Security Advisory: SonarQube Scanner GitHub Action

[Colin]

Hey everybody,

Take a look at this follow-up post.

SonarQube Scanner GitHub Action v6

Hello everyone, As a follow-up to our previous security update, we have released a new major version of the SonarQube Scanner GitHub Action. This release provides a more robust and comprehensive fix for the command-line injection vulnerability than v5.3.1. by rewriting the action in JavaScript. What You Need to Do To ensure your workflows are fully protected, we strongly recommend you to update your pipelines to v6. Please note that due to this fundamental rewrite, we will not be backporting t…