<img height="1" width="1" style="display:none" src="https://www.facebook.com/tr?id=1127487224079104&amp;ev=PageView&amp;noscript=1 https://www.facebook.com/tr?id=1127487224079104&amp;ev=PageView&amp;noscript=1 ">

What We Learned from Studying 36,000 OSS Projects | Press Release

The EDF Group with Nexus Lifecycle and IQ Server

Helping Consumers Manage Energy Resources and Consumption
EDF - Logo Round-1.png

The EDF Group
Customer_Success_Story_challenge@2x

Challenge

  • No scalable way to determine liability of open source in use
  • Retrospective manual security practices
  • Manual declaration of component usage to security team by developers
  • No visibility into open source libraries used within a project
  • Could not monitor and track open source within production
Customer_Success_Story_solution@2x

Solution

  • Nexus Repository Manager
  • Nexus Lifecycle
  • Ansible
  • OpenShift
  • Jenkins with plugin to Docker
  • Eclipse plugin
  • SonarQube plugin
Customer_Success_Story_outcome@2x

Outcome

  • Immediate visibility into open source security issues
  • Rapid selection of safe, open source components
  • Automatic tracking and monitoring of libraries as part of development process
  • Easily generated reports on libraries used within applications
“The biggest advantage of using IQ Server is to be able to report to our project team what specific libraries are used within our applications. We have immediate visibility into security issues.”

Olivier Router, Head of CI DevOps Engineering Team
Read the full story
Read More
Twitter LinkedIn Facebook Instagram YouTube GitHub
Products
Security Research
Solutions
Resources
About
SON_logo_white@2x copy trimmed

Sonatype Headquarters - 8161 Maple Lawn Blvd #250, Fulton, MD 20759
Tysons Office - 8281 Greensboro Drive – Suite 630, McLean, VA 22102
Australia Office - 5 Martin Place, Sydney, NSW 2000, Australia 
London Office - 199 Bishopsgate, London EC2M 3TY

Copyright © 2008-present, Sonatype Inc. All rights reserved. Includes the third-party code listed here. Sonatype and Sonatype Nexus are trademarks of Sonatype, Inc. Apache Maven and Maven are trademarks of the Apache Software Foundation. M2Eclipse is a trademark of the Eclipse Foundation. All other trademarks are the property of their respective owners.

Terms of Service    Privacy Policy