Featured Post
Uncovering hidden security vulnerabilities with deeper SAST
Security vulnerabilities can be hidden in your third-party dependency code. Uncover them with deeper SAST.
Read more -->
Blog
Sonar's latest blog posts
Blog post
Reflections from DevNexus, the largest Java conference in the U.S.A.
Reflections from DevNexus, the largest Java conference in the U.S.A.
Read Blog post >
Blog post
Interview with Sonar Python Developers Part 2
Latest Python developments. Interview with Python developers from Sonar.
Read Blog post >
Blog post
Odoo: Get your Content Type right, or else!
What do we need content types for anyway? Let's look into how an incorrect content type led to a real-world vulnerability in Odoo, CVE-2023-1434.
Read article >
Blog post
Interview with Sonar Python Developers Part 1
Why should I learn Python language? When should I use Python? Is tooling around Python development mature?
Read Blog post >
Blog post
Sonar ❤️ Compiler Explorer: Write clean C++ code inside your browser
Sonar ❤️ Compiler Explorer: Write clean C++ code inside your browser
Read Blog post >
Blog post
Pretalx Vulnerabilities: How to get accepted at every conference
We recently discovered two vulnerabilities in pretalx and found a generic technique to gain code execution from a file write.
Read article >
Blog post
Another 9 reasons to upgrade to SonarQube 9.9 LTS
SonarQube 9.9 LTS is here! We're back with another 9 reasons you should prioritise upgrading as soon as possible.
Read article >
Blog post
How bad code destroys developer velocity
When bad code gets overlooked, it can create lasting problems and ultimately impact developer productivity and velocity.
Read Blog post >
Blog Post
Announcing SonarQube 10.0
Learn what features - like faster first analysis and better user management with SCIM - are available to you and your teams in SonarQube 10.0!
Read article >
Blog post
It’s a (SNMP) Trap: Gaining Code Execution on LibreNMS
Our researchers discovered a vulnerability in LibreNMS, which could be exploited by attackers to gain RCE by sending a single SNMP trap.
Read article >
Blog post
Sonar is the Clean Code solution for your DevOps workflow
Clean Code from Sonar aims to streamline your DevOps workflow so that your organization can yield the best possible results from your software.
Read Blog post >
Blog post
Your Guide to Clean Code in Cloud Native Apps
Companies are adopting cloud native practices because it puts their core business first and affords them speed and efficiency advantages over the competition. However, reaping these rewards requires a solid, sustainable foundation - a Clean Code foundation.
Read Blog post >