TheNEXUS

Nexus Repository: New Beta REST API for Content

There’s a secret lurking in Nexus Repository Manager, a beta REST API for accessing components. You’re probably already aware of our Provisioning API, a REST API you can use to automate the configuration of your Nexus Repository instances. Well, we’ve been busy adding REST endpoints so you can list, search, and download your components as well.…

Nexus Repository 3.5.0 Released with Yum Proxy Repository Support

Sonatype is pleased to announce the availability of Nexus Repository 3.5.0 OSS and Pro. This release adds support for Yum proxy repositories, and enhances the 2.x to 3.x upgrade process to support Firewall-enabled repositories. Yum Proxy Repository Support You have been asking for Yum support and we have listened. With release 3.5, you can now define Yum proxy repositories.…

Nexus and SSL

For updates on articles and resources, follow @TSWAlliance on Twitter Today’s topic comes from an interesting conversation I had with a customer about SSL certificates that can be used to secure Nexus and serve it via HTTPS. Though HTTPS should be the cornerstone in securing any web service, I thought it useful to answer small…

Nexus Repository 3.6.1 Released

The Nexus Repository teams are pleased to announce the immediate availability of Nexus Repository 3.6.1. This release is a rollup of 70+ bug fixes and general improvements we’ve made over the last couple of months. A few highlights: Docker repositories can be searched anonymously (NEXUS-14512). Username and IP address of the person who uploaded a…

Expanding Community Engagement at OWASP w/ Greg Anderson [Podcast]

Newly elected to the OWASP board, Greg Anderson is interested in how to expand the OWASP community. I talked with him about what he hopes to accomplish in his tenure on the board, the first initiatives he would like to implement and on various ideas for working with OWASP chapters, projects and events. About Greg…

Cleanup old Docker images from Nexus Repository

Many of us, are using Nexus as a repository to publish Docker Images. Typically we build images tagged with the commit hash (or using semver ideally) after SCM change automatically in CI and we push them to registry. As result there are many “unneeded” & “old” images that in our case take significant amount of disk space. I looked around the graphical interface of Nexus and…

Sonatype Automated Deployments with Atlassian Bitbucket Pipelines

With the release of Atlassian’s new Bitbucket Pipelines, you can now configure your project to have continuous builds performed in the cloud easily. Powered by the knowledge of Atlassian on how to run large infrastructure for tools such as Confluence and JIRA Software, Bitbucket Pipelines brings you a simple configuration for your builds, no matter…

When it Comes to Application Security, “Doing Your Homework” Matters

They say software is eating the world, very true, but it has become even more clear that OSS components are eating the software world. This amazing revolution is driving unimagined gains in innovation and efficiency in our ability to deliver software. Think Uber, here is a new leader in the transportation industry without owning a…

Introducing the Nexus Jenkins Plugin

Automated Publishing As a long time Java developer, I’ve always depended on the Maven build process to automatically publish my artifacts to a Nexus Repository Manager. This automated process was made possible thanks to some very useful plugins — specifically, the Maven plugin for Nexus staging and the Maven Deploy plugin. Both made publishing of…

Need Immediate Help?

In the Spotlight