Sonar's latest blog posts
Featured PostRead article
Welcoming Gitar to Sonar
Sonar has acquired Gitar, adding a new, critical layer to its multilayer, zero-trust code verification platform. Gitar is an AI code review solution, and it doesn’t just flag issues; it also generates the fix, validates it against the CI, and commits to the branch.
Blog post
The context tax: why your coding agent reads the same 600 lines 400 times
Discover how SemSitter powers Sonar Vortex with a codebase graph that gives coding agents precise context across files, documentation, and languages.
Read article
Blog post
SonarQube Hunter Agent is now GA: Catch broken access control and business logic flaws
SonarQube Hunter Agent uses AI to detect broken access control, business logic flaws, and authentication vulnerabilities traditional SAST can miss.
Read article
Blog post
Bring your own hook: a 5-line PostToolUse template calling sonar analyze agentic
Set up a minimal SonarQube Agentic Analysis hook in Claude Code with five lines of Bash and understand how exit codes control feedback.
Read article
Blog post
Tokenomics of quality: switch sonar list issues to --format toon for measured token savings
See how sonar list issues with TOON reduces token usage while preserving data and comprehension for AI coding agents and automated workflows.
Read article
Blog post
Your secrets are leaking to AI coding agents (and how to stop it)
Learn how AI coding agents can expose secrets and how local detection helps keep credentials from reaching model providers and external logs.
Read article
Blog post
Claude Code hooks and how Sonar Vortex verifies AI code inside the loop
Learn how Claude Code hooks enforce deterministic AI guardrails and how Sonar Vortex verifies AI generated code inside the development loop.
Read article
Get new blogs delivered directly to your inbox!
Stay up-to-date with the latest Sonar content. Subscribe now to receive the latest blog articles.