Download and Compatibility
View the Release Notes for Sonatype IQ Server for a description of the latest features and improvements.
IQ and IQ CLI version 179 were the last to support Java 8 and 11, and are now in Extended Maintenance as defined in our Sunsetting documentation. Upgrade to Java 17 before upgrading to version 180+.
Beginning with release 186, IQ CLI is a standalone product and will no longer be included in the IQ Server bundle.
Sonatype IQ Server
Latest version: | Sonatype IQ Server identifies security vulnerabilities, license risks, and quality issues in your components, providing actionable insights and automated enforcement across your software development lifecycle (SDLC). |
Application | Download Links |
---|---|
Sonatype IQ Server | nexus-iq-server-latest.tar.gz (ASC, SHA1) nexus-iq-server-latest.zip(ASC,SHA1) Requires Java 17. |
Sonatype IQ Server with bundled JDK | MUSL Linux (x86-64) release 1.186.0-01 (MD5, SHA1, SHA256, SHA512) Linux (AArch64) release 1.186.0-01 (MD5, SHA1, SHA256, SHA512) Linux (x86-64) release 1.186.0-01 (MD5, SHA1, SHA256, SHA512) Windows (x86-64) release 1.186.0-01 (MD5, SHA1, SHA256, SHA512) |
Sonatype IQ CLI
Latest version: | Sonatype IQ Command Line Interface (CLI) is the multi-tool for performing a Lifecycle Analysis. Evaluations of your applications are either run manually or automatically using the CLI in many environments. |
Application | Download Links |
---|---|
IQ CLI - Cross-platform (Java) | nexus-iq-cli-latest.jar (ASC, SHA1) Requires the Java Virtual Machine. |
IQ CLI with bundled JDK | |
IQ CLI - Docker | |
IQ CLI - Windows | Requires the Visual C++ Runtime. This is included in the zip, or it can be installed and maintained by Windows Update. |
IQ CLI - Linux | The Linux CLI can be installed on distributions supporting Deb or RPM packages. Tested on Centos 7.1+, RHEL 7.3+, Debian 8+, Ubuntu 14.04+. |
IQ CLI - Mac OSX | This Mac OSX pkg installer places files in the Alternatively, you can use Homebrew. Warning The Mac OSX CLI has been sunset and will receive only critical bug and security fixes until June 10, 2025. For the latest features and full support, switch to the cross-platform IQ CLI with bundled JDK, available above. |
CI Integrations
Integration | Version | Download links |
---|---|---|
Maven | This plugin is automatically downloaded when invoked through Maven Release notes are available on the Sonatype CLM for Maven page. | |
Bamboo | Release notes are available on the Sonatype for Bamboo Data Center page. | |
Jenkins | Installation through the Jenkins UI Installation through the Jenkins Plugin Manager Release notes are available on the Sonatype Platform Plugin for Jenkins page. | |
Azure DevOps | Installation instructions and release notes are available on the Sonatype for Azure DevOps page. | |
GitLab CI | Configuration instructions and release notes are available on the Sonatype for GitLab CI page. | |
GitHub Actions | Usage instructions and release notes are available on the GitHub Actions page. |
IDE Integrations
Integration | Version | Download Links |
---|---|---|
Eclipse | Eclipse Update Site: https://download.sonatype.com/clm/eclipse/releases This update site is not directly browsable. Copy the URL and paste it into the list of update sites in Eclipse under Help-> Preferences -> Install/Update -> Available Software Update Sites. The plugin zip can be installed into Eclipse by using "Help -> Install New Software ->Add... -> Archive...".
Release notes are available on the IQ for Eclipse page. | |
IDEA | Release notes are available on the Sonatype for IDEA page. | |
VS Code | The "Sonatype for VS Code" extension is installable from within VS Code using the Extensions tool window. Release notes are available on the Sonatype for VS Code page. | |
Visual Studio 2022 | The "Sonatype Visual Studio Extension" is installable from within Visual Studio using the Extensions and Updates dialog box. Release notes are available on the Sonatype for Visual Studio 2022 page. |
Reporting Integrations
Integration | Version | More Information |
---|---|---|
Jira Data Center | Release notes are available on the Sonatype for Jira Data Center page. | |
Jira Cloud | Release notes are available on the Sonatype for Jira Cloud page. |
Sonatype Repository Firewall for Artifactory
Integration | Version | Download Link |
---|---|---|
Firewall for Artifactory | 2.14.13 | nexus-iq-artifactory-plugin-2.4.13.zip (ASC, SHA1). Release notes are available on the Firewall for Artifactory Release Notes page. |
Compatibility with Integrations
Sonatype encourages using an IQ Server release no older than six months. Contact the Support Team for assistance updating older versions of IQ Server or any associated integration.
Compatibility information for specific Sonatype integrations can be found on their respective pages.
Sonatype Nexus Repository 3 compatibility with IQ Server
Review the Repository Firewall documentation for details on feature compatibility between the IQ server and the Nexus Repository.
Sonatype Lifecycle for Nexus Repository Pro
Sonatype Lifecycle for Nexus Repository Pro does not require the installation of any specialized components. We recommend staying up to date on the latest version of both products.
Firewall for Artifactory
Plugin Version | IQ Server Version | Artifactory Version |
---|---|---|
2.2 and higher | 119 and higher Tested on multi-node clusters | Tested on JFrog Artifactory Enterprise 7.2.6 |
1.* to 2.0 | Updating requires IQ 119 and data migration |
Sonatype Lifecycle for SCM
Feature \ SCM | Azure DevOps | Bitbucket Cloud | Bitbucket Server | GitHub | GitLab |
---|---|---|---|---|---|
Automated Commit Feedback | IQ 122 | IQ 90 | IQ 90 | IQ 67 | IQ 71 |
Automated Pull Requests | IQ 122 | IQ 90 | IQ 90 | IQ 79 | IQ 97 |
Pull Request Commenting | IQ 122 | IQ 95 | IQ 88 | IQ 98 | |
Pull Request Line Commenting | IQ 95 | IQ 95 | IQ 99 | ||
Bitbucket Code Insights | N/A | IQ 95 | N/A | N/A |