Sonatype for Jira Data Center

for Jira Server 8.20.0 - 9.13.1, Jira Data Center 8.20.0 - 9.17.1 and more
  • Jira Service Management
  • Jira

We no longer offer sales and support for server apps. You can stay connected by exploring the migration options to either the cloud or Data Center version of this app.

Prioritize and track open source policy violations from Sonatype Lifecycle in Jira

Receive your Nexus IQ policy violations in Jira

Your Nexus IQ policy violations will appear in Nexus IQ notifications in Jira, letting your team know where the violations are and how to prioritize.

Empower developers to take action.

Component-level violation details help development teams understand which open source components are problematic, allowing them to take immediate action and reduce MTTR.

Map notifications to the right remediation team.

Configure the Nexus IQ JIRA Add-on to work how your team works- customize how violation tickets are created and which projects they appear in.

More details

Note: Sonatype for Jira Cloud is now available.

Build open source security into your development pipeline. With the Nexus IQ Add-on, developers and security administrators can use Jira to prioritize and track their open source policy violations from Nexus Lifecycle scans.

How does it work? In Nexus IQ Server, administrators identify which types of policy violations should trigger the creation of a JIRA ticket. The Nexus IQ JIRA add-on allows the mapping of IQ Applications and Organizations to a JIRA project (from the add-on's administration screen). From there, teams can track the progress of remediation efforts right in JIRA.

More than 10 million software developers rely on Sonatype to innovate faster while mitigating security risks inherent in open source. Sonatype's Nexus platform combines in-depth component intelligence with real-time remediation guidance to automate and scale open source governance across every stage of the modern DevOps pipeline. Learn more at

Privacy and security

Privacy policy

Atlassian's privacy policy is not applicable to the use of this app. Please refer to the privacy policy provided by this app's partner.

Partner privacy policy



Take action on open source code security vulnerabilities by learning about them right from JIRA.