Sonar's latest blog posts
The Coding Personalities of Leading LLMs
Make smarter AI adoption decisions with Sonar's latest report in The State of Code series. Explore the habits, blind spots, and archetypes of the top five LLMs to uncover the critical risks each brings to your codebase.
Empowering weak primitives: file truncation to code execution with Git
Let's dive into how a seemingly minor code vulnerability can hide a critical impact!
Read Blog >
Clean Code: The Best Approach to Writing Secure Cloud Native Apps
With Sonar and the Clean as You Code methodology, developers can directly impact the security of the cloud native apps they create.
Read Blog >
Get new blogs delivered directly to your inbox!
Stay up-to-date with the latest Sonar content. Subscribe now to receive the latest blog articles.
Common TypeScript Issues Nº 3: unused local variables and functions
We crunched the data from SonarQube for IDE to discover the top 5 most common TypeScript issues. In this 5 part series, we outline each issue and how to avoid it.
Read Blog >
Increase developer velocity today with Clean as You Code
The Clean as You Code methodology allows developers to keep working on new and interesting projects without sacrificing quality or getting bogged down in refactoring legacy code.
Read Blog >
We are Sonar!
Culture is a key aspect of working at Sonar. It is our binding agent; it is what we value, what we believe in, the way we work, and the way we interact. It is what makes us SonarSourcers!
Read Blog >
Common TypeScript Issues Nº 4: Don't create and drop objects immediately
We crunched the data from SonarQube for IDE to discover the top 5 most common TypeScript issues. In this 5 part series, we outline each issue and how to avoid it.
Read Blog >
Announcing SonarQube Server 9.9 LTS!
Big year, big announcement – the most anticipated SonarQube Server 9.9 Long-Term-Support release is here! Check out this post for all details.
Read Blog >
Common TypeScript Issues Nº 5: Optional property declarations
We crunched the data from SonarQube for IDE to discover the top 5 most common TypeScript issues. In this 5 part series, we outline each issue and how to avoid it.
Read Blog >
OpenEMR - Remote Code Execution in your Healthcare System
We recently discovered three vulnerabilities that allow arbitrary code execution on OpenEMR. Let’s see what we can learn from them and discuss their patches!
Read Blog >
Vulnerability Research Highlights 2022
Our research team looks back at a great year and summarizes the highlights of their vulnerability research in 2022.
Read Blog >
Level up your team's skills as they code
Clear context and specific education for why an issue occurs and how to fix it should be by the developers’ side without leaving the development workflow. Sonar has your answer.
Read Blog >