sonarqube on offsec.tools