# Image scanning for Sonatype Nexus Repository

You can connect your Sonatype Nexus Repository with Aikido to scan your containers for known vulnerabilities.

Follow the simple steps below to activate this feature:

**Step 1**: Log into your Sonatype Nexus Repository. We'll have to gather the instance url, the registry name and credentials

The **instance url** is the url that you need to access your Sonatype Nexus Repository. This includes `http(s)://` and the port of your instance. For example: `https://my-awesome-nexus-repository.com:8081`

The **registry name** is the name of the hosted docker repository of which we should scan your images. This can be found when browsing your repositories.

![Asset browser interface displaying repository names, types, formats, and online statuses.](/files/6GwKLfrRCjgqPctEQA6M)

In this example the name of the registry is *docker-hosted*

The **credentials** can be either User tokens (recommended) or User credentials.

Go to your profile in the upper-right corner

![Admin profile section with a "Sign out" button.](/files/bWiNY5hacV8Bj1XYAEDD)

In the left sidebar, click User token. Then click the "Access user token"-button

![User Token management interface for generating or resetting Sonatype Nexus Repository tokens.](/files/6fOp0wVLgxDqwAPaxGdX)

Authenticate and get the **user token name code** and the **user token pass code** from the modal

![User token code display with clipboard copy and security warning.](/files/kChoWSQUqq5HSD6qz4OI)

![User token pass code display with copy to clipboard options for secure access.](/files/YnNk6iQXhArAbUbRucIm)

**Note:** When User tokens are not enabled in your Sonatype Nexus Repository, you can also use your login credentials. We do not recommend this since using user tokens are generally safer and easier to reset.

**Step 2**: Enter the collected data into the matching fields and click save

![Form to connect and configure a Sonatype Nexus container image registry.](/files/pM3OWNKplYwoAqBucC86)

**Step 3:** Aikido will now find all container repositories you can access and list them.

**Step 4:** Repositories can be linked to a code repository in order to perform better deduplication of findings. This step is optional!

**Step 5:** In the action menu next to the registry, click 'scan repos in registry' to get started. Results will appear in the Feed!


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://help.aikido.dev/container-image-scanning/standalone-registries/image-scanning-for-sonatype-nexus-repository.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.