Blog
Sonar's latest blog posts
What is Clean Code?
If you’ve followed us for a while, you most likely noticed that we changed the way we describe what we do: from “code quality” to “continuous code inspection,” then “code quality and code security”… to Clean Code.
But what is Clean Code, and what does it encompass?
Linux Foundation Chat: Open Source & Clean Code
Linux Foundation Executive Director Jim Zemlin joins Sonar Founder and co-CEO Olivier Gaudin to discuss Clean Code, open-source development, cybersecurity, and more!
Read article >
9 Steps to get the most out of your SonarCloud Trial
To maximize the benefits of your SonarCloud trial, it's essential to approach the trial with a clear plan. Start a 14-day trial for your private projects & repositories completely free to get all the features of the application that you can get as a paid subscription.
Read article >
Shifting Right for Secure Platforms and DevOps
Dev tooling is not only helping shift issues left, but the tools also help identify issues that happen later, or to the right, in the development lifecycle. Like detecting secrets before they go into production or platform configuration issues.
Read article >
Highlights from Hexacon 2023
Last week, members of our AppSec and Vulnerability Research teams attended the Hexacon in Paris to learn, share, and network. Read more about our highlights.
Read article >
What is Clean Code?
If you’ve followed us for a while, you most likely noticed that we changed the way we describe what we do. It feels like in the last couple of years, we finally managed to settle on what we had been looking for from the beginning: Clean Code. But what is Clean Code, and what does it encompass?
Read blog post >
Security Vulnerabilities in CasaOS
We recently uncovered two critical code vulnerabilities in the personal cloud system CasaOS. Let's see what we can learn from them.
Read article >
Java SAST Benchmarks: why you shouldn't trust them blindly
Java SAST Benchmarks: why you shouldn't trust them blindly
Read blog post >
Interview with Sonar Java Enthusiasts
Interview with Sonar Java Enthusiasts
Read blog post >
ISMG Interview - Securing Applications, Accelerating DevOps with Clean Code
Sonar founder and co-CEO, Olivier Gaudin, sits down with ISMG's Tom Field at Black Hat USA 2023 to discuss how development can be improved to avoid security issues.
Read blog post >
Why I’m passionate about Static Analysis and how I helped make it better
Why I’m passionate about Static Analysis and how I helped make it better
Read blog post >
A comprehensive guide to the dangers of Regular Expressions in JavaScript
A deep investigation into regular expression denial of service (ReDoS) vulnerabilities in JavaScript
Read blog post >