Description: We have a centralized CI pipeline (Azure DevOps) setup that runs across our solutions. As part of the CI process, we perform a Sonatype scan using the NexusIqPipelineTask. The task uses, on the scanTargets property, the path for the SBOM file that is produced earlier during the process…

Afaik, this is not supported via the nexus-iq-cli yet, you need to call the API directly: https://help.sonatype.com/en/third-party-scan-rest-api.html

Hi, Fabio! Since you have Lifecycle, you’re a Sonatype customer, which means you’re entitled to support from our Support team. An empty report is definitely something they can help you with; if you haven’t resolved the issue yet, I’d suggest opening a support ticket.

Bom scan does not generate a report

Sonatype Lifecycle & Firewall

Fabio_Victoriano (Fabio Victoriano) March 11, 2026, 2:20pm 4

Thanks both, this has since been solved by using the latest version of the nexus task

Topic		Replies	Views
NexusIQ Unable to Scan SBOM Sonatype Lifecycle & Firewall nexus-iq , sbom	1	999	October 26, 2023
Nexus IQ CLI 167 \| CycloneDX JSON null version is not supported Sonatype Lifecycle & Firewall nexus-iq	0	609	September 20, 2023
NexusIQ scan for Android Sonatype Lifecycle & Firewall nexus-iq	3	4623	November 10, 2022
Package.json scan in Nexus IQ Sonatype Lifecycle & Firewall	0	100	March 3, 2025
Updated Data Insights Available in Nexus Lifecycle Sonatype Lifecycle & Firewall data , nexus-iq , labs	0	764	April 11, 2023

Bom scan does not generate a report

Related topics