Sonar's latest blog posts
Announcing SonarSweep: Improving training data quality for coding LLMs
Recent research from Anthropic has shown that even a small amount of malicious or poor quality training data can have a massively negative impact on a model’s performance, exposing users to significant security and quality issues.
Paying maintainers: the HOWTO
It is no surprise that lots of well-intentioned people have failed to figure out how to effectively pay maintainers.
Read article >
Pretalx Vulnerabilities: How to get accepted at every conference
We recently discovered two vulnerabilities in pretalx and found a generic technique to gain code execution from a file write.
Read article >
Get new blogs delivered directly to your inbox!
Stay up-to-date with the latest Sonar content. Subscribe now to receive the latest blog articles.
Another 9 reasons to upgrade to SonarQube Server 9.9 LTS
SonarQube Server 9.9 LTS is here! We're back with another 9 reasons you should prioritise upgrading as soon as possible.
Read article >
How bad code destroys developer velocity
When bad code gets overlooked, it can create lasting problems and ultimately impact developer productivity and velocity.
Read Blog >
Announcing SonarQube Server 10.0
Learn what features - like faster first analysis and better user management with SCIM - are available to you and your teams in SonarQube Server 10.0!
Read article >
It’s a (SNMP) Trap: Gaining Code Execution on LibreNMS
Our researchers discovered a vulnerability in LibreNMS, which could be exploited by attackers to gain RCE by sending a single SNMP trap.
Read article >
Sonar is the Code Quality solution for your DevOps workflow
Code Quality from Sonar aims to streamline your DevOps workflow so that your organization can yield the best possible results from your software.
Read Blog >
Your Guide to Code Quality in Cloud Native Apps
Companies are adopting cloud native practices because it puts their core business first and affords them speed and efficiency advantages over the competition. However, reaping these rewards requires a solid, sustainable foundation - a Code Quality foundation.
Read Blog >
The top 5 common TypeScript issues found by SonarQube for IDE
We crunched the data from SonarQube for IDE to discover the top 5 most common TypeScript issues. This is a summary of the top 5
Read Blog >
Cloud native features in SonarQube Server 9.9 LTS
The best LTS ever - SonarQube Server v9.9 - packed together a lot of new features and functionality. Read more to learn about the cloud native, IaC and serverless analysis capabilities included in the LTS.
Read Blog >
9 more reasons to upgrade to SonarQube Server 9.9 LTS
SonarQube Server 9.9 LTS is here! Not every improvement could be mentioned in the release announcement, so check out these LTS easter eggs that make this the Best LTS Ever.
Read Blog >