SonarQube, SonarCloud, and the Log4J vulnerability

A post was split to a new topic: Rule to detect vulnerable use of Log4J library?