According to Sonar’s notification:
As a consequence, we are deprecating the public list of IPs - which you might have configured on your systems. As of June 1st 2019, this list will be removed from the public documentation and the IPs of SonarCloud webhook might therefore change at any point in the future. If you were relying on this list to trust the origin of SonarCloud webhooks, you should consider updating your system to rely on the secret mechanism.
At present we use Jenkins for cooperation with SonarCloud. In order to limit access to Jenkins we whitelisted SonarCloud Webhook IPs.
After SonarCloud Team remove Webhook IPs we have to open Jenkins for all world for accepting response but it is not secure.
Could you, please, provide any secure solutions?
Thank in advance