Update readme (#33)

* explicitly mentions that only one jar file should be copied

Signed-off-by: Nicklas Körtge <nicklas.koertge1@ibm.com>

* add note, that later one can install plugin over the marketplace

Signed-off-by: Nicklas Körtge <nicklas.koertge1@ibm.com>

---------

Signed-off-by: Nicklas Körtge <nicklas.koertge1@ibm.com>

Author: n1ckl0sk0rtge

README.md

@@ -31,9 +31,14 @@ in source code and generates [CBOM](https://cyclonedx.org/capabilities/cbom/).
 
 ## Installation
 
-Copy the plugins (jar files) to `$SONARQUBE_HOME/extensions/plugins` and restart 
+Copy the plugin (one of the JAR files from the [latest releases](https://github.com/IBM/sonar-cryptography/releases), 
+depending on whether you are using JRE 17 or later or JRE 11) to `$SONARQUBE_HOME/extensions/plugins` and restart 
 SonarQube ([more](https://docs.sonarqube.org/latest/setup-and-upgrade/install-a-plugin/)).
 
+> [!NOTE]
+> We are currently in the process of adding the plugin to the SonarQube marketplace. You will then be able to install
+> the plugin directly via the marketplace and no longer have to add it manually to the plugin directory.
+
 ## Using
 
 The plugin provides new inventory rules (IBM Cryptography Repository) regarding the use of cryptography for