Java 17 vulnerability - self-hosted agents

SonarQube Cloud
,
1

Hi,

We are using a Windows self-hosted agent to run the run the scanner that performs analysis with Java 17 installed, as specified in the documentation. However, as Java 17 is vulnerable we couldn’t find any information about whether newer versions, such as Java 21 or 23, are supported. We are using SonarQube Cloud with Azure DevOps.

Could you please help us with this?
Thank you!

2

Hi,

Welcome to the community!

Analysis still needs / uses Java 17. Could you provide some details on what you’re worried about here?

 
Thx,
Ann