The AI coding agent a team picks should never set the standard its code is held to. Tool-agnostic code verification applies the same rigorous, repeatable checks to every agent's output. An agent that ...

Sonar Vortex delivers project context to AI coding agents and runs SonarQube analysis inside the agent's loop, and in VS Code with GitHub Copilot you enable it through the SonarQube plugin. Coding ...

Container scanning is now in open beta in SonarQube Advanced Security on SonarQube Cloud, for customers on both the Team and Enterprise plans, at no additional cost. Check your container images for ...

Gitar Cross-Repo Analysis can expose contract breaks across repositories during pull request review, before the change merges. Repository CI can pass while a separate client still calls an API route ...

Verify all code. Find and fix issues faster with SonarQube.

You run GitHub Copilot in the VS Code Agents Window against a codebase SonarQube already analyzes. You want skills for quality gate status, issue lists, coverage gaps, and dependency risks without ...

Sonar Joins OpenAI Daybreak Cyber Partner Program to Advance Frontier Security The SonarQube CLI brings local code analysis, project queries, and AI agent integrations into the terminal for SonarQube ...

Sonar Joins OpenAI Daybreak Cyber Partner Program to Advance Frontier Security Agents are smart, and an unconstrained agent blends valid patterns into an incoherent system. Architectural boundaries ...

GPT-6.1 Sol passes 85.29% of the 544 HumanEval and MBPP tasks with executable tests, against 83.09% for GPT-6 Sol. GPT-6.1 Sol generated 669,155 lines of code against 480,125 for GPT-6 Sol, which is ...

Sonar builds code quality and security tools because Sonar engineers rely on it every day. Quentin Chevrin, a front-end developer in Sonar's billing squad, barely writes code by hand anymore, and the ...

Sonar’s frontier security offering helps engineering teams prevent, find, and fix security vulnerabilities in every line of code, new and in production, so they can stay ahead of AI-enabled attackers.

The SonarQube Remediation Agent automatically generates, verifies, and submits pull requests to fix code issues on SonarQube Server. It runs securely inside self-hosted infrastructure, supporting ...