PHP Vulnerability Responses by Company

Sonar

Global cloud / infrastructure
Aliases / services
SonarSource / SonarQube / ソナー / Sonar
Official website
https://www.sonarsource.com/

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

SonarQube Cloud Container Scanning

Response status
Distro coverage; conflicting guidance
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

Provides source-code quality and security analysis.

Advanced Security beta covers distro PHP on Team/Enterprise.

Scope: Article and FAQ disagree about source-built PHP and official php images.

What users should do

Scan and patch; confirm source-build coverage with support.

Official service URL

Source URLs

  1. SonarQube container scanning is now in open betahttps://www.sonarsource.com/blog/container-scanning-open-beta/Response evidence

SonarQube Server (container scanning)

Response status
Support planned
Response information checked
2026-10-27

Current re-audit: Official response verified · Research date: 2026-10-27

This container-scanning beta is Cloud-only.

Scope: Code analysis differs from runtime detection.

What users should do

Check container PHP separately.

Source URLs

  1. SonarQube container scanning is now in open betahttps://www.sonarsource.com/blog/container-scanning-open-beta/Response evidence
Related official sources
  1. PHP analysis in SonarQubeOfficial information directory
  2. SonarQube container scanning is now in open betaOfficial information directoryOfficial article linked from the provider homepage; reviewed October 25.

Comments