Download and Compatibility

View the Release Notes for a description of the latest features and improvements.  If you have not received a license key, please contact your Sales Executive directly, or send an email to sales@sonatype.com.

Download Our Latest Releases

Sonatype ApplicationLatest VersionDownload

Sonatype IQ Server & CLI

161

nexus-iq-server-latest.tar.gz (ASC, SHA1)

nexus-iq-server-latest.zip ( ASC , SHA1)

The command-line scanner (CLI) is included in the bundle.

Upgrading from version 151 and below to any version 152 and above can take substantially longer. This is due to the schema expansion introduced for enhanced product experience.

More information is available in the Integration space under Cloud Deployments.

CLI

161
PlatformLinkNotes
Cross-platform
(Java)
nexus-iq-cli-latest.jar (ASC, SHA1)Requires the Java Virtual Machine
Windows

nexus-iq-cli-1.161.0-01+630-windows.zip (ASC, SHA1)

Requires the Visual C++ Runtime. This is included in the zip, or it can be installed from Microsoft (direct link) in which case it will be kept updated by Windows Update.
Mac OSX

nexus-iq-cli-1.161.0-01+630-mac.pkg (ASC, SHA1)

Alternative install: Homebrew

Delivered as a Mac pkg installer, the executable will be installed in the /usr/local/bin directory.

Tested on:

  • M1 chip
  • Intel chip

Linux

nexus-iq-cli-1.161.0-01+630-unix.zip (ASC, SHA1)

Alternative install: Deb and RPM

Tested on:

  • Centos 7.1+
  • RHEL 7.3+
  • Debian 8+
  • Ubuntu 14.04+

Sonatype Repository Firewall


Please review our Sonatype Repository Firewall documentation

Sonatype Nexus Repository

3.0 or greaterPlease see Download Sonatype Nexus Repository

Sonatype Repository Firewall for Artifactory

2.4.5

nexus-iq-artifactory-plugin-2.4.5.zip (ASC, SHA1)

Updating from 1.* to 2.0 requires IQ 119 and data migration. Please see 1.x to 2.0 Migration in the help docs for more information.

CI Integrations



Maven

2.46.0This plugin is automatically downloaded when invoked.

Bamboo

2.32.0

nexus-iq-bamboo-plugin-2.32.0-01.obr (ASC, SHA1)

The Sonatype IQ for Bamboo plugin is available through the Atlassian Marketplace.

Requires IQ Server Version v70 and higher

Jenkins

3.x

Available to update through the Jenkins Update Center

Version 3.6x and higher requires IQ Server Version v69 and higher

Please see this page for installation notes and alternative methods: Sonatype Platform Plugin for Jenkins

Hudson/Jenkins 1

2.21.5

This plugin is deprecated and is no longer receiving updates. We suggest that you install the Jenkins 3.x plugin and migrate your jobs between plugins; however, note there is no automated process to migrate.

Please see [DEPRECATED] Sonatype IQ for Hudson/Jenkins 1.x

nexus-iq-jenkins-plugin-2.21.5-01.hpi (ASC, SHA1)

Azure DevOps

1.7.0Available to update through the Visual Studio Marketplace.

IDE Integrations



Eclipse

3.1.0

The Sonatype Lifecycle Plugin for Eclipse is available for download on the Eclipse marketplace.

Eclipse Plugin Zip: com.sonatype.clm.ide.eclipse.site-3.1.0.20230526-2126.zip (ASC, SHA1)

Eclipse Update Site: https://download.sonatype.com/clm/eclipse/releases

The update site above is not directly browsable, enter it into the list of update sites in Eclipse under "Help -> Preferences -> Install/Update -> Available Software Update Sites.

The plugin zip can be installed into Eclipse by using "Help -> Install New Software -> Add... -> Archive...".

IBM Rational Application Developer (RAD) is not tested but should work. Note that the plugin requires Eclipse 4.13 and greater, RAD versions based on Eclipse older than this might not work.

IDEA

4.9.0

Sonatype Lifecycle Plugin for IntelliJ IDEA is available for download on the JetBrains marketplace

Latest Sonatype Lifecycle Plugin for IDEA Zip: nexus-iq-idea-plugin-4.9.0-03.zip (ASC, SHA1)

Visual Studio

1.3.0The "Sonatype Lifecycle Plugin for Visual Studio" extension is installable from within Visual Studio using the Extensions and Updates dialog box. The extension may also be downloaded from the Visual Studio Marketplace.

Reporting Tools



Sonatype Lifecycle Plugin for Jira

1.9.0The Sonatype Lifecycle Plugin for Jira is available through the Atlassian Marketplace.

SonarQube


This plugin is deprecated and is no longer receiving updates. A historical version that is only compatible with the 6.x branch of SonarQube is available as sonatype-clm-sonarqube-1.2.0-02.jar (ASC, SHA1).

Compatibility of Sonatype Lifecycle Integrations

Sonatype encourages the use of an IQ Server release no older than six months. If you are using an older version of Sonatype IQ Server, or any of the associated integrations, and wish to upgrade to the latest version, please contact our Support Team.

Compatibility of IQ Server with versions of our associated integrations are:

Sonatype Nexus Repository 2 compatibility with IQ Server

Nexus Repository 2IQ ServerCompatibility
2.12 and higherAll versions

Sonatype Nexus Repository 3 compatibility with IQ Server

Nexus Repository 3IQ ServerCompatibility
3.30 and higher106 and higher

3.6 through 3.29.2*1.35 and higher

3.5**1.33 and higher


*Nexus Repository 3.8 is the first version that fully supports Repository Firewall with High Availability Clustering (HA-C).

**Nexus Repository 3.5 is the first version that has Repository Firewall properly supported for all repository formats (including NuGet). Previous versions have known issues and are not listed on this page.

Sonatype Lifecycle for Nexus Repository Pro

Sonatype Lifecycle for Nexus Repository Pro does not require the installation of any specialized components. However, the Lifecycle capabilities do require a user to have a modern browser.

For information on Sonatype Nexus Repository requirements please see either Nexus Repository 2 System Requirements or Nexus Repository 3 System Requirements.

Sonatype Lifecycle CLI

Use only Java 8 for versions before release 89. Starting with release 89, Java 11 is also supported.

The version of Java running the CLI does not affect the version of Java that can be used to compile a scanned Java application.

Sonatype Lifecycle for Bamboo

Sonatype Lifecycle for Bamboo VersionIQ Server VersionBamboo VersionJava Runtime
2.0 and higher70 and higher6.8 through 9.0JDK 8, JDK 11 (starting with Bamboo 8)
1.14 through 2.070 and higher

5.10 through 7.2

JDK 8
1.1369 and higher

5.10 through 7.2

JDK 8
1.9 through 1.12.1 50 and higher

5.10 through 7.2

JDK 8
1.81.45 and higher

5.10 through 7.2

JDK 8
1.1 through 1.7All versions

5.10 through 7.2

JDK 8

Sonatype Platform Plugin for Jenkins

Review the Sonatype Platform Plugin for Jenkins changelog before upgrading the plugin.

Jenkins Plugin VersionIQ Server VersionJenkinsJava Runtime
3.16.444.v52b_e5e2db_503 and higher144 and higher

2.303.3 (LTS) or higher

JDK 8, 11
3.6.20190722-122200.83d1447 through 3.15.438.vf87a_0dc4516669 and higher

2.249.1 (LTS) or higher

JDK 8, 11
3.3.20180830-142202.6bdf614 through 3.5.20190425-152158.c63841b50 and higher

2.249.1 (LTS) or higher

JDK 8, 11
3.0.20180425-130011.728733c through 3.3.20180801-112343.4970c8a47 and 48

2.249.1 (LTS) or higher

JDK 8, 11
1.1 through 3.0.20180214-134325.e13590026 - 46

2.249.1 (LTS) or higher

JDK 8

Required Jenkins plugins:

  • Pipeline: Step API 2.22 or newer
  • Credentials 2.3.14.1 or newer
  • Plain Credentials 1.3 or newer
  • Structs 1.20 or newer

For plugin 3.16.449.v50228c7ca_222 version  and higher:

  • Pipeline: API 2.41 or newer

Newer versions of the above plugins, if installed, may require newer versions of Jenkins, which indirectly will increase the minimum required Jenkins version for the Sonatype Platform Plugin.

Hudson/Jenkins 1 Plugin

This plugin is deprecated and is no longer receiving updates. We suggest that you install the Jenkins 3.x plugin and migrate your jobs between plugins; however, note there is no automated process to migrate.

IQ Azure DevOps Extension

IQ Azure DevOps Extension VersionIQ Server VersionSupported EnvironmentJava Runtime
1.2.0 and higher66 and higherAzure DevOps Services (hosted)
Azure DevOps Server 2019
JDK 8, JDK 11
1.0.0 through 1.1.066 and higherAzure DevOps Services (hosted)JDK 8, JDK 11

Optional Organization ID parameter

To use the optional organization ID parameter on plugin version 1.5.0 or higher, IQ Server 143 or higher is required

Sonatype Lifecycle for Eclipse

Sonatype Lifecycle for Eclipse VersionIQ Server VersionEclipse VersionM2e VersionJava Runtime
2.8 and higher66 and higher4.13 (2019-09) - 4.24 (2022-06)

1.13 through 1.18

JDK 8+

The Eclipse plugin will use the system browser. The recommended browsers are Chrome, Firefox, or Microsoft Edge. For Linux environment, the libwebkit that matches the Eclipse GTK version is required (e.g. libwebkitgtk-3.0-0).

Sonatype CLM for Maven Plugin 

Plugin VersionIQ Server VersionMaven VersionJava Runtime
2.32.0 and higher69 and higher3.2.3 through 3.9.1JDK 8+
2.13.0 through 2.31.069 and higher

2.1 through 3.6.3

JDK 8+
2.9.x through 2.12.150 and higher

2.1 through 3.6.3

JDK 7, JDK 8
2.8.145 and higher

2.1 through 3.6.3

JDK 7, JDK 8
2.3 through 2.8All versions

2.1 through 3.6.3

JDK 7, JDK 8

Java 16 or newer

Sonatype CLM for Maven requires Maven 3.3.1 or newer in order to run with Java 16 or newer.

On top of that, the following entry must be added to the .mvn/jvm.config file, located in the project's root folder. The .mvn/jvm.config file has to be created if none exists.

--add-opens java.base/java.util=ALL-UNNAMED

Optional Organization ID parameter

To use the optional organization ID parameter on plugin version 2.33.0 or higher, IQ Server 143 or higher is required

SonarQube Plugin compatibility with IQ Server

This plugin is deprecated and is no longer receiving updates.

Sonatype Lifecycle for IDEA

Plugin VersionDevelopment EnvironmentVersionIQ Server VersionJava Runtime
4.4 or laterIDEA Ultimate, IDEA Community, WebStorm,
PyCharm Professional, PyCharm Community
2022.1 or higher129 or higherJBRSDK 11, JBRSDK 17
4.2 - 4.3IDEA Ultimate, IDEA Community, WebStorm,
PyCharm Professional, PyCharm Community
2021.2 through 2021.3.x129 or higherJBRSDK 11
4.1IDEA Ultimate, IDEA Community, WebStorm,
PyCharm Professional, PyCharm Community
2020.3 through 2021.3.x

129 or higher

JBRSDK 11
4.0IDEA Ultimate, IDEA Community, WebStorm2020.3 through 2021.3.x

67 or higher

JBRSDK 11
3.xIDEA Ultimate, IDEA Community, WebStorm2020.2.x67 or higherOracle JDK 8, JBRSDK 8, JBRSDK 11
2.xIDEA Ultimate, IDEA Community2016.2 through 2020.1.x67 or higherOracle JDK 8, JBRSDK 8, JBRSDK 11
1.xIDEA Ultimate, IDEA Community14.1.x through 15.0.366 or higherOracle JDK 8, JBRSDK 8

Sonatype Lifecycle for Visual Studio

Plugin VersionIQ Server VersionVisual StudioMicrosoft .NET
1.0 and higher32 and higher

Community 2015-2019

Professional 2015-2019

Enterprise 2015-2019

4.5 or higher

Seeing Sonatype Recommended Versions for remediating a policy violation requires IQ Server Release 66 or higher.

Seeing the button to automatically migrate a component version requires IQ Server Release 67 or higher.

Firewall for Artifactory

Firewall for Artifactory Plugin VersionIQ Server VersionArtifactory Version
2.2 and higher

119 and higher

Tested on multi-node clusters

Tested on JFrog Artifactory Enterprise 7.2.6

Sonatype Lifecycle for Jira

Plugin VersionIQ Server VersionJira Version
1.x

67 and higher

98 and higher for Automated Workflow Transition

Compatible with Jira Server and Jira Data Center. For more details on the Jira Server versions supported please check the plugin's Atlassian Marketplace listing.

NOTE: To create notifications for Jira Cloud, see Configure Notifications through Jira Cloud.

Sonatype Lifecycle for SCM

Minimum Sonatype IQ Server versions:

Feature \ SCMAzure DevOpsBitbucket CloudBitbucket ServerGitHubGitLab
Automated  Commit FeedbackIQ 122IQ 90IQ 90IQ 67IQ 71
Automated Pull RequestsIQ 122IQ 90IQ 90IQ 79IQ 97
Pull Request CommentingIQ 122
IQ 95IQ 88IQ 98
Pull Request Line Commenting

IQ 95IQ 95IQ 99
Bitbucket Code InsightsN/A
IQ 95N/AN/A

Sonatype Lifecycle Fortify SSC Integration

Sonatype Lifecycle Fortify SSC IntegrationIQ Server VersionFortify Software Security Center
1.0 and higher

98 and higher

To see the complete list of supported versions, check the listing on the Microfocus Marketplace.