{"id":31836271,"url":"https://github.com/lfreleng-actions/sonatype-lifecycle-scan-action","last_synced_at":"2026-02-16T20:04:15.962Z","repository":{"id":298470739,"uuid":"1000071270","full_name":"lfreleng-actions/sonatype-lifecycle-scan-action","owner":"lfreleng-actions","description":"Performs a Sonatype Lifecycle security scan/audit of a repository","archived":false,"fork":false,"pushed_at":"2025-10-08T12:12:44.000Z","size":121,"stargazers_count":0,"open_issues_count":0,"forks_count":1,"subscribers_count":0,"default_branch":"main","last_synced_at":"2025-10-08T14:24:33.133Z","etag":null,"topics":["security","security-scan","sonatype"],"latest_commit_sha":null,"homepage":"","language":null,"has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/lfreleng-actions.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2025-06-11T08:14:49.000Z","updated_at":"2025-10-08T12:12:48.000Z","dependencies_parsed_at":"2025-07-28T20:17:09.521Z","dependency_job_id":"dce1cb68-af1f-455b-80c5-ad363e697704","html_url":"https://github.com/lfreleng-actions/sonatype-lifecycle-scan-action","commit_stats":null,"previous_names":["lfreleng-actions/sonatype-lifecycle-scan-action"],"tags_count":3,"template":false,"template_full_name":"lfreleng-actions/actions-template","purl":"pkg:github/lfreleng-actions/sonatype-lifecycle-scan-action","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lfreleng-actions%2Fsonatype-lifecycle-scan-action","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lfreleng-actions%2Fsonatype-lifecycle-scan-action/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lfreleng-actions%2Fsonatype-lifecycle-scan-action/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lfreleng-actions%2Fsonatype-lifecycle-scan-action/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/lfreleng-actions","download_url":"https://codeload.github.com/lfreleng-actions/sonatype-lifecycle-scan-action/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/lfreleng-actions%2Fsonatype-lifecycle-scan-action/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":279009766,"owners_count":26084647,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-10-11T02:00:06.511Z","response_time":55,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["security","security-scan","sonatype"],"created_at":"2025-10-12T01:28:57.912Z","updated_at":"2025-10-12T01:28:58.985Z","avatar_url":"https://github.com/lfreleng-actions.png","language":null,"funding_links":[],"categories":[],"sub_categories":[],"readme":"\u003c!--\nSPDX-License-Identifier: Apache-2.0\nSPDX-FileCopyrightText: 2025 The Linux Foundation\n--\u003e\n\n# 🔍 Sonatype Lifecycle Scan\n\nRuns a Sonatype Lifecycle (Nexus IQ) scan.\n\n## sonatype-lifecycle-scan-action\n\n## Usage Example\n\n\u003c!-- markdownlint-disable MD046 --\u003e\n\n```yaml\nsteps:\n  - name: \"Sonatype Lifecycle Scan\"\n    uses: lfreleng-actions/sonatype-lifecycle-scan-action@main\n    with:\n      nexus_iq_password: ${{ secrets.nexus_iq_password }}\n      scan_targets: 'my-project-folder'\n```\n\n\u003c!-- markdownlint-enable MD046 --\u003e\n\n## Inputs\n\n\u003c!-- markdownlint-disable MD013 --\u003e\n\n| Name              | Required | Default  | Description                                          |\n| ----------------- | -------- | -------- | ---------------------------------------------------- |\n| nexus_iq_server   | True     |          | Nexus IQ Server URL                                  |\n| nexus_iq_username | True     |          | Nexus IQ USERNAME                                    |\n| nexus_iq_password | True     |          | Nexus IQ Password                                    |\n| java_distribution | False    | temurin  | JAVA SE distribution to setup/run for Nexus CLI tool |\n| java_version      | False    | 17       | Java runtime to setup/run for Nexus CLI tool         |\n| iq_cli_version    | False    | 2.4.2-01 | Specific version of Nexus CLI to setup/run           |\n| application_id    | False    |          | Organisation and project name in Nexus IQ            |\n| scan_targets      | False    | .        | Location of file(s) or folder(s) to scan             |\n| no_checkout       | False    | false    | Do not checkout local repository; used for testing   |\n| debug             | False    | false    | Enable debugging output                              |\n\n\u003c!-- markdownlint-enable MD013 --\u003e\n\n### Required Inputs\n\nFor the mandatory inputs, create the following Github variables at the\norganisation level so that all repositories can use them:\n\n- NEXUS_IQ_SERVER\n- NEXUS_IQ_USERNAME\n\nAlso, the following secret:\n\n- NEXUS_IQ_PASSWORD\n\nPass the values of these variables to the action from the calling workflow.\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Flfreleng-actions%2Fsonatype-lifecycle-scan-action","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Flfreleng-actions%2Fsonatype-lifecycle-scan-action","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Flfreleng-actions%2Fsonatype-lifecycle-scan-action/lists"}