Sonatype Nexus Lifecycle Questions

Hi Everyone,

What do you like most about Sonatype Nexus Lifecycle?

Thanks for sharing your thoughts with the community!

Hi,

We all know it's really hard to get good pricing and cost information.

Please share what you can so you can help your peers.

Please share with the community what you think needs improvement with Sonatype Nexus Lifecycle.

What are its weaknesses? What would you like to see changed in a future version?

How do you or your organization use this solution?

Please share with us so that your peers can learn from your experiences.

Thank you!

If you were talking to someone whose organization is considering Sonatype Nexus Lifecycle, what would you say?

How would you rate it and why? Any other tips or advice?

Dear All, 

Can you suggest 2 or 3 products that could compete with:

1. Fortify WebInspect 

2. Fortify Static Code Analyzer

I need suggestions for similar products so I could compare for my consultant project. Thanks in advance for the advice.

Regards

What are the different types of tools that should be used together in DevSecOps?

What are the specific tools that you like to use when working on your DevSecOps pipeline? 

What is essential, and what is a nice-to-have? 

What are some best practices for reducing OSS vulnerabilities?

What are the main differences between Black Duck and Veracode for Software Composition Analysis (SCA)?