Much like the integration with Coder integration with JFrog, Sonatype integration would give the same seamless developer experience for installing artifacts and scanning them (including the running workspaces).

Enterprise companies would use the entire suite of Sonatype tools to

Feature could include:

• Automatic authentication to pull artifacts from a Nexus Repo (https://www.sonatype.com/products/sonatype-nexus-repository)
• Scanning of Workspace containers
• Scanning of project dependencies (https://www.sonatype.com/products/open-source-security-dependency-management)

I know that currently Nexus Repos don't allow for OIDC like JFrog Artifactory does, but in the short term a guide or a recommendation for a workaround would be great!