# \#best-practice **URL:** https://community.sonatype.com/tag/best-practice/117.md [Latest](https://community.sonatype.com/latest.md) · [Categories](https://community.sonatype.com/categories.md) · [Tags](https://community.sonatype.com/tags.md) --- ## [Repository Firewall Best Practices: Policy Compliant Component Selection](https://community.sonatype.com/t/repository-firewall-best-practices-policy-compliant-component-selection/12225)
**Author:** [@jzora](https://community.sonatype.com/u/jzora)\ **Replies:** 6\ **Last updated:** [September 24, 2024, 3:29pm UTC](https://community.sonatype.com/t/repository-firewall-best-practices-policy-compliant-component-selection/12225 "2024-09-24T15:29:25Z")
Protecting yourself from software supply chain attack with Sonatype Repository Firewall is a bit of a balancing act. Quarantining components protects you from risk, but it also creates some development friction. Quaranti… --- ## [A Blueprint for Success: Best Practices in Sonatype Learn](https://community.sonatype.com/t/a-blueprint-for-success-best-practices-in-sonatype-learn/12605)
**Author:** [@dwallace](https://community.sonatype.com/u/dwallace)\ **Replies:** 0\ **Last updated:** [May 21, 2024, 1:37pm UTC](https://community.sonatype.com/t/a-blueprint-for-success-best-practices-in-sonatype-learn/12605 "2024-05-21T13:37:49Z")
Hello, Learners! We are excited to share 13 new best practices lessons in Sonatype Learn! Our Customer Education team crafted these lessons to provide you with comprehensive insights and strategies to optimize your use … --- ## [Best Practice - Waivers for Environment Specific Vulnerabilities](https://community.sonatype.com/t/best-practice-waivers-for-environment-specific-vulnerabilities/958)
**Author:** [@mworthington](https://community.sonatype.com/u/mworthington)\ **Replies:** 1\ **Last updated:** [January 5, 2023, 11:42pm UTC](https://community.sonatype.com/t/best-practice-waivers-for-environment-specific-vulnerabilities/958 "2023-01-05T23:42:26Z")
One of the most common types of questions that we get asked is “Every version is vulnerable. What should I do?” In many cases this is cited as a reason for delaying the upgrade of a project dependency. Even when this si… --- ## [Join us for June Office Hours - Wednesday, June 22nd at 12pm EDT](https://community.sonatype.com/t/join-us-for-june-office-hours-wednesday-june-22nd-at-12pm-edt/8829)
**Author:** [@mfrost](https://community.sonatype.com/u/mfrost)\ **Replies:** 0\ **Last updated:** [June 15, 2022, 2:21pm UTC](https://community.sonatype.com/t/join-us-for-june-office-hours-wednesday-june-22nd-at-12pm-edt/8829 "2022-06-15T14:21:11Z")
Join us Wednesday, June 22nd at 12 p.m. EDT (9 a.m. PDT | 5 p.m. BST) for our monthly, customer-exclusive Office Hours. This month, we’ll be discussing the following topics: Best Practices: Nexus Firewall Advance… --- ## [February Office Hours: Let's talk about OSS Best Practices](https://community.sonatype.com/t/february-office-hours-lets-talk-about-oss-best-practices/8126)
**Author:** [@mfrost](https://community.sonatype.com/u/mfrost)\ **Replies:** 4\ **Last updated:** [April 12, 2022, 6:41pm UTC](https://community.sonatype.com/t/february-office-hours-lets-talk-about-oss-best-practices/8126 "2022-04-12T18:41:46Z")
Thanks to all who joined us for our January Office Hours call! As mentioned on the call, next month’s Office Hours will open a discussion to our customer community around OSS best practices. We ask that attendees consid… --- ## [Join us in 1 HOUR for February Office Hours - 10 a.m. EST](https://community.sonatype.com/t/join-us-in-1-hour-for-february-office-hours-10-a-m-est/8290)
**Author:** [@edeboer](https://community.sonatype.com/u/edeboer)\ **Replies:** 0\ **Last updated:** [February 23, 2022, 2:07pm UTC](https://community.sonatype.com/t/join-us-in-1-hour-for-february-office-hours-10-a-m-est/8290 "2022-02-23T14:07:57Z")
Join us today at 10 a.m EST (7 a.m PST | 3 p.m GMT)\*\*, for our monthly, customer-exclusive Office Hours. This is your opportunity to get your questions answered and connect with leaders from Product, Customer Success,… --- ## [TOMORROW: February Office Hours at 10 a.m. EST](https://community.sonatype.com/t/tomorrow-february-office-hours-at-10-a-m-est/8276)
**Author:** [@edeboer](https://community.sonatype.com/u/edeboer)\ **Replies:** 0\ **Last updated:** [February 22, 2022, 3:18pm UTC](https://community.sonatype.com/t/tomorrow-february-office-hours-at-10-a-m-est/8276 "2022-02-22T15:18:15Z")
Join us tomorrow, Wednesday, February 23rd at 10 a.m EST (7 a.m PST | 3 p.m GMT), for our monthly, customer-exclusive Office Hours. This is your opportunity to get your questions answered and connect with leaders from… --- ## [Join us for February Office Hours - Wednesday, February 23rd at 10am ET](https://community.sonatype.com/t/join-us-for-february-office-hours-wednesday-february-23rd-at-10am-et/8256)
**Author:** [@mfrost](https://community.sonatype.com/u/mfrost)\ **Replies:** 0\ **Last updated:** [February 16, 2022, 3:22pm UTC](https://community.sonatype.com/t/join-us-for-february-office-hours-wednesday-february-23rd-at-10am-et/8256 "2022-02-16T15:22:13Z")
Join us Wednesday, February 23rd at 10 a.m. EST (7 a.m. PST | 3 p.m. GMT) for our monthly, customer-exclusive Office Hours. This month, we’ll be discussing the following topics: Nexus Firewall: Anonymous Developer V… --- ## [NEW: Jump Start For Developers — Getting Started with the Nexus Platform](https://community.sonatype.com/t/new-jump-start-for-developers-getting-started-with-the-nexus-platform/8130)
**Author:** [@mfrost](https://community.sonatype.com/u/mfrost)\ **Replies:** 0\ **Last updated:** [January 26, 2022, 9:17pm UTC](https://community.sonatype.com/t/new-jump-start-for-developers-getting-started-with-the-nexus-platform/8130 "2022-01-26T21:17:03Z")
Do you think onboarding another product is “FUN?” Well, we hope to at least make it less painful for you. Check out the newest addition to Sonatype Learn that makes onboarding with the Nexus Platform a breeze—including … --- ## [How to indicate success or failure from the IQ CLI?](https://community.sonatype.com/t/how-to-indicate-success-or-failure-from-the-iq-cli/394)
**Author:** [@mworthington](https://community.sonatype.com/u/mworthington)\ **Replies:** 5\ **Last updated:** [April 30, 2021, 9:20am UTC](https://community.sonatype.com/t/how-to-indicate-success-or-failure-from-the-iq-cli/394 "2021-04-30T09:20:02Z")
Following command line exit code conventions, the IQ CLI java jar will return a code of 0 upon a successful scan and a code of 1 upon a “failed” scan. The meaning of a “failed” scan can be adjusted in a couple ways. T… --- ## [Nexus Repository Manager - Private Repositories and Anonymous User Permissions](https://community.sonatype.com/t/nexus-repository-manager-private-repositories-and-anonymous-user-permissions/4455)
**Author:** [@mworthington](https://community.sonatype.com/u/mworthington)\ **Replies:** 0\ **Last updated:** [June 18, 2020, 6:50pm UTC](https://community.sonatype.com/t/nexus-repository-manager-private-repositories-and-anonymous-user-permissions/4455 "2020-06-18T18:50:57Z")
I received this customer question today. When adding a private repository, how can I require authentication for that repository? There are two parts to the answer: Requiring Authentication Once authenticated, requi… --- ## [Integration API with Nexus Repository 3](https://community.sonatype.com/t/integration-api-with-nexus-repository-3/161)
**Author:** [@mworthington](https://community.sonatype.com/u/mworthington)\ **Replies:** 5\ **Last updated:** [May 19, 2020, 5:54pm UTC](https://community.sonatype.com/t/integration-api-with-nexus-repository-3/161 "2020-05-19T17:54:22Z")
Nexus Repository supports new repository formats such as Docker and Bower and introduces a fresh, clean user interface among other advantages. Adopting or upgrading repository manager often means that you need to update … --- ## [Best Practice - Enforce Downloading from Nexus Repository Manager and Nexus Firewall](https://community.sonatype.com/t/best-practice-enforce-downloading-from-nexus-repository-manager-and-nexus-firewall/3542)
**Author:** [@mworthington](https://community.sonatype.com/u/mworthington)\ **Replies:** 0\ **Last updated:** [February 20, 2020, 5:15pm UTC](https://community.sonatype.com/t/best-practice-enforce-downloading-from-nexus-repository-manager-and-nexus-firewall/3542 "2020-02-20T17:15:45Z")
A recent customer question highlighted a couple important points: Developers will unknowingly, or knowingly, end up working around any blockers to getting their job done. To all my friends managing Nexus Repository and… --- ## [Adding Roles to Users in IQ Server via REST API](https://community.sonatype.com/t/adding-roles-to-users-in-iq-server-via-rest-api/821)
**Author:** [@mworthington](https://community.sonatype.com/u/mworthington)\ **Replies:** 2\ **Last updated:** [July 25, 2019, 9:15pm UTC](https://community.sonatype.com/t/adding-roles-to-users-in-iq-server-via-rest-api/821 "2019-07-25T21:15:13Z")
I frequently get asked by our customers how to they can programmatically manage user permissions in IQ Server. You will first need to understand the Organization and Application 404 Page not found. Once you have a good … --- ## [Automation the Provisioning of Nexus RBAC Model - Content Selectors, Permissions, Roles, Users](https://community.sonatype.com/t/automation-the-provisioning-of-nexus-rbac-model-content-selectors-permissions-roles-users/778)
**Author:** [@mworthington](https://community.sonatype.com/u/mworthington)\ **Replies:** 1\ **Last updated:** [November 8, 2018, 2:53pm UTC](https://community.sonatype.com/t/automation-the-provisioning-of-nexus-rbac-model-content-selectors-permissions-roles-users/778 "2018-11-08T14:53:55Z")
Continuing the discussion from Advanced Use Cases for the Nexus Repository Manager API: Companies with many development teams often ask us how to automate the creation of the permission model inside of Nexus Repository … --- ## [How to retrieve a list of IQ Server roles and associated users?](https://community.sonatype.com/t/how-to-retrieve-a-list-of-iq-server-roles-and-associated-users/552)
**Author:** [@mworthington](https://community.sonatype.com/u/mworthington)\ **Replies:** 1\ **Last updated:** [September 19, 2018, 3:02pm UTC](https://community.sonatype.com/t/how-to-retrieve-a-list-of-iq-server-roles-and-associated-users/552 "2018-09-19T15:02:58Z")
Is there an API that allows me to retrieve a list of IQ Server roles and associated users for e.g. Auditing purposes? --- ## [Tech Resource - Best Practice - Configuring a Least-Privilege Firewall User](https://community.sonatype.com/t/tech-resource-best-practice-configuring-a-least-privilege-firewall-user/356)
**Author:** [@mworthington](https://community.sonatype.com/u/mworthington)\ **Replies:** 0\ **Last updated:** [August 9, 2018, 10:42pm UTC](https://community.sonatype.com/t/tech-resource-best-practice-configuring-a-least-privilege-firewall-user/356 "2018-08-09T22:42:31Z")
Problem Statement Given NXRM Firewall configuration using an “admin” user, all the applications are displayed in the CIP: 404 Page not found Sample: Solution Define a specific user (“nxrmfirewall” in the example bel… --- ## [Advanced Use Cases for the Nexus Repository Manager API](https://community.sonatype.com/t/advanced-use-cases-for-the-nexus-repository-manager-api/80)
**Author:** [@mworthington](https://community.sonatype.com/u/mworthington)\ **Replies:** 1\ **Last updated:** [June 6, 2018, 6:45pm UTC](https://community.sonatype.com/t/advanced-use-cases-for-the-nexus-repository-manager-api/80 "2018-06-06T18:45:21Z")
One of the most frequent area of questions related to Nexus Repository Manager is how to integrate with other tools via the API. Integrations API Nexus Repository Manager 2 only contained a formal REST API. This require… --- ## [Reusable Scripts with the Execute Script Scheduled Task](https://community.sonatype.com/t/reusable-scripts-with-the-execute-script-scheduled-task/82)
**Author:** [@mworthington](https://community.sonatype.com/u/mworthington)\ **Replies:** 0\ **Last updated:** [June 1, 2018, 10:33pm UTC](https://community.sonatype.com/t/reusable-scripts-with-the-execute-script-scheduled-task/82 "2018-06-01T22:33:01Z")
Continuing the discussion from Advanced Use Cases for the Nexus Repository Manager API: One of the lesser known scheduled tasks in Nexus Repository Manager 3 is the “Execute Script”. This utilizes the same API as the gr… --- ## [Which users are Nexus Repository Manager Admins?](https://community.sonatype.com/t/which-users-are-nexus-repository-manager-admins/81)
**Author:** [@mworthington](https://community.sonatype.com/u/mworthington)\ **Replies:** 0\ **Last updated:** [June 1, 2018, 10:29pm UTC](https://community.sonatype.com/t/which-users-are-nexus-repository-manager-admins/81 "2018-06-01T22:29:21Z")
Continuing the discussion from Advanced Use Cases for the Nexus Repository Manager API: An important piece of information for Nexus Administrators is understanding what users have access to which parts of the applicatio…