Enterprise development: Anybody use Maven + Nexus?

[Zombie]

Our current development env is Maven + Nexus (Open Source) + MyEclipse. Now due to some re-org new support group does not want us to use Maven.

Their main argument is that maven goes to the web and downloads artifacts without control. Which is a security problem.

Our maven setup always goes to local nexus. Nexus looks for artifacts on remote repositories. Does anybody know anyway where we can restrict what nexus is allowed to download? Ideally we would like to get it authorized before artifact is downloaded.

Any thoughts, ideas ?

 

[Zombie]

wow, nobody?

 

[wayliff]

patience? maybe people who know are working.

 

[Net]

we use artifactory. maven downloads all artifacts from what we put in artifactory. there is no security concern.

 

[Tea Bag]

Not sure what version of Nexus you're running, but it looks like they have some repository configuration available. It looks like you could remove the default virtual repos specified and configure your own from the screenshots there. We use it with Maven but I don't think I have admin privileges to take a peek.