Download and Compatibility

Sonatype IQ Server identifies security vulnerabilities, license risks, and quality issues in your components, providing actionable insights and automated enforcement across your software development lifecycle (SDLC).

Sonatype IQ Server

nexus-iq-server-latest.tar.gz (ASC, SHA1)

nexus-iq-server-latest.zip(ASC,SHA1)

Requires Java 17.

Sonatype IQ Server with bundled JDK

MUSL Linux (x86-64) release 1.192.0-01 (MD5, SHA1, SHA256, SHA512)

Linux (AArch64) release 1.192.0-01 (MD5, SHA1, SHA256, SHA512)

Linux (x86-64) release 1.192.0-01 (MD5, SHA1, SHA256, SHA512)

Windows (x86-64) release 1.192.0-01 (MD5, SHA1, SHA256, SHA512)

Sonatype IQ Command Line Interface (CLI) is the multi-tool for performing a Lifecycle Analysis. Evaluations of your applications are either run manually or automatically using the CLI in many environments.

IQ CLI - Cross-platform (Java)

nexus-iq-cli-latest.jar (ASC, SHA1)

Requires the Java Virtual Machine.

IQ CLI with bundled JDK

The Linux CLI can be installed on distributions supporting Deb or RPM packages.

Alternatively, you can use Homebrew.

IQ CLI - Docker

Docker Hub

IQ CLI - Windows

Requires the Visual C++ Runtime. This is included in the zip, or it can be installed and maintained by Windows Update.

IQ CLI - Linux

IQ CLI - Mac OSX

This Mac OSX pkg installer places files in the /usr/local/bin directory and has been tested on both M1 and Intel chipsets.

Maven

This plugin is automatically downloaded when invoked through Maven

Release notes are available on the Sonatype CLM for Maven page.

Bamboo

Release notes are available on the Sonatype for Bamboo Data Center page.

Jenkins

Installation through the Jenkins UI

Installation through the Jenkins Plugin Manager

Release notes are available on the Sonatype Platform Plugin for Jenkins page.

Azure DevOps

Installation instructions and release notes are available on the Sonatype for Azure DevOps page.

GitLab CI

Configuration instructions and release notes are available on the Sonatype for GitLab CI page.

GitHub Actions

Usage instructions and release notes are available on the GitHub Actions page.

Eclipse

Eclipse Update Site:

https://download.sonatype.com/clm/eclipse/releases

This update site is not directly browsable. Copy the URL and paste it into the list of update sites in Eclipse under Help-> Preferences -> Install/Update -> Available Software Update Sites.

The plugin zip can be installed into Eclipse by using "Help -> Install New Software ->Add... -> Archive...".

Release notes are available on the IQ for Eclipse page.

IDEA

Release notes are available on the Sonatype for IDEA page.

VS Code

The "Sonatype for VS Code" extension is installable from within VS Code using the Extensions tool window.

Release notes are available on the Sonatype for VS Code page.

Visual Studio 2022

The "Sonatype Visual Studio Extension" is installable from within Visual Studio using the Extensions and Updates dialog box.

Release notes are available on the Sonatype for Visual Studio 2022 page.

Jira Data Center

Release notes are available on the Sonatype for Jira Data Center page.

Jira Cloud

Release notes are available on the Sonatype for Jira Cloud page.

Firewall for Artifactory

2.6.0

nexus-iq-artifactory-plugin-2.6.0.zip (ASC, SHA1).

Firewall for Artifactory

2.4.13

nexus-iq-artifactory-plugin-2.4.13.zip (ASC, SHA1).