Sonatype

Sonatype provides software composition analysis, helping developers and security teams manage open source risk. It identifies vulnerabilities and license issues in dependencies used in software projects. It's used by organizations to automate open source governance and improve software supply chain security.

Official docs: https://help.sonatype.com/

Sonatype Overview

• Application
  • Component
• Repository
• Search

Use action names and parameters as needed.

Working with Sonatype

This skill uses the Membrane CLI to interact with Sonatype. Membrane handles authentication and credentials refresh automatically — so you can focus on the integration logic rather than auth plumbing.