Skip to content

docs(connectors): Sonatype IQ setup#15268

Open
devGregA wants to merge 1 commit into
DefectDojo:bugfixfrom
devGregA:sc-13712_sonatype_iq_docs
Open

docs(connectors): Sonatype IQ setup#15268
devGregA wants to merge 1 commit into
DefectDojo:bugfixfrom
devGregA:sc-13712_sonatype_iq_docs

Conversation

@devGregA

Copy link
Copy Markdown
Contributor

What

Adds a Sonatype IQ (Nexus Lifecycle) section to the Connectors tool reference, mirroring the existing connector entries (Prerequisites + Connector Mappings).

Pairs with:

  • Connector: DefectDojo-Inc/connectors#712
  • DD Pro registration: DefectDojo-Inc/dojo-pro#1905
  • Story: sc-13712

Section contents

  • Prerequisites — a Sonatype IQ account with the View IQ Elements permission; user-token auth (My Profile → User Token); works with self-hosted IQ Server and Sonatype-hosted (SaaS) instances.
  • Connector Mappings — Location (on-prem https://iq.example.com or SaaS https://<tenant>.sonatype.app/platform), Username, User Token, optional Stage (build default), optional Minimum Severity.
  • Notes that the connector is account-wide (a Record per application, auto-mapped) and that CVE / CWE / CVSS vector / PURL are carried onto findings where available.

Single-section addition, placed alphabetically after Snyk.

Add a Sonatype IQ (Nexus Lifecycle) section to the connectors tool
reference: prerequisites (View IQ Elements permission, user token,
on-prem/SaaS base URLs) and connector mappings (Location, Username,
User Token, Stage, Minimum Severity). Pairs with connector
DefectDojo-Inc/connectors#712 and DD Pro registration
DefectDojo-Inc/dojo-pro#1905.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants