Sonar's latest blog posts
Announcing SonarSweep: Improving training data quality for coding LLMs
Recent research from Anthropic has shown that even a small amount of malicious or poor quality training data can have a massively negative impact on a model’s performance, exposing users to significant security and quality issues.
What Code Issues Caused the CrowdStrike Outage?
This blog post takes a look at the potential code issues behind the recent global CrowdStrike outage.
Read article >
Deliver high-quality ASP.NET Core web apps with Sonar.
Sonar recently added new rules for ASP.NET WebAPI and ASP.NET MVC. In this blog post, we discuss the details of these frameworks within ASP.NET Core and how Sonar’s solutions help keep your ASP.NET web apps clean and free of issues.
Read article >
Get new blog posts delivered directly to your inbox!
Stay up-to-date with the latest Sonar content. Subscribe now to receive the latest blog articles.
G2 Grid Report for Static Code Analysis: Sonar Named a Leader for Sixteenth Consecutive Quarter
G2 has once again ranked Sonar #1 in Static Code Analysis in the Summer 2024 Grid Report. In addition to leading the pack in each of the Enterprise, Mid-Market, and Small Business segments for Static Code Analysis, Sonar was also named a leader in the Static Application Security Testing (SAST) category.
Read article >
AutoConfig: C++ Code Analysis Redefined
Abbas Sabra covers a groundbreaking technology: AutoConfig for C and C++. It automates the normally complex setup process, making project setup a breeze. AutoConfig is designed to make code analysis free of complications bringing Code Quality to the fingertips of every C and C++ developer.
Read article >
Encoding Differentials: Why Charset Matters
The absence of charset information seems to be a minor issue for a web application. This blog post explains why this is a false assumption and highlights the critical security implications.
Read article >
Securing Developer Tools: Unpatched Code Vulnerabilities in Gogs (2/2)
Learn about critical code vulnerabilities we discovered in Gogs, a source code hosting solution. This follow-up covers how less severe flaws can still have a critical impact.
Read article >
소나큐브 서버를 활용한 코드 커버리지 이해 및 활용
코드 테스트 노력의 효과를 측정하는 핵심 지표 중 하나는 코드 커버리지입니다. 강력한 정적 코드 분석 솔루션인 SonarQube Server는 코드 커버리지 도구와 원활하게 통합되어 개발자가 더 깔끔하고 안전하며 철저히 테스트된 코드를 작성할 수 있도록 지원합니다.
Read article >
Securing Developer Tools: Unpatched Code Vulnerabilities in Gogs (1/2)
We discovered 4 critical code vulnerabilities in Gogs, a source code hosting solution, which are still unpatched. Read about the details and how to protect yourself.
Read article >
The True Cost of Bad Code in Software Development
Despite advances in technology and methodologies, the costs associated with fixing bad code continue to escalate, impacting businesses financially and operationally. But what is bad code, what are the clear markers of its negative impact, and how can organizations overcome it?
Read article >
SonarQube Server 10.6 Release Announcement
The 10.6 release of SonarQube Server includes some significant changes, such as autoscaling in Kubernetes, AutoConfig for C and C++ projects, support for running in a FIPS-enforced environment, set rule priority to uphold your coding standards, easy setup of monorepos, monitoring the time it takes to upgrade, and expanded library coverage for AI/ML developers.
Read article >
Green Coding with Code Quality - A Recap of ecoCode Challenge Paris 2024
ecoCode Challenge Paris represents an opportunity to unite innovation and sustainable coding. As a proud sponsor, we are excited to see how SonarQube Server is empowering developers to prioritize environmental sustainability in their projects.
Read article >