SONATYPE INTEGRATIONS

Manage SDLC Security Risk in the Tools You Already Use

Sonatype's software development lifecycle security solutions have you covered with 50+ supported languages, packages, and integrations across leading IDEs, source repositories, CI pipelines, DevSecOps tools, and ticketing systems.

Amazon Web Services

Manage and secure open source and third-party components in the cloud with Sonatype Nexus Repository and IQ Server.

See Integration Details

Atlassian Bamboo

Shift application security and quality practices left by automatically sending alerts or failing Bamboo builds when application components are out of compliance with your open source policies.

See Integration Details

Atlassian Bitbucket

Sonatype Lifecycle pushes component intelligence into Bitbucket where developers can view and remediate SDLC security policy violations with detailed Code Insights.

See Integration Details

Azure DevOps

Shift security and quality practices left by automatically sending alerts or failing Azure builds when application components are out of compliance with your open source policies.

See Integration Details

Chrome Extension

Identify the open source risk within a package before you even download it with our Chrome extension.

See Integration Details

Eclipse

Empower developers with precise component and open source risk intelligence directly within the Eclipse IDE.

See Integration Details

GitHub

Sonatype Lifecycle pushes component intelligence into GitHub where developers can view and respond to policy violations directly in pull requests.

See Integration Details

GitLab

Our new Lifecycle integration with GitLab Ultimate lets you view vulnerability findings directly in your project’s Vulnerability Report and Dependency List.

See Integration Details

Gradle

Resolve dependencies and deploy your artifacts and build information to Sonatype Nexus Repository.

See Integration Details

IntelliJ IDEA

Empower developers with precise component intelligence directly within IntelliJ IDEA.

See Integration Details

Jenkins

Shift security and quality practices left by automatically sending alerts or failing Jenkins builds when application components are out of compliance with your SDLC security policies.

See Integration Details

JIRA

Auto-create Jira tickets when policy violations are triggered in Sonatype Lifecycle.

See Integration Details

Sonatype Has You Covered

Comprehensive Language and Package Support Across the Ecosystem

40 +
Languages and Packages Supported
Clojure Clojure
CoffeeScript CoffeeScript
F# F#
Gosu Gosu
Groovy Groovy
Kotlin Kotlin
ObjectiveC ObjectiveC
Scala Scala
Swift Swift
Scala.js Scala.js
Visual Basic Visual Basic
RPM/Yum Yum (RPM)