Threat model which are being followed by the sonarqube team

Hi,

This question feels familiar. This thread may help:

 
Ann