Hi @ragu
Kindly find the thread on the topic here: Security Advisory: SonarQube Scanner GitHub Action