sonarcloud-scan

Pipe de Bitbucket Pipelines: análisis de SonarQube Cloud Analiza tu código con SonarQube Cloud para detectar errores, vulnerabilidades y code smells en más de 25 lenguajes de programación. Tu cuenta de SonarCloud debe estar asociada primero a tu equipo o cuenta de usuario de Bitbucket. SonarQube...

CVE-2025-58178

CVE-2025-58178 affects SonarQube-related tooling: the SonarQube Scan GitHub Action (versions up to 5.3.0) is vulnerable to command injection because untrusted input arguments are treated as shell expressions. This can lead to execution of arbitrary commands with local privileges. A fix is release...

PT-2025-35523

Name of the Vulnerable Software and Affected Versions SonarQube versions 4 through 5.3.0 Description SonarQube is a static analysis solution for continuous code quality and security inspection. A command injection issue was identified in the SonarQube Scan GitHub Action. Untrusted input arguments...