Sonatype IQ Server 202 - 202.1 Release Notes

The Sonatype Container Scanner is now the default method for container scanning, replacing the NeuVector-based scanner. This update ensures that organizations benefit from improved detection accuracy powered by Sonatype’s proprietary vulnerability intelligence, along with a more unified security posture across all artifact types. The Sonatype Container Scanner also expands support for CI/CD integrations, enabling broader coverage across modern build and automation workflows while delivering improved performance and scalability for high-volume scanning environments.

Organizations currently using the default scanner will transition automatically, while those with an explicit NeuVector configuration can continue using it temporarily during the migration period. Review your container scanning configurations and CI integrations to ensure compatibility with the Sonatype Container Scanner, and refer to the Sonatype Container Security help documentation for full details.

Sonatype IQ now prioritizes Sonatype vulnerability intelligence during container analysis, ensuring consistent results across container scans and CLI evaluations. External data sources are used only as a fallback when Sonatype data is unavailable, which improves the reliability and alignment of vulnerability findings across analysis methods. This change helps teams make more confident security decisions by reducing discrepancies between scanning tools and workflows.

Sonatype IQ now grants the Access Audit Log permission to the built-in System Administrator role by default, removing the need for manual role configuration. Previously, administrators had to create custom roles to view audit logs, which added unnecessary setup overhead during onboarding and daily operations. With this update, administrators can immediately access audit data to support troubleshooting, monitoring, and operational visibility.

Note that this update applies automatically to both new and existing installations. System Administrator users gain audit log access upon upgrade, which could impact environments where access to audit logs was previously restricted.

The new Best Practices Enterprise Reporting dashboard provides a centralized view of how your organization adopts key features, integrations, and scanning workflows. This dashboard highlights Lifecycle capability enablement, CI/CD and SCM integration coverage, and scan activity across applications and stages, helping teams quickly identify gaps and improve consistency across DevSecOps practices.

With daily data refreshes and flexible filtering options, teams can analyze adoption trends, validate onboarding progress, and ensure critical capabilities such as Golden PRs and automated configurations are in place. This dashboard helps organization leaders better understand and optimize their security posture by surfacing actionable insights into feature usage and scan coverage. Teams can evaluate whether applications are properly integrated, confirm that scanning occurs across all relevant stages, and identify areas where Lifecycle capabilities are underutilized.

Sonatype Repository Firewall now has an Enterprise Reporting section that provides centralized dashboards to help organizations understand repository risk exposure, malware protection coverage, and trends affecting their software supply chain security posture.

The first Firewall Enterprise Reporting dashboard available is the Firewall Malware Insights dashboard. This dashboard offers enterprise-wide visibility into Firewall quarantine actions, policy violations, and component risk across your organization.

The Firewall Malware Insights dashboard enables security and engineering teams to analyze malware trends, severity levels, attack vectors, and quarantine activity to better understand and strengthen software supply chain protection.