nexussonatype

Sonatype Nexus - Disabling "Analyze Application" button in Component View


all!

I need to disable the "Analyze Application" button in Nexus' component view before this software is ready for our production systems. For various reasons, we can't allow that function to work on production servers.

Is there a convenient way to disable it that I am missing? I've perused the user manual and the function is only even mentioned once. Additionally, there is no configuration option to disable it. I even went so far as to pull a network traffic report and run it through Wireshark to try to find an IP/Port to block, but no such luck.

If anyone has experience disabling this function I would greatly appreciate any guidance that can be offered.


Solution

  • I contacted Sonatype. There is no application setting to disable this functionality. What you can do is add clm.sonatype.com to your hosts file on whatever machine is hosting Nexus. The functionality will still appear operational on the front end, but a quick look at nexus.log will reveal that it is unable to resolve the hostname and throws a stack trace to the log instead.

    Also, they opened a JIRA request for the functionality and marked it as high, so this may become an option in the future.