Featured Article

CVE-2024-3094 The targeted backdoor supply chain attack against XZ and liblzma

By Ilkka Turunen on April 01, 2024 Software Supply Chain

Learn about a new, targeted backdoor supply chain attack against the popular XZ compression utility seen in many Linux distributions such as fedora and debian. Understand its impact, potential risks

Read More

SHARE:

Sonatype_Blog_Logo_White
READ MORE

Nexus Repository: A Strategic Guide from Git to Governance

By Brent Kostak on April 30, 2020 Nexus Lifecycle

6 minute read time

This guide explains the marketplace of source code management and git repos, application-level building and binary repos, and open source governance.
Read More...
GettyImages-1045890176
READ MORE

Sonatype Lifecycle Now Integrates with Azure DevOps to Secure Software Supply Chains in the Cloud

By Michelle Dufty on October 11, 2019 cloud

2 minute read time

The Nexus IQ Extension for Azure DevOps scans builds to identify open source security, license, or quality policy violations.
Read More...