Sonar Blog

Home

Blog

Sonar's latest blog posts

Featured Post

What is Clean Code?

If you’ve followed us for a while, you most likely noticed that we changed the way we describe what we do: from “code quality” to “continuous code inspection,” then “code quality and code security”… to Clean Code.


But what is Clean Code, and what does it encompass?

Read More
https://assets-eu-01.kc-usercontent.com:443/2fe34236-f012-013e-0792-c742810b83e3/ddb995eb-cb89-4435-82fb-1b937cdf11dc/what_is_clean_code_blog_feature.webp
Image of Blazor support by Sonar
Blog post

Sonar is helping make C# code clean as Microsoft ASP.NET Core Blazor application development grows

Sonar is helping make C# code clean as Microsoft ASP.NET Core Blazor application development grows

Read blog post >

The SonarQube and React logos
Blog post

Lessons learned upgrading to React 18 in SonarQube

We share the biggest three issues we faced and the lessons we learned as we upgraded SonarQube to React 18.

Read blog post >

Get new blogs delivered directly to your inbox!

Stay up-to-date with the latest Sonar content. Subscribe now to receive the latest blog articles.

By submitting this form, you agree to the Privacy Policy and Cookie Policy.

https://assets-eu-01.kc-usercontent.com:443/2fe34236-f012-013e-0792-c742810b83e3/64df6ab9-c247-4c0d-b62e-3bb168077339/vulnerability_research_highlights_blog_index.webp
Blog post

Vulnerability Research Highlights 2023

Our Vulnerability Research team looks back at a great year and summarizes the highlights of 2023.

Read article >

https://assets-eu-01.kc-usercontent.com:443/2fe34236-f012-013e-0792-c742810b83e3/13294037-5b6b-404a-8593-5751003436e3/c_sast_benchmarks_blog_index.webp
Blog post

Sonar's Scoring on the Top 3 Python SAST Benchmarks

We're excited to share not only how Sonar performs on Python benchmarks but also the ground truth corresponding to the list of expected and not-so-expected issues.

Read article >

https://assets-eu-01.kc-usercontent.com:443/2fe34236-f012-013e-0792-c742810b83e3/5bf25ac4-d412-48eb-a98f-1de2363ffeab/devops_predictions_blog_index.webp
Blog post

2024 DevOps Predictions from the Sonar Developer Advocate Team

The Developer Advocate team shares their predictions on what they foresee for DevOps trends and hot topics in 2024.

Read article >

https://assets-eu-01.kc-usercontent.com:443/2fe34236-f012-013e-0792-c742810b83e3/5c31ddcb-0f0b-45f6-9ef6-dbd445f6025a/2024_security_predictions_blog_index.webp
Blog post

2024 Security Predictions from the Sonar Research Team

Reflecting on changes in the industry over the past year, as well as the research we’ve published, the Sonar Vulnerability Research team came together and compiled our thoughts on what we foresee for cybersecurity in 2024.

Read Blog post >

https://assets-eu-01.kc-usercontent.com:443/2fe34236-f012-013e-0792-c742810b83e3/1617c8c9-0faa-4f13-9d13-05721dd7ef2a/sonar_at_blackhat_eu_blog_index.webp
Blog post

Sonar @ Black Hat Europe!

Last week, several SonarSourcers traveled to London to attend our third Black Hat event of the year. Here's what happened!

Read article >

https://assets-eu-01.kc-usercontent.com:443/2fe34236-f012-013e-0792-c742810b83e3/bf453bc7-6980-489e-9b4d-09ff939c983d/pfsense_code_vulnerabilities_blog_index.webp
Blog post

pfSense Security: Sensing Code Vulnerabilities with SonarCloud

Our Clean Code solution SonarCloud discovered multiple vulnerabilities leading to remote code execution on pfSense CE 2.7.0. Let's see how SonarCloud found them and how it can keep your code clean.

Read blog post >

https://assets-eu-01.kc-usercontent.com:443/2fe34236-f012-013e-0792-c742810b83e3/0618970f-52b3-4a04-9014-53fee3f88588/spring_boot_coding_pitfalls_blog_index.webp
Blog Post

Spring framework pitfalls

Spring framework offers a lot of help in the development, but we still have to pay attention and make the right use of it in order to avoid some issues.

Read blog post >

 An artistic impression of nested code with a big red cross over the top right corner.
Blog post

Stop nesting ternaries in JavaScript

Nesting ternary operators makes code more complex and less clear. Let's investigate other ways to write conditional expressions.

Read article >

https://assets-eu-01.kc-usercontent.com:443/2fe34236-f012-013e-0792-c742810b83e3/f520b31d-6cc5-4f3f-80e4-d85628182c31/costly_consequences_blog_index.webp
Blog post

Unraveling the Costs of Bad Code in Software Development

Not only does bad code cost companies millions of dollars, but countless hours of lost time, productivity, and brand reputation too. By acknowledging the existence of bad code and implementing proactive measures to mitigate its impact, developers and organizations can steer software toward success.

Read blog post >