# \#nexus-iq **URL:** https://community.sonatype.com/tag/nexus-iq/42.md [Latest](https://community.sonatype.com/latest.md) · [Categories](https://community.sonatype.com/categories.md) · [Tags](https://community.sonatype.com/tags.md) --- ## [Batch Deletion of expired waivers](https://community.sonatype.com/t/batch-deletion-of-expired-waivers/16437)
**Author:** [@martyn.angus1](https://community.sonatype.com/u/martyn.angus1)\ **Replies:** 1\ **Last updated:** [June 29, 2026, 4:08pm UTC](https://community.sonatype.com/t/batch-deletion-of-expired-waivers/16437 "2026-06-29T16:08:04Z")
i have a number of waivers that have expired and wondered if there were a way i could batch delete with waiver id’s. --- ## [how to use remote tcp socket instead of local unix socket for nexus iq container image scan for pulling neuvector image from private registry](https://community.sonatype.com/t/how-to-use-remote-tcp-socket-instead-of-local-unix-socket-for-nexus-iq-container-image-scan-for-pulling-neuvector-image-from-private-registry/16271)
**Author:** [@pepoga](https://community.sonatype.com/u/pepoga)\ **Replies:** 1\ **Last updated:** [April 21, 2026, 4:17pm UTC](https://community.sonatype.com/t/how-to-use-remote-tcp-socket-instead-of-local-unix-socket-for-nexus-iq-container-image-scan-for-pulling-neuvector-image-from-private-registry/16271 "2026-04-21T16:17:29Z")
how to use remote tcp socket instead of local unix socket for nexus iq container image scan for pulling neuvector image from private registry? Using jenkins plugin. getting the error docker pull privateregistry.com/neuv… --- ## [Bom scan does not generate a report](https://community.sonatype.com/t/bom-scan-does-not-generate-a-report/16097)
**Author:** [@Fabio\_Victoriano](https://community.sonatype.com/u/Fabio_Victoriano)\ **Replies:** 3\ **Last updated:** [March 11, 2026, 2:20pm UTC](https://community.sonatype.com/t/bom-scan-does-not-generate-a-report/16097 "2026-03-11T14:20:16Z")
Description: We have a centralized CI pipeline (Azure DevOps) setup that runs across our solutions. As part of the CI process, we perform a Sonatype scan using the NexusIqPipelineTask. The task uses, on the scanTargets … --- ## [How to configure the idle session timeout for Nexus IQ?](https://community.sonatype.com/t/how-to-configure-the-idle-session-timeout-for-nexus-iq/7693)
**Author:** [@pepoga](https://community.sonatype.com/u/pepoga)\ **Replies:** 2\ **Last updated:** [May 5, 2025, 2:23pm UTC](https://community.sonatype.com/t/how-to-configure-the-idle-session-timeout-for-nexus-iq/7693 "2025-05-05T14:23:41Z")
Is it possible to configure a custom time other than the default 30 minutes for Nexus IQ idle session timeout? If so, how? --- ## [IQ server not scanning docker proxy](https://community.sonatype.com/t/iq-server-not-scanning-docker-proxy/14678)
**Author:** [@nguyen\_phu](https://community.sonatype.com/u/nguyen_phu)\ **Replies:** 0\ **Last updated:** [March 25, 2025, 8:42am UTC](https://community.sonatype.com/t/iq-server-not-scanning-docker-proxy/14678 "2025-03-25T08:42:49Z")
I have setup 2 Nexus repository, a Go proxy and a docker proxy, whenever I get a Go module, the IQ server can scan that module on Go proxy, however for the docker proxy, nothing happen. Is this an error or I need to conf… --- ## [How can I view scan result of a docker image in a hosted repository](https://community.sonatype.com/t/how-can-i-view-scan-result-of-a-docker-image-in-a-hosted-repository/14654)
**Author:** [@nguyen\_phu](https://community.sonatype.com/u/nguyen_phu)\ **Replies:** 0\ **Last updated:** [March 20, 2025, 8:39am UTC](https://community.sonatype.com/t/how-can-i-view-scan-result-of-a-docker-image-in-a-hosted-repository/14654 "2025-03-20T08:39:07Z")
I have integrated my nexus repository with a nexus iq server and notice that if the docker image was pull from outside and in docker proxy repo, but if it is a hosted repo for uploaded self built docker image, I can only… --- ## [Phantom components found during IQ scans?](https://community.sonatype.com/t/phantom-components-found-during-iq-scans/14221)
**Author:** [@djb](https://community.sonatype.com/u/djb)\ **Replies:** 1\ **Last updated:** [February 13, 2025, 1:49pm UTC](https://community.sonatype.com/t/phantom-components-found-during-iq-scans/14221 "2025-02-13T13:49:45Z")
I have experienced numerous phantom components throughout my time scanning projects with IQ. Components that do not appear to exist within the project’s code, its dependencies, or sub-dependencies. Why is this, and what … --- ## [Dependency Tree for Python projects](https://community.sonatype.com/t/dependency-tree-for-python-projects/14161)
**Author:** [@peter.drienko](https://community.sonatype.com/u/peter.drienko)\ **Replies:** 1\ **Last updated:** [January 16, 2025, 4:09pm UTC](https://community.sonatype.com/t/dependency-tree-for-python-projects/14161 "2025-01-16T16:09:03Z")
Hi, Does Nexus IQ currently support Dependency Tree for Python projects? If not, when do you plan to implement it? Contrary to a simple requirements.txt file, poetry.lock contains dependency information about transient… --- ## [Several reports NexusIQ ADO in tab Nexus IQ Summary Report](https://community.sonatype.com/t/several-reports-nexusiq-ado-in-tab-nexus-iq-summary-report/14042)
**Author:** [@duboffik](https://community.sonatype.com/u/duboffik)\ **Replies:** 1\ **Last updated:** [December 19, 2024, 7:58pm UTC](https://community.sonatype.com/t/several-reports-nexusiq-ado-in-tab-nexus-iq-summary-report/14042 "2024-12-19T19:58:08Z")
Hello. In my ADO pipeline, we have several stages with NexusIqPipelineTask@1 for multiple repositories. Can I publish several Nexus IQ reports on the ‘Nexus IQ Summary Report’ tab? --- ## [Disable outbound connections to clm.sonatype.com](https://community.sonatype.com/t/disable-outbound-connections-to-clm-sonatype-com/13738)
**Author:** [@sebastian.karlsson](https://community.sonatype.com/u/sebastian.karlsson)\ **Replies:** 0\ **Last updated:** [October 28, 2024, 9:49am UTC](https://community.sonatype.com/t/disable-outbound-connections-to-clm-sonatype-com/13738 "2024-10-28T09:49:56Z")
I have a Nexus Repository OSS instance running on DMZ where only access to nuget.org is available (for nuget proxy repository). The problem is that Nexus tries to access clm.sonatype.com and constantly throws exceptions … --- ## [Nexus IQ CLI - GPG signature key is expired](https://community.sonatype.com/t/nexus-iq-cli-gpg-signature-key-is-expired/10515)
**Author:** [@pav.g](https://community.sonatype.com/u/pav.g)\ **Replies:** 7\ **Last updated:** [October 1, 2024, 1:53pm UTC](https://community.sonatype.com/t/nexus-iq-cli-gpg-signature-key-is-expired/10515 "2024-10-01T13:53:16Z")
Attempting to install nexus iq cli on ubuntu but facing the below error GPG error: https://repo.sonatype.com/repository/sonatype-apt-hosted stable InRelease: The following signatures were invalid: EXPKEYSIG 68930BE5F3F2… --- ## [How to setup SSL certs for Nexus IQ CLI Installed using linux binary](https://community.sonatype.com/t/how-to-setup-ssl-certs-for-nexus-iq-cli-installed-using-linux-binary/13519)
**Author:** [@hkaur6](https://community.sonatype.com/u/hkaur6)\ **Replies:** 1\ **Last updated:** [September 30, 2024, 5:48pm UTC](https://community.sonatype.com/t/how-to-setup-ssl-certs-for-nexus-iq-cli-installed-using-linux-binary/13519 "2024-09-30T17:48:26Z")
I am a beginner to sonatype products, currently exploring lifecycle scanning capabilities. While attempting to scan a code repo using nexus-iq-cli I run into SSL related errors. I am unable to find documentation for res… --- ## [Automated Pull Requests vs Policy Compliant Component Selection](https://community.sonatype.com/t/automated-pull-requests-vs-policy-compliant-component-selection/13361)
**Author:** [@jeff.wise](https://community.sonatype.com/u/jeff.wise)\ **Replies:** 1\ **Last updated:** [September 3, 2024, 10:40pm UTC](https://community.sonatype.com/t/automated-pull-requests-vs-policy-compliant-component-selection/13361 "2024-09-03T22:40:58Z")
When it comes to automating version updates to remediate vulnerabilities, Sonatype appears to offer two conflicting solutions: Automated Pull Requests Requires version pinning Policy Compliant Component Selection R… --- ## [Job for nexus.service failed because the control process exited with error code. See "systemctl status nexus.service" and "journalctl -xe" for details](https://community.sonatype.com/t/job-for-nexus-service-failed-because-the-control-process-exited-with-error-code-see-systemctl-status-nexus-service-and-journalctl-xe-for-details/13071)
**Author:** [@ruteeshraju](https://community.sonatype.com/u/ruteeshraju)\ **Replies:** 2\ **Last updated:** [August 21, 2024, 10:58am UTC](https://community.sonatype.com/t/job-for-nexus-service-failed-because-the-control-process-exited-with-error-code-see-systemctl-status-nexus-service-and-journalctl-xe-for-details/13071 "2024-08-21T10:58:56Z")
Job for nexus.service failed because the control process exited with error code. See “systemctl status nexus.service” and “journalctl -xe” for details. nexus.service - nexus service Loaded: loaded (/etc/systemd/system/… --- ## [I am running Sonatype Nexus Maven Repo 3.41.1-01 i want to upgrade to Nexus 3.69.x-xx](https://community.sonatype.com/t/i-am-running-sonatype-nexus-maven-repo-3-41-1-01-i-want-to-upgrade-to-nexus-3-69-x-xx/12752)
**Author:** [@muhammadzubairi](https://community.sonatype.com/u/muhammadzubairi)\ **Replies:** 1\ **Last updated:** [July 25, 2024, 3:40pm UTC](https://community.sonatype.com/t/i-am-running-sonatype-nexus-maven-repo-3-41-1-01-i-want-to-upgrade-to-nexus-3-69-x-xx/12752 "2024-07-25T15:40:47Z")
I am running Sonatype Nexus Maven Repo 3.41.1-01 i want to upgrade to Nexus 3.69.x-xx without loosing my data and settings. Current Directory /opt/nexus3 /opt/sonatype-work Can someone help me with details steps? --- ## [Update policies using API](https://community.sonatype.com/t/update-policies-using-api/7516)
**Author:** [@nikhil.nagesh.chodankar](https://community.sonatype.com/u/nikhil.nagesh.chodankar)\ **Replies:** 9\ **Last updated:** [June 11, 2024, 3:27pm UTC](https://community.sonatype.com/t/update-policies-using-api/7516 "2024-06-11T15:27:36Z")
I wanted to ask if we can update the policies of Nexus IQ Server using APIs? Our current version is 103. --- ## [I want to use a method to limit the ip that hosts with Nexus Repository 3 installed](https://community.sonatype.com/t/i-want-to-use-a-method-to-limit-the-ip-that-hosts-with-nexus-repository-3-installed/12541)
**Author:** [@jypluca1995](https://community.sonatype.com/u/jypluca1995)\ **Replies:** 0\ **Last updated:** [May 8, 2024, 12:40am UTC](https://community.sonatype.com/t/i-want-to-use-a-method-to-limit-the-ip-that-hosts-with-nexus-repository-3-installed/12541 "2024-05-08T00:40:01Z")
I want to use a method to limit the ip that hosts with Nexus Repository 3 installed described in the above document can access, how do I do it? and Is it possible to implement the method suggestion in the document by … --- ## [Is there any way to restrict access IP that hosts with Nexus Repository 3 can access?](https://community.sonatype.com/t/is-there-any-way-to-restrict-access-ip-that-hosts-with-nexus-repository-3-can-access/12415)
**Author:** [@jypluca1995](https://community.sonatype.com/u/jypluca1995)\ **Replies:** 3\ **Last updated:** [April 22, 2024, 12:41am UTC](https://community.sonatype.com/t/is-there-any-way-to-restrict-access-ip-that-hosts-with-nexus-repository-3-can-access/12415 "2024-04-22T00:41:20Z")
version : Sonatype Nexus Repository 3.60.0 summary when configured Sonatype Nexus Repository IQ Server If you do not have IP access control as shown in the document below, Port scanning using SSRF is possible. So I… --- ## [IQServer REST API for violation details](https://community.sonatype.com/t/iqserver-rest-api-for-violation-details/12343)
**Author:** [@samr](https://community.sonatype.com/u/samr)\ **Replies:** 1\ **Last updated:** [April 2, 2024, 1:57pm UTC](https://community.sonatype.com/t/iqserver-rest-api-for-violation-details/12343 "2024-04-02T13:57:07Z")
Reports API provides list of policy violations for a given application that includes policyId and a policyViolationId. I am unable to find an API that takes policyViolationId and respond with details of that specific vio… --- ## [Problem with Proprietary Components and npm packages](https://community.sonatype.com/t/problem-with-proprietary-components-and-npm-packages/12303)
**Author:** [@daniel.waller](https://community.sonatype.com/u/daniel.waller)\ **Replies:** 2\ **Last updated:** [March 25, 2024, 4:09pm UTC](https://community.sonatype.com/t/problem-with-proprietary-components-and-npm-packages/12303 "2024-03-25T16:09:55Z")
I have a frontend application that is pulling a couple of proprietary dependencies from our nexus repository. Sonatype Lifecycle will flag these dependencies for critical policy violations against “License-None” because… --- ## [Exploit and Zero-Day information for vulnerabilities](https://community.sonatype.com/t/exploit-and-zero-day-information-for-vulnerabilities/12177)
**Author:** [@m588](https://community.sonatype.com/u/m588)\ **Replies:** 2\ **Last updated:** [March 6, 2024, 6:56pm UTC](https://community.sonatype.com/t/exploit-and-zero-day-information-for-vulnerabilities/12177 "2024-03-06T18:56:35Z")
Hi, are there information in Nexus IQ of existing exploits or zero-day attacks for a vulnerability? I mean something like grapping information from Known Exploited Vulnerabilities Catalog | CISA. Greets --- ## [How to get the last scan date (not CM or re-evaluation)?](https://community.sonatype.com/t/how-to-get-the-last-scan-date-not-cm-or-re-evaluation/12136)
**Author:** [@georges.1.laurent](https://community.sonatype.com/u/georges.1.laurent)\ **Replies:** 0\ **Last updated:** [February 22, 2024, 10:31am UTC](https://community.sonatype.com/t/how-to-get-the-last-scan-date-not-cm-or-re-evaluation/12136 "2024-02-22T10:31:07Z")
Hello everyone, I am using IQ Server with Continuous Monitoring on the released applications so when I look at the reports, they are always dated less than 24 hours ago. But I need to know if the BOM is really the BOM … --- ## [Sonatype lifecycle tenant account](https://community.sonatype.com/t/sonatype-lifecycle-tenant-account/11924)
**Author:** [@iagbanyim](https://community.sonatype.com/u/iagbanyim)\ **Replies:** 1\ **Last updated:** [January 19, 2024, 4:46pm UTC](https://community.sonatype.com/t/sonatype-lifecycle-tenant-account/11924 "2024-01-19T16:46:30Z")
I have setup my organization account and the finger print of my trial license version has been verifed. Now, I am thinking of creating tenant account, and access Sonatype Lifecycle on the cloud by visiting tenant URL, w… --- ## [Component Labels REST API Request to Assign Labels Throws 405 Error](https://community.sonatype.com/t/component-labels-rest-api-request-to-assign-labels-throws-405-error/11877)
**Author:** [@kwagner](https://community.sonatype.com/u/kwagner)\ **Replies:** 1\ **Last updated:** [January 16, 2024, 3:42pm UTC](https://community.sonatype.com/t/component-labels-rest-api-request-to-assign-labels-throws-405-error/11877 "2024-01-16T15:42:25Z")
According to the documentation Component Labels REST API - v2 it is possible assign component lables to organizations and applications. This is documented as a POST HTTP request. Unfortunately it throws a 405 Error. Ca… --- ## [Internal Server Error: REST API v2 Source Control Evaluation](https://community.sonatype.com/t/internal-server-error-rest-api-v2-source-control-evaluation/11847)
**Author:** [@s63205785](https://community.sonatype.com/u/s63205785)\ **Replies:** 1\ **Last updated:** [January 4, 2024, 3:08pm UTC](https://community.sonatype.com/t/internal-server-error-rest-api-v2-source-control-evaluation/11847 "2024-01-04T15:08:20Z")
Hello, currently we are migrating from Jenkins to Github Actions. In Jenkins we used this plugin to evaluate our policies, which unfortunately doesn’t exist for Github Actions. Therefore we are using the Rest API But u… --- ## [Newbie here. My angular project got 0 violation](https://community.sonatype.com/t/newbie-here-my-angular-project-got-0-violation/11587)
**Author:** [@joehowistronits](https://community.sonatype.com/u/joehowistronits)\ **Replies:** 4\ **Last updated:** [November 16, 2023, 10:11am UTC](https://community.sonatype.com/t/newbie-here-my-angular-project-got-0-violation/11587 "2023-11-16T10:11:08Z")
It’s quite surprising that I received zero violations. While having zero violations is a positive outcome, it hasn’t convinced my boss :(. There is no ‘package-lock.json’ in my repository. What did I miss in my CI pro… --- ## [Rest API to get all the component labels](https://community.sonatype.com/t/rest-api-to-get-all-the-component-labels/11348)
**Author:** [@deepakhoonmrt92](https://community.sonatype.com/u/deepakhoonmrt92)\ **Replies:** 2\ **Last updated:** [October 30, 2023, 10:18pm UTC](https://community.sonatype.com/t/rest-api-to-get-all-the-component-labels/11348 "2023-10-30T22:18:29Z")
I have a requirement where I need to fetch all the component label of all applications in one API call. One API is there in documentation but with that one you need to provide application id. I have hundreds of applicati… --- ## [How to control publishing file to nexus 2](https://community.sonatype.com/t/how-to-control-publishing-file-to-nexus-2/11512)
**Author:** [@Josh](https://community.sonatype.com/u/Josh)\ **Replies:** 1\ **Last updated:** [October 30, 2023, 4:32pm UTC](https://community.sonatype.com/t/how-to-control-publishing-file-to-nexus-2/11512 "2023-10-30T16:32:29Z")
Hi, right now I’m trying to publish a artifact to nexus 2, I was able to do that but at the donwload section it showing we a lot of check-sum file (sha256, sha512) which I didn’t need can we some home hide them ? I want… --- ## [NexusIQ Unable to Scan SBOM](https://community.sonatype.com/t/nexusiq-unable-to-scan-sbom/11489)
**Author:** [@stervioo](https://community.sonatype.com/u/stervioo)\ **Replies:** 1\ **Last updated:** [October 26, 2023, 6:49pm UTC](https://community.sonatype.com/t/nexusiq-unable-to-scan-sbom/11489 "2023-10-26T18:49:08Z")
Hello, We’ve been using nexus iq in our pipelines to read an SBOM generated via Cyclonedx to create reports for vulnerabilities. It seems that the newer Sonatype IQ server release (168) has broken our SBOM scanning. We’… --- ## [Firewall Best Practices: Quarantine for Copyleft Licenses](https://community.sonatype.com/t/firewall-best-practices-quarantine-for-copyleft-licenses/11328)
**Author:** [@jzora](https://community.sonatype.com/u/jzora)\ **Replies:** 4\ **Last updated:** [October 5, 2023, 6:49pm UTC](https://community.sonatype.com/t/firewall-best-practices-quarantine-for-copyleft-licenses/11328 "2023-10-05T18:49:48Z")
Quarantine for Copyleft Licenses Have you rolled out quarantine to all your repositories? I’m always eager to learn more about what you’re blocking and why you’re blocking it – especially for apps that won’t ever be dis… [Next page](https://community.sonatype.com/tag/nexus-iq/42.md?match_all_tags=true&page=1&tags%5B%5D=nexus-iq)