SonarQube log4j 漏洞
[英]SonarQube log4j Vulnerability
问题描述
How to detect the log4j vulnerability in SonarQube LTS 8.2 version any script for that.
如何在 SonarQube LTS 8.2 版本的任何脚本中检测 log4j 漏洞。
I tried this community reference but not able to find for 8.2 version.我尝试了这个社区参考，但找不到 8.2 版本。
https://community.sonarsource.com/t/sonarqube-sonarcloud-and-the-log4j-vulnerability/54721 https://community.sonarsource.com/t/sonarqube-sonarcloud-and-the-log4j-vulnerability/54721
1 个解决方案
解决方案1
0 2021-12-15 08:24:36
I think it refers to the sonar instance itself to prevent the vulnerability, maybe what you re looking for is kind a rule based on a regex pattern to check the package version.我认为它指的是声纳实例本身以防止漏洞，也许您正在寻找的是一种基于正则表达式模式的规则来检查 package 版本。 Try creating a new rule on sonar and add it to your quality profile尝试在声纳上创建新规则并将其添加到您的质量配置文件中
声明:本站的技术帖子网页，遵循CC BY-SA 4.0协议，如果您需要转载，请注明本站网址或者原文地址。任何问题请咨询:yoyou2525@163.com.