Summary Within the next month, you will notice an update to your PDF reporting generated in Nexus Lifecycle. We’ve updated the report’s look and feel, as well as consolidated the report from seven to four sections to better align with IQ Server’s focus on policy-based updates. The four new section…

The new report format has two differences that are problematic for our usage: The list of Vulnerabilities includes vulnerabilities in components whose “match state” is “similar.” The Security Issues in the previous format did not include these. The list of Components does not include the “mat…

Hi Mike, Thank you for reaching out. The list of Vulnerabilities includes vulnerabilities in components whose “match state” is “similar.” The Security Issues in the previous format did not include these. I have just checked the old report mechanism and I see that the SEcurity Issues list would…

Hi Mark, This is not what I’m seeing, but it could just be a difference in what is detected as “similar.” In the older report, it only flags one “similar” library (which I don’t use). The newer one flags two such libraries (again, which I don’t use). One of them is the same as the previous one, …

Hi Mike, I think what might help your use case is to claim the component. If the similar matching is finding an incorrect match you can claim this component, see The Component Information Panel Once you have claimed the component the vulnerabilities associated with the similar match will no longer…

Hi Mark, We are going to give that “claim” option a try and see what happens. It sounds like it may be exactly what we’re looking for. I’ll let you know how it goes and if it doesn’t fix our issue, I will take you up on that discussion on understanding the similar algorithm. Thanks, Mike

Claiming the misidentified libraries as our own worked great! Our BOM and list of vulnerabilities now properly reflects our actual components.

A New Way to View PDF Reports in Nexus Lifecycle

Sonatype Lifecycle & Firewall

mdodgson (Mark Dodgson) April 28, 2020, 4:30pm 8

@mtc3b Im glad to hear it. Thank you for getting back to me.

Topic		Replies	Views
Policy-Centric Application Report Feedback and Discussion Sonatype Lifecycle & Firewall	9	2331	July 5, 2019
NEW in Nexus Lifecycle: Policy Violations Page Sonatype Lifecycle & Firewall	0	1320	June 18, 2020
Your Nexus Lifecycle Year In Review Sonatype Lifecycle & Firewall nexus-iq	0	1306	December 20, 2022
Updated Data Insights Available in Nexus Lifecycle Sonatype Lifecycle & Firewall data , nexus-iq , labs	0	758	April 11, 2023
Violations details Sonatype Lifecycle & Firewall nexus-iq	1	657	September 20, 2023

A New Way to View PDF Reports in Nexus Lifecycle

Related topics