downloaded in N days”. 
But I need to for example have last 20 tag&hellip; (166 words, Jan 24, 2022)
- [IQ Server Release - 132 - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/iq-server-release-132/8102/index.html): What’s New in Release 132? 
New Dependency Visualization 
In release 132, Lifecycle is adding the NEW Dependency Visualization to the application analysis report and will include the following set of three features: 

Ap&hellip; (329 words, Jan 21, 2022)
- [IQ Server Release - 132 - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/iq-server-release-132/8102/1/index.html): What’s New in Release 132? 
New Dependency Visualization 
In release 132, Lifecycle is adding the NEW Dependency Visualization to the application analysis report and will include the following set of three features: 

Ap&hellip; (329 words, Jan 21, 2022)
- [Join us for January Office Hours - Wednesday, January 26th at 1pm ET - Community Announcements - Sonatype Community](/content/community/t/join-us-for-january-office-hours-wednesday-january-26th-at-1pm-et/8089/index.html): Join us Wednesday, January 26th at 1 p.m ET (10 a.m PT | 6 p.m GMT) for our monthly, customer-exclusive Office Hours. 
This is your opportunity to get your questions answered and connect with leaders from Product, Cust&hellip; (135 words, Jan 19, 2022)
- [Join us for January Office Hours - Wednesday, January 26th at 1pm ET - Community Announcements - Sonatype Community](/content/community/t/join-us-for-january-office-hours-wednesday-january-26th-at-1pm-et/8089/1/index.html): Join us Wednesday, January 26th at 1 p.m ET (10 a.m PT | 6 p.m GMT) for our monthly, customer-exclusive Office Hours. 
This is your opportunity to get your questions answered and connect with leaders from Product, Cust&hellip; (220 words, Jan 19, 2022)
- [Moving Docker images from Nexus Repository to Azure Container Registry - Sonatype Nexus Repository - Sonatype Community](/content/community/t/moving-docker-images-from-nexus-repository-to-azure-container-registry/8086/1/index.html): I have almost 500 GB of images in a Nexus Repository which I want to move to Azure Container Registry. Is it possible to do it using az acr import? I tried testing it in a test azure subscription but it’s not working. Co&hellip; (84 words, Jan 19, 2022)
- [Maintenance Downtime of Community on Tuesday, Jan 18, at 7:30 pm EST - Community Announcements - Sonatype Community](/content/community/t/maintenance-downtime-of-community-on-tuesday-jan-18-at-7-30-pm-est/8081/6/index.html): Starting around 7:30 PM EST on Tuesday, January 18, the Community forum will be brought offline to perform necessary maintenance and upgrades. 
This downtime is localized to just the community forum, and will not affect &hellip; (132 words, Jan 19, 2022)
- [Maintenance Downtime of Community on Tuesday, Jan 18, at 7:30 pm EST - Community Announcements - Sonatype Community](/content/community/t/maintenance-downtime-of-community-on-tuesday-jan-18-at-7-30-pm-est/8081/index.html): Starting around 7:30 PM EST on Tuesday, January 18, the Community forum will be brought offline to perform necessary maintenance and upgrades. 
This downtime is localized to just the community forum, and will not affect &hellip; (148 words, Jan 18, 2022)
- [Maintenance Downtime of Community on Tuesday, Jan 18, at 7:30 pm EST - Community Announcements - Sonatype Community](/content/community/t/maintenance-downtime-of-community-on-tuesday-jan-18-at-7-30-pm-est/8081/1/index.html): Starting around 7:30 PM EST on Tuesday, January 18, the Community forum will be brought offline to perform necessary maintenance and upgrades. 
This downtime is localized to just the community forum, and will not affect &hellip; (152 words, Jan 18, 2022)
- [Nexus server is used as a proxy instead of downloading from central maven - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-server-is-used-as-a-proxy-instead-of-downloading-from-central-maven/8080/index.html): I see in my logs that the same package is downloaded from nexus and from maven. I’m not sure why. in my code, there is only one option to go to Nexus. do I need to change the configuration on my nexus server? (170 words, Jan 18, 2022)
- [Java / Maven developer - PKIX path validation failure - Sonatype Nexus Repository - Sonatype Community](/content/community/t/java-maven-developer-pkix-path-validation-failure/8069/2/index.html): We are running Maven from a client VM machine and hitting the issue below. We are trying this for the first time. 
PKIX path validation failure related to certificates ? 
Issue: 
[ERROR] The project com.xxxxxxxx:vm-java-&hellip; (191 words, Jan 17, 2022)
- [Java / Maven developer - PKIX path validation failure - Sonatype Nexus Repository - Sonatype Community](/content/community/t/java-maven-developer-pkix-path-validation-failure/8069/index.html): We are running Maven from a client VM machine and hitting the issue below. We are trying this for the first time. 
PKIX path validation failure related to certificates ? 
Issue: 
[ERROR] The project com.xxxxxxxx:vm-java-&hellip; (189 words, Jan 17, 2022)
- [Java / Maven developer - PKIX path validation failure - Sonatype Nexus Repository - Sonatype Community](/content/community/t/java-maven-developer-pkix-path-validation-failure/8069/1/index.html): We are running Maven from a client VM machine and hitting the issue below. We are trying this for the first time. 
PKIX path validation failure related to certificates ? 
Issue: 
[ERROR] The project com.xxxxxxxx:vm-java-&hellip; (217 words, Jan 17, 2022)
- [FQDN and port for Repo URLs - Sonatype Nexus Repository - Sonatype Community](/content/community/t/fqdn-and-port-for-repo-urls/8064/index.html): I’m trying to set my Nexus3 server up behind a reverse proxy, and cannot seem to get the repo url to change. 
I realize this is similar to Change the URL for Repositories, however, I figure it’s been 2 years and the situ&hellip; (156 words, Jan 16, 2022)
- [Regarding Automatic Applications in Nexus IQ Server - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/regarding-automatic-applications-in-nexus-iq-server/7996/4/index.html): Dear team, 
Currently, it is possible to activate Automatic Application Creation via the NexusIQ UI. 
However, in the case where we have several organizations in the server, this feature is not usable 
as we can only sel&hellip; (304 words, Jan 14, 2022)
- [Unable to get latest version when using api - Sonatype Nexus Repository - Sonatype Community](/content/community/t/unable-to-get-latest-version-when-using-api/8043/index.html): i am trying to use the download api to get the latest version of a release but it looks like the artifact that i am getting is the first on the list and not the latest. nexus version is OSS 3.25.1-04 . 
curl -v -X GET “[h&hellip; (432 words, Jan 13, 2022)
- [Unable to get latest version when using api - Sonatype Nexus Repository - Sonatype Community](/content/community/t/unable-to-get-latest-version-when-using-api/8043/1/index.html): i am trying to use the download api to get the latest version of a release but it looks like the artifact that i am getting is the first on the list and not the latest. nexus version is OSS 3.25.1-04 . 
curl -v -X GET “[h&hellip; (437 words, Jan 13, 2022)
- [Redirection of request from Tomcat server to Nexus Software repository - Sonatype Nexus Repository - Sonatype Community](/content/community/t/redirection-of-request-from-tomcat-server-to-nexus-software-repository/7936/4/index.html): Hi All, 
Background: 
Currently we are using tomcat server for exposing its file system (storage of tools/installers) over web. The Tomcat server URLs of these softwares are being used in Bamboo pipelines, Dockerfiles an&hellip; (183 words, Jan 13, 2022)
- [Unable to delete hostged npm component version - Sonatype Nexus Repository - Sonatype Community](/content/community/t/unable-to-delete-hostged-npm-component-version/8024/index.html): We are hosting Nexus Repository Manager version 3.36.0-01 and is needing to delete a component version due to the presence of malicious code. 
Component details: colors v1.4.1 / 1.4.2 / 1.4.44-liberty-2 
I have deleted t&hellip; (199 words, Jan 11, 2022)
- [Unable to delete hostged npm component version - Sonatype Nexus Repository - Sonatype Community](/content/community/t/unable-to-delete-hostged-npm-component-version/8024/1/index.html): We are hosting Nexus Repository Manager version 3.36.0-01 and is needing to delete a component version due to the presence of malicious code. 
Component details: colors v1.4.1 / 1.4.2 / 1.4.44-liberty-2 
I have deleted t&hellip; (199 words, Jan 11, 2022)
- [New Guide Published: "What is Open Source Software?" - Community Announcements / News - Sonatype Community](/content/community/t/new-guide-published-what-is-open-source-software/8020/index.html): If you’d like to revisit some basics on open source software, check out this newly published guide, “What is Open Source Software?”, which was just published on Sonatype’s DevOps Educational Foundations Guides site. (48 words, Jan 10, 2022)
- [New Guide Published: "What is Open Source Software?" - Community Announcements / News - Sonatype Community](/content/community/t/new-guide-published-what-is-open-source-software/8020/1/index.html): If you’d like to revisit some basics on open source software, check out this newly published guide, “What is Open Source Software?”, which was just published on Sonatype’s DevOps Educational Foundations Guides site. (48 words, Jan 10, 2022)
- [Regarding Automatic Applications in Nexus IQ Server - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/regarding-automatic-applications-in-nexus-iq-server/7996/index.html): Dear team, 
Currently, it is possible to activate Automatic Application Creation via the NexusIQ UI. 
However, in the case where we have several organizations in the server, this feature is not usable 
as we can only sel&hellip; (304 words, Jan 6, 2022)
- [Regarding Automatic Applications in Nexus IQ Server - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/regarding-automatic-applications-in-nexus-iq-server/7996/1/index.html): Dear team, 
Currently, it is possible to activate Automatic Application Creation via the NexusIQ UI. 
However, in the case where we have several organizations in the server, this feature is not usable 
as we can only sel&hellip; (304 words, Jan 6, 2022)
- [NXRM Log4j Visualizer feature available to the community! - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nxrm-log4j-visualizer-feature-available-to-the-community/7995/index.html): Hi Sonatype Community, 
Concerned about Log4j? We can help! The new Log4j visualizer in Nexus Repository 3.37.3 provides greater visibility into Maven Log4j component downloads impacted by CVE-2021-4428. This experimenta&hellip; (133 words, Jan 6, 2022)
- [NXRM Log4j Visualizer feature available to the community! - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nxrm-log4j-visualizer-feature-available-to-the-community/7995/1/index.html): Hi Sonatype Community, 
Concerned about Log4j? We can help! The new Log4j visualizer in Nexus Repository 3.37.3 provides greater visibility into Maven Log4j component downloads impacted by CVE-2021-4428. This experimenta&hellip; (165 words, Jan 6, 2022)
- [Generation of POM File - Sonatype Nexus Repository - Sonatype Community](/content/community/t/generation-of-pom-file/7990/index.html): Hi, 
I have written PLSQL UTL_HTTP to send my files to nexus repository using CURL command. 
I would like to create my own POM file and send through CURL. Is it possible? Any specific format to create POM File? 
Or can a&hellip; (73 words, Jan 6, 2022)
- [Generation of POM File - Sonatype Nexus Repository - Sonatype Community](/content/community/t/generation-of-pom-file/7990/1/index.html): Hi, 
I have written PLSQL UTL_HTTP to send my files to nexus repository using CURL command. 
I would like to create my own POM file and send through CURL. Is it possible? Any specific format to create POM File? 
Or can a&hellip; (69 words, Jan 6, 2022)
- [Problem about snapshots metadata.xml - Sonatype Nexus Repository - Sonatype Community](/content/community/t/problem-about-snapshots-metadata-xml/7982/3/index.html): when I deploy snapshot-jar to a snapshots-repo，some problem occued： 
when I deploy the the 5th version  and the 6th version , the metadata.xml is always the 4th version，so, when I download the snapshot-jar，I always downl&hellip; (311 words, Jan 5, 2022)
- [Problem about snapshots metadata.xml - Sonatype Nexus Repository - Sonatype Community](/content/community/t/problem-about-snapshots-metadata-xml/7982/2/index.html): when I deploy snapshot-jar to a snapshots-repo，some problem occued： 
when I deploy the the 5th version  and the 6th version , the metadata.xml is always the 4th version，so, when I download the snapshot-jar，I always downl&hellip; (310 words, Jan 5, 2022)
- [Problem about snapshots metadata.xml - Sonatype Nexus Repository - Sonatype Community](/content/community/t/problem-about-snapshots-metadata-xml/7982/index.html): when I deploy snapshot-jar to a snapshots-repo，some problem occued： 
when I deploy the the 5th version  and the 6th version , the metadata.xml is always the 4th version，so, when I download the snapshot-jar，I always downl&hellip; (310 words, Jan 5, 2022)
- [Problem about snapshots metadata.xml - Sonatype Nexus Repository - Sonatype Community](/content/community/t/problem-about-snapshots-metadata-xml/7982/1/index.html): when I deploy snapshot-jar to a snapshots-repo，some problem occued： 
when I deploy the the 5th version  and the 6th version , the metadata.xml is always the 4th version，so, when I download the snapshot-jar，I always downl&hellip; (311 words, Jan 5, 2022)
- [Unable to login initially with randomly generated password - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/unable-to-login-initially-with-randomly-generated-password/7958/index.html): Running Nexus 3.37.2 as a service in k8s cluster 
on setting up the nexus, i’m unable to login with the random generated password 
i copied the generated password from /nexus-data/admin.password 
&amp; it’s not accepting, sa&hellip; (132 words, Dec 31, 2021)
- [Unable to login initially with randomly generated password - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/unable-to-login-initially-with-randomly-generated-password/7958/1/index.html): Running Nexus 3.37.2 as a service in k8s cluster 
on setting up the nexus, i’m unable to login with the random generated password 
i copied the generated password from /nexus-data/admin.password 
&amp; it’s not accepting, sa&hellip; (128 words, Dec 31, 2021)
- [Nexus as cache for Kubenetes Kind - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/nexus-as-cache-for-kubenetes-kind/7955/2/index.html): Hello, 
I’m using in my local developing environment Kubernetes Kind with Java projects (dockerized services). We get often into rate limits of multiple Maven and Docker public repositories, so I would like to setup a mi&hellip; (286 words, Dec 30, 2021)
- [Nexus as cache for Kubenetes Kind - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/nexus-as-cache-for-kubenetes-kind/7955/1/index.html): Hello, 
I’m using in my local developing environment Kubernetes Kind with Java projects (dockerized services). We get often into rate limits of multiple Maven and Docker public repositories, so I would like to setup a mi&hellip; (292 words, Dec 29, 2021)
- [How does nexus IQ server by Sonatype Lifecycle release 103 determine license threat level - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/how-does-nexus-iq-server-by-sonatype-lifecycle-release-103-determine-license-threat-level/7942/3/index.html): I have a couple decades of full stack developer experience including much use of open source. I have been tasked with helping my colleagues address attack vulnerabilities and licensing issues in their use of open source. &hellip; (389 words, Dec 28, 2021)
- [How does nexus IQ server by Sonatype Lifecycle release 103 determine license threat level - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/how-does-nexus-iq-server-by-sonatype-lifecycle-release-103-determine-license-threat-level/7942/2/index.html): I have a couple decades of full stack developer experience including much use of open source. I have been tasked with helping my colleagues address attack vulnerabilities and licensing issues in their use of open source. &hellip; (387 words, Dec 28, 2021)
- [How does nexus IQ server by Sonatype Lifecycle release 103 determine license threat level - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/how-does-nexus-iq-server-by-sonatype-lifecycle-release-103-determine-license-threat-level/7942/index.html): I have a couple decades of full stack developer experience including much use of open source. I have been tasked with helping my colleagues address attack vulnerabilities and licensing issues in their use of open source. &hellip; (379 words, Dec 27, 2021)
- [How does nexus IQ server by Sonatype Lifecycle release 103 determine license threat level - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/how-does-nexus-iq-server-by-sonatype-lifecycle-release-103-determine-license-threat-level/7942/1/index.html): I have a couple decades of full stack developer experience including much use of open source. I have been tasked with helping my colleagues address attack vulnerabilities and licensing issues in their use of open source. &hellip; (387 words, Dec 27, 2021)
- [Redirection of request from Tomcat server to Nexus Software repository - Sonatype Nexus Repository - Sonatype Community](/content/community/t/redirection-of-request-from-tomcat-server-to-nexus-software-repository/7936/index.html): Hi All, 
Background: 
Currently we are using tomcat server for exposing its file system (storage of tools/installers) over web. The Tomcat server URLs of these softwares are being used in Bamboo pipelines, Dockerfiles an&hellip; (182 words, Dec 27, 2021)
- [Redirection of request from Tomcat server to Nexus Software repository - Sonatype Nexus Repository - Sonatype Community](/content/community/t/redirection-of-request-from-tomcat-server-to-nexus-software-repository/7936/1/index.html): Hi All, 
Background: 
Currently we are using tomcat server for exposing its file system (storage of tools/installers) over web. The Tomcat server URLs of these softwares are being used in Bamboo pipelines, Dockerfiles an&hellip; (182 words, Dec 27, 2021)
- [New Video: My.sonatype.com Support Contacts - Community Announcements - Sonatype Community](/content/community/t/new-video-my-sonatype-com-support-contacts/7924/index.html): Do you know what a support contact is? Do you know how to designate one on my.sonatype.com? If you’d like to know more, check out this quick video (3:06) where we clarify how support contacts differ from organization mem&hellip; (153 words, Dec 22, 2021)
- [New Video: My.sonatype.com Support Contacts - Community Announcements - Sonatype Community](/content/community/t/new-video-my-sonatype-com-support-contacts/7924/1/index.html): Do you know what a support contact is? Do you know how to designate one on my.sonatype.com? If you’d like to know more, check out this quick video (3:06) where we clarify how support contacts differ from organization mem&hellip; (155 words, Dec 22, 2021)
- [My.sonatype.com and support.sonatype.com login intermittent failures (AWS outage) - Community Announcements - Sonatype Community](/content/community/t/my-sonatype-com-and-support-sonatype-com-login-intermittent-failures-aws-outage/7922/1/index.html): Hello Sonatype Community, 
Earlier today, you may have experienced errors attempting to log in to the Support Portal (including the ability to submit support tickets) and/or my.sonatype.com due to an AWS outage. 
Please &hellip; (157 words, Dec 22, 2021)
- [Update Your IQ Server License Threat Groups - Sonatype Labs - Sonatype Community](/content/community/t/update-your-iq-server-license-threat-groups/3094/21/index.html): The license threat group updater will apply the latest Sonatype provided license classification to your running IQ server’s license threat groups. This will alleviate any “License Threat Group not Assigned” policy violat&hellip; (499 words, Dec 16, 2021)
- [REMINDER: December Office Hours - Ask Us Anything: Log4j Exploit- 12/16/21 @ 12pm ET - Community Announcements - Sonatype Community](/content/community/t/reminder-december-office-hours-ask-us-anything-log4j-exploit-12-16-21-12pm-et/7879/index.html): Don’t forget! Join us today, Thursday, December 16th at 12 p.m. ET (9 a.m. PT | 5 p.m. GMT), for our monthly, customer-exclusive Office Hours. 
Last week, a serious zero-day Remote Code Execution (RCE) exploit was disc&hellip; (291 words, Dec 16, 2021)
- [REMINDER: December Office Hours - Ask Us Anything: Log4j Exploit- 12/16/21 @ 12pm ET - Community Announcements - Sonatype Community](/content/community/t/reminder-december-office-hours-ask-us-anything-log4j-exploit-12-16-21-12pm-et/7879/1/index.html): Don’t forget! Join us today, Thursday, December 16th at 12 p.m. ET (9 a.m. PT | 5 p.m. GMT), for our monthly, customer-exclusive Office Hours. 
Last week, a serious zero-day Remote Code Execution (RCE) exploit was disc&hellip; (205 words, Dec 16, 2021)
- [December Office Hours - Ask Us Anything: Log4j Exploit- 12/16/21 @ 12pm ET - Community Announcements - Sonatype Community](/content/community/t/december-office-hours-ask-us-anything-log4j-exploit-12-16-21-12pm-et/7870/index.html): Join us Thursday, December 16th at 12 p.m. ET (9 a.m. PT | 5 p.m. GMT) for our monthly, customer-exclusive Office Hours. 
Last week, a serious zero-day Remote Code Execution (RCE) exploit was discovered in log4j. This &hellip; (311 words, Dec 14, 2021)
- [December Office Hours - Ask Us Anything: Log4j Exploit- 12/16/21 @ 12pm ET - Community Announcements - Sonatype Community](/content/community/t/december-office-hours-ask-us-anything-log4j-exploit-12-16-21-12pm-et/7870/1/index.html): Join us Thursday, December 16th at 12 p.m. ET (9 a.m. PT | 5 p.m. GMT) for our monthly, customer-exclusive Office Hours. 
Last week, a serious zero-day Remote Code Execution (RCE) exploit was discovered in log4j. This &hellip; (247 words, Dec 14, 2021)
- [Join us for December Office Hours - Thursday, December 16th at 12pm ET - Community Announcements - Sonatype Community](/content/community/t/join-us-for-december-office-hours-thursday-december-16th-at-12pm-et/7824/index.html): UPDATE: Due to the ongoing situation with the log4j exploit, this month’s Office Hours will now focus on this topic. For more information, please refer to this post. 

 
Join us Thursday, December 16th at 12 p.m. ET (9 a&hellip; (178 words, Dec 9, 2021)
- [How to import data in small chunks if repos are large - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-to-import-data-in-small-chunks-if-repos-are-large/7820/index.html): Hell There, 
we are following the same steps for nexus-repository-import-scripts/mavenimport.sh at master · sonatype-nexus-community/nexus-repository-import-scripts · GitHub 
bash ../mavenimport.sh -u admin -p &quot;${NEXUS_A&hellip; (98 words, Dec 9, 2021)
- [How to import data in small chunks if repos are large - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-to-import-data-in-small-chunks-if-repos-are-large/7820/1/index.html): Hell There, 
we are following the same steps for nexus-repository-import-scripts/mavenimport.sh at master · sonatype-nexus-community/nexus-repository-import-scripts · GitHub 
bash ../mavenimport.sh -u admin -p &quot;${NEXUS_A&hellip; (96 words, Dec 9, 2021)
- [NEXUS Repository 3 - YUM Hosted - No metadata for package - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-repository-3-yum-hosted-no-metadata-for-package/7805/2/index.html): Hello Team, 
I need some help to understand an issue with my Nexus Repository OSS v3. 
I created a YUM Hosted repository to host default repo from a Redhat CDROM. 
So i used CURL to post all my RPMS from a local folder, &hellip; (368 words, Dec 8, 2021)
- [Have You Heard About Firewall & other Firewall Resources - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/have-you-heard-about-firewall-other-firewall-resources/7807/index.html): Hey! 
Over the past several weeks we’ve put together a bunch of new resources for Nexus Firewall. 


Have you Heard About Firewall? - a video going over all the new firewall features.

Firewall Technical Documentation - &hellip; (188 words, Dec 7, 2021)
- [Have You Heard About Firewall & other Firewall Resources - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/have-you-heard-about-firewall-other-firewall-resources/7807/1/index.html): Hey! 
Over the past several weeks we’ve put together a bunch of new resources for Nexus Firewall. 


Have you Heard About Firewall? - a video going over all the new firewall features.

Firewall Technical Documentation - &hellip; (179 words, Dec 7, 2021)
- [NEXUS Repository 3 - YUM Hosted - No metadata for package - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-repository-3-yum-hosted-no-metadata-for-package/7805/index.html): Hello Team, 
I need some help to understand an issue with my Nexus Repository OSS v3. 
I created a YUM Hosted repository to host default repo from a Redhat CDROM. 
So i used CURL to post all my RPMS from a local folder, &hellip; (379 words, Dec 7, 2021)
- [NEXUS Repository 3 - YUM Hosted - No metadata for package - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-repository-3-yum-hosted-no-metadata-for-package/7805/1/index.html): Hello Team, 
I need some help to understand an issue with my Nexus Repository OSS v3. 
I created a YUM Hosted repository to host default repo from a Redhat CDROM. 
So i used CURL to post all my RPMS from a local folder, &hellip; (381 words, Dec 7, 2021)
- [A New Home for Sonatype Ideas - Community Announcements - Sonatype Community](/content/community/t/a-new-home-for-sonatype-ideas/7800/index.html): Today we’re thrilled to announce the launch of Sonatype’s new customer-centric Product Feedback process and Ideas portal, ideas.sonatype.com. 
We’ve always been impressed by the Sonatype Community and its dedication to p&hellip; (751 words, Dec 7, 2021)
- [A New Home for Sonatype Ideas - Community Announcements - Sonatype Community](/content/community/t/a-new-home-for-sonatype-ideas/7800/1/index.html): Today we’re thrilled to announce the launch of Sonatype’s new customer-centric Product Feedback process and Ideas portal, ideas.sonatype.com. 
We’ve always been impressed by the Sonatype Community and its dedication to p&hellip; (742 words, Dec 7, 2021)
- [When nexus decides to delete blobs, and which blobs, if nothing configured to do so - Sonatype Nexus Repository - Sonatype Community](/content/community/t/when-nexus-decides-to-delete-blobs-and-which-blobs-if-nothing-configured-to-do-so/7796/index.html): Hello, 
We’re using Sonatype Nexus Repository ManagerOSS 3.30.1-01 with an s3 blobstore and 3 npm repos (hosted, proxy and group) configured with this blobstore, 
I see a lot of objects in s3 bucket with a tag deleted=tr&hellip; (670 words, Dec 7, 2021)
- [When nexus decides to delete blobs, and which blobs, if nothing configured to do so - Sonatype Nexus Repository - Sonatype Community](/content/community/t/when-nexus-decides-to-delete-blobs-and-which-blobs-if-nothing-configured-to-do-so/7796/1/index.html): Hello, 
We’re using Sonatype Nexus Repository ManagerOSS 3.30.1-01 with an s3 blobstore and 3 npm repos (hosted, proxy and group) configured with this blobstore, 
I see a lot of objects in s3 bucket with a tag deleted=tr&hellip; (664 words, Dec 7, 2021)
- [Sonatype Nexus IQ evaluation license request - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/sonatype-nexus-iq-evaluation-license-request/7772/2/index.html): Hello there, 
Is there a way to request a trial license for Nexus IQ server please? 
Thanks (154 words, Dec 3, 2021)
- [Sonatype Nexus IQ evaluation license request - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/sonatype-nexus-iq-evaluation-license-request/7772/index.html): Hello there, 
Is there a way to request a trial license for Nexus IQ server please? 
Thanks (155 words, Dec 3, 2021)
- [Sonatype Nexus IQ evaluation license request - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/sonatype-nexus-iq-evaluation-license-request/7772/1/index.html): Hello there, 
Is there a way to request a trial license for Nexus IQ server please? 
Thanks (148 words, Dec 3, 2021)
- [Reference to configuration properties - uid in docker container - Sonatype Nexus Repository - Sonatype Community](/content/community/t/reference-to-configuration-properties-uid-in-docker-container/7765/index.html): Hi, 
is there a complete reference for all nexus OSS configuration properties? 
How can I change the uid nexus OSS is running as in a container? (like not 200?) 
thank you 
best regards 
Torsten (634 words, Dec 3, 2021)
- [Reference to configuration properties - uid in docker container - Sonatype Nexus Repository - Sonatype Community](/content/community/t/reference-to-configuration-properties-uid-in-docker-container/7765/1/index.html): Hi, 
is there a complete reference for all nexus OSS configuration properties? 
How can I change the uid nexus OSS is running as in a container? (like not 200?) 
thank you 
best regards 
Torsten (645 words, Dec 3, 2021)
- [Maintenance Downtime of Community on Monday, Nov 22, at 7:30 pm EST - Community Announcements - Sonatype Community](/content/community/t/maintenance-downtime-of-community-on-monday-nov-22-at-7-30-pm-est/7716/5/index.html): Starting around 7:30 PM EST on Monday, November 22, the Community forum will be brought offline to perform necessary maintenance and upgrades. 
This downtime is localized to just the community forum, and will not affect &hellip; (132 words, Nov 23, 2021)
- [Is there any place/way to receive Patch/Upgrade Notifications, Security Notification, Security Advisory Notification for Nexus Repo and Nexus IQ? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/is-there-any-place-way-to-receive-patch-upgrade-notifications-security-notification-security-advisory-notification-for-nexus-repo-and-nexus-iq/7685/5/index.html): Also is there any way to subscribe to such notifications, if so, how? (220 words, Nov 22, 2021)
- [Maintenance Downtime of Community on Monday, Nov 22, at 7:30 pm EST - Community Announcements - Sonatype Community](/content/community/t/maintenance-downtime-of-community-on-monday-nov-22-at-7-30-pm-est/7716/index.html): Starting around 7:30 PM EST on Monday, November 22, the Community forum will be brought offline to perform necessary maintenance and upgrades. 
This downtime is localized to just the community forum, and will not affect &hellip; (136 words, Nov 22, 2021)
- [Maintenance Downtime of Community on Monday, Nov 22, at 7:30 pm EST - Community Announcements - Sonatype Community](/content/community/t/maintenance-downtime-of-community-on-monday-nov-22-at-7-30-pm-est/7716/1/index.html): Starting around 7:30 PM EST on Monday, November 22, the Community forum will be brought offline to perform necessary maintenance and upgrades. 
This downtime is localized to just the community forum, and will not affect &hellip; (171 words, Nov 22, 2021)
- [[NEW VIDEO] Have You Heard... about the Component Details Page? - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/new-video-have-you-heard-about-the-component-details-page/7715/index.html): Have you heard… about the Component Details Page? 
 
The Lifecycle team has been hard at work redesigning the Component Information Panel (CIP) to provide an improved experience while researching component violations and&hellip; (124 words, Nov 22, 2021)
- [[NEW VIDEO] Have You Heard... about the Component Details Page? - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/new-video-have-you-heard-about-the-component-details-page/7715/1/index.html): Have you heard… about the Component Details Page? 
 
The Lifecycle team has been hard at work redesigning the Component Information Panel (CIP) to provide an improved experience while researching component violations and&hellip; (196 words, Nov 22, 2021)
- [Coming the Beginning of December - CRAN(R), Cargo(Rust), and Conda Data Unification - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/coming-the-beginning-of-december-cran-r-cargo-rust-and-conda-data-unification/7705/index.html): Starting the first week of December, users of Nexus Lifecycle and Nexus Firewall who evaluate CRAN, Cargo, or Conda may experience a change in results. 
The change is due to Sonatype’s work on its data catalog. Sonatype &hellip; (420 words, Nov 19, 2021)
- [Coming the Beginning of December - CRAN(R), Cargo(Rust), and Conda Data Unification - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/coming-the-beginning-of-december-cran-r-cargo-rust-and-conda-data-unification/7705/1/index.html): Starting the first week of December, users of Nexus Lifecycle and Nexus Firewall who evaluate CRAN, Cargo, or Conda may experience a change in results. 
The change is due to Sonatype’s work on its data catalog. Sonatype &hellip; (420 words, Nov 19, 2021)
- [How to configure the idle session timeout for Nexus IQ? - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/how-to-configure-the-idle-session-timeout-for-nexus-iq/7693/index.html): Is it possible to configure a custom time other than the default 30 minutes for Nexus IQ idle session timeout? If so, how? (100 words, Nov 18, 2021)
- [How to configure the idle session timeout for Nexus IQ? - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/how-to-configure-the-idle-session-timeout-for-nexus-iq/7693/1/index.html): Is it possible to configure a custom time other than the default 30 minutes for Nexus IQ idle session timeout? If so, how? (187 words, Nov 18, 2021)
- [Required Firewall Ports for Nexus Repo Server and Nexus IQ Server communication - Sonatype Nexus Repository - Sonatype Community](/content/community/t/required-firewall-ports-for-nexus-repo-server-and-nexus-iq-server-communication/7692/index.html): Is both inbound and outbound connectivity required? i.e. nexus iq to nexus on 8081 and nexus to nexus iq on 8070. 
Or is one way traffic from nexus to nexus iq required? i.e. nexus to nexus iq on 8070. (131 words, Nov 18, 2021)
- [Required Firewall Ports for Nexus Repo Server and Nexus IQ Server communication - Sonatype Nexus Repository - Sonatype Community](/content/community/t/required-firewall-ports-for-nexus-repo-server-and-nexus-iq-server-communication/7692/1/index.html): Is both inbound and outbound connectivity required? i.e. nexus iq to nexus on 8081 and nexus to nexus iq on 8070. 
Or is one way traffic from nexus to nexus iq required? i.e. nexus to nexus iq on 8070. (59 words, Nov 18, 2021)
- [Join us in 1 hour for November Office Hours - 10am ET - Community Announcements - Sonatype Community](/content/community/t/join-us-in-1-hour-for-november-office-hours-10am-et/7689/index.html): Join us in one hour at 10am ET (7am PT | 3pm GMT) for our monthly customer-exclusive Office Hours. 
This is your opportunity to get your questions answered and connect with leaders from Product, Customer Success, and S&hellip; (92 words, Nov 18, 2021)
- [Join us in 1 hour for November Office Hours - 10am ET - Community Announcements - Sonatype Community](/content/community/t/join-us-in-1-hour-for-november-office-hours-10am-et/7689/1/index.html): Join us in one hour at 10am ET (7am PT | 3pm GMT) for our monthly customer-exclusive Office Hours. 
This is your opportunity to get your questions answered and connect with leaders from Product, Customer Success, and S&hellip; (169 words, Nov 18, 2021)
- [Help Us Improve Our Documentation! - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/help-us-improve-our-documentation/7687/index.html): Hello Lifecycle and Firewall Community! 
I’m Lisa, and I am a (new-ish) technical writer at Sonatype. I am looking to better understand your preferences for and struggles with our product documentation. If you have a few&hellip; (177 words, Nov 18, 2021)
- [Help Us Improve Our Documentation! - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/help-us-improve-our-documentation/7687/1/index.html): Hello Lifecycle and Firewall Community! 
I’m Lisa, and I am a (new-ish) technical writer at Sonatype. I am looking to better understand your preferences for and struggles with our product documentation. If you have a few&hellip; (143 words, Nov 18, 2021)
- [Is there any place/way to receive Patch/Upgrade Notifications, Security Notification, Security Advisory Notification for Nexus Repo and Nexus IQ? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/is-there-any-place-way-to-receive-patch-upgrade-notifications-security-notification-security-advisory-notification-for-nexus-repo-and-nexus-iq/7685/1/index.html): Also is there any way to subscribe to such notifications, if so, how? (301 words, Nov 18, 2021)
- [SCM_AUTHN_FAILURE in Azure devops scm connect - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/scm-authn-failure-in-azure-devops-scm-connect/7667/2/index.html): Team, 
I tried to connect the IQ server with azure devops scm to import projects. I used my pat token and azure email address to connect. But all the time i get failed reponse, when i looked at the console to view the re&hellip; (285 words, Nov 17, 2021)
- [Join us tomorrow for November Office Hours - 10am ET - Community Announcements - Sonatype Community](/content/community/t/join-us-tomorrow-for-november-office-hours-10am-et/7675/index.html): Join us tomorrow, Thursday, November 18th at 10am ET (7am PT | 3pm GMT), for our monthly customer Office Hours. 
This is your opportunity to get your questions answered and connect with leaders from Product, Customer S&hellip; (178 words, Nov 17, 2021)
- [Join us tomorrow for November Office Hours - 10am ET - Community Announcements - Sonatype Community](/content/community/t/join-us-tomorrow-for-november-office-hours-10am-et/7675/1/index.html): Join us tomorrow, Thursday, November 18th at 10am ET (7am PT | 3pm GMT), for our monthly customer Office Hours. 
This is your opportunity to get your questions answered and connect with leaders from Product, Customer S&hellip; (103 words, Nov 17, 2021)
- [Release 128 - New Component Details Page - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/release-128-new-component-details-page/7674/index.html): New to Lifecycle 
The Lifecycle team has been hard at work redesigning the Component Information Panel (CIP) to provide an improved experience while researching component violations and taking action to remediate any ris&hellip; (403 words, Nov 17, 2021)
- [Release 128 - New Component Details Page - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/release-128-new-component-details-page/7674/1/index.html): New to Lifecycle 
The Lifecycle team has been hard at work redesigning the Component Information Panel (CIP) to provide an improved experience while researching component violations and taking action to remediate any ris&hellip; (413 words, Nov 17, 2021)
- [API to Retrieve CVEs (Not POST)? - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/api-to-retrieve-cves-not-post/7643/3/index.html): Hi everyone - I’m looking at current Nexus IQ API documentation, and it seems that every API for CVE information uses POST. If I want to simply retrieve existing CVE information under existing components for reporting pu&hellip; (141 words, Nov 16, 2021)
- [SCM_AUTHN_FAILURE in Azure devops scm connect - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/scm-authn-failure-in-azure-devops-scm-connect/7667/index.html): Team, 
I tried to connect the IQ server with azure devops scm to import projects. I used my pat token and azure email address to connect. But all the time i get failed reponse, when i looked at the console to view the re&hellip; (167 words, Nov 16, 2021)
- [SCM_AUTHN_FAILURE in Azure devops scm connect - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/scm-authn-failure-in-azure-devops-scm-connect/7667/1/index.html): Team, 
I tried to connect the IQ server with azure devops scm to import projects. I used my pat token and azure email address to connect. But all the time i get failed reponse, when i looked at the console to view the re&hellip; (242 words, Nov 16, 2021)
- [How do I export nexus iq report (reportPdfUrl) in Gitlab Artifact - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/how-do-i-export-nexus-iq-report-reportpdfurl-in-gitlab-artifact/7663/1/index.html): I created Gitlab-ci.yml as below, the json file is downloaded at Gitlab pipeline page. 
I noticed in the json file, there is “reportPdfUrl” , can I export it firectly to Gitlab artifacts? 
So that user click on Gitlab do&hellip; (158 words, Nov 16, 2021)
- [New installment loses ability to connect to LDAP - Sonatype Nexus Repository - Sonatype Community](/content/community/t/new-installment-loses-ability-to-connect-to-ldap/7647/2/index.html): If I restart Nexus LDAP connectivity will work for a few minutes but then I see this in the logs: 
2021-11-11 21:35:09,562+0000 WARN  [qtp259951014-554] *UNKNOWN org.sonatype.nexus.ldap.internal.connector.FailoverLdapCon&hellip; (121 words, Nov 15, 2021)
- [API to Retrieve CVEs (Not POST)? - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/api-to-retrieve-cves-not-post/7643/2/index.html): Hi everyone - I’m looking at current Nexus IQ API documentation, and it seems that every API for CVE information uses POST. If I want to simply retrieve existing CVE information under existing components for reporting pu&hellip; (215 words, Nov 15, 2021)
- [Invalid SAML Metadata - Sonatype Nexus Repository - Sonatype Community](/content/community/t/invalid-saml-metadata/7635/4/index.html): I am running into this issue with my SAML. Has anyone ran into this issue? 
[idpMetadata] 
[Invalid SAML metadata: cvc-complex-type.2.4.a: Invalid content was found starting with element ‘SingleLogoutService’. One of ‘{“&hellip; (192 words, Nov 15, 2021)
- [What to set for the variables in Gitlab CICD settings - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/what-to-set-for-the-variables-in-gitlab-cicd-settings/7656/index.html): I am referring to the guide 
https://hub.docker.com/r/sonatype/gitlab-nexus-iq-pipeline 
what should I setup in Gitlab CICD settigns? 
NEXUS_CONTAINER_SCANNING_SCANNER_IMAGE ← is this the image Just build in the same git&hellip; (79 words, Nov 15, 2021)
- [What to set for the variables in Gitlab CICD settings - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/what-to-set-for-the-variables-in-gitlab-cicd-settings/7656/1/index.html): I am referring to the guide 
https://hub.docker.com/r/sonatype/gitlab-nexus-iq-pipeline 
what should I setup in Gitlab CICD settigns? 
NEXUS_CONTAINER_SCANNING_SCANNER_IMAGE ← is this the image Just build in the same git&hellip; (87 words, Nov 15, 2021)
- [Error when running scan inside gitlab CI - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/error-when-running-scan-inside-gitlab-ci/7655/index.html): is there any manual step needed not mentioned in spec? e.g. create directory? 
ERROR: 
cp: can’t stat ‘/sonatype/reports/*.html’: No such file or directory (40 words, Nov 15, 2021)
- [New installment loses ability to connect to LDAP - Sonatype Nexus Repository - Sonatype Community](/content/community/t/new-installment-loses-ability-to-connect-to-ldap/7647/index.html): If I restart Nexus LDAP connectivity will work for a few minutes but then I see this in the logs: 
2021-11-11 21:35:09,562+0000 WARN  [qtp259951014-554] *UNKNOWN org.sonatype.nexus.ldap.internal.connector.FailoverLdapCon&hellip; (121 words, Nov 12, 2021)
- [New installment loses ability to connect to LDAP - Sonatype Nexus Repository - Sonatype Community](/content/community/t/new-installment-loses-ability-to-connect-to-ldap/7647/1/index.html): If I restart Nexus LDAP connectivity will work for a few minutes but then I see this in the logs: 
2021-11-11 21:35:09,562+0000 WARN  [qtp259951014-554] *UNKNOWN org.sonatype.nexus.ldap.internal.connector.FailoverLdapCon&hellip; (121 words, Nov 12, 2021)
- [API to Retrieve CVEs (Not POST)? - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/api-to-retrieve-cves-not-post/7643/index.html): Hi everyone - I’m looking at current Nexus IQ API documentation, and it seems that every API for CVE information uses POST. If I want to simply retrieve existing CVE information under existing components for reporting pu&hellip; (140 words, Nov 11, 2021)
- [API to Retrieve CVEs (Not POST)? - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/api-to-retrieve-cves-not-post/7643/1/index.html): Hi everyone - I’m looking at current Nexus IQ API documentation, and it seems that every API for CVE information uses POST. If I want to simply retrieve existing CVE information under existing components for reporting pu&hellip; (141 words, Nov 11, 2021)
- [Join us for November Office Hours - Thursday, November 18th, 2021 at 10am ET - Community Announcements - Sonatype Community](/content/community/t/join-us-for-november-office-hours-thursday-november-18th-2021-at-10am-et/7638/index.html): Join us on Thursday, November 18th at 10am ET (7am PT | 3pm GMT) for our monthly customer Office Hours. 
This is your opportunity to get your questions answered and connect with leaders from Product, Customer Success, &hellip; (201 words, Nov 11, 2021)
- [Join us for November Office Hours - Thursday, November 18th, 2021 at 10am ET - Community Announcements - Sonatype Community](/content/community/t/join-us-for-november-office-hours-thursday-november-18th-2021-at-10am-et/7638/1/index.html): Join us on Thursday, November 18th at 10am ET (7am PT | 3pm GMT) for our monthly customer Office Hours. 
This is your opportunity to get your questions answered and connect with leaders from Product, Customer Success, &hellip; (182 words, Nov 11, 2021)
- [Invalid SAML Metadata - Sonatype Nexus Repository - Sonatype Community](/content/community/t/invalid-saml-metadata/7635/index.html): I am running into this issue with my SAML. Has anyone ran into this issue? 
[idpMetadata] 
[Invalid SAML metadata: cvc-complex-type.2.4.a: Invalid content was found starting with element ‘SingleLogoutService’. One of ‘{“&hellip; (192 words, Nov 10, 2021)
- [Invalid SAML Metadata - Sonatype Nexus Repository - Sonatype Community](/content/community/t/invalid-saml-metadata/7635/1/index.html): I am running into this issue with my SAML. Has anyone ran into this issue? 
[idpMetadata] 
[Invalid SAML metadata: cvc-complex-type.2.4.a: Invalid content was found starting with element ‘SingleLogoutService’. One of ‘{“&hellip; (192 words, Nov 10, 2021)
- [Update Your IQ Server License Threat Groups - Sonatype Labs - Sonatype Community](/content/community/t/update-your-iq-server-license-threat-groups/3094/20/index.html): The license threat group updater will apply the latest Sonatype provided license classification to your running IQ server’s license threat groups. This will alleviate any “License Threat Group not Assigned” policy violat&hellip; (692 words, Nov 10, 2021)
- [New Guide: Firewall's Policy Compliant Component Selection for npm - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/new-guide-firewalls-policy-compliant-component-selection-for-npm/7626/index.html): The Technical Content team is excited to announce the release of a brand new guide, &quot;Firewall’s Policy Compliant Component Selection for npm.&quot; 
To protect against unknown, suspicious, and malicious components, Nexus Fire&hellip; (269 words, Nov 9, 2021)
- [New Guide: Firewall's Policy Compliant Component Selection for npm - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/new-guide-firewalls-policy-compliant-component-selection-for-npm/7626/1/index.html): The Technical Content team is excited to announce the release of a brand new guide, &quot;Firewall’s Policy Compliant Component Selection for npm.&quot; 
To protect against unknown, suspicious, and malicious components, Nexus Fire&hellip; (290 words, Nov 9, 2021)
- [Add API for waive dependency confusion on Repository Result - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/add-api-for-waive-dependency-confusion-on-repository-result/7578/3/index.html): We want a new API which could be used to waive the dependency confusion on Repository Result 
the sample report link: 
https://xxxx:port/assets/index.html#/repository/2626993c3b194bb28e085d5d86692ddc/result 
This is used&hellip; (199 words, Nov 9, 2021)
- [Enable nexus iq jenkin plugin to configure two or more URL - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/enable-nexus-iq-jenkin-plugin-to-configure-two-or-more-url/7607/3/index.html): Recently, we have migrated our on-premium nexux iq server to gcp instances, from 1 on-premium instances to 2 gcp instances with data split. parts of organizations are moved to instance 1, the left ones are migrated to in&hellip; (282 words, Nov 8, 2021)
- [Enable nexus iq jenkin plugin to configure two or more URL - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/enable-nexus-iq-jenkin-plugin-to-configure-two-or-more-url/7607/index.html): Recently, we have migrated our on-premium nexux iq server to gcp instances, from 1 on-premium instances to 2 gcp instances with data split. parts of organizations are moved to instance 1, the left ones are migrated to in&hellip; (197 words, Nov 7, 2021)
- [Enable nexus iq jenkin plugin to configure two or more URL - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/enable-nexus-iq-jenkin-plugin-to-configure-two-or-more-url/7607/1/index.html): Recently, we have migrated our on-premium nexux iq server to gcp instances, from 1 on-premium instances to 2 gcp instances with data split. parts of organizations are moved to instance 1, the left ones are migrated to in&hellip; (263 words, Nov 7, 2021)
- [Nexus 2 : second LDAP - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-2-second-ldap/7588/2/index.html): Hi, 
Is it possible to configure another LDAP in Nexus 2 ? 
if yes, how ? 
if no, it  is possible in Nexus 3 ? 
thx 
Michel (65 words, Nov 4, 2021)
- [Nexus 2 : second LDAP - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-2-second-ldap/7588/index.html): Hi, 
Is it possible to configure another LDAP in Nexus 2 ? 
if yes, how ? 
if no, it  is possible in Nexus 3 ? 
thx 
Michel (65 words, Nov 4, 2021)
- [Nexus 2 : second LDAP - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-2-second-ldap/7588/1/index.html): Hi, 
Is it possible to configure another LDAP in Nexus 2 ? 
if yes, how ? 
if no, it  is possible in Nexus 3 ? 
thx 
Michel (65 words, Nov 4, 2021)
- [[Coming Soon] New Component Details Page - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/coming-soon-new-component-details-page/7584/index.html): Coming soon to Lifecycle! 
The Lifecycle team has been hard at work redesigning the Component Information Panel (CIP) to provide an improved experience while researching component violations and taking action to remediat&hellip; (235 words, Nov 3, 2021)
- [[Coming Soon] New Component Details Page - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/coming-soon-new-component-details-page/7584/1/index.html): Coming soon to Lifecycle! 
The Lifecycle team has been hard at work redesigning the Component Information Panel (CIP) to provide an improved experience while researching component violations and taking action to remediat&hellip; (237 words, Nov 3, 2021)
- [Not able to integrate with gitlab nexus iq - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/not-able-to-integrate-with-gitlab-nexus-iq/7583/index.html): IQscan: 
stage: test 
image: sonatype/gitlab-nexus-iq-pipeline:1.121.0-01b 
script: 


ls -lrta 


/sonatype/evaluate  -i hello-world target/*.war 


artifacts: 
name: &quot;policy-eval-$CI_JOB_NAME-$CI_COMMIT_REF_NAME&quot;

i ha&hellip; (60 words, Nov 3, 2021)
- [Not able to integrate with gitlab nexus iq - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/not-able-to-integrate-with-gitlab-nexus-iq/7583/1/index.html): IQscan: 
stage: test 
image: sonatype/gitlab-nexus-iq-pipeline:1.121.0-01b 
script: 


ls -lrta 


/sonatype/evaluate  -i hello-world target/*.war 


artifacts: 
name: &quot;policy-eval-$CI_JOB_NAME-$CI_COMMIT_REF_NAME&quot;

i ha&hellip; (140 words, Nov 3, 2021)
- [LDAP with StartTLS support? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/ldap-with-starttls-support/7580/1/index.html): In the docs seems that Nexus Repository Manager 3 supports both LDAP (clear) and LDAPS (LDAP over SSL). 
What I still can’t see is the possibility to use the clear default port (389) along with the StartTLS option, which&hellip; (172 words, Nov 3, 2021)
- [Add API for waive dependency confusion on Repository Result - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/add-api-for-waive-dependency-confusion-on-repository-result/7578/index.html): We want a new API which could be used to waive the dependency confusion on Repository Result 
the sample report link: 
https://xxxx:port/assets/index.html#/repository/2626993c3b194bb28e085d5d86692ddc/result 
This is used&hellip; (199 words, Nov 3, 2021)
- [Add API for waive dependency confusion on Repository Result - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/add-api-for-waive-dependency-confusion-on-repository-result/7578/1/index.html): We want a new API which could be used to waive the dependency confusion on Repository Result 
the sample report link: 
https://xxxx:port/assets/index.html#/repository/2626993c3b194bb28e085d5d86692ddc/result 
This is used&hellip; (199 words, Nov 3, 2021)
- [Getting PR_CONNECT_RESET_ERROR when trying to enable SSL for Nexus Repo Manager - Sonatype Nexus Repository - Sonatype Community](/content/community/t/getting-pr-connect-reset-error-when-trying-to-enable-ssl-for-nexus-repo-manager/7553/index.html): Have a Nexus Container, v3:3.30.0, and trying to enable SSL on it, using Podman for containerization that lives on a RHEL8 physical server. 
Once I run thru the various commands and modify config files, restart the conta&hellip; (379 words, Oct 28, 2021)
- [Getting PR_CONNECT_RESET_ERROR when trying to enable SSL for Nexus Repo Manager - Sonatype Nexus Repository - Sonatype Community](/content/community/t/getting-pr-connect-reset-error-when-trying-to-enable-ssl-for-nexus-repo-manager/7553/1/index.html): Have a Nexus Container, v3:3.30.0, and trying to enable SSL on it, using Podman for containerization that lives on a RHEL8 physical server. 
Once I run thru the various commands and modify config files, restart the conta&hellip; (372 words, Oct 28, 2021)
- [Update Your IQ Server License Threat Groups - Sonatype Labs - Sonatype Community](/content/community/t/update-your-iq-server-license-threat-groups/3094/19/index.html): The license threat group updater will apply the latest Sonatype provided license classification to your running IQ server’s license threat groups. This will alleviate any “License Threat Group not Assigned” policy violat&hellip; (638 words, Oct 27, 2021)
- [Welcome to the Sonatype Community - Community Announcements / Welcome - Sonatype Community](/content/community/t/welcome-to-the-sonatype-community/8/3/index.html): Welcome to the Sonatype Community! 
Sonatype is a community of real people who are passionate about software development and innovation. Here we collaborate on answers, solutions, and ideas about the products and service&hellip; (133 words, Oct 26, 2021)
- [Maintenance Downtime of Community on Monday, Oct 25, at 7:30 pm EST - Community Announcements - Sonatype Community](/content/community/t/maintenance-downtime-of-community-on-monday-oct-25-at-7-30-pm-est/7530/4/index.html): Starting around 7:30 PM EST on Monday, October 25, the Community forum will be brought offline to perform necessary maintenance and upgrades. 
This downtime is localized to just the community forum, and will not affect o&hellip; (131 words, Oct 26, 2021)
- [Update Your IQ Server License Threat Groups - Sonatype Labs - Sonatype Community](/content/community/t/update-your-iq-server-license-threat-groups/3094/18/index.html): The license threat group updater will apply the latest Sonatype provided license classification to your running IQ server’s license threat groups. This will alleviate any “License Threat Group not Assigned” policy violat&hellip; (521 words, Oct 26, 2021)
- [Don't miss it! Join us for October Office Hours at 11am ET - Community Announcements - Sonatype Community](/content/community/t/dont-miss-it-join-us-for-october-office-hours-at-11am-et/7537/index.html): Join us in an hour at 11am ET (8am PT|4pm BST) for our monthly customer Office Hours. 
Hear the latest Nexus Firewall updates including: 

Policy-compliant component selection
Release Integrity for Python (PyPI)

Drop &hellip; (94 words, Oct 26, 2021)
- [Don't miss it! Join us for October Office Hours at 11am ET - Community Announcements - Sonatype Community](/content/community/t/dont-miss-it-join-us-for-october-office-hours-at-11am-et/7537/1/index.html): Join us in an hour at 11am ET (8am PT|4pm BST) for our monthly customer Office Hours. 
Hear the latest Nexus Firewall updates including: 

Policy-compliant component selection
Release Integrity for Python (PyPI)

Drop &hellip; (165 words, Oct 26, 2021)
- [Nexus IQ Server: Release 125 - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/nexus-iq-server-release-125/7472/4/index.html): We’re excited to announce IQ Server 125! 
Check out the full release notes here (as well as past release notes) and read the highlights below. 
Improved Policy Evaluation Performance 
A potential regression in policy eva&hellip; (346 words, Oct 26, 2021)
- [Maintenance Downtime of Community on Monday, Oct 25, at 7:30 pm EST - Community Announcements - Sonatype Community](/content/community/t/maintenance-downtime-of-community-on-monday-oct-25-at-7-30-pm-est/7530/index.html): Starting around 7:30 PM EST on Monday, October 25, the Community forum will be brought offline to perform necessary maintenance and upgrades. 
This downtime is localized to just the community forum, and will not affect o&hellip; (149 words, Oct 25, 2021)
- [Maintenance Downtime of Community on Monday, Oct 25, at 7:30 pm EST - Community Announcements - Sonatype Community](/content/community/t/maintenance-downtime-of-community-on-monday-oct-25-at-7-30-pm-est/7530/1/index.html): Starting around 7:30 PM EST on Monday, October 25, the Community forum will be brought offline to perform necessary maintenance and upgrades. 
This downtime is localized to just the community forum, and will not affect o&hellip; (146 words, Oct 25, 2021)
- [Join us tomorrow for October Office Hours - Tuesday, October 26th at 11am EDT - Community Announcements - Sonatype Community](/content/community/t/join-us-tomorrow-for-october-office-hours-tuesday-october-26th-at-11am-edt/7527/index.html): Join us tomorrow, Tuesday, October 26th, at 11am ET (8am PT|4pm BST) for our monthly customer Office Hours. 
Hear the latest Nexus Firewall updates including: 


Policy-compliant component selection 


Release Integrit&hellip; (218 words, Oct 25, 2021)
- [Join us tomorrow for October Office Hours - Tuesday, October 26th at 11am EDT - Community Announcements - Sonatype Community](/content/community/t/join-us-tomorrow-for-october-office-hours-tuesday-october-26th-at-11am-edt/7527/1/index.html): Join us tomorrow, Tuesday, October 26th, at 11am ET (8am PT|4pm BST) for our monthly customer Office Hours. 
Hear the latest Nexus Firewall updates including: 


Policy-compliant component selection 


Release Integrit&hellip; (160 words, Oct 25, 2021)
- [Need help to identify and understand how to differentiate feature introduced for Admin and Users for Nexus Repository Manager PRO 3.35.0 version - Sonatype Nexus Repository - Sonatype Community](/content/community/t/need-help-to-identify-and-understand-how-to-differentiate-feature-introduced-for-admin-and-users-for-nexus-repository-manager-pro-3-35-0-version/7523/index.html): Hi Team, 
Need your help to understand how to identify which feature is introduced for Admin and which feature is for Users for the latest release of Nexus Repository Manager PRO 3.35.0 version from below. 
Link for the &hellip; (151 words, Oct 22, 2021)
- [Need help to identify and understand how to differentiate feature introduced for Admin and Users for Nexus Repository Manager PRO 3.35.0 version - Sonatype Nexus Repository - Sonatype Community](/content/community/t/need-help-to-identify-and-understand-how-to-differentiate-feature-introduced-for-admin-and-users-for-nexus-repository-manager-pro-3-35-0-version/7523/1/index.html): Hi Team, 
Need your help to understand how to identify which feature is introduced for Admin and which feature is for Users for the latest release of Nexus Repository Manager PRO 3.35.0 version from below. 
Link for the &hellip; (152 words, Oct 22, 2021)
- [Update policies using API - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/update-policies-using-api/7516/index.html): I wanted to ask if we can update the policies of Nexus IQ Server using APIs? Our current version is 103. (965 words, Oct 21, 2021)
- [Update policies using API - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/update-policies-using-api/7516/1/index.html): I wanted to ask if we can update the policies of Nexus IQ Server using APIs? Our current version is 103. (693 words, Oct 21, 2021)
- [Need help in checking the compatibility with Nexus Repository Manager PRO 3.35.0-02 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/need-help-in-checking-the-compatibility-with-nexus-repository-manager-pro-3-35-0-02/7501/2/index.html): Hi Team, 
We want to upgrade“Nexus Repository Manager from PRO 3.26.0-04” to the latest version  PRO 3.35.0-02. Can you please help us with the way to check the pre-requisites 
like compatibility and the steps we need to&hellip; (144 words, Oct 20, 2021)
- [Need help in checking the compatibility with Nexus Repository Manager PRO 3.35.0-02 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/need-help-in-checking-the-compatibility-with-nexus-repository-manager-pro-3-35-0-02/7501/index.html): Hi Team, 
We want to upgrade“Nexus Repository Manager from PRO 3.26.0-04” to the latest version  PRO 3.35.0-02. Can you please help us with the way to check the pre-requisites 
like compatibility and the steps we need to&hellip; (140 words, Oct 20, 2021)
- [Need help in checking the compatibility with Nexus Repository Manager PRO 3.35.0-02 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/need-help-in-checking-the-compatibility-with-nexus-repository-manager-pro-3-35-0-02/7501/1/index.html): Hi Team, 
We want to upgrade“Nexus Repository Manager from PRO 3.26.0-04” to the latest version  PRO 3.35.0-02. Can you please help us with the way to check the pre-requisites 
like compatibility and the steps we need to&hellip; (144 words, Oct 20, 2021)
- [How do i upgrade Sonartype Nexus Repository Manager PRO 3.26.0-04 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-do-i-upgrade-sonartype-nexus-repository-manager-pro-3-26-0-04/7492/5/index.html): Hi Team, 
We are using Sonartype Nexus Repository Manager PRO 3.26.0-04. We want to upgrade it to remediate the XML External Entities (XXE) CVE vulnerability. Can you please help us with the upgrade path to which next ve&hellip; (295 words, Oct 19, 2021)
- [Join us for October Office Hours- Tuesday, October 26th at 11am ET - Community Announcements - Sonatype Community](/content/community/t/join-us-for-october-office-hours-tuesday-october-26th-at-11am-et/7493/1/index.html): Join us on Tuesday, October 26th at 11am ET (8am PT|4pm BST) for our monthly customer Office Hours. 
Hear the latest Nexus Firewall updates including: 


Policy-compliant component selection 


Release Integrity for Py&hellip; (164 words, Oct 19, 2021)
- [How do i upgrade Sonartype Nexus Repository Manager PRO 3.26.0-04 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-do-i-upgrade-sonartype-nexus-repository-manager-pro-3-26-0-04/7492/index.html): Hi Team, 
We are using Sonartype Nexus Repository Manager PRO 3.26.0-04. We want to upgrade it to remediate the XML External Entities (XXE) CVE vulnerability. Can you please help us with the upgrade path to which next ve&hellip; (230 words, Oct 19, 2021)
- [How do i upgrade Sonartype Nexus Repository Manager PRO 3.26.0-04 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-do-i-upgrade-sonartype-nexus-repository-manager-pro-3-26-0-04/7492/1/index.html): Hi Team, 
We are using Sonartype Nexus Repository Manager PRO 3.26.0-04. We want to upgrade it to remediate the XML External Entities (XXE) CVE vulnerability. Can you please help us with the upgrade path to which next ve&hellip; (229 words, Oct 19, 2021)
- [Error writing blob: ... Received unexpected HTTP status: 504 Gateway Time-out - Sonatype Nexus Repository - Sonatype Community](/content/community/t/error-writing-blob-received-unexpected-http-status-504-gateway-time-out/7475/2/index.html): Hi, I have this error, do you know what it is? 
It is a 1GB image, and it is generating this TimeOut because it fails to upload one of the Blobs to the repository. 
  
Thanks! (83 words, Oct 18, 2021)
- [Oracle Cloud Infrastructure S3 for blob store - Sonatype Nexus Repository - Sonatype Community](/content/community/t/oracle-cloud-infrastructure-s3-for-blob-store/7480/index.html): Hi All, 
is it possible to use OCI S3 instead of AWS S3 to configure blob stores ? 
Thanks (370 words, Oct 18, 2021)
- [Oracle Cloud Infrastructure S3 for blob store - Sonatype Nexus Repository - Sonatype Community](/content/community/t/oracle-cloud-infrastructure-s3-for-blob-store/7480/1/index.html): Hi All, 
is it possible to use OCI S3 instead of AWS S3 to configure blob stores ? 
Thanks (372 words, Oct 18, 2021)
- [Error writing blob: ... Received unexpected HTTP status: 504 Gateway Time-out - Sonatype Nexus Repository - Sonatype Community](/content/community/t/error-writing-blob-received-unexpected-http-status-504-gateway-time-out/7475/1/index.html): Hi, I have this error, do you know what it is? 
It is a 1GB image, and it is generating this TimeOut because it fails to upload one of the Blobs to the repository. 
  
Thanks! (99 words, Oct 16, 2021)
- [Nexus IQ Server: Release 125 - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/nexus-iq-server-release-125/7472/index.html): We’re excited to announce IQ Server 125! 
Check out the full release notes here (as well as past release notes) and read the highlights below. 
Improved Policy Evaluation Performance 
A potential regression in policy eva&hellip; (351 words, Oct 15, 2021)
- [LDAP configuration : Connection refused - Sonatype Nexus Repository - Sonatype Community](/content/community/t/ldap-configuration-connection-refused/7464/1/index.html): Hi everyone, 
I’m trying to configure Nexus with my LDAP, they are on two docker container. 
On the log viewer : 
2021-10-14 15:13:01,546+0200 ERROR [qtp811355193-634]  admin org.sonatype.nexus.extdirect.internal.ExtDire&hellip; (140 words, Oct 14, 2021)
- [Blob Store Java Date time issue - Sonatype Nexus Repository - Sonatype Community](/content/community/t/blob-store-java-date-time-issue/7457/2/index.html): Hi, we’re testing the blob store into aws S3 bucket. 

Nexus version: 3.29.2-02

We connected the S3 and migrated some repositories to this bucket but after a few days we have this errors in the logs: 
2021-10-13 11:20:2&hellip; (400 words, Oct 13, 2021)
- [Blob Store Java Date time issue - Sonatype Nexus Repository - Sonatype Community](/content/community/t/blob-store-java-date-time-issue/7457/index.html): Hi, we’re testing the blob store into aws S3 bucket. 

Nexus version: 3.29.2-02

We connected the S3 and migrated some repositories to this bucket but after a few days we have this errors in the logs: 
2021-10-13 11:20:2&hellip; (142 words, Oct 13, 2021)
- [Blob Store Java Date time issue - Sonatype Nexus Repository - Sonatype Community](/content/community/t/blob-store-java-date-time-issue/7457/1/index.html): Hi, we’re testing the blob store into aws S3 bucket. 

Nexus version: 3.29.2-02

We connected the S3 and migrated some repositories to this bucket but after a few days we have this errors in the logs: 
2021-10-13 11:20:2&hellip; (322 words, Oct 13, 2021)
- [Nexus3 compact blob store task is running already 3 days - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus3-compact-blob-store-task-is-running-already-3-days/7406/4/index.html): Hi, 
we installed the Nexus3 OSS version. 
We have 250 GB of disk space for the one and only default blob store. 
I created now a first cleanup rule and applied it to 2 of our 8 repositories. 
Then I started the task to &hellip; (233 words, Oct 5, 2021)
- [Update Nexus Maven repository "version policy" - Sonatype Nexus Repository - Sonatype Community](/content/community/t/update-nexus-maven-repository-version-policy/7381/2/index.html): Hello, we are using Nexus OSS 3.29.2-02 and have an existing Maven 2 hosted repository with a version policy of “Release”. We would like to update it to allow snapshots as well but I do not see a way to change the versio&hellip; (167 words, Oct 4, 2021)
- [Yum repositories configuration - Sonatype Nexus Repository - Sonatype Community](/content/community/t/yum-repositories-configuration/7397/2/index.html): Good afternoon. 
Maybe someone can help me here. 
I created a yum repository in Sonatype Nexus Repository ManagerOSS 3.34.0-01, and filled it with packages as shown in the attached screenshot. 
  
also i created a file /&hellip; (224 words, Oct 4, 2021)
- [Nexus3 compact blob store task is running already 3 days - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus3-compact-blob-store-task-is-running-already-3-days/7406/3/index.html): Hi, 
we installed the Nexus3 OSS version. 
We have 250 GB of disk space for the one and only default blob store. 
I created now a first cleanup rule and applied it to 2 of our 8 repositories. 
Then I started the task to &hellip; (234 words, Oct 4, 2021)
- [How would I create a proxy for a pypi that uses /+simple instead of /simple? - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/how-would-i-create-a-proxy-for-a-pypi-that-uses-simple-instead-of-simple/7378/2/index.html): I’m trying to integrate (as a stepping stone to migrate) a number of number of pypi repository indexes that are using a Devpi server into our Nexus server. However, as far as I can tell, Nexus expects all  pypi endpoints&hellip; (188 words, Oct 4, 2021)
- [Nexus3 compact blob store task is running already 3 days - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus3-compact-blob-store-task-is-running-already-3-days/7406/index.html): Hi, 
we installed the Nexus3 OSS version. 
We have 250 GB of disk space for the one and only default blob store. 
I created now a first cleanup rule and applied it to 2 of our 8 repositories. 
Then I started the task to &hellip; (234 words, Oct 4, 2021)
- [Nexus3 compact blob store task is running already 3 days - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus3-compact-blob-store-task-is-running-already-3-days/7406/1/index.html): Hi, 
we installed the Nexus3 OSS version. 
We have 250 GB of disk space for the one and only default blob store. 
I created now a first cleanup rule and applied it to 2 of our 8 repositories. 
Then I started the task to &hellip; (234 words, Oct 4, 2021)
- [Libraries in openjdk flagged as Component-Unknown for alpine docker - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/libraries-in-openjdk-flagged-as-component-unknown-for-alpine-docker/7399/2/index.html): When I try to scan docker image with nexus IQ, it flagged Component-Unknown for libraries in openjdk alpine. 
usr/lib/jvm/java-1.8-openjdk/jre/lib/charsets.jar
usr/lib/jvm/java-1.8-openjdk/jre/lib/cldrdata.jar
usr/lib/jv&hellip; (127 words, Sep 30, 2021)
- [Libraries in openjdk flagged as Component-Unknown for alpine docker - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/libraries-in-openjdk-flagged-as-component-unknown-for-alpine-docker/7399/index.html): When I try to scan docker image with nexus IQ, it flagged Component-Unknown for libraries in openjdk alpine. 
usr/lib/jvm/java-1.8-openjdk/jre/lib/charsets.jar
usr/lib/jvm/java-1.8-openjdk/jre/lib/cldrdata.jar
usr/lib/jv&hellip; (127 words, Sep 30, 2021)
- [Libraries in openjdk flagged as Component-Unknown for alpine docker - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/libraries-in-openjdk-flagged-as-component-unknown-for-alpine-docker/7399/1/index.html): When I try to scan docker image with nexus IQ, it flagged Component-Unknown for libraries in openjdk alpine. 
usr/lib/jvm/java-1.8-openjdk/jre/lib/charsets.jar
usr/lib/jvm/java-1.8-openjdk/jre/lib/cldrdata.jar
usr/lib/jv&hellip; (127 words, Sep 30, 2021)
- [Yum repositories configuration - Sonatype Nexus Repository - Sonatype Community](/content/community/t/yum-repositories-configuration/7397/index.html): Good afternoon. 
Maybe someone can help me here. 
I created a yum repository in Sonatype Nexus Repository ManagerOSS 3.34.0-01, and filled it with packages as shown in the attached screenshot. 
  
also i created a file /&hellip; (220 words, Sep 29, 2021)
- [Yum repositories configuration - Sonatype Nexus Repository - Sonatype Community](/content/community/t/yum-repositories-configuration/7397/1/index.html): Good afternoon. 
Maybe someone can help me here. 
I created a yum repository in Sonatype Nexus Repository ManagerOSS 3.34.0-01, and filled it with packages as shown in the attached screenshot. 
  
also i created a file /&hellip; (224 words, Sep 29, 2021)
- [Update Nexus Maven repository "version policy" - Sonatype Nexus Repository - Sonatype Community](/content/community/t/update-nexus-maven-repository-version-policy/7381/index.html): Hello, we are using Nexus OSS 3.29.2-02 and have an existing Maven 2 hosted repository with a version policy of “Release”. We would like to update it to allow snapshots as well but I do not see a way to change the versio&hellip; (166 words, Sep 27, 2021)
- [Update Nexus Maven repository "version policy" - Sonatype Nexus Repository - Sonatype Community](/content/community/t/update-nexus-maven-repository-version-policy/7381/1/index.html): Hello, we are using Nexus OSS 3.29.2-02 and have an existing Maven 2 hosted repository with a version policy of “Release”. We would like to update it to allow snapshots as well but I do not see a way to change the versio&hellip; (166 words, Sep 27, 2021)
- [How would I create a proxy for a pypi that uses /+simple instead of /simple? - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/how-would-i-create-a-proxy-for-a-pypi-that-uses-simple-instead-of-simple/7378/index.html): I’m trying to integrate (as a stepping stone to migrate) a number of number of pypi repository indexes that are using a Devpi server into our Nexus server. However, as far as I can tell, Nexus expects all  pypi endpoints&hellip; (190 words, Sep 27, 2021)
- [How would I create a proxy for a pypi that uses /+simple instead of /simple? - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/how-would-i-create-a-proxy-for-a-pypi-that-uses-simple-instead-of-simple/7378/1/index.html): I’m trying to integrate (as a stepping stone to migrate) a number of number of pypi repository indexes that are using a Devpi server into our Nexus server. However, as far as I can tell, Nexus expects all  pypi endpoints&hellip; (121 words, Sep 27, 2021)
- [SCM Provider behind Reverse-Proxy - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/scm-provider-behind-reverse-proxy/7345/2/index.html): Hello, 
we are trying to store SCM settings for our projects in Nexus IQ. We are using Gitlab behind a reverse proxy, which makes our URL look like this: https://{reverse-proxy-host}/gitlab/. 
We have a hunch that using &hellip; (181 words, Sep 22, 2021)
- [Starting in 1 hour- September Office Hours at 1pm ET - Community Announcements - Sonatype Community](/content/community/t/starting-in-1-hour-september-office-hours-at-1pm-et/7360/index.html): Join us in an hour at 1pm ET (10am PDT | 6 pm BST) for our monthly customer Office Hours. 
Drop in for our Ask Me Anything session and the latest Nexus Lifecycle updates including: 


InnerSource Insight &amp; NPM dependen&hellip; (84 words, Sep 22, 2021)
- [LDAP Bind issues with Okta - Sonatype Nexus Repository - Sonatype Community](/content/community/t/ldap-bind-issues-with-okta/7359/index.html): Hello, 
We are trying to bind our Nexus repository manager to Okta. We are currently using the memberOf attribute but we need to switch this to uniqueMember. When we switch this variable, we notice that the roles do not &hellip; (138 words, Sep 22, 2021)
- [LDAP Bind issues with Okta - Sonatype Nexus Repository - Sonatype Community](/content/community/t/ldap-bind-issues-with-okta/7359/1/index.html): Hello, 
We are trying to bind our Nexus repository manager to Okta. We are currently using the memberOf attribute but we need to switch this to uniqueMember. When we switch this variable, we notice that the roles do not &hellip; (136 words, Sep 22, 2021)
- [Renaming files/directories after upload - Sonatype Nexus Repository - Sonatype Community](/content/community/t/renaming-files-directories-after-upload/7355/index.html): Say I uploaded a very large file (5Gb+) to a raw repository. But then I realized I either uploaded it with an incorrect file name, or to the wrong path. How to I rename/move the file w/o having to delete/re-upload? (111 words, Sep 21, 2021)
- [Renaming files/directories after upload - Sonatype Nexus Repository - Sonatype Community](/content/community/t/renaming-files-directories-after-upload/7355/1/index.html): Say I uploaded a very large file (5Gb+) to a raw repository. But then I realized I either uploaded it with an incorrect file name, or to the wrong path. How to I rename/move the file w/o having to delete/re-upload? (58 words, Sep 21, 2021)
- [Join us tomorrow for September Office Hours - Wednesday, September 22nd at 1pm EDT - Community Announcements - Sonatype Community](/content/community/t/join-us-tomorrow-for-september-office-hours-wednesday-september-22nd-at-1pm-edt/7353/index.html): Join us tomorrow, Wednesday, September 22nd at 1pm ET (10am PT|6pm BST) for our monthly customer Office Hours. 
Hear the latest Nexus Lifecycle updates including: 


InnerSource Insight &amp; NPM dependency support 


IQ f&hellip; (121 words, Sep 21, 2021)
- [Join us tomorrow for September Office Hours - Wednesday, September 22nd at 1pm EDT - Community Announcements - Sonatype Community](/content/community/t/join-us-tomorrow-for-september-office-hours-wednesday-september-22nd-at-1pm-edt/7353/1/index.html): Join us tomorrow, Wednesday, September 22nd at 1pm ET (10am PT|6pm BST) for our monthly customer Office Hours. 
Hear the latest Nexus Lifecycle updates including: 


InnerSource Insight &amp; NPM dependency support 


IQ f&hellip; (123 words, Sep 21, 2021)
- [SCM Provider behind Reverse-Proxy - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/scm-provider-behind-reverse-proxy/7345/index.html): Hello, 
we are trying to store SCM settings for our projects in Nexus IQ. We are using Gitlab behind a reverse proxy, which makes our URL look like this: https://{reverse-proxy-host}/gitlab/. 
We have a hunch that using &hellip; (185 words, Sep 20, 2021)
- [SCM Provider behind Reverse-Proxy - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/scm-provider-behind-reverse-proxy/7345/1/index.html): Hello, 
we are trying to store SCM settings for our projects in Nexus IQ. We are using Gitlab behind a reverse proxy, which makes our URL look like this: https://{reverse-proxy-host}/gitlab/. 
We have a hunch that using &hellip; (181 words, Sep 20, 2021)
- [Transitive Scan for Maven with Jenkins-Plugin - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/transitive-scan-for-maven-with-jenkins-plugin/7340/index.html): Hello, 
how to proceed so that in a Maven project also the transitive dependencies are listed in Nexus IQ? 
We scan the pom.xml contained in the project in a Jenkins build with Jenkins IQ plugin, however only the direct &hellip; (190 words, Sep 20, 2021)
- [Transitive Scan for Maven with Jenkins-Plugin - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/transitive-scan-for-maven-with-jenkins-plugin/7340/1/index.html): Hello, 
how to proceed so that in a Maven project also the transitive dependencies are listed in Nexus IQ? 
We scan the pom.xml contained in the project in a Jenkins build with Jenkins IQ plugin, however only the direct &hellip; (194 words, Sep 20, 2021)
- [Questions regarding Reconcile component database from blob store - Sonatype Nexus Repository - Sonatype Community](/content/community/t/questions-regarding-reconcile-component-database-from-blob-store/7338/index.html): Hello everyone, 
We are using Nexus Repository Manager OSS, 3.30.1-01. 
Recently, around 1 - 1.5 TB of artifacts of a hosted maven repository have been accidentally removed (via cleanup and compact blob store). The blobs&hellip; (502 words, Sep 20, 2021)
- [Questions regarding Reconcile component database from blob store - Sonatype Nexus Repository - Sonatype Community](/content/community/t/questions-regarding-reconcile-component-database-from-blob-store/7338/1/index.html): Hello everyone, 
We are using Nexus Repository Manager OSS, 3.30.1-01. 
Recently, around 1 - 1.5 TB of artifacts of a hosted maven repository have been accidentally removed (via cleanup and compact blob store). The blobs&hellip; (489 words, Sep 20, 2021)
- [Join us for September Office Hours - Wednesday, September 22nd at 1pm EDT - Community Announcements - Sonatype Community](/content/community/t/join-us-for-september-office-hours-wednesday-september-22nd-at-1pm-edt/7307/index.html): Join us on Wednesday, September 22nd at 1pm ET (10am PT|6pm BST) for our monthly customer Office Hours. 
Hear the latest Nexus Lifecycle updates including: 


InnerSource Insight &amp; NPM dependency support 


IQ for IDEA&hellip; (118 words, Sep 15, 2021)
- [Join us for September Office Hours - Wednesday, September 22nd at 1pm EDT - Community Announcements - Sonatype Community](/content/community/t/join-us-for-september-office-hours-wednesday-september-22nd-at-1pm-edt/7307/1/index.html): Join us on Wednesday, September 22nd at 1pm ET (10am PT|6pm BST) for our monthly customer Office Hours. 
Hear the latest Nexus Lifecycle updates including: 


InnerSource Insight &amp; NPM dependency support 


IQ for IDEA&hellip; (123 words, Sep 15, 2021)
- [Nexus IQ Server "unused scripts - Sonatype Lifecycle & Repository Firewall / Best Practices - Sonatype Community](/content/community/t/nexus-iq-server-unused-scripts/7295/index.html): Hello I hope I put this in the correct category. The organization I work for is tasked with security hardening (security technical implementation) based on DISA standards. We run Nexus Lifecycle. I need help with the fol&hellip; (214 words, Sep 14, 2021)
- [Nexus IQ Server "unused scripts - Sonatype Lifecycle & Repository Firewall / Best Practices - Sonatype Community](/content/community/t/nexus-iq-server-unused-scripts/7295/1/index.html): Hello I hope I put this in the correct category. The organization I work for is tasked with security hardening (security technical implementation) based on DISA standards. We run Nexus Lifecycle. I need help with the fol&hellip; (227 words, Sep 14, 2021)
- [Evaluate results is not appear on dashboard - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/evaluate-results-is-not-appear-on-dashboard/7277/2/index.html): I install the Nexus IQ and both eclipse plugin and CLM maven tool and the application evaluated by both tools perfectly, but I couldn’t see the violation reports or dashboard. 
I assign a developer user to this applicati&hellip; (169 words, Sep 13, 2021)
- [Upgrade hangs, Server wont start - Sonatype Nexus Repository - Sonatype Community](/content/community/t/upgrade-hangs-server-wont-start/7284/2/index.html): I am trying to upgrade our instance of Nexus.  I am attempting to do the upgrade between 2.14.5-02 and 2.14.20-02 and when I attempt to start up the newest version of Nexus it hangs and never starts.  It hangs with the f&hellip; (137 words, Sep 12, 2021)
- [Upgrade hangs, Server wont start - Sonatype Nexus Repository - Sonatype Community](/content/community/t/upgrade-hangs-server-wont-start/7284/index.html): I am trying to upgrade our instance of Nexus.  I am attempting to do the upgrade between 2.14.5-02 and 2.14.20-02 and when I attempt to start up the newest version of Nexus it hangs and never starts.  It hangs with the f&hellip; (137 words, Sep 11, 2021)
- [Upgrade hangs, Server wont start - Sonatype Nexus Repository - Sonatype Community](/content/community/t/upgrade-hangs-server-wont-start/7284/1/index.html): I am trying to upgrade our instance of Nexus.  I am attempting to do the upgrade between 2.14.5-02 and 2.14.20-02 and when I attempt to start up the newest version of Nexus it hangs and never starts.  It hangs with the f&hellip; (137 words, Sep 11, 2021)
- [Evaluate results is not appear on dashboard - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/evaluate-results-is-not-appear-on-dashboard/7277/index.html): I install the Nexus IQ and both eclipse plugin and CLM maven tool and the application evaluated by both tools perfectly, but I couldn’t see the violation reports or dashboard. 
I assign a developer user to this applicati&hellip; (251 words, Sep 10, 2021)
- [Evaluate results is not appear on dashboard - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/evaluate-results-is-not-appear-on-dashboard/7277/1/index.html): I install the Nexus IQ and both eclipse plugin and CLM maven tool and the application evaluated by both tools perfectly, but I couldn’t see the violation reports or dashboard. 
I assign a developer user to this applicati&hellip; (257 words, Sep 10, 2021)
- [Migration - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/migration/7267/7/index.html): Hi everyone, I have Nexus Repository OSS installed in a kubernetes cluster, and setup to save artifacts in S3. I need to setup a new Nexus instance, and after a couple of days tear down the current Nexus. My question is,&hellip; (438 words, Sep 10, 2021)
- [Migration - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/migration/7267/6/index.html): Hi everyone, I have Nexus Repository OSS installed in a kubernetes cluster, and setup to save artifacts in S3. I need to setup a new Nexus instance, and after a couple of days tear down the current Nexus. My question is,&hellip; (438 words, Sep 10, 2021)
- [Migration - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/migration/7267/5/index.html): Hi everyone, I have Nexus Repository OSS installed in a kubernetes cluster, and setup to save artifacts in S3. I need to setup a new Nexus instance, and after a couple of days tear down the current Nexus. My question is,&hellip; (438 words, Sep 10, 2021)
- [Nexus IQ Report page improvements - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/nexus-iq-report-page-improvements/7269/2/index.html): The main Nexus IQ Reports page would benefit from a number of improvements: 

Remember previous selected ordering and/or filter
Allow column widths to be resizable
Allow additional columns to be optionally displayed: eg &hellip; (183 words, Sep 10, 2021)
- [Migration - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/migration/7267/4/index.html): Hi everyone, I have Nexus Repository OSS installed in a kubernetes cluster, and setup to save artifacts in S3. I need to setup a new Nexus instance, and after a couple of days tear down the current Nexus. My question is,&hellip; (438 words, Sep 10, 2021)
- [Nexus IQ Report page improvements - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/nexus-iq-report-page-improvements/7269/index.html): The main Nexus IQ Reports page would benefit from a number of improvements: 

Remember previous selected ordering and/or filter
Allow column widths to be resizable
Allow additional columns to be optionally displayed: eg &hellip; (166 words, Sep 9, 2021)
- [Nexus IQ Report page improvements - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/nexus-iq-report-page-improvements/7269/1/index.html): The main Nexus IQ Reports page would benefit from a number of improvements: 

Remember previous selected ordering and/or filter
Allow column widths to be resizable
Allow additional columns to be optionally displayed: eg &hellip; (177 words, Sep 9, 2021)
- [Migration - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/migration/7267/3/index.html): Hi everyone, I have Nexus Repository OSS installed in a kubernetes cluster, and setup to save artifacts in S3. I need to setup a new Nexus instance, and after a couple of days tear down the current Nexus. My question is,&hellip; (438 words, Sep 9, 2021)
- [Migration - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/migration/7267/2/index.html): Hi everyone, I have Nexus Repository OSS installed in a kubernetes cluster, and setup to save artifacts in S3. I need to setup a new Nexus instance, and after a couple of days tear down the current Nexus. My question is,&hellip; (438 words, Sep 9, 2021)
- [NexusIQ SCM and Spring Dependency Management Gradle Plugin - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/nexusiq-scm-and-spring-dependency-management-gradle-plugin/7268/index.html): When using the Spring dependencyManagement DSL provided by the Spring dependency-management Gradle plugin (Dependency Management Plugin), I’m seeing neither PRs nor PR comments created.  Does NexusIQ SCM support the Spri&hellip; (67 words, Sep 9, 2021)
- [Migration - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/migration/7267/index.html): Hi everyone, I have Nexus Repository OSS installed in a kubernetes cluster, and setup to save artifacts in S3. I need to setup a new Nexus instance, and after a couple of days tear down the current Nexus. My question is,&hellip; (438 words, Sep 9, 2021)
- [Migration - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/migration/7267/1/index.html): Hi everyone, I have Nexus Repository OSS installed in a kubernetes cluster, and setup to save artifacts in S3. I need to setup a new Nexus instance, and after a couple of days tear down the current Nexus. My question is,&hellip; (438 words, Sep 9, 2021)
- [Raw http based repository with directory listings - Sonatype Nexus Repository - Sonatype Community](/content/community/t/raw-http-based-repository-with-directory-listings/7261/3/index.html): Hi all, 
In Nexus 2 there was an endpoint where files was served also pemitted directory listings. 
It seems that nexus 3 has api endpoint where you can list directories and see tags for the files. 
But the files are act&hellip; (208 words, Sep 9, 2021)
- [Raw http based repository with directory listings - Sonatype Nexus Repository - Sonatype Community](/content/community/t/raw-http-based-repository-with-directory-listings/7261/2/index.html): Hi all, 
In Nexus 2 there was an endpoint where files was served also pemitted directory listings. 
It seems that nexus 3 has api endpoint where you can list directories and see tags for the files. 
But the files are act&hellip; (207 words, Sep 9, 2021)
- [Raw http based repository with directory listings - Sonatype Nexus Repository - Sonatype Community](/content/community/t/raw-http-based-repository-with-directory-listings/7261/1/index.html): Hi all, 
In Nexus 2 there was an endpoint where files was served also pemitted directory listings. 
It seems that nexus 3 has api endpoint where you can list directories and see tags for the files. 
But the files are act&hellip; (207 words, Sep 9, 2021)
- [Trial License Required - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/trial-license-required/7221/5/index.html): Hi All 
We are exploring Nexus IQ features as replacement for jfrog artifactory, which is currently in use. In order to evaluate the solution we would like to try Nexus Lifecycle and Firewall features. Could you help us &hellip; (217 words, Sep 1, 2021)
- [Trial License Required - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/trial-license-required/7221/index.html): Hi All 
We are exploring Nexus IQ features as replacement for jfrog artifactory, which is currently in use. In order to evaluate the solution we would like to try Nexus Lifecycle and Firewall features. Could you help us &hellip; (218 words, Sep 1, 2021)
- [Trial License Required - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/trial-license-required/7221/1/index.html): Hi All 
We are exploring Nexus IQ features as replacement for jfrog artifactory, which is currently in use. In order to evaluate the solution we would like to try Nexus Lifecycle and Firewall features. Could you help us &hellip; (217 words, Sep 1, 2021)
- [Starting in 1 hour- August Office Hours @ 12pm ET - Community Announcements - Sonatype Community](/content/community/t/starting-in-1-hour-august-office-hours-12pm-et/7198/index.html): Join us in an hour at 12pm ET (9am PT/5pm BST) for our monthly customer Office Hours. 
Drop in for our Ask Me Anything session and the following topics: 


New database options for Nexus Repository 


Improvements to N&hellip; (153 words, Aug 26, 2021)
- [Starting in 1 hour- August Office Hours @ 12pm ET - Community Announcements - Sonatype Community](/content/community/t/starting-in-1-hour-august-office-hours-12pm-et/7198/1/index.html): Join us in an hour at 12pm ET (9am PT/5pm BST) for our monthly customer Office Hours. 
Drop in for our Ask Me Anything session and the following topics: 


New database options for Nexus Repository 


Improvements to N&hellip; (171 words, Aug 26, 2021)
- [Nexus IQ Data Services Require TLS 1.2 or Newer - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/nexus-iq-data-services-require-tls-1-2-or-newer/7197/index.html): Beginning on September 30th, 2021 the Nexus IQ Data Services will no longer support version 1.1 and older of the Transport Layer Security (TLS) protocol. All HTTPS requests will then be required to use TLS 1.2 or newer. 
&hellip; (306 words, Aug 26, 2021)
- [Nexus IQ Data Services Require TLS 1.2 or Newer - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/nexus-iq-data-services-require-tls-1-2-or-newer/7197/1/index.html): Beginning on September 30th, 2021 the Nexus IQ Data Services will no longer support version 1.1 and older of the Transport Layer Security (TLS) protocol. All HTTPS requests will then be required to use TLS 1.2 or newer. 
&hellip; (304 words, Aug 26, 2021)
- [Join us tomorrow for August Office Hours - 12pm ET - Community Announcements - Sonatype Community](/content/community/t/join-us-tomorrow-for-august-office-hours-12pm-et/7187/index.html): Join us tomorrow, August 26th, at 12pm ET (9am PT/5pm BST) for our monthly customer Office Hours. 
On the agenda for this month: 

New database options for Nexus Repository
Improvements to Nexus Repository Resilient De&hellip; (98 words, Aug 25, 2021)
- [Join us tomorrow for August Office Hours - 12pm ET - Community Announcements - Sonatype Community](/content/community/t/join-us-tomorrow-for-august-office-hours-12pm-et/7187/1/index.html): Join us tomorrow, August 26th, at 12pm ET (9am PT/5pm BST) for our monthly customer Office Hours. 
On the agenda for this month: 

New database options for Nexus Repository
Improvements to Nexus Repository Resilient De&hellip; (109 words, Aug 25, 2021)
- [Nexus repository pro connection with PostgreSQL - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/nexus-repository-pro-connection-with-postgresql/7162/2/index.html): I am trying to make a connection nexus repository with PostgreSQL but connection fail every time 
Error: 2021-08-20 17:25:04,563+0500 ERROR [FelixStartLevel] *SYSTEM com.zaxxer.hikari.pool.HikariPool - nexus - Exception &hellip; (238 words, Aug 20, 2021)
- [Nexus repository pro connection with PostgreSQL - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/nexus-repository-pro-connection-with-postgresql/7162/index.html): I am trying to make a connection nexus repository with PostgreSQL but connection fail every time 
Error: 2021-08-20 17:25:04,563+0500 ERROR [FelixStartLevel] *SYSTEM com.zaxxer.hikari.pool.HikariPool - nexus - Exception &hellip; (239 words, Aug 20, 2021)
- [Nexus repository pro connection with PostgreSQL - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/nexus-repository-pro-connection-with-postgresql/7162/1/index.html): I am trying to make a connection nexus repository with PostgreSQL but connection fail every time 
Error: 2021-08-20 17:25:04,563+0500 ERROR [FelixStartLevel] *SYSTEM com.zaxxer.hikari.pool.HikariPool - nexus - Exception &hellip; (303 words, Aug 20, 2021)
- [How to restore after deleting a component？ - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-to-restore-after-deleting-a-component/7138/4/index.html): I use nexus3.30.1-01 ,How to restore after deleting a component？ (170 words, Aug 20, 2021)
- [Join us for August Office Hours - Thursday, August 26th at 12pm ET - Community Announcements - Sonatype Community](/content/community/t/join-us-for-august-office-hours-thursday-august-26th-at-12pm-et/7153/index.html): Join us Thursday, August 26th at 12pm ET (9am PT|5pm BST) for our monthly customer Office Hours. 
On the agenda for this month: 


New database options for Nexus Repository 


Improvements to Nexus Repository Resilient&hellip; (116 words, Aug 19, 2021)
- [Join us for August Office Hours - Thursday, August 26th at 12pm ET - Community Announcements - Sonatype Community](/content/community/t/join-us-for-august-office-hours-thursday-august-26th-at-12pm-et/7153/1/index.html): Join us Thursday, August 26th at 12pm ET (9am PT|5pm BST) for our monthly customer Office Hours. 
On the agenda for this month: 


New database options for Nexus Repository 


Improvements to Nexus Repository Resilient&hellip; (177 words, Aug 19, 2021)
- [Encrypting Between Repos - Forward and Reverse Proxy - IIS - Sonatype Nexus Repository - Sonatype Community](/content/community/t/encrypting-between-repos-forward-and-reverse-proxy-iis/7151/index.html): Greetings, 
I have a few sites that I’m trying to use Nexus OSS to send packages over the wire. To encrypt my traffic, I am looking at having a reverse proxy (IIS ARR) and a forward proxy. I am currently trying to levera&hellip; (284 words, Aug 18, 2021)
- [Is there any limit to push build from multiple jenkins simultaneously - Sonatype Nexus Repository - Sonatype Community](/content/community/t/is-there-any-limit-to-push-build-from-multiple-jenkins-simultaneously/7130/2/index.html): Hello, 
Can I integrate a single Nexus OSS instance with multiple Jenkins instances to push build artifacts on Nexus. As there are multiple jenkins so there is possibility of multiple push from those at same time does Ne&hellip; (97 words, Aug 17, 2021)
- [Authenticating to NuGet Hosted Repo with Tokens - Sonatype Nexus Repository - Sonatype Community](/content/community/t/authenticating-to-nuget-hosted-repo-with-tokens/7132/3/index.html): We are using Nuget Hosted, Proxy, and Group Repositories. 
Currently, we can download packages from this repository by saving our encrypted username and password to our developer workstations, using the “dotnet nuget upd&hellip; (236 words, Aug 17, 2021)
- [How to restore after deleting a component？ - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-to-restore-after-deleting-a-component/7138/index.html): I use nexus3.30.1-01 ,How to restore after deleting a component？ (172 words, Aug 17, 2021)
- [How to restore after deleting a component？ - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-to-restore-after-deleting-a-component/7138/1/index.html): I use nexus3.30.1-01 ,How to restore after deleting a component？ (172 words, Aug 17, 2021)
- [Group id acces - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/group-id-acces/7133/index.html): Continuing the discussion from Integration API with Nexus Repository 3: (106 words, Aug 16, 2021)
- [Group id acces - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/group-id-acces/7133/1/index.html): Continuing the discussion from Integration API with Nexus Repository 3: (90 words, Aug 16, 2021)
- [Scheduled maintenance across my.sonatype.com sites Wednesday, July 28, at 9pm EDT - Community Announcements - Sonatype Community](/content/community/t/scheduled-maintenance-across-my-sonatype-com-sites-wednesday-july-28-at-9pm-edt/7011/5/index.html): On Wednesday, July 28th starting at 9pm Eastern, Sonatype infrastructure will be undergoing maintenance, which could affect a user’s ability to log in to sites such as the my.sonatype.com portal, Community Forum, educati&hellip; (192 words, Aug 16, 2021)
- [Authenticating to NuGet Hosted Repo with Tokens - Sonatype Nexus Repository - Sonatype Community](/content/community/t/authenticating-to-nuget-hosted-repo-with-tokens/7132/index.html): We are using Nuget Hosted, Proxy, and Group Repositories. 
Currently, we can download packages from this repository by saving our encrypted username and password to our developer workstations, using the “dotnet nuget upd&hellip; (242 words, Aug 16, 2021)
- [Authenticating to NuGet Hosted Repo with Tokens - Sonatype Nexus Repository - Sonatype Community](/content/community/t/authenticating-to-nuget-hosted-repo-with-tokens/7132/1/index.html): We are using Nuget Hosted, Proxy, and Group Repositories. 
Currently, we can download packages from this repository by saving our encrypted username and password to our developer workstations, using the “dotnet nuget upd&hellip; (244 words, Aug 16, 2021)
- [Is there any limit to push build from multiple jenkins simultaneously - Sonatype Nexus Repository - Sonatype Community](/content/community/t/is-there-any-limit-to-push-build-from-multiple-jenkins-simultaneously/7130/index.html): Hello, 
Can I integrate a single Nexus OSS instance with multiple Jenkins instances to push build artifacts on Nexus. As there are multiple jenkins so there is possibility of multiple push from those at same time does Ne&hellip; (97 words, Aug 16, 2021)
- [Is there any limit to push build from multiple jenkins simultaneously - Sonatype Nexus Repository - Sonatype Community](/content/community/t/is-there-any-limit-to-push-build-from-multiple-jenkins-simultaneously/7130/1/index.html): Hello, 
Can I integrate a single Nexus OSS instance with multiple Jenkins instances to push build artifacts on Nexus. As there are multiple jenkins so there is possibility of multiple push from those at same time does Ne&hellip; (96 words, Aug 16, 2021)
- [How to upload docker image using API？ - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-to-upload-docker-image-using-api/7112/index.html): How to upload docker image using API？ 
Version:Sonatype Nexus Repository ManagerOSS 3.32.0-03 
I use docker save -o a.tar nginx:v1 to save the image, and then upload it through the API interface with an error of 500. 
Am&hellip; (237 words, Aug 13, 2021)
- [How to upload docker image using API？ - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-to-upload-docker-image-using-api/7112/1/index.html): How to upload docker image using API？ 
Version:Sonatype Nexus Repository ManagerOSS 3.32.0-03 
I use docker save -o a.tar nginx:v1 to save the image, and then upload it through the API interface with an error of 500. 
Am&hellip; (217 words, Aug 13, 2021)
- [Approaches to onboarding applications to IQ Server - Sonatype Lifecycle & Repository Firewall / Best Practices - Sonatype Community](/content/community/t/approaches-to-onboarding-applications-to-iq-server/7090/index.html): Our Technical Content team has been busy crafting new assets designed to help you get the most out of your Nexus Platform implementation. 
One of these assets is a new technical guide that explores approaches to onboardi&hellip; (199 words, Aug 9, 2021)
- [Approaches to onboarding applications to IQ Server - Sonatype Lifecycle & Repository Firewall / Best Practices - Sonatype Community](/content/community/t/approaches-to-onboarding-applications-to-iq-server/7090/1/index.html): Our Technical Content team has been busy crafting new assets designed to help you get the most out of your Nexus Platform implementation. 
One of these assets is a new technical guide that explores approaches to onboardi&hellip; (207 words, Aug 9, 2021)
- [New Learning Materials Available! - Community Announcements - Sonatype Community](/content/community/t/new-learning-materials-available/7064/index.html): The Technical Content team has been busy crafting new assets designed to help you get the most out of your Nexus Platform implementation. Keep reading to check out our latest product and feature resources. 
Products 

So&hellip; (319 words, Aug 4, 2021)
- [Contribute to the 7th Annual State of the Software Supply Chain Report, win a prize! - Community Announcements - Sonatype Community](/content/community/t/contribute-to-the-7th-annual-state-of-the-software-supply-chain-report-win-a-prize/7063/index.html): Hi Sonatype Community! 
We’re in the midst of developing our 2021 State of the Software Supply Chain Report, and can use your help! 
 
If you have 10 minutes to spare, please take our survey and share how your organizati&hellip; (125 words, Aug 4, 2021)
- [Contribute to the 7th Annual State of the Software Supply Chain Report, win a prize! - Community Announcements - Sonatype Community](/content/community/t/contribute-to-the-7th-annual-state-of-the-software-supply-chain-report-win-a-prize/7063/1/index.html): Hi Sonatype Community! 
We’re in the midst of developing our 2021 State of the Software Supply Chain Report, and can use your help! 
 
If you have 10 minutes to spare, please take our survey and share how your organizati&hellip; (125 words, Aug 4, 2021)
- [[COMING August 16] Conan Data Unification - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/coming-august-16-conan-data-unification/7037/index.html): Summary 
Starting August 16, users of Nexus Lifecycle and Nexus Firewall who evaluate Conan may experience a change in Conan results. 
The change is due to Sonatype’s continuing improvement to Conan. The improvements are&hellip; (226 words, Jul 30, 2021)
- [[COMING August 16] Conan Data Unification - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/coming-august-16-conan-data-unification/7037/1/index.html): Summary 
Starting August 16, users of Nexus Lifecycle and Nexus Firewall who evaluate Conan may experience a change in Conan results. 
The change is due to Sonatype’s continuing improvement to Conan. The improvements are&hellip; (305 words, Jul 30, 2021)
- [Group id acces - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/group-id-acces/7025/index.html): Continuing the discussion from Numerous 404 when Upgrading Nexus 2 OSS to Nexus 3 OSS: (94 words, Jul 29, 2021)
- [Group id acces - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/group-id-acces/7025/1/index.html): Continuing the discussion from Numerous 404 when Upgrading Nexus 2 OSS to Nexus 3 OSS: (109 words, Jul 29, 2021)
- [.NET .csproj scan -- exclude privateAssets - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/net-csproj-scan-exclude-privateassets/7013/index.html): Hello, 
I’m wondering if it’s possible to exclude packages marked as privateAssets in a .csproj file. Here is a sample .csproj. 
&lt;Project Sdk=&quot;Microsoft.NET.Sdk&quot;&gt;
  &lt;PropertyGroup&gt;
    &lt;TargetFramework&gt;netcoreapp3.1&lt;/Tar&hellip; (136 words, Jul 27, 2021)
- [.NET .csproj scan -- exclude privateAssets - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/net-csproj-scan-exclude-privateassets/7013/1/index.html): Hello, 
I’m wondering if it’s possible to exclude packages marked as privateAssets in a .csproj file. Here is a sample .csproj. 
&lt;Project Sdk=&quot;Microsoft.NET.Sdk&quot;&gt;
  &lt;PropertyGroup&gt;
    &lt;TargetFramework&gt;netcoreapp3.1&lt;/Tar&hellip; (129 words, Jul 27, 2021)
- [Scheduled maintenance across my.sonatype.com sites Wednesday, July 28, at 9pm EDT - Community Announcements - Sonatype Community](/content/community/t/scheduled-maintenance-across-my-sonatype-com-sites-wednesday-july-28-at-9pm-edt/7011/index.html): On Wednesday, July 28th starting at 9pm Eastern, Sonatype infrastructure will be undergoing maintenance, which could affect a user’s ability to log in to sites such as the my.sonatype.com portal, Community Forum, educati&hellip; (172 words, Jul 27, 2021)
- [Scheduled maintenance across my.sonatype.com sites Wednesday, July 28, at 9pm EDT - Community Announcements - Sonatype Community](/content/community/t/scheduled-maintenance-across-my-sonatype-com-sites-wednesday-july-28-at-9pm-edt/7011/1/index.html): On Wednesday, July 28th starting at 9pm Eastern, Sonatype infrastructure will be undergoing maintenance, which could affect a user’s ability to log in to sites such as the my.sonatype.com portal, Community Forum, educati&hellip; (170 words, Jul 27, 2021)
- [How to upload .deb files using the jenkins pipeline and your credentials to the Nexus OSS - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/how-to-upload-deb-files-using-the-jenkins-pipeline-and-your-credentials-to-the-nexus-oss/7010/index.html): I I’m trying to use the Nexus repository to manage *.deb packages generated by jenkins, but when trying to upload these packages to nexus I’m getting a lot of errors, what is the best way to publish the packages in deb f&hellip; (224 words, Jul 27, 2021)
- [How to upload .deb files using the jenkins pipeline and your credentials to the Nexus OSS - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/how-to-upload-deb-files-using-the-jenkins-pipeline-and-your-credentials-to-the-nexus-oss/7010/1/index.html): I I’m trying to use the Nexus repository to manage *.deb packages generated by jenkins, but when trying to upload these packages to nexus I’m getting a lot of errors, what is the best way to publish the packages in deb f&hellip; (231 words, Jul 27, 2021)
- [Update Your IQ Server License Threat Groups - Sonatype Labs - Sonatype Community](/content/community/t/update-your-iq-server-license-threat-groups/3094/17/index.html): The license threat group updater will apply the latest Sonatype provided license classification to your running IQ server’s license threat groups. This will alleviate any “License Threat Group not Assigned” policy violat&hellip; (578 words, Jul 26, 2021)
- [LowDiskSpaceException - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/lowdiskspaceexception/6996/1/index.html): Hi, 
The next error has appeared every few days and Nexus server become unavailable: 
300 WARN  [quartz-9-thread-12]  *SYSTEM org.sonatype.nexus.blobstore.file.FileBlobStore - Attempt to access non-existent blob 60cac04a&hellip; (124 words, Jul 24, 2021)
- [Nexus IQ Data Services Maintenance: Saturday, August 7th, 2021 - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/nexus-iq-data-services-maintenance-saturday-august-7th-2021/6990/index.html): Sonatype has planned scheduled maintenance of the Nexus IQ Data Services on Saturday, August 7th, from approximately 14:00:00 to 15:00:00 UTC. 
Maintenance Window 
We anticipate elevated error rates for processing applic&hellip; (324 words, Jul 23, 2021)
- [Nexus IQ Data Services Maintenance: Saturday, August 7th, 2021 - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/nexus-iq-data-services-maintenance-saturday-august-7th-2021/6990/1/index.html): Sonatype has planned scheduled maintenance of the Nexus IQ Data Services on Saturday, August 7th, from approximately 14:00:00 to 15:00:00 UTC. 
Maintenance Window 
We anticipate elevated error rates for processing applic&hellip; (320 words, Jul 23, 2021)
- [Starting in one hour - July Office Hours! - Community Announcements - Sonatype Community](/content/community/t/starting-in-one-hour-july-office-hours/6961/index.html): Join us in an hour at 10am ET (7am PT|3pm BST) for our monthly customer Office Hours. 
On the agenda for this month: 


Nexus Repository: Replication Product Preview &amp; Resilient Deployments in AWS 


Nexus Firewall v2: A&hellip; (182 words, Jul 20, 2021)
- [Starting in one hour - July Office Hours! - Community Announcements - Sonatype Community](/content/community/t/starting-in-one-hour-july-office-hours/6961/1/index.html): Join us in an hour at 10am ET (7am PT|3pm BST) for our monthly customer Office Hours. 
On the agenda for this month: 


Nexus Repository: Replication Product Preview &amp; Resilient Deployments in AWS 


Nexus Firewall v2: A&hellip; (195 words, Jul 20, 2021)
- [Join us tomorrow for July Office Hours - 10am ET! - Community Announcements - Sonatype Community](/content/community/t/join-us-tomorrow-for-july-office-hours-10am-et/6953/index.html): Join us tomorrow, July 20th, 2021, at 10am ET (7am PT|3pm BST) for our monthly customer Office Hours. 
On the agenda for this month: 


Nexus Firewall v2: Auto-Quarantine &amp; Release 


Nexus Repository: Replication Prod&hellip; (108 words, Jul 19, 2021)
- [Join us tomorrow for July Office Hours - 10am ET! - Community Announcements - Sonatype Community](/content/community/t/join-us-tomorrow-for-july-office-hours-10am-et/6953/1/index.html): Join us tomorrow, July 20th, 2021, at 10am ET (7am PT|3pm BST) for our monthly customer Office Hours. 
On the agenda for this month: 


Nexus Firewall v2: Auto-Quarantine &amp; Release 


Nexus Repository: Replication Prod&hellip; (108 words, Jul 19, 2021)
- [How to remove old nexusIQ waivers that are for components no longer used? - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/how-to-remove-old-nexusiq-waivers-that-are-for-components-no-longer-used/6945/1/index.html): Is there a way to find and remove security waivers that are for versions of components we no longer use? I often put in a waiver for scoped to {component version 1.2.3}, and we will update to use another version or say, &hellip; (264 words, Jul 16, 2021)
- [Example Event handler plugin - Sonatype Nexus Repository - Sonatype Community](/content/community/t/example-event-handler-plugin/6936/index.html): Hi All, 
I am trying to write a plugin which will collect some data when anonymous access event occurs in Nexus. Since I am new to plugin development, I am struggling to move further. Could someone guide me and help me o&hellip; (143 words, Jul 15, 2021)
- [Example Event handler plugin - Sonatype Nexus Repository - Sonatype Community](/content/community/t/example-event-handler-plugin/6936/1/index.html): Hi All, 
I am trying to write a plugin which will collect some data when anonymous access event occurs in Nexus. Since I am new to plugin development, I am struggling to move further. Could someone guide me and help me o&hellip; (187 words, Jul 15, 2021)
- [Scheduled Maintenance Downtime Tuesday, July 13, at 7pm EDT - Community Announcements - Sonatype Community](/content/community/t/scheduled-maintenance-downtime-tuesday-july-13-at-7pm-edt/6904/4/index.html): Starting around 7:00 PM EDT on Tuesday, July 13, the Community forum will be brought offline to perform necessary maintenance and upgrades. (208 words, Jul 14, 2021)
- [Join us for July Office Hours - Tuesday, July 20th at 10am ET! - Community Announcements - Sonatype Community](/content/community/t/join-us-for-july-office-hours-tuesday-july-20th-at-10am-et/6917/index.html): Join us Tuesday, July 20th, at 10am ET (7am PT|3 pm BST) for our monthly customer Office Hours. 
On the agenda for this month: 


Nexus Firewall v2: Auto-Quarantine &amp; Release 


Nexus Repository: Replication Product Pr&hellip; (198 words, Jul 13, 2021)
- [Join us for July Office Hours - Tuesday, July 20th at 10am ET! - Community Announcements - Sonatype Community](/content/community/t/join-us-for-july-office-hours-tuesday-july-20th-at-10am-et/6917/1/index.html): Join us Tuesday, July 20th, at 10am ET (7am PT|3 pm BST) for our monthly customer Office Hours. 
On the agenda for this month: 


Nexus Firewall v2: Auto-Quarantine &amp; Release 


Nexus Repository: Replication Product Pr&hellip; (188 words, Jul 13, 2021)
- [Scheduled Maintenance Downtime Tuesday, July 13, at 7pm EDT - Community Announcements - Sonatype Community](/content/community/t/scheduled-maintenance-downtime-tuesday-july-13-at-7pm-edt/6904/index.html): Starting around 7:00 PM EDT on Tuesday, July 13, the Community forum will be brought offline to perform necessary maintenance and upgrades. (210 words, Jul 12, 2021)
- [Scheduled Maintenance Downtime Tuesday, July 13, at 7pm EDT - Community Announcements - Sonatype Community](/content/community/t/scheduled-maintenance-downtime-tuesday-july-13-at-7pm-edt/6904/1/index.html): Starting around 7:00 PM EDT on Tuesday, July 13, the Community forum will be brought offline to perform necessary maintenance and upgrades. (213 words, Jul 12, 2021)
- [Nexus OSS wont load after upgrade - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-oss-wont-load-after-upgrade/6895/4/index.html): Hello All, 
I am currently running Nexus 3.30.1-01 on Windows Server 2019 on a air gap network (no internet). When I go to upgrade to 3.31.1-01 or 3.32.0-03, the installation is fine, but when everything loads, I get a b&hellip; (216 words, Jul 9, 2021)
- [Nexus OSS wont load after upgrade - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-oss-wont-load-after-upgrade/6895/2/index.html): Hello All, 
I am currently running Nexus 3.30.1-01 on Windows Server 2019 on a air gap network (no internet). When I go to upgrade to 3.31.1-01 or 3.32.0-03, the installation is fine, but when everything loads, I get a b&hellip; (214 words, Jul 9, 2021)
- [Nexus OSS wont load after upgrade - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-oss-wont-load-after-upgrade/6895/index.html): Hello All, 
I am currently running Nexus 3.30.1-01 on Windows Server 2019 on a air gap network (no internet). When I go to upgrade to 3.31.1-01 or 3.32.0-03, the installation is fine, but when everything loads, I get a b&hellip; (216 words, Jul 9, 2021)
- [Nexus OSS wont load after upgrade - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-oss-wont-load-after-upgrade/6895/1/index.html): Hello All, 
I am currently running Nexus 3.30.1-01 on Windows Server 2019 on a air gap network (no internet). When I go to upgrade to 3.31.1-01 or 3.32.0-03, the installation is fine, but when everything loads, I get a b&hellip; (216 words, Jul 9, 2021)
- [Staging in Nexus Repository 3 - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/staging-in-nexus-repository-3/6756/4/index.html): Hello, 
I am speaking today at the Sonatype Elevate conference on Getting Started with Staging and Cleanup in NXRM.  I want to use this space to answer any questions that come up from the session as well as hear any feed&hellip; (241 words, Jul 7, 2021)
- [REMINDER: Help.sonatype.com undergoing maintenance 07/07/2021 from 9pm-11:30pm ET - Community Announcements - Sonatype Community](/content/community/t/reminder-help-sonatype-com-undergoing-maintenance-07-07-2021-from-9pm-11-30pm-et/6869/1/index.html): Hi Sonatype Community, 
This is a reminder that Help.sonatype.com will be undergoing maintenance tomorrow, July 7th, 2021 from 9pm-11:30pm ET (6pm-8:30pm PT). 
The site will be unavailable during this time. 
If you are i&hellip; (174 words, Jul 6, 2021)
- [Help.sonatype.com undergoing maintenance 07/07/2021 from 9pm-11:30pm ET - Community Announcements - Sonatype Community](/content/community/t/help-sonatype-com-undergoing-maintenance-07-07-2021-from-9pm-11-30pm-et/6850/index.html): Hi Sonatype Community, 
Help.sonatype.com will be undergoing maintenance on Wednesday, July 7th, 2021 from 9pm-11:30pm ET (6pm-8:30pm PT). 
The site will be unavailable during this time. 
If you are in need of assistance&hellip; (70 words, Jul 1, 2021)
- [Help.sonatype.com undergoing maintenance 07/07/2021 from 9pm-11:30pm ET - Community Announcements - Sonatype Community](/content/community/t/help-sonatype-com-undergoing-maintenance-07-07-2021-from-9pm-11-30pm-et/6850/1/index.html): Hi Sonatype Community, 
Help.sonatype.com will be undergoing maintenance on Wednesday, July 7th, 2021 from 9pm-11:30pm ET (6pm-8:30pm PT). 
The site will be unavailable during this time. 
If you are in need of assistance&hellip; (147 words, Jul 1, 2021)
- [Using Nexus as docker registry - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/using-nexus-as-docker-registry/6842/2/index.html): My Setup 


Ingress Routes (example dns names and resolving using host file) 

Web Interface (nexus.bar.com)–&gt; Nexus Service (Working)
Docker Registry (docker.bar.com) → Nexus Service (Not Working)



Created self signed&hellip; (261 words, Jul 1, 2021)
- [Using Nexus as docker registry - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/using-nexus-as-docker-registry/6842/index.html): My Setup 


Ingress Routes (example dns names and resolving using host file) 

Web Interface (nexus.bar.com)–&gt; Nexus Service (Working)
Docker Registry (docker.bar.com) → Nexus Service (Not Working)



Created self signed&hellip; (194 words, Jul 1, 2021)
- [Using Nexus as docker registry - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/using-nexus-as-docker-registry/6842/1/index.html): My Setup 


Ingress Routes (example dns names and resolving using host file) 

Web Interface (nexus.bar.com)–&gt; Nexus Service (Working)
Docker Registry (docker.bar.com) → Nexus Service (Not Working)



Created self signed&hellip; (193 words, Jul 1, 2021)
- [Privilege's: User update - Role Restriction? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/privileges-user-update-role-restriction/6830/2/index.html): Hello, I have a role assigned to a manager that has the ability to update users with specific roles. But due to the privilege userupdate. The User can update themselves or any other use to an admin. I was wondering if th&hellip; (160 words, Jun 29, 2021)
- [Privilege's: User update - Role Restriction? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/privileges-user-update-role-restriction/6830/index.html): Hello, I have a role assigned to a manager that has the ability to update users with specific roles. But due to the privilege userupdate. The User can update themselves or any other use to an admin. I was wondering if th&hellip; (96 words, Jun 29, 2021)
- [Privilege's: User update - Role Restriction? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/privileges-user-update-role-restriction/6830/1/index.html): Hello, I have a role assigned to a manager that has the ability to update users with specific roles. But due to the privilege userupdate. The User can update themselves or any other use to an admin. I was wondering if th&hellip; (98 words, Jun 29, 2021)
- [The top docker command for Nexus implementation - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/the-top-docker-command-for-nexus-implementation/6823/3/index.html): Can you provide us the best practice of docker run command for nexus implementation? (118 words, Jun 29, 2021)
- [The top docker command for Nexus implementation - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/the-top-docker-command-for-nexus-implementation/6823/index.html): Can you provide us the best practice of docker run command for nexus implementation? (117 words, Jun 29, 2021)
- [The top docker command for Nexus implementation - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/the-top-docker-command-for-nexus-implementation/6823/1/index.html): Can you provide us the best practice of docker run command for nexus implementation? (121 words, Jun 29, 2021)
- [[NexusIQ] - Unable to browse SAML groups - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/nexusiq-unable-to-browse-saml-groups/6740/4/index.html): Hello, 
In the “Add a role” screen, we are trying to search our SAML groups using different wildcards but we are not able to fetch any results. 
SAML is configured and previous users are able to sign in successfully afte&hellip; (170 words, Jun 23, 2021)
- [Snapshots of apt proxy repositories do not contain 'i18n' and 'dep11' folders for each distribution - Sonatype Nexus Repository - Sonatype Community](/content/community/t/snapshots-of-apt-proxy-repositories-do-not-contain-i18n-and-dep11-folders-for-each-distribution/6210/5/index.html): that leads to the errors of sudo apt-get update: 
E: Failed to fetch https://mydomain:8443/repository/apt-proxy-bionic/snapshots/release5/dists/bionic/main/dep11/icons-48x48.tar (221 words, Jun 23, 2021)
- [Nexus Repo 3 Logging - Log Viewer - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-repo-3-logging-log-viewer/6796/index.html): As an admin I want to look at the log viewer and monitor what has been downloaded, uploaded, and changed from Origin IP and User ID. But I cannot figure out which default logger Nexus 3 would show this information. 
I se&hellip; (421 words, Jun 23, 2021)
- [Nexus Repo 3 Logging - Log Viewer - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-repo-3-logging-log-viewer/6796/1/index.html): As an admin I want to look at the log viewer and monitor what has been downloaded, uploaded, and changed from Origin IP and User ID. But I cannot figure out which default logger Nexus 3 would show this information. 
I se&hellip; (421 words, Jun 23, 2021)
- [Starting in 1 hour: June Office Hours at 1pm ET - Community Announcements / News - Sonatype Community](/content/community/t/starting-in-1-hour-june-office-hours-at-1pm-et/6793/index.html): We’re looking forward to seeing you at Office Hours in an hour, starting at 1pm ET! 
We’ll be discussing some of our newest products and capabilities: 


InnerSource waivers for Nexus Lifecycle 


New database options fo&hellip; (231 words, Jun 23, 2021)
- [Starting in 1 hour: June Office Hours at 1pm ET - Community Announcements / News - Sonatype Community](/content/community/t/starting-in-1-hour-june-office-hours-at-1pm-et/6793/1/index.html): We’re looking forward to seeing you at Office Hours in an hour, starting at 1pm ET! 
We’ll be discussing some of our newest products and capabilities: 


InnerSource waivers for Nexus Lifecycle 


New database options fo&hellip; (212 words, Jun 23, 2021)
- [TOMORROW: June Office Hours at 1pm ET - Community Announcements / News - Sonatype Community](/content/community/t/tomorrow-june-office-hours-at-1pm-et/6780/index.html): Don’t forget to join us tomorrow, Wednesday, June 23rd, at 1pm ET (10am PT/6 pm BST) for our monthly customer Office Hours. 
We’ll be discussing some of our newest products and capabilities: 


Sonatype Lift - our newe&hellip; (148 words, Jun 22, 2021)
- [TOMORROW: June Office Hours at 1pm ET - Community Announcements / News - Sonatype Community](/content/community/t/tomorrow-june-office-hours-at-1pm-et/6780/1/index.html): Don’t forget to join us tomorrow, Wednesday, June 23rd, at 1pm ET (10am PT/6 pm BST) for our monthly customer Office Hours. 
We’ll be discussing some of our newest products and capabilities: 


Sonatype Lift - our newe&hellip; (158 words, Jun 22, 2021)
- [Congratulations Elevate Award Winners! - Community Announcements / News - Sonatype Community](/content/community/t/congratulations-elevate-award-winners/6777/index.html): We hope you had an amazing time at Elevate 2021! Thanks to all who joined us last Thursday for this annual event. 
This year, we introduced the Sonatype Elevate Awards and we’re excited to share this year’s winners! 
The&hellip; (99 words, Jun 21, 2021)
- [Congratulations Elevate Award Winners! - Community Announcements / News - Sonatype Community](/content/community/t/congratulations-elevate-award-winners/6777/1/index.html): We hope you had an amazing time at Elevate 2021! Thanks to all who joined us last Thursday for this annual event. 
This year, we introduced the Sonatype Elevate Awards and we’re excited to share this year’s winners! 
The&hellip; (99 words, Jun 21, 2021)
- [[COMING JUNE 30] CocoaPods Data Unification - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/coming-june-30-cocoapods-data-unification/6764/1/index.html): Summary 
Starting June 30, users of Nexus Lifecycle and Nexus Firewall who evaluate CocoaPods may experience a change in CocoaPods results. 
The change is due to Sonatype’s continuing improvement to CocoaPods. The improv&hellip; (291 words, Jun 18, 2021)
- [Staging in Nexus Repository 3 - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/staging-in-nexus-repository-3/6756/index.html): Hello, 
I am speaking today at the Sonatype Elevate conference on Getting Started with Staging and Cleanup in NXRM.  I want to use this space to answer any questions that come up from the session as well as hear any feed&hellip; (310 words, Jun 17, 2021)
- [Staging in Nexus Repository 3 - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/staging-in-nexus-repository-3/6756/1/index.html): Hello, 
I am speaking today at the Sonatype Elevate conference on Getting Started with Staging and Cleanup in NXRM.  I want to use this space to answer any questions that come up from the session as well as hear any feed&hellip; (241 words, Jun 17, 2021)
- [June Office Hours Happening Next Wednesday, 06/23/2021 - Community Announcements - Sonatype Community](/content/community/t/june-office-hours-happening-next-wednesday-06-23-2021/6746/index.html): Join us Wednesday, June 23rd at 1pm ET (10am PT/6 pm BST) for our monthly customer Office Hours. 
This month, we’ll be discussing some of our newest products and capabilities: 


Sonatype Lift - our newest solution, pr&hellip; (152 words, Jun 16, 2021)
- [June Office Hours Happening Next Wednesday, 06/23/2021 - Community Announcements - Sonatype Community](/content/community/t/june-office-hours-happening-next-wednesday-06-23-2021/6746/1/index.html): Join us Wednesday, June 23rd at 1pm ET (10am PT/6 pm BST) for our monthly customer Office Hours. 
This month, we’ll be discussing some of our newest products and capabilities: 


Sonatype Lift - our newest solution, pr&hellip; (223 words, Jun 16, 2021)
- [[NexusIQ] - Unable to browse SAML groups - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/nexusiq-unable-to-browse-saml-groups/6740/index.html): Hello, 
In the “Add a role” screen, we are trying to search our SAML groups using different wildcards but we are not able to fetch any results. 
SAML is configured and previous users are able to sign in successfully afte&hellip; (170 words, Jun 15, 2021)
- [[NexusIQ] - Unable to browse SAML groups - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/nexusiq-unable-to-browse-saml-groups/6740/1/index.html): Hello, 
In the “Add a role” screen, we are trying to search our SAML groups using different wildcards but we are not able to fetch any results. 
SAML is configured and previous users are able to sign in successfully afte&hellip; (170 words, Jun 15, 2021)
- [NXRM 3 restarts after many broken pipe warnings - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nxrm-3-restarts-after-many-broken-pipe-warnings/6718/index.html): I am encountring for sometime a problem which is: that nxrm3 (ver 3.29.2) restarts after many broken pipe warnings, this is an example of the content of nexus.log just before nxrm3 reboots 
the problem is realy annoying &hellip; (612 words, Jun 14, 2021)
- [About the Best Practices category - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/about-the-best-practices-category/6710/index.html): A place to discover and discuss best practices for using Sonatype Nexus Repository. (93 words, Jun 11, 2021)
- [About the Best Practices category - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/about-the-best-practices-category/6710/1/index.html): A place to discover and discuss best practices for using Sonatype Nexus Repository. (99 words, Jun 11, 2021)
- [NXRM health check panel advertises "Get Nexus Firewall", even though we have it - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/nxrm-health-check-panel-advertises-get-nexus-firewall-even-though-we-have-it/6698/2/index.html): Hey there! 
Just wanted to share an observed behavior of ours. We’re not sure whether its expected, or an indicator that something isn’t working quite right. 
We currently have Pro+Lifecycle+Firewall licenses.  In NXRM3,&hellip; (188 words, Jun 9, 2021)
- [NXRM health check panel advertises "Get Nexus Firewall", even though we have it - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/nxrm-health-check-panel-advertises-get-nexus-firewall-even-though-we-have-it/6698/index.html): Hey there! 
Just wanted to share an observed behavior of ours. We’re not sure whether its expected, or an indicator that something isn’t working quite right. 
We currently have Pro+Lifecycle+Firewall licenses.  In NXRM3,&hellip; (195 words, Jun 9, 2021)
- [NXRM health check panel advertises "Get Nexus Firewall", even though we have it - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/nxrm-health-check-panel-advertises-get-nexus-firewall-even-though-we-have-it/6698/1/index.html): Hey there! 
Just wanted to share an observed behavior of ours. We’re not sure whether its expected, or an indicator that something isn’t working quite right. 
We currently have Pro+Lifecycle+Firewall licenses.  In NXRM3,&hellip; (295 words, Jun 9, 2021)
- [Setting up Public repository - Sonatype Nexus Repository - Sonatype Community](/content/community/t/setting-up-public-repository/6673/9/index.html): Hi. I’m new to Nexus. Glad to be a part of community. 
I have an use case where i need to make the particular repository public and it shouldn’t be asking for any auth when docker pull. Please help me out. 
Nexus - OSS 3&hellip; (333 words, Jun 7, 2021)
- [Setting up Public repository - Sonatype Nexus Repository - Sonatype Community](/content/community/t/setting-up-public-repository/6673/1/index.html): Hi. I’m new to Nexus. Glad to be a part of community. 
I have an use case where i need to make the particular repository public and it shouldn’t be asking for any auth when docker pull. Please help me out. 
Nexus - OSS 3&hellip; (334 words, Jun 7, 2021)
- [New Have You Heard Video: Easy SCM Onboarding - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/new-have-you-heard-video-easy-scm-onboarding/6642/index.html): Hi everyone! 
We’re excited to let you know that our Technical Content team has released a new Have You Heard video about Easy SCM Onboarding. 
Our Have You Heard? video series contains bite-sized videos to help you quic&hellip; (257 words, Jun 1, 2021)
- [New Have You Heard Video: Easy SCM Onboarding - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/new-have-you-heard-video-easy-scm-onboarding/6642/1/index.html): Hi everyone! 
We’re excited to let you know that our Technical Content team has released a new Have You Heard video about Easy SCM Onboarding. 
Our Have You Heard? video series contains bite-sized videos to help you quic&hellip; (193 words, Jun 1, 2021)
- [Nuget proxy 404 ? when i use nexus 3.30.1-01 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nuget-proxy-404-when-i-use-nexus-3-30-1-01/6630/index.html): 2021-05-28 19:55:27,833+0800 WARN  [qtp370184339-153]  *UNKNOWN org.sonatype.nexus.repository.httpbridge.internal.ViewServlet - Bad request. Reason: Repository path must have another ‘/’ after initial ‘/’ 
39-46]  *UNKNO&hellip; (122 words, May 28, 2021)
- [Nuget proxy 404 ? when i use nexus 3.30.1-01 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nuget-proxy-404-when-i-use-nexus-3-30-1-01/6630/1/index.html): 2021-05-28 19:55:27,833+0800 WARN  [qtp370184339-153]  *UNKNOWN org.sonatype.nexus.repository.httpbridge.internal.ViewServlet - Bad request. Reason: Repository path must have another ‘/’ after initial ‘/’ 
39-46]  *UNKNO&hellip; (52 words, May 28, 2021)
- [Is it possible to accept anonymous access only from a private network? - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/is-it-possible-to-accept-anonymous-access-only-from-a-private-network/6618/3/index.html): Hi, 
we are using nexus3 to host build artifacts. We want to use nexus to provide these artifacts to our customers. We are now facing a problem: currently nexus accepts unauthenticated (anonymous) requests (the actual se&hellip; (306 words, May 28, 2021)
- [Snapshots of apt proxy repositories do not contain 'i18n' and 'dep11' folders for each distribution - Sonatype Nexus Repository - Sonatype Community](/content/community/t/snapshots-of-apt-proxy-repositories-do-not-contain-i18n-and-dep11-folders-for-each-distribution/6210/2/index.html): that leads to the errors of sudo apt-get update: 
E: Failed to fetch https://mydomain:8443/repository/apt-proxy-bionic/snapshots/release5/dists/bionic/main/dep11/icons-48x48.tar (212 words, May 27, 2021)
- [Starting in 30 minutes - May Office Hours at 11am ET - Community Announcements / News - Sonatype Community](/content/community/t/starting-in-30-minutes-may-office-hours-at-11am-et/6620/index.html): Our May Office Hours call starts in 30 minutes! Join us to hear what you can expect from Elevate 2021 - how to register, what sessions to look out for, the Elevate Awards, and more. 
Click here to access the Join link. &hellip; (180 words, May 27, 2021)
- [Is it possible to accept anonymous access only from a private network? - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/is-it-possible-to-accept-anonymous-access-only-from-a-private-network/6618/index.html): Hi, 
we are using nexus3 to host build artifacts. We want to use nexus to provide these artifacts to our customers. We are now facing a problem: currently nexus accepts unauthenticated (anonymous) requests (the actual se&hellip; (306 words, May 27, 2021)
- [Update Your IQ Server License Threat Groups - Sonatype Labs - Sonatype Community](/content/community/t/update-your-iq-server-license-threat-groups/3094/16/index.html): The license threat group updater will apply the latest Sonatype provided license classification to your running IQ server’s license threat groups. This will alleviate any “License Threat Group not Assigned” policy violat&hellip; (663 words, May 26, 2021)
- [TOMORROW - May Office Hours - All About Elevate 2021 - Community Announcements - Sonatype Community](/content/community/t/tomorrow-may-office-hours-all-about-elevate-2021/6610/1/index.html): Don’t forget to join us tomorrow, Thursday, May 27th, at 11am ET (8am PT/4pm BST) for our May customer Office Hours. 
This month, we’ll be discussing all things Elevate  —that is, our annual virtual user conference com&hellip; (169 words, May 26, 2021)
- [Nexus does not find maven archetype for GWT Broyer Maven plugin - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-does-not-find-maven-archetype-for-gwt-broyer-maven-plugin/6579/6/index.html): Running this command outside of my employer’s firewall works correctly, but inside my company, I get this error: 

[ERROR] Failed to execute goal org.apache.maven.plugins:maven-archetype-plugin:3.2.0:generate (default-cl&hellip; (230 words, May 21, 2021)
- [Nexus does not find maven archetype for GWT Broyer Maven plugin - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-does-not-find-maven-archetype-for-gwt-broyer-maven-plugin/6579/index.html): Running this command outside of my employer’s firewall works correctly, but inside my company, I get this error: 

[ERROR] Failed to execute goal org.apache.maven.plugins:maven-archetype-plugin:3.2.0:generate (default-cl&hellip; (230 words, May 21, 2021)
- [Nexus does not find maven archetype for GWT Broyer Maven plugin - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-does-not-find-maven-archetype-for-gwt-broyer-maven-plugin/6579/1/index.html): Running this command outside of my employer’s firewall works correctly, but inside my company, I get this error: 

[ERROR] Failed to execute goal org.apache.maven.plugins:maven-archetype-plugin:3.2.0:generate (default-cl&hellip; (238 words, May 21, 2021)
- [Download issue - Getting 404 from script - Sonatype Nexus Repository - Sonatype Community](/content/community/t/download-issue-getting-404-from-script/6565/3/index.html): Hey All, 
Just wanted to check in and see if anyone else is having issues downloading the latest binary via script? We have built a script to process our nexus updates but for some reason, it always gets a 404 response. &hellip; (259 words, May 21, 2021)
- [Download issue - Getting 404 from script - Sonatype Nexus Repository - Sonatype Community](/content/community/t/download-issue-getting-404-from-script/6565/index.html): Hey All, 
Just wanted to check in and see if anyone else is having issues downloading the latest binary via script? We have built a script to process our nexus updates but for some reason, it always gets a 404 response. &hellip; (259 words, May 20, 2021)
- [Download issue - Getting 404 from script - Sonatype Nexus Repository - Sonatype Community](/content/community/t/download-issue-getting-404-from-script/6565/1/index.html): Hey All, 
Just wanted to check in and see if anyone else is having issues downloading the latest binary via script? We have built a script to process our nexus updates but for some reason, it always gets a 404 response. &hellip; (259 words, May 20, 2021)
- [May Office Hours: Let's Talk About Elevate 2021! - Community Announcements / News - Sonatype Community](/content/community/t/may-office-hours-lets-talk-about-elevate-2021/6562/index.html): Join us Thursday, May 27th, at 11am ET (8am PT/4pm BST) for our monthly customer Office Hours. 
This month, we’ll be discussing all things Elevate —that is, our annual virtual user conference coming up on June 17th! 
W&hellip; (98 words, May 19, 2021)
- [May Office Hours: Let's Talk About Elevate 2021! - Community Announcements / News - Sonatype Community](/content/community/t/may-office-hours-lets-talk-about-elevate-2021/6562/1/index.html): Join us Thursday, May 27th, at 11am ET (8am PT/4pm BST) for our monthly customer Office Hours. 
This month, we’ll be discussing all things Elevate —that is, our annual virtual user conference coming up on June 17th! 
W&hellip; (96 words, May 19, 2021)
- [Cleanup deleted repositories - Sonatype Nexus Repository - Sonatype Community](/content/community/t/cleanup-deleted-repositories/6552/index.html): Hi! 
As par of our housekeeping activities, I have recently removed several repositories from Nexus (maven proxy). However, I have noticed that they are still around and consuming space. From the query I ran, I can see t&hellip; (406 words, May 18, 2021)
- [Cleanup deleted repositories - Sonatype Nexus Repository - Sonatype Community](/content/community/t/cleanup-deleted-repositories/6552/1/index.html): Hi! 
As par of our housekeeping activities, I have recently removed several repositories from Nexus (maven proxy). However, I have noticed that they are still around and consuming space. From the query I ran, I can see t&hellip; (407 words, May 18, 2021)
- [Allow custom roles to Import Apps - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/allow-custom-roles-to-import-apps/6547/index.html): Currently, only System Admins are allowed the “Import Applications” functionality of Easy SCM Onboarding. 
It only makes sense to allow non System Admins (e.g. custom roles) to also use this feature as long as such role/&hellip; (105 words, May 18, 2021)
- [Allow custom roles to Import Apps - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/allow-custom-roles-to-import-apps/6547/1/index.html): Currently, only System Admins are allowed the “Import Applications” functionality of Easy SCM Onboarding. 
It only makes sense to allow non System Admins (e.g. custom roles) to also use this feature as long as such role/&hellip; (209 words, May 18, 2021)
- [Nexus Not Parsing HTTP Basic Auth - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-not-parsing-http-basic-auth/6519/3/index.html): I am trying to get Nexus Webhooks working with Jenkins. We cannot allow our Jenkins system to allow anonymous access, thus we need some sort of authentication (using account credentials or an API key). 
We have tried usi&hellip; (257 words, May 14, 2021)
- [Nexus Not Parsing HTTP Basic Auth - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-not-parsing-http-basic-auth/6519/2/index.html): I am trying to get Nexus Webhooks working with Jenkins. We cannot allow our Jenkins system to allow anonymous access, thus we need some sort of authentication (using account credentials or an API key). 
We have tried usi&hellip; (247 words, May 13, 2021)
- [Nexus Not Parsing HTTP Basic Auth - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-not-parsing-http-basic-auth/6519/index.html): I am trying to get Nexus Webhooks working with Jenkins. We cannot allow our Jenkins system to allow anonymous access, thus we need some sort of authentication (using account credentials or an API key). 
We have tried usi&hellip; (253 words, May 13, 2021)
- [Nexus Not Parsing HTTP Basic Auth - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-not-parsing-http-basic-auth/6519/1/index.html): I am trying to get Nexus Webhooks working with Jenkins. We cannot allow our Jenkins system to allow anonymous access, thus we need some sort of authentication (using account credentials or an API key). 
We have tried usi&hellip; (247 words, May 13, 2021)
- [Installing IQ 3.1.1-01 plugin on Intellij-IDEA 2021.1 - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/installing-iq-3-1-1-01-plugin-on-intellij-idea-2021-1/6311/4/index.html): Hello, 
Need advice on installing IQ 3.1.1-01 plugin on Intellij-IDEA 2021.1 .  It doesn’t appear to work for me.   The plugin hangs and says “Loading” and doesn’t allow me to configure it.   Is this a known issue?  If s&hellip; (251 words, May 12, 2021)
- [New Learning Materials: Why Policy? - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/new-learning-materials-why-policy/6512/index.html): Hi everyone! 
We’re excited to let you know that the Technical Content team has released a brand new technical guide, &quot;Why Policy?&quot; 
We’re often asked by customers and employees alike why we built Nexus Lifecycle as a po&hellip; (172 words, May 12, 2021)
- [New Learning Materials: Why Policy? - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/new-learning-materials-why-policy/6512/1/index.html): Hi everyone! 
We’re excited to let you know that the Technical Content team has released a brand new technical guide, &quot;Why Policy?&quot; 
We’re often asked by customers and employees alike why we built Nexus Lifecycle as a po&hellip; (278 words, May 12, 2021)
- [Nexus IQ server Okta integration-Only built-in group is available - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/nexus-iq-server-okta-integration-only-built-in-group-is-available/6501/index.html): Hi 
After integration with okta (SAML), server showing only built-in group(Authenticated Users) in server.And not listing each users in this group. 
Is it possible to list out each users from this group ,as we dont want &hellip; (177 words, May 12, 2021)
- [Nexus IQ server Okta integration-Only built-in group is available - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/nexus-iq-server-okta-integration-only-built-in-group-is-available/6501/1/index.html): Hi 
After integration with okta (SAML), server showing only built-in group(Authenticated Users) in server.And not listing each users in this group. 
Is it possible to list out each users from this group ,as we dont want &hellip; (67 words, May 12, 2021)
- [LDAP configuration in Nexus container from command line - Sonatype Nexus Repository - Sonatype Community](/content/community/t/ldap-configuration-in-nexus-container-from-command-line/6486/4/index.html): I have a requirement to configure LDAP properties to add a new ldap connection in a Nexus container(I’m using a containerised version of Nexus,version 3.28.1) from the command line. The properties include: 
ldap host. 
p&hellip; (265 words, May 10, 2021)
- [LDAP configuration in Nexus container from command line - Sonatype Nexus Repository - Sonatype Community](/content/community/t/ldap-configuration-in-nexus-container-from-command-line/6486/3/index.html): I have a requirement to configure LDAP properties to add a new ldap connection in a Nexus container(I’m using a containerised version of Nexus,version 3.28.1) from the command line. The properties include: 
ldap host. 
p&hellip; (271 words, May 10, 2021)
- [LDAP configuration in Nexus container from command line - Sonatype Nexus Repository - Sonatype Community](/content/community/t/ldap-configuration-in-nexus-container-from-command-line/6486/2/index.html): I have a requirement to configure LDAP properties to add a new ldap connection in a Nexus container(I’m using a containerised version of Nexus,version 3.28.1) from the command line. The properties include: 
ldap host. 
p&hellip; (272 words, May 10, 2021)
- [LDAP configuration in Nexus container from command line - Sonatype Nexus Repository - Sonatype Community](/content/community/t/ldap-configuration-in-nexus-container-from-command-line/6486/index.html): I have a requirement to configure LDAP properties to add a new ldap connection in a Nexus container(I’m using a containerised version of Nexus,version 3.28.1) from the command line. The properties include: 
ldap host. 
p&hellip; (272 words, May 9, 2021)
- [LDAP configuration in Nexus container from command line - Sonatype Nexus Repository - Sonatype Community](/content/community/t/ldap-configuration-in-nexus-container-from-command-line/6486/1/index.html): I have a requirement to configure LDAP properties to add a new ldap connection in a Nexus container(I’m using a containerised version of Nexus,version 3.28.1) from the command line. The properties include: 
ldap host. 
p&hellip; (244 words, May 9, 2021)
- [Add capability to manage all policy elements via API - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/add-capability-to-manage-all-policy-elements-via-api/6467/2/index.html): Export/Import policy is not exposed via API, this would be a good starting point for anyone terraforming their instances. 
Ultimately we would like to have API’s that allow adding/managing individual rules/components so &hellip; (167 words, May 6, 2021)
- [Add capability to manage all policy elements via API - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/add-capability-to-manage-all-policy-elements-via-api/6467/index.html): Export/Import policy is not exposed via API, this would be a good starting point for anyone terraforming their instances. 
Ultimately we would like to have API’s that allow adding/managing individual rules/components so &hellip; (184 words, May 6, 2021)
- [Add capability to manage all policy elements via API - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/add-capability-to-manage-all-policy-elements-via-api/6467/1/index.html): Export/Import policy is not exposed via API, this would be a good starting point for anyone terraforming their instances. 
Ultimately we would like to have API’s that allow adding/managing individual rules/components so &hellip; (176 words, May 6, 2021)
- [Nexus version and email - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-version-and-email/6462/7/index.html): Good morning 
I’m Lorenzo and I created an account on SonaType to be able to distribute my artefact on MavenCentral with the help of the Nexus Repository Manager. 
I use is a remotely hosted Nexus Repository Manager for &hellip; (598 words, May 6, 2021)
- [Nexus version and email - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-version-and-email/6462/index.html): Good morning 
I’m Lorenzo and I created an account on SonaType to be able to distribute my artefact on MavenCentral with the help of the Nexus Repository Manager. 
I use is a remotely hosted Nexus Repository Manager for &hellip; (595 words, May 5, 2021)
- [Nexus version and email - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-version-and-email/6462/1/index.html): Good morning 
I’m Lorenzo and I created an account on SonaType to be able to distribute my artefact on MavenCentral with the help of the Nexus Repository Manager. 
I use is a remotely hosted Nexus Repository Manager for &hellip; (598 words, May 5, 2021)
- [Report Executables as unknown when scanning - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/report-executables-as-unknown-when-scanning/6457/index.html): When perform an IQ scan with the client we get the following for executables contained in the archive (this is an example) 
[WARN] Could not open main_project-hothR0/tm1server-11.8.00600.6-winx64h-app-inst.tar.gz/bin/tm1&hellip; (67 words, May 4, 2021)
- [Report Executables as unknown when scanning - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/report-executables-as-unknown-when-scanning/6457/1/index.html): When perform an IQ scan with the client we get the following for executables contained in the archive (this is an example) 
[WARN] Could not open main_project-hothR0/tm1server-11.8.00600.6-winx64h-app-inst.tar.gz/bin/tm1&hellip; (150 words, May 4, 2021)
- [Does Nexus Repository OSS 3.30.0-01 support Capabilities via Rest API - Sonatype Nexus Repository - Sonatype Community](/content/community/t/does-nexus-repository-oss-3-30-0-01-support-capabilities-via-rest-api/6455/2/index.html): Hi, 
I was able to successfully create a repository through Rest API in Nexus Repository OSS 3.30.0-01. But couldn’t find any API references to create capabilities for that particular repository under IQ: Audit and Quara&hellip; (159 words, May 4, 2021)
- [Does Nexus Repository OSS 3.30.0-01 support Capabilities via Rest API - Sonatype Nexus Repository - Sonatype Community](/content/community/t/does-nexus-repository-oss-3-30-0-01-support-capabilities-via-rest-api/6455/index.html): Hi, 
I was able to successfully create a repository through Rest API in Nexus Repository OSS 3.30.0-01. But couldn’t find any API references to create capabilities for that particular repository under IQ: Audit and Quara&hellip; (169 words, May 4, 2021)
- [Does Nexus Repository OSS 3.30.0-01 support Capabilities via Rest API - Sonatype Nexus Repository - Sonatype Community](/content/community/t/does-nexus-repository-oss-3-30-0-01-support-capabilities-via-rest-api/6455/1/index.html): Hi, 
I was able to successfully create a repository through Rest API in Nexus Repository OSS 3.30.0-01. But couldn’t find any API references to create capabilities for that particular repository under IQ: Audit and Quara&hellip; (99 words, May 4, 2021)
- [NexusIQ Maven evaluate Skipping Designated sub-modules - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/nexusiq-maven-evaluate-skipping-designated-sub-modules/6441/index.html): I’d like to run a NexusIQ scan on each Java build regardless of whether the build is run on a developer’s machine or from a CI tool.  This allows a developer to reproduce results generated from a CI tool on his local mac&hellip; (316 words, Apr 30, 2021)
- [NexusIQ Maven evaluate Skipping Designated sub-modules - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/nexusiq-maven-evaluate-skipping-designated-sub-modules/6441/1/index.html): I’d like to run a NexusIQ scan on each Java build regardless of whether the build is run on a developer’s machine or from a CI tool.  This allows a developer to reproduce results generated from a CI tool on his local mac&hellip; (316 words, Apr 30, 2021)
- [How to indicate success or failure from the IQ CLI? - Sonatype Lifecycle & Repository Firewall / Best Practices - Sonatype Community](/content/community/t/how-to-indicate-success-or-failure-from-the-iq-cli/394/6/index.html): Following command line exit code conventions, the IQ CLI java jar will return a code of 0 upon a successful scan and a code of 1 upon a “failed” scan. 
The meaning of a “failed” scan can be adjusted in a couple ways. 

T&hellip; (397 words, Apr 30, 2021)
- [Don't miss the CNCF Bug Bash, sponsored by Sonatype! - Community Announcements / News - Sonatype Community](/content/community/t/dont-miss-the-cncf-bug-bash-sponsored-by-sonatype/6420/index.html): Work alongside your fellow devs to smash bugs on select CNCF Projects and compete for prizes and glory! 
The CNCF Bug Bash, sponsored by Sonatype, kicks off on Day 0 of KubeCon Europe, May 3rd @ 16:00 CEST and ends at &hellip; (108 words, Apr 28, 2021)
- [Don't miss the CNCF Bug Bash, sponsored by Sonatype! - Community Announcements / News - Sonatype Community](/content/community/t/dont-miss-the-cncf-bug-bash-sponsored-by-sonatype/6420/1/index.html): Work alongside your fellow devs to smash bugs on select CNCF Projects and compete for prizes and glory! 
The CNCF Bug Bash, sponsored by Sonatype, kicks off on Day 0 of KubeCon Europe, May 3rd @ 16:00 CEST and ends at &hellip; (101 words, Apr 28, 2021)
- [April Office Hours Continued: Easy SCM Onboarding - Office Hours - Sonatype Community](/content/community/t/april-office-hours-continued-easy-scm-onboarding/6408/index.html): Thanks to all who attended our April Office Hours call last Thursday! 
Based on those who participated in the polls during the call, we found that attendees would be interested in continuing the conversation about Easy S&hellip; (205 words, Apr 26, 2021)
- [April Office Hours Continued: Easy SCM Onboarding - Office Hours - Sonatype Community](/content/community/t/april-office-hours-continued-easy-scm-onboarding/6408/1/index.html): Thanks to all who attended our April Office Hours call last Thursday! 
Based on those who participated in the polls during the call, we found that attendees would be interested in continuing the conversation about Easy S&hellip; (211 words, Apr 26, 2021)
- [Quarantine a package - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/quarantine-a-package/6355/3/index.html): Does anyone know if there’s an option to quarantine an unquarantined package (ex. Pandas 1.0.0) from the Nexus IQ Server? We have the option to release a package from quarantine but there doesn’t seem to have an option t&hellip; (268 words, Apr 26, 2021)
- [New Sonatype Learn Course- Infrastructure as Code Pack - Sonatype Learn - Sonatype Community](/content/community/t/new-sonatype-learn-course-infrastructure-as-code-pack/6376/index.html): The Sonatype Customer Education Team is excited to announce a brand new feature-specific course! 
In this course, you’ll learn how to use the Infrastructure as Code Pack (an add-on to Nexus Lifecycle) to secure what you &hellip; (278 words, Apr 21, 2021)
- [New Sonatype Learn Course- Infrastructure as Code Pack - Sonatype Learn - Sonatype Community](/content/community/t/new-sonatype-learn-course-infrastructure-as-code-pack/6376/1/index.html): The Sonatype Customer Education Team is excited to announce a brand new feature-specific course! 
In this course, you’ll learn how to use the Infrastructure as Code Pack (an add-on to Nexus Lifecycle) to secure what you &hellip; (278 words, Apr 21, 2021)
- [Release 112 - New Left Navigation - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/release-112-new-left-navigation/6371/2/index.html): Summary 
This post outlines three changes, the first being the revamped navigation, the second being updates to the filters on the Dashboard and Reports pages, and the third being an updated logo in the navigation. 
We’r&hellip; (420 words, Apr 21, 2021)
- [TOMORROW - Join us for April Office Hours, 4/22 at 12pm ET! - Community Announcements / News - Sonatype Community](/content/community/t/tomorrow-join-us-for-april-office-hours-4-22-at-12pm-et/6372/2/index.html): Join us tomorrow, Thursday, April 22nd, at 12pm ET (9am PT/5pm GMT) for our monthly customer Office Hours. 
Learn how to quickly and easily onboard applications from your source control repository to Nexus Lifecycle! 
&hellip; (162 words, Apr 21, 2021)
- [TOMORROW - Join us for April Office Hours, 4/22 at 12pm ET! - Community Announcements / News - Sonatype Community](/content/community/t/tomorrow-join-us-for-april-office-hours-4-22-at-12pm-et/6372/1/index.html): Join us tomorrow, Thursday, April 22nd, at 12pm ET (9am PT/5pm GMT) for our monthly customer Office Hours. 
Learn how to quickly and easily onboard applications from your source control repository to Nexus Lifecycle! 
&hellip; (163 words, Apr 21, 2021)
- [Release 112 - New Left Navigation - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/release-112-new-left-navigation/6371/index.html): Summary 
This post outlines three changes, the first being the revamped navigation, the second being updates to the filters on the Dashboard and Reports pages, and the third being an updated logo in the navigation. 
We’r&hellip; (388 words, Apr 21, 2021)
- [Release 112 - New Left Navigation - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/release-112-new-left-navigation/6371/1/index.html): Summary 
This post outlines three changes, the first being the revamped navigation, the second being updates to the filters on the Dashboard and Reports pages, and the third being an updated logo in the navigation. 
We’r&hellip; (386 words, Apr 21, 2021)
- [Allow users to override NexusIQ policy at application level - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/allow-users-to-override-nexusiq-policy-at-application-level/6364/index.html): Hi Kevin, 
As its been discussed many times in past not sure if any feature request already exists for it but we will need  feature for users to enable more stringent policy at application level compared to what global p&hellip; (213 words, Apr 20, 2021)
- [Allow users to override NexusIQ policy at application level - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/allow-users-to-override-nexusiq-policy-at-application-level/6364/1/index.html): Hi Kevin, 
As its been discussed many times in past not sure if any feature request already exists for it but we will need  feature for users to enable more stringent policy at application level compared to what global p&hellip; (117 words, Apr 20, 2021)
- [Quarantine a package - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/quarantine-a-package/6355/index.html): Does anyone know if there’s an option to quarantine an unquarantined package (ex. Pandas 1.0.0) from the Nexus IQ Server? We have the option to release a package from quarantine but there doesn’t seem to have an option t&hellip; (261 words, Apr 20, 2021)
- [Quarantine a package - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/quarantine-a-package/6355/1/index.html): Does anyone know if there’s an option to quarantine an unquarantined package (ex. Pandas 1.0.0) from the Nexus IQ Server? We have the option to release a package from quarantine but there doesn’t seem to have an option t&hellip; (258 words, Apr 20, 2021)
- [Getting Started with the Sonatype Community - Community Announcements / Welcome - Sonatype Community](/content/community/t/getting-started-with-the-sonatype-community/6349/index.html): Welcome to the Sonatype Community! We’re glad you’re here. Introduce yourself here and tell us a little more about you by starting a new topic in this category. 
Ready to get started? Here are four quick steps to take. 

&hellip; (531 words, Apr 19, 2021)
- [Getting Started with the Sonatype Community - Community Announcements / Welcome - Sonatype Community](/content/community/t/getting-started-with-the-sonatype-community/6349/1/index.html): Welcome to the Sonatype Community! We’re glad you’re here. Introduce yourself here and tell us a little more about you by starting a new topic in this category. 
Ready to get started? Here are four quick steps to take. 

&hellip; (456 words, Apr 19, 2021)
- [April Customer Office Hours: Easy SCM Onboarding - April 22 - Community Announcements / News - Sonatype Community](/content/community/t/april-customer-office-hours-easy-scm-onboarding-april-22/6328/5/index.html): Join us Thursday, April 22nd, at 12pm ET (9am PT/5pm GMT) for our monthly customer Office Hours. 
Learn how to quickly and easily onboard applications from your source control repository to Nexus Lifecycle! 
Click here &hellip; (205 words, Apr 19, 2021)
- [New Learning Materials! - Community Announcements - Sonatype Community](/content/community/t/new-learning-materials/6338/2/index.html): The Technical Content team has been busy crafting new assets designed to help you get the most out of your Nexus Platform implementation. The list below shows our latest product and feature resources. 
Products 


Nexus &hellip; (320 words, Apr 17, 2021)
- [New Learning Materials! - Community Announcements - Sonatype Community](/content/community/t/new-learning-materials/6338/index.html): The Technical Content team has been busy crafting new assets designed to help you get the most out of your Nexus Platform implementation. The list below shows our latest product and feature resources. 
Products 


Nexus &hellip; (321 words, Apr 16, 2021)
- [New Learning Materials! - Community Announcements - Sonatype Community](/content/community/t/new-learning-materials/6338/1/index.html): The Technical Content team has been busy crafting new assets designed to help you get the most out of your Nexus Platform implementation. The list below shows our latest product and feature resources. 
Products 


Nexus &hellip; (331 words, Apr 16, 2021)
- [Using Nexus with Maven -plain text password in settings.xml - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/using-nexus-with-maven-plain-text-password-in-settings-xml/6332/2/index.html): I am setting up Nexus 3.29 OSS to be used with Maven repositories. One of the first issue I see is with the plain-text nexus credentials being stored in Maven settings.xml. 
Maven supports API tokens instead of passwords&hellip; (185 words, Apr 15, 2021)
- [Using Nexus with Maven -plain text password in settings.xml - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/using-nexus-with-maven-plain-text-password-in-settings-xml/6332/index.html): I am setting up Nexus 3.29 OSS to be used with Maven repositories. One of the first issue I see is with the plain-text nexus credentials being stored in Maven settings.xml. 
Maven supports API tokens instead of passwords&hellip; (186 words, Apr 15, 2021)
- [Using Nexus with Maven -plain text password in settings.xml - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/using-nexus-with-maven-plain-text-password-in-settings-xml/6332/1/index.html): I am setting up Nexus 3.29 OSS to be used with Maven repositories. One of the first issue I see is with the plain-text nexus credentials being stored in Maven settings.xml. 
Maven supports API tokens instead of passwords&hellip; (185 words, Apr 15, 2021)
- [LDAP issue - Sonatype Nexus Repository - Sonatype Community](/content/community/t/ldap-issue/6329/index.html): I am trying to enable the LDAP Authentication for users to log in using AD credentials. I can establish the connection with LDAP server, and I can verify the user mapping as well. But when I use my AD username and passwo&hellip; (104 words, Apr 15, 2021)
- [LDAP issue - Sonatype Nexus Repository - Sonatype Community](/content/community/t/ldap-issue/6329/1/index.html): I am trying to enable the LDAP Authentication for users to log in using AD credentials. I can establish the connection with LDAP server, and I can verify the user mapping as well. But when I use my AD username and passwo&hellip; (106 words, Apr 15, 2021)
- [April Customer Office Hours: Easy SCM Onboarding - April 22 - Community Announcements / News - Sonatype Community](/content/community/t/april-customer-office-hours-easy-scm-onboarding-april-22/6328/index.html): Join us Thursday, April 22nd, at 12pm ET (9am PT/5pm GMT) for our monthly customer Office Hours. 
Learn how to quickly and easily onboard applications from your source control repository to Nexus Lifecycle! 
Click here &hellip; (80 words, Apr 15, 2021)
- [April Customer Office Hours: Easy SCM Onboarding - April 22 - Community Announcements / News - Sonatype Community](/content/community/t/april-customer-office-hours-easy-scm-onboarding-april-22/6328/1/index.html): Join us Thursday, April 22nd, at 12pm ET (9am PT/5pm GMT) for our monthly customer Office Hours. 
Learn how to quickly and easily onboard applications from your source control repository to Nexus Lifecycle! 
Click here &hellip; (80 words, Apr 15, 2021)
- [Is Upack integration possible? How about raw file versioning? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/is-upack-integration-possible-how-about-raw-file-versioning/6321/index.html): Dear Community, 
my company is considering Nexus as solution for artifacts. I cannot find any information about Upack | Universal Packaging Platform integration. I have also up and running nexus as docker and there is no&hellip; (97 words, Apr 15, 2021)
- [Is Upack integration possible? How about raw file versioning? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/is-upack-integration-possible-how-about-raw-file-versioning/6321/1/index.html): Dear Community, 
my company is considering Nexus as solution for artifacts. I cannot find any information about Upack | Universal Packaging Platform integration. I have also up and running nexus as docker and there is no&hellip; (98 words, Apr 15, 2021)
- [Supplying commit hash via dockerised Nexus IQ CLI - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/supplying-commit-hash-via-dockerised-nexus-iq-cli/5664/2/index.html): Is there a way or plan to support supplying a commit hash in the docker version of the Nexus IQ CLI? 
Looking at the instructions here - it mentions a --metadata flag: 
https://help.sonatype.com/integrations/nexus-iq-for&hellip; (304 words, Apr 14, 2021)
- [Installing IQ 3.1.1-01 plugin on Intellij-IDEA 2021.1 - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/installing-iq-3-1-1-01-plugin-on-intellij-idea-2021-1/6311/index.html): Hello, 
Need advice on installing IQ 3.1.1-01 plugin on Intellij-IDEA 2021.1 .  It doesn’t appear to work for me.   The plugin hangs and says “Loading” and doesn’t allow me to configure it.   Is this a known issue?  If s&hellip; (250 words, Apr 14, 2021)
- [Azure DevOps - Nexus IQ Extension issue with scan Targets for Java Maven - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/azure-devops-nexus-iq-extension-issue-with-scan-targets-for-java-maven/3913/6/index.html): Hi 
I have created Java Maven pipeline using YAML. 
Wherein i am using Nexus IQ Extension 1.2.1 for Nexus IQ Policy Evaluation 
below is the Task in my pipeline - 
- task: SonatypeIntegrations.nexus-iq-azure-extension.ne&hellip; (327 words, Apr 14, 2021)
- [Download latest snapshot artifact from Nexus Repository Manager OSS 3.30.0-01 using wget command - Sonatype Nexus Repository - Sonatype Community](/content/community/t/download-latest-snapshot-artifact-from-nexus-repository-manager-oss-3-30-0-01-using-wget-command/6286/2/index.html): I am facing difficulty downloading the latest  snapshot version from Nexus Repository Manager OSS 3.30.0-01 using wget  command 
since the format is maven artefacts snapshots version are appended with 
timestamp along wi&hellip; (247 words, Apr 12, 2021)
- [Download latest snapshot artifact from Nexus Repository Manager OSS 3.30.0-01 using wget command - Sonatype Nexus Repository - Sonatype Community](/content/community/t/download-latest-snapshot-artifact-from-nexus-repository-manager-oss-3-30-0-01-using-wget-command/6286/index.html): I am facing difficulty downloading the latest  snapshot version from Nexus Repository Manager OSS 3.30.0-01 using wget  command 
since the format is maven artefacts snapshots version are appended with 
timestamp along wi&hellip; (213 words, Apr 10, 2021)
- [Download latest snapshot artifact from Nexus Repository Manager OSS 3.30.0-01 using wget command - Sonatype Nexus Repository - Sonatype Community](/content/community/t/download-latest-snapshot-artifact-from-nexus-repository-manager-oss-3-30-0-01-using-wget-command/6286/1/index.html): I am facing difficulty downloading the latest  snapshot version from Nexus Repository Manager OSS 3.30.0-01 using wget  command 
since the format is maven artefacts snapshots version are appended with 
timestamp along wi&hellip; (230 words, Apr 10, 2021)
- [SAML for IQ Server - Azure SSO Support - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/saml-for-iq-server-azure-sso-support/3408/12/index.html): Hello, following on from “SAML for IQ Server,” two users were asking about Azure SSO support help for the SAML integration. I couldn’t find an applicable forum entry that resolved this. I am also receiving the following &hellip; (826 words, Apr 7, 2021)
- [“License-Banned” violation for iText7 although valid license file is loaded correctly - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/license-banned-violation-for-itext7-although-valid-license-file-is-loaded-correctly/6219/index.html): We use iText7 in an application. 
The scan of the artefact reports violations of the policy “License-Banned”. There are violations found for the following components: 
com.itextpdf : forms : 7.1.13 
com.itextpdf : html2p&hellip; (168 words, Mar 31, 2021)
- [“License-Banned” violation for iText7 although valid license file is loaded correctly - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/license-banned-violation-for-itext7-although-valid-license-file-is-loaded-correctly/6219/1/index.html): We use iText7 in an application. 
The scan of the artefact reports violations of the policy “License-Banned”. There are violations found for the following components: 
com.itextpdf : forms : 7.1.13 
com.itextpdf : html2p&hellip; (167 words, Mar 31, 2021)
- [Continuous monitoring enablement with multiple emails - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/continuous-monitoring-enablement-with-multiple-emails/6209/2/index.html): We need a  rest api to work with continuous monitoring for application or org: 
1)Today we can  can send notification only to the recipients listed on policies. 
2)we need option to have notifications sent to application&hellip; (152 words, Mar 30, 2021)
- [Snapshots of apt proxy repositories do not contain 'i18n' and 'dep11' folders for each distribution - Sonatype Nexus Repository - Sonatype Community](/content/community/t/snapshots-of-apt-proxy-repositories-do-not-contain-i18n-and-dep11-folders-for-each-distribution/6210/index.html): that leads to the errors of sudo apt-get update: 
E: Failed to fetch https://mydomain:8443/repository/apt-proxy-bionic/snapshots/release5/dists/bionic/main/dep11/icons-48x48.tar (217 words, Mar 30, 2021)
- [Snapshots of apt proxy repositories do not contain 'i18n' and 'dep11' folders for each distribution - Sonatype Nexus Repository - Sonatype Community](/content/community/t/snapshots-of-apt-proxy-repositories-do-not-contain-i18n-and-dep11-folders-for-each-distribution/6210/1/index.html): that leads to the errors of sudo apt-get update: 
E: Failed to fetch https://mydomain:8443/repository/apt-proxy-bionic/snapshots/release5/dists/bionic/main/dep11/icons-48x48.tar (217 words, Mar 30, 2021)
- [Continuous monitoring enablement with multiple emails - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/continuous-monitoring-enablement-with-multiple-emails/6209/index.html): We need a  rest api to work with continuous monitoring for application or org: 
1)Today we can  can send notification only to the recipients listed on policies. 
2)we need option to have notifications sent to application&hellip; (154 words, Mar 30, 2021)
- [Continuous monitoring enablement with multiple emails - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/continuous-monitoring-enablement-with-multiple-emails/6209/1/index.html): We need a  rest api to work with continuous monitoring for application or org: 
1)Today we can  can send notification only to the recipients listed on policies. 
2)we need option to have notifications sent to application&hellip; (154 words, Mar 30, 2021)
- [Apt repositories (hosted & proxy) snapshots creating method does not work - Sonatype Nexus Repository - Sonatype Community](/content/community/t/apt-repositories-hosted-proxy-snapshots-creating-method-does-not-work/6198/index.html): Sonatype Nexus Repository Manager OSS: 3.29.2-02 
According to the manual “Taking a Snapshot of a repository metadata” - the method returns Error 500. 
$ curl -vvvv -u &#39;changedadmin:changedpassword&#39; -X MKCOL  https://nex&hellip; (556 words, Mar 29, 2021)
- [Apt repositories (hosted & proxy) snapshots creating method does not work - Sonatype Nexus Repository - Sonatype Community](/content/community/t/apt-repositories-hosted-proxy-snapshots-creating-method-does-not-work/6198/1/index.html): Sonatype Nexus Repository Manager OSS: 3.29.2-02 
According to the manual “Taking a Snapshot of a repository metadata” - the method returns Error 500. 
$ curl -vvvv -u &#39;changedadmin:changedpassword&#39; -X MKCOL  https://nex&hellip; (575 words, Mar 29, 2021)
- [How to use OSS index for Jenkins plugins - Sonatype Exchange / Sonatype Exchange Discussion - Sonatype Community](/content/community/t/how-to-use-oss-index-for-jenkins-plugins/6181/index.html): Hi Team, 
We are using Nexus oss index Maven plugin  to scan the artifacts present in pom.xml. 
Is it required to scan the Jenkins plugins to make sure plugins are secured/non-vulnerabilities. 
If yes, could you please l&hellip; (84 words, Mar 25, 2021)
- [How to use OSS index for Jenkins plugins - Sonatype Exchange / Sonatype Exchange Discussion - Sonatype Community](/content/community/t/how-to-use-oss-index-for-jenkins-plugins/6181/1/index.html): Hi Team, 
We are using Nexus oss index Maven plugin  to scan the artifacts present in pom.xml. 
Is it required to scan the Jenkins plugins to make sure plugins are secured/non-vulnerabilities. 
If yes, could you please l&hellip; (82 words, Mar 25, 2021)
- [Happening Now! March Office Hours - Community Announcements / News - Sonatype Community](/content/community/t/happening-now-march-office-hours/6168/index.html): Join us NOW for our customer-exclusive Office Hours until 11am ET! 
Join the call here: My Sonatype (119 words, Mar 24, 2021)
- [Happening Now! March Office Hours - Community Announcements / News - Sonatype Community](/content/community/t/happening-now-march-office-hours/6168/1/index.html): Join us NOW for our customer-exclusive Office Hours until 11am ET! 
Join the call here: My Sonatype (130 words, Mar 24, 2021)
- [Don't miss it! March Office Hours happening tomorrow, 3/24 at 10am ET - Community Announcements / News - Sonatype Community](/content/community/t/dont-miss-it-march-office-hours-happening-tomorrow-3-24-at-10am-et/6159/2/index.html): Join us tomorrow, Wednesday, March 24th, at 10am ET (7am PT / 2pm GMT) for our monthly customer Office Hours. 
How do you measure success using Nexus Lifecycle? Join us to learn more about Success Metrics, and how to &hellip; (105 words, Mar 23, 2021)
- [Don't miss it! March Office Hours happening tomorrow, 3/24 at 10am ET - Community Announcements / News - Sonatype Community](/content/community/t/dont-miss-it-march-office-hours-happening-tomorrow-3-24-at-10am-et/6159/index.html): Join us tomorrow, Wednesday, March 24th, at 10am ET (7am PT / 2pm GMT) for our monthly customer Office Hours. 
How do you measure success using Nexus Lifecycle? Join us to learn more about Success Metrics, and how to &hellip; (204 words, Mar 23, 2021)
- [Don't miss it! March Office Hours happening tomorrow, 3/24 at 10am ET - Community Announcements / News - Sonatype Community](/content/community/t/dont-miss-it-march-office-hours-happening-tomorrow-3-24-at-10am-et/6159/1/index.html): Join us tomorrow, Wednesday, March 24th, at 10am ET (7am PT / 2pm GMT) for our monthly customer Office Hours. 
How do you measure success using Nexus Lifecycle? Join us to learn more about Success Metrics, and how to &hellip; (217 words, Mar 23, 2021)
- [Get NPM Component from Name & version - Sonatype Nexus Repository - Sonatype Community](/content/community/t/get-npm-component-from-name-version/6020/5/index.html): I need to get the NPM component by using the name and the version. What is the method that I can use here? For maven, I’ve used the below method. 
    HashMap&lt;String, String&gt; filter = new HashMap&lt;&gt;(1);
    filter.put(&quot;ve&hellip; (198 words, Mar 22, 2021)
- [How do you measure success using Nexus Lifecycle? (Customer Office Hours - March 24) - Community Announcements / News - Sonatype Community](/content/community/t/how-do-you-measure-success-using-nexus-lifecycle-customer-office-hours-march-24/6108/3/index.html): Join us Wednesday, March 24th, at 10am ET (7am PT / 2pm GMT) for our monthly customer Office Hours. 
How do you measure success using Nexus Lifecycle? Join us to learn more about Success Metrics, and how to track your&hellip; (218 words, Mar 17, 2021)
- [How do you measure success using Nexus Lifecycle? (Customer Office Hours - March 24) - Community Announcements / News - Sonatype Community](/content/community/t/how-do-you-measure-success-using-nexus-lifecycle-customer-office-hours-march-24/6108/index.html): Join us Wednesday, March 24th, at 10am ET (7am PT / 2pm GMT) for our monthly customer Office Hours. 
How do you measure success using Nexus Lifecycle? Join us to learn more about Success Metrics, and how to track your&hellip; (216 words, Mar 17, 2021)
- [How do you measure success using Nexus Lifecycle? (Customer Office Hours - March 24) - Community Announcements / News - Sonatype Community](/content/community/t/how-do-you-measure-success-using-nexus-lifecycle-customer-office-hours-march-24/6108/1/index.html): Join us Wednesday, March 24th, at 10am ET (7am PT / 2pm GMT) for our monthly customer Office Hours. 
How do you measure success using Nexus Lifecycle? Join us to learn more about Success Metrics, and how to track your&hellip; (236 words, Mar 17, 2021)
- [New in Nexus Repository 3.30: Azure Blob Store Support! - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/new-in-nexus-repository-3-30-azure-blob-store-support/6107/index.html): We are excited to announce Azure Blob Storage support with Nexus Repository Pro available in 3.30 release! Nexus Repository Pro users can now manage and deploy their critical infrastructure on Microsoft’s Azure Cloud Pla&hellip; (227 words, Mar 17, 2021)
- [New in Nexus Repository 3.30: Azure Blob Store Support! - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/new-in-nexus-repository-3-30-azure-blob-store-support/6107/1/index.html): We are excited to announce Azure Blob Storage support with Nexus Repository Pro available in 3.30 release! Nexus Repository Pro users can now manage and deploy their critical infrastructure on Microsoft’s Azure Cloud Pla&hellip; (224 words, Mar 17, 2021)
- [java.io.IOException: Received fatal alert: handshake_failure from remote proxy https://repo.spring.io/milestone - Sonatype Nexus Repository - Sonatype Community](/content/community/t/java-io-ioexception-received-fatal-alert-handshake-failure-from-remote-proxy-https-repo-spring-io-milestone/6086/3/index.html): Hello Team, 
We are proxying the remote repo https://repo.spring.io/milestone , to nexus proxy repo. 
But its not retrieving the artifact from remote, when we tried to add the certificate it gives below exception. 
2021-&hellip; (377 words, Mar 15, 2021)
- [java.io.IOException: Received fatal alert: handshake_failure from remote proxy https://repo.spring.io/milestone - Sonatype Nexus Repository - Sonatype Community](/content/community/t/java-io-ioexception-received-fatal-alert-handshake-failure-from-remote-proxy-https-repo-spring-io-milestone/6086/2/index.html): Hello Team, 
We are proxying the remote repo https://repo.spring.io/milestone , to nexus proxy repo. 
But its not retrieving the artifact from remote, when we tried to add the certificate it gives below exception. 
2021-&hellip; (377 words, Mar 15, 2021)
- [Is it possible to protect or disable the swagger ui? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/is-it-possible-to-protect-or-disable-the-swagger-ui/6077/4/index.html): Hello, 
I noticed that swagger can be accessed from anywhere even without the user being logged in. Now, my repositories are protected but I don’t really like someone to have access even to the rest data without being lo&hellip; (313 words, Mar 15, 2021)
- [java.io.IOException: Received fatal alert: handshake_failure from remote proxy https://repo.spring.io/milestone - Sonatype Nexus Repository - Sonatype Community](/content/community/t/java-io-ioexception-received-fatal-alert-handshake-failure-from-remote-proxy-https-repo-spring-io-milestone/6086/index.html): Hello Team, 
We are proxying the remote repo https://repo.spring.io/milestone , to nexus proxy repo. 
But its not retrieving the artifact from remote, when we tried to add the certificate it gives below exception. 
2021-&hellip; (424 words, Mar 15, 2021)
- [java.io.IOException: Received fatal alert: handshake_failure from remote proxy https://repo.spring.io/milestone - Sonatype Nexus Repository - Sonatype Community](/content/community/t/java-io-ioexception-received-fatal-alert-handshake-failure-from-remote-proxy-https-repo-spring-io-milestone/6086/1/index.html): Hello Team, 
We are proxying the remote repo https://repo.spring.io/milestone , to nexus proxy repo. 
But its not retrieving the artifact from remote, when we tried to add the certificate it gives below exception. 
2021-&hellip; (378 words, Mar 15, 2021)
- [ReUsing the blob store of existing instance for HA - Sonatype Nexus Repository - Sonatype Community](/content/community/t/reusing-the-blob-store-of-existing-instance-for-ha/5977/3/index.html): Hello Team, 
We have one production instance of Nexus, and we are planning for Nexus in HA. 
As per the architecture which is explained in documentation, if we add two more servers. 
Taking out entire blob store from Fil&hellip; (251 words, Mar 15, 2021)
- [Is it possible to protect or disable the swagger ui? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/is-it-possible-to-protect-or-disable-the-swagger-ui/6077/3/index.html): Hello, 
I noticed that swagger can be accessed from anywhere even without the user being logged in. Now, my repositories are protected but I don’t really like someone to have access even to the rest data without being lo&hellip; (314 words, Mar 12, 2021)
- [Is it possible to protect or disable the swagger ui? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/is-it-possible-to-protect-or-disable-the-swagger-ui/6077/2/index.html): Hello, 
I noticed that swagger can be accessed from anywhere even without the user being logged in. Now, my repositories are protected but I don’t really like someone to have access even to the rest data without being lo&hellip; (313 words, Mar 12, 2021)
- [Is it possible to protect or disable the swagger ui? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/is-it-possible-to-protect-or-disable-the-swagger-ui/6077/index.html): Hello, 
I noticed that swagger can be accessed from anywhere even without the user being logged in. Now, my repositories are protected but I don’t really like someone to have access even to the rest data without being lo&hellip; (313 words, Mar 12, 2021)
- [Is it possible to protect or disable the swagger ui? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/is-it-possible-to-protect-or-disable-the-swagger-ui/6077/1/index.html): Hello, 
I noticed that swagger can be accessed from anywhere even without the user being logged in. Now, my repositories are protected but I don’t really like someone to have access even to the rest data without being lo&hellip; (313 words, Mar 12, 2021)
- [If the nexus3 can support the external orientdb? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/if-the-nexus3-can-support-the-external-orientdb/6049/2/index.html): I  want to know if the nexus3 support the  external orientdb, we don’t want to use the internal orientdb,form the official docunment, I can not find about this. if the external orientdb can be supported, can you give me &hellip; (97 words, Mar 11, 2021)
- [If the nexus3 can support the external orientdb? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/if-the-nexus3-can-support-the-external-orientdb/6049/index.html): I  want to know if the nexus3 support the  external orientdb, we don’t want to use the internal orientdb,form the official docunment, I can not find about this. if the external orientdb can be supported, can you give me &hellip; (234 words, Mar 11, 2021)
- [If the nexus3 can support the external orientdb? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/if-the-nexus3-can-support-the-external-orientdb/6049/1/index.html): I  want to know if the nexus3 support the  external orientdb, we don’t want to use the internal orientdb,form the official docunment, I can not find about this. if the external orientdb can be supported, can you give me &hellip; (163 words, Mar 11, 2021)
- [LDAP server connection issue - Sonatype Nexus Repository - Sonatype Community](/content/community/t/ldap-server-connection-issue/6039/3/index.html): Hi there, 
We are using OSS 3.27.0-03 version of Nexus RM inside docker container. 
I’m currently trying to configure LDAP authentication but I’m stuck on the very beginning: 
Failed to connect to LDAP Server: XXXXX:389 &hellip; (104 words, Mar 11, 2021)
- [LDAP server connection issue - Sonatype Nexus Repository - Sonatype Community](/content/community/t/ldap-server-connection-issue/6039/2/index.html): Hi there, 
We are using OSS 3.27.0-03 version of Nexus RM inside docker container. 
I’m currently trying to configure LDAP authentication but I’m stuck on the very beginning: 
Failed to connect to LDAP Server: XXXXX:389 &hellip; (107 words, Mar 10, 2021)
- [LDAP server connection issue - Sonatype Nexus Repository - Sonatype Community](/content/community/t/ldap-server-connection-issue/6039/index.html): Hi there, 
We are using OSS 3.27.0-03 version of Nexus RM inside docker container. 
I’m currently trying to configure LDAP authentication but I’m stuck on the very beginning: 
Failed to connect to LDAP Server: XXXXX:389 &hellip; (104 words, Mar 10, 2021)
- [LDAP server connection issue - Sonatype Nexus Repository - Sonatype Community](/content/community/t/ldap-server-connection-issue/6039/1/index.html): Hi there, 
We are using OSS 3.27.0-03 version of Nexus RM inside docker container. 
I’m currently trying to configure LDAP authentication but I’m stuck on the very beginning: 
Failed to connect to LDAP Server: XXXXX:389 &hellip; (104 words, Mar 10, 2021)
- [Nexus Repo 3.29.2-02 - proxy "OutOfDirectMemoryError" - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-repo-3-29-2-02-proxy-outofdirectmemoryerror/6037/index.html): nexus is running on K8S/1.18 and has/uses external EBS volumes. 
After we upgraded to 3.29.2-02, we started to experience intermittent connectivity problems towards nexus (runners throws: server does not respond - when t&hellip; (414 words, Mar 10, 2021)
- [Nexus Repo 3.29.2-02 - proxy "OutOfDirectMemoryError" - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-repo-3-29-2-02-proxy-outofdirectmemoryerror/6037/1/index.html): nexus is running on K8S/1.18 and has/uses external EBS volumes. 
After we upgraded to 3.29.2-02, we started to experience intermittent connectivity problems towards nexus (runners throws: server does not respond - when t&hellip; (359 words, Mar 10, 2021)
- [Automatically choose whitelisted license in an "or" clause - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/automatically-choose-whitelisted-license-in-an-or-clause/6029/1/index.html): Issue: Nexus firewall quarantines an artifact due to presence of banned license in dual license list. 
For example - 
Selected Version: 1.4.20 
Type: maven 
Group: org.jetbrains.kotlin 
Artifact: kotlin-allopen 
Extensio&hellip; (350 words, Mar 8, 2021)
- [Nexus running on docker failed to run after update - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-running-on-docker-failed-to-run-after-update/6026/index.html): I was upgrading my nexus image from 3.19 to 3.30, after upgrade nexus is failing to start with below error: 
2021-03-08 11:34:01,911+0000 ERROR [FelixStartLevel] *SYSTEM org.sonatype.nexus.extender.NexusContextListener -&hellip; (303 words, Mar 8, 2021)
- [Nexus running on docker failed to run after update - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-running-on-docker-failed-to-run-after-update/6026/1/index.html): I was upgrading my nexus image from 3.19 to 3.30, after upgrade nexus is failing to start with below error: 
2021-03-08 11:34:01,911+0000 ERROR [FelixStartLevel] *SYSTEM org.sonatype.nexus.extender.NexusContextListener -&hellip; (319 words, Mar 8, 2021)
- [Get NPM Component from Name & version - Sonatype Nexus Repository - Sonatype Community](/content/community/t/get-npm-component-from-name-version/6020/index.html): I need to get the NPM component by using the name and the version. What is the method that I can use here? For maven, I’ve used the below method. 
    HashMap&lt;String, String&gt; filter = new HashMap&lt;&gt;(1);
    filter.put(&quot;ve&hellip; (234 words, Mar 8, 2021)
- [Get NPM Component from Name & version - Sonatype Nexus Repository - Sonatype Community](/content/community/t/get-npm-component-from-name-version/6020/1/index.html): I need to get the NPM component by using the name and the version. What is the method that I can use here? For maven, I’ve used the below method. 
    HashMap&lt;String, String&gt; filter = new HashMap&lt;&gt;(1);
    filter.put(&quot;ve&hellip; (233 words, Mar 8, 2021)
- [APAC Office Hours - March 10th: Nexus Container Overview + Advanced Legal Pack Preview + Q&A - Community Announcements - Sonatype Community](/content/community/t/apac-office-hours-march-10th-nexus-container-overview-advanced-legal-pack-preview-q-a/6019/2/index.html): If you’re a Sonatype customer located in the Asia-Pacific (APAC) region, we’ve scheduled an Office Hours call just for you! 
Join us Wednesday, March 10, 2021 from 9-10 a.m. GMT+8 SGT/HKT  | 12-1 p.m. GMT+11 AEDT. 


The&hellip; (215 words, Mar 7, 2021)
- [APAC Office Hours - March 10th: Nexus Container Overview + Advanced Legal Pack Preview + Q&A - Community Announcements - Sonatype Community](/content/community/t/apac-office-hours-march-10th-nexus-container-overview-advanced-legal-pack-preview-q-a/6019/index.html): If you’re a Sonatype customer located in the Asia-Pacific (APAC) region, we’ve scheduled an Office Hours call just for you! 
Join us Wednesday, March 10, 2021 from 9-10 a.m. GMT+8 SGT/HKT  | 12-1 p.m. GMT+11 AEDT. 


The&hellip; (217 words, Mar 7, 2021)
- [APAC Office Hours - March 10th: Nexus Container Overview + Advanced Legal Pack Preview + Q&A - Community Announcements - Sonatype Community](/content/community/t/apac-office-hours-march-10th-nexus-container-overview-advanced-legal-pack-preview-q-a/6019/1/index.html): If you’re a Sonatype customer located in the Asia-Pacific (APAC) region, we’ve scheduled an Office Hours call just for you! 
Join us Wednesday, March 10, 2021 from 9-10 a.m. GMT+8 SGT/HKT  | 12-1 p.m. GMT+11 AEDT. 


The&hellip; (209 words, Mar 7, 2021)
- [Podman login not working with Nexus OSS 3.28.0-0 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/podman-login-not-working-with-nexus-oss-3-28-0-0/6016/index.html): Hi Team, 
I am able to login to my private docker registry (Nexus OSS 3.28.0-0) from docker but the same thing not working with podman,  same with anonymous pull, works with docker but not with podman. 
any help will be &hellip; (365 words, Mar 7, 2021)
- [Podman login not working with Nexus OSS 3.28.0-0 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/podman-login-not-working-with-nexus-oss-3-28-0-0/6016/1/index.html): Hi Team, 
I am able to login to my private docker registry (Nexus OSS 3.28.0-0) from docker but the same thing not working with podman,  same with anonymous pull, works with docker but not with podman. 
any help will be &hellip; (375 words, Mar 7, 2021)
- [ReUsing the blob store of existing instance for HA - Sonatype Nexus Repository - Sonatype Community](/content/community/t/reusing-the-blob-store-of-existing-instance-for-ha/5977/index.html): Hello Team, 
We have one production instance of Nexus, and we are planning for Nexus in HA. 
As per the architecture which is explained in documentation, if we add two more servers. 
Taking out entire blob store from Fil&hellip; (149 words, Mar 3, 2021)
- [ReUsing the blob store of existing instance for HA - Sonatype Nexus Repository - Sonatype Community](/content/community/t/reusing-the-blob-store-of-existing-instance-for-ha/5977/1/index.html): Hello Team, 
We have one production instance of Nexus, and we are planning for Nexus in HA. 
As per the architecture which is explained in documentation, if we add two more servers. 
Taking out entire blob store from Fil&hellip; (149 words, Mar 3, 2021)
- [Nexus Repository WebUI stuck at Initializing - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-repository-webui-stuck-at-initializing/5946/index.html): Have just installed the Nexus Repository Manager v3.29.2-02 on a RHEL 8.3 x86_64 physical server with plenty of RAM (124 GB) and plenty of CPU (16). 
Followed the installation documentation and the install went without e&hellip; (607 words, Feb 26, 2021)
- [Nexus Repository WebUI stuck at Initializing - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-repository-webui-stuck-at-initializing/5946/1/index.html): Have just installed the Nexus Repository Manager v3.29.2-02 on a RHEL 8.3 x86_64 physical server with plenty of RAM (124 GB) and plenty of CPU (16). 
Followed the installation documentation and the install went without e&hellip; (607 words, Feb 26, 2021)
- [Apt proxy is not signed - Sonatype Nexus Repository - Sonatype Community](/content/community/t/apt-proxy-is-not-signed/5942/index.html): I’ve configured a few apt proxies (NXRM v3.29.2) and they appear to be populating correctly, however after configuring my apt client to use these proxies (just using /etc/apt/sources.list, no auth), I get this when tryin&hellip; (266 words, Feb 25, 2021)
- [Apt proxy is not signed - Sonatype Nexus Repository - Sonatype Community](/content/community/t/apt-proxy-is-not-signed/5942/1/index.html): I’ve configured a few apt proxies (NXRM v3.29.2) and they appear to be populating correctly, however after configuring my apt client to use these proxies (just using /etc/apt/sources.list, no auth), I get this when tryin&hellip; (266 words, Feb 25, 2021)
- [Starting in 30 minutes! Office Hours: Advanced Legal Pack Preview + Ask Me Anything Session - Community Announcements - Sonatype Community](/content/community/t/starting-in-30-minutes-office-hours-advanced-legal-pack-preview-ask-me-anything-session/5924/2/index.html): At 1pm ET (10am PT / 6pm GMT), we’ll begin our preview of the Advanced Legal Pack, followed by an Ask Me Anything session with leaders from Product, Customer Success, and Support. 
Click here to access the Office Hours j&hellip; (142 words, Feb 23, 2021)
- [Starting in 30 minutes! Office Hours: Advanced Legal Pack Preview + Ask Me Anything Session - Community Announcements - Sonatype Community](/content/community/t/starting-in-30-minutes-office-hours-advanced-legal-pack-preview-ask-me-anything-session/5924/index.html): At 1pm ET (10am PT / 6pm GMT), we’ll begin our preview of the Advanced Legal Pack, followed by an Ask Me Anything session with leaders from Product, Customer Success, and Support. 
Click here to access the Office Hours j&hellip; (143 words, Feb 23, 2021)
- [Starting in 30 minutes! Office Hours: Advanced Legal Pack Preview + Ask Me Anything Session - Community Announcements - Sonatype Community](/content/community/t/starting-in-30-minutes-office-hours-advanced-legal-pack-preview-ask-me-anything-session/5924/1/index.html): At 1pm ET (10am PT / 6pm GMT), we’ll begin our preview of the Advanced Legal Pack, followed by an Ask Me Anything session with leaders from Product, Customer Success, and Support. 
Click here to access the Office Hours j&hellip; (145 words, Feb 23, 2021)
- [TOMORROW, Feb. 23: Advanced Legal Pack Preview during Customer Office Hours - Community Announcements - Sonatype Community](/content/community/t/tomorrow-feb-23-advanced-legal-pack-preview-during-customer-office-hours/5916/2/index.html): Don’t miss our Advanced Legal Pack preview during customer Office Hours tomorrow, Tuesday, February 23rd at 1pm ET (10am PT / 6pm GMT)! 
The Advanced Legal Pack helps you streamline your legal compliance workflow and sav&hellip; (108 words, Feb 22, 2021)
- [TOMORROW, Feb. 23: Advanced Legal Pack Preview during Customer Office Hours - Community Announcements - Sonatype Community](/content/community/t/tomorrow-feb-23-advanced-legal-pack-preview-during-customer-office-hours/5916/index.html): Don’t miss our Advanced Legal Pack preview during customer Office Hours tomorrow, Tuesday, February 23rd at 1pm ET (10am PT / 6pm GMT)! 
The Advanced Legal Pack helps you streamline your legal compliance workflow and sav&hellip; (198 words, Feb 22, 2021)
- [TOMORROW, Feb. 23: Advanced Legal Pack Preview during Customer Office Hours - Community Announcements - Sonatype Community](/content/community/t/tomorrow-feb-23-advanced-legal-pack-preview-during-customer-office-hours/5916/1/index.html): Don’t miss our Advanced Legal Pack preview during customer Office Hours tomorrow, Tuesday, February 23rd at 1pm ET (10am PT / 6pm GMT)! 
The Advanced Legal Pack helps you streamline your legal compliance workflow and sav&hellip; (209 words, Feb 22, 2021)
- [Failure servicing: PUT ArrayIndexOutOfBoundsException - Sonatype Nexus Repository - Sonatype Community](/content/community/t/failure-servicing-put-arrayindexoutofboundsexception/4754/6/index.html): Hello together, 
We have an issue that the maven deploy task fails quite often with an error 500. 
As is can see, these files are accessible in our nexus repositories, so the actual file deployment works. But it seems as&hellip; (820 words, Feb 19, 2021)
- [IQ 104 NuGet manifest analysis vs CycloneDX - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/iq-104-nuget-manifest-analysis-vs-cyclonedx/5874/1/index.html): Since the introduction of pecoff matching it’s been recommended to us that we use tools such as CycloneDX to generate a bill of materials to ensure we’re getting licence information from the NuGet packages (not something&hellip; (149 words, Feb 11, 2021)
- [Unable to hide private docker registry from browse view without login - Sonatype Nexus Repository - Sonatype Community](/content/community/t/unable-to-hide-private-docker-registry-from-browse-view-without-login/5862/2/index.html): Dear All, 
We are trying to hide docker hosted private repository from Browse view without login. We are little confused from where to set this private repo to hide from browse view. 
Could you please share some info tha&hellip; (135 words, Feb 10, 2021)
- [Customer Office Hours: Advanced Legal Pack Preview - February 23 - Community Announcements - Sonatype Community](/content/community/t/customer-office-hours-advanced-legal-pack-preview-february-23/5865/2/index.html): Join us Tuesday, February 23rd at 1pm ET (10am PT / 6pm GMT) for our monthly customer Office Hours! 
This month, the Sonatype Product team will be previewing our upcoming Advanced Legal Pack (ALP), which helps you stream&hellip; (212 words, Feb 10, 2021)
- [Customer Office Hours: Advanced Legal Pack Preview - February 23 - Community Announcements - Sonatype Community](/content/community/t/customer-office-hours-advanced-legal-pack-preview-february-23/5865/index.html): Join us Tuesday, February 23rd at 1pm ET (10am PT / 6pm GMT) for our monthly customer Office Hours! 
This month, the Sonatype Product team will be previewing our upcoming Advanced Legal Pack (ALP), which helps you stream&hellip; (233 words, Feb 10, 2021)
- [Customer Office Hours: Advanced Legal Pack Preview - February 23 - Community Announcements - Sonatype Community](/content/community/t/customer-office-hours-advanced-legal-pack-preview-february-23/5865/1/index.html): Join us Tuesday, February 23rd at 1pm ET (10am PT / 6pm GMT) for our monthly customer Office Hours! 
This month, the Sonatype Product team will be previewing our upcoming Advanced Legal Pack (ALP), which helps you stream&hellip; (131 words, Feb 10, 2021)
- [Unable to hide private docker registry from browse view without login - Sonatype Nexus Repository - Sonatype Community](/content/community/t/unable-to-hide-private-docker-registry-from-browse-view-without-login/5862/index.html): Dear All, 
We are trying to hide docker hosted private repository from Browse view without login. We are little confused from where to set this private repo to hide from browse view. 
Could you please share some info tha&hellip; (134 words, Feb 10, 2021)
- [Unable to hide private docker registry from browse view without login - Sonatype Nexus Repository - Sonatype Community](/content/community/t/unable-to-hide-private-docker-registry-from-browse-view-without-login/5862/1/index.html): Dear All, 
We are trying to hide docker hosted private repository from Browse view without login. We are little confused from where to set this private repo to hide from browse view. 
Could you please share some info tha&hellip; (134 words, Feb 10, 2021)
- [NPM Update AND Install Issues - Sonatype Nexus Repository - Sonatype Community](/content/community/t/npm-update-and-install-issues/5860/index.html): Hello, 
We are working on Sonatype Nexus Repository Manager 3.29.2-02 that running on docker. 
After upgrading from version 3.23.0 to the new version we have many issues with the Jenkins builds. 
We have an npm group rep&hellip; (423 words, Feb 10, 2021)
- [NPM Update AND Install Issues - Sonatype Nexus Repository - Sonatype Community](/content/community/t/npm-update-and-install-issues/5860/1/index.html): Hello, 
We are working on Sonatype Nexus Repository Manager 3.29.2-02 that running on docker. 
After upgrading from version 3.23.0 to the new version we have many issues with the Jenkins builds. 
We have an npm group rep&hellip; (424 words, Feb 10, 2021)
- [New Nexus Lifecycle Courses on Sonatype Learn! - Community Announcements - Sonatype Community](/content/community/t/new-nexus-lifecycle-courses-on-sonatype-learn/5854/index.html): The Customer Experience team at Sonatype is excited to announce the release of two (yes, TWO) new courses to help you get the most of of Nexus Lifecycle. 
IQ Server 200: Dynamic Developers: Becoming the Strongest Link in&hellip; (191 words, Feb 9, 2021)
- [New Nexus Lifecycle Courses on Sonatype Learn! - Community Announcements - Sonatype Community](/content/community/t/new-nexus-lifecycle-courses-on-sonatype-learn/5854/1/index.html): The Customer Experience team at Sonatype is excited to announce the release of two (yes, TWO) new courses to help you get the most of of Nexus Lifecycle. 
IQ Server 200: Dynamic Developers: Becoming the Strongest Link in&hellip; (256 words, Feb 9, 2021)
- [Nexus keep producing deleted open files under /tmp/jar_cache - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-keep-producing-deleted-open-files-under-tmp-jar-cache/5837/index.html): I’ve installed Sonatype Nexus Repository ManagerOSS 3.28.1-01 on Ubuntu 18.04 LTS and its always create many of  deleted jar_cache under /tmp directory. 
Checking with lsof | grep deleted 

elasticse 25398 29774         &hellip; (232 words, Feb 8, 2021)
- [Nexus keep producing deleted open files under /tmp/jar_cache - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-keep-producing-deleted-open-files-under-tmp-jar-cache/5837/1/index.html): I’ve installed Sonatype Nexus Repository ManagerOSS 3.28.1-01 on Ubuntu 18.04 LTS and its always create many of  deleted jar_cache under /tmp directory. 
Checking with lsof | grep deleted 

elasticse 25398 29774         &hellip; (233 words, Feb 8, 2021)
- [Using the Nexus IQ CLI? Download the newest, native versions for Windows, Mac OSX and Linux - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/using-the-nexus-iq-cli-download-the-newest-native-versions-for-windows-mac-osx-and-linux/5826/index.html): At Sonatype, we’re always looking for ways to improve the user experience when working with the Nexus Platform. Even the seemingly little things can have a big impact. 
What is it? 
We’re excited to announce improvements&hellip; (312 words, Feb 4, 2021)
- [Using the Nexus IQ CLI? Download the newest, native versions for Windows, Mac OSX and Linux - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/using-the-nexus-iq-cli-download-the-newest-native-versions-for-windows-mac-osx-and-linux/5826/1/index.html): At Sonatype, we’re always looking for ways to improve the user experience when working with the Nexus Platform. Even the seemingly little things can have a big impact. 
What is it? 
We’re excited to announce improvements&hellip; (305 words, Feb 4, 2021)
- [Migrate nexus artifacts and docker images from one nexus instance to another - Sonatype Nexus Repository - Sonatype Community](/content/community/t/migrate-nexus-artifacts-and-docker-images-from-one-nexus-instance-to-another/830/5/index.html): Hi, 
I need help in migrating the nexus artifacts and docker images from one nexus instance to another instance we are currently using our private chart with this image  sonatype/nexus3:3.6.0. 
But now we have decided to&hellip; (316 words, Feb 4, 2021)
- [Access Nexus Proxy Details - Sonatype Nexus Repository - Sonatype Community](/content/community/t/access-nexus-proxy-details/5814/5/index.html): I’m creating a plugin for nexus and I need to access proxy details configured in the nexus repo manager. How do I access proxy details from my plugin? (98 words, Feb 4, 2021)
- [Where do nexus store settings details for capabilities - Sonatype Nexus Repository - Sonatype Community](/content/community/t/where-do-nexus-store-settings-details-for-capabilities/5816/2/index.html): Where do nexus store settings details for capabilities? Need to verify it is stored in a secure location. (70 words, Feb 3, 2021)
- [Where do nexus store settings details for capabilities - Sonatype Nexus Repository - Sonatype Community](/content/community/t/where-do-nexus-store-settings-details-for-capabilities/5816/index.html): Where do nexus store settings details for capabilities? Need to verify it is stored in a secure location. (70 words, Feb 3, 2021)
- [Access Nexus Proxy Details - Sonatype Nexus Repository - Sonatype Community](/content/community/t/access-nexus-proxy-details/5814/index.html): I’m creating a plugin for nexus and I need to access proxy details configured in the nexus repo manager. How do I access proxy details from my plugin? (98 words, Feb 3, 2021)
- [Access Nexus Proxy Details - Sonatype Nexus Repository - Sonatype Community](/content/community/t/access-nexus-proxy-details/5814/1/index.html): I’m creating a plugin for nexus and I need to access proxy details configured in the nexus repo manager. How do I access proxy details from my plugin? (98 words, Feb 3, 2021)
- [How to update index offline in nexus 3.28? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-to-update-index-offline-in-nexus-3-28/5766/4/index.html): I downloaded the offline cable from the central reference warehouse（ https://repo.maven.apache.org/maven2/.index/ ）, as shown in the figure below: 
 
How can I import it directly into nexus? First of all, I use nexus ver&hellip; (180 words, Jan 26, 2021)
- [How to update index offline in nexus 3.28? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-to-update-index-offline-in-nexus-3-28/5766/index.html): I downloaded the offline cable from the central reference warehouse（ https://repo.maven.apache.org/maven2/.index/ ）, as shown in the figure below: 
 
How can I import it directly into nexus? First of all, I use nexus ver&hellip; (187 words, Jan 25, 2021)
- [How to update index offline in nexus 3.28? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-to-update-index-offline-in-nexus-3-28/5766/1/index.html): I downloaded the offline cable from the central reference warehouse（ https://repo.maven.apache.org/maven2/.index/ ）, as shown in the figure below: 
 
How can I import it directly into nexus? First of all, I use nexus ver&hellip; (180 words, Jan 25, 2021)
- [Starting in 30 minutes! Office Hours: Product Team Q1 Preview + Ask Me Anything Session - Community Announcements - Sonatype Community](/content/community/t/starting-in-30-minutes-office-hours-product-team-q1-preview-ask-me-anything-session/5761/2/index.html): Right this way to join Office Hours at 2pm ET (11am PT)… —&gt; https://my.sonatype.com/office-hours 
On the agenda to kick us off today: 


Release Integrity for Nexus Firewall (part of the Advanced Development Pack)

Nexus&hellip; (87 words, Jan 22, 2021)
- [Starting in 30 minutes! Office Hours: Product Team Q1 Preview + Ask Me Anything Session - Community Announcements - Sonatype Community](/content/community/t/starting-in-30-minutes-office-hours-product-team-q1-preview-ask-me-anything-session/5761/index.html): Right this way to join Office Hours at 2pm ET (11am PT)… —&gt; https://my.sonatype.com/office-hours 
On the agenda to kick us off today: 


Release Integrity for Nexus Firewall (part of the Advanced Development Pack)

Nexus&hellip; (159 words, Jan 22, 2021)
- [Starting in 30 minutes! Office Hours: Product Team Q1 Preview + Ask Me Anything Session - Community Announcements - Sonatype Community](/content/community/t/starting-in-30-minutes-office-hours-product-team-q1-preview-ask-me-anything-session/5761/1/index.html): Right this way to join Office Hours at 2pm ET (11am PT)… —&gt; https://my.sonatype.com/office-hours 
On the agenda to kick us off today: 


Release Integrity for Nexus Firewall (part of the Advanced Development Pack)

Nexus&hellip; (150 words, Jan 22, 2021)
- [Ignore case when NexusIQ authenticaes with LDAP - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/ignore-case-when-nexusiq-authenticaes-with-ldap/5746/index.html): as per implementation of nexusIQ at our end, we use different authentication for http and https request. 
For http: nexusIQ talk with ldap configured using csgloginIDshort and from there  user able to login to portal. 
F&hellip; (133 words, Jan 21, 2021)
- [Ignore case when NexusIQ authenticaes with LDAP - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/ignore-case-when-nexusiq-authenticaes-with-ldap/5746/1/index.html): as per implementation of nexusIQ at our end, we use different authentication for http and https request. 
For http: nexusIQ talk with ldap configured using csgloginIDshort and from there  user able to login to portal. 
F&hellip; (217 words, Jan 21, 2021)
- [Happening TOMORROW, 1/22: Product Team Q1 Preview + Ask Me Anything Session during Office Hours - Community Announcements - Sonatype Community](/content/community/t/happening-tomorrow-1-22-product-team-q1-preview-ask-me-anything-session-during-office-hours/5743/2/index.html): You won’t want to miss our first Office Hours  of 2021 tomorrow (Friday, January 22), where our Product team will be previewing some of the exciting features and integrations coming in Q1! Drop in at the beginning to c&hellip; (231 words, Jan 21, 2021)
- [Happening TOMORROW, 1/22: Product Team Q1 Preview + Ask Me Anything Session during Office Hours - Community Announcements - Sonatype Community](/content/community/t/happening-tomorrow-1-22-product-team-q1-preview-ask-me-anything-session-during-office-hours/5743/index.html): You won’t want to miss our first Office Hours  of 2021 tomorrow (Friday, January 22), where our Product team will be previewing some of the exciting features and integrations coming in Q1! Drop in at the beginning to c&hellip; (140 words, Jan 21, 2021)
- [Happening TOMORROW, 1/22: Product Team Q1 Preview + Ask Me Anything Session during Office Hours - Community Announcements - Sonatype Community](/content/community/t/happening-tomorrow-1-22-product-team-q1-preview-ask-me-anything-session-during-office-hours/5743/1/index.html): You won’t want to miss our first Office Hours  of 2021 tomorrow (Friday, January 22), where our Product team will be previewing some of the exciting features and integrations coming in Q1! Drop in at the beginning to c&hellip; (135 words, Jan 21, 2021)
- [How to get the official tutorial of nexus 3.28.1？ - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-to-get-the-official-tutorial-of-nexus-3-28-1/5736/2/index.html): I want to get the official tutorial of nexus 3.28.1. Where can I get it? (59 words, Jan 21, 2021)
- [How to get the official tutorial of nexus 3.28.1？ - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-to-get-the-official-tutorial-of-nexus-3-28-1/5736/index.html): I want to get the official tutorial of nexus 3.28.1. Where can I get it? (59 words, Jan 21, 2021)
- [How to get the official tutorial of nexus 3.28.1？ - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-to-get-the-official-tutorial-of-nexus-3-28-1/5736/1/index.html): I want to get the official tutorial of nexus 3.28.1. Where can I get it? (62 words, Jan 21, 2021)
- [Nexus3.27 apt repo can't search lastest version - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus3-27-apt-repo-cant-search-lastest-version/5724/4/index.html): hello, I use the Nexuser3.27 in k8s.  Today when I posted a deb bag into Nexus Apt Host Repo, it was successfu and found in the Nexus Web, but it can’t  search by &#39;apt serch’. I could find the log. 
2021-01-19 02:01:36,6&hellip; (515 words, Jan 20, 2021)
- [Nexus3.27 apt repo can't search lastest version - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus3-27-apt-repo-cant-search-lastest-version/5724/index.html): hello, I use the Nexuser3.27 in k8s.  Today when I posted a deb bag into Nexus Apt Host Repo, it was successfu and found in the Nexus Web, but it can’t  search by &#39;apt serch’. I could find the log. 
2021-01-19 02:01:36,6&hellip; (515 words, Jan 19, 2021)
- [Nexus3.27 apt repo can't search lastest version - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus3-27-apt-repo-cant-search-lastest-version/5724/1/index.html): hello, I use the Nexuser3.27 in k8s.  Today when I posted a deb bag into Nexus Apt Host Repo, it was successfu and found in the Nexus Web, but it can’t  search by &#39;apt serch’. I could find the log. 
2021-01-19 02:01:36,6&hellip; (513 words, Jan 19, 2021)
- [Unable to get NPM artifact details - Sonatype Nexus Repository - Sonatype Community](/content/community/t/unable-to-get-npm-artifact-details/5684/5/index.html): I’m developing a plugin for the nexus repository manager. In this case, I need to get the artifact name and the version request from various build tools on Maven, NPM, and Nuget repositories. I was able to get the name a&hellip; (361 words, Jan 14, 2021)
- [Don't Miss It: Q1 Product Team Preview during Office Hours - January 22 - Community Announcements - Sonatype Community](/content/community/t/dont-miss-it-q1-product-team-preview-during-office-hours-january-22/5699/2/index.html): Join us for our first Office Hours of 2021, where our Product team will be previewing some of the exciting features and integrations coming in Q1 ! Drop in at the beginning to catch the previews, then (as always), we’l&hellip; (122 words, Jan 14, 2021)
- [Don't Miss It: Q1 Product Team Preview during Office Hours - January 22 - Community Announcements - Sonatype Community](/content/community/t/dont-miss-it-q1-product-team-preview-during-office-hours-january-22/5699/index.html): Join us for our first Office Hours of 2021, where our Product team will be previewing some of the exciting features and integrations coming in Q1 ! Drop in at the beginning to catch the previews, then (as always), we’l&hellip; (199 words, Jan 14, 2021)
- [Don't Miss It: Q1 Product Team Preview during Office Hours - January 22 - Community Announcements - Sonatype Community](/content/community/t/dont-miss-it-q1-product-team-preview-during-office-hours-january-22/5699/1/index.html): Join us for our first Office Hours of 2021, where our Product team will be previewing some of the exciting features and integrations coming in Q1 ! Drop in at the beginning to catch the previews, then (as always), we’l&hellip; (212 words, Jan 14, 2021)
- [How to download the historical version of nexus3. X? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-to-download-the-historical-version-of-nexus3-x/5669/8/index.html): I want to download a version of nexus3. X. the link address I visit is: https://help.sonatype.com/repomanager3/download/download-archives---repository-manager-3. But every time I go in, it will show blank and can’t be do&hellip; (308 words, Jan 13, 2021)
- [Update Your IQ Server License Threat Groups - Sonatype Labs - Sonatype Community](/content/community/t/update-your-iq-server-license-threat-groups/3094/15/index.html): The license threat group updater will apply the latest Sonatype provided license classification to your running IQ server’s license threat groups. This will alleviate any “License Threat Group not Assigned” policy violat&hellip; (687 words, Jan 13, 2021)
- [Update Your IQ Server License Threat Groups - Sonatype Labs - Sonatype Community](/content/community/t/update-your-iq-server-license-threat-groups/3094/13/index.html): The license threat group updater will apply the latest Sonatype provided license classification to your running IQ server’s license threat groups. This will alleviate any “License Threat Group not Assigned” policy violat&hellip; (663 words, Jan 12, 2021)
- [Update Your IQ Server License Threat Groups - Sonatype Labs - Sonatype Community](/content/community/t/update-your-iq-server-license-threat-groups/3094/12/index.html): The license threat group updater will apply the latest Sonatype provided license classification to your running IQ server’s license threat groups. This will alleviate any “License Threat Group not Assigned” policy violat&hellip; (578 words, Jan 12, 2021)
- [Unable to get NPM artifact details - Sonatype Nexus Repository - Sonatype Community](/content/community/t/unable-to-get-npm-artifact-details/5684/2/index.html): I’m developing a plugin for the nexus repository manager. In this case, I need to get the artifact name and the version request from various build tools on Maven, NPM, and Nuget repositories. I was able to get the name a&hellip; (361 words, Jan 12, 2021)
- [Unable to get NPM artifact details - Sonatype Nexus Repository - Sonatype Community](/content/community/t/unable-to-get-npm-artifact-details/5684/index.html): I’m developing a plugin for the nexus repository manager. In this case, I need to get the artifact name and the version request from various build tools on Maven, NPM, and Nuget repositories. I was able to get the name a&hellip; (364 words, Jan 12, 2021)
- [Unable to get NPM artifact details - Sonatype Nexus Repository - Sonatype Community](/content/community/t/unable-to-get-npm-artifact-details/5684/1/index.html): I’m developing a plugin for the nexus repository manager. In this case, I need to get the artifact name and the version request from various build tools on Maven, NPM, and Nuget repositories. I was able to get the name a&hellip; (362 words, Jan 12, 2021)
- [How to download the historical version of nexus3. X? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-to-download-the-historical-version-of-nexus3-x/5669/index.html): I want to download a version of nexus3. X. the link address I visit is: https://help.sonatype.com/repomanager3/download/download-archives---repository-manager-3. But every time I go in, it will show blank and can’t be do&hellip; (306 words, Jan 8, 2021)
- [How to download the historical version of nexus3. X? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-to-download-the-historical-version-of-nexus3-x/5669/1/index.html): I want to download a version of nexus3. X. the link address I visit is: https://help.sonatype.com/repomanager3/download/download-archives---repository-manager-3. But every time I go in, it will show blank and can’t be do&hellip; (308 words, Jan 8, 2021)
- [Improve the license message for NuGet PECOFF matches - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/improve-the-license-message-for-nuget-pecoff-matches/5620/3/index.html): Currently, NuGet PECOFF (Enhancements to Nuget (.NET) Scanning in Nexus Lifecycle) matches will report “Not Provided”, because 

“…pecoff does not provide license information”. 

However, Understanding License Type state&hellip; (194 words, Jan 8, 2021)
- [Supplying commit hash via dockerised Nexus IQ CLI - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/supplying-commit-hash-via-dockerised-nexus-iq-cli/5664/index.html): Is there a way or plan to support supplying a commit hash in the docker version of the Nexus IQ CLI? 
Looking at the instructions here - it mentions a --metadata flag: 
https://help.sonatype.com/integrations/nexus-iq-for&hellip; (313 words, Jan 7, 2021)
- [Supplying commit hash via dockerised Nexus IQ CLI - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/supplying-commit-hash-via-dockerised-nexus-iq-cli/5664/1/index.html): Is there a way or plan to support supplying a commit hash in the docker version of the Nexus IQ CLI? 
Looking at the instructions here - it mentions a --metadata flag: 
https://help.sonatype.com/integrations/nexus-iq-for&hellip; (312 words, Jan 7, 2021)
- [Unable to upload to Raw Repo using Powershell - Sonatype Nexus Repository - Sonatype Community](/content/community/t/unable-to-upload-to-raw-repo-using-powershell/5662/index.html): Hi there. 
I’ve got a Powershell script to upload a specified file to a raw repo in Nexus OSS 3.28.0 but it’s not working. 
Not sure why I’m getting the following error…I suspect it’s my “BodyLines” composition but I’m s&hellip; (297 words, Jan 7, 2021)
- [Unable to upload to Raw Repo using Powershell - Sonatype Nexus Repository - Sonatype Community](/content/community/t/unable-to-upload-to-raw-repo-using-powershell/5662/1/index.html): Hi there. 
I’ve got a Powershell script to upload a specified file to a raw repo in Nexus OSS 3.28.0 but it’s not working. 
Not sure why I’m getting the following error…I suspect it’s my “BodyLines” composition but I’m s&hellip; (297 words, Jan 7, 2021)
- [System info - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/system-info/5660/index.html): I am looking for some tab on UI under admin section which will give system info for NexusIQ. This would include information on Database used and connection details, memory details, heap info,  JVM properties details etc.&hellip; (184 words, Jan 6, 2021)
- [System info - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/system-info/5660/1/index.html): I am looking for some tab on UI under admin section which will give system info for NexusIQ. This would include information on Database used and connection details, memory details, heap info,  JVM properties details etc.&hellip; (189 words, Jan 6, 2021)
- [Looking for help, Nexus crashed and now I get error when trying to start - Sonatype Nexus Repository - Sonatype Community](/content/community/t/looking-for-help-nexus-crashed-and-now-i-get-error-when-trying-to-start/1758/3/index.html): Hi I just got asked to help with an issue thats was reported that nexus isn’t working, getting 502 bad gateway when trying to load the page, so took at look and can see errors in the logs on start up 
below is what I bel&hellip; (918 words, Jan 6, 2021)
- [Merging nexusiq instances - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/merging-nexusiq-instances/5649/index.html): We are currently running two instances of NexusIQ in Production. 
Now we want to move to single instance. 
As per our communication with support, we got following response: 
&quot;There isn’t currently a way to merge two Nexu&hellip; (229 words, Jan 5, 2021)
- [Merging nexusiq instances - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/merging-nexusiq-instances/5649/1/index.html): We are currently running two instances of NexusIQ in Production. 
Now we want to move to single instance. 
As per our communication with support, we got following response: 
&quot;There isn’t currently a way to merge two Nexu&hellip; (233 words, Jan 5, 2021)
- [High-availability cofiguration of Nexus IQ - Sonatype Lifecycle & Repository Firewall / Best Practices - Sonatype Community](/content/community/t/high-availability-cofiguration-of-nexus-iq/1424/10/index.html): During last maintenance of Nexus IQ server (update to the latest version and fix some configuration issues) I saw a lot of failes of DevOps pipelines. The root cause was unable  to download dependencies from proxy reposi&hellip; (537 words, Jan 5, 2021)
- [Is there way to upload artifacts available locally in a directory - Sonatype Nexus Repository - Sonatype Community](/content/community/t/is-there-way-to-upload-artifacts-available-locally-in-a-directory/5645/2/index.html): Hi, I have my local repository saved in my local disk and I want to upload it to NXRM so that it will be available for other user in my organization. 
I tried several ways but could not able to do so, could you please le&hellip; (143 words, Jan 5, 2021)
- [Is there way to upload artifacts available locally in a directory - Sonatype Nexus Repository - Sonatype Community](/content/community/t/is-there-way-to-upload-artifacts-available-locally-in-a-directory/5645/index.html): Hi, I have my local repository saved in my local disk and I want to upload it to NXRM so that it will be available for other user in my organization. 
I tried several ways but could not able to do so, could you please le&hellip; (149 words, Jan 5, 2021)
- [Is there way to upload artifacts available locally in a directory - Sonatype Nexus Repository - Sonatype Community](/content/community/t/is-there-way-to-upload-artifacts-available-locally-in-a-directory/5645/1/index.html): Hi, I have my local repository saved in my local disk and I want to upload it to NXRM so that it will be available for other user in my organization. 
I tried several ways but could not able to do so, could you please le&hellip; (148 words, Jan 5, 2021)
- [Update on Lifecycle XC - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/update-on-lifecycle-xc/5641/index.html): Over the past year, Sonatype has steadily increased native support in Nexus Lifecycle for the most popular component formats (first seen in IQ Server release 86) - we added more than 10 new ecosystems to Nexus Lifecycle &hellip; (549 words, Jan 4, 2021)
- [Update on Lifecycle XC - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/update-on-lifecycle-xc/5641/1/index.html): Over the past year, Sonatype has steadily increased native support in Nexus Lifecycle for the most popular component formats (first seen in IQ Server release 86) - we added more than 10 new ecosystems to Nexus Lifecycle &hellip; (552 words, Jan 4, 2021)
- [Nexus 3 over SSL and http - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-3-over-ssl-and-http/5628/3/index.html): Hi, Guys, 
I’m looking for way to set up a ngix on https://localhost/nexus and http://localhost/nexus I’m using a nginx as a web server with following config, but it not working as expected. 
server {
listen 443 ssl;
lis&hellip; (219 words, Jan 4, 2021)
- [Nexus 3 over SSL and http - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-3-over-ssl-and-http/5628/2/index.html): Hi, Guys, 
I’m looking for way to set up a ngix on https://localhost/nexus and http://localhost/nexus I’m using a nginx as a web server with following config, but it not working as expected. 
server {
listen 443 ssl;
lis&hellip; (219 words, Dec 31, 2020)
- [Nexus 3 over SSL and http - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-3-over-ssl-and-http/5628/index.html): Hi, Guys, 
I’m looking for way to set up a ngix on https://localhost/nexus and http://localhost/nexus I’m using a nginx as a web server with following config, but it not working as expected. 
server {
listen 443 ssl;
lis&hellip; (219 words, Dec 31, 2020)
- [Nexus 3 over SSL and http - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-3-over-ssl-and-http/5628/1/index.html): Hi, Guys, 
I’m looking for way to set up a ngix on https://localhost/nexus and http://localhost/nexus I’m using a nginx as a web server with following config, but it not working as expected. 
server {
listen 443 ssl;
lis&hellip; (282 words, Dec 31, 2020)
- [Update Your IQ Server License Threat Groups - Sonatype Labs - Sonatype Community](/content/community/t/update-your-iq-server-license-threat-groups/3094/11/index.html): The license threat group updater will apply the latest Sonatype provided license classification to your running IQ server’s license threat groups. This will alleviate any “License Threat Group not Assigned” policy violat&hellip; (673 words, Dec 30, 2020)
- [Problem with running nexus 3.28.0-01 in HA mode - Sonatype Nexus Repository - Sonatype Community](/content/community/t/problem-with-running-nexus-3-28-0-01-in-ha-mode/5610/2/index.html): Hi All, 
I am trying to run nexus(pro) in HA mode, for that I have created Nexus AMI using packer and ansible. I have done some customization in AMI in terms of changing location of sonatype-work directory, context path,&hellip; (336 words, Dec 29, 2020)
- [Improve the license message for NuGet PECOFF matches - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/improve-the-license-message-for-nuget-pecoff-matches/5620/index.html): Currently, NuGet PECOFF (Enhancements to Nuget (.NET) Scanning in Nexus Lifecycle) matches will report “Not Provided”, because 

“…pecoff does not provide license information”. 

However, Understanding License Type state&hellip; (196 words, Dec 24, 2020)
- [Unable to get version for NPM artifacts - Sonatype Nexus Repository - Sonatype Community](/content/community/t/unable-to-get-version-for-npm-artifacts/5381/12/index.html): Hi, 
I’m developing a plugin for the nexus repository manager. I can get the artifact version for maven as below. But I’m having an issue getting the version for NPM artifacts. What is the best way to get the version pro&hellip; (595 words, Dec 23, 2020)
- [Problem with running nexus 3.28.0-01 in HA mode - Sonatype Nexus Repository - Sonatype Community](/content/community/t/problem-with-running-nexus-3-28-0-01-in-ha-mode/5610/index.html): Hi All, 
I am trying to run nexus(pro) in HA mode, for that I have created Nexus AMI using packer and ansible. I have done some customization in AMI in terms of changing location of sonatype-work directory, context path,&hellip; (330 words, Dec 23, 2020)
- [Problem with running nexus 3.28.0-01 in HA mode - Sonatype Nexus Repository - Sonatype Community](/content/community/t/problem-with-running-nexus-3-28-0-01-in-ha-mode/5610/1/index.html): Hi All, 
I am trying to run nexus(pro) in HA mode, for that I have created Nexus AMI using packer and ansible. I have done some customization in AMI in terms of changing location of sonatype-work directory, context path,&hellip; (330 words, Dec 23, 2020)
- [Artifact sha1 value and deletion - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/artifact-sha1-value-and-deletion/5595/2/index.html): Hello There, 
We have one shell scrip which returns sha1 value from .properties file, and we do perform clean up with that from GUI under search. 
In some case single sha1 value shows multiple records and we are not able&hellip; (247 words, Dec 18, 2020)
- [Artifact sha1 value and deletion - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/artifact-sha1-value-and-deletion/5595/index.html): Hello There, 
We have one shell scrip which returns sha1 value from .properties file, and we do perform clean up with that from GUI under search. 
In some case single sha1 value shows multiple records and we are not able&hellip; (246 words, Dec 18, 2020)
- [Artifact sha1 value and deletion - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/artifact-sha1-value-and-deletion/5595/1/index.html): Hello There, 
We have one shell scrip which returns sha1 value from .properties file, and we do perform clean up with that from GUI under search. 
In some case single sha1 value shows multiple records and we are not able&hellip; (247 words, Dec 18, 2020)
- [Happening Now! Sonatype Office Hours - Community Announcements - Sonatype Community](/content/community/t/happening-now-sonatype-office-hours/5588/2/index.html): We’re here until 11:30 a.m. ET / 4:30 p.m. GMT! 
Right this way to join  —&gt; https://my.sonatype.com/office-hours (127 words, Dec 17, 2020)
- [Happening Now! Sonatype Office Hours - Community Announcements - Sonatype Community](/content/community/t/happening-now-sonatype-office-hours/5588/index.html): We’re here until 11:30 a.m. ET / 4:30 p.m. GMT! 
Right this way to join  —&gt; https://my.sonatype.com/office-hours (103 words, Dec 17, 2020)
- [Weird gradle behaviour - Sonatype Nexus Repository - Sonatype Community](/content/community/t/weird-gradle-behaviour/5587/index.html): When executing a task to deploy a  specific jar from a nexus maven repository it works from one version but not another. 
The only difference seems to be a v at the start of one. 
Both resolve in the browser. 
Working!!!&hellip; (169 words, Dec 17, 2020)
- [Weird gradle behaviour - Sonatype Nexus Repository - Sonatype Community](/content/community/t/weird-gradle-behaviour/5587/1/index.html): When executing a task to deploy a  specific jar from a nexus maven repository it works from one version but not another. 
The only difference seems to be a v at the start of one. 
Both resolve in the browser. 
Working!!!&hellip; (115 words, Dec 17, 2020)
- [Happening Today! Customer Office Hours starting at 10:30 a.m. ET / 3:30 p.m. GMT - Community Announcements - Sonatype Community](/content/community/t/happening-today-customer-office-hours-starting-at-10-30-a-m-et-3-30-p-m-gmt/5585/2/index.html): Don’t miss our “Ask Me Anything” session with Sonatype Product, Support, and Customer Success leaders today, Thursday, December 17, 2020 from 10:30-11:30 a.m. ET / 3:30-4:30 p.m. GMT. 
Right this way to join via our Offi&hellip; (147 words, Dec 17, 2020)
- [Happening Today! Customer Office Hours starting at 10:30 a.m. ET / 3:30 p.m. GMT - Community Announcements - Sonatype Community](/content/community/t/happening-today-customer-office-hours-starting-at-10-30-a-m-et-3-30-p-m-gmt/5585/index.html): Don’t miss our “Ask Me Anything” session with Sonatype Product, Support, and Customer Success leaders today, Thursday, December 17, 2020 from 10:30-11:30 a.m. ET / 3:30-4:30 p.m. GMT. 
Right this way to join via our Offi&hellip; (153 words, Dec 17, 2020)
- [Using Webhooks to make an IQ Server and Slack Integration - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/using-webhooks-to-make-an-iq-server-and-slack-integration/47/index.html): The IQ Server Help site has some great docs on creating and using webhooks. We decided to use those docs as a starting point to show you how to make a useful webhook integration. 
Check out this article to see an example&hellip; (84 words, Dec 17, 2020)
- [Using Webhooks to make an IQ Server and Slack Integration - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/using-webhooks-to-make-an-iq-server-and-slack-integration/47/1/index.html): The IQ Server Help site has some great docs on creating and using webhooks. We decided to use those docs as a starting point to show you how to make a useful webhook integration. 
Check out this article to see an example&hellip; (184 words, Dec 17, 2020)
- [Not able to connect Jenkins to sonatype nexus IQ server - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/not-able-to-connect-jenkins-to-sonatype-nexus-iq-server/3155/4/index.html): I am using Nexus Platform Plugin ( [3.8.20191204-084645.a4bff16) but getting below error while doing test connection to nexus IQ server hosted in EC2 Instance from Jenkins (hosted in my windows PC . Can someone pls help 
&hellip; (475 words, Dec 15, 2020)
- [This Week: Join us for Customer-Exclusive Office Hours on Thurs., Dec. 17th - Community Announcements - Sonatype Community](/content/community/t/this-week-join-us-for-customer-exclusive-office-hours-on-thurs-dec-17th/5571/2/index.html): Come join our December Office Hours virtual drop-in call for customers this Thursday, December 17, 2020 from 10:30-11:30 a.m. ET.  Stop by and chat with leaders from Sonatype Product Management, Customer Success, and Sup&hellip; (178 words, Dec 14, 2020)
- [This Week: Join us for Customer-Exclusive Office Hours on Thurs., Dec. 17th - Community Announcements - Sonatype Community](/content/community/t/this-week-join-us-for-customer-exclusive-office-hours-on-thurs-dec-17th/5571/index.html): Come join our December Office Hours virtual drop-in call for customers this Thursday, December 17, 2020 from 10:30-11:30 a.m. ET.  Stop by and chat with leaders from Sonatype Product Management, Customer Success, and Sup&hellip; (192 words, Dec 14, 2020)
- [This Week: Join us for Customer-Exclusive Office Hours on Thurs., Dec. 17th - Community Announcements - Sonatype Community](/content/community/t/this-week-join-us-for-customer-exclusive-office-hours-on-thurs-dec-17th/5571/1/index.html): Come join our December Office Hours virtual drop-in call for customers this Thursday, December 17, 2020 from 10:30-11:30 a.m. ET.  Stop by and chat with leaders from Sonatype Product Management, Customer Success, and Sup&hellip; (181 words, Dec 14, 2020)
- [Nexus 3.27.0-03 (K8S: 1.18) restarts[killed] during clean up task - troubleshooting - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-3-27-0-03-k8s-1-18-restarts-killed-during-clean-up-task-troubleshooting/5537/9/index.html): running nexus 3.27.0-03 on Kubernetes 1.18. 
created a clean up police (snapshots older than 30 days) and associated with maven2/snapshots repo. Manually trigger the clean up task and after 3-4 mins it gets interrupted a&hellip; (547 words, Dec 10, 2020)
- [Need Nexus IQ trial/evaluation license - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/need-nexus-iq-trial-evaluation-license/5546/index.html): Hello Team, 
I’m doing a POC on Sonatype NXRM to show how the scanning works to find vulnerabilities in the open-source packages. I’ve received a temporary license for the NXRM Pro but it doesn’t seem to work. I tried to&hellip; (111 words, Dec 9, 2020)
- [Need Nexus IQ trial/evaluation license - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/need-nexus-iq-trial-evaluation-license/5546/1/index.html): Hello Team, 
I’m doing a POC on Sonatype NXRM to show how the scanning works to find vulnerabilities in the open-source packages. I’ve received a temporary license for the NXRM Pro but it doesn’t seem to work. I tried to&hellip; (204 words, Dec 9, 2020)
- ["ERROR [qtp1148375229-52] Failed to invoke action method: coreui_Task.run, java-method: org.sonatype.nexus.coreui.TaskComponent.run com.orientechnologies.orient.core.exception.OStorageException: Cannot put key value entry in index DB name="config" - Sonatype Nexus Repository - Sonatype Community](/content/community/t/error-qtp1148375229-52-failed-to-invoke-action-method-coreui-task-run-java-method-org-sonatype-nexus-coreui-taskcomponent-run-com-orientechnologies-orient-core-exception-ostorageexception-cannot-put-key-value-entry-in-index-db-name-config/5543/index.html): Hello, 
We have trying to run a cleanup task and it results in error messages mention below 
&quot;ERROR [qtp1148375229-52]  admin com.orientechnologies.orient.core.db.OPartitionedDatabasePool$DatabaseDocumentTxPooled - $ANSI&hellip; (187 words, Dec 9, 2020)
- ["ERROR [qtp1148375229-52] Failed to invoke action method: coreui_Task.run, java-method: org.sonatype.nexus.coreui.TaskComponent.run com.orientechnologies.orient.core.exception.OStorageException: Cannot put key value entry in index DB name="config" - Sonatype Nexus Repository - Sonatype Community](/content/community/t/error-qtp1148375229-52-failed-to-invoke-action-method-coreui-task-run-java-method-org-sonatype-nexus-coreui-taskcomponent-run-com-orientechnologies-orient-core-exception-ostorageexception-cannot-put-key-value-entry-in-index-db-name-config/5543/1/index.html): Hello, 
We have trying to run a cleanup task and it results in error messages mention below 
&quot;ERROR [qtp1148375229-52]  admin com.orientechnologies.orient.core.db.OPartitionedDatabasePool$DatabaseDocumentTxPooled - $ANSI&hellip; (184 words, Dec 9, 2020)
- [Nexus 3.27.0-03 (K8S: 1.18) restarts[killed] during clean up task - troubleshooting - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-3-27-0-03-k8s-1-18-restarts-killed-during-clean-up-task-troubleshooting/5537/index.html): running nexus 3.27.0-03 on Kubernetes 1.18. 
created a clean up police (snapshots older than 30 days) and associated with maven2/snapshots repo. Manually trigger the clean up task and after 3-4 mins it gets interrupted a&hellip; (545 words, Dec 9, 2020)
- [Nexus 3.27.0-03 (K8S: 1.18) restarts[killed] during clean up task - troubleshooting - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-3-27-0-03-k8s-1-18-restarts-killed-during-clean-up-task-troubleshooting/5537/1/index.html): running nexus 3.27.0-03 on Kubernetes 1.18. 
created a clean up police (snapshots older than 30 days) and associated with maven2/snapshots repo. Manually trigger the clean up task and after 3-4 mins it gets interrupted a&hellip; (541 words, Dec 9, 2020)
- [Nexus 3 plugin maven dependencies - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-3-plugin-maven-dependencies/5506/2/index.html): Hello everyone!! 
I have a question: is there any Nexus 3 plugin that displays: 

The artifact dependencies the artifact is using
Which artifacts are using it as a dependency (a “used by” feature)

As far as I know, ther&hellip; (110 words, Dec 8, 2020)
- [Nexus 3 - Validate retrieved content with md5 checksum? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-3-validate-retrieved-content-with-md5-checksum/5527/3/index.html): I’m looking into the adoption of Nexus 3 repository manager.  Our security manager has asked what security mechanisms are in place when retrieving content from Maven Central e.g. in addition to the connection being SSL/T&hellip; (217 words, Dec 8, 2020)
- [Yum repositories: How to change default metadata generation default time - Sonatype Nexus Repository - Sonatype Community](/content/community/t/yum-repositories-how-to-change-default-metadata-generation-default-time/5520/5/index.html): Reading the documentation for nexus oss 3 I found the following: 

When an RPM is uploaded, the Yum metadata will be generated after the configured value (default 60 seconds). 

https://help.sonatype.com/repomanager3/for&hellip; (318 words, Dec 7, 2020)
- [Yum repositories: How to change default metadata generation default time - Sonatype Nexus Repository - Sonatype Community](/content/community/t/yum-repositories-how-to-change-default-metadata-generation-default-time/5520/4/index.html): Reading the documentation for nexus oss 3 I found the following: 

When an RPM is uploaded, the Yum metadata will be generated after the configured value (default 60 seconds). 

https://help.sonatype.com/repomanager3/for&hellip; (319 words, Dec 7, 2020)
- [Yum repositories: How to change default metadata generation default time - Sonatype Nexus Repository - Sonatype Community](/content/community/t/yum-repositories-how-to-change-default-metadata-generation-default-time/5520/3/index.html): Reading the documentation for nexus oss 3 I found the following: 

When an RPM is uploaded, the Yum metadata will be generated after the configured value (default 60 seconds). 

https://help.sonatype.com/repomanager3/for&hellip; (318 words, Dec 7, 2020)
- [Yum repositories: How to change default metadata generation default time - Sonatype Nexus Repository - Sonatype Community](/content/community/t/yum-repositories-how-to-change-default-metadata-generation-default-time/5520/2/index.html): Reading the documentation for nexus oss 3 I found the following: 

When an RPM is uploaded, the Yum metadata will be generated after the configured value (default 60 seconds). 

https://help.sonatype.com/repomanager3/for&hellip; (318 words, Dec 7, 2020)
- [Nexus 3 - Validate retrieved content with md5 checksum? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-3-validate-retrieved-content-with-md5-checksum/5527/index.html): I’m looking into the adoption of Nexus 3 repository manager.  Our security manager has asked what security mechanisms are in place when retrieving content from Maven Central e.g. in addition to the connection being SSL/T&hellip; (220 words, Dec 7, 2020)
- [Nexus 3 - Validate retrieved content with md5 checksum? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-3-validate-retrieved-content-with-md5-checksum/5527/1/index.html): I’m looking into the adoption of Nexus 3 repository manager.  Our security manager has asked what security mechanisms are in place when retrieving content from Maven Central e.g. in addition to the connection being SSL/T&hellip; (211 words, Dec 7, 2020)
- [Yum repositories: How to change default metadata generation default time - Sonatype Nexus Repository - Sonatype Community](/content/community/t/yum-repositories-how-to-change-default-metadata-generation-default-time/5520/index.html): Reading the documentation for nexus oss 3 I found the following: 

When an RPM is uploaded, the Yum metadata will be generated after the configured value (default 60 seconds). 

https://help.sonatype.com/repomanager3/for&hellip; (318 words, Dec 5, 2020)
- [Yum repositories: How to change default metadata generation default time - Sonatype Nexus Repository - Sonatype Community](/content/community/t/yum-repositories-how-to-change-default-metadata-generation-default-time/5520/1/index.html): Reading the documentation for nexus oss 3 I found the following: 

When an RPM is uploaded, the Yum metadata will be generated after the configured value (default 60 seconds). 

https://help.sonatype.com/repomanager3/for&hellip; (317 words, Dec 5, 2020)
- [HTTP => https Issues - Sonatype Nexus Repository - Sonatype Community](/content/community/t/http-https-issues/5514/1/index.html): Hi everyone. 
During my test migration of our Artifactory to Nexus “which run pretty easy” the passage from http to https seems to give me hard time… 
Can someone tell me what is going on… probably an error on my end but&hellip; (332 words, Dec 4, 2020)
- [About the Sonatype Exchange Discussion category - Sonatype Exchange / Sonatype Exchange Discussion - Sonatype Community](/content/community/t/about-the-sonatype-exchange-discussion-category/5507/index.html): Questions or thoughts about what you find on the Exchange? Start a conversation here. (104 words, Dec 3, 2020)
- [About the Sonatype Exchange Discussion category - Sonatype Exchange / Sonatype Exchange Discussion - Sonatype Community](/content/community/t/about-the-sonatype-exchange-discussion-category/5507/1/index.html): Questions or thoughts about what you find on the Exchange? Start a conversation here. (130 words, Dec 3, 2020)
- [Nexus 3 plugin maven dependencies - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-3-plugin-maven-dependencies/5506/index.html): Hello everyone!! 
I have a question: is there any Nexus 3 plugin that displays: 

The artifact dependencies the artifact is using
Which artifacts are using it as a dependency (a “used by” feature)

As far as I know, ther&hellip; (116 words, Dec 3, 2020)
- [BrowseResult class removed. Using of ProxyHandler - Sonatype Nexus Repository - Sonatype Community](/content/community/t/browseresult-class-removed-using-of-proxyhandler/5488/3/index.html): Hi, 
we’re developing Nexus plugin and noticed that BrowseResult class was removed (replaced with PageResult). There were no mention in release notes, so after upgrade Nexus versions the plugin could not be activated dur&hellip; (219 words, Dec 3, 2020)
- [BrowseResult class removed. Using of ProxyHandler - Sonatype Nexus Repository - Sonatype Community](/content/community/t/browseresult-class-removed-using-of-proxyhandler/5488/index.html): Hi, 
we’re developing Nexus plugin and noticed that BrowseResult class was removed (replaced with PageResult). There were no mention in release notes, so after upgrade Nexus versions the plugin could not be activated dur&hellip; (148 words, Dec 1, 2020)
- [BrowseResult class removed. Using of ProxyHandler - Sonatype Nexus Repository - Sonatype Community](/content/community/t/browseresult-class-removed-using-of-proxyhandler/5488/1/index.html): Hi, 
we’re developing Nexus plugin and noticed that BrowseResult class was removed (replaced with PageResult). There were no mention in release notes, so after upgrade Nexus versions the plugin could not be activated dur&hellip; (212 words, Dec 1, 2020)
- [My.sonatype.com is back - Community Announcements - Sonatype Community](/content/community/t/my-sonatype-com-is-back/5452/2/index.html): my.sonatype.com has been found and put back in its cloud! Access and all functionality should be restored (130 words, Nov 25, 2020)
- [My.sonatype.com is back - Community Announcements - Sonatype Community](/content/community/t/my-sonatype-com-is-back/5452/index.html): my.sonatype.com has been found and put back in its cloud! Access and all functionality should be restored (112 words, Nov 25, 2020)
- [My.sonatype.com is back - Community Announcements - Sonatype Community](/content/community/t/my-sonatype-com-is-back/5452/1/index.html): my.sonatype.com has been found and put back in its cloud! Access and all functionality should be restored (133 words, Nov 25, 2020)
- [My.sonatype.com experiencing a service disruption - Community Announcements - Sonatype Community](/content/community/t/my-sonatype-com-experiencing-a-service-disruption/5449/3/index.html): my.sonatype.com is experiencing a disruption related to degraded functionality by service provider. Please stay tuned for updates (201 words, Nov 25, 2020)
- [My.sonatype.com experiencing a service disruption - Community Announcements - Sonatype Community](/content/community/t/my-sonatype-com-experiencing-a-service-disruption/5449/index.html): my.sonatype.com is experiencing a disruption related to degraded functionality by service provider. Please stay tuned for updates (184 words, Nov 25, 2020)
- [My.sonatype.com experiencing a service disruption - Community Announcements - Sonatype Community](/content/community/t/my-sonatype-com-experiencing-a-service-disruption/5449/1/index.html): my.sonatype.com is experiencing a disruption related to degraded functionality by service provider. Please stay tuned for updates (189 words, Nov 25, 2020)
- [Error in data flush background thread - Sonatype Nexus Repository - Sonatype Community](/content/community/t/error-in-data-flush-background-thread/5446/2/index.html): Recently Nexus was upgraded from 2.14.5 to 3.25.0. 
After this upgrade we experience intermiddent issues where we are unable to upload/download artifacts from the repositories. This presents itself as a generic error 500 &hellip; (182 words, Nov 25, 2020)
- [Error in data flush background thread - Sonatype Nexus Repository - Sonatype Community](/content/community/t/error-in-data-flush-background-thread/5446/index.html): Recently Nexus was upgraded from 2.14.5 to 3.25.0. 
After this upgrade we experience intermiddent issues where we are unable to upload/download artifacts from the repositories. This presents itself as a generic error 500 &hellip; (219 words, Nov 25, 2020)
- [Error in data flush background thread - Sonatype Nexus Repository - Sonatype Community](/content/community/t/error-in-data-flush-background-thread/5446/1/index.html): Recently Nexus was upgraded from 2.14.5 to 3.25.0. 
After this upgrade we experience intermiddent issues where we are unable to upload/download artifacts from the repositories. This presents itself as a generic error 500 &hellip; (185 words, Nov 25, 2020)
- [Happening Now! Sonatype Office Hours - Community Announcements - Sonatype Community](/content/community/t/happening-now-sonatype-office-hours/5443/2/index.html): Come join us at our customer-exclusive Office Hours now until 1pm ET. Join link on: https://my.sonatype.com/office-hours (111 words, Nov 24, 2020)
- [Happening Now! Sonatype Office Hours - Community Announcements - Sonatype Community](/content/community/t/happening-now-sonatype-office-hours/5443/1/index.html): Come join us at our customer-exclusive Office Hours now until 1pm ET. Join link on: https://my.sonatype.com/office-hours (101 words, Nov 24, 2020)
- [How to setup Envoy as a load balancer with Nexus 3 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-to-setup-envoy-as-a-load-balancer-with-nexus-3/5422/3/index.html): Hello all, 
I’m trying to setup Envoy proxy with a Nexus 3 cluster but so far no luck. Nexus 3 offers some hints how to achieve this (not specific to any load balancer). 
Has anybody got this done? Please share your expe&hellip; (315 words, Nov 23, 2020)
- [Update Your IQ Server License Threat Groups - Sonatype Labs - Sonatype Community](/content/community/t/update-your-iq-server-license-threat-groups/3094/10/index.html): The license threat group updater will apply the latest Sonatype provided license classification to your running IQ server’s license threat groups. This will alleviate any “License Threat Group not Assigned” policy violat&hellip; (1,921 words, Nov 23, 2020)
- [Don't miss November Office Hours tomorrow, November 24th @12pm ET! - Community Announcements - Sonatype Community](/content/community/t/dont-miss-november-office-hours-tomorrow-november-24th-12pm-et/5430/2/index.html): Come join us tomorrow, Tuesday, November 24, 2020 from 12-1 pm ET for our customer-exclusive Office Hours drop-in call. Connect with leaders from Sonatype Product Management, Support, and Customer Success to ask question&hellip; (205 words, Nov 23, 2020)
- [Don't miss November Office Hours tomorrow, November 24th @12pm ET! - Community Announcements - Sonatype Community](/content/community/t/dont-miss-november-office-hours-tomorrow-november-24th-12pm-et/5430/index.html): Come join us tomorrow, Tuesday, November 24, 2020 from 12-1 pm ET for our customer-exclusive Office Hours drop-in call. Connect with leaders from Sonatype Product Management, Support, and Customer Success to ask question&hellip; (199 words, Nov 23, 2020)
- [Exceptions using IQ-Server Jenkins Plugin - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/exceptions-using-iq-server-jenkins-plugin/5427/index.html): Getting exception while Sonatype Jenkins pipeline scanning libraries inside AWS lambda function: 
Error stack trace: 
[INFO] Scanning lambdaName-x.x.x-lambda-package.zip/lib/jersey-common-2.30.1.jar… 
[ERROR] Could not p&hellip; (162 words, Nov 23, 2020)
- [Exceptions using IQ-Server Jenkins Plugin - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/exceptions-using-iq-server-jenkins-plugin/5427/1/index.html): Getting exception while Sonatype Jenkins pipeline scanning libraries inside AWS lambda function: 
Error stack trace: 
[INFO] Scanning lambdaName-x.x.x-lambda-package.zip/lib/jersey-common-2.30.1.jar… 
[ERROR] Could not p&hellip; (148 words, Nov 23, 2020)
- [How to setup Envoy as a load balancer with Nexus 3 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-to-setup-envoy-as-a-load-balancer-with-nexus-3/5422/index.html): Hello all, 
I’m trying to setup Envoy proxy with a Nexus 3 cluster but so far no luck. Nexus 3 offers some hints how to achieve this (not specific to any load balancer). 
Has anybody got this done? Please share your expe&hellip; (315 words, Nov 20, 2020)
- [How to setup Envoy as a load balancer with Nexus 3 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-to-setup-envoy-as-a-load-balancer-with-nexus-3/5422/1/index.html): Hello all, 
I’m trying to setup Envoy proxy with a Nexus 3 cluster but so far no luck. Nexus 3 offers some hints how to achieve this (not specific to any load balancer). 
Has anybody got this done? Please share your expe&hellip; (314 words, Nov 20, 2020)
- [Nexus IQ remediation and JBOSS - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/nexus-iq-remediation-and-jboss/5405/index.html): Hi, 
I am kind of new to Nexus IQ. We have a number of java apps running on Redhat Jboss EAP severs. Quite a number of the violations picked up by Nexus IQ are transitive dependencies supplied by the app server. Remediat&hellip; (212 words, Nov 19, 2020)
- [Nexus IQ remediation and JBOSS - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/nexus-iq-remediation-and-jboss/5405/1/index.html): Hi, 
I am kind of new to Nexus IQ. We have a number of java apps running on Redhat Jboss EAP severs. Quite a number of the violations picked up by Nexus IQ are transitive dependencies supplied by the app server. Remediat&hellip; (129 words, Nov 19, 2020)
- [Official REST API client for the JVM - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/official-rest-api-client-for-the-jvm/4727/2/index.html): Hi there, 
I’m wondering whether there’s an official (and Open Source) client library for the JVM (i.e. Java, Kotlin) to interact with the Nexus IQ REST API to get automation going quickly? And if there is no such ready-&hellip; (140 words, Nov 19, 2020)
- [Nexus Platform Plugin for Jenkins using Java 11 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-platform-plugin-for-jenkins-using-java-11/5398/index.html): While using the Nexus Platform plugin for Jenkins using Java 11 there’s an error configuring a Nexus Repository Manager 3.x Server. Upon clicking “Test connection” there’s an error requiring JAXB-API. Reverting the Jenki&hellip; (182 words, Nov 18, 2020)
- [Nexus Platform Plugin for Jenkins using Java 11 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-platform-plugin-for-jenkins-using-java-11/5398/1/index.html): While using the Nexus Platform plugin for Jenkins using Java 11 there’s an error configuring a Nexus Repository Manager 3.x Server. Upon clicking “Test connection” there’s an error requiring JAXB-API. Reverting the Jenki&hellip; (188 words, Nov 18, 2020)
- [Unable to get version for NPM artifacts - Sonatype Nexus Repository - Sonatype Community](/content/community/t/unable-to-get-version-for-npm-artifacts/5381/index.html): Hi, 
I’m developing a plugin for the nexus repository manager. I can get the artifact version for maven as below. But I’m having an issue getting the version for NPM artifacts. What is the best way to get the version pro&hellip; (595 words, Nov 18, 2020)
- [Unable to get version for NPM artifacts - Sonatype Nexus Repository - Sonatype Community](/content/community/t/unable-to-get-version-for-npm-artifacts/5381/1/index.html): Hi, 
I’m developing a plugin for the nexus repository manager. I can get the artifact version for maven as below. But I’m having an issue getting the version for NPM artifacts. What is the best way to get the version pro&hellip; (595 words, Nov 18, 2020)
- [Mark your calendar: November Office Hours next Tuesday 11/24 at 12pm ET - Community Announcements - Sonatype Community](/content/community/t/mark-your-calendar-november-office-hours-next-tuesday-11-24-at-12pm-et/5376/2/index.html): Last month we introduced Sonatype Office Hours, a monthly virtual drop-in call connecting our customers directly with leaders from Sonatype Product Management, Support, and Customer Success. 
This month’s Office Hours wi&hellip; (176 words, Nov 17, 2020)
- [Mark your calendar: November Office Hours next Tuesday 11/24 at 12pm ET - Community Announcements - Sonatype Community](/content/community/t/mark-your-calendar-november-office-hours-next-tuesday-11-24-at-12pm-et/5376/index.html): Last month we introduced Sonatype Office Hours, a monthly virtual drop-in call connecting our customers directly with leaders from Sonatype Product Management, Support, and Customer Success. 
This month’s Office Hours wi&hellip; (92 words, Nov 17, 2020)
- [Mark your calendar: November Office Hours next Tuesday 11/24 at 12pm ET - Community Announcements - Sonatype Community](/content/community/t/mark-your-calendar-november-office-hours-next-tuesday-11-24-at-12pm-et/5376/1/index.html): Last month we introduced Sonatype Office Hours, a monthly virtual drop-in call connecting our customers directly with leaders from Sonatype Product Management, Support, and Customer Success. 
This month’s Office Hours wi&hellip; (169 words, Nov 17, 2020)
- [Update Your IQ Server License Threat Groups - Sonatype Labs - Sonatype Community](/content/community/t/update-your-iq-server-license-threat-groups/3094/9/index.html): The license threat group updater will apply the latest Sonatype provided license classification to your running IQ server’s license threat groups. This will alleviate any “License Threat Group not Assigned” policy violat&hellip; (686 words, Nov 12, 2020)
- [RFE : multi-branches and multi-versions per application in IQServer - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/rfe-multi-branches-and-multi-versions-per-application-in-iqserver/5308/index.html): Hello, 
IQServer currently doesn’t support multi-branches and multi-versions per application. 
Use case 1 : 
As a security team member, I want to display the IQServer report of an application in version 2.3.4 
This is cu&hellip; (189 words, Nov 9, 2020)
- [RFE : multi-branches and multi-versions per application in IQServer - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/rfe-multi-branches-and-multi-versions-per-application-in-iqserver/5308/1/index.html): Hello, 
IQServer currently doesn’t support multi-branches and multi-versions per application. 
Use case 1 : 
As a security team member, I want to display the IQServer report of an application in version 2.3.4 
This is cu&hellip; (194 words, Nov 9, 2020)
- [Early Access: Database Externalization - Sonatype Nexus Repository - Sonatype Community](/content/community/t/early-access-database-externalization/5289/index.html): Nexus Repository Pro is adding an option to externalize its data storage. By reducing state in the application node, we’re creating simpler ways to implement disaster recovery and node failover, as well as improving perf&hellip; (214 words, Nov 5, 2020)
- [Waiver Experience Enhancements Part 2 - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/waiver-experience-enhancements-part-2/5272/index.html): Overview 
IQ release 98 rolled out a new Add Waiver page and the ability to add time-based waivers via our APIs in Nexus Lifecycle. In IQ release 101, we have updated the experience, even more, to include two additional &hellip; (523 words, Nov 3, 2020)
- [Waiver Experience Enhancements Part 2 - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/waiver-experience-enhancements-part-2/5272/1/index.html): Overview 
IQ release 98 rolled out a new Add Waiver page and the ability to add time-based waivers via our APIs in Nexus Lifecycle. In IQ release 101, we have updated the experience, even more, to include two additional &hellip; (516 words, Nov 3, 2020)
- [Atlassian Data Center certification for IQ Server for Jira plugin - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/atlassian-data-center-certification-for-iq-server-for-jira-plugin/5250/index.html): Hi, 
We would like to install the Nexus IQ for Jira plugin but according to the Atlassian Marketplace page, the plugin is approved by Atlassian for Jira Server, but not yet for Jira Data Center. 
This is unfortunately a &hellip; (233 words, Oct 30, 2020)
- [Atlassian Data Center certification for IQ Server for Jira plugin - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/atlassian-data-center-certification-for-iq-server-for-jira-plugin/5250/1/index.html): Hi, 
We would like to install the Nexus IQ for Jira plugin but according to the Atlassian Marketplace page, the plugin is approved by Atlassian for Jira Server, but not yet for Jira Data Center. 
This is unfortunately a &hellip; (233 words, Oct 30, 2020)
- [Sonatype Internet Explorer 11 Support Sunset on Nov 30 - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/sonatype-internet-explorer-11-support-sunset-on-nov-30/5244/index.html): Sonatype is announcing that we are no longer providing browser support for Microsoft Internet Explorer 11 (IE 11) going forward within Nexus Lifecycle or Nexus Repository Manager beginning November 30, 2020. 
The Why 
Mi&hellip; (290 words, Oct 29, 2020)
- [Sonatype Internet Explorer 11 Support Sunset on Nov 30 - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/sonatype-internet-explorer-11-support-sunset-on-nov-30/5244/1/index.html): Sonatype is announcing that we are no longer providing browser support for Microsoft Internet Explorer 11 (IE 11) going forward within Nexus Lifecycle or Nexus Repository Manager beginning November 30, 2020. 
The Why 
Mi&hellip; (290 words, Oct 29, 2020)
- [Azure DevOps - Nexus IQ Policy Summary not loading - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/azure-devops-nexus-iq-policy-summary-not-loading/3982/8/index.html): I have Azure Pipeline task defined that triggers my nexus IQ scan successfully. But when I attempt access the Nexus IQ Policy Summary, or NexusIQ Build Report I am getting a error: 
Nexus IQ for Azure DevOps by Sonatype &hellip; (281 words, Oct 29, 2020)
- [Our Learners Say Our Courses Are Great! - Community Announcements - Sonatype Community](/content/community/t/our-learners-say-our-courses-are-great/5204/index.html): We’re so pleased with the feedback on our elearning courses. Over 625 learners completed the post-course surveys, and they say our courses are great! We think you will too. Check them out at Sonatype Learn. (For those wh&hellip; (213 words, Oct 23, 2020)
- [Our Learners Say Our Courses Are Great! - Community Announcements - Sonatype Community](/content/community/t/our-learners-say-our-courses-are-great/5204/1/index.html): We’re so pleased with the feedback on our elearning courses. Over 625 learners completed the post-course surveys, and they say our courses are great! We think you will too. Check them out at Sonatype Learn. (For those wh&hellip; (141 words, Oct 23, 2020)
- [Don’t Forget: Sonatype Office Hours is Today! - Community Announcements - Sonatype Community](/content/community/t/don-t-forget-sonatype-office-hours-is-today/5184/5/index.html): In case you missed it, the Sonatype Customer Success team is holding our first Office Hours drop-in call for customers today at 12:30 p.m. ET. 
Registered customers can simply log in to my.sonatype.com and visit the Offi&hellip; (170 words, Oct 22, 2020)
- [Don’t Forget: Sonatype Office Hours is Today! - Community Announcements - Sonatype Community](/content/community/t/don-t-forget-sonatype-office-hours-is-today/5184/index.html): In case you missed it, the Sonatype Customer Success team is holding our first Office Hours drop-in call for customers today at 12:30 p.m. ET. 
Registered customers can simply log in to my.sonatype.com and visit the Offi&hellip; (171 words, Oct 22, 2020)
- [Don’t Forget: Sonatype Office Hours is Today! - Community Announcements - Sonatype Community](/content/community/t/don-t-forget-sonatype-office-hours-is-today/5184/1/index.html): In case you missed it, the Sonatype Customer Success team is holding our first Office Hours drop-in call for customers today at 12:30 p.m. ET. 
Registered customers can simply log in to my.sonatype.com and visit the Offi&hellip; (173 words, Oct 22, 2020)
- [Nexus IQ for Azure DevOps not finding nupkg files - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/nexus-iq-for-azure-devops-not-finding-nupkg-files/4699/5/index.html): I have a .net core application for which I’m trying to add Sonatype scanning. I have the following task definition running on an ubuntu Azure DevOps build agent: 
- task: NexusIqPipelineTask@1
              displayName: &hellip; (494 words, Oct 21, 2020)
- [Connection to IQ Server not configured - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/connection-to-iq-server-not-configured/5173/3/index.html): Hi, 
I am getting below error logs. Could you please help here. 
*SYSTEM com.sonatype.nexus.clm.internal.FirewallTransactionQueue - Could not send update to IQ Server, scheduled for retry: DISABLE_REPOSITORY maven-centra&hellip; (246 words, Oct 21, 2020)
- [Connection to IQ Server not configured - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/connection-to-iq-server-not-configured/5173/index.html): Hi, 
I am getting below error logs. Could you please help here. 
*SYSTEM com.sonatype.nexus.clm.internal.FirewallTransactionQueue - Could not send update to IQ Server, scheduled for retry: DISABLE_REPOSITORY maven-centra&hellip; (243 words, Oct 21, 2020)
- [Connection to IQ Server not configured - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/connection-to-iq-server-not-configured/5173/1/index.html): Hi, 
I am getting below error logs. Could you please help here. 
*SYSTEM com.sonatype.nexus.clm.internal.FirewallTransactionQueue - Could not send update to IQ Server, scheduled for retry: DISABLE_REPOSITORY maven-centra&hellip; (223 words, Oct 21, 2020)
- [Issue with python file downloading from yum repository - Sonatype Nexus Repository - Sonatype Community](/content/community/t/issue-with-python-file-downloading-from-yum-repository/5163/2/index.html): #!/usr/bin/env python3 
import json 
import urllib.request 
def main(): 
baseurl = ‘http://127.0.0.1:8081/’ 
downloadRepository = ‘yum-internet’ 
url = baseurl + ‘<span class="hashtag-icon-placeholder"></span>browse</span>/search/yum=repository_name%3D’ + downloadReposito&hellip; (273 words, Oct 20, 2020)
- [Issue with python file downloading from yum repository - Sonatype Nexus Repository - Sonatype Community](/content/community/t/issue-with-python-file-downloading-from-yum-repository/5163/index.html): #!/usr/bin/env python3 
import json 
import urllib.request 
def main(): 
baseurl = ‘http://127.0.0.1:8081/’ 
downloadRepository = ‘yum-internet’ 
url = baseurl + ‘<span class="hashtag-icon-placeholder"></span>browse</span>/search/yum=repository_name%3D’ + downloadReposito&hellip; (271 words, Oct 20, 2020)
- [Issue with python file downloading from yum repository - Sonatype Nexus Repository - Sonatype Community](/content/community/t/issue-with-python-file-downloading-from-yum-repository/5163/1/index.html): #!/usr/bin/env python3 
import json 
import urllib.request 
def main(): 
baseurl = ‘http://127.0.0.1:8081/’ 
downloadRepository = ‘yum-internet’ 
url = baseurl + ‘<span class="hashtag-icon-placeholder"></span>browse</span>/search/yum=repository_name%3D’ + downloadReposito&hellip; (271 words, Oct 20, 2020)
- [Need Nexus IQ trial/evaluation license - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/need-nexus-iq-trial-evaluation-license/5115/3/index.html): Hi 
I would like to check the function of IQ Server 
We need a trial license to test if it is suitable before applying our project 
Thanks (176 words, Oct 20, 2020)
- [Nexus3 Availability During OrientDB Backup - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus3-availability-during-orientdb-backup/5156/4/index.html): Hello Community! 
I’m relatively new to Nexus and I want to understand this tip from the documentation: 

Write access to databases is temporarily suspended until a backup is complete. It’s advised to schedule backup tas&hellip; (608 words, Oct 19, 2020)
- [Storage facet cleanup removes images from repository without cleanup policy - Sonatype Nexus Repository - Sonatype Community](/content/community/t/storage-facet-cleanup-removes-images-from-repository-without-cleanup-policy/5159/1/index.html): Hi all, 
I have a question for Nexus OSS 3.25.1-04. I have a docker hosted repository which has no cleanup policy. I have identified several times that images are disappearing. According to logs from webhooks, image are &hellip; (170 words, Oct 19, 2020)
- [Nexus3 Availability During OrientDB Backup - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus3-availability-during-orientdb-backup/5156/index.html): Hello Community! 
I’m relatively new to Nexus and I want to understand this tip from the documentation: 

Write access to databases is temporarily suspended until a backup is complete. It’s advised to schedule backup tas&hellip; (608 words, Oct 17, 2020)
- [Nexus3 Availability During OrientDB Backup - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus3-availability-during-orientdb-backup/5156/1/index.html): Hello Community! 
I’m relatively new to Nexus and I want to understand this tip from the documentation: 

Write access to databases is temporarily suspended until a backup is complete. It’s advised to schedule backup tas&hellip; (607 words, Oct 17, 2020)
- [Sonatype Launches Monthly Office Hours - Community Announcements - Sonatype Community](/content/community/t/sonatype-launches-monthly-office-hours/5143/index.html): The Sonatype Customer Success team is excited to introduce Office Hours, a monthly virtual drop-in call connecting our customers directly with Sonatype Product Managers. Our inaugural Office Hours will take place next we&hellip; (244 words, Oct 15, 2020)
- [Sonatype Launches Monthly Office Hours - Community Announcements - Sonatype Community](/content/community/t/sonatype-launches-monthly-office-hours/5143/1/index.html): The Sonatype Customer Success team is excited to introduce Office Hours, a monthly virtual drop-in call connecting our customers directly with Sonatype Product Managers. Our inaugural Office Hours will take place next we&hellip; (236 words, Oct 15, 2020)
- [Need Nexus IQ trial/evaluation license - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/need-nexus-iq-trial-evaluation-license/5115/index.html): Hi 
I would like to check the function of IQ Server 
We need a trial license to test if it is suitable before applying our project 
Thanks (94 words, Oct 13, 2020)
- [Need Nexus IQ trial/evaluation license - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/need-nexus-iq-trial-evaluation-license/5115/1/index.html): Hi 
I would like to check the function of IQ Server 
We need a trial license to test if it is suitable before applying our project 
Thanks (186 words, Oct 13, 2020)
- [Problem updating to Nexus IQ Server 100 - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/problem-updating-to-nexus-iq-server-100/5087/2/index.html): I’ve updated our Nexus IQ testsystem to version 100. Restarting the server I’ve detected an exception, related to this SQL: 
Caused by: org.apache.openjpa.lib.jdbc.ReportingSQLException: Unique index or primary key viola&hellip; (49 words, Oct 9, 2020)
- [Problem updating to Nexus IQ Server 100 - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/problem-updating-to-nexus-iq-server-100/5087/index.html): I’ve updated our Nexus IQ testsystem to version 100. Restarting the server I’ve detected an exception, related to this SQL: 
Caused by: org.apache.openjpa.lib.jdbc.ReportingSQLException: Unique index or primary key viola&hellip; (151 words, Oct 8, 2020)
- [Problem updating to Nexus IQ Server 100 - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/problem-updating-to-nexus-iq-server-100/5087/1/index.html): I’ve updated our Nexus IQ testsystem to version 100. Restarting the server I’ve detected an exception, related to this SQL: 
Caused by: org.apache.openjpa.lib.jdbc.ReportingSQLException: Unique index or primary key viola&hellip; (151 words, Oct 8, 2020)
- [Time-Based Waivers now available in Nexus Lifecycle - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/time-based-waivers-now-available-in-nexus-lifecycle/5078/index.html): Last month, we announced the addition of a completely new Add Waivers page to Nexus Lifecycle as part of IQ release 98. Today, we’re happy to announce we’ve added more functionality to our waivers initiative with the add&hellip; (331 words, Oct 7, 2020)
- [I need IQ Server trial license - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/i-need-iq-server-trial-license/5064/2/index.html): Hi 
I would like to check the function of IQ Server 
We need a trial license to test if it is suitable before applying our project 
Do you have reseller in Korea? (169 words, Oct 6, 2020)
- [I need IQ Server trial license - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/i-need-iq-server-trial-license/5064/index.html): Hi 
I would like to check the function of IQ Server 
We need a trial license to test if it is suitable before applying our project 
Do you have reseller in Korea? (160 words, Oct 6, 2020)
- [I need IQ Server trial license - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/i-need-iq-server-trial-license/5064/1/index.html): Hi 
I would like to check the function of IQ Server 
We need a trial license to test if it is suitable before applying our project 
Do you have reseller in Korea? (147 words, Oct 6, 2020)
- [[Sonatype] Nexus Repository 3.28.0 Released - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/sonatype-nexus-repository-3-28-0-released/5058/index.html): We are pleased to announce Nexus Repository 3.28 through our new Storage Management Best Practices: Part 2 - Expand Storage with Ease blog. 
This release includes Change Repo Blob Store (Pro only), which allows an admini&hellip; (294 words, Oct 5, 2020)
- [[Sonatype] Nexus Repository 3.28.0 Released - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/sonatype-nexus-repository-3-28-0-released/5058/1/index.html): We are pleased to announce Nexus Repository 3.28 through our new Storage Management Best Practices: Part 2 - Expand Storage with Ease blog. 
This release includes Change Repo Blob Store (Pro only), which allows an admini&hellip; (240 words, Oct 5, 2020)
- [GitHub Packages as npm proxy - Sonatype Nexus Repository - Sonatype Community](/content/community/t/github-packages-as-npm-proxy/5034/4/index.html): Hello, 
is it possible to configure Nexus to use GitHub Packages as a npm proxy? HTTP authentication option doesn’t seem to work. 
Here are GitHub docs how to do it locally: https://docs.github.com/en/free-pro-team@lates&hellip; (709 words, Oct 3, 2020)
- [Generate SHA256 when uploading files using maven - Sonatype Nexus Repository - Sonatype Community](/content/community/t/generate-sha256-when-uploading-files-using-maven/5041/index.html): We are currently using Nexus Repository Manager OSS 3.22.1-02. 
We have several maven2-repositories to which we uploading files using the Nexus-web-frontend and maven. 
When i deploy a file using maven (mvn deploy:deploy&hellip; (352 words, Oct 2, 2020)
- [Generate SHA256 when uploading files using maven - Sonatype Nexus Repository - Sonatype Community](/content/community/t/generate-sha256-when-uploading-files-using-maven/5041/1/index.html): We are currently using Nexus Repository Manager OSS 3.22.1-02. 
We have several maven2-repositories to which we uploading files using the Nexus-web-frontend and maven. 
When i deploy a file using maven (mvn deploy:deploy&hellip; (352 words, Oct 2, 2020)
- [GitHub Packages as npm proxy - Sonatype Nexus Repository - Sonatype Community](/content/community/t/github-packages-as-npm-proxy/5034/3/index.html): Hello, 
is it possible to configure Nexus to use GitHub Packages as a npm proxy? HTTP authentication option doesn’t seem to work. 
Here are GitHub docs how to do it locally: https://docs.github.com/en/free-pro-team@lates&hellip; (709 words, Oct 1, 2020)
- [GitHub Packages as npm proxy - Sonatype Nexus Repository - Sonatype Community](/content/community/t/github-packages-as-npm-proxy/5034/2/index.html): Hello, 
is it possible to configure Nexus to use GitHub Packages as a npm proxy? HTTP authentication option doesn’t seem to work. 
Here are GitHub docs how to do it locally: https://docs.github.com/en/free-pro-team@lates&hellip; (709 words, Oct 1, 2020)
- [Bulk Moves & Bulk Updates - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/bulk-moves-bulk-updates/5037/index.html): Currently if I had to move a few apps from one organization to another , I have to do it one by one. There is no option to move it in bulk. Sometimes you have a bunch of apps being handled by one team which then moves un&hellip; (205 words, Oct 1, 2020)
- [Bulk Moves & Bulk Updates - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/bulk-moves-bulk-updates/5037/1/index.html): Currently if I had to move a few apps from one organization to another , I have to do it one by one. There is no option to move it in bulk. Sometimes you have a bunch of apps being handled by one team which then moves un&hellip; (207 words, Oct 1, 2020)
- [GitHub Packages as npm proxy - Sonatype Nexus Repository - Sonatype Community](/content/community/t/github-packages-as-npm-proxy/5034/index.html): Hello, 
is it possible to configure Nexus to use GitHub Packages as a npm proxy? HTTP authentication option doesn’t seem to work. 
Here are GitHub docs how to do it locally: https://docs.github.com/en/free-pro-team@lates&hellip; (706 words, Oct 1, 2020)
- [GitHub Packages as npm proxy - Sonatype Nexus Repository - Sonatype Community](/content/community/t/github-packages-as-npm-proxy/5034/1/index.html): Hello, 
is it possible to configure Nexus to use GitHub Packages as a npm proxy? HTTP authentication option doesn’t seem to work. 
Here are GitHub docs how to do it locally: https://docs.github.com/en/free-pro-team@lates&hellip; (707 words, Oct 1, 2020)
- [RFE : Allow token generation in the UI and for SAML Users - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/rfe-allow-token-generation-in-the-ui-and-for-saml-users/5028/1/index.html): Hello, 
We migrated to SAML authentication In IQServer. ( SSO handled via a keycloak instance ) 
All is working fine except for IDE plugins and IQServer API. 
SAML users are known at Keycloak level only which require an &hellip; (308 words, Sep 30, 2020)
- [Nexus Repository Auto Python file - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-repository-auto-python-file/5011/index.html): Hey guys, I have a question about an automated python file to perform execution to download dependencies in nexus and send it back to the physical computer, how do i do that? (999 words, Sep 29, 2020)
- [Nexus Repository Auto Python file - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-repository-auto-python-file/5011/1/index.html): Hey guys, I have a question about an automated python file to perform execution to download dependencies in nexus and send it back to the physical computer, how do i do that? (967 words, Sep 29, 2020)
- [Update Your IQ Server License Threat Groups - Sonatype Labs - Sonatype Community](/content/community/t/update-your-iq-server-license-threat-groups/3094/8/index.html): The license threat group updater will apply the latest Sonatype provided license classification to your running IQ server’s license threat groups. This will alleviate any “License Threat Group not Assigned” policy violat&hellip; (663 words, Sep 23, 2020)
- [How to scan Go via Jenkins plugin? - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/how-to-scan-go-via-jenkins-plugin/1827/4/index.html): Hi, 
I’m trying to scan a Go project, but the report is empty when I use the Jenkins plugin. It works when I send the go.sum via CLI (Example below). 
I tried to compress the go.sum to zip/tar/gz, send the $WORKSPACE dir&hellip; (322 words, Sep 23, 2020)
- [LIVE: IQ-102 Using IQ in Your IDE eLearning course updates - Community Announcements - Sonatype Community](/content/community/t/live-iq-102-using-iq-in-your-ide-elearning-course-updates/4986/index.html): The Customer Education team has recently added lots of great updates to our IQ-102: Using Nexus IQ in Your IDE eLearning course. Updates include: 

More content on how to select quality components
More videos added into &hellip; (114 words, Sep 23, 2020)
- [LIVE: IQ-102 Using IQ in Your IDE eLearning course updates - Community Announcements - Sonatype Community](/content/community/t/live-iq-102-using-iq-in-your-ide-elearning-course-updates/4986/1/index.html): The Customer Education team has recently added lots of great updates to our IQ-102: Using Nexus IQ in Your IDE eLearning course. Updates include: 

More content on how to select quality components
More videos added into &hellip; (103 words, Sep 23, 2020)
- [Need Nexus IQ trial/evaluation license - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/need-nexus-iq-trial-evaluation-license/4956/6/index.html): Hi 
I have installed the nexus IQ server locally , but it is asking me license information before starting. 
I want to evaluate the IQ server for my compnay’s project first so I need a trial license, 
I have tried search&hellip; (162 words, Sep 23, 2020)
- [Advanced Search - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/advanced-search/3564/13/index.html): Release 88 introduced an Early Access version of Advanced Search capability within Nexus IQ Server. 
The Early Access feature is an opt-in feature which can only be enabled from within the UI. If you decide to try this f&hellip; (696 words, Sep 23, 2020)
- [Important .net scanning update - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/important-net-scanning-update/4888/2/index.html): Summary 
In July, IQ Server release 95 introduced updates to our .Net scanning and already one third of our customers are taking advantage of this enhancement, which includes our new pecoff data. The improved pecoff data&hellip; (695 words, Sep 22, 2020)
- [Introducing Learning Paths! - Community Announcements - Sonatype Community](/content/community/t/introducing-learning-paths/4967/index.html): Visitors to our popular Learn site have likely noticed a few changes in recent weeks and months. A polished, new look; new content and courses; and a personalized dashboard where you can easily track your progress, to na&hellip; (243 words, Sep 21, 2020)
- [Introducing Learning Paths! - Community Announcements - Sonatype Community](/content/community/t/introducing-learning-paths/4967/1/index.html): Visitors to our popular Learn site have likely noticed a few changes in recent weeks and months. A polished, new look; new content and courses; and a personalized dashboard where you can easily track your progress, to na&hellip; (243 words, Sep 21, 2020)
- [Need Nexus IQ trial/evaluation license - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/need-nexus-iq-trial-evaluation-license/4956/index.html): Hi 
I have installed the nexus IQ server locally , but it is asking me license information before starting. 
I want to evaluate the IQ server for my compnay’s project first so I need a trial license, 
I have tried search&hellip; (151 words, Sep 18, 2020)
- [Need Nexus IQ trial/evaluation license - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/need-nexus-iq-trial-evaluation-license/4956/1/index.html): Hi 
I have installed the nexus IQ server locally , but it is asking me license information before starting. 
I want to evaluate the IQ server for my compnay’s project first so I need a trial license, 
I have tried search&hellip; (162 words, Sep 18, 2020)
- [IQ / SCM Support for Azure DevOps? - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/iq-scm-support-for-azure-devops/4692/2/index.html): I see that IQ Server currently supports SCM integration for GitLab, GitHub, and BitBucket… 
Does anyone know if there’s support coming for Azure DevOps? 
Would love to see the same level of integration here… Would help d&hellip; (108 words, Sep 18, 2020)
- [Nexus Repository Manager: Nuget Gallery V2 Changes - Community Announcements - Sonatype Community](/content/community/t/nexus-repository-manager-nuget-gallery-v2-changes/4943/index.html): Microsoft has announced some changes to their Nuget.org component gallery. Sonatype has made efforts to insulate you from these changes, but some irreversible changes are taking place, especially for older clients. If yo&hellip; (284 words, Sep 17, 2020)
- [Nexus Repository Manager: Nuget Gallery V2 Changes - Community Announcements - Sonatype Community](/content/community/t/nexus-repository-manager-nuget-gallery-v2-changes/4943/1/index.html): Microsoft has announced some changes to their Nuget.org component gallery. Sonatype has made efforts to insulate you from these changes, but some irreversible changes are taking place, especially for older clients. If yo&hellip; (282 words, Sep 17, 2020)
- [New Add Waiver Page - Coming Release 98 - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/new-add-waiver-page-coming-release-98/4942/index.html): Summary 
We’re excited to announce a long-awaited update to our waivers experience within Nexus Lifecycle. To bridge the gap between the current Application Scan Report and the new Violation Details page, users will now &hellip; (435 words, Sep 16, 2020)
- [New Add Waiver Page - Coming Release 98 - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/new-add-waiver-page-coming-release-98/4942/1/index.html): Summary 
We’re excited to announce a long-awaited update to our waivers experience within Nexus Lifecycle. To bridge the gap between the current Application Scan Report and the new Violation Details page, users will now &hellip; (434 words, Sep 16, 2020)
- [Lifecycle UI Tour Video - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/lifecycle-ui-tour-video/4938/2/index.html): This video provides a quick walkthrough of the Nexus Lifecycle user interface—designed to help new users understand what they’re seeing and how to get started. 
Check it out here: (154 words, Sep 15, 2020)
- [Lifecycle UI Tour Video - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/lifecycle-ui-tour-video/4938/index.html): This video provides a quick walkthrough of the Nexus Lifecycle user interface—designed to help new users understand what they’re seeing and how to get started. 
Check it out here: (167 words, Sep 15, 2020)
- [Lifecycle UI Tour Video - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/lifecycle-ui-tour-video/4938/1/index.html): This video provides a quick walkthrough of the Nexus Lifecycle user interface—designed to help new users understand what they’re seeing and how to get started. 
Check it out here: (157 words, Sep 15, 2020)
- [Update Your IQ Server License Threat Groups - Sonatype Labs - Sonatype Community](/content/community/t/update-your-iq-server-license-threat-groups/3094/7/index.html): The license threat group updater will apply the latest Sonatype provided license classification to your running IQ server’s license threat groups. This will alleviate any “License Threat Group not Assigned” policy violat&hellip; (691 words, Sep 11, 2020)
- [Pre processing for golang packages - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/pre-processing-for-golang-packages/4759/2/index.html): Could you please help us with below query. 
Package golang.org/x/text : MinIO already uses the version v0.3.3, but is being reported as vulnerability in IQ scan. 
Can Sonatype provide some pre-processing for Go component&hellip; (109 words, Sep 9, 2020)
- [Important .net scanning update - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/important-net-scanning-update/4888/index.html): Summary 
In July, IQ Server release 95 introduced updates to our .Net scanning and already one third of our customers are taking advantage of this enhancement, which includes our new pecoff data. The improved pecoff data&hellip; (673 words, Sep 8, 2020)
- [Important .net scanning update - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/important-net-scanning-update/4888/1/index.html): Summary 
In July, IQ Server release 95 introduced updates to our .Net scanning and already one third of our customers are taking advantage of this enhancement, which includes our new pecoff data. The improved pecoff data&hellip; (671 words, Sep 8, 2020)
- [Nexus IQ for Eclipse IDE - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/nexus-iq-for-eclipse-ide/4760/2/index.html): HI , 
I have Nexus IQ plugin installed on Eclipse IDE ,  setup the connection to the URL and installed certs, however its not evaluating any of the components its just blank? 
any suggestions? (80 words, Sep 8, 2020)
- [Violation is being reported each time the pipeline runs even after being waived - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/violation-is-being-reported-each-time-the-pipeline-runs-even-after-being-waived/4881/index.html): IQ Server reports violation even after the waiver 
This is only identified when it is in a war format when the files are scanned “unzipped” then this dependency is not reported. (53 words, Sep 7, 2020)
- [Violation is being reported each time the pipeline runs even after being waived - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/violation-is-being-reported-each-time-the-pipeline-runs-even-after-being-waived/4881/1/index.html): IQ Server reports violation even after the waiver 
This is only identified when it is in a war format when the files are scanned “unzipped” then this dependency is not reported. (131 words, Sep 7, 2020)
- [Ovrriding policies defined at root level - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/ovrriding-policies-defined-at-root-level/4864/2/index.html): My queries: 
(1) whether user can override root polices at his application level. Lets say for particular vulnerability or license type we have defined “warning” at root level but user want to override to “failure” for h&hellip; (152 words, Sep 3, 2020)
- [Update Your IQ Server License Threat Groups - Sonatype Labs - Sonatype Community](/content/community/t/update-your-iq-server-license-threat-groups/3094/6/index.html): The license threat group updater will apply the latest Sonatype provided license classification to your running IQ server’s license threat groups. This will alleviate any “License Threat Group not Assigned” policy violat&hellip; (5,143 words, Sep 3, 2020)
- [Update Your IQ Server License Threat Groups - Sonatype Labs - Sonatype Community](/content/community/t/update-your-iq-server-license-threat-groups/3094/5/index.html): The license threat group updater will apply the latest Sonatype provided license classification to your running IQ server’s license threat groups. This will alleviate any “License Threat Group not Assigned” policy violat&hellip; (5,148 words, Sep 2, 2020)
- [Ovrriding policies defined at root level - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/ovrriding-policies-defined-at-root-level/4864/index.html): My queries: 
(1) whether user can override root polices at his application level. Lets say for particular vulnerability or license type we have defined “warning” at root level but user want to override to “failure” for h&hellip; (152 words, Sep 2, 2020)
- [Deduplicate Maven artifacts across multiple repositories - Sonatype Nexus Repository - Sonatype Community](/content/community/t/deduplicate-maven-artifacts-across-multiple-repositories/4838/2/index.html): Is there any recommended ways to deduplicate maven artifacts across multiple repositories? 
We have inherited a Nexus 3 Repository Manager where thre are lot of release artifacts duplicated across multiple repositories d&hellip; (159 words, Sep 1, 2020)
- [IQ Cookies Breaking Change Notice - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/iq-cookies-breaking-change-notice/4747/2/index.html): Hi all, 
Whats happening and why 
I wanted to send out an informational notice regarding an issue we recently discovered with IQ’s settings for SameSite cookies. Due to browsers progressively changing the way cookies are&hellip; (181 words, Aug 27, 2020)
- [OSS Index SSL Cert wrong - Sonatype Exchange / Sonatype Exchange Discussion - Sonatype Community](/content/community/t/oss-index-ssl-cert-wrong/4831/3/index.html): I’m getting an invalid HTTPS certificate when trying to get to https://ossindex.sonatype.org.  This is blocking a lot of our builds.  It’s coming back with a cert for http://stage.ossindex.sonatype.org 
Could anybody at &hellip; (100 words, Aug 27, 2020)
- [Deduplicate Maven artifacts across multiple repositories - Sonatype Nexus Repository - Sonatype Community](/content/community/t/deduplicate-maven-artifacts-across-multiple-repositories/4838/index.html): Is there any recommended ways to deduplicate maven artifacts across multiple repositories? 
We have inherited a Nexus 3 Repository Manager where thre are lot of release artifacts duplicated across multiple repositories d&hellip; (157 words, Aug 27, 2020)
- [Deduplicate Maven artifacts across multiple repositories - Sonatype Nexus Repository - Sonatype Community](/content/community/t/deduplicate-maven-artifacts-across-multiple-repositories/4838/1/index.html): Is there any recommended ways to deduplicate maven artifacts across multiple repositories? 
We have inherited a Nexus 3 Repository Manager where thre are lot of release artifacts duplicated across multiple repositories d&hellip; (161 words, Aug 27, 2020)
- [OSS Index SSL Cert wrong - Sonatype Exchange / Sonatype Exchange Discussion - Sonatype Community](/content/community/t/oss-index-ssl-cert-wrong/4831/index.html): I’m getting an invalid HTTPS certificate when trying to get to https://ossindex.sonatype.org.  This is blocking a lot of our builds.  It’s coming back with a cert for http://stage.ossindex.sonatype.org 
Could anybody at &hellip; (100 words, Aug 26, 2020)
- [OSS Index SSL Cert wrong - Sonatype Exchange / Sonatype Exchange Discussion - Sonatype Community](/content/community/t/oss-index-ssl-cert-wrong/4831/1/index.html): I’m getting an invalid HTTPS certificate when trying to get to https://ossindex.sonatype.org.  This is blocking a lot of our builds.  It’s coming back with a cert for http://stage.ossindex.sonatype.org 
Could anybody at &hellip; (111 words, Aug 26, 2020)
- [Need info on Nexus IQ server trial setup - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/need-info-on-nexus-iq-server-trial-setup/4768/2/index.html): Is there any trial version of Nexus IQ server available? 
Nexus IQ server supports Firewall, Lifecycle &amp; Auditor. Do i need to use 3 different .lic file to access these 3 different products or will all 3 be sharing the s&hellip; (89 words, Aug 25, 2020)
- [Scheduled Maintenance Downtime at 7pm EDT - Community Announcements - Sonatype Community](/content/community/t/scheduled-maintenance-downtime-at-7pm-edt/4772/8/index.html): Starting around 7:00 PM EDT, the Community forum will be brought offline to perform necessary maintenance and upgrades. (96 words, Aug 25, 2020)
- [Support for Automatic Pull Requests of Internal Repos with GitLab - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/support-for-automatic-pull-requests-of-internal-repos-with-gitlab/4771/2/index.html): We have a large organization, and use GitLab Internal Repos so that we don’t have to provide fine-grained access for our developers to be able to read the code of the counterparts or coordinating services or systems. If &hellip; (301 words, Aug 24, 2020)
- [Scheduled Maintenance Downtime at 7pm EDT - Community Announcements - Sonatype Community](/content/community/t/scheduled-maintenance-downtime-at-7pm-edt/4772/index.html): Starting around 7:00 PM EDT, the Community forum will be brought offline to perform necessary maintenance and upgrades. (172 words, Aug 24, 2020)
- [Scheduled Maintenance Downtime at 7pm EDT - Community Announcements - Sonatype Community](/content/community/t/scheduled-maintenance-downtime-at-7pm-edt/4772/1/index.html): Starting around 7:00 PM EDT, the Community forum will be brought offline to perform necessary maintenance and upgrades. (167 words, Aug 24, 2020)
- [Support for Automatic Pull Requests of Internal Repos with GitLab - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/support-for-automatic-pull-requests-of-internal-repos-with-gitlab/4771/index.html): We have a large organization, and use GitLab Internal Repos so that we don’t have to provide fine-grained access for our developers to be able to read the code of the counterparts or coordinating services or systems. If &hellip; (196 words, Aug 24, 2020)
- [Support for Automatic Pull Requests of Internal Repos with GitLab - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/support-for-automatic-pull-requests-of-internal-repos-with-gitlab/4771/1/index.html): We have a large organization, and use GitLab Internal Repos so that we don’t have to provide fine-grained access for our developers to be able to read the code of the counterparts or coordinating services or systems. If &hellip; (308 words, Aug 24, 2020)
- [Need info on Nexus IQ server trial setup - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/need-info-on-nexus-iq-server-trial-setup/4768/index.html): Is there any trial version of Nexus IQ server available? 
Nexus IQ server supports Firewall, Lifecycle &amp; Auditor. Do i need to use 3 different .lic file to access these 3 different products or will all 3 be sharing the s&hellip; (86 words, Aug 24, 2020)
- [Need info on Nexus IQ server trial setup - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/need-info-on-nexus-iq-server-trial-setup/4768/1/index.html): Is there any trial version of Nexus IQ server available? 
Nexus IQ server supports Firewall, Lifecycle &amp; Auditor. Do i need to use 3 different .lic file to access these 3 different products or will all 3 be sharing the s&hellip; (172 words, Aug 24, 2020)
- [Nexus IQ for Eclipse IDE - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/nexus-iq-for-eclipse-ide/4760/index.html): HI , 
I have Nexus IQ plugin installed on Eclipse IDE ,  setup the connection to the URL and installed certs, however its not evaluating any of the components its just blank? 
any suggestions? (201 words, Aug 20, 2020)
- [Nexus IQ for Eclipse IDE - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/nexus-iq-for-eclipse-ide/4760/1/index.html): HI , 
I have Nexus IQ plugin installed on Eclipse IDE ,  setup the connection to the URL and installed certs, however its not evaluating any of the components its just blank? 
any suggestions? (180 words, Aug 20, 2020)
- [Pre processing for golang packages - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/pre-processing-for-golang-packages/4759/index.html): Could you please help us with below query. 
Package golang.org/x/text : MinIO already uses the version v0.3.3, but is being reported as vulnerability in IQ scan. 
Can Sonatype provide some pre-processing for Go component&hellip; (109 words, Aug 20, 2020)
- [Pre processing for golang packages - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/pre-processing-for-golang-packages/4759/1/index.html): Could you please help us with below query. 
Package golang.org/x/text : MinIO already uses the version v0.3.3, but is being reported as vulnerability in IQ scan. 
Can Sonatype provide some pre-processing for Go component&hellip; (109 words, Aug 20, 2020)
- [Failure servicing: PUT ArrayIndexOutOfBoundsException - Sonatype Nexus Repository - Sonatype Community](/content/community/t/failure-servicing-put-arrayindexoutofboundsexception/4754/index.html): Hello together, 
We have an issue that the maven deploy task fails quite often with an error 500. 
As is can see, these files are accessible in our nexus repositories, so the actual file deployment works. But it seems as&hellip; (685 words, Aug 20, 2020)
- [Failure servicing: PUT ArrayIndexOutOfBoundsException - Sonatype Nexus Repository - Sonatype Community](/content/community/t/failure-servicing-put-arrayindexoutofboundsexception/4754/1/index.html): Hello together, 
We have an issue that the maven deploy task fails quite often with an error 500. 
As is can see, these files are accessible in our nexus repositories, so the actual file deployment works. But it seems as&hellip; (859 words, Aug 20, 2020)
- [Update Your IQ Server License Threat Groups - Sonatype Labs - Sonatype Community](/content/community/t/update-your-iq-server-license-threat-groups/3094/4/index.html): The license threat group updater will apply the latest Sonatype provided license classification to your running IQ server’s license threat groups. This will alleviate any “License Threat Group not Assigned” policy violat&hellip; (5,154 words, Aug 18, 2020)
- [IQ Cookies Breaking Change Notice - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/iq-cookies-breaking-change-notice/4747/1/index.html): Hi all, 
Whats happening and why 
I wanted to send out an informational notice regarding an issue we recently discovered with IQ’s settings for SameSite cookies. Due to browsers progressively changing the way cookies are&hellip; (184 words, Aug 17, 2020)
- [Official REST API client for the JVM - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/official-rest-api-client-for-the-jvm/4727/index.html): Hi there, 
I’m wondering whether there’s an official (and Open Source) client library for the JVM (i.e. Java, Kotlin) to interact with the Nexus IQ REST API to get automation going quickly? And if there is no such ready-&hellip; (250 words, Aug 10, 2020)
- [Official REST API client for the JVM - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/official-rest-api-client-for-the-jvm/4727/1/index.html): Hi there, 
I’m wondering whether there’s an official (and Open Source) client library for the JVM (i.e. Java, Kotlin) to interact with the Nexus IQ REST API to get automation going quickly? And if there is no such ready-&hellip; (146 words, Aug 10, 2020)
- [Why I get a 502 error when I'm going to get maven-metadata.xml from URL of a Nexus Repository? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/why-i-get-a-502-error-when-im-going-to-get-maven-metadata-xml-from-url-of-a-nexus-repository/4725/2/index.html): Hello to everyone, 
I’m asking to you an issue that I’m meeting inside Nexus. 
We’re trying to get a maven-metadata.xml file from one of our Repository, IAP_Snapshots, from this link: https://iap.bmwgroup.net/nexus/repos&hellip; (124 words, Aug 7, 2020)
- [Nexus IQ for Azure DevOps not finding nupkg files - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/nexus-iq-for-azure-devops-not-finding-nupkg-files/4699/2/index.html): I have a .net core application for which I’m trying to add Sonatype scanning. I have the following task definition running on an ubuntu Azure DevOps build agent: 
- task: NexusIqPipelineTask@1
              displayName: &hellip; (490 words, Aug 7, 2020)
- [Why I get a 502 error when I'm going to get maven-metadata.xml from URL of a Nexus Repository? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/why-i-get-a-502-error-when-im-going-to-get-maven-metadata-xml-from-url-of-a-nexus-repository/4725/index.html): Hello to everyone, 
I’m asking to you an issue that I’m meeting inside Nexus. 
We’re trying to get a maven-metadata.xml file from one of our Repository, IAP_Snapshots, from this link: https://iap.bmwgroup.net/nexus/repos&hellip; (180 words, Aug 7, 2020)
- [Why I get a 502 error when I'm going to get maven-metadata.xml from URL of a Nexus Repository? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/why-i-get-a-502-error-when-im-going-to-get-maven-metadata-xml-from-url-of-a-nexus-repository/4725/1/index.html): Hello to everyone, 
I’m asking to you an issue that I’m meeting inside Nexus. 
We’re trying to get a maven-metadata.xml file from one of our Repository, IAP_Snapshots, from this link: https://iap.bmwgroup.net/nexus/repos&hellip; (124 words, Aug 7, 2020)
- [Success Metrics Scanning Anomaly Fix in Upcoming Release - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/success-metrics-scanning-anomaly-fix-in-upcoming-release/4701/index.html): Greetings all, 
This post is intended to be an informative announcement regarding a bug fix we are rolling out for Success Metrics. We recently discovered an anomaly with the number of “scans” returned by the Success Met&hellip; (341 words, Jul 30, 2020)
- [Success Metrics Scanning Anomaly Fix in Upcoming Release - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/success-metrics-scanning-anomaly-fix-in-upcoming-release/4701/1/index.html): Greetings all, 
This post is intended to be an informative announcement regarding a bug fix we are rolling out for Success Metrics. We recently discovered an anomaly with the number of “scans” returned by the Success Met&hellip; (303 words, Jul 30, 2020)
- [Nexus IQ for Azure DevOps not finding nupkg files - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/nexus-iq-for-azure-devops-not-finding-nupkg-files/4699/index.html): I have a .net core application for which I’m trying to add Sonatype scanning. I have the following task definition running on an ubuntu Azure DevOps build agent: 
- task: NexusIqPipelineTask@1
              displayName: &hellip; (494 words, Jul 29, 2020)
- [Nexus IQ for Azure DevOps not finding nupkg files - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/nexus-iq-for-azure-devops-not-finding-nupkg-files/4699/1/index.html): I have a .net core application for which I’m trying to add Sonatype scanning. I have the following task definition running on an ubuntu Azure DevOps build agent: 
- task: NexusIqPipelineTask@1
              displayName: &hellip; (494 words, Jul 29, 2020)
- [[nexus-iq-cli] The pattern of the Target option is not supported on Windows - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/nexus-iq-cli-the-pattern-of-the-target-option-is-not-supported-on-windows/4694/index.html): We are trying to launch a scan using nexus-iq-cli-1.96.0-01 on Windows Server, but we got : 
[ERROR] The input path &#39;C:\\GitLab-Runner\builds\packages\**\*.nupkg&#39; does not exist. 
The command launched looks like : 
java &hellip; (109 words, Jul 29, 2020)
- [[nexus-iq-cli] The pattern of the Target option is not supported on Windows - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/nexus-iq-cli-the-pattern-of-the-target-option-is-not-supported-on-windows/4694/1/index.html): We are trying to launch a scan using nexus-iq-cli-1.96.0-01 on Windows Server, but we got : 
[ERROR] The input path &#39;C:\\GitLab-Runner\builds\packages\**\*.nupkg&#39; does not exist. 
The command launched looks like : 
java &hellip; (109 words, Jul 29, 2020)
- [IQ / SCM Support for Azure DevOps? - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/iq-scm-support-for-azure-devops/4692/index.html): I see that IQ Server currently supports SCM integration for GitLab, GitHub, and BitBucket… 
Does anyone know if there’s support coming for Azure DevOps? 
Would love to see the same level of integration here… Would help d&hellip; (185 words, Jul 26, 2020)
- [IQ / SCM Support for Azure DevOps? - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/iq-scm-support-for-azure-devops/4692/1/index.html): I see that IQ Server currently supports SCM integration for GitLab, GitHub, and BitBucket… 
Does anyone know if there’s support coming for Azure DevOps? 
Would love to see the same level of integration here… Would help d&hellip; (186 words, Jul 26, 2020)
- [Run nexus3 sonatype in production oss version - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/run-nexus3-sonatype-in-production-oss-version/4671/2/index.html): Hi , 
I ll like to know what is the best practice to run nexus3 in production oss version , 
how to calculate sizing , and also how to configure the HEAP size how to calculate it ? 
also ill like to know what is the best&hellip; (87 words, Jul 22, 2020)
- [VMware Tanzu Service Broker Support for Platform - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/vmware-tanzu-service-broker-support-for-platform/4672/index.html): The service broker is the integration point for the Tanzu offering. Tanzu includes the acquired Pivotal product suite. (93 words, Jul 21, 2020)
- [VMware Tanzu Service Broker Support for Platform - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/vmware-tanzu-service-broker-support-for-platform/4672/1/index.html): The service broker is the integration point for the Tanzu offering. Tanzu includes the acquired Pivotal product suite. (93 words, Jul 21, 2020)
- [Update Your IQ Server License Threat Groups - Sonatype Labs - Sonatype Community](/content/community/t/update-your-iq-server-license-threat-groups/3094/3/index.html): The license threat group updater will apply the latest Sonatype provided license classification to your running IQ server’s license threat groups. This will alleviate any “License Threat Group not Assigned” policy violat&hellip; (5,175 words, Jul 21, 2020)
- [Run nexus3 sonatype in production oss version - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/run-nexus3-sonatype-in-production-oss-version/4671/index.html): Hi , 
I ll like to know what is the best practice to run nexus3 in production oss version , 
how to calculate sizing , and also how to configure the HEAP size how to calculate it ? 
also ill like to know what is the best&hellip; (152 words, Jul 21, 2020)
- [Run nexus3 sonatype in production oss version - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/run-nexus3-sonatype-in-production-oss-version/4671/1/index.html): Hi , 
I ll like to know what is the best practice to run nexus3 in production oss version , 
how to calculate sizing , and also how to configure the HEAP size how to calculate it ? 
also ill like to know what is the best&hellip; (92 words, Jul 21, 2020)
- [Scheduled Maintenance Downtime at 7pm EDT - Community Announcements - Sonatype Community](/content/community/t/scheduled-maintenance-downtime-at-7pm-edt/4665/5/index.html): Starting around 7:00 PM EDT, the Community forum will be brought offline to perform necessary maintenance and upgrades. (212 words, Jul 21, 2020)
- [Sonatype's Commitment to Customers and Employees During COVID-19 - Community Announcements - Sonatype Community](/content/community/t/sonatypes-commitment-to-customers-and-employees-during-covid-19/3684/3/index.html): As a Sonatype Nexus customer, your success has always been our relentless focus. In this moment, with the global spread of COVID-19, we add the health and well-being of you and your family to this concern. I am emailing &hellip; (523 words, Jul 20, 2020)
- [Scheduled Maintenance Downtime at 7pm EDT - Community Announcements - Sonatype Community](/content/community/t/scheduled-maintenance-downtime-at-7pm-edt/4665/index.html): Starting around 7:00 PM EDT, the Community forum will be brought offline to perform necessary maintenance and upgrades. (105 words, Jul 20, 2020)
- [Scheduled Maintenance Downtime at 7pm EDT - Community Announcements - Sonatype Community](/content/community/t/scheduled-maintenance-downtime-at-7pm-edt/4665/1/index.html): Starting around 7:00 PM EDT, the Community forum will be brought offline to perform necessary maintenance and upgrades. (227 words, Jul 20, 2020)
- [[Coming Soon] Changes to Root Organization Migration - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/coming-soon-changes-to-root-organization-migration/4615/index.html): Root organizations were introduced into IQ Server from v1.18 onwards, which included a feature that provided an opt-in migration so you could either select an empty Root Organization (no policies) or an existing organiza&hellip; (184 words, Jul 14, 2020)
- [[Coming Soon] Changes to Root Organization Migration - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/coming-soon-changes-to-root-organization-migration/4615/1/index.html): Root organizations were introduced into IQ Server from v1.18 onwards, which included a feature that provided an opt-in migration so you could either select an empty Root Organization (no policies) or an existing organiza&hellip; (184 words, Jul 14, 2020)
- [More flexible and complete means of ex-/importing waivers, exceptions, license choices, etc - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/more-flexible-and-complete-means-of-ex-importing-waivers-exceptions-license-choices-etc/4613/index.html): A customer acknowledged the ability to export policies, described here: 


However, they wish the API went further to extract and inject data from one environment to seed another. (156 words, Jul 14, 2020)
- [More flexible and complete means of ex-/importing waivers, exceptions, license choices, etc - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/more-flexible-and-complete-means-of-ex-importing-waivers-exceptions-license-choices-etc/4613/1/index.html): A customer acknowledged the ability to export policies, described here: 


However, they wish the API went further to extract and inject data from one environment to seed another. (114 words, Jul 14, 2020)
- [Add and enable Rut Auth capability using scripting API - Sonatype Nexus Repository - Sonatype Community](/content/community/t/add-and-enable-rut-auth-capability-using-scripting-api/657/9/index.html): Hello 
I’m trying to add Rut Auth capability and enable Rut Auth realm using scripting API. But I haven’t found anything useful yet. The documentation examples are for repositories. Is there any way to add Rut Auth capab&hellip; (541 words, Jul 9, 2020)
- [Enhancements to Nuget (.NET) Scanning in Nexus Lifecycle - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/enhancements-to-nuget-net-scanning-in-nexus-lifecycle/4569/index.html): If you updated to IQ 95 recently, you might have noticed a change in your Nuget (.NET) scans in Nexus Lifecycle. As of IQ Release 95, we introduced a new data source to enhance our Nuget data, impacting how it is scanned&hellip; (495 words, Jul 7, 2020)
- [Enhancements to Nuget (.NET) Scanning in Nexus Lifecycle - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/enhancements-to-nuget-net-scanning-in-nexus-lifecycle/4569/1/index.html): If you updated to IQ 95 recently, you might have noticed a change in your Nuget (.NET) scans in Nexus Lifecycle. As of IQ Release 95, we introduced a new data source to enhance our Nuget data, impacting how it is scanned&hellip; (495 words, Jul 7, 2020)
- [Comments in PDF Report - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/comments-in-pdf-report/4530/4/index.html): When we add a comment in the Vulnerabilities section of the component, while it’s visible in the Audit Log tab, it doesn’t show up in the PDF export.  We include the PDFs in our releases so it would be very useful if the&hellip; (193 words, Jul 2, 2020)
- [Comments in PDF Report - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/comments-in-pdf-report/4530/index.html): When we add a comment in the Vulnerabilities section of the component, while it’s visible in the Audit Log tab, it doesn’t show up in the PDF export.  We include the PDFs in our releases so it would be very useful if the&hellip; (193 words, Jul 1, 2020)
- [Comments in PDF Report - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/comments-in-pdf-report/4530/1/index.html): When we add a comment in the Vulnerabilities section of the component, while it’s visible in the Audit Log tab, it doesn’t show up in the PDF export.  We include the PDFs in our releases so it would be very useful if the&hellip; (193 words, Jul 1, 2020)
- [Ignore layer.tar in Lifecycle Scans - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/ignore-layer-tar-in-lifecycle-scans/3746/2/index.html): I am running Lifecycle scans on Docker images that are tarballed for Lifecycle to scan. It seems from the documentation here (Containers in IQ Server - Sonatype Guides) that there are many layer.tar created to facilitate&hellip; (268 words, Jun 29, 2020)
- [Report Page paging - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/report-page-paging/4518/index.html): In Nexus IQ release 95 we have introduced a paging mechanism to the Report Page section. The main objective of this change was to improve the overall performance of this section. 
Previous to this change the view retriev&hellip; (182 words, Jun 29, 2020)
- [Report Page paging - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/report-page-paging/4518/1/index.html): In Nexus IQ release 95 we have introduced a paging mechanism to the Report Page section. The main objective of this change was to improve the overall performance of this section. 
Previous to this change the view retriev&hellip; (178 words, Jun 29, 2020)
- [Updated landing page in Nexus Lifecycle - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/updated-landing-page-in-nexus-lifecycle/4500/index.html): In a future release of IQ Server we will be making changes to the homepage of Nexus Lifecycle. After logging in, you will notice a new default landing/home page. The new landing page will be the Report page. This page do&hellip; (184 words, Jun 25, 2020)
- [Updated landing page in Nexus Lifecycle - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/updated-landing-page-in-nexus-lifecycle/4500/1/index.html): In a future release of IQ Server we will be making changes to the homepage of Nexus Lifecycle. After logging in, you will notice a new default landing/home page. The new landing page will be the Report page. This page do&hellip; (193 words, Jun 25, 2020)
- [SAML handle user logout - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/saml-handle-user-logout/4477/2/index.html): Customer:  Our SecureAuth guys are saying Sonatype is not correctly logging off the user.  We can log in, but logging off is not closing the SecureAuth session.  They want to know if you support the logout function.  The&hellip; (231 words, Jun 24, 2020)
- [SAML handle user logout - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/saml-handle-user-logout/4477/index.html): Customer:  Our SecureAuth guys are saying Sonatype is not correctly logging off the user.  We can log in, but logging off is not closing the SecureAuth session.  They want to know if you support the logout function.  The&hellip; (311 words, Jun 22, 2020)
- [SAML handle user logout - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/saml-handle-user-logout/4477/1/index.html): Customer:  Our SecureAuth guys are saying Sonatype is not correctly logging off the user.  We can log in, but logging off is not closing the SecureAuth session.  They want to know if you support the logout function.  The&hellip; (231 words, Jun 22, 2020)
- [IDE Plugins: Add the ability to filter on vulnerability or license violations - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/ide-plugins-add-the-ability-to-filter-on-vulnerability-or-license-violations/4473/index.html): For the IDE plugins, there should be a way to filter based on license or vulnerability violations. There are many use cases where the developer only cares about vulnerabilities and licensing my be being worked out by leg&hellip; (151 words, Jun 22, 2020)
- [IDE Plugins: Add the ability to filter on vulnerability or license violations - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/ide-plugins-add-the-ability-to-filter-on-vulnerability-or-license-violations/4473/1/index.html): For the IDE plugins, there should be a way to filter based on license or vulnerability violations. There are many use cases where the developer only cares about vulnerabilities and licensing my be being worked out by leg&hellip; (181 words, Jun 22, 2020)
- [Nexus Repository Manager - Private Repositories and Anonymous User Permissions - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/nexus-repository-manager-private-repositories-and-anonymous-user-permissions/4455/index.html): I received this customer question today. 

When adding a private repository, how can I require authentication for that repository? 

There are two parts to the answer: 

Requiring Authentication
Once authenticated, requi&hellip; (694 words, Jun 18, 2020)
- [Nexus Repository Manager - Private Repositories and Anonymous User Permissions - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/nexus-repository-manager-private-repositories-and-anonymous-user-permissions/4455/1/index.html): I received this customer question today. 

When adding a private repository, how can I require authentication for that repository? 

There are two parts to the answer: 

Requiring Authentication
Once authenticated, requi&hellip; (694 words, Jun 18, 2020)
- [NEW in Nexus Lifecycle: Policy Violations Page - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/new-in-nexus-lifecycle-policy-violations-page/4453/index.html): Policy violations are key to managing, understanding, and remediating open source risk across your organization’s applications. The more awareness you have around your violations - associated components, violation severi&hellip; (600 words, Jun 18, 2020)
- [NEW in Nexus Lifecycle: Policy Violations Page - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/new-in-nexus-lifecycle-policy-violations-page/4453/1/index.html): Policy violations are key to managing, understanding, and remediating open source risk across your organization’s applications. The more awareness you have around your violations - associated components, violation severi&hellip; (613 words, Jun 18, 2020)
- [No button for edit comment and UI error when comment is too long to be displayed - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/no-button-for-edit-comment-and-ui-error-when-comment-is-too-long-to-be-displayed/4425/2/index.html): Create waiver with a long string (for example link to corporate Confluence)
Realizing that I inserted something wrong, I’m trying to remove it, but… 



There is no button :)) 
3.	As a solution - editing the html page “&hellip; (142 words, Jun 15, 2020)
- [No button for edit comment and UI error when comment is too long to be displayed - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/no-button-for-edit-comment-and-ui-error-when-comment-is-too-long-to-be-displayed/4425/index.html): Create waiver with a long string (for example link to corporate Confluence)
Realizing that I inserted something wrong, I’m trying to remove it, but… 



There is no button :)) 
3.	As a solution - editing the html page “&hellip; (142 words, Jun 15, 2020)
- [No button for edit comment and UI error when comment is too long to be displayed - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/no-button-for-edit-comment-and-ui-error-when-comment-is-too-long-to-be-displayed/4425/1/index.html): Create waiver with a long string (for example link to corporate Confluence)
Realizing that I inserted something wrong, I’m trying to remove it, but… 



There is no button :)) 
3.	As a solution - editing the html page “&hellip; (142 words, Jun 15, 2020)
- [Trial Licence - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/trial-licence/4395/2/index.html): Hello i’m new here. 
I’m wondering where could i get a trial license for Nexus IQ Server 
Thanks, 
Xander (127 words, Jun 10, 2020)
- [Trial Licence - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/trial-licence/4395/index.html): Hello i’m new here. 
I’m wondering where could i get a trial license for Nexus IQ Server 
Thanks, 
Xander (52 words, Jun 10, 2020)
- [Trial Licence - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/trial-licence/4395/1/index.html): Hello i’m new here. 
I’m wondering where could i get a trial license for Nexus IQ Server 
Thanks, 
Xander (133 words, Jun 10, 2020)
- [Legacy Application Report - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/legacy-application-report/4389/index.html): Greetings all, 
We are looking to gather feedback from customers that are still leveraging the Legacy Application Report and understand why it is being used versus other views like the Policy-centric Report of the Vulner&hellip; (270 words, Jun 9, 2020)
- [Legacy Application Report - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/legacy-application-report/4389/1/index.html): Greetings all, 
We are looking to gather feedback from customers that are still leveraging the Legacy Application Report and understand why it is being used versus other views like the Policy-centric Report of the Vulner&hellip; (214 words, Jun 9, 2020)
- [May I know the path about the IQ extension configure file for visual studio - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/may-i-know-the-path-about-the-iq-extension-configure-file-for-visual-studio/4357/index.html): We had install the extension in the visual studio, but there is a problem when we select the application, there are two many value in list. hard to find our application.  I want to know the configure file location then I&hellip; (70 words, Jun 4, 2020)
- [May I know the path about the IQ extension configure file for visual studio - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/may-i-know-the-path-about-the-iq-extension-configure-file-for-visual-studio/4357/1/index.html): We had install the extension in the visual studio, but there is a problem when we select the application, there are two many value in list. hard to find our application.  I want to know the configure file location then I&hellip; (186 words, Jun 4, 2020)
- [Rescan a Report using the API - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/rescan-a-report-using-the-api/4251/3/index.html): Hey Folks, 
Is there a way to rescan a report using the API, just the same as clicking the ‘Re-evaluate Report’ button. 
The use case I have is automatically creating waivers using the API and then rescanning the report &hellip; (165 words, May 24, 2020)
- [Direct link to a filtered Reports url - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/direct-link-to-a-filtered-reports-url/4243/2/index.html): Is there to have a direct link to a filtered Reports url in Nexus IQ 90? 
Our use case is that we need to provide a view of all the applications under an application suite. Our application suites all start with designate&hellip; (168 words, May 22, 2020)
- [PostgreSQL Database - Feedback wanted! - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/postgresql-database-feedback-wanted/4272/1/index.html): Did you know Sonatype has PostgreSQL database availability? The Nexus IQ team is looking for feedback about PostgreSQL database use and would appreciate it if you would take this survey. Please reach out to mdodgson@sona&hellip; (142 words, May 22, 2020)
- [Rescan a Report using the API - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/rescan-a-report-using-the-api/4251/index.html): Hey Folks, 
Is there a way to rescan a report using the API, just the same as clicking the ‘Re-evaluate Report’ button. 
The use case I have is automatically creating waivers using the API and then rescanning the report &hellip; (170 words, May 21, 2020)
- [Rescan a Report using the API - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/rescan-a-report-using-the-api/4251/1/index.html): Hey Folks, 
Is there a way to rescan a report using the API, just the same as clicking the ‘Re-evaluate Report’ button. 
The use case I have is automatically creating waivers using the API and then rescanning the report &hellip; (165 words, May 21, 2020)
- [How to waive a "similar" match - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/how-to-waive-a-similar-match/4244/index.html): Hi! 
One of our components are detected by IQ-Server as me.yogendra:api-demo:1.0.1 and it seems the evaluation of the component is done using me.yogendra:api-demo:1.0.1 instead of our own component. 
For example CVE-2020&hellip; (193 words, May 20, 2020)
- [How to waive a "similar" match - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/how-to-waive-a-similar-match/4244/1/index.html): Hi! 
One of our components are detected by IQ-Server as me.yogendra:api-demo:1.0.1 and it seems the evaluation of the component is done using me.yogendra:api-demo:1.0.1 instead of our own component. 
For example CVE-2020&hellip; (193 words, May 20, 2020)
- [Direct link to a filtered Reports url - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/direct-link-to-a-filtered-reports-url/4243/index.html): Is there to have a direct link to a filtered Reports url in Nexus IQ 90? 
Our use case is that we need to provide a view of all the applications under an application suite. Our application suites all start with designate&hellip; (292 words, May 19, 2020)
- [Direct link to a filtered Reports url - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/direct-link-to-a-filtered-reports-url/4243/1/index.html): Is there to have a direct link to a filtered Reports url in Nexus IQ 90? 
Our use case is that we need to provide a view of all the applications under an application suite. Our application suites all start with designate&hellip; (168 words, May 19, 2020)
- [Integration API with Nexus Repository 3 - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/integration-api-with-nexus-repository-3/161/6/index.html): Nexus Repository supports new repository formats such as Docker and Bower and introduces a fresh, clean user interface among other advantages. Adopting or upgrading repository manager often means that you need to update &hellip; (514 words, May 19, 2020)
- [Multi-factor authentication - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/multi-factor-authentication/4214/index.html): Our enterprise direction is to add multi factor authentication, the first in scope are accounts with any admin privileges. 
I see the addition of SAML has enabled SSO, but we are looking to add a token or token-pin layer&hellip; (89 words, May 14, 2020)
- [Multi-factor authentication - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/multi-factor-authentication/4214/1/index.html): Our enterprise direction is to add multi factor authentication, the first in scope are accounts with any admin privileges. 
I see the addition of SAML has enabled SSO, but we are looking to add a token or token-pin layer&hellip; (87 words, May 14, 2020)
- [Extract custom info - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/extract-custom-info/4199/3/index.html): Hi, 
Is there a way to extract some information by an API or generate a csv report to show the selected version and latest version of all the components in an application please? 
We can see this information in Component&hellip; (139 words, May 13, 2020)
- [Extract custom info - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/extract-custom-info/4199/2/index.html): Hi, 
Is there a way to extract some information by an API or generate a csv report to show the selected version and latest version of all the components in an application please? 
We can see this information in Component&hellip; (141 words, May 13, 2020)
- [Extract custom info - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/extract-custom-info/4199/1/index.html): Hi, 
Is there a way to extract some information by an API or generate a csv report to show the selected version and latest version of all the components in an application please? 
We can see this information in Component&hellip; (144 words, May 12, 2020)
- [How to scan Nexus Lifecycle for C++ applications based on release 86 - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/how-to-scan-nexus-lifecycle-for-c-applications-based-on-release-86/4077/3/index.html): Please do let me know if anyone worked in implementing this. (185 words, May 11, 2020)
- [Jenkins pipeline to execute nexusPolicyEvaluation for .net Application - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/jenkins-pipeline-to-execute-nexuspolicyevaluation-for-net-application/975/2/index.html): Hi Team, 
I’m Invoking a Jenkins Pipeline Script as 
nexusPolicyEvaluation iqApplication: ‘DotNetApp’, iqStage: &#39;build’ 
but, Unable to find any component scan for .Net Application. 
Looking solution for “How to integrat&hellip; (122 words, May 11, 2020)
- [How to trigger IQ scan on uplaod of artifact in Nexus Repository - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/how-to-trigger-iq-scan-on-uplaod-of-artifact-in-nexus-repository/2340/2/index.html): Hi, 
Can we trigger IQ scan on upload of artefact in nexus repository? 
Thanks (198 words, May 11, 2020)
- [How to run Nexus IQ scan asynchronously - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/how-to-run-nexus-iq-scan-asynchronously/3726/2/index.html): Hi, 
I have 50+ java jenkins build and want to run Nexus IQ scan for these builds. So how can i run this scan asynchronously for each jenkins build? OR how can i run this scan for all the builds in single shot? 
My probl&hellip; (162 words, May 11, 2020)
- [High-availability cofiguration of Nexus IQ - Sonatype Lifecycle & Repository Firewall / Best Practices - Sonatype Community](/content/community/t/high-availability-cofiguration-of-nexus-iq/1424/2/index.html): During last maintenance of Nexus IQ server (update to the latest version and fix some configuration issues) I saw a lot of failes of DevOps pipelines. The root cause was unable  to download dependencies from proxy reposi&hellip; (538 words, May 11, 2020)
- [Nexus IQ for Azure DevOps not working on proxy - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/nexus-iq-for-azure-devops-not-working-on-proxy/4068/5/index.html): We have an on-prem Azure DevOps environment at my company, but there seems to be an issue that the plugin is not working on-proxy, would you give feedback for how to setup the plugin within a proxy environment? (216 words, May 11, 2020)
- [Nexus IQ Jenkins Platform Plugin - tmp cleanup - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/nexus-iq-jenkins-platform-plugin-tmp-cleanup/4144/2/index.html): Hello everyone, 
we’re using Nexus Platform Plugin 3.8.20200310-130318.c482b58 on Jenkins 2.222.1. 
We’re experiencing an issue, that scan results appear in the /tmp directory (files scan*.xml.gz) but won’t be cleaned up&hellip; (191 words, May 7, 2020)
- [Nexus IQ Jenkins Platform Plugin - tmp cleanup - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/nexus-iq-jenkins-platform-plugin-tmp-cleanup/4144/index.html): Hello everyone, 
we’re using Nexus Platform Plugin 3.8.20200310-130318.c482b58 on Jenkins 2.222.1. 
We’re experiencing an issue, that scan results appear in the /tmp directory (files scan*.xml.gz) but won’t be cleaned up&hellip; (216 words, May 7, 2020)
- [Nexus IQ Jenkins Platform Plugin - tmp cleanup - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/nexus-iq-jenkins-platform-plugin-tmp-cleanup/4144/1/index.html): Hello everyone, 
we’re using Nexus Platform Plugin 3.8.20200310-130318.c482b58 on Jenkins 2.222.1. 
We’re experiencing an issue, that scan results appear in the /tmp directory (files scan*.xml.gz) but won’t be cleaned up&hellip; (169 words, May 7, 2020)
- [How to scan Nexus Lifecycle for C++ applications based on release 86 - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/how-to-scan-nexus-lifecycle-for-c-applications-based-on-release-86/4077/index.html): Please do let me know if anyone worked in implementing this. (191 words, May 4, 2020)
- [How to scan Nexus Lifecycle for C++ applications based on release 86 - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/how-to-scan-nexus-lifecycle-for-c-applications-based-on-release-86/4077/1/index.html): Please do let me know if anyone worked in implementing this. (188 words, May 4, 2020)
- [Nexus IQ for Azure DevOps not working on proxy - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/nexus-iq-for-azure-devops-not-working-on-proxy/4068/index.html): We have an on-prem Azure DevOps environment at my company, but there seems to be an issue that the plugin is not working on-proxy, would you give feedback for how to setup the plugin within a proxy environment? (175 words, May 4, 2020)
- [Nexus IQ server backup using what utility? - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/nexus-iq-server-backup-using-what-utility/4046/3/index.html): How do we backup  the nexus iq server. There is no task schedular like nexus repository manager. could anyone pls let me know the utility to back the nexus iq server. (187 words, May 1, 2020)
- [400 Repository version policy: SNAPSHOT does not allow version: 3.0.0 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/400-repository-version-policy-snapshot-does-not-allow-version-3-0-0/4053/2/index.html): Hi I am trying to integrate my new nexus repository manager 3 in jenkins and I am getting following error: 
Plugin org.apache.maven.plugins:maven-checkstyle-plugin:3.0.0 or one of its dependencies could not be resolved: &hellip; (140 words, May 1, 2020)
- [400 Repository version policy: SNAPSHOT does not allow version: 3.0.0 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/400-repository-version-policy-snapshot-does-not-allow-version-3-0-0/4053/1/index.html): Hi I am trying to integrate my new nexus repository manager 3 in jenkins and I am getting following error: 
Plugin org.apache.maven.plugins:maven-checkstyle-plugin:3.0.0 or one of its dependencies could not be resolved: &hellip; (143 words, May 1, 2020)
- [Nexus IQ server backup using what utility? - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/nexus-iq-server-backup-using-what-utility/4046/index.html): How do we backup  the nexus iq server. There is no task schedular like nexus repository manager. could anyone pls let me know the utility to back the nexus iq server. (187 words, Apr 30, 2020)
- [Nexus IQ server backup using what utility? - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/nexus-iq-server-backup-using-what-utility/4046/1/index.html): How do we backup  the nexus iq server. There is no task schedular like nexus repository manager. could anyone pls let me know the utility to back the nexus iq server. (187 words, Apr 30, 2020)
- [Node.js support through the Nexus IQ IDE plugins - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/node-js-support-through-the-nexus-iq-ide-plugins/4014/3/index.html): Will Node.js be supported under the Nexus IQ IDE plug-ins (Intellij, Eclipse)?  If so, where is it on the backlog (when might we expect to see it)? 
Thanks, 
Steve (286 words, Apr 29, 2020)
- [A New Way to View PDF Reports in Nexus Lifecycle - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/a-new-way-to-view-pdf-reports-in-nexus-lifecycle/3579/8/index.html): Summary 
Within the next month, you will notice an update to your PDF reporting generated in Nexus Lifecycle. We’ve updated the report’s look and feel, as well as consolidated the report from seven to four sections to be&hellip; (1,176 words, Apr 28, 2020)
- [Node.js support through the Nexus IQ IDE plugins - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/node-js-support-through-the-nexus-iq-ide-plugins/4014/index.html): Will Node.js be supported under the Nexus IQ IDE plug-ins (Intellij, Eclipse)?  If so, where is it on the backlog (when might we expect to see it)? 
Thanks, 
Steve (280 words, Apr 24, 2020)
- [Node.js support through the Nexus IQ IDE plugins - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/node-js-support-through-the-nexus-iq-ide-plugins/4014/1/index.html): Will Node.js be supported under the Nexus IQ IDE plug-ins (Intellij, Eclipse)?  If so, where is it on the backlog (when might we expect to see it)? 
Thanks, 
Steve (287 words, Apr 24, 2020)
- [Upgraded to 3.22.0-02 BUG: How can I edit existing Task script code, or creation a new Task script? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/upgraded-to-3-22-0-02-bug-how-can-i-edit-existing-task-script-code-or-creation-a-new-task-script/3991/1/index.html): Hi friends 
We upgraded Nexus to version 3.22.0-02 and followed the Nexus guidelines ( https://support.sonatype.com/hc/en-us/articles/360045220393-Scripting-Nexus-Repository-Manager-3 ) to re-enable the UI CRUD and RUN o&hellip; (744 words, Apr 23, 2020)
- [Policy Type Can't Be Set on New Policy Created - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/policy-type-cant-be-set-on-new-policy-created/3979/2/index.html): When you create your own Policy in Nexus IQ, it doesn’t give you the option to set the Policy Type. This info is key when using the REST API to find either “security”,“license” or “other” policy violations. This informat&hellip; (288 words, Apr 22, 2020)
- [Azure DevOps - Nexus IQ Policy Summary not loading - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/azure-devops-nexus-iq-policy-summary-not-loading/3982/index.html): I have Azure Pipeline task defined that triggers my nexus IQ scan successfully. But when I attempt access the Nexus IQ Policy Summary, or NexusIQ Build Report I am getting a error: 
Nexus IQ for Azure DevOps by Sonatype &hellip; (280 words, Apr 22, 2020)
- [Azure DevOps - Nexus IQ Policy Summary not loading - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/azure-devops-nexus-iq-policy-summary-not-loading/3982/1/index.html): I have Azure Pipeline task defined that triggers my nexus IQ scan successfully. But when I attempt access the Nexus IQ Policy Summary, or NexusIQ Build Report I am getting a error: 
Nexus IQ for Azure DevOps by Sonatype &hellip; (280 words, Apr 22, 2020)
- [Policy Type Can't Be Set on New Policy Created - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/policy-type-cant-be-set-on-new-policy-created/3979/index.html): When you create your own Policy in Nexus IQ, it doesn’t give you the option to set the Policy Type. This info is key when using the REST API to find either “security”,“license” or “other” policy violations. This informat&hellip; (291 words, Apr 22, 2020)
- [Policy Type Can't Be Set on New Policy Created - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/policy-type-cant-be-set-on-new-policy-created/3979/1/index.html): When you create your own Policy in Nexus IQ, it doesn’t give you the option to set the Policy Type. This info is key when using the REST API to find either “security”,“license” or “other” policy violations. This informat&hellip; (358 words, Apr 22, 2020)
- [Update Your IQ Server License Threat Groups - Sonatype Labs - Sonatype Community](/content/community/t/update-your-iq-server-license-threat-groups/3094/index.html): The license threat group updater will apply the latest Sonatype provided license classification to your running IQ server’s license threat groups. This will alleviate any “License Threat Group not Assigned” policy violat&hellip; (5,196 words, Apr 17, 2020)
- [Update Your IQ Server License Threat Groups - Sonatype Labs - Sonatype Community](/content/community/t/update-your-iq-server-license-threat-groups/3094/1/index.html): The license threat group updater will apply the latest Sonatype provided license classification to your running IQ server’s license threat groups. This will alleviate any “License Threat Group not Assigned” policy violat&hellip; (689 words, Apr 17, 2020)
- [Azure DevOps - Nexus IQ Extension issue with scan Targets for Java Maven - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/azure-devops-nexus-iq-extension-issue-with-scan-targets-for-java-maven/3913/index.html): Hi 
I have created Java Maven pipeline using YAML. 
Wherein i am using Nexus IQ Extension 1.2.1 for Nexus IQ Policy Evaluation 
below is the Task in my pipeline - 
- task: SonatypeIntegrations.nexus-iq-azure-extension.ne&hellip; (335 words, Apr 15, 2020)
- [Azure DevOps - Nexus IQ Extension issue with scan Targets for Java Maven - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/azure-devops-nexus-iq-extension-issue-with-scan-targets-for-java-maven/3913/1/index.html): Hi 
I have created Java Maven pipeline using YAML. 
Wherein i am using Nexus IQ Extension 1.2.1 for Nexus IQ Policy Evaluation 
below is the Task in my pipeline - 
- task: SonatypeIntegrations.nexus-iq-azure-extension.ne&hellip; (346 words, Apr 15, 2020)
- [User Feedback: PR Reviews - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/user-feedback-pr-reviews/3811/index.html): PR Reviews 
PR reviews create a PR comment with summary of violations introduced in a specific PR. Learn more at our blog. 
:white_check_mark: REPLY to give FEEDBACK! :white_check_mark: (382 words, Apr 2, 2020)
- [User Feedback: PR Reviews - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/user-feedback-pr-reviews/3811/1/index.html): PR Reviews 
PR reviews create a PR comment with summary of violations introduced in a specific PR. Learn more at our blog. 
:white_check_mark: REPLY to give FEEDBACK! :white_check_mark: (374 words, Apr 2, 2020)
- [Bundle deployment does not complete - Sonatype Nexus Repository - Sonatype Community](/content/community/t/bundle-deployment-does-not-complete/3796/10/index.html): Hi everyone, 
I am new to nexus, but I did study it quite a bit before creating this topic, however I could not find help anywhere else so I am trying here. 
I have a nexus 3 installation (running the official docker ima&hellip; (763 words, Apr 1, 2020)
- [Bundle deployment does not complete - Sonatype Nexus Repository - Sonatype Community](/content/community/t/bundle-deployment-does-not-complete/3796/index.html): Hi everyone, 
I am new to nexus, but I did study it quite a bit before creating this topic, however I could not find help anywhere else so I am trying here. 
I have a nexus 3 installation (running the official docker ima&hellip; (763 words, Apr 1, 2020)
- [Bundle deployment does not complete - Sonatype Nexus Repository - Sonatype Community](/content/community/t/bundle-deployment-does-not-complete/3796/1/index.html): Hi everyone, 
I am new to nexus, but I did study it quite a bit before creating this topic, however I could not find help anywhere else so I am trying here. 
I have a nexus 3 installation (running the official docker ima&hellip; (763 words, Apr 1, 2020)
- [Improved Dependency Management for Java in Nexus Lifecycle - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/improved-dependency-management-for-java-in-nexus-lifecycle/3766/index.html): Summary 
Managing dependencies is one of the best ways to assess the risk disposition of your organization’s applications and components. Contextual awareness around how dependencies are linked and how dependencies enter&hellip; (323 words, Mar 27, 2020)
- [Improved Dependency Management for Java in Nexus Lifecycle - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/improved-dependency-management-for-java-in-nexus-lifecycle/3766/1/index.html): Summary 
Managing dependencies is one of the best ways to assess the risk disposition of your organization’s applications and components. Contextual awareness around how dependencies are linked and how dependencies enter&hellip; (319 words, Mar 27, 2020)
- [What is Rate Limit for OSS Index Rest API - Sonatype Exchange / Sonatype Exchange Discussion - Sonatype Community](/content/community/t/what-is-rate-limit-for-oss-index-rest-api/3752/index.html): I went through the docs of ossindex found that there is Rate limit but can’t find its value. 
Thank you in advance. (199 words, Mar 26, 2020)
- [What is Rate Limit for OSS Index Rest API - Sonatype Exchange / Sonatype Exchange Discussion - Sonatype Community](/content/community/t/what-is-rate-limit-for-oss-index-rest-api/3752/1/index.html): I went through the docs of ossindex found that there is Rate limit but can’t find its value. 
Thank you in advance. (140 words, Mar 26, 2020)
- [Ignore layer.tar in Lifecycle Scans - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/ignore-layer-tar-in-lifecycle-scans/3746/index.html): I am running Lifecycle scans on Docker images that are tarballed for Lifecycle to scan. It seems from the documentation here (Containers in IQ Server - Sonatype Guides) that there are many layer.tar created to facilitate&hellip; (272 words, Mar 25, 2020)
- [Ignore layer.tar in Lifecycle Scans - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/ignore-layer-tar-in-lifecycle-scans/3746/1/index.html): I am running Lifecycle scans on Docker images that are tarballed for Lifecycle to scan. It seems from the documentation here (Containers in IQ Server - Sonatype Guides) that there are many layer.tar created to facilitate&hellip; (274 words, Mar 25, 2020)
- [How to run Nexus IQ scan asynchronously - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/how-to-run-nexus-iq-scan-asynchronously/3726/index.html): Hi, 
I have 50+ java jenkins build and want to run Nexus IQ scan for these builds. So how can i run this scan asynchronously for each jenkins build? OR how can i run this scan for all the builds in single shot? 
My probl&hellip; (167 words, Mar 23, 2020)
- [The scan could not be submitted to the IQ Server: - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/the-scan-could-not-be-submitted-to-the-iq-server/3677/2/index.html): Hi, 
Starting today NexusIQ scan is not working. I am seeing below errors in the pipeline while running NexusIQ scan. Please help. 
18:07:21 java -jar /apps/tools/nexus-iq-cli/nexus-iq-cli-1.42.0-01.jar -i XXXX-builds -s&hellip; (174 words, Mar 17, 2020)
- [Sonatype's Commitment to Customers and Employees During COVID-19 - Community Announcements - Sonatype Community](/content/community/t/sonatypes-commitment-to-customers-and-employees-during-covid-19/3684/index.html): As a Sonatype Nexus customer, your success has always been our relentless focus. In this moment, with the global spread of COVID-19, we add the health and well-being of you and your family to this concern. I am emailing &hellip; (534 words, Mar 17, 2020)
- [Sonatype's Commitment to Customers and Employees During COVID-19 - Community Announcements - Sonatype Community](/content/community/t/sonatypes-commitment-to-customers-and-employees-during-covid-19/3684/1/index.html): As a Sonatype Nexus customer, your success has always been our relentless focus. In this moment, with the global spread of COVID-19, we add the health and well-being of you and your family to this concern. I am emailing &hellip; (528 words, Mar 17, 2020)
- [The scan could not be submitted to the IQ Server: - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/the-scan-could-not-be-submitted-to-the-iq-server/3677/index.html): Hi, 
Starting today NexusIQ scan is not working. I am seeing below errors in the pipeline while running NexusIQ scan. Please help. 
18:07:21 java -jar /apps/tools/nexus-iq-cli/nexus-iq-cli-1.42.0-01.jar -i XXXX-builds -s&hellip; (173 words, Mar 16, 2020)
- [The scan could not be submitted to the IQ Server: - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/the-scan-could-not-be-submitted-to-the-iq-server/3677/1/index.html): Hi, 
Starting today NexusIQ scan is not working. I am seeing below errors in the pipeline while running NexusIQ scan. Please help. 
18:07:21 java -jar /apps/tools/nexus-iq-cli/nexus-iq-cli-1.42.0-01.jar -i XXXX-builds -s&hellip; (170 words, Mar 16, 2020)
- [New and Updated Guides for Nexus Lifecycle - Community Announcements - Sonatype Community](/content/community/t/new-and-updated-guides-for-nexus-lifecycle/3651/index.html): The Customer Education team has some new, and recently updated, guides available to help you get the most out of your Lifecycle implementation: 
Policy Evaluation in Source Control Management 
This new guide helps develo&hellip; (165 words, Mar 12, 2020)
- [New and Updated Guides for Nexus Lifecycle - Community Announcements - Sonatype Community](/content/community/t/new-and-updated-guides-for-nexus-lifecycle/3651/1/index.html): The Customer Education team has some new, and recently updated, guides available to help you get the most out of your Lifecycle implementation: 
Policy Evaluation in Source Control Management 
This new guide helps develo&hellip; (156 words, Mar 12, 2020)
- [Search returns unavailable component - Sonatype Nexus Repository - Sonatype Community](/content/community/t/search-returns-unavailable-component/3649/2/index.html): hey guys 
I have a situation in my maven-inhouse repository that there is an maven asset that is returned by a search with its id. But when i attemp to delete this asset nexus responds with a 404 not found. 
I can confir&hellip; (213 words, Mar 12, 2020)
- [Search returns unavailable component - Sonatype Nexus Repository - Sonatype Community](/content/community/t/search-returns-unavailable-component/3649/index.html): hey guys 
I have a situation in my maven-inhouse repository that there is an maven asset that is returned by a search with its id. But when i attemp to delete this asset nexus responds with a 404 not found. 
I can confir&hellip; (217 words, Mar 12, 2020)
- [Search returns unavailable component - Sonatype Nexus Repository - Sonatype Community](/content/community/t/search-returns-unavailable-component/3649/1/index.html): hey guys 
I have a situation in my maven-inhouse repository that there is an maven asset that is returned by a search with its id. But when i attemp to delete this asset nexus responds with a 404 not found. 
I can confir&hellip; (217 words, Mar 12, 2020)
- [How to retrieve total risk count for each application using REST API - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/how-to-retrieve-total-risk-count-for-each-application-using-rest-api/3607/3/index.html): I am trying to get the total risk count for each application defined as critical, severe and moderate. This is visible for each application within components tab on the right panel. Kindly let me know if someone has done&hellip; (301 words, Mar 9, 2020)
- [How to retrieve total risk count for each application using REST API - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/how-to-retrieve-total-risk-count-for-each-application-using-rest-api/3607/2/index.html): I am trying to get the total risk count for each application defined as critical, severe and moderate. This is visible for each application within components tab on the right panel. Kindly let me know if someone has done&hellip; (301 words, Mar 5, 2020)
- [How to retrieve total risk count for each application using REST API - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/how-to-retrieve-total-risk-count-for-each-application-using-rest-api/3607/index.html): I am trying to get the total risk count for each application defined as critical, severe and moderate. This is visible for each application within components tab on the right panel. Kindly let me know if someone has done&hellip; (301 words, Mar 3, 2020)
- [How to retrieve total risk count for each application using REST API - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/how-to-retrieve-total-risk-count-for-each-application-using-rest-api/3607/1/index.html): I am trying to get the total risk count for each application defined as critical, severe and moderate. This is visible for each application within components tab on the right panel. Kindly let me know if someone has done&hellip; (301 words, Mar 3, 2020)
- [How to disable Sonatype Scan Spring-Web - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/how-to-disable-sonatype-scan-spring-web/3577/2/index.html): Hello guys, 
I’m getting security vulnerabilities for spring web jars in Sonartype scanning, leading Bamboo builds failure. 
My question is how to disable the Sonar from scanning these jars? Something like, configure in &hellip; (177 words, Feb 26, 2020)
- [A New Way to View PDF Reports in Nexus Lifecycle - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/a-new-way-to-view-pdf-reports-in-nexus-lifecycle/3579/index.html): Summary 
Within the next month, you will notice an update to your PDF reporting generated in Nexus Lifecycle. We’ve updated the report’s look and feel, as well as consolidated the report from seven to four sections to be&hellip; (1,179 words, Feb 26, 2020)
- [A New Way to View PDF Reports in Nexus Lifecycle - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/a-new-way-to-view-pdf-reports-in-nexus-lifecycle/3579/1/index.html): Summary 
Within the next month, you will notice an update to your PDF reporting generated in Nexus Lifecycle. We’ve updated the report’s look and feel, as well as consolidated the report from seven to four sections to be&hellip; (1,180 words, Feb 26, 2020)
- [How to disable Sonatype Scan Spring-Web - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/how-to-disable-sonatype-scan-spring-web/3577/index.html): Hello guys, 
I’m getting security vulnerabilities for spring web jars in Sonartype scanning, leading Bamboo builds failure. 
My question is how to disable the Sonar from scanning these jars? Something like, configure in &hellip; (177 words, Feb 26, 2020)
- [How to disable Sonatype Scan Spring-Web - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/how-to-disable-sonatype-scan-spring-web/3577/1/index.html): Hello guys, 
I’m getting security vulnerabilities for spring web jars in Sonartype scanning, leading Bamboo builds failure. 
My question is how to disable the Sonar from scanning these jars? Something like, configure in &hellip; (177 words, Feb 26, 2020)
- [Advanced Search - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/advanced-search/3564/index.html): Release 88 introduced an Early Access version of Advanced Search capability within Nexus IQ Server. 
The Early Access feature is an opt-in feature which can only be enabled from within the UI. If you decide to try this f&hellip; (734 words, Feb 25, 2020)
- [Advanced Search - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/advanced-search/3564/1/index.html): Release 88 introduced an Early Access version of Advanced Search capability within Nexus IQ Server. 
The Early Access feature is an opt-in feature which can only be enabled from within the UI. If you decide to try this f&hellip; (770 words, Feb 25, 2020)
- [Customer Education Releases Software Supply Chain Explained Guide - Community Announcements - Sonatype Community](/content/community/t/customer-education-releases-software-supply-chain-explained-guide/3561/1/index.html): As a customer or potential customer of Sonatype’s Nexus platform, you may have heard references to software supply chain automation. Perhaps you know exactly what that means—maybe it’s even the reason you’ve decided to a&hellip; (153 words, Feb 25, 2020)
- [Customer Education Releases Deployment Models for Availability and Reliability - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/customer-education-releases-deployment-models-for-availability-and-reliability/3546/index.html): What business outcomes are you looking to achieve with your Nexus Repository deployments? If you have the desire to slowly adopt practices for better scalability, availability, and reliability check out our new guide: De&hellip; (193 words, Feb 20, 2020)
- [Customer Education Releases Deployment Models for Availability and Reliability - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/customer-education-releases-deployment-models-for-availability-and-reliability/3546/1/index.html): What business outcomes are you looking to achieve with your Nexus Repository deployments? If you have the desire to slowly adopt practices for better scalability, availability, and reliability check out our new guide: De&hellip; (194 words, Feb 20, 2020)
- [Component group name changes for same library - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/component-group-name-changes-for-same-library/3544/index.html): We have component libraries where the group name has changed for the same library.  Nexus IQ does NOT show the new version in the component info tab.  The vulnerability information sometimes mentions newer versions; howe&hellip; (101 words, Feb 20, 2020)
- [Component group name changes for same library - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/component-group-name-changes-for-same-library/3544/1/index.html): We have component libraries where the group name has changed for the same library.  Nexus IQ does NOT show the new version in the component info tab.  The vulnerability information sometimes mentions newer versions; howe&hellip; (183 words, Feb 20, 2020)
- [Best Practice - Enforce Downloading from Nexus Repository Manager and Nexus Firewall - Sonatype Lifecycle & Repository Firewall / Best Practices - Sonatype Community](/content/community/t/best-practice-enforce-downloading-from-nexus-repository-manager-and-nexus-firewall/3542/index.html): A recent customer question highlighted a couple important points: 

Developers will unknowingly, or knowingly, end up working around any blockers to getting their job done. To all my friends managing Nexus Repository and&hellip; (694 words, Feb 20, 2020)
- [Best Practice - Enforce Downloading from Nexus Repository Manager and Nexus Firewall - Sonatype Lifecycle & Repository Firewall / Best Practices - Sonatype Community](/content/community/t/best-practice-enforce-downloading-from-nexus-repository-manager-and-nexus-firewall/3542/1/index.html): A recent customer question highlighted a couple important points: 

Developers will unknowingly, or knowingly, end up working around any blockers to getting their job done. To all my friends managing Nexus Repository and&hellip; (696 words, Feb 20, 2020)
- [REST API - How to get list of policy violations for an application id? - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/rest-api-how-to-get-list-of-policy-violations-for-an-application-id/1545/3/index.html): Currently we have an integration where we would like to pull security violations and policy violations for an application id. We were successful is retrieving security violation using Reports /api/v2/applications/[applic&hellip; (113 words, Feb 18, 2020)
- [Join Sonatype's Product Managers on 3/4/20 for a Product Webinar - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/join-sonatypes-product-managers-on-3-4-20-for-a-product-webinar/3441/index.html): Hi Nexus users, 
We’re kicking 2020 off with a number of new product features to share! Join us on Wednesday, March 4th at 1:00 PM ET, for the first product webinar of 2020. 
Nexus IQ Product Manager, Jamie Whitehouse, w&hellip; (146 words, Feb 6, 2020)
- [Join Sonatype's Product Managers on 3/4/20 for a Product Webinar - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/join-sonatypes-product-managers-on-3-4-20-for-a-product-webinar/3441/1/index.html): Hi Nexus users, 
We’re kicking 2020 off with a number of new product features to share! Join us on Wednesday, March 4th at 1:00 PM ET, for the first product webinar of 2020. 
Nexus IQ Product Manager, Jamie Whitehouse, w&hellip; (146 words, Feb 6, 2020)
- ["waive policy violations" permission - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/waive-policy-violations-permission/3420/3/index.html): Is it possible to create an option to give Wavier access to only specific roles, because in some roles even though in remediations wavie policy violation was dissabled but still they can see that waiver tab. If we have a&hellip; (206 words, Feb 5, 2020)
- ["waive policy violations" permission - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/waive-policy-violations-permission/3420/index.html): Is it possible to create an option to give Wavier access to only specific roles, because in some roles even though in remediations wavie policy violation was dissabled but still they can see that waiver tab. If we have a&hellip; (212 words, Feb 4, 2020)
- ["waive policy violations" permission - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/waive-policy-violations-permission/3420/1/index.html): Is it possible to create an option to give Wavier access to only specific roles, because in some roles even though in remediations wavie policy violation was dissabled but still they can see that waiver tab. If we have a&hellip; (214 words, Feb 4, 2020)
- [SAML for IQ Server - Azure SSO Support - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/saml-for-iq-server-azure-sso-support/3408/index.html): Hello, following on from “SAML for IQ Server,” two users were asking about Azure SSO support help for the SAML integration. I couldn’t find an applicable forum entry that resolved this. I am also receiving the following &hellip; (825 words, Feb 3, 2020)
- [SAML for IQ Server - Azure SSO Support - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/saml-for-iq-server-azure-sso-support/3408/1/index.html): Hello, following on from “SAML for IQ Server,” two users were asking about Azure SSO support help for the SAML integration. I couldn’t find an applicable forum entry that resolved this. I am also receiving the following &hellip; (821 words, Feb 3, 2020)
- [How to scan Go via Jenkins plugin? - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/how-to-scan-go-via-jenkins-plugin/1827/3/index.html): Hi, 
I’m trying to scan a Go project, but the report is empty when I use the Jenkins plugin. It works when I send the go.sum via CLI (Example below). 
I tried to compress the go.sum to zip/tar/gz, send the $WORKSPACE dir&hellip; (322 words, Jan 30, 2020)
- [Nexus IQ Security Data Update: February 4th, 2020 - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/nexus-iq-security-data-update-february-4th-2020/3354/index.html): Summary 
Following a previous data update to the majority of all CVEs, Sonatype will be updating our Data Services on February 4th, 2020 for a subset of remaining CVE Vulnerability listings. This final set of CVEs will n&hellip; (706 words, Jan 22, 2020)
- [Nexus IQ Security Data Update: February 4th, 2020 - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/nexus-iq-security-data-update-february-4th-2020/3354/1/index.html): Summary 
Following a previous data update to the majority of all CVEs, Sonatype will be updating our Data Services on February 4th, 2020 for a subset of remaining CVE Vulnerability listings. This final set of CVEs will n&hellip; (711 words, Jan 22, 2020)
- [Finer Permissions in Nexus Lifecycle - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/finer-permissions-in-nexus-lifecycle/3347/index.html): Summary 
Role management is a necessary security feature for products accessed by multiple teams and people within an organization. This is why Sonatype is happy to share some updates to user permissions within Nexus Lif&hellip; (354 words, Jan 22, 2020)
- [Finer Permissions in Nexus Lifecycle - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/finer-permissions-in-nexus-lifecycle/3347/1/index.html): Summary 
Role management is a necessary security feature for products accessed by multiple teams and people within an organization. This is why Sonatype is happy to share some updates to user permissions within Nexus Lif&hellip; (351 words, Jan 22, 2020)
- [What APIs can I use to find Python Package information such as release date of Python Package? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/what-apis-can-i-use-to-find-python-package-information-such-as-release-date-of-python-package/3303/index.html): What APIs can I use to find Python Package information, such as release date of Python Package? 
I would also like to find APIs to get information on Maven Java artifacts, such as the release date of the artifacts. (126 words, Jan 15, 2020)
- [What APIs can I use to find Python Package information such as release date of Python Package? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/what-apis-can-i-use-to-find-python-package-information-such-as-release-date-of-python-package/3303/1/index.html): What APIs can I use to find Python Package information, such as release date of Python Package? 
I would also like to find APIs to get information on Maven Java artifacts, such as the release date of the artifacts. (58 words, Jan 15, 2020)
- [Customer Education’s Latest IQ Course - Community Announcements - Sonatype Community](/content/community/t/customer-education-s-latest-iq-course/3297/index.html): Have you recently attended a Nexus IQ Server workshop delivered by Customer Success? If so, we encourage you to check out our latest addition to Sonatype Learn: Post IQ Workshop – Things to Do. It’s a quick reference of &hellip; (112 words, Jan 14, 2020)
- [Customer Education’s Latest IQ Course - Community Announcements - Sonatype Community](/content/community/t/customer-education-s-latest-iq-course/3297/1/index.html): Have you recently attended a Nexus IQ Server workshop delivered by Customer Success? If so, we encourage you to check out our latest addition to Sonatype Learn: Post IQ Workshop – Things to Do. It’s a quick reference of &hellip; (121 words, Jan 14, 2020)
- [Sonatype Data Backup - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/sonatype-data-backup/3261/2/index.html): Hi All, 
Is there a way to take all application data backup (Generate pdf  option in Application report) via single click/run instead of downloading all applications pdf individually. 
Thanks in advance! (234 words, Jan 10, 2020)
- [Sonatype Data Backup - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/sonatype-data-backup/3261/index.html): Hi All, 
Is there a way to take all application data backup (Generate pdf  option in Application report) via single click/run instead of downloading all applications pdf individually. 
Thanks in advance! (236 words, Jan 10, 2020)
- [Sonatype Data Backup - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/sonatype-data-backup/3261/1/index.html): Hi All, 
Is there a way to take all application data backup (Generate pdf  option in Application report) via single click/run instead of downloading all applications pdf individually. 
Thanks in advance! (234 words, Jan 10, 2020)
- [IQ scan for power shell gallery repository - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/iq-scan-for-power-shell-gallery-repository/3234/index.html): Hi Team, 
Could you please add new feature in sonatype IQ to support the scan for power shell gallery. 
https://www.powershellgallery.com/packages (40 words, Jan 6, 2020)
- [IQ scan for power shell gallery repository - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/iq-scan-for-power-shell-gallery-repository/3234/1/index.html): Hi Team, 
Could you please add new feature in sonatype IQ to support the scan for power shell gallery. 
https://www.powershellgallery.com/packages (43 words, Jan 6, 2020)
- [[COMING FEBRUARY 27] Making JavaScript Awesome - Reporting Enhancements within IQ Server - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/coming-february-27-making-javascript-awesome-reporting-enhancements-within-iq-server/3200/index.html): Summary 
In July, we asked for your feedback on your experience with JavaScript and reporting within IQ. Based on that feedback, Sonatype is pleased to announce significant enhancements to our JavaScript support that wil&hellip; (727 words, Dec 26, 2019)
- [[COMING FEBRUARY 27] Making JavaScript Awesome - Reporting Enhancements within IQ Server - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/coming-february-27-making-javascript-awesome-reporting-enhancements-within-iq-server/3200/1/index.html): Summary 
In July, we asked for your feedback on your experience with JavaScript and reporting within IQ. Based on that feedback, Sonatype is pleased to announce significant enhancements to our JavaScript support that wil&hellip; (725 words, Dec 26, 2019)
- [Installing IQ for IDEA - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/installing-iq-for-idea/3185/4/index.html): I’m using the guide (https://help.sonatype.com/integrations/iq-server-and-ides/iq-for-idea) to install IQ for IDEA. I’m able to connect to the server, then I can select an application - Apply - OK. So, I expect the selec&hellip; (395 words, Dec 20, 2019)
- [Installing IQ for IDEA - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/installing-iq-for-idea/3185/index.html): I’m using the guide (https://help.sonatype.com/integrations/iq-server-and-ides/iq-for-idea) to install IQ for IDEA. I’m able to connect to the server, then I can select an application - Apply - OK. So, I expect the selec&hellip; (393 words, Dec 19, 2019)
- [Installing IQ for IDEA - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/installing-iq-for-idea/3185/1/index.html): I’m using the guide (https://help.sonatype.com/integrations/iq-server-and-ides/iq-for-idea) to install IQ for IDEA. I’m able to connect to the server, then I can select an application - Apply - OK. So, I expect the selec&hellip; (395 words, Dec 19, 2019)
- [Not able to connect Jenkins to sonatype nexus IQ server - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/not-able-to-connect-jenkins-to-sonatype-nexus-iq-server/3155/index.html): I am using Nexus Platform Plugin ( [3.8.20191204-084645.a4bff16) but getting below error while doing test connection to nexus IQ server hosted in EC2 Instance from Jenkins (hosted in my windows PC . Can someone pls help 
&hellip; (414 words, Dec 14, 2019)
- [Not able to connect Jenkins to sonatype nexus IQ server - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/not-able-to-connect-jenkins-to-sonatype-nexus-iq-server/3155/1/index.html): I am using Nexus Platform Plugin ( [3.8.20191204-084645.a4bff16) but getting below error while doing test connection to nexus IQ server hosted in EC2 Instance from Jenkins (hosted in my windows PC . Can someone pls help 
&hellip; (331 words, Dec 14, 2019)
- [2019-12-12 11:05:07,970+0000 ERROR [status-delayed-tasks-1-thread-1] *SYSTEM org.sonatype.nexus.quartz.internal.QuartzSchedulerSPI - Missing job-detail for key: - Sonatype Nexus Repository - Sonatype Community](/content/community/t/2019-12-12-1107-970-0000-error-status-delayed-tasks-1-thread-1-system-org-sonatype-nexus-quartz-internal-quartzschedulerspi-missing-job-detail-for-key/3139/3/index.html): I am using one of yours Docker containers (sonatype/nexus3). Server have daily backups and rsync to a different location. At the moment I am running version 3.19.1, but an error start appearing in the logs: 
2019-12-12 1&hellip; (182 words, Dec 12, 2019)
- [2019-12-12 11:05:07,970+0000 ERROR [status-delayed-tasks-1-thread-1] *SYSTEM org.sonatype.nexus.quartz.internal.QuartzSchedulerSPI - Missing job-detail for key: - Sonatype Nexus Repository - Sonatype Community](/content/community/t/2019-12-12-1107-970-0000-error-status-delayed-tasks-1-thread-1-system-org-sonatype-nexus-quartz-internal-quartzschedulerspi-missing-job-detail-for-key/3139/index.html): I am using one of yours Docker containers (sonatype/nexus3). Server have daily backups and rsync to a different location. At the moment I am running version 3.19.1, but an error start appearing in the logs: 
2019-12-12 1&hellip; (237 words, Dec 12, 2019)
- [2019-12-12 11:05:07,970+0000 ERROR [status-delayed-tasks-1-thread-1] *SYSTEM org.sonatype.nexus.quartz.internal.QuartzSchedulerSPI - Missing job-detail for key: - Sonatype Nexus Repository - Sonatype Community](/content/community/t/2019-12-12-1107-970-0000-error-status-delayed-tasks-1-thread-1-system-org-sonatype-nexus-quartz-internal-quartzschedulerspi-missing-job-detail-for-key/3139/1/index.html): I am using one of yours Docker containers (sonatype/nexus3). Server have daily backups and rsync to a different location. At the moment I am running version 3.19.1, but an error start appearing in the logs: 
2019-12-12 1&hellip; (179 words, Dec 12, 2019)
- [Customer Education Releases New Beginner's Guide to Package & Dependency Management - Community Announcements - Sonatype Community](/content/community/t/customer-education-releases-new-beginners-guide-to-package-dependency-management/3130/1/index.html): Sonatype’s Nexus Repository Manager is built around best practices in package and dependency management in the DevOps space. But what exactly do we mean when we say “package and dependency management,” and how does a bin&hellip; (220 words, Dec 11, 2019)
- [How can I see the vulnerabilties of a different version of the component than I'm looking at? - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/how-can-i-see-the-vulnerabilties-of-a-different-version-of-the-component-than-im-looking-at/3082/3/index.html): If I have a build report that shows vulnerable components, I can drill down into the component to see what the vulnerabilities are for that version. I can also look at the component detail view and see what other version&hellip; (265 words, Dec 4, 2019)
- [How can I see the vulnerabilties of a different version of the component than I'm looking at? - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/how-can-i-see-the-vulnerabilties-of-a-different-version-of-the-component-than-im-looking-at/3082/index.html): If I have a build report that shows vulnerable components, I can drill down into the component to see what the vulnerabilities are for that version. I can also look at the component detail view and see what other version&hellip; (265 words, Dec 4, 2019)
- [How can I see the vulnerabilties of a different version of the component than I'm looking at? - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/how-can-i-see-the-vulnerabilties-of-a-different-version-of-the-component-than-im-looking-at/3082/1/index.html): If I have a build report that shows vulnerable components, I can drill down into the component to see what the vulnerabilities are for that version. I can also look at the component detail view and see what other version&hellip; (271 words, Dec 4, 2019)
- [Not able to download Jars from nexus - Sonatype Nexus Repository - Sonatype Community](/content/community/t/not-able-to-download-jars-from-nexus/3065/index.html): I have project A which is dependency of project B. 
Since project B should get latest jar version of Project A . I purge Project A jar from local so Project B will get Project A jar from nexus since it has been deleted f&hellip; (287 words, Dec 3, 2019)
- [Not able to download Jars from nexus - Sonatype Nexus Repository - Sonatype Community](/content/community/t/not-able-to-download-jars-from-nexus/3065/1/index.html): I have project A which is dependency of project B. 
Since project B should get latest jar version of Project A . I purge Project A jar from local so Project B will get Project A jar from nexus since it has been deleted f&hellip; (287 words, Dec 3, 2019)
- [Running docker images as HA - Sonatype Nexus Repository - Sonatype Community](/content/community/t/running-docker-images-as-ha/3019/3/index.html): Dear All, 
From HA point of view, we know the feature is only available in paid version but as a workaround does nexus supports running multiple nexus containers on same server and managing it via a proxy lets say nginix&hellip; (165 words, Dec 2, 2019)
- [Linux Installers for Nexus Products - Sonatype Nexus Repository - Sonatype Community](/content/community/t/linux-installers-for-nexus-products/3041/1/index.html): Speed and agility stand out when developers are looking for the most convenient way to configure and run their favorite programs. Dealing with any sort of friction to get started is like waiting for 10 minutes in line at&hellip; (287 words, Nov 26, 2019)
- [Running docker images as HA - Sonatype Nexus Repository - Sonatype Community](/content/community/t/running-docker-images-as-ha/3019/2/index.html): Dear All, 
From HA point of view, we know the feature is only available in paid version but as a workaround does nexus supports running multiple nexus containers on same server and managing it via a proxy lets say nginix&hellip; (165 words, Nov 25, 2019)
- [Uploading artifact to maven hosted repo is slow - Sonatype Nexus Repository - Sonatype Community](/content/community/t/uploading-artifact-to-maven-hosted-repo-is-slow/2142/5/index.html): Hi, 
We are using Nexus OSS 3.15.2-01, and facing performance issues with very limited repos. 
We currently have 20-25 maven hosted repos for different applications and for each release repo we have separate blobs. 
Now &hellip; (381 words, Nov 25, 2019)
- [Running docker images as HA - Sonatype Nexus Repository - Sonatype Community](/content/community/t/running-docker-images-as-ha/3019/index.html): Dear All, 
From HA point of view, we know the feature is only available in paid version but as a workaround does nexus supports running multiple nexus containers on same server and managing it via a proxy lets say nginix&hellip; (164 words, Nov 25, 2019)
- [Running docker images as HA - Sonatype Nexus Repository - Sonatype Community](/content/community/t/running-docker-images-as-ha/3019/1/index.html): Dear All, 
From HA point of view, we know the feature is only available in paid version but as a workaround does nexus supports running multiple nexus containers on same server and managing it via a proxy lets say nginix&hellip; (164 words, Nov 25, 2019)
- [Uploading Artifacts - Sonatype Nexus Repository - Sonatype Community](/content/community/t/uploading-artifacts/718/4/index.html): I am trying to upload Snapshot.jar file to nexus and I am getting this error. 
Return code is: 400, ReasonPhrase: Detected content type [application/x-sh], but expected [application/java-archive]: 
When I change the file&hellip; (471 words, Nov 20, 2019)
- [Vista Acquires a Majority Interest in Sonatype: A Great Day for our Customers, Partners and Community - Community Announcements - Sonatype Community](/content/community/t/vista-acquires-a-majority-interest-in-sonatype-a-great-day-for-our-customers-partners-and-community/2967/4/index.html): You can read all about it on the Sonatype Blog. (196 words, Nov 18, 2019)
- [Welcome to the Sonatype Community! - Community Announcements - Sonatype Community](/content/community/t/welcome-to-the-sonatype-community/79/4/index.html): Welcome to the Sonatype Community! 
Sonatype is a community of real people who are passionate about software development and innovation. Here we collaborate on answers, solutions, and ideas about the products and service&hellip; (138 words, Nov 18, 2019)
- [Vista Acquires a Majority Interest in Sonatype: A Great Day for our Customers, Partners and Community - Community Announcements - Sonatype Community](/content/community/t/vista-acquires-a-majority-interest-in-sonatype-a-great-day-for-our-customers-partners-and-community/2967/index.html): You can read all about it on the Sonatype Blog. (100 words, Nov 18, 2019)
- [Vista Acquires a Majority Interest in Sonatype: A Great Day for our Customers, Partners and Community - Community Announcements - Sonatype Community](/content/community/t/vista-acquires-a-majority-interest-in-sonatype-a-great-day-for-our-customers-partners-and-community/2967/1/index.html): You can read all about it on the Sonatype Blog. (118 words, Nov 18, 2019)
- [Endless waiting for upload several artifacts to Nexus3 from Jenkins - Sonatype Nexus Repository - Sonatype Community](/content/community/t/endless-waiting-for-upload-several-artifacts-to-nexus3-from-jenkins/1602/4/index.html): Hi everyone! When I try  to upload several artifacts from Jenkins slave node with plugin (https://github.com/jenkinsci/nexus-platform-plugin) to Nexus 3, I get endless waiting. 
Uploading one artifact works. 
Uploading s&hellip; (259 words, Nov 13, 2019)
- [Nexus IQ Data Services Maintenance: November 16th, 2019 - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/nexus-iq-data-services-maintenance-november-16th-2019/2885/index.html): Sonatype has planned a scheduled maintenance of the Nexus IQ Data Services on Saturday, November 16th, from approximately 6pm to 10pm EST. 
Maintenance Window 


EST - 6pm to 10pm Saturday, November 16th, 2019 


UTC - 1&hellip; (703 words, Nov 8, 2019)
- [Nexus IQ Data Services Maintenance: November 16th, 2019 - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/nexus-iq-data-services-maintenance-november-16th-2019/2885/1/index.html): Sonatype has planned a scheduled maintenance of the Nexus IQ Data Services on Saturday, November 16th, from approximately 6pm to 10pm EST. 
Maintenance Window 


EST - 6pm to 10pm Saturday, November 16th, 2019 


UTC - 1&hellip; (702 words, Nov 8, 2019)
- [Join Sonatype’s Product Managers on December 10th for our Q4 Product Webinar - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/join-sonatype-s-product-managers-on-december-10th-for-our-q4-product-webinar/2797/2/index.html): Hi Nexus IQ users, 
Take this opportunity to connect with Sonatype Product Managers during a live webinar where you can experience the latest and greatest product enhancements and get your questions answered by the exper&hellip; (272 words, Oct 31, 2019)
- [Join Sonatype’s Product Managers on December 10th for our Q4 Product Webinar - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/join-sonatype-s-product-managers-on-december-10th-for-our-q4-product-webinar/2797/index.html): Hi Nexus IQ users, 
Take this opportunity to connect with Sonatype Product Managers during a live webinar where you can experience the latest and greatest product enhancements and get your questions answered by the exper&hellip; (160 words, Oct 31, 2019)
- [How does grandfathering work with Nexus Firewall? - Sonatype Lifecycle & Repository Firewall / Best Practices - Sonatype Community](/content/community/t/how-does-grandfathering-work-with-nexus-firewall/2784/3/index.html): We are moving some applications into a new environment that uses Nexus Firewall and Nexus Lifecycle. We’d like to grandfather the violations in the apps, but I am unclear how it works with Firewall. 
I think I have to wa&hellip; (479 words, Oct 31, 2019)
- [Getting rid of PORT number in nexus address - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/getting-rid-of-port-number-in-nexus-address/2791/index.html): In all tutorials, nexus is accessed via port number(8081) which is ugly. It also makes it look like a test system rather than a production. Is there any way to get rid of PORT number? 
I can use docker port mapping to ma&hellip; (237 words, Oct 31, 2019)
- [How does grandfathering work with Nexus Firewall? - Sonatype Lifecycle & Repository Firewall / Best Practices - Sonatype Community](/content/community/t/how-does-grandfathering-work-with-nexus-firewall/2784/index.html): We are moving some applications into a new environment that uses Nexus Firewall and Nexus Lifecycle. We’d like to grandfather the violations in the apps, but I am unclear how it works with Firewall. 
I think I have to wa&hellip; (479 words, Oct 30, 2019)
- [Nexus IQ upgrade from 56 to latest version 75 - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/nexus-iq-upgrade-from-56-to-latest-version-75/2713/5/index.html): Team, 
we are planning to upgrade Nexus -IQ from version 56 to latest version 75 .Please let us know the process. Can we upgrade from 56 directly to 75 version ?Is the upgrade procedure same as we did while upgrading to &hellip; (229 words, Oct 29, 2019)
- [Nexus IQ upgrade from 56 to latest version 75 - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/nexus-iq-upgrade-from-56-to-latest-version-75/2713/index.html): Team, 
we are planning to upgrade Nexus -IQ from version 56 to latest version 75 .Please let us know the process. Can we upgrade from 56 directly to 75 version ?Is the upgrade procedure same as we did while upgrading to &hellip; (223 words, Oct 18, 2019)
- [Nexus IQ upgrade from 56 to latest version 75 - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/nexus-iq-upgrade-from-56-to-latest-version-75/2713/1/index.html): Team, 
we are planning to upgrade Nexus -IQ from version 56 to latest version 75 .Please let us know the process. Can we upgrade from 56 directly to 75 version ?Is the upgrade procedure same as we did while upgrading to &hellip; (229 words, Oct 18, 2019)
- [Add ability for Maven Plugin to create an application in a given organization - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/add-ability-for-maven-plugin-to-create-an-application-in-a-given-organization/2690/4/index.html): I have a case where our NXIQ is broken into multiple Orgs under the Root. These orgs have different requirements and therefore policy levels, so we have slightly different policies on each org. We have new applications s&hellip; (410 words, Oct 17, 2019)
- [Best practices for archival of external packages - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/best-practices-for-archival-of-external-packages/2704/4/index.html): Hello, 
I need to ensure that I have always access to packages@version that are used in product releases. As far as I can see I have two options: 


proxy the public repo 
pros: simple to setup, updates automatically as &hellip; (284 words, Oct 17, 2019)
- [Best practices for archival of external packages - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/best-practices-for-archival-of-external-packages/2704/index.html): Hello, 
I need to ensure that I have always access to packages@version that are used in product releases. As far as I can see I have two options: 


proxy the public repo 
pros: simple to setup, updates automatically as &hellip; (283 words, Oct 16, 2019)
- [Best practices for archival of external packages - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/best-practices-for-archival-of-external-packages/2704/1/index.html): Hello, 
I need to ensure that I have always access to packages@version that are used in product releases. As far as I can see I have two options: 


proxy the public repo 
pros: simple to setup, updates automatically as &hellip; (286 words, Oct 16, 2019)
- [Add ability for Maven Plugin to create an application in a given organization - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/add-ability-for-maven-plugin-to-create-an-application-in-a-given-organization/2690/index.html): I have a case where our NXIQ is broken into multiple Orgs under the Root. These orgs have different requirements and therefore policy levels, so we have slightly different policies on each org. We have new applications s&hellip; (410 words, Oct 15, 2019)
- [Add ability for Maven Plugin to create an application in a given organization - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/add-ability-for-maven-plugin-to-create-an-application-in-a-given-organization/2690/1/index.html): I have a case where our NXIQ is broken into multiple Orgs under the Root. These orgs have different requirements and therefore policy levels, so we have slightly different policies on each org. We have new applications s&hellip; (410 words, Oct 15, 2019)
- [How to deal with the air gap scenario? - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/how-to-deal-with-the-air-gap-scenario/2668/index.html): What is the best practice for an air gap scenario? Is there a way for an admin to get the cache data (e.g. for NPM and maven) and copy it into the air gap laptop via a USB stick? Can the blob from the sonatype-work be co&hellip; (134 words, Oct 11, 2019)
- [How to deal with the air gap scenario? - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/how-to-deal-with-the-air-gap-scenario/2668/1/index.html): What is the best practice for an air gap scenario? Is there a way for an admin to get the cache data (e.g. for NPM and maven) and copy it into the air gap laptop via a USB stick? Can the blob from the sonatype-work be co&hellip; (134 words, Oct 11, 2019)
- [Nexus apt plugin - support for deb-src - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-apt-plugin-support-for-deb-src/2664/1/index.html): Any support or planned support for the deb-src format (i.e. keeping track of the source of the packages, snapshotting the source, …)? (124 words, Oct 11, 2019)
- [Come Join us at DOES! - Community Announcements - Sonatype Community](/content/community/t/come-join-us-at-does/2662/index.html): Sonatype is excited to sponsor DevOps Enterprise Summit in Las Vegas the end of the month, Oct 28-30. If you are interested in attending, use our discount code, SNT20, and come party with us, we have a busy week: 

Secur&hellip; (177 words, Oct 10, 2019)
- [Come Join us at DOES! - Community Announcements - Sonatype Community](/content/community/t/come-join-us-at-does/2662/1/index.html): Sonatype is excited to sponsor DevOps Enterprise Summit in Las Vegas the end of the month, Oct 28-30. If you are interested in attending, use our discount code, SNT20, and come party with us, we have a busy week: 

Secur&hellip; (186 words, Oct 10, 2019)
- [How to recover from 'Attempt to access non-existent blob' - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-to-recover-from-attempt-to-access-non-existent-blob/2648/index.html): Hello, 
in case of disaster (e.g. filesystem failure or accidental files removal) some blobs may be lost. 
In this case, the way to find such blobs is running “Repair - Reconcile component database from blob store” task. &hellip; (1,088 words, Oct 9, 2019)
- [How to recover from 'Attempt to access non-existent blob' - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-to-recover-from-attempt-to-access-non-existent-blob/2648/1/index.html): Hello, 
in case of disaster (e.g. filesystem failure or accidental files removal) some blobs may be lost. 
In this case, the way to find such blobs is running “Repair - Reconcile component database from blob store” task. &hellip; (858 words, Oct 9, 2019)
- [Join Sonatype's Product Managers on 9/17/19 for a Product Webinar - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/join-sonatypes-product-managers-on-9-17-19-for-a-product-webinar/2443/2/index.html): Hi Nexus IQ users, 
Take this opportunity to connect with Sonatype Product Managers during a live webinar where you can experience the latest and greatest product enhancements and get your questions answered by the exper&hellip; (139 words, Sep 12, 2019)
- [How does the Nexus Repository Manager integrate the OAuth2 protocol to log in? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-does-the-nexus-repository-manager-integrate-the-oauth2-protocol-to-log-in/2465/index.html): Hi! 
How does the Nexus Repository Manager integrate the OAuth2 protocol to log in? 
Do I need to develop my own plugins? 
What do I need to do if I need to develop a plugin? (692 words, Sep 10, 2019)
- [How does the Nexus Repository Manager integrate the OAuth2 protocol to log in? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-does-the-nexus-repository-manager-integrate-the-oauth2-protocol-to-log-in/2465/1/index.html): Hi! 
How does the Nexus Repository Manager integrate the OAuth2 protocol to log in? 
Do I need to develop my own plugins? 
What do I need to do if I need to develop a plugin? (694 words, Sep 10, 2019)
- [Multi instance migration - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/multi-instance-migration/2438/2/index.html): Hello, 
I have a Nexus 2 (2.14.3-02) and a Nexus 3 (3.2.0-01) and an yet still empty Nexus 3 (3.17.0-01). I want to migrate all the data from the two older instances to the new Nexus. What will be the best practice here?&hellip; (298 words, Sep 6, 2019)
- [Join Sonatype's Product Managers on 9/17/19 for a Product Webinar - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/join-sonatypes-product-managers-on-9-17-19-for-a-product-webinar/2443/index.html): Hi Nexus IQ users, 
Take this opportunity to connect with Sonatype Product Managers during a live webinar where you can experience the latest and greatest product enhancements and get your questions answered by the exper&hellip; (239 words, Sep 5, 2019)
- [Join Sonatype's Product Managers on 9/17/19 for a Product Webinar - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/join-sonatypes-product-managers-on-9-17-19-for-a-product-webinar/2443/1/index.html): Hi Nexus IQ users, 
Take this opportunity to connect with Sonatype Product Managers during a live webinar where you can experience the latest and greatest product enhancements and get your questions answered by the exper&hellip; (137 words, Sep 5, 2019)
- [Multi instance migration - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/multi-instance-migration/2438/index.html): Hello, 
I have a Nexus 2 (2.14.3-02) and a Nexus 3 (3.2.0-01) and an yet still empty Nexus 3 (3.17.0-01). I want to migrate all the data from the two older instances to the new Nexus. What will be the best practice here?&hellip; (298 words, Sep 5, 2019)
- [Multi instance migration - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/multi-instance-migration/2438/1/index.html): Hello, 
I have a Nexus 2 (2.14.3-02) and a Nexus 3 (3.2.0-01) and an yet still empty Nexus 3 (3.17.0-01). I want to migrate all the data from the two older instances to the new Nexus. What will be the best practice here?&hellip; (302 words, Sep 5, 2019)
- [SAML for IQ Server - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/saml-for-iq-server/2423/index.html): SAML support is coming to IQ Server, stay tuned. (855 words, Sep 3, 2019)
- [SAML for IQ Server - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/saml-for-iq-server/2423/1/index.html): SAML support is coming to IQ Server, stay tuned. (916 words, Sep 3, 2019)
- [NXRM-3.18.1 HA-C Setup node issues - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nxrm-3-18-1-ha-c-setup-node-issues/2400/1/index.html): I have setup NXRM HA-C with docker and I have three nodes with NXRM running in the containers. I have configured hazelcast-network.xml and seems to be everything looks good. However, I am getting this sort of errors in t&hellip; (286 words, Aug 28, 2019)
- [Nexus IQ Server API to extract all information about a component waiver - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/nexus-iq-server-api-to-extract-all-information-about-a-component-waiver/2334/2/index.html): Hi, 
it seems it’s currently not possible to extract all information about a component waiver, esp. the comment field, via the REST API in Nexus IQ Server. To clarify, I’m talking about the information seen in the screen&hellip; (117 words, Aug 14, 2019)
- [How to trigger IQ scan on uplaod of artifact in Nexus Repository - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/how-to-trigger-iq-scan-on-uplaod-of-artifact-in-nexus-repository/2340/index.html): Hi, 
Can we trigger IQ scan on upload of artefact in nexus repository? 
Thanks (110 words, Aug 14, 2019)
- [How to trigger IQ scan on uplaod of artifact in Nexus Repository - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/how-to-trigger-iq-scan-on-uplaod-of-artifact-in-nexus-repository/2340/1/index.html): Hi, 
Can we trigger IQ scan on upload of artefact in nexus repository? 
Thanks (114 words, Aug 14, 2019)
- [Nexus IQ Server API to extract all information about a component waiver - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/nexus-iq-server-api-to-extract-all-information-about-a-component-waiver/2334/index.html): Hi, 
it seems it’s currently not possible to extract all information about a component waiver, esp. the comment field, via the REST API in Nexus IQ Server. To clarify, I’m talking about the information seen in the screen&hellip; (121 words, Aug 13, 2019)
- [Nexus IQ Server API to extract all information about a component waiver - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/nexus-iq-server-api-to-extract-all-information-about-a-component-waiver/2334/1/index.html): Hi, 
it seems it’s currently not possible to extract all information about a component waiver, esp. the comment field, via the REST API in Nexus IQ Server. To clarify, I’m talking about the information seen in the screen&hellip; (117 words, Aug 13, 2019)
- [Nexus Repo 3.18 - User or password not valid for database: 'component' DB name="component" - #2 by rseddon - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-repo-3-18-user-or-password-not-valid-for-database-component-db-name-component/2299/2/index.html): Hi All, 
I have deployed the Nexus Repository on the AKS cluster. We are using sonatype/nexus3 docker image. It was running OK at the start but suddenly I started facing this issue related to the OrientDD and after that,&hellip; (22 words, Aug 8, 2019)
- [Nexus Repo 3.18 - User or password not valid for database: 'component' DB name="component" - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-repo-3-18-user-or-password-not-valid-for-database-component-db-name-component/2299/index.html): Hi All, 
I have deployed the Nexus Repository on the AKS cluster. We are using sonatype/nexus3 docker image. It was running OK at the start but suddenly I started facing this issue related to the OrientDD and after that,&hellip; (335 words, Aug 8, 2019)
- [Nxrm3-maven-plugin + Nexus3 = 401 Not Authorized for user, 404 on tags API for admin - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nxrm3-maven-plugin-nexus3-401-not-authorized-for-user-404-on-tags-api-for-admin/2286/4/index.html): I’m attempting to push my artifacts to Nexus (3.18.0-01, docker) from a GitLab Runner, but I’m getting the following error: 
Failed to execute goal org.sonatype.plugins:nxrm3-maven-plugin:1.0.2:deploy (default-deploy) on&hellip; (873 words, Aug 7, 2019)
- [Nxrm3-maven-plugin + Nexus3 = 401 Not Authorized for user, 404 on tags API for admin - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nxrm3-maven-plugin-nexus3-401-not-authorized-for-user-404-on-tags-api-for-admin/2286/index.html): I’m attempting to push my artifacts to Nexus (3.18.0-01, docker) from a GitLab Runner, but I’m getting the following error: 
Failed to execute goal org.sonatype.plugins:nxrm3-maven-plugin:1.0.2:deploy (default-deploy) on&hellip; (723 words, Aug 6, 2019)
- [Nxrm3-maven-plugin + Nexus3 = 401 Not Authorized for user, 404 on tags API for admin - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nxrm3-maven-plugin-nexus3-401-not-authorized-for-user-404-on-tags-api-for-admin/2286/1/index.html): I’m attempting to push my artifacts to Nexus (3.18.0-01, docker) from a GitLab Runner, but I’m getting the following error: 
Failed to execute goal org.sonatype.plugins:nxrm3-maven-plugin:1.0.2:deploy (default-deploy) on&hellip; (980 words, Aug 6, 2019)
- [Industry standards/Best Practices - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/industry-standards-best-practices/668/2/index.html): Hi, 
My organization has been using Nexus for a few years. We are now finding ourselves in a position where we would like to setup guidelines for new teams being onboarded and set of norms to apply to the existing teams.&hellip; (684 words, Jul 26, 2019)
- [Adding Roles to Users in IQ Server via REST API - Sonatype Lifecycle & Repository Firewall / Best Practices - Sonatype Community](/content/community/t/adding-roles-to-users-in-iq-server-via-rest-api/821/3/index.html): I frequently get asked by our customers how to they can programmatically manage user permissions in IQ Server. 
You will first need to understand the Organization and Application Hierarchy and Inheritance. Once you have &hellip; (380 words, Jul 25, 2019)
- [Customer Feedback Call - IQ for GitHub - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/customer-feedback-call-iq-for-github/2219/index.html): IQ for GitHub - Pull Requests.  We are working on an IQ for GitHub solution that will allow IQ to automatically fix policy violations early in the development lifecycle. We would like to hear from developers, IQ Server a&hellip; (175 words, Jul 25, 2019)
- [OrientDB health check and recovery best practices - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/orientdb-health-check-and-recovery-best-practices/2210/1/index.html): Hello folks 
I’d like to hear from folks who had to tinker with the orientdb in NXRM 3x. Particularly interested in how you- 

Perform backup
How often
Run proactive health checks on the DB (or if NXRM does it somewhere)
&hellip; (123 words, Jul 25, 2019)
- [Mitigate IQ Server Client Timeouts - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/mitigate-iq-server-client-timeouts/2188/index.html): Prior to Nexus IQ Release 69, clients/plugins CLI, Maven, Jenkins, and bamboo had the potential from suffering from client/network timeout issues. The problem was due to the clients/plugins waiting on the socket while wa&hellip; (101 words, Jul 18, 2019)
- [Mitigate IQ Server Client Timeouts - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/mitigate-iq-server-client-timeouts/2188/1/index.html): Prior to Nexus IQ Release 69, clients/plugins CLI, Maven, Jenkins, and bamboo had the potential from suffering from client/network timeout issues. The problem was due to the clients/plugins waiting on the socket while wa&hellip; (181 words, Jul 18, 2019)
- [ConMon Requirement - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/conmon-requirement/2175/2/index.html): As part of our movement to Continuous Monitoring, we need to get XML Reports out of NexusIQ 
for transmission to our HQ. 
I am just starting this effort after having done similar for SonarQube, and Fortify. 
If anyone kn&hellip; (212 words, Jul 16, 2019)
- [ConMon Requirement - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/conmon-requirement/2175/index.html): As part of our movement to Continuous Monitoring, we need to get XML Reports out of NexusIQ 
for transmission to our HQ. 
I am just starting this effort after having done similar for SonarQube, and Fortify. 
If anyone kn&hellip; (214 words, Jul 15, 2019)
- [ConMon Requirement - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/conmon-requirement/2175/1/index.html): As part of our movement to Continuous Monitoring, we need to get XML Reports out of NexusIQ 
for transmission to our HQ. 
I am just starting this effort after having done similar for SonarQube, and Fortify. 
If anyone kn&hellip; (129 words, Jul 15, 2019)
- [Customer Feedback Call, Making JavaScript Awesome! - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/customer-feedback-call-making-javascript-awesome/2152/index.html): To help improve our JavaScript scanning capability we are seeking participants to complete a survey about your experience with JavaScript and reporting within IQ. We are also seeking users who would be willing to partici&hellip; (149 words, Jul 9, 2019)
- [Customer Feedback Call, Making JavaScript Awesome! - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/customer-feedback-call-making-javascript-awesome/2152/1/index.html): To help improve our JavaScript scanning capability we are seeking participants to complete a survey about your experience with JavaScript and reporting within IQ. We are also seeking users who would be willing to partici&hellip; (232 words, Jul 9, 2019)
- [Uploading artifact to maven hosted repo is slow - Sonatype Nexus Repository - Sonatype Community](/content/community/t/uploading-artifact-to-maven-hosted-repo-is-slow/2142/index.html): Hi, 
We are using Nexus OSS 3.15.2-01, and facing performance issues with very limited repos. 
We currently have 20-25 maven hosted repos for different applications and for each release repo we have separate blobs. 
Now &hellip; (377 words, Jul 9, 2019)
- [Uploading artifact to maven hosted repo is slow - Sonatype Nexus Repository - Sonatype Community](/content/community/t/uploading-artifact-to-maven-hosted-repo-is-slow/2142/1/index.html): Hi, 
We are using Nexus OSS 3.15.2-01, and facing performance issues with very limited repos. 
We currently have 20-25 maven hosted repos for different applications and for each release repo we have separate blobs. 
Now &hellip; (378 words, Jul 9, 2019)
- [Policy-Centric Application Report Feedback and Discussion - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/policy-centric-application-report-feedback-and-discussion/920/10/index.html): An upcoming release of the Nexus IQ Server will feature a preview of the new Policy-Centric Application Report.  Feedback and discussion about this new user interface can be posted here. (830 words, Jul 5, 2019)
- [Deprecated Plugin is working whereas Nexus Platform Plugin is not working for Jenkins 2.X - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/deprecated-plugin-is-working-whereas-nexus-platform-plugin-is-not-working-for-jenkins-2-x/2049/2/index.html): Team, 
we have Jenkins version 2.183.3 in our testing environment .we had installed both Nexus-IQ Plugin 2.16 as well as Nexus Platform Plugin 3.5xxxxxx. we had credentials issue  with Nexus-IQ Server .Thus we tried to e&hellip; (240 words, Jun 20, 2019)
- [Deprecated Plugin is working whereas Nexus Platform Plugin is not working for Jenkins 2.X - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/deprecated-plugin-is-working-whereas-nexus-platform-plugin-is-not-working-for-jenkins-2-x/2049/1/index.html): Team, 
we have Jenkins version 2.183.3 in our testing environment .we had installed both Nexus-IQ Plugin 2.16 as well as Nexus Platform Plugin 3.5xxxxxx. we had credentials issue  with Nexus-IQ Server .Thus we tried to e&hellip; (240 words, Jun 20, 2019)
- [Nexus Uploading File Error - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-uploading-file-error/1224/5/index.html): Dear Friends, 
When I want to upload a file in my repository I got the error below. If I want to upload small size files, I can upload successfully. I would like your emergency support. 
Danger: Operation failed as serve&hellip; (335 words, Jun 12, 2019)
- [Component Remediation Information in IDE Plugins Feedback and Discussion - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/component-remediation-information-in-ide-plugins-feedback-and-discussion/1981/index.html): Release 66 of the Nexus IQ Server features added functionality in the existing IDE plugins, for Eclipse, IDEA and Visual Studio, to expose suggested versions of components with policy violations. This information is base&hellip; (175 words, Jun 11, 2019)
- [Component Remediation Information in IDE Plugins Feedback and Discussion - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/component-remediation-information-in-ide-plugins-feedback-and-discussion/1981/1/index.html): Release 66 of the Nexus IQ Server features added functionality in the existing IDE plugins, for Eclipse, IDEA and Visual Studio, to expose suggested versions of components with policy violations. This information is base&hellip; (162 words, Jun 11, 2019)
- [Can the Upgrade change the Policy in Nexus-IQ? - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/can-the-upgrade-change-the-policy-in-nexus-iq/1980/2/index.html): Team, 
we had done upgrade of Nexus-IQ from 1.44 to 56  4 months ago.few of our developers using Nexus-IQ to scan the artifacts before adding them to nexus are facing below error in the build in jenkins .we have checked &hellip; (211 words, Jun 11, 2019)
- [Can the Upgrade change the Policy in Nexus-IQ? - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/can-the-upgrade-change-the-policy-in-nexus-iq/1980/1/index.html): Team, 
we had done upgrade of Nexus-IQ from 1.44 to 56  4 months ago.few of our developers using Nexus-IQ to scan the artifacts before adding them to nexus are facing below error in the build in jenkins .we have checked &hellip; (212 words, Jun 11, 2019)
- [API to enable Automatic application creation - Sonatype Exchange / Sonatype Exchange Discussion - Sonatype Community](/content/community/t/api-to-enable-automatic-application-creation/1943/2/index.html): How do I use it? 
As part of automation, we use your CLI command (pasted below) to initiate scan. 
java -Xmx1G -Xms1G -jar …/nexus-cli/nexus-cli.jar -i $APP_ID -s $NEXUS_SERVER_URL -a admin:admin123 -t release $TARGET/ -&hellip; (233 words, May 31, 2019)
- [API to enable Automatic application creation - Sonatype Exchange / Sonatype Exchange Discussion - Sonatype Community](/content/community/t/api-to-enable-automatic-application-creation/1943/index.html): How do I use it? 
As part of automation, we use your CLI command (pasted below) to initiate scan. 
java -Xmx1G -Xms1G -jar …/nexus-cli/nexus-cli.jar -i $APP_ID -s $NEXUS_SERVER_URL -a admin:admin123 -t release $TARGET/ -&hellip; (233 words, May 31, 2019)
- [API to enable Automatic application creation - Sonatype Exchange / Sonatype Exchange Discussion - Sonatype Community](/content/community/t/api-to-enable-automatic-application-creation/1943/1/index.html): How do I use it? 
As part of automation, we use your CLI command (pasted below) to initiate scan. 
java -Xmx1G -Xms1G -jar …/nexus-cli/nexus-cli.jar -i $APP_ID -s $NEXUS_SERVER_URL -a admin:admin123 -t release $TARGET/ -&hellip; (237 words, May 31, 2019)
- [SONATYPE-2019-0115 PrimeFaces Issue - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/sonatype-2019-0115-primefaces-issue/1915/2/index.html): SONATYPE-2019-0115 is to report the Jquery 3.3.1 CVE.  There are a couple of issues. 


It is only being reported for PrimeFaces 7.0 when it should be reported for all versions of Primefaces 1.0-7.0 because they all use &hellip; (130 words, May 28, 2019)
- [Sonatype-2018-0365 Issue Update - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/sonatype-2018-0365-issue-update/1914/2/index.html): Currently sonatype-2018-0365 is showing up for PrimeFaces 6.2 and PrimeFaces 7.0  However if you look this issue was fixed in PrimeFaces 6.1.21. 
See: https://github.com/primefaces/primefaces/issues/3214 
Can you please &hellip; (184 words, May 28, 2019)
- [SONATYPE-2019-0115 PrimeFaces Issue - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/sonatype-2019-0115-primefaces-issue/1915/index.html): SONATYPE-2019-0115 is to report the Jquery 3.3.1 CVE.  There are a couple of issues. 


It is only being reported for PrimeFaces 7.0 when it should be reported for all versions of Primefaces 1.0-7.0 because they all use &hellip; (130 words, May 24, 2019)
- [SONATYPE-2019-0115 PrimeFaces Issue - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/sonatype-2019-0115-primefaces-issue/1915/1/index.html): SONATYPE-2019-0115 is to report the Jquery 3.3.1 CVE.  There are a couple of issues. 


It is only being reported for PrimeFaces 7.0 when it should be reported for all versions of Primefaces 1.0-7.0 because they all use &hellip; (125 words, May 24, 2019)
- [Sonatype-2018-0365 Issue Update - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/sonatype-2018-0365-issue-update/1914/1/index.html): Currently sonatype-2018-0365 is showing up for PrimeFaces 6.2 and PrimeFaces 7.0  However if you look this issue was fixed in PrimeFaces 6.1.21. 
See: https://github.com/primefaces/primefaces/issues/3214 
Can you please &hellip; (166 words, May 24, 2019)
- [could not be fetched from the IQ Server - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/could-not-be-fetched-from-the-iq-server/1825/3/index.html): Hi, 
I’m trying to push a JS app to be scanned by IQ Server, but I’m getting could not be fetched from the IQ Server/failed to respond. I could send Go/Python/Java apps, but not JS app. I don’t know if it’s related to th&hellip; (300 words, May 21, 2019)
- [How to scan Go via Jenkins plugin? - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/how-to-scan-go-via-jenkins-plugin/1827/2/index.html): Hi, 
I’m trying to scan a Go project, but the report is empty when I use the Jenkins plugin. It works when I send the go.sum via CLI (Example below). 
I tried to compress the go.sum to zip/tar/gz, send the $WORKSPACE dir&hellip; (321 words, May 20, 2019)
- [Export Policy from Nexus IQ Server - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/export-policy-from-nexus-iq-server/1841/2/index.html): Team, 
Our requirements as follows : 
**How to Export Policy with their exact backend set of rules from IQ Server. We have requirement to check all the set of rules executing in backend for defined polices and doing code&hellip; (239 words, May 20, 2019)
- [Export Policy from Nexus IQ Server - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/export-policy-from-nexus-iq-server/1841/index.html): Team, 
Our requirements as follows : 
**How to Export Policy with their exact backend set of rules from IQ Server. We have requirement to check all the set of rules executing in backend for defined polices and doing code&hellip; (152 words, May 17, 2019)
- [Export Policy from Nexus IQ Server - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/export-policy-from-nexus-iq-server/1841/1/index.html): Team, 
Our requirements as follows : 
**How to Export Policy with their exact backend set of rules from IQ Server. We have requirement to check all the set of rules executing in backend for defined polices and doing code&hellip; (155 words, May 17, 2019)
- [How to scan Go via Jenkins plugin? - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/how-to-scan-go-via-jenkins-plugin/1827/index.html): Hi, 
I’m trying to scan a Go project, but the report is empty when I use the Jenkins plugin. It works when I send the go.sum via CLI (Example below). 
I tried to compress the go.sum to zip/tar/gz, send the $WORKSPACE dir&hellip; (323 words, May 17, 2019)
- [How to scan Go via Jenkins plugin? - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/how-to-scan-go-via-jenkins-plugin/1827/1/index.html): Hi, 
I’m trying to scan a Go project, but the report is empty when I use the Jenkins plugin. It works when I send the go.sum via CLI (Example below). 
I tried to compress the go.sum to zip/tar/gz, send the $WORKSPACE dir&hellip; (321 words, May 17, 2019)
- [could not be fetched from the IQ Server - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/could-not-be-fetched-from-the-iq-server/1825/index.html): Hi, 
I’m trying to push a JS app to be scanned by IQ Server, but I’m getting could not be fetched from the IQ Server/failed to respond. I could send Go/Python/Java apps, but not JS app. I don’t know if it’s related to th&hellip; (306 words, May 17, 2019)
- [could not be fetched from the IQ Server - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/could-not-be-fetched-from-the-iq-server/1825/1/index.html): Hi, 
I’m trying to push a JS app to be scanned by IQ Server, but I’m getting could not be fetched from the IQ Server/failed to respond. I could send Go/Python/Java apps, but not JS app. I don’t know if it’s related to th&hellip; (303 words, May 17, 2019)
- [Backup best practices when using S3 - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/backup-best-practices-when-using-s3/1778/index.html): Hello all, 
Let’s assume I have a single EC2 instance running Nexus 3.15 and an associated S3 bucket for my blob store. The root volume of EC2 just holds Nexus and the data directory – no blobs. Also assume that I have s&hellip; (255 words, May 13, 2019)
- [Backup best practices when using S3 - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/backup-best-practices-when-using-s3/1778/1/index.html): Hello all, 
Let’s assume I have a single EC2 instance running Nexus 3.15 and an associated S3 bucket for my blob store. The root volume of EC2 just holds Nexus and the data directory – no blobs. Also assume that I have s&hellip; (189 words, May 13, 2019)
- [Join us for a virtual review of our newest Nexus features - Community Announcements - Sonatype Community](/content/community/t/join-us-for-a-virtual-review-of-our-newest-nexus-features/1772/2/index.html): Join us for a virtual review of our newest Nexus features. Product Managers, Jamie Whitehouse @jwhitehouse  and Michael Prescott @mprescott , will be highlighting our recent releases on May 21st at 1 PM EST via a webin&hellip; (223 words, May 10, 2019)
- [Join us for a virtual review of our newest Nexus features - Community Announcements - Sonatype Community](/content/community/t/join-us-for-a-virtual-review-of-our-newest-nexus-features/1772/index.html): Join us for a virtual review of our newest Nexus features. Product Managers, Jamie Whitehouse @jwhitehouse  and Michael Prescott @mprescott , will be highlighting our recent releases on May 21st at 1 PM EST via a webin&hellip; (217 words, May 10, 2019)
- [Join us for a virtual review of our newest Nexus features - Community Announcements - Sonatype Community](/content/community/t/join-us-for-a-virtual-review-of-our-newest-nexus-features/1772/1/index.html): Join us for a virtual review of our newest Nexus features. Product Managers, Jamie Whitehouse @jwhitehouse  and Michael Prescott @mprescott , will be highlighting our recent releases on May 21st at 1 PM EST via a webin&hellip; (207 words, May 10, 2019)
- [Looking for help, Nexus crashed and now I get error when trying to start - Sonatype Nexus Repository - Sonatype Community](/content/community/t/looking-for-help-nexus-crashed-and-now-i-get-error-when-trying-to-start/1758/2/index.html): Hi I just got asked to help with an issue thats was reported that nexus isn’t working, getting 502 bad gateway when trying to load the page, so took at look and can see errors in the logs on start up 
below is what I bel&hellip; (571 words, May 9, 2019)
- [Looking for help, Nexus crashed and now I get error when trying to start - Sonatype Nexus Repository - Sonatype Community](/content/community/t/looking-for-help-nexus-crashed-and-now-i-get-error-when-trying-to-start/1758/index.html): Hi I just got asked to help with an issue thats was reported that nexus isn’t working, getting 502 bad gateway when trying to load the page, so took at look and can see errors in the logs on start up 
below is what I bel&hellip; (492 words, May 9, 2019)
- [Looking for help, Nexus crashed and now I get error when trying to start - Sonatype Nexus Repository - Sonatype Community](/content/community/t/looking-for-help-nexus-crashed-and-now-i-get-error-when-trying-to-start/1758/1/index.html): Hi I just got asked to help with an issue thats was reported that nexus isn’t working, getting 502 bad gateway when trying to load the page, so took at look and can see errors in the logs on start up 
below is what I bel&hellip; (529 words, May 9, 2019)
- [Nexus 3 OSS - Multi Arch Docker images for Docker repository - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-3-oss-multi-arch-docker-images-for-docker-repository/1753/index.html): Hi all, 
I have a question regarding the compatibility of the Docker repository in the NXRM 3. 
Does the Docker repository include support for multi-arch images? I could not find anything in the 
documentation 
Thanks in&hellip; (414 words, May 8, 2019)
- [Nexus 3 OSS - Multi Arch Docker images for Docker repository - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-3-oss-multi-arch-docker-images-for-docker-repository/1753/1/index.html): Hi all, 
I have a question regarding the compatibility of the Docker repository in the NXRM 3. 
Does the Docker repository include support for multi-arch images? I could not find anything in the 
documentation 
Thanks in&hellip; (418 words, May 8, 2019)
- [Join Sonatype's Product Managers on 5/21/19 for a Product Webinar - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/join-sonatypes-product-managers-on-5-21-19-for-a-product-webinar/1694/index.html): Hi Nexus IQ users, 
Join Sonatype for a product webinar on May 21 at 1 PM EST. Jamie Whitehouse (Product Manager, Nexus IQ Server) and Michael Prescott (Product Manager, Nexus Repository) will showcase our newest feature&hellip; (260 words, Apr 25, 2019)
- [Join Sonatype's Product Managers on 5/21/19 for a Product Webinar - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/join-sonatypes-product-managers-on-5-21-19-for-a-product-webinar/1694/1/index.html): Hi Nexus IQ users, 
Join Sonatype for a product webinar on May 21 at 1 PM EST. Jamie Whitehouse (Product Manager, Nexus IQ Server) and Michael Prescott (Product Manager, Nexus Repository) will showcase our newest feature&hellip; (234 words, Apr 25, 2019)
- [Chrome Extension for Sonatype Nexus IQ - Sonatype Exchange - Sonatype Community](/content/community/t/chrome-extension-for-sonatype-nexus-iq/1684/index.html): How do I use it? 
Install to your Chrome browser to inspect a package before you download it. The plugin requires a valid Sonatype Nexus Lifecycle instance. You must be licensed to use Nexus Lifecycle to use this plugi&hellip; (227 words, Apr 24, 2019)
- [Chrome Extension for Sonatype Nexus IQ - Sonatype Exchange - Sonatype Community](/content/community/t/chrome-extension-for-sonatype-nexus-iq/1684/1/index.html): How do I use it? 
Install to your Chrome browser to inspect a package before you download it. The plugin requires a valid Sonatype Nexus Lifecycle instance. You must be licensed to use Nexus Lifecycle to use this plugi&hellip; (113 words, Apr 24, 2019)
- [To copy single repository from old instance to new - Sonatype Nexus Repository - Sonatype Community](/content/community/t/to-copy-single-repository-from-old-instance-to-new/1679/index.html): Hi, 
We were using nexus on one server with lot of repositories within single blob, now we decided to have latest version of nexus on new server with same repos but with multiple bolbs (like 7-8 depending on artifact typ&hellip; (1,022 words, Apr 24, 2019)
- [To copy single repository from old instance to new - Sonatype Nexus Repository - Sonatype Community](/content/community/t/to-copy-single-repository-from-old-instance-to-new/1679/1/index.html): Hi, 
We were using nexus on one server with lot of repositories within single blob, now we decided to have latest version of nexus on new server with same repos but with multiple bolbs (like 7-8 depending on artifact typ&hellip; (1,133 words, Apr 24, 2019)
- [Apache Tomcat 8.5.40 Released & CVE-2019-0232 - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/apache-tomcat-8-5-40-released-cve-2019-0232/1610/5/index.html): My Nexus IQ Server says: 
Apache Tomcat 8.5.40 (Group:org.apache.tomcat.embed Artifact:tomcat-embed-core Version: 8.5.40) has CVE-2019-0232 
Apache Tomcat says 
Tomcat 8.5.40 Released
The Apache Tomcat Project is proud t&hellip; (303 words, Apr 18, 2019)
- [Extract pull and push metrics from Nexus oss - Sonatype Nexus Repository - Sonatype Community](/content/community/t/extract-pull-and-push-metrics-from-nexus-oss/1641/index.html): Hi guys, 
I would like to expose/export some metrics from Nexus like artifacts pushed and pulled. I know there is a metrics endpoint using Dropwizard: 
        {host:port}/service/metrics/healthcheck
        {host:port}/&hellip; (76 words, Apr 17, 2019)
- [Extract pull and push metrics from Nexus oss - Sonatype Nexus Repository - Sonatype Community](/content/community/t/extract-pull-and-push-metrics-from-nexus-oss/1641/1/index.html): Hi guys, 
I would like to expose/export some metrics from Nexus like artifacts pushed and pulled. I know there is a metrics endpoint using Dropwizard: 
        {host:port}/service/metrics/healthcheck
        {host:port}/&hellip; (74 words, Apr 17, 2019)
- [Nexus 3 OSS as proxy for gcr private repo - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-3-oss-as-proxy-for-gcr-private-repo/1629/index.html): Hi, 
I was wondering is there a way to configure nexus3 as a proxy for private docker registry on gcr? 
It seems I can add the user _json_key and paste the json file as a password so it authenticates to the *.gcr.io to g&hellip; (939 words, Apr 17, 2019)
- [Nexus 3 OSS as proxy for gcr private repo - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-3-oss-as-proxy-for-gcr-private-repo/1629/1/index.html): Hi, 
I was wondering is there a way to configure nexus3 as a proxy for private docker registry on gcr? 
It seems I can add the user _json_key and paste the json file as a password so it authenticates to the *.gcr.io to g&hellip; (941 words, Apr 17, 2019)
- [OSS License Enhancements - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/oss-license-enhancements/1611/3/index.html): Sonatype is excited to announce significant enhancements to our OSS License detection system that improves coverage, accuracy, and data delivery. 
The enhancements will go live on April 22, 2019. Once active, all applica&hellip; (1,035 words, Apr 16, 2019)
- [Apache Tomcat 8.5.40 Released & CVE-2019-0232 - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/apache-tomcat-8-5-40-released-cve-2019-0232/1610/2/index.html): My Nexus IQ Server says: 
Apache Tomcat 8.5.40 (Group:org.apache.tomcat.embed Artifact:tomcat-embed-core Version: 8.5.40) has CVE-2019-0232 
Apache Tomcat says 
Tomcat 8.5.40 Released
The Apache Tomcat Project is proud t&hellip; (315 words, Apr 16, 2019)
- [OSS License Enhancements - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/oss-license-enhancements/1611/index.html): Sonatype is excited to announce significant enhancements to our OSS License detection system that improves coverage, accuracy, and data delivery. 
The enhancements will go live on April 22, 2019. Once active, all applica&hellip; (1,108 words, Apr 16, 2019)
- [OSS License Enhancements - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/oss-license-enhancements/1611/1/index.html): Sonatype is excited to announce significant enhancements to our OSS License detection system that improves coverage, accuracy, and data delivery. 
The enhancements will go live on April 22, 2019. Once active, all applica&hellip; (1,108 words, Apr 16, 2019)
- [Apache Tomcat 8.5.40 Released & CVE-2019-0232 - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/apache-tomcat-8-5-40-released-cve-2019-0232/1610/index.html): My Nexus IQ Server says: 
Apache Tomcat 8.5.40 (Group:org.apache.tomcat.embed Artifact:tomcat-embed-core Version: 8.5.40) has CVE-2019-0232 
Apache Tomcat says 
Tomcat 8.5.40 Released
The Apache Tomcat Project is proud t&hellip; (316 words, Apr 16, 2019)
- [Apache Tomcat 8.5.40 Released & CVE-2019-0232 - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/apache-tomcat-8-5-40-released-cve-2019-0232/1610/1/index.html): My Nexus IQ Server says: 
Apache Tomcat 8.5.40 (Group:org.apache.tomcat.embed Artifact:tomcat-embed-core Version: 8.5.40) has CVE-2019-0232 
Apache Tomcat says 
Tomcat 8.5.40 Released
The Apache Tomcat Project is proud t&hellip; (316 words, Apr 16, 2019)
- [Endless waiting for upload several artifacts to Nexus3 from Jenkins - Sonatype Nexus Repository - Sonatype Community](/content/community/t/endless-waiting-for-upload-several-artifacts-to-nexus3-from-jenkins/1602/index.html): Hi everyone! When I try  to upload several artifacts from Jenkins slave node with plugin (https://github.com/jenkinsci/nexus-platform-plugin) to Nexus 3, I get endless waiting. 
Uploading one artifact works. 
Uploading s&hellip; (259 words, Apr 15, 2019)
- [Endless waiting for upload several artifacts to Nexus3 from Jenkins - Sonatype Nexus Repository - Sonatype Community](/content/community/t/endless-waiting-for-upload-several-artifacts-to-nexus3-from-jenkins/1602/1/index.html): Hi everyone! When I try  to upload several artifacts from Jenkins slave node with plugin (https://github.com/jenkinsci/nexus-platform-plugin) to Nexus 3, I get endless waiting. 
Uploading one artifact works. 
Uploading s&hellip; (261 words, Apr 15, 2019)
- [IQ Server Dropping Support for IE 9 and 10 - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/iq-server-dropping-support-for-ie-9-and-10/1585/index.html): In an effort to modernize our front end technology, IQ Server will be ending support for Internet Explorer 9 and 10 in the coming months. If you have questions or concerns about this change, please discuss them here. (57 words, Apr 11, 2019)
- [IQ Server Dropping Support for IE 9 and 10 - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/iq-server-dropping-support-for-ie-9-and-10/1585/1/index.html): In an effort to modernize our front end technology, IQ Server will be ending support for Internet Explorer 9 and 10 in the coming months. If you have questions or concerns about this change, please discuss them here. (138 words, Apr 11, 2019)
- [Best practice for auto-configuration - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/best-practice-for-auto-configuration/1554/index.html): Hello, 
Currently, I’m using CFTs and Ansible to spin up a Nexus stack (Nginx reverse proxy and S3 bucket). Once the stack is up, it is momentarily exposed to malicious attacks since the admin password is the default adm&hellip; (226 words, Apr 4, 2019)
- [Best practice for auto-configuration - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/best-practice-for-auto-configuration/1554/1/index.html): Hello, 
Currently, I’m using CFTs and Ansible to spin up a Nexus stack (Nginx reverse proxy and S3 bucket). Once the stack is up, it is momentarily exposed to malicious attacks since the admin password is the default adm&hellip; (218 words, Apr 4, 2019)
- [REST API - How to get list of policy violations for an application id? - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/rest-api-how-to-get-list-of-policy-violations-for-an-application-id/1545/index.html): Currently we have an integration where we would like to pull security violations and policy violations for an application id. We were successful is retrieving security violation using Reports /api/v2/applications/[applic&hellip; (124 words, Apr 3, 2019)
- [REST API - How to get list of policy violations for an application id? - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/rest-api-how-to-get-list-of-policy-violations-for-an-application-id/1545/1/index.html): Currently we have an integration where we would like to pull security violations and policy violations for an application id. We were successful is retrieving security violation using Reports /api/v2/applications/[applic&hellip; (138 words, Apr 3, 2019)
- [Nexus IQ Data Services Maintenance: Wednesday, April 3rd, 2019 - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/nexus-iq-data-services-maintenance-wednesday-april-3rd-2019/1518/3/index.html): Sonatype has planned a scheduled maintenance of the Nexus IQ Data Services on Wednesday, April 3rd, 2019 at approximately 9:30 PM EDT. The expected maintenance window is 30 minutes. 
Maintenance Window 

EDT - 9:30 PM We&hellip; (635 words, Mar 28, 2019)
- [Nexus IQ Data Services Maintenance: Wednesday, April 3rd, 2019 - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/nexus-iq-data-services-maintenance-wednesday-april-3rd-2019/1518/index.html): Sonatype has planned a scheduled maintenance of the Nexus IQ Data Services on Wednesday, April 3rd, 2019 at approximately 9:30 PM EDT. The expected maintenance window is 30 minutes. 
Maintenance Window 

EDT - 9:30 PM We&hellip; (547 words, Mar 27, 2019)
- [Nexus IQ Data Services Maintenance: Wednesday, April 3rd, 2019 - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/nexus-iq-data-services-maintenance-wednesday-april-3rd-2019/1518/1/index.html): Sonatype has planned a scheduled maintenance of the Nexus IQ Data Services on Wednesday, April 3rd, 2019 at approximately 9:30 PM EDT. The expected maintenance window is 30 minutes. 
Maintenance Window 

EDT - 9:30 PM We&hellip; (540 words, Mar 27, 2019)
- [Upgraded to version 62. Still shows 60? - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/upgraded-to-version-62-still-shows-60/1491/3/index.html): I just upgraded our test system from IQ Server version 60 to 62. Very much routine, we typically upgrade every 5-6 weeks. Stopped the application, backed up sonatype-work, unpacked the new version, restored our config.ym&hellip; (148 words, Mar 25, 2019)
- [Upgraded to version 62. Still shows 60? - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/upgraded-to-version-62-still-shows-60/1491/index.html): I just upgraded our test system from IQ Server version 60 to 62. Very much routine, we typically upgrade every 5-6 weeks. Stopped the application, backed up sonatype-work, unpacked the new version, restored our config.ym&hellip; (219 words, Mar 25, 2019)
- [Upgraded to version 62. Still shows 60? - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/upgraded-to-version-62-still-shows-60/1491/1/index.html): I just upgraded our test system from IQ Server version 60 to 62. Very much routine, we typically upgrade every 5-6 weeks. Stopped the application, backed up sonatype-work, unpacked the new version, restored our config.ym&hellip; (148 words, Mar 25, 2019)
- ["Server Disconnected: There is a problem communicating with the server: - Sonatype Nexus Repository - Sonatype Community](/content/community/t/server-disconnected-there-is-a-problem-communicating-with-the-server/1450/index.html): Hi Everyone, 
I’m attempting to use Nexus as a proxy to cache Chocolatey packages for my organization. I’ve installed Nexus on a Intel NUC running W10 Pro. Unfortunately, when I load the GUI in the web-browser I’m inform&hellip; (22 words, Mar 14, 2019)
- [High-availability cofiguration of Nexus IQ - Sonatype Lifecycle & Repository Firewall / Best Practices - Sonatype Community](/content/community/t/high-availability-cofiguration-of-nexus-iq/1424/index.html): During last maintenance of Nexus IQ server (update to the latest version and fix some configuration issues) I saw a lot of failes of DevOps pipelines. The root cause was unable  to download dependencies from proxy reposi&hellip; (534 words, Mar 12, 2019)
- [High-availability cofiguration of Nexus IQ - Sonatype Lifecycle & Repository Firewall / Best Practices - Sonatype Community](/content/community/t/high-availability-cofiguration-of-nexus-iq/1424/1/index.html): During last maintenance of Nexus IQ server (update to the latest version and fix some configuration issues) I saw a lot of failes of DevOps pipelines. The root cause was unable  to download dependencies from proxy reposi&hellip; (542 words, Mar 12, 2019)
- [Setup blob-store s3 in ceph - Sonatype Nexus Repository - Sonatype Community](/content/community/t/setup-blob-store-s3-in-ceph/1406/index.html): Hi. Could you help me. Is it possible setup blob-store via s3 in ceph for nexus3? I’m using it via s3cmd it works well but when setup s3 nexus tries send request to endpoint consists from [s3_bucket].[endpoint_url]. Mayb&hellip; (56 words, Mar 7, 2019)
- [Setup blob-store s3 in ceph - Sonatype Nexus Repository - Sonatype Community](/content/community/t/setup-blob-store-s3-in-ceph/1406/1/index.html): Hi. Could you help me. Is it possible setup blob-store via s3 in ceph for nexus3? I’m using it via s3cmd it works well but when setup s3 nexus tries send request to endpoint consists from [s3_bucket].[endpoint_url]. Mayb&hellip; (131 words, Mar 7, 2019)
- [IQ Server and OpenJDK? - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/iq-server-and-openjdk/1394/2/index.html): System requirements for IQ Server says only “Oracle Java 8 64 bit”. Are there any plans to officially support OpenJDK? We were happy to see this for Nexus 3, hoping it will happen for the IQ Server too. (156 words, Mar 5, 2019)
- [IQ Server and OpenJDK? - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/iq-server-and-openjdk/1394/1/index.html): System requirements for IQ Server says only “Oracle Java 8 64 bit”. Are there any plans to officially support OpenJDK? We were happy to see this for Nexus 3, hoping it will happen for the IQ Server too. (73 words, Mar 5, 2019)
- [Suggested Android integration has stopped working since Android Gradle Plugin 3.0 - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/suggested-android-integration-has-stopped-working-since-android-gradle-plugin-3-0/1371/3/index.html): In the end of December I was struggling to integrate the Nexus IQ scan with my Android project and could not find much info on that. After 3-4 days of going through documentation of Gradle, looking at the topic here http&hellip; (184 words, Feb 27, 2019)
- [Suggested Android integration has stopped working since Android Gradle Plugin 3.0 - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/suggested-android-integration-has-stopped-working-since-android-gradle-plugin-3-0/1371/index.html): In the end of December I was struggling to integrate the Nexus IQ scan with my Android project and could not find much info on that. After 3-4 days of going through documentation of Gradle, looking at the topic here http&hellip; (265 words, Feb 27, 2019)
- [Suggested Android integration has stopped working since Android Gradle Plugin 3.0 - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/suggested-android-integration-has-stopped-working-since-android-gradle-plugin-3-0/1371/1/index.html): In the end of December I was struggling to integrate the Nexus IQ scan with my Android project and could not find much info on that. After 3-4 days of going through documentation of Gradle, looking at the topic here http&hellip; (183 words, Feb 27, 2019)
- [How to scan Android for Vulnerabilities? - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/how-to-scan-android-for-vulnerabilities/71/2/index.html): Nexus IQ Server does not support scanning an .apk file directly due to the minification performed via the dalvik byte code process. For this reason, scanning prior to the assembling of the .apk is required. 
Check out th&hellip; (247 words, Feb 26, 2019)
- [Authentication : sssd / pam - Sonatype Nexus Repository - Sonatype Community](/content/community/t/authentication-sssd-pam/1359/index.html): nexus repository manager 3.15.X 
Is there a way to use pam/sssd authentification? 
The goal is to use multiple authentications systems : one local (unix users accounts) + 2 LDAP. 
Regards. (235 words, Feb 26, 2019)
- [Authentication : sssd / pam - Sonatype Nexus Repository - Sonatype Community](/content/community/t/authentication-sssd-pam/1359/1/index.html): nexus repository manager 3.15.X 
Is there a way to use pam/sssd authentification? 
The goal is to use multiple authentications systems : one local (unix users accounts) + 2 LDAP. 
Regards. (182 words, Feb 26, 2019)
- [Docker login 401 Unauthorized - Sonatype Nexus Repository - Sonatype Community](/content/community/t/docker-login-401-unauthorized/1345/index.html): Hello , 
I am using nexus as a Docker container, with tag sonatype/nexus3:3.14.0. Also, I connect nexus with LDAP for user better user management it is helpful for group and role management. 
For my case, I create a blog&hellip; (1,152 words, Feb 22, 2019)
- [Docker login 401 Unauthorized - Sonatype Nexus Repository - Sonatype Community](/content/community/t/docker-login-401-unauthorized/1345/1/index.html): Hello , 
I am using nexus as a Docker container, with tag sonatype/nexus3:3.14.0. Also, I connect nexus with LDAP for user better user management it is helpful for group and role management. 
For my case, I create a blog&hellip; (1,005 words, Feb 22, 2019)
- [Nexus-carp: CAS Authentication Reverse Proxy for NXRM - Sonatype Exchange - Sonatype Community](/content/community/t/nexus-carp-cas-authentication-reverse-proxy-for-nxrm/1311/index.html): Summary 
nexus-carp provides CAS integration for NXRM enabling SSO for NXRM. nexus-carp acts as reverse-proxy that itself supports CAS and on the other hand authenticates valid requests using the Nexus Remote User Token &hellip; (91 words, Feb 14, 2019)
- [Nexus-scripting: CLI for invoking Groovy Scripts - Sonatype Exchange - Sonatype Community](/content/community/t/nexus-scripting-cli-for-invoking-groovy-scripts/1298/index.html): Summary 
With nexus-scripting you can conveniently provide a groovy-script that is uploaded and executed remotely in a NXRM instance and the output is provided locally. 
With NXRM 3, the HTTP-API is somewhat in need of a&hellip; (231 words, Feb 14, 2019)
- [Nexus-scripting: CLI for invoking Groovy Scripts - Sonatype Exchange - Sonatype Community](/content/community/t/nexus-scripting-cli-for-invoking-groovy-scripts/1298/1/index.html): Summary 
With nexus-scripting you can conveniently provide a groovy-script that is uploaded and executed remotely in a NXRM instance and the output is provided locally. 
With NXRM 3, the HTTP-API is somewhat in need of a&hellip; (210 words, Feb 14, 2019)
- [VSTS Build Extension - Sonatype Exchange - Sonatype Community](/content/community/t/vsts-build-extension/1283/index.html): How do I use it? 
Create a Generic Service Endpoint and specify your Sonatype Nexus endpoint URL, user name, and password. 
Define your build process
Create a build definition to automate your build process. For detailed&hellip; (142 words, Feb 12, 2019)
- [VSTS Build Extension - Sonatype Exchange - Sonatype Community](/content/community/t/vsts-build-extension/1283/1/index.html): How do I use it? 
Create a Generic Service Endpoint and specify your Sonatype Nexus endpoint URL, user name, and password. 
Define your build process
Create a build definition to automate your build process. For detailed&hellip; (143 words, Feb 12, 2019)
- [Nexus Repository 3 - Apt Repository Format - Sonatype Exchange - Sonatype Community](/content/community/t/nexus-repository-3-apt-repository-format/1257/index.html): How do I use it? 
Build

Clone the project:

git clone https://github.com/sonatype-nexus-community/nexus-repository-apt


Build the pluguin:

cd nexus-repository
mvn



Install

Stop Nexus:


service nexus stop or
cd &lt;n&hellip; (160 words, Feb 12, 2019)
- [Nexus Repository 3 - Apt Repository Format - Sonatype Exchange - Sonatype Community](/content/community/t/nexus-repository-3-apt-repository-format/1257/1/index.html): How do I use it? 
Build

Clone the project:

git clone https://github.com/sonatype-nexus-community/nexus-repository-apt


Build the pluguin:

cd nexus-repository
mvn



Install

Stop Nexus:


service nexus stop or
cd &lt;n&hellip; (163 words, Feb 12, 2019)
- [Nexus Repository - Puppet Module - Sonatype Exchange - Sonatype Community](/content/community/t/nexus-repository-puppet-module/1255/index.html): How do I use it? 
Sonatype Nexus Puppet module 
Install and configure Sonatype Nexus. 
Requires 
maestrodev/wget 
puppetlabs/stdlib 
Usage 
The following is a basic role class for building a nexus host. Adjust accordingl&hellip; (322 words, Feb 12, 2019)
- [Nexus Repository - Puppet Module - Sonatype Exchange - Sonatype Community](/content/community/t/nexus-repository-puppet-module/1255/1/index.html): How do I use it? 
Sonatype Nexus Puppet module 
Install and configure Sonatype Nexus. 
Requires 
maestrodev/wget 
puppetlabs/stdlib 
Usage 
The following is a basic role class for building a nexus host. Adjust accordingl&hellip; (320 words, Feb 12, 2019)
- [New Help and Education Materials Available - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/new-help-and-education-materials-available/1225/index.html): Howdy! 
We like to provide an easy way to catch up on the latest help and education materials that we’ve produced. This video highlights everything that was delivered in Q4 of 2018. 

 
Of course, you can also head over &hellip; (160 words, Feb 7, 2019)
- [Nexus Uploading File Error - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-uploading-file-error/1224/index.html): Dear Friends, 
When I want to upload a file in my repository I got the error below. If I want to upload small size files, I can upload successfully. I would like your emergency support. 
Danger: Operation failed as serve&hellip; (340 words, Feb 7, 2019)
- [Nexus Uploading File Error - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nexus-uploading-file-error/1224/1/index.html): Dear Friends, 
When I want to upload a file in my repository I got the error below. If I want to upload small size files, I can upload successfully. I would like your emergency support. 
Danger: Operation failed as serve&hellip; (336 words, Feb 7, 2019)
- [Content selector for pypi repository - Sonatype Nexus Repository - Sonatype Community](/content/community/t/content-selector-for-pypi-repository/1177/index.html): Hello everyone, 
I have created two pypi repository in nexus (for snapshot and release version) but nexus don’t accept version policy for pypi. 
But snapshot version of pipy artifacts have “.dev” pattern in their name. 
S&hellip; (455 words, Feb 6, 2019)
- [Content selector for pypi repository - Sonatype Nexus Repository - Sonatype Community](/content/community/t/content-selector-for-pypi-repository/1177/1/index.html): Hello everyone, 
I have created two pypi repository in nexus (for snapshot and release version) but nexus don’t accept version policy for pypi. 
But snapshot version of pipy artifacts have “.dev” pattern in their name. 
S&hellip; (452 words, Feb 6, 2019)
- [Audit and event logging - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/audit-and-event-logging/1048/4/index.html): We’ve added enhanced logging to address the need to audit actions and changes to the configuration and data within the IQ Server. 
Typical questions that can be answered by consulting the audit log: 

who made what chang&hellip; (193 words, Jan 30, 2019)
- [Backup/Restore differences between NXRM 3.5.x and NXRM 3.14.x? - Sonatype Lifecycle & Repository Firewall / Best Practices - Sonatype Community](/content/community/t/backup-restore-differences-between-nxrm-3-5-x-and-nxrm-3-14-x/1111/5/index.html): I have inherited two Nexus Repo servers, both running CentOS 7.4, one with access to the internet, and the other which is on an air gapped network (AG) with no internet access.  I’ve recently updated both Nexus servers f&hellip; (931 words, Jan 28, 2019)
- [Using your existing Nexus IQ configuration and key-store inside a Docker image - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/using-your-existing-nexus-iq-configuration-and-key-store-inside-a-docker-image/1115/2/index.html): Having successfully transitioned my native host deployment of NXRM to run inside a docker container (see here), I decided to embark upon the same process for my IQ server. 
My objective is to run IQ Server in a docker co&hellip; (471 words, Jan 27, 2019)
- [Using your existing Nexus IQ configuration and key-store inside a Docker image - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/using-your-existing-nexus-iq-configuration-and-key-store-inside-a-docker-image/1115/index.html): Having successfully transitioned my native host deployment of NXRM to run inside a docker container (see here), I decided to embark upon the same process for my IQ server. 
My objective is to run IQ Server in a docker co&hellip; (424 words, Jan 25, 2019)
- [Using your existing Nexus IQ configuration and key-store inside a Docker image - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/using-your-existing-nexus-iq-configuration-and-key-store-inside-a-docker-image/1115/1/index.html): Having successfully transitioned my native host deployment of NXRM to run inside a docker container (see here), I decided to embark upon the same process for my IQ server. 
My objective is to run IQ Server in a docker co&hellip; (469 words, Jan 25, 2019)
- [Policy-Centric Application Report Feedback and Discussion - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/policy-centric-application-report-feedback-and-discussion/920/3/index.html): An upcoming release of the Nexus IQ Server will feature a preview of the new Policy-Centric Application Report.  Feedback and discussion about this new user interface can be posted here. (882 words, Jan 25, 2019)
- [About the Sonatype Labs category - Sonatype Labs - Sonatype Community](/content/community/t/about-the-sonatype-labs-category/1112/index.html): Ask questions and discuss Sonatype Labs experimental features, including Data Insights. 
This Community category is the place to discuss experimental new features being developed by Sonatype, including Data Insights. The&hellip; (225 words, Jan 24, 2019)
- [About the Sonatype Labs category - Sonatype Labs - Sonatype Community](/content/community/t/about-the-sonatype-labs-category/1112/1/index.html): Ask questions and discuss Sonatype Labs experimental features, including Data Insights. 
This Community category is the place to discuss experimental new features being developed by Sonatype, including Data Insights. The&hellip; (217 words, Jan 24, 2019)
- [Backup/Restore differences between NXRM 3.5.x and NXRM 3.14.x? - Sonatype Lifecycle & Repository Firewall / Best Practices - Sonatype Community](/content/community/t/backup-restore-differences-between-nxrm-3-5-x-and-nxrm-3-14-x/1111/index.html): I have inherited two Nexus Repo servers, both running CentOS 7.4, one with access to the internet, and the other which is on an air gapped network (AG) with no internet access.  I’ve recently updated both Nexus servers f&hellip; (918 words, Jan 24, 2019)
- [Backup/Restore differences between NXRM 3.5.x and NXRM 3.14.x? - Sonatype Lifecycle & Repository Firewall / Best Practices - Sonatype Community](/content/community/t/backup-restore-differences-between-nxrm-3-5-x-and-nxrm-3-14-x/1111/1/index.html): I have inherited two Nexus Repo servers, both running CentOS 7.4, one with access to the internet, and the other which is on an air gapped network (AG) with no internet access.  I’ve recently updated both Nexus servers f&hellip; (931 words, Jan 24, 2019)
- [Policy-Centric Application Report Feedback and Discussion - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/policy-centric-application-report-feedback-and-discussion/920/2/index.html): An upcoming release of the Nexus IQ Server will feature a preview of the new Policy-Centric Application Report.  Feedback and discussion about this new user interface can be posted here. (882 words, Jan 24, 2019)
- [Improvements to Tree Browsing in Nexus Repository Manager 3.15 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/improvements-to-tree-browsing-in-nexus-repository-manager-3-15/1109/index.html): Delete Folder
An oft requested feature by users is the ability to delete a larger amount of content from repositories. With the 3.15 release while browsing the tree if a user selects a folder they have access to a new De&hellip; (326 words, Jan 24, 2019)
- [NXRM 3.15 Searching with Maven GAV coordinates - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nxrm-3-15-searching-with-maven-gav-coordinates/1107/index.html): Maven components are typically referred to by a coordinate string that can easily identify the component that you are looking for: 
{groupId}:{artifactId}:{version}:{extension}:{classifier}

In this release of NXRM you c&hellip; (131 words, Jan 24, 2019)
- [NXRM 3.15 and Component Usage Snippets - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nxrm-3-15-and-component-usage-snippets/1106/index.html): In NXRM 3.15 we’ve put in place, a popular feature from NXRM 2, the ability to copy/paste dependency snippets for Maven POM files. This was a small but rather handy feature; no one wants to type all that junk themselves.&hellip; (253 words, Jan 24, 2019)
- [NXRM 3.15 and Component Usage Snippets - Sonatype Nexus Repository - Sonatype Community](/content/community/t/nxrm-3-15-and-component-usage-snippets/1106/1/index.html): In NXRM 3.15 we’ve put in place, a popular feature from NXRM 2, the ability to copy/paste dependency snippets for Maven POM files. This was a small but rather handy feature; no one wants to type all that junk themselves.&hellip; (246 words, Jan 24, 2019)
- [Getting Started with Security Remediation - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/getting-started-with-security-remediation/916/2/index.html): The Sonatype Customer Education team has a new article out on our guides site. This guide will help you identify, and put into process, ideal research and remediation guidelines for your organization. 
View the article h&hellip; (178 words, Jan 23, 2019)
- [NexusIQ scan for Android - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/nexusiq-scan-for-android/1089/index.html): Hi, 
We’re using Nexus Platform Plugin in Jenkins to carry out  Android scan vulnerabilities. 
I’m looking for how NexusIq will be scanning Android application? 
I tried to apply the parameter scanPattern as [*.apk] file&hellip; (401 words, Jan 21, 2019)
- [NexusIQ scan for Android - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/nexusiq-scan-for-android/1089/1/index.html): Hi, 
We’re using Nexus Platform Plugin in Jenkins to carry out  Android scan vulnerabilities. 
I’m looking for how NexusIq will be scanning Android application? 
I tried to apply the parameter scanPattern as [*.apk] file&hellip; (401 words, Jan 21, 2019)
- [Component Categories - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/component-categories/1049/1/index.html): IQ Server release 57 added component categories for Java components.  These are visible in the Component Information Panel (CIP). 
 
We’re interested in how you’re using this information, and what we might use it for in &hellip; (164 words, Jan 14, 2019)
- [Audit and event logging - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/audit-and-event-logging/1048/index.html): We’ve added enhanced logging to address the need to audit actions and changes to the configuration and data within the IQ Server. 
Typical questions that can be answered by consulting the audit log: 

who made what chang&hellip; (209 words, Jan 14, 2019)
- [Audit and event logging - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/audit-and-event-logging/1048/1/index.html): We’ve added enhanced logging to address the need to audit actions and changes to the configuration and data within the IQ Server. 
Typical questions that can be answered by consulting the audit log: 

who made what chang&hellip; (247 words, Jan 14, 2019)
- [How to explicitly define JAVA version to be used in starting of Nexus_IQ 1.56v? - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/how-to-explicitly-define-java-version-to-be-used-in-starting-of-nexus-iq-1-56v/1033/3/index.html): Team, 
I had recently upgraded Nexus-IQ from 1.24v to 1.44v in our Production &amp; will be upgrading it further to 1.56 version in next week.for the same ,i did edit in ~/.bashrc for exporting JAVA_HOME variable and sourced&hellip; (186 words, Jan 12, 2019)
- [How to explicitly define JAVA version to be used in starting of Nexus_IQ 1.56v? - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/how-to-explicitly-define-java-version-to-be-used-in-starting-of-nexus-iq-1-56v/1033/index.html): Team, 
I had recently upgraded Nexus-IQ from 1.24v to 1.44v in our Production &amp; will be upgrading it further to 1.56 version in next week.for the same ,i did edit in ~/.bashrc for exporting JAVA_HOME variable and sourced&hellip; (184 words, Jan 11, 2019)
- [How to explicitly define JAVA version to be used in starting of Nexus_IQ 1.56v? - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/how-to-explicitly-define-java-version-to-be-used-in-starting-of-nexus-iq-1-56v/1033/1/index.html): Team, 
I had recently upgraded Nexus-IQ from 1.24v to 1.44v in our Production &amp; will be upgrading it further to 1.56 version in next week.for the same ,i did edit in ~/.bashrc for exporting JAVA_HOME variable and sourced&hellip; (184 words, Jan 11, 2019)
- [New Nexus IQ for Developers Courses Published - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/new-nexus-iq-for-developers-courses-published/996/index.html): Two new courses for Nexus IQ have been published: 

IQ for Developers 100 - Foundations
IQ for Developers 101 - Organizational Policies

Take a look, leave a comment, and be sure to check back in this community for more &hellip; (177 words, Jan 4, 2019)
- [New Nexus IQ for Developers Courses Published - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/new-nexus-iq-for-developers-courses-published/996/1/index.html): Two new courses for Nexus IQ have been published: 

IQ for Developers 100 - Foundations
IQ for Developers 101 - Organizational Policies

Take a look, leave a comment, and be sure to check back in this community for more &hellip; (48 words, Jan 4, 2019)
- [Using your existing Nexus Repository configuration and key-store inside a Docker image - Sonatype Nexus Repository - Sonatype Community](/content/community/t/using-your-existing-nexus-repository-configuration-and-key-store-inside-a-docker-image/994/index.html): So you’ve installed Nexus Repository Manager 3 on a dedicated server, configured it to meet the needs of your organisation and have it populated with a vast number of OSS artefacts and components that are consumed across&hellip; (322 words, Jan 3, 2019)
- [Problem with "Active Direct" integration. oss 3.14.0-04 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/problem-with-active-direct-integration-oss-3-14-0-04/964/5/index.html): I want using “active directory” for “nexus” authorization . As i understood connecting from “nexus” to “active directory” is established. Also i see some user id in user mapping test results. But I can’t login using “act&hellip; (180 words, Dec 26, 2018)
- [Jenkins pipeline to execute nexusPolicyEvaluation for .net Application - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/jenkins-pipeline-to-execute-nexuspolicyevaluation-for-net-application/975/index.html): Hi Team, 
I’m Invoking a Jenkins Pipeline Script as 
nexusPolicyEvaluation iqApplication: ‘DotNetApp’, iqStage: &#39;build’ 
but, Unable to find any component scan for .Net Application. 
Looking solution for “How to integrat&hellip; (120 words, Dec 24, 2018)
- [Jenkins pipeline to execute nexusPolicyEvaluation for .net Application - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/jenkins-pipeline-to-execute-nexuspolicyevaluation-for-net-application/975/1/index.html): Hi Team, 
I’m Invoking a Jenkins Pipeline Script as 
nexusPolicyEvaluation iqApplication: ‘DotNetApp’, iqStage: &#39;build’ 
but, Unable to find any component scan for .Net Application. 
Looking solution for “How to integrat&hellip; (117 words, Dec 24, 2018)
- [Problem with "Active Direct" integration. oss 3.14.0-04 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/problem-with-active-direct-integration-oss-3-14-0-04/964/index.html): I want using “active directory” for “nexus” authorization . As i understood connecting from “nexus” to “active directory” is established. Also i see some user id in user mapping test results. But I can’t login using “act&hellip; (180 words, Dec 21, 2018)
- [Problem with "Active Direct" integration. oss 3.14.0-04 - Sonatype Nexus Repository - Sonatype Community](/content/community/t/problem-with-active-direct-integration-oss-3-14-0-04/964/1/index.html): I want using “active directory” for “nexus” authorization . As i understood connecting from “nexus” to “active directory” is established. Also i see some user id in user mapping test results. But I can’t login using “act&hellip; (180 words, Dec 21, 2018)
- [Nexus IQ Data Services Maintenance: Wednesday, December 26th, 2018 - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/nexus-iq-data-services-maintenance-wednesday-december-26th-2018/960/2/index.html): Sonatype has planned a scheduled maintenance of the Nexus IQ Data Services on Wednesday, December 26th, 2018 at approximately 9 PM EDT. The expected maintenance window is 15 minutes. 
Maintenance Window 

EDT - 9 PM Wedn&hellip; (701 words, Dec 20, 2018)
- [Nexus IQ Data Services Maintenance: Wednesday, December 26th, 2018 - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/nexus-iq-data-services-maintenance-wednesday-december-26th-2018/960/index.html): Sonatype has planned a scheduled maintenance of the Nexus IQ Data Services on Wednesday, December 26th, 2018 at approximately 9 PM EDT. The expected maintenance window is 15 minutes. 
Maintenance Window 

EDT - 9 PM Wedn&hellip; (694 words, Dec 20, 2018)
- [Nexus IQ Data Services Maintenance: Wednesday, December 26th, 2018 - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/nexus-iq-data-services-maintenance-wednesday-december-26th-2018/960/1/index.html): Sonatype has planned a scheduled maintenance of the Nexus IQ Data Services on Wednesday, December 26th, 2018 at approximately 9 PM EDT. The expected maintenance window is 15 minutes. 
Maintenance Window 

EDT - 9 PM Wedn&hellip; (694 words, Dec 20, 2018)
- [Best Practice - Waivers for Environment Specific Vulnerabilities - Sonatype Lifecycle & Repository Firewall / Best Practices - Sonatype Community](/content/community/t/best-practice-waivers-for-environment-specific-vulnerabilities/958/index.html): One of the most common types of questions that we get asked is “Every version is vulnerable. What should I do?” 
In many cases this is cited as a reason for delaying the upgrade of a project dependency. Even when this si&hellip; (675 words, Dec 19, 2018)
- [Best Practice - Waivers for Environment Specific Vulnerabilities - Sonatype Lifecycle & Repository Firewall / Best Practices - Sonatype Community](/content/community/t/best-practice-waivers-for-environment-specific-vulnerabilities/958/1/index.html): One of the most common types of questions that we get asked is “Every version is vulnerable. What should I do?” 
In many cases this is cited as a reason for delaying the upgrade of a project dependency. Even when this si&hellip; (659 words, Dec 19, 2018)
- [List users in role - Sonatype Nexus Repository - Sonatype Community](/content/community/t/list-users-in-role/922/2/index.html): Hello, 
Is there a way to list all users that are associated with a role? At the moment, if I want to find out what users have role X I would have to check each user to see what role they’re associated with. 
Tx, 
Ryan (199 words, Dec 11, 2018)
- [List users in role - Sonatype Nexus Repository - Sonatype Community](/content/community/t/list-users-in-role/922/index.html): Hello, 
Is there a way to list all users that are associated with a role? At the moment, if I want to find out what users have role X I would have to check each user to see what role they’re associated with. 
Tx, 
Ryan (195 words, Dec 11, 2018)
- [Policy-Centric Application Report Feedback and Discussion - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/policy-centric-application-report-feedback-and-discussion/920/index.html): An upcoming release of the Nexus IQ Server will feature a preview of the new Policy-Centric Application Report.  Feedback and discussion about this new user interface can be posted here. (916 words, Dec 11, 2018)
- [Policy-Centric Application Report Feedback and Discussion - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/policy-centric-application-report-feedback-and-discussion/920/1/index.html): An upcoming release of the Nexus IQ Server will feature a preview of the new Policy-Centric Application Report.  Feedback and discussion about this new user interface can be posted here. (831 words, Dec 11, 2018)
- [Getting Started with Security Remediation - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/getting-started-with-security-remediation/916/index.html): The Sonatype Customer Education team has a new article out on our guides site. This guide will help you identify, and put into process, ideal research and remediation guidelines for your organization. 
View the article h&hellip; (178 words, Dec 10, 2018)
- [Expected Nexus Firewall Quarantine Numbers - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/expected-nexus-firewall-quarantine-numbers/873/2/index.html): Hi Everybody, 
I’m looking for someone to share their experience when they implemented Nexus Firewall. 
I am going to use Nexus Repository as gateway to the public Repos with IQ Server providing the Firewall to filter ou&hellip; (630 words, Dec 3, 2018)
- [Expected Nexus Firewall Quarantine Numbers - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/expected-nexus-firewall-quarantine-numbers/873/index.html): Hi Everybody, 
I’m looking for someone to share their experience when they implemented Nexus Firewall. 
I am going to use Nexus Repository as gateway to the public Repos with IQ Server providing the Firewall to filter ou&hellip; (550 words, Nov 29, 2018)
- [Expected Nexus Firewall Quarantine Numbers - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/expected-nexus-firewall-quarantine-numbers/873/1/index.html): Hi Everybody, 
I’m looking for someone to share their experience when they implemented Nexus Firewall. 
I am going to use Nexus Repository as gateway to the public Repos with IQ Server providing the Firewall to filter ou&hellip; (557 words, Nov 29, 2018)
- [Retrieving Nexus CLI tools from a repository - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/retrieving-nexus-cli-tools-from-a-repository/844/3/index.html): So, over at How can I use Gradle for Sonatype Nexus IQ Analysis - Help/Discuss - Gradle Forums there’s an example of how to use Nexus IQ from a Gradle build. That’s great, but is there a repository somewhere that contain&hellip; (247 words, Nov 26, 2018)
- [Retrieving Nexus CLI tools from a repository - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/retrieving-nexus-cli-tools-from-a-repository/844/index.html): So, over at How can I use Gradle for Sonatype Nexus IQ Analysis - Help/Discuss - Gradle Forums there’s an example of how to use Nexus IQ from a Gradle build. That’s great, but is there a repository somewhere that contain&hellip; (247 words, Nov 22, 2018)
- [Retrieving Nexus CLI tools from a repository - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/retrieving-nexus-cli-tools-from-a-repository/844/1/index.html): So, over at How can I use Gradle for Sonatype Nexus IQ Analysis - Help/Discuss - Gradle Forums there’s an example of how to use Nexus IQ from a Gradle build. That’s great, but is there a repository somewhere that contain&hellip; (247 words, Nov 22, 2018)
- [Migrate nexus artifacts and docker images from one nexus instance to another - Sonatype Nexus Repository - Sonatype Community](/content/community/t/migrate-nexus-artifacts-and-docker-images-from-one-nexus-instance-to-another/830/index.html): Hi, 
I need help in migrating the nexus artifacts and docker images from one nexus instance to another instance we are currently using our private chart with this image  sonatype/nexus3:3.6.0. 
But now we have decided to&hellip; (317 words, Nov 20, 2018)
- [Migrate nexus artifacts and docker images from one nexus instance to another - Sonatype Nexus Repository - Sonatype Community](/content/community/t/migrate-nexus-artifacts-and-docker-images-from-one-nexus-instance-to-another/830/1/index.html): Hi, 
I need help in migrating the nexus artifacts and docker images from one nexus instance to another instance we are currently using our private chart with this image  sonatype/nexus3:3.6.0. 
But now we have decided to&hellip; (387 words, Nov 20, 2018)
- [Adding Roles to Users in IQ Server via REST API - Sonatype Lifecycle & Repository Firewall / Best Practices - Sonatype Community](/content/community/t/adding-roles-to-users-in-iq-server-via-rest-api/821/index.html): I frequently get asked by our customers how to they can programmatically manage user permissions in IQ Server. 
You will first need to understand the Organization and Application Hierarchy and Inheritance. Once you have &hellip; (353 words, Nov 16, 2018)
- [Adding Roles to Users in IQ Server via REST API - Sonatype Lifecycle & Repository Firewall / Best Practices - Sonatype Community](/content/community/t/adding-roles-to-users-in-iq-server-via-rest-api/821/1/index.html): I frequently get asked by our customers how to they can programmatically manage user permissions in IQ Server. 
You will first need to understand the Organization and Application Hierarchy and Inheritance. Once you have &hellip; (353 words, Nov 16, 2018)
- [Redeploy Nuget Package - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/redeploy-nuget-package/788/3/index.html): Hi, 
I have a problem. I did an upload of a Nuget Package to my local nuget-hosted repository, but with a wrong targetframewrok. The repository is configured to “allow rediploy”, so I tried to do a new deploy with the co&hellip; (328 words, Nov 9, 2018)
- [Redeploy Nuget Package - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/redeploy-nuget-package/788/index.html): Hi, 
I have a problem. I did an upload of a Nuget Package to my local nuget-hosted repository, but with a wrong targetframewrok. The repository is configured to “allow rediploy”, so I tried to do a new deploy with the co&hellip; (324 words, Nov 9, 2018)
- [Redeploy Nuget Package - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/redeploy-nuget-package/788/1/index.html): Hi, 
I have a problem. I did an upload of a Nuget Package to my local nuget-hosted repository, but with a wrong targetframewrok. The repository is configured to “allow rediploy”, so I tried to do a new deploy with the co&hellip; (324 words, Nov 9, 2018)
- [Automation the Provisioning of Nexus RBAC Model - Content Selectors, Permissions, Roles, Users - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/automation-the-provisioning-of-nexus-rbac-model-content-selectors-permissions-roles-users/778/2/index.html): Continuing the discussion from Advanced Use Cases for the Nexus Repository Manager API: 
Companies with many development teams often ask us how to automate the creation of the permission model inside of Nexus Repository &hellip; (159 words, Nov 8, 2018)
- [Automation the Provisioning of Nexus RBAC Model - Content Selectors, Permissions, Roles, Users - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/automation-the-provisioning-of-nexus-rbac-model-content-selectors-permissions-roles-users/778/index.html): Continuing the discussion from Advanced Use Cases for the Nexus Repository Manager API: 
Companies with many development teams often ask us how to automate the creation of the permission model inside of Nexus Repository &hellip; (177 words, Nov 8, 2018)
- [Automation the Provisioning of Nexus RBAC Model - Content Selectors, Permissions, Roles, Users - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/automation-the-provisioning-of-nexus-rbac-model-content-selectors-permissions-roles-users/778/1/index.html): Continuing the discussion from Advanced Use Cases for the Nexus Repository Manager API: 
Companies with many development teams often ask us how to automate the creation of the permission model inside of Nexus Repository &hellip; (259 words, Nov 8, 2018)
- [Remove previously mapped role - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/remove-previously-mapped-role/749/3/index.html): I previously used this to map roles: 
{
    &quot;memberMappings&quot;: [
        {
            &quot;roleId&quot;: &quot;1cddabf7fdaa47d6833454af10e0a3ef&quot;,
            &quot;members&quot;: [
                {
                    &quot;type&quot;: &quot;USER&quot;,
         &hellip; (212 words, Nov 2, 2018)
- [Error 405 PUT | How to publish to nexus through sbt? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/error-405-put-how-to-publish-to-nexus-through-sbt/756/1/index.html) (91 words, Nov 1, 2018)
- [Uploading Artifacts - Sonatype Nexus Repository - Sonatype Community](/content/community/t/uploading-artifacts/718/3/index.html): I am trying to upload Snapshot.jar file to nexus and I am getting this error. 
Return code is: 400, ReasonPhrase: Detected content type [application/x-sh], but expected [application/java-archive]: 
When I change the file&hellip; (451 words, Nov 1, 2018)
- [Remove previously mapped role - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/remove-previously-mapped-role/749/index.html): I previously used this to map roles: 
{
    &quot;memberMappings&quot;: [
        {
            &quot;roleId&quot;: &quot;1cddabf7fdaa47d6833454af10e0a3ef&quot;,
            &quot;members&quot;: [
                {
                    &quot;type&quot;: &quot;USER&quot;,
         &hellip; (202 words, Oct 31, 2018)
- [Remove previously mapped role - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/remove-previously-mapped-role/749/1/index.html): I previously used this to map roles: 
{
    &quot;memberMappings&quot;: [
        {
            &quot;roleId&quot;: &quot;1cddabf7fdaa47d6833454af10e0a3ef&quot;,
            &quot;members&quot;: [
                {
                    &quot;type&quot;: &quot;USER&quot;,
         &hellip; (207 words, Oct 31, 2018)
- [Downloading the Eclipse IQ Plugin behind a corporate network - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/downloading-the-eclipse-iq-plugin-behind-a-corporate-network/727/index.html): com.sonatype.clm.ide.eclipse.site-2.13.0.20171117-1940.zip (3.4 MB) 
com.sonatype.clm.ide.eclipse.site-2.13.1.20180926-1000.zip (3.6 MB) (93 words, Oct 26, 2018)
- [Downloading the Eclipse IQ Plugin behind a corporate network - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/downloading-the-eclipse-iq-plugin-behind-a-corporate-network/727/1/index.html): com.sonatype.clm.ide.eclipse.site-2.13.0.20171117-1940.zip (3.4 MB) 
com.sonatype.clm.ide.eclipse.site-2.13.1.20180926-1000.zip (3.6 MB) (109 words, Oct 26, 2018)
- [Uploading Artifacts - Sonatype Nexus Repository - Sonatype Community](/content/community/t/uploading-artifacts/718/2/index.html): I am trying to upload Snapshot.jar file to nexus and I am getting this error. 
Return code is: 400, ReasonPhrase: Detected content type [application/x-sh], but expected [application/java-archive]: 
When I change the file&hellip; (445 words, Oct 25, 2018)
- [Uploading Artifacts - Sonatype Nexus Repository - Sonatype Community](/content/community/t/uploading-artifacts/718/1/index.html): I am trying to upload Snapshot.jar file to nexus and I am getting this error. 
Return code is: 400, ReasonPhrase: Detected content type [application/x-sh], but expected [application/java-archive]: 
When I change the file&hellip; (451 words, Oct 25, 2018)
- [Nexus IQ Server release 53 - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/nexus-iq-server-release-53/714/index.html): We would like to announce the availability of the Nexus IQ Server release 53. 
The changes in this release include: 

Audit logging of policy evaluation, and component data events.
Ability to waive a specific violation, &hellip; (73 words, Oct 24, 2018)
- [Nexus IQ Server release 53 - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/nexus-iq-server-release-53/714/1/index.html): We would like to announce the availability of the Nexus IQ Server release 53. 
The changes in this release include: 

Audit logging of policy evaluation, and component data events.
Ability to waive a specific violation, &hellip; (73 words, Oct 24, 2018)
- [Sorting attributes for Asset - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sorting-attributes-for-asset/711/index.html): I’m adding new properties to assets after performing some operations on them. I want to store information about what I did in the Attributes section under my own tab. When adding items, they seem to be added in a strange&hellip; (120 words, Oct 23, 2018)
- [Sorting attributes for Asset - Sonatype Nexus Repository - Sonatype Community](/content/community/t/sorting-attributes-for-asset/711/1/index.html): I’m adding new properties to assets after performing some operations on them. I want to store information about what I did in the Attributes section under my own tab. When adding items, they seem to be added in a strange&hellip; (139 words, Oct 23, 2018)
- [Purge old docker images and keep X number of image in repo - Sonatype Nexus Repository - Sonatype Community](/content/community/t/purge-old-docker-images-and-keep-x-number-of-image-in-repo/677/index.html): Hi 
Using Nexus 3.13 version and i wanted to purge my docker mainfiest and images and keep only X number of images for all my microservices. 
Could any one tell how can i do that . 
Regards 
abhinav D (156 words, Oct 17, 2018)
- [Industry standards/Best Practices - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/industry-standards-best-practices/668/index.html): Hi, 
My organization has been using Nexus for a few years. We are now finding ourselves in a position where we would like to setup guidelines for new teams being onboarded and set of norms to apply to the existing teams.&hellip; (639 words, Oct 15, 2018)
- [Industry standards/Best Practices - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/industry-standards-best-practices/668/1/index.html): Hi, 
My organization has been using Nexus for a few years. We are now finding ourselves in a position where we would like to setup guidelines for new teams being onboarded and set of norms to apply to the existing teams.&hellip; (635 words, Oct 15, 2018)
- [Add and enable Rut Auth capability using scripting API - Sonatype Nexus Repository - Sonatype Community](/content/community/t/add-and-enable-rut-auth-capability-using-scripting-api/657/index.html): Hello 
I’m trying to add Rut Auth capability and enable Rut Auth realm using scripting API. But I haven’t found anything useful yet. The documentation examples are for repositories. Is there any way to add Rut Auth capab&hellip; (542 words, Oct 12, 2018)
- [Add and enable Rut Auth capability using scripting API - Sonatype Nexus Repository - Sonatype Community](/content/community/t/add-and-enable-rut-auth-capability-using-scripting-api/657/1/index.html): Hello 
I’m trying to add Rut Auth capability and enable Rut Auth realm using scripting API. But I haven’t found anything useful yet. The documentation examples are for repositories. Is there any way to add Rut Auth capab&hellip; (542 words, Oct 12, 2018)
- [Authenticate users via keycloak - Sonatype Nexus Repository - Sonatype Community](/content/community/t/authenticate-users-via-keycloak/652/4/index.html): Hello, 
I have a single sign on system and I’m trying to login into nexus via keycloak authentication. I’m using GitHub - keycloak/keycloak-gatekeeper: A OpenID / Keycloak Proxy service as a keycloak proxy. I’ve setup th&hellip; (366 words, Oct 11, 2018)
- [Authenticate users via keycloak - Sonatype Nexus Repository - Sonatype Community](/content/community/t/authenticate-users-via-keycloak/652/index.html): Hello, 
I have a single sign on system and I’m trying to login into nexus via keycloak authentication. I’m using GitHub - keycloak/keycloak-gatekeeper: A OpenID / Keycloak Proxy service as a keycloak proxy. I’ve setup th&hellip; (366 words, Oct 11, 2018)
- [Authenticate users via keycloak - Sonatype Nexus Repository - Sonatype Community](/content/community/t/authenticate-users-via-keycloak/652/1/index.html): Hello, 
I have a single sign on system and I’m trying to login into nexus via keycloak authentication. I’m using GitHub - keycloak/keycloak-gatekeeper: A OpenID / Keycloak Proxy service as a keycloak proxy. I’ve setup th&hellip; (367 words, Oct 11, 2018)
- [Working with Components in a Bundle - Sonatype Nexus Repository - Sonatype Community](/content/community/t/working-with-components-in-a-bundle/536/10/index.html): Hello, 
I’ve got some questions about Assets and Components in the Nexus 3 API. The goal of my Bundle is to go through all the binaries uploaded to a users Repository and scan them. I need to scan things like zip files, &hellip; (1,116 words, Oct 10, 2018)
- [Nexus IQ Server release 52 - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/nexus-iq-server-release-52/591/index.html): We would like to announce the availability of the Nexus IQ Server release 52. 
The changes in this release include: 

Audit logging of authentication events
Automatic license installation via configuration file
Success M&hellip; (71 words, Sep 29, 2018)
- [Nexus IQ Server release 52 - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/nexus-iq-server-release-52/591/1/index.html): We would like to announce the availability of the Nexus IQ Server release 52. 
The changes in this release include: 

Audit logging of authentication events
Automatic license installation via configuration file
Success M&hellip; (80 words, Sep 29, 2018)
- [Nexus IQ Server release 51 - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/nexus-iq-server-release-51/590/index.html): We would like to announce the availability of the Nexus IQ Server release 51. 
The changes in this release include: 


An addition to the previously released Policy Violation Grandfathering: on-demand grandfathering (bas&hellip; (163 words, Sep 29, 2018)
- [Nexus IQ Server release 51 - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/nexus-iq-server-release-51/590/1/index.html): We would like to announce the availability of the Nexus IQ Server release 51. 
The changes in this release include: 


An addition to the previously released Policy Violation Grandfathering: on-demand grandfathering (bas&hellip; (156 words, Sep 29, 2018)
- [How to retrieve a list of IQ Server roles and associated users? - Sonatype Lifecycle & Repository Firewall / Best Practices - Sonatype Community](/content/community/t/how-to-retrieve-a-list-of-iq-server-roles-and-associated-users/552/2/index.html): Is there an API that allows me to retrieve a list of IQ Server roles and associated users for e.g. Auditing purposes? (260 words, Sep 19, 2018)
- [How to retrieve a list of IQ Server roles and associated users? - Sonatype Lifecycle & Repository Firewall / Best Practices - Sonatype Community](/content/community/t/how-to-retrieve-a-list-of-iq-server-roles-and-associated-users/552/index.html): Is there an API that allows me to retrieve a list of IQ Server roles and associated users for e.g. Auditing purposes? (267 words, Sep 19, 2018)
- [How to retrieve a list of IQ Server roles and associated users? - Sonatype Lifecycle & Repository Firewall / Best Practices - Sonatype Community](/content/community/t/how-to-retrieve-a-list-of-iq-server-roles-and-associated-users/552/1/index.html): Is there an API that allows me to retrieve a list of IQ Server roles and associated users for e.g. Auditing purposes? (192 words, Sep 19, 2018)
- [How to permanently install bundles into Nexus - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-to-permanently-install-bundles-into-nexus/535/3/index.html): I’ve been working on a Bundle for Nexus 3. I’ve followed these instructions to install the bundle into Nexus Installing Bundles. It inserts the bundle into Nexus but not permanently. So I looked around and found these ot&hellip; (185 words, Sep 18, 2018)
- [Working with Components in a Bundle - Sonatype Nexus Repository - Sonatype Community](/content/community/t/working-with-components-in-a-bundle/536/index.html): Hello, 
I’ve got some questions about Assets and Components in the Nexus 3 API. The goal of my Bundle is to go through all the binaries uploaded to a users Repository and scan them. I need to scan things like zip files, &hellip; (1,115 words, Sep 18, 2018)
- [Working with Components in a Bundle - Sonatype Nexus Repository - Sonatype Community](/content/community/t/working-with-components-in-a-bundle/536/1/index.html): Hello, 
I’ve got some questions about Assets and Components in the Nexus 3 API. The goal of my Bundle is to go through all the binaries uploaded to a users Repository and scan them. I need to scan things like zip files, &hellip; (1,116 words, Sep 18, 2018)
- [How to permanently install bundles into Nexus - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-to-permanently-install-bundles-into-nexus/535/index.html): I’ve been working on a Bundle for Nexus 3. I’ve followed these instructions to install the bundle into Nexus Installing Bundles. It inserts the bundle into Nexus but not permanently. So I looked around and found these ot&hellip; (255 words, Sep 18, 2018)
- [How to permanently install bundles into Nexus - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-to-permanently-install-bundles-into-nexus/535/1/index.html): I’ve been working on a Bundle for Nexus 3. I’ve followed these instructions to install the bundle into Nexus Installing Bundles. It inserts the bundle into Nexus but not permanently. So I looked around and found these ot&hellip; (247 words, Sep 18, 2018)
- [Dependency issue creating Nexus 3 Bundle - Sonatype Nexus Repository - Sonatype Community](/content/community/t/dependency-issue-creating-nexus-3-bundle/534/index.html): Hey guys, 
I’m working on a Nexus 3 Bundle and am having issues creating the bundle properly. I am using some libraries created by my team which performs a lot of the actions we need. These libraries reference some class&hellip; (328 words, Sep 18, 2018)
- [Dependency issue creating Nexus 3 Bundle - Sonatype Nexus Repository - Sonatype Community](/content/community/t/dependency-issue-creating-nexus-3-bundle/534/1/index.html): Hey guys, 
I’m working on a Nexus 3 Bundle and am having issues creating the bundle properly. I am using some libraries created by my team which performs a lot of the actions we need. These libraries reference some class&hellip; (328 words, Sep 18, 2018)
- [Using Policy Violation Grandfathering to ease into automatic enforcement - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/using-policy-violation-grandfathering-to-ease-into-automatic-enforcement/456/3/index.html): In IQ Server release 50 we introduced a new feature: Policy Violation Grandfathering.  Grandfathering is used to acknowledge the violations found in existing applications, leading to using automated enforcement  without &hellip; (175 words, Sep 18, 2018)
- [Using Policy Violation Grandfathering to ease into automatic enforcement - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/using-policy-violation-grandfathering-to-ease-into-automatic-enforcement/456/2/index.html): In IQ Server release 50 we introduced a new feature: Policy Violation Grandfathering.  Grandfathering is used to acknowledge the violations found in existing applications, leading to using automated enforcement  without &hellip; (173 words, Aug 29, 2018)
- [Using Policy Violation Grandfathering to ease into automatic enforcement - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/using-policy-violation-grandfathering-to-ease-into-automatic-enforcement/456/index.html): In IQ Server release 50 we introduced a new feature: Policy Violation Grandfathering.  Grandfathering is used to acknowledge the violations found in existing applications, leading to using automated enforcement  without &hellip; (137 words, Aug 29, 2018)
- [Nexus IQ Server release 50 - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/nexus-iq-server-release-50/455/index.html): Happy 50th release! 
In celebration of our 50th release, we’ve changed the versioning scheme of IQ Server. For this release, and all future releases, we’re dropping the “1.” prefix to indicate the continuous stream of fe&hellip; (232 words, Aug 29, 2018)
- [Nexus IQ Server release 50 - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/nexus-iq-server-release-50/455/1/index.html): Happy 50th release! 
In celebration of our 50th release, we’ve changed the versioning scheme of IQ Server. For this release, and all future releases, we’re dropping the “1.” prefix to indicate the continuous stream of fe&hellip; (229 words, Aug 29, 2018)
- [How to indicate success or failure from the IQ CLI? - Sonatype Lifecycle & Repository Firewall / Best Practices - Sonatype Community](/content/community/t/how-to-indicate-success-or-failure-from-the-iq-cli/394/1/index.html): Following command line exit code conventions, the IQ CLI java jar will return a code of 0 upon a successful scan and a code of 1 upon a “failed” scan. 
The meaning of a “failed” scan can be adjusted in a couple ways. 

T&hellip; (392 words, Aug 17, 2018)
- [Introducing Sonatype DepShield: Free for GitHub Developers - Community Announcements - Sonatype Community](/content/community/t/introducing-sonatype-depshield-free-for-github-developers/380/index.html): :tada: Some big news from Sonatype this week. Yesterday we announced the launch of DepShield, a free GitHub app that automatically identifies vulnerabilities within open source dependencies. 
DepShield supports Maven pro&hellip; (162 words, Aug 15, 2018)
- [Introducing Sonatype DepShield: Free for GitHub Developers - Community Announcements - Sonatype Community](/content/community/t/introducing-sonatype-depshield-free-for-github-developers/380/1/index.html): :tada: Some big news from Sonatype this week. Yesterday we announced the launch of DepShield, a free GitHub app that automatically identifies vulnerabilities within open source dependencies. 
DepShield supports Maven pro&hellip; (154 words, Aug 15, 2018)
- [Cannot deploy maven deploy plugin 2.7 not found - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/cannot-deploy-maven-deploy-plugin-2-7-not-found/355/5/index.html): hello, this is a new config or system. I installed Nexus 2.14.8, Jenkins 2.316, Maven 3.5.4. I use IDE Jboss Dev Studio. Jenkins issues the “maven clean deploy”, this is not issued anywhere else, no pom declarations for &hellip; (1,096 words, Aug 10, 2018)
- [Cannot deploy maven deploy plugin 2.7 not found - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/cannot-deploy-maven-deploy-plugin-2-7-not-found/355/2/index.html): hello, this is a new config or system. I installed Nexus 2.14.8, Jenkins 2.316, Maven 3.5.4. I use IDE Jboss Dev Studio. Jenkins issues the “maven clean deploy”, this is not issued anywhere else, no pom declarations for &hellip; (1,082 words, Aug 9, 2018)
- [Can't Log In With New Users - Sonatype Nexus Repository - Sonatype Community](/content/community/t/cant-log-in-with-new-users/343/6/index.html): I’ve created a new user and have granted them nx-admin. Initially I was having a more refined set of roles, but was having issues logging in. I thought I’d try seeing if I could log in with the new user by granting them &hellip; (390 words, Aug 8, 2018)
- [Can't Log In With New Users - Sonatype Nexus Repository - Sonatype Community](/content/community/t/cant-log-in-with-new-users/343/5/index.html): I’ve created a new user and have granted them nx-admin. Initially I was having a more refined set of roles, but was having issues logging in. I thought I’d try seeing if I could log in with the new user by granting them &hellip; (390 words, Aug 8, 2018)
- [Can't Log In With New Users - Sonatype Nexus Repository - Sonatype Community](/content/community/t/cant-log-in-with-new-users/343/4/index.html): I’ve created a new user and have granted them nx-admin. Initially I was having a more refined set of roles, but was having issues logging in. I thought I’d try seeing if I could log in with the new user by granting them &hellip; (392 words, Aug 8, 2018)
- [Can't Log In With New Users - Sonatype Nexus Repository - Sonatype Community](/content/community/t/cant-log-in-with-new-users/343/3/index.html): I’ve created a new user and have granted them nx-admin. Initially I was having a more refined set of roles, but was having issues logging in. I thought I’d try seeing if I could log in with the new user by granting them &hellip; (392 words, Aug 8, 2018)
- [Can't Log In With New Users - Sonatype Nexus Repository - Sonatype Community](/content/community/t/cant-log-in-with-new-users/343/2/index.html): I’ve created a new user and have granted them nx-admin. Initially I was having a more refined set of roles, but was having issues logging in. I thought I’d try seeing if I could log in with the new user by granting them &hellip; (392 words, Aug 8, 2018)
- [Can't Log In With New Users - Sonatype Nexus Repository - Sonatype Community](/content/community/t/cant-log-in-with-new-users/343/index.html): I’ve created a new user and have granted them nx-admin. Initially I was having a more refined set of roles, but was having issues logging in. I thought I’d try seeing if I could log in with the new user by granting them &hellip; (392 words, Aug 8, 2018)
- [Can't Log In With New Users - Sonatype Nexus Repository - Sonatype Community](/content/community/t/cant-log-in-with-new-users/343/1/index.html): I’ve created a new user and have granted them nx-admin. Initially I was having a more refined set of roles, but was having issues logging in. I thought I’d try seeing if I could log in with the new user by granting them &hellip; (392 words, Aug 8, 2018)
- [How to undo Asset Soft-Delete in NXRM3? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-to-undo-asset-soft-delete-in-nxrm3/271/index.html): As part of a test with NEXUS3 as nuget package repo, we ran into the problem of vanishing assets. For our users it is unclear if this is a system or a user error, and even though there’s a gut feeling, there is no proof &hellip; (1,333 words, Jul 25, 2018)
- [How to undo Asset Soft-Delete in NXRM3? - Sonatype Nexus Repository - Sonatype Community](/content/community/t/how-to-undo-asset-soft-delete-in-nxrm3/271/1/index.html): As part of a test with NEXUS3 as nuget package repo, we ran into the problem of vanishing assets. For our users it is unclear if this is a system or a user error, and even though there’s a gut feeling, there is no proof &hellip; (1,352 words, Jul 25, 2018)
- [Nexus IQ Server 1.48 released - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/nexus-iq-server-1-48-released/212/index.html): We would like to announce the availability of the Nexus IQ Server 1.48. 
The changes in this release include: 

Policy-centric Component Information Panel
Fixes for Recording of Component Occurrences
Security Fix for Jav&hellip; (93 words, Jul 6, 2018)
- [Nexus IQ Server 1.48 released - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/nexus-iq-server-1-48-released/212/1/index.html): We would like to announce the availability of the Nexus IQ Server 1.48. 
The changes in this release include: 

Policy-centric Component Information Panel
Fixes for Recording of Component Occurrences
Security Fix for Jav&hellip; (86 words, Jul 6, 2018)
- [Security Vulnerability Information, Customer Feedback Needed - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/security-vulnerability-information-customer-feedback-needed/182/index.html): Customer Feedback for Security Vulnerability Information 
We are working on a redesign of the display of our Security Vulnerability Information and we would like to learn more about how you consume security content today&hellip; (294 words, Jun 27, 2018)
- [Security Vulnerability Information, Customer Feedback Needed - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/security-vulnerability-information-customer-feedback-needed/182/1/index.html): Customer Feedback for Security Vulnerability Information 
We are working on a redesign of the display of our Security Vulnerability Information and we would like to learn more about how you consume security content today&hellip; (273 words, Jun 27, 2018)
- [Integration API with Nexus Repository 3 - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/integration-api-with-nexus-repository-3/161/index.html): Nexus Repository supports new repository formats such as Docker and Bower and introduces a fresh, clean user interface among other advantages. Adopting or upgrading repository manager often means that you need to update &hellip; (506 words, Jun 21, 2018)
- [Integration API with Nexus Repository 3 - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/integration-api-with-nexus-repository-3/161/1/index.html): Nexus Repository supports new repository formats such as Docker and Bower and introduces a fresh, clean user interface among other advantages. Adopting or upgrading repository manager often means that you need to update &hellip; (504 words, Jun 21, 2018)
- [Advanced Use Cases for the Nexus Repository Manager API - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/advanced-use-cases-for-the-nexus-repository-manager-api/80/3/index.html): One of the most frequent area of questions related to Nexus Repository Manager is how to integrate with other tools via the API. 
Integrations API
Nexus Repository Manager 2 only contained a formal REST API. This require&hellip; (357 words, Jun 6, 2018)
- [Reusable Scripts with the Execute Script Scheduled Task - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/reusable-scripts-with-the-execute-script-scheduled-task/82/index.html): Continuing the discussion from Advanced Use Cases for the Nexus Repository Manager API: 
One of the lesser known scheduled tasks in Nexus Repository Manager 3 is the “Execute Script”. This utilizes the same API as the gr&hellip; (210 words, Jun 1, 2018)
- [Reusable Scripts with the Execute Script Scheduled Task - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/reusable-scripts-with-the-execute-script-scheduled-task/82/1/index.html): Continuing the discussion from Advanced Use Cases for the Nexus Repository Manager API: 
One of the lesser known scheduled tasks in Nexus Repository Manager 3 is the “Execute Script”. This utilizes the same API as the gr&hellip; (276 words, Jun 1, 2018)
- [Which users are Nexus Repository Manager Admins? - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/which-users-are-nexus-repository-manager-admins/81/index.html): Continuing the discussion from Advanced Use Cases for the Nexus Repository Manager API: 
An important piece of information for Nexus Administrators is understanding what users have access to which parts of the applicatio&hellip; (283 words, Jun 1, 2018)
- [Which users are Nexus Repository Manager Admins? - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/which-users-are-nexus-repository-manager-admins/81/1/index.html): Continuing the discussion from Advanced Use Cases for the Nexus Repository Manager API: 
An important piece of information for Nexus Administrators is understanding what users have access to which parts of the applicatio&hellip; (204 words, Jun 1, 2018)
- [Advanced Use Cases for the Nexus Repository Manager API - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/advanced-use-cases-for-the-nexus-repository-manager-api/80/index.html): One of the most frequent area of questions related to Nexus Repository Manager is how to integrate with other tools via the API. 
Integrations API
Nexus Repository Manager 2 only contained a formal REST API. This require&hellip; (357 words, Jun 1, 2018)
- [Advanced Use Cases for the Nexus Repository Manager API - Sonatype Nexus Repository / Best Practices - Sonatype Community](/content/community/t/advanced-use-cases-for-the-nexus-repository-manager-api/80/1/index.html): One of the most frequent area of questions related to Nexus Repository Manager is how to integrate with other tools via the API. 
Integrations API
Nexus Repository Manager 2 only contained a formal REST API. This require&hellip; (316 words, Jun 1, 2018)
- [Welcome to the Sonatype Community! - Community Announcements - Sonatype Community](/content/community/t/welcome-to-the-sonatype-community/79/index.html): Welcome to the Sonatype Community! 
Sonatype is a community of real people who are passionate about software development and innovation. Here we collaborate on answers, solutions, and ideas about the products and service&hellip; (139 words, Jun 1, 2018)
- [Welcome to the Sonatype Community! - Community Announcements - Sonatype Community](/content/community/t/welcome-to-the-sonatype-community/79/1/index.html): Welcome to the Sonatype Community! 
Sonatype is a community of real people who are passionate about software development and innovation. Here we collaborate on answers, solutions, and ideas about the products and service&hellip; (150 words, Jun 1, 2018)
- [How to scan Android for Vulnerabilities? - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/how-to-scan-android-for-vulnerabilities/71/index.html): Nexus IQ Server does not support scanning an .apk file directly due to the minification performed via the dalvik byte code process. For this reason, scanning prior to the assembling of the .apk is required. 
Check out th&hellip; (246 words, Jun 1, 2018)
- [How to scan Android for Vulnerabilities? - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/how-to-scan-android-for-vulnerabilities/71/1/index.html): Nexus IQ Server does not support scanning an .apk file directly due to the minification performed via the dalvik byte code process. For this reason, scanning prior to the assembling of the .apk is required. 
Check out th&hellip; (246 words, Jun 1, 2018)
- [What type of Security data is available for IQ Server, and how does Sonatype produce it? - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/what-type-of-security-data-is-available-for-iq-server-and-how-does-sonatype-produce-it/44/index.html): We’ve written a handy guide to help everyone understand a number of topics related to the data Sonatype produces. 
For those that don’t know, Sonatype takes both an automated and manual approach to the security data prov&hellip; (227 words, May 31, 2018)
- [What type of Security data is available for IQ Server, and how does Sonatype produce it? - Sonatype Lifecycle & Repository Firewall - Sonatype Community](/content/community/t/what-type-of-security-data-is-available-for-iq-server-and-how-does-sonatype-produce-it/44/1/index.html): We’ve written a handy guide to help everyone understand a number of topics related to the data Sonatype produces. 
For those that don’t know, Sonatype takes both an automated and manual approach to the security data prov&hellip; (138 words, May 31, 2018)
- [About the Community Announcements category - Community Announcements - Sonatype Community](/content/community/t/about-the-community-announcements-category/12/index.html): A place for updates and information from the Sonatype Community team. New to the Community? Start here. (227 words, May 25, 2018)
- [About the Community Announcements category - Community Announcements - Sonatype Community](/content/community/t/about-the-community-announcements-category/12/1/index.html): A place for updates and information from the Sonatype Community team. New to the Community? Start here. (193 words, May 25, 2018)
- [Welcome to the Sonatype Community - Community Announcements / Welcome - Sonatype Community](/content/community/t/welcome-to-the-sonatype-community/8/index.html): Welcome to the Sonatype Community! 
Sonatype is a community of real people who are passionate about software development and innovation. Here we collaborate on answers, solutions, and ideas about the products and service&hellip; (162 words, May 25, 2018)
- [Welcome to the Sonatype Community - Community Announcements / Welcome - Sonatype Community](/content/community/t/welcome-to-the-sonatype-community/8/1/index.html): Welcome to the Sonatype Community! 
Sonatype is a community of real people who are passionate about software development and innovation. Here we collaborate on answers, solutions, and ideas about the products and service&hellip; (151 words, May 25, 2018)

## Listings & Categories

- [Latest maintenance topics - Sonatype Community](/content/community/tag/maintenance/l/latest/index.html): Topics tagged maintenance (114 words)
- [Latest maintenance topics - Sonatype Community](/content/community/tag/maintenance/index.html): Topics tagged maintenance (114 words)
- [Latest sonatype-innovate topics - Sonatype Community](/content/community/tag/sonatype-innovate/l/latest/index.html): Topics tagged sonatype-innovate (23 words)
- [Latest best-practice topics - Sonatype Community](/content/community/tag/best-practice/l/latest/index.html): Topics tagged best-practice (378 words)
- [Latest webinar topics - Sonatype Community](/content/community/tag/webinar/l/latest/index.html): Topics tagged webinar (51 words)
- [Latest rest topics - Sonatype Community](/content/community/tag/rest/l/latest/index.html): Topics tagged rest (393 words)
- [Latest high-availibility topics - Sonatype Community](/content/community/tag/high-availibility/l/latest/index.html): Topics tagged high-availibility (68 words)
- [Latest scheduled-task topics - Sonatype Community](/content/community/tag/scheduled-task/index.html): Topics tagged scheduled-task (233 words)
- [Latest pypi topics - Sonatype Community](/content/community/tag/pypi/l/latest/index.html): Topics tagged pypi (271 words)
- [Top sso topics - Sonatype Community](/content/community/tag/sso/l/top/index.html): Topics tagged sso (11 words)
- [Top nexus-v3 topics - Sonatype Community](/content/community/tag/nexus-v3/l/top/index.html): Topics tagged nexus-v3 (30 words)
- [Top rest topics - Sonatype Community](/content/community/tag/rest/l/top/index.html): Topics tagged rest (16 words)
- [Top best-practice topics - Sonatype Community](/content/community/tag/best-practice/l/top/index.html): Topics tagged best-practice (11 words)
- [Top pypi topics - Sonatype Community](/content/community/tag/pypi/l/top/index.html): Topics tagged pypi (11 words)
- [Latest rfc topics - Sonatype Community](/content/community/tag/rfc/l/latest/index.html): Topics tagged rfc (73 words)
- [Latest maven topics - Sonatype Community](/content/community/tag/maven/l/latest/index.html): Topics tagged maven (500 words)
- [Latest ossindex topics - Sonatype Community](/content/community/tag/ossindex/index.html): Topics tagged ossindex (105 words)
- [Latest policies_nexus topics - Sonatype Community](/content/community/tag/policies_nexus/index.html): Topics tagged policies_nexus (45 words)
- [Latest release-notes topics - Sonatype Community](/content/community/tag/release-notes/index.html): Topics tagged release-notes (556 words)
- [Latest cache topics - Sonatype Community](/content/community/tag/cache/index.html): Topics tagged cache (101 words)
- [Latest sonatype-innovate topics - Sonatype Community](/content/community/tag/sonatype-innovate/index.html): Topics tagged sonatype-innovate (23 words)
- [Latest blob-store topics - Sonatype Community](/content/community/tag/blob-store/l/latest/index.html): Topics tagged blob-store (217 words)
- [Latest nexus topics - Sonatype Community](/content/community/tag/nexus/index.html): Topics tagged nexus (433 words)
- [Latest support topics - Sonatype Community](/content/community/tag/support/index.html): Topics tagged support (65 words)
- [Latest component-tagging topics - Sonatype Community](/content/community/tag/component-tagging/index.html): Topics tagged component-tagging (67 words)
- [Latest nxrm3-maven-plugin topics - Sonatype Community](/content/community/tag/nxrm3-maven-plugin/index.html): Topics tagged nxrm3-maven-plugin (27 words)
- [Latest training topics - Sonatype Community](/content/community/tag/training/index.html): Topics tagged training (102 words)
- [Latest gradle-with-node-plu topics - Sonatype Community](/content/community/tag/gradle-with-node-plu/index.html): Topics tagged gradle-with-node-plu (28 words)
- [Latest npm-proxy topics - Sonatype Community](/content/community/tag/npm-proxy/index.html): Topics tagged npm-proxy (28 words)
- [Latest plugin-development topics - Sonatype Community](/content/community/tag/plugin-development/index.html): Topics tagged plugin-development (25 words)
- [Latest settings topics - Sonatype Community](/content/community/tag/settings/index.html): Topics tagged settings (77 words)
- [Latest plugin topics - Sonatype Community](/content/community/tag/plugin/index.html): Topics tagged plugin (79 words)
- [Latest elearning topics - Sonatype Community](/content/community/tag/elearning/l/latest/index.html): Topics tagged elearning (124 words)
- [Latest learn topics - Sonatype Community](/content/community/tag/learn/index.html): Topics tagged learn (480 words)
- [Latest sso topics - Sonatype Community](/content/community/tag/sso/l/latest/index.html): Topics tagged sso (47 words)
- [News and Notes from the Makers of Nexus | Sonatype Blog | This Week in Malware](/content/blog/tag/this-week-in-malware/index.html): This Week in Malware | Conversations about software supply automation, devsecops, open source, continuous delivery, and application security. (292 words)
- [Latest oss topics - Sonatype Community](/content/community/tag/oss/l/latest/index.html): Topics tagged oss (318 words)
- [Latest format topics - Sonatype Community](/content/community/tag/format/l/latest/index.html): Topics tagged format (30 words)
- [Top format topics - Sonatype Community](/content/community/tag/format/l/top/index.html): Topics tagged format (13 words)
- [Latest malware topics - Sonatype Community](/content/community/tag/malware/l/latest/index.html): Topics tagged malware (33 words)
- [News and Notes from the Makers of Nexus | Sonatype Blog | Guest Post](/content/blog/tag/guest-post/index.html): Guest Post | Conversations about software supply automation, devsecops, open source, continuous delivery, and application security. (219 words)
- [News and Notes from the Makers of Nexus | Sonatype Blog | Theresa Mammarella](/content/blog/author/theresa-mammarella/index.html): Theresa is a software engineer and developer advocate who enjoys helping developers harness the full potential of their tools to create innovative solutions. Theresa has a background as an open source contributor to Java Virtual Machine and compiler projects at IBM and Red Hat. She has now embarked on a new journey into the exciting realm of security and static analysis tooling, advocating for the needs of developers. When she's not coding, Theresa loves to spend her time volunteering with animal rescues and exploring the great outdoors, where she can often be found hiking, camping, or simply soaking up nature's beauty. (80 words)
- [Latest security topics - Sonatype Community](/content/community/tag/security/index.html): Topics tagged security (199 words)
- [Latest apt topics - Sonatype Community](/content/community/tag/apt/l/latest/index.html): Topics tagged apt (175 words)
- [Top oss topics - Sonatype Community](/content/community/tag/oss/l/top/index.html): Topics tagged oss (11 words)
- [Latest nexus-v3 topics - Sonatype Community](/content/community/tag/nexus-v3/l/latest/index.html): Topics tagged nexus-v3 (200 words)
- [Latest nexus-migration topics - Sonatype Community](/content/community/tag/nexus-migration/l/latest/index.html): Topics tagged nexus-migration (143 words)
- [Latest groovy topics - Sonatype Community](/content/community/tag/groovy/l/latest/index.html): Topics tagged groovy (138 words)
- [Latest kubernetes topics - Sonatype Community](/content/community/tag/kubernetes/l/latest/index.html): Topics tagged kubernetes (161 words)
- [Latest deployment topics - Sonatype Community](/content/community/tag/deployment/index.html): Topics tagged deployment (39 words)
- [Latest sbom topics - Sonatype Community](/content/community/tag/sbom/l/latest/index.html): Topics tagged sbom (75 words)
- [Top apt topics - Sonatype Community](/content/community/tag/apt/l/top/index.html): Topics tagged apt (13 words)
- [Latest android topics - Sonatype Community](/content/community/tag/android/index.html): Topics tagged android (60 words)
- [Latest rbac topics - Sonatype Community](/content/community/tag/rbac/index.html): Topics tagged rbac (49 words)
- [Latest rfc topics - Sonatype Community](/content/community/tag/rfc/index.html): Topics tagged rfc (73 words)
- [Latest security-research topics - Sonatype Community](/content/community/tag/security-research/index.html): Topics tagged security-research (35 words)
- [Latest mfa topics - Sonatype Community](/content/community/tag/mfa/index.html): Topics tagged mfa (34 words)
- [Latest product-webinar topics - Sonatype Community](/content/community/tag/product-webinar/index.html): Topics tagged product-webinar (129 words)
- [Latest cyclonedx topics - Sonatype Community](/content/community/tag/cyclonedx/index.html): Topics tagged cyclonedx (26 words)
- [Latest discussion topics - Sonatype Community](/content/community/tag/discussion/index.html): Topics tagged discussion (24 words)
- [Latest webinar topics - Sonatype Community](/content/community/tag/webinar/index.html): Topics tagged webinar (49 words)
- [Latest ecosystem topics - Sonatype Community](/content/community/tag/ecosystem/index.html): Topics tagged ecosystem (82 words)
- [Latest lifecycle-xc topics - Sonatype Community](/content/community/tag/lifecycle-xc/index.html): Topics tagged lifecycle-xc (25 words)
- [Latest reporting topics - Sonatype Community](/content/community/tag/reporting/index.html): Topics tagged reporting (67 words)
- [Latest research-remediate topics - Sonatype Community](/content/community/tag/research-remediate/index.html): Topics tagged research-remediate (51 words)
- [Latest edge topics - Sonatype Community](/content/community/tag/edge/index.html): Topics tagged edge (24 words)
- [Latest chrome topics - Sonatype Community](/content/community/tag/chrome/index.html): Topics tagged chrome (24 words)
- [Latest remediation topics - Sonatype Community](/content/community/tag/remediation/index.html): Topics tagged remediation (69 words)
- [Latest extension topics - Sonatype Community](/content/community/tag/extension/index.html): Topics tagged extension (30 words)
- [Latest spdx topics - Sonatype Community](/content/community/tag/spdx/index.html): Topics tagged spdx (30 words)
- [Latest labs topics - Sonatype Community](/content/community/tag/labs/index.html): Topics tagged labs (27 words)
- [Latest installers topics - Sonatype Community](/content/community/tag/installers/index.html): Topics tagged installers (46 words)
- [Latest license-threat topics - Sonatype Community](/content/community/tag/license-threat/index.html): Topics tagged license-threat (25 words)
- [Latest copyleft topics - Sonatype Community](/content/community/tag/copyleft/index.html): Topics tagged copyleft (28 words)
- [Top nexus-iq topics - Sonatype Community](/content/community/tag/nexus-iq/l/top/index.html): Topics tagged nexus-iq (80 words)
- [Latest nexus-iq topics - Sonatype Community](/content/community/tag/nexus-iq/l/latest/index.html): Topics tagged nexus-iq (3,064 words)
- [Latest depshield topics - Sonatype Community](/content/community/tag/depshield/index.html): Topics tagged depshield (22 words)
- [Latest iq-102 topics - Sonatype Community](/content/community/tag/iq-102/index.html): Topics tagged iq-102 (28 words)
- [Latest iq topics - Sonatype Community](/content/community/tag/iq/index.html): Topics tagged iq (28 words)
- [Latest events topics - Sonatype Community](/content/community/tag/events/index.html): Topics tagged events (23 words)
- [Latest sonatype-lift topics - Sonatype Community](/content/community/tag/sonatype-lift/index.html): Topics tagged sonatype-lift (56 words)
- [Latest innersource topics - Sonatype Community](/content/community/tag/innersource/index.html): Topics tagged innersource (56 words)
- [Latest intellij-idea topics - Sonatype Community](/content/community/tag/intellij-idea/index.html): Topics tagged intellij-idea (56 words)
- [Latest data topics - Sonatype Community](/content/community/tag/data/index.html): Topics tagged data (186 words)
- [Latest ha topics - Sonatype Community](/content/community/tag/ha/index.html): Topics tagged ha (42 words)
- [Latest springshell topics - Sonatype Community](/content/community/tag/springshell/index.html): Topics tagged springshell (28 words)
- [Latest ldap topics - Sonatype Community](/content/community/tag/ldap/l/latest/index.html): Topics tagged ldap (332 words)
- [Latest orientdb topics - Sonatype Community](/content/community/tag/orientdb/l/latest/index.html): Topics tagged orientdb (300 words)
- [Top orientdb topics - Sonatype Community](/content/community/tag/orientdb/l/top/index.html): Topics tagged orientdb (34 words)
- [Latest slow topics - Sonatype Community](/content/community/tag/slow/index.html): Topics tagged slow (26 words)
- [Latest gradle topics - Sonatype Community](/content/community/tag/gradle/index.html): Topics tagged gradle (38 words)
- [News and Notes from the Makers of Nexus | Sonatype Blog | Katie McCaskey](/content/blog/author/katie-mccaskey/index.html): Katie is an experienced technology writer and entrepreneur. At Sonatype, she's focused on creating and finding great content.  (243 words)
- [News and Notes from the Makers of Nexus | Sonatype Blog | Brent Kostak](/content/blog/author/brent-kostak/index.html): Brent is the Director of Product Marketing connecting developers and DevOps communities to Sonatype Nexus tools and technologies. (130 words)
- [News and Notes from the Makers of Nexus | Sonatype Blog | Heather Loney](/content/blog/author/heather-loney/index.html): Heather is the Communications and Community Engagement Officer at the Upper Grand District School Board. Prior to her current position, Heather was the Senior Producer for Special Projects at Global News and a Copy Editor at Sonatype. Heather managed a team of digital journalists, covering national and international events, as well as consumer, tech and lifestyle news for GlobalNews.ca.

Heather has significant experience in journalism, new media, digital storytelling, SEO and social media best practices, WordPress and other content management systems, photography and research.  (192 words)
- [News and Notes from the Makers of Nexus | Sonatype Blog | Matt Howard](/content/blog/author/matt-howard/index.html): Matt is a proven executive and entrepreneur with over 20 years experience developing high-growth software companies, at Sonatype, he leads corporate marketing, strategic partnering, and demand generation initiatives.  (304 words)
- [News and Notes from the Makers of Nexus | Sonatype Blog | Michelle Dufty](/content/blog/author/michelle-dufty/index.html): Michelle Dufty is the Senior Director of Product Marketing at Sonatype where she brings solutions to market that unite development, security, and operations teams to accelerate software innovation while minimizing open source risk. (290 words)
- [News and Notes from the Makers of Nexus | Sonatype Blog | Sonatype](/content/blog/author/sonatype/index.html): Conversations about software supply automation, devsecops, open source, continuous delivery, and application security. (289 words)
- [Latest browse topics - Sonatype Community](/content/community/tag/browse/index.html): Topics tagged browse (72 words)
- [Latest saml topics - Sonatype Community](/content/community/tag/saml/index.html): Topics tagged saml (79 words)
- [Latest easy-scm-onboarding topics - Sonatype Community](/content/community/tag/easy-scm-onboarding/index.html): Topics tagged easy-scm-onboarding (32 words)
- [Latest start topics - Sonatype Community](/content/community/tag/start/index.html): Topics tagged start (22 words)
- [Latest vulnerabilities topics - Sonatype Community](/content/community/tag/vulnerabilities/index.html): Topics tagged vulnerabilities (90 words)
- [Latest search topics - Sonatype Community](/content/community/tag/search/index.html): Topics tagged search (41 words)
- [Latest privileges topics - Sonatype Community](/content/community/tag/privileges/index.html): Topics tagged privileges (98 words)
- [Latest github topics - Sonatype Community](/content/community/tag/github/index.html): Topics tagged github (113 words)
- [Latest nexus-2 topics - Sonatype Community](/content/community/tag/nexus-2/index.html): Topics tagged nexus-2 (30 words)
- [Latest cloud-storage topics - Sonatype Community](/content/community/tag/cloud-storage/index.html): Topics tagged cloud-storage (27 words)
- [Latest storage-management topics - Sonatype Community](/content/community/tag/storage-management/index.html): Topics tagged storage-management (36 words)
- [Latest aws topics - Sonatype Community](/content/community/tag/aws/index.html): Topics tagged aws (76 words)
- [Latest outbound topics - Sonatype Community](/content/community/tag/outbound/index.html): Topics tagged outbound (24 words)
- [Latest policy topics - Sonatype Community](/content/community/tag/policy/index.html): Topics tagged policy (74 words)
- [Latest outbound-connections topics - Sonatype Community](/content/community/tag/outbound-connections/index.html): Topics tagged outbound-connections (24 words)
- [Latest firewall topics - Sonatype Community](/content/community/tag/firewall/index.html): Topics tagged firewall (505 words)
- [Latest rust topics - Sonatype Community](/content/community/tag/rust/index.html): Topics tagged rust (23 words)
- [Latest group topics - Sonatype Community](/content/community/tag/group/index.html): Topics tagged group (119 words)
- [Latest elevate-awards topics - Sonatype Community](/content/community/tag/elevate-awards/index.html): Topics tagged elevate-awards (145 words)
- [Latest almalinux topics - Sonatype Community](/content/community/tag/almalinux/index.html): Topics tagged almalinux (30 words)
- [Latest npm-rest-api topics - Sonatype Community](/content/community/tag/npm-rest-api/index.html): Topics tagged npm-rest-api (24 words)
- [Latest component topics - Sonatype Community](/content/community/tag/component/index.html): Topics tagged component (88 words)
- [Latest documentation topics - Sonatype Community](/content/community/tag/documentation/index.html): Topics tagged documentation (161 words)
- [Latest vulnerability topics - Sonatype Community](/content/community/tag/vulnerability/index.html): Topics tagged vulnerability (57 words)
- [Latest lifecycle topics - Sonatype Community](/content/community/tag/lifecycle/index.html): Topics tagged lifecycle (512 words)
- [Latest cloud topics - Sonatype Community](/content/community/tag/cloud/index.html): Topics tagged cloud (63 words)
- [Latest onboarding topics - Sonatype Community](/content/community/tag/onboarding/index.html): Topics tagged onboarding (73 words)
- [Latest repository-cloud topics - Sonatype Community](/content/community/tag/repository-cloud/index.html): Topics tagged repository-cloud (23 words)
- [Latest go topics - Sonatype Community](/content/community/tag/go/index.html): Topics tagged go (51 words)
- [Latest microlearning topics - Sonatype Community](/content/community/tag/microlearning/index.html): Topics tagged microlearning (70 words)
- [Latest nexusiq topics - Sonatype Community](/content/community/tag/nexusiq/index.html): Topics tagged nexusiq (41 words)
- [Top help topics - Sonatype Community](/content/community/tag/help/l/top/index.html): Topics tagged help (491 words)
- [Latest cli topics - Sonatype Community](/content/community/tag/cli/index.html): Topics tagged cli (102 words)
- [Latest blob-storage topics - Sonatype Community](/content/community/tag/blob-storage/index.html): Topics tagged blob-storage (64 words)
- [Latest linux topics - Sonatype Community](/content/community/tag/linux/index.html): Topics tagged linux (110 words)
- [Latest bundle topics - Sonatype Community](/content/community/tag/bundle/index.html): Topics tagged bundle (44 words)
- [Latest jenkins topics - Sonatype Community](/content/community/tag/jenkins/index.html): Topics tagged jenkins (285 words)
- [Latest guide topics - Sonatype Community](/content/community/tag/guide/index.html): Topics tagged guide (24 words)
- [Latest sonatype-guide topics - Sonatype Community](/content/community/tag/sonatype-guide/index.html): Topics tagged sonatype-guide (24 words)
- [Latest artifactory topics - Sonatype Community](/content/community/tag/artifactory/index.html): Topics tagged artifactory (41 words)
- [Latest upload topics - Sonatype Community](/content/community/tag/upload/index.html): Topics tagged upload (171 words)
- [Latest database topics - Sonatype Community](/content/community/tag/database/index.html): Topics tagged database (205 words)
- [Latest postgres topics - Sonatype Community](/content/community/tag/postgres/index.html): Topics tagged postgres (68 words)
- [Latest application-analysis topics - Sonatype Community](/content/community/tag/application-analysis/index.html): Topics tagged application-analysis (72 words)
- [Latest azure-devops topics - Sonatype Community](/content/community/tag/azure-devops/index.html): Topics tagged azure-devops (110 words)
- [Latest nexus-repository-3 topics - Sonatype Community](/content/community/tag/nexus-repository-3/index.html): Topics tagged nexus-repository-3 (521 words)
- [Latest azure topics - Sonatype Community](/content/community/tag/azure/index.html): Topics tagged azure (127 words)
- [Latest help topics - Sonatype Community](/content/community/tag/help/l/latest/index.html): Topics tagged help (7,099 words)
- [Latest pip topics - Sonatype Community](/content/community/tag/pip/index.html): Topics tagged pip (38 words)
- [Latest twine topics - Sonatype Community](/content/community/tag/twine/index.html): Topics tagged twine (38 words)
- [Latest error-116 topics - Sonatype Community](/content/community/tag/error-116/index.html): Topics tagged error-116 (29 words)
- [Latest jira-plugin topics - Sonatype Community](/content/community/tag/jira-plugin/index.html): Topics tagged jira-plugin (28 words)
- [Latest community-edition topics - Sonatype Community](/content/community/tag/community-edition/index.html): Topics tagged community-edition (25 words)
- [Latest sso topics - Sonatype Community](/content/community/tag/sso/index.html): Topics tagged sso (47 words)
- [Top integrations topics - Sonatype Community](/content/community/tag/integrations/l/top/index.html): Topics tagged integrations (47 words)
- [Latest format topics - Sonatype Community](/content/community/tag/format/index.html): Topics tagged format (30 words)
- [Latest nexus-repository-2 topics - Sonatype Community](/content/community/tag/nexus-repository-2/index.html): Topics tagged nexus-repository-2 (216 words)
- [Latest elearning topics - Sonatype Community](/content/community/tag/elearning/index.html): Topics tagged elearning (124 words)
- [Latest sbom-manager topics - Sonatype Community](/content/community/tag/sbom-manager/index.html): Topics tagged sbom-manager (57 words)
- [Latest malware topics - Sonatype Community](/content/community/tag/malware/index.html): Topics tagged malware (33 words)
- [News and Notes from the Makers of Nexus | Sonatype Blog | Kevin Miller](/content/blog/author/kevin-miller/index.html): Kevin Miller is a Product Marketing Manager at Sonatype where he works to empower the development community to shift component choice and security left. He believes that putting the right tools and options in the hands of developers will help accelerate software innovation and minimize open source risk. (266 words)
- [News and Notes from the Makers of Nexus | Sonatype Blog | Stephen Magill](/content/blog/author/stephen-magill/index.html): Stephen Magill is Vice President of Product Innovation at Sonatype. He’s the former CEO of MuseDev, a software company acquired by Sonatype, and is dedicated to helping developers write their best code through code quality automation.Stephen is a world-recognized expert on program analysis and was previously a principal scientist at Galois. Among his other accomplishments, he earned his Ph.D and M.S in CS from Carnegie Melon and serves on the University of Tulsa Industry Advisory Board. (152 words)
- [News and Notes from the Makers of Nexus | Sonatype Blog | Ryan Berg](/content/blog/author/ryan-berg/index.html): Ryan is the former Chief Security Officer at Sonatype. He is now the Chief Scientist/Director of Research and ML at Barkly. (18 words)
- [News and Notes from the Makers of Nexus | Sonatype Blog | Curtis Yanko](/content/blog/author/curtis-yanko/index.html): Curtis Yanko is a Sr Principal Architect at Sonatype and a DevOps coach/evangelist. Prior to coming to Sonatype Curtis started the DevOps Center of Enablement at a Fortune 100 insurance company and chaired a Open Source Governance Committee. When he isn’t working with customers and partners on how to build security and governance into modern CI/CD pipelines he can be found raising service dogs or out playing ultimate frisbee during his lunch hour. Curtis is currently working on building strategic technical partnerships to help solve for the rugged devops tool chain. (246 words)
- [News and Notes from the Makers of Nexus | Sonatype Blog | Marvin Froeder](/content/blog/author/marvin-froeder/index.html): Over the past 11 years, Marvin has worked for several startups, most notably at The Last Pickle, ContaAzul, and Sonatype, where he was a Java Developer.  (71 words)
- [Latest oss topics - Sonatype Community](/content/community/tag/oss/index.html): Topics tagged oss (316 words)
- [News and Notes from the Makers of Nexus | Sonatype Blog | VAO](/content/blog/author/vao/index.html): Conversations about software supply automation, devsecops, open source, continuous delivery, and application security. (61 words)
- [News and Notes from the Makers of Nexus | Sonatype Blog | Mitchell Johnson](/content/blog/author/mitchell-johnson/index.html): Mitchell has more than 25 years of experience as a developer, architect, team-builder and leader across a variety of high-growth roles in technology, data, product, and mergers and acquisitions, including stints at eVestment a Nasdaq Company, Equifax, Grant Thornton and Delta Air Lines. Mitchell comes to Sonatype from MAXEX, the mortgage industry’s first centralized exchange for trading residential mortgages. At MAXEX, Mitchell was responsible for of all aspects of product management, data, security and technology including development of the next generation SAAS/PAAS trading platform. (266 words)
- [News and Notes from the Makers of Nexus | Sonatype Blog | John Casey](/content/blog/author/john-casey/index.html): John is a former Engineer at Sonatype and is a software engineering expert specializing in build process / automation (particularly for Java software). His experience emphasizes engineering, not just software development; he interested in the process of making software reliable and supportable in production environments. (134 words)
- [Latest authentication topics - Sonatype Community](/content/community/tag/authentication/index.html): Topics tagged authentication (200 words)
- [Latest asset-download topics - Sonatype Community](/content/community/tag/asset-download/index.html): Topics tagged asset-download (54 words)
- [Latest ossi topics - Sonatype Community](/content/community/tag/ossi/index.html): Topics tagged ossi (43 words)
- [Latest rest topics - Sonatype Community](/content/community/tag/rest/index.html): Topics tagged rest (394 words)
- [Latest best-practice topics - Sonatype Community](/content/community/tag/best-practice/index.html): Topics tagged best-practice (376 words)
- [Latest npm topics - Sonatype Community](/content/community/tag/npm/index.html): Topics tagged npm (670 words)
- [Latest license topics - Sonatype Community](/content/community/tag/license/l/latest/index.html): Topics tagged license (223 words)
- [Latest product-feature topics - Sonatype Community](/content/community/tag/product-feature/index.html): Topics tagged product-feature (282 words)
- [Latest pypi topics - Sonatype Community](/content/community/tag/pypi/index.html): Topics tagged pypi (273 words)
- [Top podman topics - Sonatype Community](/content/community/tag/podman/l/top/index.html): Topics tagged podman (55 words)
- [Latest podman topics - Sonatype Community](/content/community/tag/podman/l/latest/index.html): Topics tagged podman (48 words)
- [Latest ssl topics - Sonatype Community](/content/community/tag/ssl/index.html): Topics tagged ssl (210 words)
- [Latest conan topics - Sonatype Community](/content/community/tag/conan/index.html): Topics tagged conan (187 words)
- [Latest triaged topics - Sonatype Community](/content/community/tag/triaged/index.html): Topics tagged triaged (43 words)
- [Latest content-selector topics - Sonatype Community](/content/community/tag/content-selector/index.html): Topics tagged content-selector (61 words)
- [Latest license topics - Sonatype Community](/content/community/tag/license/index.html): Topics tagged license (234 words)
- [Latest descending topics - Sonatype Community](/content/community/tag/descending/index.html): Topics tagged descending (23 words)
- [Latest offline-nexus topics - Sonatype Community](/content/community/tag/offline-nexus/index.html): Topics tagged offline-nexus (20 words)
- [Latest metadata topics - Sonatype Community](/content/community/tag/metadata/index.html): Topics tagged metadata (55 words)
- [Latest nuget topics - Sonatype Community](/content/community/tag/nuget/index.html): Topics tagged nuget (35 words)
- [Latest blob topics - Sonatype Community](/content/community/tag/blob/index.html): Topics tagged blob (277 words)
- [Latest scripts topics - Sonatype Community](/content/community/tag/scripts/index.html): Topics tagged scripts (146 words)
- [Latest curl topics - Sonatype Community](/content/community/tag/curl/index.html): Topics tagged curl (61 words)
- [Latest migrate topics - Sonatype Community](/content/community/tag/migrate/index.html): Topics tagged migrate (495 words)
- [Latest apt topics - Sonatype Community](/content/community/tag/apt/index.html): Topics tagged apt (175 words)
- [Latest sbom topics - Sonatype Community](/content/community/tag/sbom/index.html): Topics tagged sbom (75 words)
- [Latest nexus-migration topics - Sonatype Community](/content/community/tag/nexus-migration/index.html): Topics tagged nexus-migration (143 words)
- [Latest helm topics - Sonatype Community](/content/community/tag/helm/index.html): Topics tagged helm (209 words)
- [Latest groovy topics - Sonatype Community](/content/community/tag/groovy/index.html): Topics tagged groovy (138 words)
- [Latest proxy topics - Sonatype Community](/content/community/tag/proxy/index.html): Topics tagged proxy (825 words)
- [Latest kubernetes topics - Sonatype Community](/content/community/tag/kubernetes/index.html): Topics tagged kubernetes (161 words)
- [Latest bitnami topics - Sonatype Community](/content/community/tag/bitnami/index.html): Topics tagged bitnami (29 words)
- [Latest docker topics - Sonatype Community](/content/community/tag/docker/index.html): Topics tagged docker (573 words)
- [Latest scm topics - Sonatype Community](/content/community/tag/scm/index.html): Topics tagged scm (89 words)
- [Latest nexus-iq topics - Sonatype Community](/content/community/tag/nexus-iq/index.html): Topics tagged nexus-iq (3,064 words)
- [Top high-availibility topics - Sonatype Community](/content/community/tag/high-availibility/l/top/index.html): Topics tagged high-availibility (30 words)
- [Latest high-availibility topics - Sonatype Community](/content/community/tag/high-availibility/index.html): Topics tagged high-availibility (68 words)
- [Top blob-store topics - Sonatype Community](/content/community/tag/blob-store/l/top/index.html): Topics tagged blob-store (60 words)
- [Latest orientdb topics - Sonatype Community](/content/community/tag/orientdb/index.html): Topics tagged orientdb (302 words)
- [Latest ldap topics - Sonatype Community](/content/community/tag/ldap/index.html): Topics tagged ldap (332 words)
- [Latest maven topics - Sonatype Community](/content/community/tag/maven/index.html): Topics tagged maven (500 words)
- [Latest blob-store topics - Sonatype Community](/content/community/tag/blob-store/index.html): Topics tagged blob-store (217 words)
- [Latest help topics - Sonatype Community](/content/community/tag/help/index.html): Topics tagged help (6,159 words)
- [Latest nexus-repository topics - Sonatype Community](/content/community/tag/nexus-repository/index.html): Topics tagged nexus-repository (6,243 words)
- [Latest integrations topics - Sonatype Community](/content/community/tag/integrations/index.html): Topics tagged integrations (2,025 words)
- [News and Notes from the Makers of Nexus | Sonatype Blog | Jeff Wayman](/content/blog/author/jeff-wayman/index.html): Currently in his second tour at Sonatype, Jeff is our resident Conduit of Goodness, helping bridge gaps across teams to improve developer relations, content strategy, and brand awareness. In the past, he served and led teams across product management, technical writing, and customer education. When not writing about cybersecurity and open source software, you can find him outside (likely in the humid southeast) enjoying time with his family. (172 words)
- [News and Notes from the Makers of Nexus | Sonatype Blog | Bruce Mayhew](/content/blog/author/bruce-mayhew/index.html): Bruce Mayhew serves as Sonatype's Director of Data and Security R&D, where he's focused on product development and research around collecting, analyzing and understanding millions of open source libraries.  (32 words)
- [News and Notes from the Makers of Nexus | Sonatype Blog | security vulnerabilities](/content/blog/tag/security-vulnerabilities/index.html): security vulnerabilities | Conversations about software supply automation, devsecops, open source, continuous delivery, and application security. (286 words)
- [News and Notes from the Makers of Nexus | Sonatype Blog | Audra Davis-Hurst](/content/blog/author/audra-davis-hurst/index.html): Audra is a content creator diving into the depths of open source and software supply chain management. In her spare time, she loves hanging out with her friends and family, snuggling her circus of pets, reading, and playing video games. (90 words)
- [News and Notes from the Makers of Nexus | Sonatype Blog | Malware Monthly](/content/blog/tag/malware-monthly/index.html): Malware Monthly | Conversations about software supply automation, devsecops, open source, continuous delivery, and application security. (73 words)
- [News and Notes from the Makers of Nexus | Sonatype Blog | Elissa Walters](/content/blog/author/elissa-walters/index.html): Conversations about software supply automation, devsecops, open source, continuous delivery, and application security. (52 words)
- [News and Notes from the Makers of Nexus | Sonatype Blog | Paul Horton](/content/blog/author/paul-horton/index.html): Paul Horton is the OSPO Global Director at Sonatype and a Core Maintainer of OWASP CycloneDX, with more than 20 years of experience spanning software development, DevSecOps, open source governance, and software supply chain security. He is an active open source contributor who helps organisations improve software transparency and translate complex security and compliance challenges into practical solutions. (22 words)
- [News and Notes from the Makers of Nexus | Sonatype Blog | Chris Good](/content/blog/author/chris-good/index.html): Chris is a Product Marketing Manager with Sonatype. Originally from Pittsburgh, PA, Chris studied Communications and Computer Science at the University of Pittsburgh. He enjoys working for Sonatype because of the culture here at the company -- it's diverse and promotes creativity. When he's not working with DevSecOps community, he loves snowboarding, cycling, and traveling. (224 words)
- [News and Notes from the Makers of Nexus | Sonatype Blog | DJ Schleen](/content/blog/author/dj-schleen/index.html): DJ is a DevSecOps Advocate (138 words)
- [News and Notes from the Makers of Nexus | Sonatype Blog | Juan Aguirre](/content/blog/author/juan-aguirre/index.html): Juan is a security researcher at Sonatype and part of the team who has helped Sonatype catalog more than 100 million open source components. (147 words)
- [News and Notes from the Makers of Nexus | Sonatype Blog | Terry Bernstein](/content/blog/author/terry-bernstein/index.html): Terry is the former Director of Product Marketing at Sonatype. He is now the Director of Product Management at Verisign. (94 words)
- [News and Notes from the Makers of Nexus | Sonatype Blog | osstop10](/content/blog/tag/osstop10/index.html): osstop10 | Conversations about software supply automation, devsecops, open source, continuous delivery, and application security. (82 words)
- [News and Notes from the Makers of Nexus | Sonatype Blog | Elisa Velarde](/content/blog/author/elisa-velarde/index.html): Elisa was a Senior Product Marketing Manager at Sonatype. She brought over 10 years of experience in sourcing, mentoring, and leading Marketing or full Agile product teams while maintaining a collaborative, cross-departmental approach to support company goals. (275 words)
- [Latest podman topics - Sonatype Community](/content/community/tag/podman/index.html): Topics tagged podman (48 words)
- [News and Notes from the Makers of Nexus | Sonatype Blog | Luke Mcbride](/content/blog/author/luke-mcbride/index.html): Luke is a writer at Sonatype covering everything from open source licenses and liability to DevSecOps trends and container security. (302 words)
- [News and Notes from the Makers of Nexus | Sonatype Blog | Jason van Zyl](/content/blog/author/jason-van-zyl/index.html): Jason is a co-founder and the former CTO of Sonatype. (221 words)
- [News and Notes from the Makers of Nexus | Sonatype Blog | Michael Prescott](/content/blog/author/michael-prescott/index.html): Michael is Director of Product for Sonatype Nexus Repository, where he helps make DevOps easy for software development organizations, large and small. (226 words)
- [News and Notes from the Makers of Nexus | Sonatype Blog | Mark Miller](/content/blog/author/mark-miller/index.html): Mark Miller serves as the Senior Storyteller and DevOps Advocate at Sonatype. He speaks and writes extensively on DevSecOps and Security, hosting panel discussions, podcasts, and webinars on tools and processes within the Software Supply Chain. (324 words)
- [News and Notes from the Makers of Nexus | Sonatype Blog | Derek Weeks](/content/blog/author/derek-weeks/index.html): Derek serves as vice president and DevOps advocate at Sonatype and is the co-founder of All Day DevOps, an online community of 65,000 IT professionals. (258 words)
- [News and Notes from the Makers of Nexus | Sonatype Blog | Tim OBrien](/content/blog/author/tim-obrien/index.html): Tim is a Software Architect with experience in all aspects of software development from project inception to developing scaleable production architectures for large-scale systems during critical, high-risk events such as Black Friday. He has helped many organizations ranging from small startups to Fortune 100 companies take a more strategic approach to adopting and evaluating technology and managing the risks associated with change. (285 words)
- [News and Notes from the Makers of Nexus | Sonatype Blog | Brian Fox](/content/blog/author/brian-fox/index.html): Brian Fox, CTO and co-founder of Sonatype, is a Governing Board Member for the Open Source Security Foundation (OpenSSF), a Governing Board Member for the Fintech Open Source Foundation (FINOS), a member of the Monetary Authority of Singapore Cyber and Technology Resilience Experts (CTREX) Panel, a member of the Apache Software Foundation and former Chair of the Apache Maven project. Working with OpenSSF, Brian helped create The Open Source Consumption Manifesto, urging organizations to elevate awareness of open source usage. He also chaired efforts to provide official responses to requests for information from the The Office of the National Cybersecurity Directorate (ONCD) and the Cybersecurity and Infrastructure Security Agency (CISA). Within the Atlantic Council's Open Source Policy Network, Brian actively helps shape cybersecurity strategy, offering valuable insights on critical documents, such as ONCD's recent National Cyber Security Strategy. Brian has over 20 years of experience driving the vision behind, as well as developing and leading the development of software for organizations ranging from startups to large enterprises. Brian is a frequent speaker at national and regional events including Java User Groups and other security and development-related conferences. (272 words)
- [News and Notes from the Makers of Nexus | Sonatype Blog | Ax Sharma](/content/blog/author/ax-sharma/index.html): Ax is a security researcher, malware analyst and journalist with a penchant for open source software. His works and expert analyses have frequently been featured by leading media outlets including the BBC. Ax's expertise lies in security vulnerability research, reverse engineering, and cybercrime investigations. He has a passion for educating a wide range of audiences through writing and vlogs. (292 words)
- [News and Notes from the Makers of Nexus | Sonatype Blog | Sonatype Research Team](/content/blog/author/sonatype-security-research-team/index.html): Sonatype's Research Team is focused on bringing real-time, in-depth intelligence and actionable information about open source and third party vulnerabilities to Sonatype customers. (305 words)
- [News and Notes from the Makers of Nexus | Sonatype Blog | Emily Blades](/content/blog/author/emily-blades/index.html): Emily Blades is the former Community/Events Manager at Sonatype. She is now the Community Manager at Virtru. (64 words)
- [News and Notes from the Makers of Nexus | Sonatype Blog | Ilkka Turunen](/content/blog/author/ilkka-turunen/index.html): Ilkka serves as Field CTO at Sonatype. He is a software engineer with a knack for rapid web-development and cloud computing and with technical experience on multiple levels of the XaaS cake. Ilkka is interested in anything and everything, always striving to learn any relevant skills that help towards building Sonatype for success. (233 words)
- [News and Notes from the Makers of Nexus | Sonatype Blog | Aaron Linskens](/content/blog/author/aaron-linskens/index.html): Aaron is a technical writer at Sonatype. He works at a crossroads of technical writing, developer advocacy, and information design. He aims to get developers and non-technical collaborators to work better together in solving problems and building software. (284 words)
- [News and Notes from the Makers of Nexus | Sonatype Blog | Eddie Knight](/content/blog/author/eddie-knight/index.html): Eddie Knight is a Software and Cloud Engineer on Sonatype's Developer Relations team. With a background in fintech, he regularly works on open source software, including contributions to CNCF projects and working as a maintainer for the Compliant Financial Services project in FINOS. He also enjoys spending time being terrible at woodworking and creative writing. (130 words)
- [News and Notes from the Makers of Nexus | Sonatype Blog | Sylvia Fronczak](/content/blog/author/sylvia-fronczak/index.html): Sylvia Fronczak is a software developer that has worked in various industries with various software methodologies. She’s currently focused on design practices that the whole team can own, understand, and evolve over time. (154 words)
- [News and Notes from the Makers of Nexus | Sonatype Blog | Wayne Jackson](/content/blog/author/wayne-jackson/index.html): Wayne is the CEO of Sonatype, a role he has held since 2010. Prior to Sonatype, Wayne served as the CEO of open source network security pioneer Sourcefire, Inc. (NASDAQ:FIRE), which he guided from fledgling start-up through an IPO in March of 2007, later acquired by Cisco for $2.7 billion. Before Sourcefire, Wayne co-founded Riverbed Technologies, a wireless infrastructure company, and served as its CEO until the sale of the company for more than $1 billion in March of 2000.  (283 words)
- [News and Notes from the Makers of Nexus | Sonatype Blog | Kadi Grigg](/content/blog/author/kadi-grigg/index.html): Kadi is passionate about the DevOps / DevSecOps community since her days of working with COBOL development and Mainframe solutions. At Sonatype, she collaborates with developers and security researchers and hosts Wicked Good Development, a podcast about the future of open source. When she's not working with the developer community, she loves running, traveling, and playing with her dog Milo. (306 words)

## About Pages

- [Sonatype Lifecycle + HeroDevs EOL Support | Sonatype](/content/sonatype-lifecycle/herodevs-eol-support/contact/index.html): Explore HeroDevs support options for end-of-life and security-critical components. Speak to a Sonatype expert to ensure you are protected and compliant. (114 words)
- [About - Sonatype Community](/content/community/about/index.html) (121 words)
- [What is the Sonatype Open Source Community? | Sonatype Open Source Community Handbook](/content/contribute/about/index.html): What is the Sonatype Open Source Community? Sonatype Community encompasses a myriad of projects and examples that are Open Source under the Apache 2.0 license.
The projects are maintained by Sonatype, and we welcome contributions from the Open Source Community. Here are our current illustrious leaders:
Dan Rollo (External Contributor) Hans Dam (Sonatyper) Paul Horton (Sonatyper) You can contribute to this Handbook via a Pull Request or read more to find out how to contriubte to existing projects., What is the Sonatype Open Source Community? Sonatype Community encompasses a myriad of projects and examples that are Open Source under the Apache 2.0 license.
The projects are maintained by Sonatype, and we welcome contributions from the Open Source Community. Here are our current illustrious leaders:
Dan Rollo (External Contributor) Hans Dam (Sonatyper) Paul Horton (Sonatyper) You can contribute to this Handbook via a Pull Request or read more to find out how to contriubte to existing projects. (78 words)
- [Explore Maven Central Publisher Pro | Sonatype](/content/products/maven-central-pro/contact/index.html): Connect with the Sonatype team to learn how you can prepare for publishing limits and minimize disruption. Talk to us about Maven Central Publisher Pro. (179 words)

## Resources

- [Full Page Index](/index.html): Browse all cached pages with rich metadata
- [About This Cache](/content/about.html): Methodology, technical details, and usage guidelines
- [XML Sitemap](/sitemap.xml): Machine-readable sitemap for crawler discovery
- [Robots.txt](/robots.txt): Crawler directives