Sonatype Nexus Repository warns "1 Malware Component Found"

For all that suffer from this malware-notification:
I found out that it is (perhaps) possible to disable this, by adding the following lines to the /nexus-data/etc/nexus.properties file (in case of a docker-installation):

nexus.malware.risk.enabled=false
nexus.malware.risk.on.disk.enabled=false

WARNING: This just diables the malware-warning banner and DOES NOT FIX the malware components (if any).

Can anyone confirm that this removes the banner? According the source, this should be the feature-flag for this.

Hope that helps anyone, that searches a way to disable this warning.

Anyway, it is still a bit greedy to scan the packages and not informing about the exact found match (because if there is a correct number displayed, there must be a matching package).

Hope that helps anyone.

Best regards and have a great day y’all,
Chris

8 Likes