Category Archives: Nexus Repo Reel

Sonatype Nexus Security Advisory

January 16, 2014 By
Brian Fox
Security Advisory

Sonatype Nexus Security Advisory Date: January 14, 2014 Affected Versions: Nexus OSS/Pro versions prior to and including 2.7.0-06 Summary: A critical security vulnerability has been discovered by Sonatype in Nexus requiring immediate action. The vulnerability makes use of an execution path in an open source library that we have now (with the available patch) added […]

Continue reading...

Should your devops pipeline consider component intelligence?

October 31, 2013 By
Manfred Moser

In the Nexus Live event John Nagro and Tom McLaughlin from HubSpot detailed how they are using
Nexus as a repository for their development and release components. They
found that they need to be able to quickly create another virtual
machine as part of their build infrastructure to react to changes in
datacenter locations and other parameters.

Continue reading...

Yes, Policies Can Actually Speed Development

Derek Weeks

CONTROL, ENFORCEMENT, APPROVALS, POLICIES These concepts run counter to fast, agile, based-development. These words make developers cringe, they are “4 letter words”. Could it be that the problems with these concepts is not what they are trying to accomplish, but how they are implemented? They are intended to ensure that applications developers create are trusted, […]

Continue reading...

The Golden Repo is NOT the Answer, the Golden Policy is

October 1, 2013 By
Manfred Moser

Like many organizations, you have turned to Nexus as a repository for your components. Since that is going so well, you may be thinking adding controls that turn Nexus into a Golden Repository. It’s natural to try to manage components by restricting usage to only those components approved by your security, licensing and architecture teams. […]

Continue reading...

Simplified Releases to the Central Repository with Nexus

September 30, 2013 By
Manfred Moser

The Central Repository continues to be the largest repository of binary components for Java developers and beyond. A majority of open source projects including organizations such as Apache Software Foundation, Google , Github and many more take advantage of the free hosting via the Sonatype Open Source Software Repository Hosting OSSRH. The release automation for […]

Continue reading...

Using Your Repository Manager to Optimize Component Usage

September 24, 2013 By
Derek Weeks

We constantly receive inquiries about how organizations can get the most out of their repository manager. We thought it would be good to address this topic in a series of webinars. While preparing for the webinars, we looked at problems that afflicted organizations who aren’t using a repository manager. Developers Waste Time downloading a massive […]

Continue reading...

Join Us For Nexus Live: Product survey data revealed

September 5, 2013 By
Emily Blades

Join Brian Fox, Richard Seddon and Manfred Moser for Nexus Live next Wednesday, September 11, 2013 from 12:00PM-1:00PM EDT (GMT-0400) to: Get an insider’s look at how our most successful customers use Nexus. Preview what’s coming in Nexus 2.7. Get the details you need to plan for an upgrade now. Ask questions live and get […]

Continue reading...