# Sonartype Nexus Repository Manager - Vulnerability Scanner option

**URL:** <https://community.sonatype.com/t/sonartype-nexus-repository-manager-vulnerability-scanner-option/8858>\
**Category:** Sonatype Nexus Repository\
**Tags:** help, nexus-repository, vulnerabilities\
**Created:** [June 22, 2022, 7:01am UTC](https://community.sonatype.com/t/sonartype-nexus-repository-manager-vulnerability-scanner-option/8858 "2022-06-22T07:01:53Z")\
**Posts on this page:** 1\
**Showing post:** 1

<div class="post-metadata">

**Author:** ![prasad.cloud.user](https://avatars.discourse-cdn.com/v4/letter/p/ba8739/32.png) [@prasad.cloud.user](https://community.sonatype.com/u/prasad.cloud.user)\
**Post date:** [June 22, 2022, 7:01am UTC](https://community.sonatype.com/t/sonartype-nexus-repository-manager-vulnerability-scanner-option/8858/1 "2022-06-22T07:01:53Z")

</div>

Hi Team,

We are using Sonatype Nexus Repository Manager of Version **OSS 3.30.0-01** and we are looking for an option to scan the packages being downloaded from the repositories whenever team perform build on their application repos.

Teams should be able to build their application repos only when the package being downloaded have zero vulnerabilities. Is there anything at the nexus side that performs the scanning of the packages and maintain the scanned results and whenever app team request those packages have vulnerabilities and should fail their build immediately saying packages have vulnerabilities.

We are looking for Open source for this kind of feature. please let me know if there is an such option available with nexus.

Thanks,  
Prasad.

---

_[View the full topic](https://community.sonatype.com/t/sonartype-nexus-repository-manager-vulnerability-scanner-option/8858)._
