# Nexus IQ yum analysis not working

**URL:** <https://community.sonatype.com/t/nexus-iq-yum-analysis-not-working/9996>\
**Category:** Sonatype Lifecycle & Firewall\
**Created:** [January 23, 2023, 5:24pm UTC](https://community.sonatype.com/t/nexus-iq-yum-analysis-not-working/9996 "2023-01-23T17:24:49Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![ericth](https://avatars.discourse-cdn.com/v4/letter/e/ed8c4c/32.png) [@ericth](https://community.sonatype.com/u/ericth)\
**Post date:** [January 23, 2023, 5:24pm UTC](https://community.sonatype.com/t/nexus-iq-yum-analysis-not-working/9996/1 "2023-01-23T17:24:49Z")

</div>

Hello  
I followed the Nexus IQ documentation to scan RPM components:

> **[404 Page not found](https://help.sonatype.com/en/404-page.html)**

When my yum-packages.txt contains:

> git.x86\_64 2.27.0-1.el8 @ubi-8-appstream-rpms

The [latest critical git vulnerabilities](https://github.blog/2023-01-17-git-security-vulnerabilities-announced-2/) are not detected by Nexus IQ.

When my yum-packages.txt contains:

> git.x86\_64 1.8.2.3-1.el5 @ubi-8-appstream-rpms

This time the latest critical git vulnerabilities are detected by Nexus IQ.

I made the conclusion that Nexus IQ yum analysis is based on [ossindex.sonatype.org](http://ossindex.sonatype.org) to operate,  
which is a completely outdated repository, only 2 git versions are referenced:

[https://ossindex.sonatype.org/component/pkg:rpm/git](https://ossindex.sonatype.org/component/pkg:rpm/git)

Do you plan to do something?

Eric

---

<div class="post-metadata">

**Author:** ![mfrost](https://yyz1.discourse-cdn.com/flex047/user_avatar/community.sonatype.com/mfrost/32/1701_2.png) [@mfrost](https://community.sonatype.com/u/mfrost)\
**Post date:** [January 24, 2023, 5:31pm UTC](https://community.sonatype.com/t/nexus-iq-yum-analysis-not-working/9996/2 "2023-01-24T17:31:00Z")

</div>

Hi @ericth - thanks for your post! We only support RPMs from the EPEL repositories at this time.

I would suggest visiting the [Sonatype Ideas portal](https://ideas.sonatype.com) and submitting an idea - that you would like us to ingest RPMs from repositories other than the EPEL repositories.

You can also encourage others to vote for your idea and track its progress - someone from our team will reach out there if you submit an idea as well.