Software Supply Chain Management
Software supply chain management is crucial to the successful building and running of secure software applications. Each of the following lessons provides 5-minute articles to help you learn more.
Archives: Courses
InnerSource Insight in Nexus Lifecycle
Overview This course will demonstrate how to identify and manage the transitive dependencies brought in from your own InnerSource components – which are components that are internally developed and shared with your other internal projects. Course Goals In this course, we’ll explore a new feature in Nexus Lifecycle, called InnerSource Insight. This feature enables you …
Securing Your Code With Sonatype Lift
Overview Sonatype Lift is a code analysis platform built just for you! Lift analyzes the code you write. It helps you find and fix your most elusive bugs so you can spend time writing great code, not debugging it. Lift looks for a broad range of performance, security, and reliability errors in the code you write and …
Five Ways to Improve Your Code Quality
Overview While code is measured on how well it solves a problem for an end user, your code also needs to be measured on quality, which goes beyond features. Code quality refers to the non-functional requirements of code, and code that is free from deficiencies. Course Goals What is code quality? In this course, you’ll learn what it is, …
Infrastructure as Code Pack
Check out this feature-specific course to learn how to use Nexus Lifecycle’s add-on Infrastructure as Code Pack to secure what you build and where you run it. Goals This course describes the benefits of using the Infrastructure as Code (IaC) Pack add-on to Nexus Lifecycle. You’ll learn “What’s In It for the Organization” and “What’s …
Advanced Development Pack
Welcome! The Advanced Development Pack (ADP) is putting control back in development teams’ hands, helping them engage in proactive dependency management practices without losing the momentum of agile development. Watch the brief video below to learn more about ADP before continuing on to the deeper dive of the course content. Objectives By the end of …
Dynamic Developers: Becoming the Strongest Link in Your Supply Chain
The role of a software developer is ever-changing. Dependency management is evolving. And, you are tasked with writing code, security, and code quality. Managing all of this means that your role has become more complex. It is critical that you and your development teams have the tools you need to automate key processes. Automation boosts …
Dynamic Developers: Becoming the Strongest Link in Your Supply Chain Read More »
Protected: Sonatype Partner Certification
There is no excerpt because this is a protected post.
Nexus Lifecycle – Champion Workshop Prep
Thanks for signing up to attend the Sonatype Customer Success – Champion Workshop! (What’s Sonatype Customer Success?)Set yourself up for success by familiarizing yourself with the resources we’ve compiled here. A few minutes invested now will certainly pay off when your scheduled workshop kicks off. Ready to get started? Review the workshop prep material at …
Repository Management Basics
Objectives This course is designed to provide new customers with the first steps towards optimizing their Nexus Repository Manager configuration. Specifically, it provides critical, high-level theory, best practice, and practical application related to understanding specific concepts and terminology related to Nexus Repository Manager. Prerequisites Before beginning this module, you should be familiar with the following …
Lifecycle Workshop To-Do’s
Use this quick start guide to perform a few tasks when attending an IQ Server workshop, or after the completing the prerequisite courses. You’ll learn more about managing the open source components used in your applications by implementing IQ Server. Tasks and Exercises Task 1: Installing Nexus IQ Server Task 2: Onboarding and Scanning an …
Introduction to DevSecOps
Objectives This course will help familiarize you with the term DevSecOps, help you understand how it applies to software development, and demonstrate how DevSecOps benefits your organization. Define DevSecOps, an extension of DevOps, which includes “pushing quality closer to the source” and “shifting security left” in the software development lifecycle (SDLC). Explain why DevSecOps is …
First Time Installation and Setup
You can use this pilot setup and configuration scenario as a way to understand how each repository interacts with one another. In addition, use the learnings in this course to onboard new teams in your Nexus ecosystem. Objectives At the end of this course, you will be able to: Download, unpack, and run NXRM 3 …
Open Source Software Licenses – What You Need To Know
Check out this course to learn more about how to: Increase your awareness of OSS licensing. Explain why licenses are important to you when using Open Source Software. Identify some of the risks if you are unaware of OSS license requirements. Explain how Sonatype’s Nexus Lifecycle can help you. Prerequisites There are no prerequisites for …
Open Source Software Licenses – What You Need To Know Read More »
Using Nexus Lifecycle in Your IDE
What’s the expectation for today’s Developers? Quickly and independently develop, test, and deploy code into production – safely and securely – for you and your team.Doing the security part up front rather than wait until the end of the process where code has already been moved to production. How do you accomplish that? Use a …
Component Remediation
Objectives This course will help you identify various workflows to remediate vulnerable components in your applications as identified by Nexus Lifecycle. Prerequisites Intro to Lifecycle Organization Policies in Lifecycle Using Nexus Lifecycle in Your IDE Target Audience The target audience for this course are developers, software engineers, and anyone who wants to learn more about …
Organization Policies in Lifecycle
Objectives By the end of this course, you will be able to: Differentiate between four main types of policies in Nexus Lifecycle. Interpret each element of a policy. Describe the sections of the Application Composition Report. Define the sections of the Summary tab. Describe the data in the Policy Violations tab. Prerequisites IQ-100 Intro …