I need to download the SonarQube Community Edition 9.0.1 i.e. free and open source but concerned about security issues before going to install it on system. I am here looking for security information if anyone can provide. If you can provide a SOC2 that would be great.
It is required for use from Procurement Risk Analysis perspective.
We want to install this software in our systems. Concern is Do we have any risk from the Software? Can we face any security issues that is coming with this software installation, if any ?