Manage Nexus IQ applications
Subscription Admins (SA) or Project Admins (PA) can create and manage Nexus IQ applications within a SHIP-HATS subscription.
Tasks
| Task | Description | Topic |
|---|---|---|
| Create applications | Create a Nexus IQ application to evaluate open source components used in your project. | Create Nexus IQ applications |
| View applications | View existing Nexus IQ applications under a SHIP-HATS project. | View Nexus IQ applications |
| Manage users | Add or remove users and assign roles for the Nexus IQ application. | Manage users for Nexus IQ applications |
| Manage user groups | Assign user groups to the Nexus IQ application and manage their roles. | Manage user groups for Nexus IQ applications |
| Manage token | View, retrieve, or refresh the token used to authenticate Nexus IQ scans in CI/CD pipelines. | Manage Nexus IQ token |
| View scan results | Review policy violations, vulnerabilities, and licence risks detected during Nexus IQ evaluations. | View Nexus IQ scan results |
| Delete Nexus IQ applications | Remove the application entirely. | Delete Nexus IQ applications |
Things to know
- Only SA and PA can perform these tasks in Console.
- Always create and delete Nexus IQ applications via Console. Do not create or delete applications directly in the Nexus IQ portal, as this will not be reflected in SHIP-HATS.
- Nexus IQ applications created in Console appear as applications in the Nexus IQ portal.
- Each application requires a unique Application ID, which must be used when configuring Nexus IQ scans in CI/CD pipelines.
- A token is generated for each Nexus IQ application and is required when configuring pipeline scans.
- Refreshing the token invalidates the previous token, so update any CI/CD pipelines that use the old token.
- Users must log in to Nexus IQ at least once before they can be assigned roles or permissions.
Tip: Use the links above to navigate directly to detailed instructions for each task.
