It is possible to configure SonarQube in a way that no entries are available in the principal's group attribute.
In such a case and given an empty group Set, SonarQubes UserIdentity builder throws an exception. Avoiding calling builder.setGroups(groups); does the trick as mitigation.
It is possible to configure SonarQube in a way that no entries are available in the principal's group attribute.
In such a case and given an empty group
Set
, SonarQubes UserIdentity builder throws an exception. Avoiding callingbuilder.setGroups(groups);
does the trick as mitigation.