Sonatype Integrations

Our supported integrations cover a variety of systems, including CI Pipelines, IDEs, SCMs, ticketing, platforms, and more. For information about supported plugin versions, refer to the Integrations Status page.

Integrations are available for Lifecycle and Nexus Repository.

Lifecycle Integrations

Reduce open source risk early in your development process by integrating Lifecycle with the tools you use.

CI/CD Systems

When integrated with your Continuous Integration (CI) server, Sonatype Lifecycle allows you to run dynamic scans of your software components to perform a complete security and license analysis.

IDEs

Add Sonatype Lifecycle to your Integrated Developer Environment (IDE) as a plugin or extension to get immediate feedback that guides your component selection.

SCM Systems

Streamline your development workflow by integrating with Source Control Management (SCM) systems like GitHub, GitLab, and Bitbucket. Track changes, manage code conflicts, and maintain complete version histories for enhanced code management and security.

Learn more about SCM integrations

Issue Management Systems

Boost your project management by integrating with Jira. Streamline issue tracking and enhance collaboration by connecting your development workflows with real-time ticket updates.

Platforms

Optimize your development processes by integrating with leading platforms. Gain direct insights directly into ServiceNow and Fortify SSC to meet your organization's policies across your projects.

Supplemental tools

Expand the Sonatype platform with tools that deliver advanced vulnerability detection, automated policy enforcement for container applications, Lifecycle evaluations via CLI, and specialized templates and Docker images for major cloud platforms.