SonarQube, SonarCloud, and the Log4J vulnerability

I’ve upgraded to sonarqube 8.9.4 using the docker image and confirmed on the web interface it is running that version.

However, if I perform an interactive login into the container and check /opt/sonarqube/conf/ and cat the file, the config option mentioned above is commented out. Should that not be set in this image?

#sonar.search.javaAdditionalOpts=

The environment variable is also not set.