Sonatype Delivers Premium Open Source Controls to GitHub | Press Release

blog-logo Sonatype Blog

Keep GitHub Dependencies Secure with Nexus Lifecycle's Automated Pull Requests

By Michelle Dufty on November 12, 2019 new features
Sonatype has long been the world’s premier provider of open source health and hygiene data. Now, it's bringing that data to GitHub with six new Nexus integrations.
Read More...

Nexus Repo and Datree Integration Deliver Automated Pipeline Control

By Brent Kostak on November 01, 2019 github
Nexus Repository/Datree integration applies policy control on GitHub commits to bring together developer codebase visibility and build artifact management.
Read More...

Win a $100 Gift Card: Take a Brief Survey on Software Composition Analysis

By Shade Solon on September 20, 2019 github
If you are excited about GitHub Actions, and want to understand the open source dependencies in your software, fill out this survey for a chance to win.
Read More...

Getting Started With Sonatype DepShield: An Introduction

By Casey Dunham on May 06, 2019 github
Sonatype’s GitHub application DepShield scans your GitHub repository and analyzes dependencies for known vulnerabilities. The best part is that it’s free!
Read More...

Introducing Sonatype DepShield: Free for GitHub Developers

By Michelle Dufty on August 14, 2018 github
Today, Sonatype announced Sonatype DepShield, a new GitHub application that enables developers to experience basic open source governance, free of charge.
Read More...

Microsoft and Github: Open source’s future is brighter than ever

By Brian Fox on June 13, 2018 github
With Microsoft’s resources behind a great company like GitHub, the future of secure, quality open source looks brighter than ever.
Read More...

Cancer Sucks. DevOps Helps.

By Derek Weeks on January 17, 2018 github
Sara Elkins tells the story of how they are applying DevOps practices at the National Cancer Institute.
Read More...

Continuous Integration in Pipeline as Code Environment with Jenkins, JaCoCo, Nexus and SonarQube

By Rahul Vishwakarma on January 17, 2018 github
The setup for a Continuous integration pipeline... this is for mavenized Spring boot build with JaCoCo coverage reports and Sonar metrics.
Read More...

Cleanup Old Docker Images from Nexus Repository

By Mohamed Labouardy on January 02, 2018 github
I built a Nexus CLI which uses Docker Registry API to purge Docker images and keep the last X images and delete all other. Here's how I did it.
Read More...