Archive for the ‘Sonar’ Category

Explore Sonar’s complete code quality & security: SonarQube, SonarCloud, Vortex, Gitar, and MCP Server for advanced SAST, SCA and code review

Sonar Vortex is a new product from Sonar designed to make AI-based code agents more efficient, controlled, and secure, through deep integration with SonarQube and an agent-driven development loop. Vortex unifies Context Augmentation and Agentic Analysis capabilities into a single product that operates within the agent’s own inner loop – at an early stage and in real time – instead of later checks […]

A customer story on using SonarQube to detect third-party vulnerabilities (SCA) as well as vulnerabilities in human- and AI-written code (SAST static code analysis) and improve quality.

Sonar announced this week the acquisition of Gitar.AI, which developed an AI-based Code Review and code fixing tool. In this article, a short overview of Gitar.

On SonarQube Server with GitLab (self‑managed or SaaS), the typical flow is: Here is a step‑by‑step summary: 1. Configure GitLab integration in SonarQube Server Do this once per GitLab instance: Optional but recommended: 2. Create and bind the project in SonarQube Option A: Import from GitLab (with DevOps integration) This is the recommended way for […]

Your Guide to SonarQube 2025.6 from ALM Toolbox In the era of AI-assisted development, verifying code is as crucial as writing it. The SonarQube 2025.6 release is Sonar’s answer to this challenge, enabling development teams to perform faster, easier, and more comprehensive code inspections. This release delivers significant advancements across three key vectors: tighter workflow […]