Detect vulnerable use of log4j

Hello @davidlang,

I moved your question out the main Log4J thread so it’s simpler to answer you.

I’ve just posted an answer here with details of what SonarQube can do to help.

Alex