Discover sonatype-nexus-community/deployment-reference-architecture

Open-source, cross-platform, multi-purpose security auditing tool

478

DevAudit

360

auditjs

Audits an NPM package.json file to identify known vulnerabilities.

Composer support for the Nexus Repository Manager (work in progress!)

223

nexus-repository-composer

A few scripts for importing artifacts into Nexus Repository

215

nexus-repository-import-scripts

Check your Python environments for vulnerable Open Source packages with OSS Index or Sonatype Nexus Lifecycle.

200

jake

A Nexus Repository 3 plugin that allows usage of apt repositories

111

nexus-repository-apt

At the Helm, Helm Yeah, v k8s

105

nexus-repository-helm

Sample scripts that use NXRM's scripting interface

nexus-scripting-examples

HTML

scan-gradle-plugin

Gradle plugin that scans the dependencies of a Gradle project using Sonatype platforms: OSS Index and Nexus IQ Server.

Nexus Repository Cargo Format

nexus-repository-cargo

ahab is a tool to check for vulnerabilities in your apt, apk, or yum powered operating systems, powered by Sonatype OSS Index.

ahab

repo-diff

Compare the contents of your hosted and proxy repositories for coordinate collisions

Identify known vulnerabilities in .net nuget dependencies

audit.net

gonexus

Go API for provisioning and interacting with Sonatype's Nexus Repository Manager and Nexus IQ Server

helm-nexus-push

A plugin for helm that will push a chart to a Nexus Hosted Repository

nexus-repository-apk

Dependency audit plugin for gradle

ossindex-gradle-plugin

Create purls from the filtered sands of your dependencies, powered by OSS Index

oysteR

nexus-blobstore-google-cloud

Nexus Repository Manager Blobstore backed by Google Cloud Storage

Conan the Barbarian, C packaging, fun times

nexus-repository-conan

This is a template for deploying Nexus Repository Manager behind an NGINX reverse proxy.

docker-nginx-nexus-repository

Nexus Repository for GitHub Actions

nexus-repo-github-action

Installer for Nexus Repository Manager 3

nexus-repository-installer

R, v data science, much functional programming, doge

nexus-repository-r

Audit C/C++ projects (make, cmake, command line, etc.)

cargo-pants

Rust

cheque

nexus-cli

A Go based CLI for the Nexus platform

nexus-repository-cpan

Much regex, v perl, super excite

V Eclipse, hella P2, much OSGi

nexus-repository-p2

iq-config-as-code

Chrome extension for use with Sonatype Nexus Lifecycle - IQ server

nexus-iq-chrome-extension

CSS

copy-modules-webpack-plugin

A Webpack plugin which copies module sources to a separate directory

Visual Studio Code plugin for Nexus IQ

vscode-iq-plugin

An application for retrieving and viewing success metrics from Sonatype Nexus IQ

nexusiq-successmetrics

Dependency vulnerability auditor for Ruby

chelsea

Ruby

bach

Dependency vulnerability auditor for PHP

PHP

nexus-repository-puppet

Nexus Repository Manager Blobstore backed by Azure Blob Cloud Storage

nexus-blobstore-azure-cloud

Sonatype Nancy for GitHub Actions

nexus-repository-terraform

nancy-github-action

Archetype for creating Nexus format plugin

iq-success-metrics2

nexus-format-archetype

Experimental repo for a vgo proxy and maybe more

nexus-repository-vgo

Deprecated Sonatype IQ Fortify SSC Community Integration 18.x to 20.x (replaced by Partner Integration version 4.x)

iq-fortify-parser

Sonatype Lifecycle GitHub Action

iq-github-action

Installer for Nexus IQ Server

nexus-iq-server-installer

nexus-repository-elpa

nexus-repository-microsoft-symbol-server

SAML SSO for Sonatype Nexus IQ

cs-auth-proxy

A Plugin for Sonatype Nexus to allow for automatic provisioning via K8s/OpenShift ConfigMaps and Secrets

nexus-kubernetes-openshift

Groovy

nexus-repository-conda

iq-success-metrics

This is a project we created that has dependencies with vulnerabilities, for us to test out nancy

intentionally-vulnerable-golang-project

A reference implementation for consuming webhooks via serverless.

nexus-iq-webhook-reference-implementation

nexus-development-guides

iq-webhook-listener

This repo has example CycloneDx xml formatted SBOMs for popular components across multiple ecosystems. Also, instructions for building and generating the sboms in the readme. If you add or update components, commit back up to the repo.

cyclonedx-sbom-examples

Docker-compose project for demo's / testing / training

nexus-platform-reference

HTML

nexus-ci-examples

CI example builds and Sonatype Lifecycle analysis for different languages

Groovy

iq-api-examples

Repository for API example scripts for IQ Server.

A lil Golang app that takes Nexus Repo webhooks and uses them to publish components to other repos such as npmjs

nexus-webhook-publish

go-sona-types

Common utility packages for working with OSS Index, Nexus IQ Server, CycloneDX sboms or getting a....user-agent

docker-nancy

nancy wrapped up as a Docker image for execution in a pipeline or via an alias in a terminal

circleci-maven-release-orb

nexus-repository-cabal

nexus-repository-chef

A CircleCI orb for using Nancy to scan your Golang projects

circleci-nancy-orb

hazelcast-swarm

Docker swarm discovery plugin for hazelcast

Terraform Provider for configuring Sonatype Nexus Repository Manager

terraform-provider-sonatyperepo

homebrew-nancy-tap

Ruby

hashbrowns

DevAudit-Chocolatey-package

Chocolatey package configuration for DevAudit

PowerShell

devsecops-community-survey

The question set used for the DevSecOps Community Survey

circleci-nexus-orb

sonatype-platform-browser-extension

The Sonatype Platform Browser Extension

Examples and docs for Sonatype field workshops

sonatype-field-workshop

HipChat Connect Addon to notify a chat room when a component or asset is cached in a Nexus Repository

nexus-hipchat-notifier

nexus-monitoring

Creates image to use as a GitLab runner to perform Lifecycle Evaluations

nexus-lifecycle-gitlab

Sonatype's CLA bot - affectionally known as Paul Botsco

the-cla

nexus-repository-labrat2

Another place to test things, likely to be removed soon.

Terraform Provider for configuring Sonatype IQ Server

terraform-provider-sonatypeiq

nexus-iq-api-client

Generated API Clients for Nexus IQ Server

Library that offers support for booting NXRM + community plugin for integration testing

nexus-community-it-support

Integration service to pass data from IQ to SSC (deprecated in favor of iq-fortify-parser)

iq-fortify-ssc-integration

codetocloud-workshop

Test of custom Nexus Format, created using the Nexus Format Archetype

nexus-repository-labrat

Python library for querying OSS Index

speedbump

Swift

ossindex-python

Generated API Client in Go for Sonatype IQ Server

nexus-iq-api-client-go

A collection of groovy scripts for Nexus Repository Manager 3

nexus-groovy-scripts

js-sona-types

Like go-sona-types, but for Javascript!

log4j-hackapp

Hackable applicaiton

example-auditjs-repo

example-ahab-repo

nexus-it-script-client

Sonatype Jake for GitHub Actions

jake-github-action