Nexus Lifecycle Now Integrates with Azure DevOps to Secure Software Supply Chains in the Cloud

As more and more software development teams move to the cloud, it is now more important than ever to ensure that only the best open source components make it into a final application. With a 71% increase in open source related breaches within the … Continue reading Nexus Lifecycle Now Integrates with Azure DevOps to Secure Software Supply Chains in the Cloud

CocoaPods and Conda in Nexus Repository 3.19

New Supported Languages. More Stable Builds.
We are excited to officially announce native format support for CocoaPods and Conda dependency managers in Nexus Repository Manager 3.19. Over the last few months, Sonatype product teams have accelerate… Continue reading CocoaPods and Conda in Nexus Repository 3.19

The Dot Zero Conundrum and the New Frontier of Securing Open Source

Over the past two years, I’ve spoken about more than 20 instances of adversaries intentionally publishing malicious components into public open source and container repositories. Adversaries used these attacks to mine cryptocurrency, steal p… Continue reading The Dot Zero Conundrum and the New Frontier of Securing Open Source

Win a $100 Gift Card: Take a Brief Survey on Software Composition Analysis

Sonatype is building a software composition analysis tool for GitHub Actions and would love to understand your needs. If you are excited about GitHub Actions and looking for ways to understand the open source dependencies that make up your softwar… Continue reading Win a $100 Gift Card: Take a Brief Survey on Software Composition Analysis

Introducing a Better Way to Learn Sonatype Products

It’s not news that tech companies move at blazing speeds. In order to stay competitive, we are innovative, rapid in our deployments, and always thinking ahead. This breakneck pace of continuous improvement, feature releases, and updates are … Continue reading Introducing a Better Way to Learn Sonatype Products

New Micro Focus, Sonatype Partnership Provides 360 Degree View of AppSec

In today’s world, we know that most security breaches occur because of application vulnerabilities. We also know that most typical software applications are, on average, comprised of 85% open source software. These facts are changing the way… Continue reading New Micro Focus, Sonatype Partnership Provides 360 Degree View of AppSec

Removing Search Guard from the Central Repository

We at Sonatype take our responsibility as stewards of the Central Repository (Central) very seriously, and for well over a decade we have been dedicated to the ideal of immutability when it comes to serving components to the community that relies … Continue reading Removing Search Guard from the Central Repository

Pan and Tilt to a New 3D Printed Business Model

When shooting video, an easy way to get buttery smooth panning and tracking is to use a mechanical device like a rail to literally slide the camera side to side. These range from what is essentially a skateboard to incredible programmable multi-axis industrial robots, a wide variety of which have …read more

Continue reading Pan and Tilt to a New 3D Printed Business Model