Archive for the ‘SonarQube’ Category

An overview of SonarQube’s latest product portfolio, as well as our added value as official representatives and providers of complementary software development tools.

Discover why language-specific static analysis rules are SonarQube’s key advantage. Learn how tailored rules for Java, C#, Python, C++, and React detect security vulnerabilities (SAST) and code smells, manage policies via Quality Profiles, and inspect AI-generated code.

Watch the recent webinar recorded last week.We added captions for your convenience. This webinar covers the latest 2026.5 release: It features enhanced language support (including comprehensive C, C++, and Rust updates), Advanced Security capabilities, new compliance reporting, and cross-project architecture management. It also introduces the SonarQube Server LTA 2026.5 release, focusing on the challenges of […]

Explore Sonar’s complete code quality & security: SonarQube, SonarCloud, Vortex, Gitar, and MCP Server for advanced SAST, SCA and code review

Sonar Vortex is a new product from Sonar designed to make AI-based code agents more efficient, controlled, and secure, through deep integration with SonarQube and an agent-driven development loop. Vortex unifies Context Augmentation and Agentic Analysis capabilities into a single product that operates within the agent’s own inner loop – at an early stage and in real time – instead of later checks […]

Learn how SonarQube helps teams write more secure Java code with static analysis, security rules, CI/CD checks, and security reports.

A customer story on using SonarQube to detect third-party vulnerabilities (SCA) as well as vulnerabilities in human- and AI-written code (SAST static code analysis) and improve quality.

Sonar announced this week the acquisition of Gitar.AI, which developed an AI-based Code Review and code fixing tool. In this article, a short overview of Gitar.

An explanation of code coverage in SonarQube: how to measure Coverage correctly, integrate coverage reports with code management tools, define smart Quality Gates, and improve code quality.

In the wake of the PyPI LiteLLM supply chain attack that backdoored packages to steal Kubernetes credentials, SonarQube emerges as DevSecOps shield. Discover how Sonar scans dependencies- complete with GitHub Actions and GitLab CI/CD.

On SonarQube Server with GitLab (self‑managed or SaaS), the typical flow is: Here is a step‑by‑step summary: 1. Configure GitLab integration in SonarQube Server Do this once per GitLab instance: Optional but recommended: 2. Create and bind the project in SonarQube Option A: Import from GitLab (with DevOps integration) This is the recommended way for […]

SonarQube 2026.1 unifies verification for human-written, AI-generated, and third-party code into a high-performance security & quality scanner

Your Guide to SonarQube 2025.6 from ALM Toolbox In the era of AI-assisted development, verifying code is as crucial as writing it. The SonarQube 2025.6 release is Sonar’s answer to this challenge, enabling development teams to perform faster, easier, and more comprehensive code inspections. This release delivers significant advancements across three key vectors: tighter workflow […]

SonarQube offers static code scanning for many languages, with JavaScript (JS) being one of the most popular. The tool detects Bugs, Security Vulnerabilities, Hotspots, and Code Smells.

I am happy to provide updates on several topics regarding SonarQube: Celebrating 17 Years of Sonar. In an article marking 17 years since the founding of Sonar, founder Olivier Gaudin reviews the company’s evolution from a small open-source project in Geneva to a global standard currently serving over 7 million developers. Gaudin writes that in the AI era, code quality is more relevant than ever. While AI dramatically accelerates code writing, it creates a critical need for an independent verification layer…