Sonar's latest blog posts
Announcing SonarSweep: Improving training data quality for coding LLMs
Recent research from Anthropic has shown that even a small amount of malicious or poor quality training data can have a massively negative impact on a model’s performance, exposing users to significant security and quality issues.
SonarQube Server 9.7 is here!
Check out what’s new in SonarQube Server 9.7 in this quick video.
Read Blog >
Remote Code Execution in Melis Platform
We come back on a critical deserialization vulnerability identified by our SAST engine in the software Melis Platform. Let’s look at how it works under the hood and how we confirmed its exploitability.
Read Blog >
Get new blog posts delivered directly to your inbox!
Stay up-to-date with the latest Sonar content. Subscribe now to receive the latest blog articles.
AI-based coding tools are thriving, and maintainers have some valid concerns about the impact on their work
One of the biggest AI-related headlines of 2024 has been the rapid growth and acceptance of AI-based coding tools.
Read article >
Bad code costs more than just your money
Bad code doesn’t just disappear and the consequences of overlooking it can be costly.
Read Blog >
The Rules of Three, Five and Zero
The Rule of Three was coined back in 1991. That expanded to the Rule of Five with C++11's move semantics - and even that was then subsumed by The Rule of Zero. But what are all these rules? And do we have to follow them?
Read Blog >
Five SonarQube Cloud features for developers that want Code Quality
Whether you’re working on a new project or an existing one, you might think of Code Quality as an ideal, somewhere far out of reach. Let’s go over 5 key features that make SonarQube Cloud the perfect tool for developers and development teams to deliver Code Quality consistently and efficiently, without disrupting the existing development workflow.
Read Blog >
Securing Developer Tools: A New Supply Chain Attack on PHP
What is your worst supply chain nightmare and why is it somebody that could take over all the PHP packages at once? Let's deep dive into how we could demonstrate it!
Read Blog >
Our journey toward accessibility
When you think about your typical workday, how much time do you spend working on a computer? How hard would it be for you to perform your job if you did not have access to a computer?
Read Blog >
Securing Developer Tools: OneDev Remote Code Execution
We recently discovered several vulnerabilities in OneDev 7.2.9 that allowed attackers to fully compromise a server and even break out of a Docker environment.
Read Blog >
Interview with a SonarSource Developer
Curious about life as a Developer at SonarSource? Join us as we discuss changes in the world of programming, the importance of Security, and writing code with SonarQube Cloud Backend Developer Claire Villard.
Read Blog >
The evolving landscape of open source licensing: What you need to know
In this post we will cover why it’s important to know what licenses accompany the open source in use at your organization
Read article >