DEVOPSdigest

Sonatype announced end-to-end AI Software Composition Analysis (AI SCA) capabilities that enable enterprises to harness the full potential of AI.

Sonatype now extends its platform to protect, manage, and optimize AI/ML models across development and deployment. Sonatype provides an end-to-end AI SCA solution, ensuring that enterprises can adopt AI with the same level of safety and productivity as traditional open source.

To confidently manage open source AI/ML usage in software supply chains, Sonatype provides:

- Proactive AI threat detection: Sonatype blocks intentionally malicious AI models from entering enterprise development environments.

- Centralized AI model governance: With Nexus Repository’s Hugging Face proxy support, development teams can efficiently store, manage, and govern AI/ML models within existing DevOps workflows.

- Automated AI policy management: Sonatype enables organizations to enforce security and compliance policies across AI model usage.

- Unmatched AI observability and compliance: Sonatype provides full visibility into AI/ML model consumption, strengthening AI/ML security and defense strategies and streamlining first- and third-party software evaluation so enterprises can scale AI safely.