blog posts
Sonar's latest blog posts
Category

Blog post
AI hit 65% of committed code a year early. Do we know what's in the box?
According to the latest State of Code Developer Survey report, AI now generates or significantly assists 65% of the code respondents commit, a level they didn't expect to reach until 2027, and three in four teams use AI coding tools for business-critical or mission-critical services.
Read article

Blog post
Verification is the factory's feedback system
Learn how deterministic and agentic verification build trust in your AI software factory. See how Sonar checks code in every loop. Read the recap.
Read article

Blog post
Why your supply chain attack surface is expanding
Supply chain attacks are spreading through dependencies and pipelines. Learn how attackers operate and how to protect your software early.
Read article

Blog post
The guardrail that decides whether AI coding ships discipline or disaster
Learn why AI agents need least privilege, monitoring, and a kill switch, and how independent code review catches what the generating model misses.
Read article

Blog post
The SonarQube Remediation Agent now fixes Hunter Agent findings
Send Hunter Agent findings, from broken access control to business logic flaws, to the Remediation Agent and review each fix as its own pull request.
Read article

Blog post
SonarQube container scanning is now in open beta
Scan the container images you build and ship for vulnerabilities and malicious packages. Included with SonarQube Advanced Security. Join the open beta.
Read article
Get new blogs delivered directly to your inbox!
Stay up-to-date with the latest Sonar content. Subscribe now to receive the latest blog articles.