Skip to content

sapientpants/sonarqube-mcp-server

v1.8.2 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 10mo MCP Developer Tools
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →
This release patches 1 known CVE

Topics

mcp mcp-server model-context-protocol model-context-protocol-servers sonarcloud sonarqube
+1 more
typescript

Affected surfaces

deps

Summary

AI summary

Updates SonarQube Scanner GitHub Action to v6 to address a security vulnerability.

Full changelog

Patch Changes

  • #292 e697099 - security: update SonarQube Scanner GitHub Action to v6

    Update SonarSource/sonarqube-scan-action from v5 to v6 to address security vulnerability. The v5 action is no longer supported and contains known security issues.

    Security Improvements:

    • Resolves security vulnerability in SonarQube Scanner GitHub Action
    • Updates to latest supported version with security patches
    • Maintains all existing functionality while improving security posture

    References:

    • Security advisory: https://community.sonarsource.com/gha-v6-update
    • Updated action: sonarsource/sonarqube-scan-action@v6

Security Fixes

  • Updates SonarQube Scanner GitHub Action from v5 to v6, addressing a security vulnerability (see https://community.sonarsource.com/gha-v6-update).
View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track sapientpants/sonarqube-mcp-server

Get notified when new releases ship.

Sign up free

About sapientpants/sonarqube-mcp-server

A Model Context Protocol (MCP) server that integrates with SonarQube to provide AI assistants with access to code quality metrics, issues, and quality gate statuses

All releases →

Related context

Beta — feedback welcome: [email protected]