Sonatype Selected by Equifax to Support OS Governance Press Release

blog-logo Sonatype Blog

Developers, Rejoice: Auto-Remediation Now Available in Eclipse, IntelliJ, and Visual Studio

By Sonal Thawani on July 08, 2019 Nexus Lifecycle
Auto-remediation makes it even easier to choose the best component right within an IDE. The CIP now automatically suggests the compliant version.
Read More...

Repository Management: An Easy Way to Minimize Risk

By Katie McCaskey on July 05, 2019 repository manager
Mykel Alvis (@mykelalvis) of Array Consulting urges developers to use a caching, and preferably security-scanning, artifact repository. Here's why.
Read More...

Anonymous Access In Nexus Repository is Not A Zero-Day Vulnerability

By Brian Fox on July 02, 2019 Nexus Repository
A researcher contacted us about an issue in Nexus Repository, stemming from user access settings. This was not a zero day, but a product feature UX change, to make it easier to be more secure - we
Read More...

New in Repo - Repository Routing Helps Protect Against Dependency Hijacking Attacks

By Sable Yemane on June 26, 2019 Nexus Repository
How to create a repository routing rule to prevent developers from pulling a private package from a public repository. Company Pied Piper as an example.
Read More...

Hands On with the Nexus Platform: A Software Supply Chain Demo

By Katie McCaskey on June 14, 2019 Nexus solutions
Sonatype's Ilkka Turunen demonstrates how to use the Nexus Platform. Download the files to try it yourself. You'll see how useful it is for your workflow.
Read More...

The Path Forward for the Nexus Platform

By Katie McCaskey on June 12, 2019 Nexus Lifecycle
We’re seeing double and triple digit growth across usage, Nexus Repo instances, Nexus Repo scans, and daily apps under management. What comes next?
Read More...

Publishing Private NPM Packages to Nexus

By Erik Dietrich on June 12, 2019 How-To
From DRY principle, sharing code within an organization, and keeping code secure, there are many reasons you may want to publish private NPM packages to Nexus. Today, we show you the how.
Read More...

OSS Endgame: Nexus Firewall as Your Shield Against Open Source Invasions

By Erik Dietrich on June 12, 2019 Nexus Firewall
Put simply, Nexus Firewall enables the heroes. Mike Van Doren walked through how to get started using it at the 2019 Nexus User Conference.
Read More...

The 2019 Nexus User Conference is Almost Here

By Janie Gelfond on June 07, 2019 devsecops
The "un-conference" of the year is here. On June 12, learn from Sonatype leadership about the future of The Nexus Platform and hear DevSecOps transformation stories from TD Bank, American Express,
Read More...