The Curious Engineer

All blogs / Software / engineering practice

Sonar Blog

sonarsource.com

Sonar's blogs showcase our solutions and products: SonarQube Cloud, SonarQube Server, and SonarQube for IDE - trusted by over 7 million developers

Software / engineering practiceSecurityAI / ML

’23’24’25’26
Posts
664 from 3 Oct 2023 to 29 Oct 2026
Posting
about daily (171 in the last year)
Kind
company blog
Feed
https://www.sonarsource.com/rss/blog.xml

2026 163

  1. The guardrail that decides whether AI coding ships discipline or disaster
  2. The SonarQube Remediation Agent now fixes Hunter Agent findings
  3. How to adopt the AC/DC in enterprise agentic workflows
  4. SonarQube container scanning is now in open beta
  5. How do you verify AI coding agent output from any tool, not just one?
  6. Use the SonarQube CLI to analyze code and configure AI agents
  7. How to set up Sonar Vortex in VS Code with GitHub Copilot
  8. Set up the SonarQube plugin for GitHub Copilot in VS Code
  9. How to keep your architecture intact when agents write the code
  10. Google Gemini 4 Argon: An evaluation
  11. Gitar Cross-Repo Analysis for breaking contract changes
  12. SonarQube Server 2026.5 on AWS EKS: Installation guide for Enterprise Edition + agentic capabilities
  13. Deterministic vs probabilistic code analysis: a technical primer
  14. Prioritize what's actually exploitable: Vulnerability reachability is now available in SonarQube Advanced Security
  15. Which LLM writes the best code? A 2026 comparison
  16. Sonar's new JS/TS engine: Tracing meaning, not syntax, to hunt down real vulnerabilities
  17. AI coding ROI is a throughput problem, and verification is how you solve it
  18. AI Security Agents: A practical guide
  19. Acting on the AI Shift in Cyber Risk With Prevention at the Codebase Level
  20. SonarQube Cloud now supports bulk import for Azure DevOps and Bitbucket
  21. Sonar joins OpenAI Daybreak Cyber Partner Program, deepening collaboration on agentic security
  22. Sonar Joins OpenAI Daybreak Cyber Partner Program to Advance Frontier Security
  23. Shared standards, independent review: Fin's AI lesson
  24. OpenAI GPT-6.1 Sol: An evaluation
  25. Sonar at AI Engineer New York: Building Confidence in Agentic Software Development
  26. Sonar Vortex is now available on SonarQube Server
  27. How one squad at Sonar reviews AI-generated code: A look at our agentic workflow
  28. The SonarQube Remediation Agent is now available on SonarQube Server
  29. What is inner loop development?
  30. The Acceptance Gap: Why AI-Generated Code Still Fails to Become Shipped Work
  31. How to achieve first-pass quality with AI coding agents
  32. How verification enables smarter model routing for AI coding
  33. What is zero-trust verification in software delivery?
  34. Sonar Extends Agentic Code Governance and Verification to Self-Managed Infrastructure
  35. SonarQube Server 2026.5 LTA | Ship AI Code
  36. The SonarQube Remediation Agent Using Claude Opus 5.5
  37. What Skyscanner's AI rollout Proves About Verifying AI Code
  38. OpenAI GPT-6 Sol: An Evaluation of Code Quality and Security
  39. Claude Opus 5.5 is now available in Gitar
  40. Claude Opus 5.5 | Evaluation Review & Metrics Benchmarks
  41. Rust support in SonarQube Cloud closes the governance gap Clippy leaves open
  42. Vortex vs AGENTS.md: when to use which
  43. How Hunter Agent Adds a New Layer of Assurance
  44. The refactor you could never afford
  45. OpenAI GPT-6 Astra: An Evaluation | AI Code Generation
  46. Automatic analysis for GitLab is now available
  47. Technical Debt Governance To R Language in SonarQube
  48. Sonar Supports OpenAI’s Call for Collective Action on Cyber Defense
  49. Your AI Agent Doesn’t Know Your Codebase Context or Constraints
  50. AGENTS.md is a workaround, not a solution
  51. Beyond Cheap Code | The Next Commit
  52. 7 questions for assessing Cyber Resilience Act codebase readiness
  53. The next State of Code developer survey is open
  54. Four new languages arrive in SonarQube Cloud
  55. Smarter Navigation For AI Coding Agents with Sonar Vortex
  56. Sonar Launches SonarQube Hunter Agent to Catch Logic-based Security Flaws
  57. SonarQube Hunter Agent (GA): AI Agent for Logic Flaw Detection
  58. Bring your own hook: a 5-line PostToolUse template calling sonar analyze agentic
  59. Tokenomics of quality: switch sonar list issues to --format toon for measured token savings
  60. Your secrets are leaking to AI coding agents (and how to stop it)
  61. Claude Opus 5: An evaluation review & metrics benchmarks
  62. Claude Code hooks and how Sonar Vortex verifies AI code inside the loop
  63. Sonar joins the Open Secure AI Alliance
  64. An Evaluation of OpenAI GPT-5.6 Sol & Terra
  65. The return of Shai-Hulud: How SonarQube detects and contains the npm worm
  66. Sonar Signs Open Weights and American AI Leadership Letter
  67. Sonar Signed the Open Weights & American AI Leadership Letter
  68. Migrating to SonarQube Cloud just got a whole lot easier
  69. Scaling AI-assisted development in US financial services without losing control
  70. CLI vs. IDE: How to choose the best environment
  71. Now available: SonarQube plugin for Antigravity
  72. COBOL is back, and AI is writing it. Who's verifying the code?
  73. Introducing SonarQube Server 2026.4
  74. Escape from AppleScript: Even folder names can be user input
  75. SonarQube Cloud: GitHub Enterprise Cloud with Data Residency
  76. AI Assistant Development in Regulated Industries
  77. SonarQube Hunter Agent Beta: AI Code Security Audit
  78. More than just data: The hidden security risks in Jupyter notebooks
  79. Secure Native Plugins for AI Coding Agents
  80. Introducing Sonar Vortex and the SonarQube Remediation Agent
  81. Cut your coding agent's cost with Sonar Vortex
  82. Model-agnostic AI is key to business continuity as models keep changing
  83. What NIST should know when updating the SSDF for AI
  84. Now available: SonarQube plugin for Codex
  85. Now available: SonarQube plugin for Cursor
  86. AI is Writing More of Your Terraform | Code Verification
  87. Announcing Advanced Security for SonarQube Cloud Team plan
  88. Your AI bill is a code quality problem | AI Agents
  89. SonarQube CLI brings multilayered verification to agentic development
  90. Develop with AI: Balancing speed and confidence without becoming a bottleneck
  91. Sonar Leaders Recognized as EY Entrepreneur Of The Year
  92. Claude Fable 5's pricing makes Sonar Context Augmentation a potent cost lever
  93. Loop engineering without verification is just automation
  94. Why Fable 5 Still Needs a Second Loop
  95. Testing Claude Fable 5: Built a Java Module & a Security Flaw
  96. The java.time Bugs That Don’t Throw Exceptions
  97. How SonarQube traces a SQL injection your AI coding agent produced
  98. Now available: SonarQube Agent App in GitHub
  99. Jellyfin RCE | Inconsistent Validation Leads to Argument Injection
  100. Now available: SonarQube plugin for GitHub Copilot CLI
  101. Welcoming Gitar to Sonar: Accelerating AI Code Review
  102. SonarQube Remediation Agent Wins Best Innovation in AI for DevOps
  103. Leader in Technical Debt Management | Gartner® Magic Quadrant™
  104. Mini Shai-Hulud Targets AI Coding Agents
  105. Announcing SonarQube Server 2026.3
  106. SonarQube saves AI agent token usage by up to 8%
  107. Automatically fix code backlog with SonarQube Remediation Agent
  108. Import Your GitLab Group Into SonarQube Cloud
  109. SonarQube architecture management keeps agent-generated code architecturally sound
  110. How SonarQube code coverage reporting works
  111. Why technical debt is still your team's biggest productivity drain
  112. Arbitrary code execution and Claude Code CLI: How Claude executed code before you click 'trust'
  113. GPT-5.5's Biggest Blind Spot | Java Bugs
  114. When linting is not enough
  115. Claude Opus 4.7: An evaluation review & metrics benchmarks
  116. OpenAI GPT-5.5: an evaluation
  117. AI-First Engineering: How Cisco Reached Tech Debt Zero
  118. Now available: SonarQube plugin for Claude Code
  119. BYOK Encryption Guide: Secure Your Code in SonarQube Cloud
  120. Announcing SCIM for automated user management, with SonarQube Cloud
  121. Automatic analysis for Azure DevOps is here
  122. Why your supply chain attack surface is expanding
  123. An Architecture Review of GC-Toolkit with SonarQube
  124. The future of software development is AC/DC
  125. Introducing Base Support for Code Verification & Review
  126. Announcing SonarQube Server 2026.2
  127. Argument injection in YTDLnis via Android intent
  128. SonarQube Wiz Integration: Unified Code-to-Cloud Security
  129. AI Can Write Java 25 Right with SonarQube | AI Coding Assistant
  130. How to Scale Code Quality for AI-Generated Code
  131. Announcing native MCP Server in SonarQube Cloud
  132. Cyber Resilience Act AI Automated Verification
  133. Automate GitHub Project Onboarding with SonarQube Cloud
  134. Code standards for resilient Flask web applications
  135. Mastering FastAPI quality standards with SonarQube
  136. Top 6 takeaways on the future of coding from Sonar Summit 2026
  137. Secure the AI SDLC with SonarQube CLI
  138. Introducing Sonar Context Augmentation | Sonar
  139. SonarQube Agentic Analysis Beta Program
  140. Agent Centric Development Cycle | Agentic SDLC Guide
  141. Code architecture management general availability in SonarQube
  142. How to Use SonarQube for Reviewing AI-Generated Code
  143. Code generation tradeoffs: A comparison of Claude Opus 4.5 and 4.6
  144. Architectural Drift | Architecture Visualization Tool
  145. Claude Code Security Thoughts
  146. Claude Opus 4.6 vs 4.5 | AI Code Quality and Security
  147. Security that works for you: Exploring the new enhancements in SonarQube
  148. Managing the tricky relationship between AI and code security
  149. How SonarQube minimizes false positives in code analysis below 5%
  150. Claude Code SonarQube MCP | Code Review Workflow
  151. PR-to-Green | Automating Quality Gates With Claude Opus | Sonar
  152. Exploring your current architecture with SonarQube
  153. AI Technical Debt | How AI Redefines Developer Toil
  154. Join us at Sonar Summit: A blueprint for the AI-driven SDLC
  155. Code Remediation | SonarQube Remediation Agent Beta
  156. Strategic visibility: Custom dashboards in SonarQube Cloud
  157. The Automation Shift: Why Developers Use AI Tools
  158. Malicious Package Detection | CI/CD Pipeline Security
  159. Announcing SonarQube Server 2026.1 LTA
  160. How to choose your LLM without ruining your Java code
  161. Shadow AI is already writing your code
  162. Modernizing finance: Insights from a platform engineering leader
  163. State of Code Developer Survey | AI Coding Trust Gap

2025 10

  1. Seven indicators your codebase is unmanageable
  2. Introducing architecture in SonarQube
  3. New data on code quality: GPT-5.2 high, Opus 4.5, Gemini 3, and more
  4. Zombie Workflows: A GitHub Actions horror story
  5. A technical look at SonarSweep for GPT-OSS-20B
  6. Code Quality is the Source of Security Issues
  7. Introducing Sonar Foundation Agent
  8. Vibe, then verify: How to navigate the risks of AI-generated code
  9. Deploy SonarQube Server on Kubernetes with Terraform
  10. MISRA C++:2023 Compliance for Auto Safety and Reliability

2024 12

  1. How to Choose an LLM in Software Development
  2. Encoding Differentials: Why Charset Matters
  3. SonarQube for Code Coverage: Using and Understanding
  4. SonarQube 10.6 Release Announcement
  5. mXSS: The Vulnerability Hiding in Your Code
  6. DORA Compliance for Financial Entities
  7. Microservices Security | Path Traversal to RCE in Erxes
  8. __dirname is back in Node.js with ES modules
  9. OpenNMS Vulnerabilities: Securing Code against Attackers’ Unexpected Ways
  10. Joomla: PHP Bug Introduces Multiple XSS Vulnerabilities
  11. SonarQube 10.4 Release Announcement
  12. Lessons learned upgrading to React 18 in SonarQube

2023 1

  1. Blazor

Undated 478

  1. Sonarqube 2025 year in review
  2. Ai coding trust gap
  3. Vulnerability research highlights 2023
  4. Wordpress core unauthenticated blind ssrf
  5. 5 risks of outsourcing software development and how to avoid them
  6. Asp net core web apps
  7. Builders withers and records java s path to immutability
  8. Sonar reaffirms strength of its ISMS by earning the latest iso certification iso27001 2022
  9. Csharp logging
  10. Avocado nightmare 1
  11. Dangerous import sourceforge patches critical code vulnerability
  12. Front end frameworks when bypassing built in sanitization might backfire
  13. Sonar founder olivier gaudin at qcon london 2024
  14. Technical debt s impact on development speed and code quality
  15. Juliet c benchmark and the securestring case
  16. Legacy codebases are a devops issue
  17. New web api v2
  18. Avocado nightmare 2
  19. Sonar power of deeper sast
  20. Pitfalls of desanitization leaking customer data from osticket
  21. Remote code execution in mailcow always sanitize error messages
  22. Sq sc guidance
  23. Sonarqube pci dss 4 0
  24. How sonar helps with nist ssdf
  25. Top security flaws hiding in your code right now and how to fix them
  26. What code issues caused the crowdstrike outage
  27. Ai generated code demands trust but verify approach to software development
  28. Who are you the importance of verifying message origins
  29. Will the new judicial ruling in the vizio lawsuit strengthen the gpl
  30. An open letter to sonar qube users
  31. Apache dubbo consumer risks
  32. Now introducing sonarcloud enterprise and sonarcloud team
  33. Basic http authentication risk uncovering pyspider vulnerabilities
  34. Iso 27001 importance
  35. Ensuring the right usage of java 21 new features
  36. Excessive expansion uncovering critical security vulnerabilities in jenkins
  37. Sonar launches integration program
  38. Government emails at risk critical cross site scripting vulnerability in roundcube webmail
  39. How timely delivery comes from transparent outsourced software development communication
  40. Increase readability with java s pattern matching
  41. Reply to calc the attack chain to compromise mailspring
  42. Securing developer tools unpatched code vulnerabilities in gogs 2
  43. White house emphasizes need for proactive coding practices to counter cyber attacks
  44. Building the foundation for a strong ai future
  45. Sonarqube 10 5 release announcement
  46. Stop nesting ternaries javascript
  47. The red hat ipo experiment to pay maintainers 25 years later
  48. The true cost of bad code in software development
  49. Union intersection difference javascript sets
  50. G2 review static code analysis
  51. Integrating sonarcloud with amazon codecatalyst
  52. Autoconfig cpp code analysis redefined
  53. Xz tidelift and paying the maintainers
  54. Leveraging sonarqube sonarcloud and sonarlint for effective shift left practices
  55. 7 guidelines for federal agencies adopting ai for software development
  56. Choosing sonarqube free tier
  57. 9 more reasons to upgrade to sonarqube server 2025 1 lta
  58. Ai code assurance sonar
  59. Introducing rust in sonarqube
  60. Sonarqube server wins devies award for code testing quality management
  61. Data in danger detecting xss in grafana cve 2025 2703
  62. Announcing sonarqube advanced security
  63. Enhancing team code reviews with ai generated code
  64. Never underestimate csrf why origin reflection is a bad idea
  65. The new sonarqube free tier is here
  66. Sonarqube for ide our journey this year and sneak peek into 2025
  67. New spring framework rules in sonarqube
  68. Scripting outside the box api client security risks part 1
  69. Scripting outside the box api client security risks part 2
  70. Securing developer tools unpatched code vulnerabilities in gogs 1
  71. The ai revolution in software development a new era for developers
  72. Sonarqube server 10 8 release announcement
  73. Sonarqube server 2025 1 lta release announcement
  74. Sonarqube server 2025 release 2 announcement
  75. Seven habits of highly effective ai coding
  76. Better free sonarqube experience
  77. Sonars 17 year anniversary
  78. The power of taint analysis uncovering critical code vulnerability in openapi generator
  79. Driving devops transformation leveling up ci cd with static code analysis
  80. Trust ai contributions to code
  81. Ai codefix sonar
  82. Beware the cookie monster cyberhaven extension vulnerability allowed cookie theft
  83. Caught in the fortinet how attackers can exploit forticlient to compromise organizations 3 3
  84. Diving into jumpserver attackers gateway to internal networks 1 2
  85. Diving into jumpserver attackers gateway to internal networks 2 2
  86. Analysis evidence from sonarqube now available in jfrog apptrust
  87. Sonars commitment to you
  88. Software and ai in 2025 sonar perspectives on what s to come in the new year
  89. Developer survey request
  90. Make a strategic shift to code security
  91. Securing go applications with sonarqube real world examples
  92. Introducing native jira cloud integration for sonarqube cloud
  93. Sonar earns soc 2 type ii compliance
  94. Auto detect and review ai generated code from github copilot
  95. Sonar named leader in g2 spring report
  96. Sonars journey to faster processing lower costs
  97. Sonarqube 10 7 release announcement
  98. Sonarqube server 2025 release 3 announcement
  99. Sonarqube bug detection advances
  100. Protecting your ai code
  101. The tainted voyage uncovering voyagers vulnerabilities
  102. Announcing sonar support for dart elevate your code quality
  103. Vulnerability research highlights 2024
  104. Why code security matters even in hardened environments
  105. The coding personalities of leading llms gpt 5 update
  106. Sonarqube ide announcing support for ai native ides
  107. Caught in the fortinet how attackers can exploit forticlient to compromise organizations 1 3
  108. Pytorch tensors neural networks and autograd
  109. Code security for conversational ai uncovering a zip slip in eddi
  110. Day in the life expanding sonar into latam as a country manager
  111. Introducing scoped organization tokens for sonarqube cloud
  112. The coding personalities of leading llms
  113. Announcing sonarqube mcp server
  114. Double dash double trouble a subtle sql injection flaw
  115. Sonars take software development under americas ai action plan
  116. Llm coding personality traits
  117. Java 23 embrace the new era of code comments
  118. Sonar honored in fast company next big things in tech
  119. Java 22 leverage unnamed variables and patterns
  120. Solving the engineering productivity paradox
  121. How sonar helps achieve a strong soc 2 type ii report
  122. Sonarqube advanced security now available
  123. Sonarqube server 2025 4 faster analysis stronger security better coverage
  124. Sonarqube server 2025 5 release announcement
  125. The state of code maintainability
  126. Supp engr joe ting
  127. The state of code reliability
  128. The state of code security
  129. The state of code languages
  130. Sonarqube server 2025 6
  131. Sonarqube named leader in gigaom application security testing
  132. Caught in the fortinet how attackers can exploit forticlient to compromise organizations 2 3
  133. Checkmk rce chain 1
  134. Cra navigating speed and security with ai coding
  135. Ai codefix is now generally available
  136. Quality assurance in the ai era
  137. Dotcms515 sqli to rce
  138. Sonarqube and port
  139. Sonarqube compare editions
  140. Introducing audit logs in sonarqube cloud enhancing compliance and security
  141. Java24 go deeper on parsing java class files
  142. The inevitable rise of poor code quality in ai accelerated codebases
  143. Ollama remote code execution securing the code that runs llms
  144. Phpbb3 phar deserialization to remote code execution
  145. Securing kotlin apps with sonarqube real world examples
  146. Announcing sonarsweep improving training data quality for coding llms
  147. Python machine learning care quality for developers
  148. How sonarqube enables dora compliance for financial institutions
  149. How reasoning impacts llm coding models
  150. The rules of three five and zero
  151. Vscode security finding new vulnerabilities npm integration
  152. Clean react code sonarqube
  153. Securing github actions with sonarqube real world examples
  154. 5 clean code tips for reducing cognitive complexity
  155. Cleancodetips unlock your coding potential
  156. Green coding with clean code a recap of ecocode challenge paris 2024
  157. Cacti unauthenticated remote code execution
  158. Common typescript issues no 3 unused local variables and functions
  159. Elfinder case study of web file manager vulnerabilities
  160. Exploiting hibernate injections
  161. Grav cms code execution vulnerabilities
  162. Secure xml processor
  163. Linux foundation chat open source clean code
  164. Pandora fms 742 critical code vulnerabilities explained
  165. Pfsense vulnerabilities sonarcloud
  166. Php object injection
  167. Blitzjs prototype pollution
  168. Sonarqube 10 3 release announcement
  169. Sqale the ultimate quality model to assess technical debt
  170. The cloudflare outage and why code quality matters more than ever
  171. Typing javascript without typescript
  172. Openrefine zip slip
  173. Weird python 5 unexpected behaviors in the python interpreter
  174. What is taint analysis
  175. What is clean code
  176. New php exploitation technique
  177. Wordpress image remote code execution
  178. Wordpress object injection vulnerability
  179. Already 158 checkstyle and pmd rules deprecated by sonarqube java rules
  180. The best approach to writing secure cloud native apps
  181. Sustainable clean code
  182. Your guide to clean code in cloud native apps
  183. How to enable your development team to deliver clean code
  184. Sonarcloud finds bugs in high quality python projects
  185. What tools do you need
  186. Is clean code the solution to jupyter notebook code quality
  187. Ismg interview securing applications accelerating devops with clean code
  188. How clean code practices help retain development talent
  189. Power of clean code
  190. Five sonarcloud features for developers that want clean
  191. Reuse in sonar unit test reports generated by other systems
  192. Developing an application can be a complicated task
  193. Securing access to projects in sonar
  194. Security guy interview deeper with sast clean code
  195. 2024 devops predictions from the sonar developer advocate team
  196. Sonar Clean Code for your DevOps workflow
  197. Sonar scoring on the top 3 python sast benchmarks
  198. Sonar streamlines the race to release
  199. Take control of code quality with sonarqube pull request
  200. What mr miyagi can teach about clean code
  201. Sonarqube 99 lts python developers
  202. Sonarqube 99 lts java developers
  203. Sonarqube 99 lts javascript typescript developers
  204. 2024 security predictions from the sonar research team
  205. Vulnerable regular expressions javascript
  206. Sonar s scoring on the top 3 java sast benchmarks
  207. Enhancing software development practices through sonarqube
  208. Benefits typescript in your javascript
  209. Interview with sonar java enthusiasts
  210. Sonarqube 10 2 new standards in code quality and security
  211. Java sast benchmarks why you shouldn t trust them blindly
  212. Patches collisions and root shells a pwn2own adventure
  213. Remote code execution in tutanota desktop due to code flaw
  214. Secrets detection
  215. Security vulnerabilities in casaos
  216. Shifting right for secure platforms and devops
  217. Sonarcloud trial experience
  218. Code vulnerabilities put skiff emails at risk
  219. Sonar s scoring on the top 3 c sast benchmarks
  220. Teamcity vulnerability
  221. Top issues in java projects
  222. Unraveling the costs of bad code in software development
  223. Visual studio code security deep dive into your favorite editor
  224. Vscode security markdown vulnerabilities in extensions
  225. Why i m passionate about static analysis and how i helped make it better
  226. Open source summit 2023
  227. Sonar black hat europe
  228. Hexacon2023 highlights
  229. A twist in the code openmeetings vulnerabilities through unexpected application state
  230. Cncf silver membership
  231. Code vulnerabilities leak emails in proton mail
  232. Enhancing sast detection leveraging benchmarks for measuring progress
  233. Node js test runner
  234. No c static analysis does not have to be painful
  235. Deeper sast uncovers hidden security vulnerabilities
  236. Pimcore one click two security vulnerabilities
  237. Playing dominos with moodles security 1
  238. Playing dominos with moodles security 2
  239. Reflections from offensivecon 2023
  240. Smarter together fostering a culture of collaboration and growth at sonar
  241. Sonar at jsnation 2023 in amsterdam
  242. Sonar and hashicorp partner to deliver clean terraform code good vibes
  243. Sonarlint supports go analysis
  244. Troopers 2023 conference takeaways
  245. Typhooncon 2023 wrap up
  246. Wearedevelopers 2023 what did you miss
  247. Blackhat 2023 overview
  248. Why orms and prepared statements cant always win
  249. Sonarqube 99 lts php developers
  250. Working with multiple code variants in cpp
  251. Es2023 new array copying methods javascript
  252. The new jdk lts is out long live jdk 21
  253. Deeper sast javascript
  254. Announcing sonarqube 10 0
  255. Sonarqube lts 99 extra features part 1
  256. Sonar compiler explorer write clean c code inside your browser
  257. Prestashop remote code execution
  258. Sonarqube lts 99 extra features part 2
  259. International womens day at sonar
  260. Common typescript issues no 1 assignments within sub expressions
  261. Common typescript issues no 2 non empty statements
  262. Empowering weak primitives file truncation to code execution with git
  263. Bad code destroys developer velocity
  264. Security flaws in the php core
  265. Increase velocity with clean as you code
  266. Interview with sonar python developers part 1
  267. Interview with sonar python developers part 2
  268. Limesurvey persistent xss to code execution
  269. Odoo get your content type right or else
  270. Pretalx vulnerabilities how to get accepted at every conference
  271. Reflections from devnexus the largest java conference in the u s a
  272. Shopware php object instantiation to blind xxe
  273. Sonarqube lts upgrade checklist
  274. Sugarcrm security diet multiple vulnerabilities
  275. Breaking into your internal network
  276. The top 5 common typescript issues found by sonarlint
  277. We are sonar
  278. It s a snmp trap gaining code execution on librenms
  279. Gocd vulnerability chain
  280. Openemr 5 0 2 1 command injection vulnerability
  281. Common typescript issues no 5 optional property declarations
  282. Complex drupal pop chain
  283. Cubecart admin authentication bypass
  284. Understanding xxe vulnerabilities
  285. Joomla takeover in 20 seconds with ldap injection cve 2017 14596
  286. Lesser spotted react mistakes what are we even rendering
  287. Mybb stored xss to rce
  288. Openemr remote code execution in your healthcare system
  289. Path traversal vulnerabilities in icinga web
  290. Php supply chain attack on composer
  291. Oxid esales shop software
  292. Roundcube command execution via email
  293. Securing developer tools git integrations
  294. Securing developer tools package managers
  295. Security implications of url parsing differentials
  296. Sonarqube 9 9 lts
  297. Squirrel vm sandbox escape
  298. Use 3rd party plugins at your own risk
  299. Vulnerability research highlights 2021
  300. Vulnerability research highlights 2022
  301. Woocommerce csrf to stored xss
  302. Wordpress design flaw leads to woocommerce rce
  303. Wordpress file delete to code execution
  304. Sonars analysis performance targets
  305. Sonarqube lts 89 extra features
  306. A c and cpp tour of sonarlint for vs code
  307. Gocd pre auth pipeline takeover
  308. Sql injection big tree
  309. Sonar at pwn2own toronto 2022
  310. Clean as you code
  311. Sonarqube 9 8 is here
  312. Our journey toward accessibility
  313. Customizing sonar to fit your needs
  314. Differentials four ways to see whats changed
  315. Etherpad code execution vulnerabilities
  316. Youre 3 minutes away from clean java pull requests
  317. Fully automated promotion pipelines with sonarqube and artifactory
  318. Magento rce via xss
  319. 5 things to consider in performance comparisons
  320. Sonarcloud is entering sast market
  321. Rainloop emails at risk due to code flaw
  322. Doing more with less in uncertain times
  323. Product portals open we want your input
  324. Sonaranalyzer for c the rule engine you want to use
  325. We are adjusting rules severities
  326. Code security advent calendar 2022
  327. What makes checkstyle pmd findbugs and macker complementary
  328. What to expect from analyzing owasp juiceshop
  329. Public response code leaks
  330. Bitbucket path traversal to rce
  331. Code security now theres a tool for developers
  332. Alternative way to configure c and cpp analysis
  333. Disclosing information with a side channel in django
  334. Everythings a component
  335. Moodle remote code execution
  336. Horde webmail account takeover via email
  337. Import issues of your favorite linters in sonarcloud
  338. Mono repository support for bitbucket cloud available for sonarcloud
  339. Mybb remote code execution chain
  340. Php supply chain attack on pear
  341. Regular expressions present challenges
  342. Onedev remote code execution
  343. Sonar to identify security vulnerabilities
  344. Sonarcfamily now supports arm compilers
  345. Sonarsource acquires rips technologies
  346. Supercharge cpp analysis sonarlint for clion
  347. Supporting analysis of net core projects
  348. The hidden flaws of archives in java
  349. Typo3 overriding the database
  350. Using quality profiles in sonar
  351. Water leak changes the game for technical debt management
  352. Executable lines
  353. Zimbra mail stealing clear text credentials via memcache injection
  354. 10 unknown security pitfalls for python
  355. Sonarcloud bitbucket pipe
  356. Broken pipelines for everyone
  357. Code vulnerabilities in nsa application revealed
  358. Effective code review with sonar
  359. False positives our enemies but maybe your friends
  360. Ghost admin takeover
  361. Hack the stack with localstack
  362. Sonarlint quick fixes
  363. Modernizing your code with cpp20
  364. Mono repository support for github and azure devops
  365. Interviewing with sonarsource
  366. Nodebb remote code execution with one shot
  367. Nosql injections in rocket chat
  368. Osclass remote code execution via image file
  369. Review security vulnerabilities with github code scanning
  370. Securing developer tools argument injection in vscode
  371. Sonarqube lts 89 upgrade
  372. Sonarqube 9.7 is here
  373. The neverending story of writing a rule for argument
  374. Three options for pre commit analysis
  375. Unit test execution in sonarqube
  376. Why you shouldnt use build breaker
  377. Wordpress csrf to rce
  378. Wordpress hardening bypass
  379. Easy analysis of visual studio solutions with the sonarqube scanner for msbuild
  380. Breaking the sonarqube analysis with jenkins pipelines
  381. Bugs and vulnerabilities are 1st class citizens in sonarqube quality model along with code smells
  382. Cachet code execution via laravel configuration injection
  383. Checkmk rce chain 2
  384. Checkmk rce chain 3
  385. Code security advent calendar 2020
  386. Code security advent calendar 2021
  387. Cognitive complexity because testability understandability
  388. Crafting regexes to avoid stack overflows
  389. Detect dead code and calls to deprecated methods with sonar squid
  390. Horde webmail rce via email
  391. Interview with a sonarsource developer
  392. Is 80 of code coverage any good
  393. Joomla privilege escalation via sql injection
  394. Sonarlint cloud secret detection
  395. Manage duplicated code with sonar
  396. Remote code execution in melis platform
  397. Setting the right regex boundaries is important
  398. Zimbra pre auth rce via unrar 0day
  399. Why mail is dangerous in php
  400. Wordpress xxe security vulnerability
  401. Wordpress stored xss vulnerability
  402. Wordpress post type privilege escalation
  403. Zabbix case study of unsafe session storage
  404. A look back at kubecon 2022
  405. Bad code costs more than just your money
  406. Beyond the rules of three five and zero
  407. Bits from hexacon 2022
  408. Clean coding quality profile quality gate guidance
  409. Iac code quality
  410. New research from sonar on cost of technical debt
  411. Dependency hell
  412. Developers spend 30 of their time on code maintenance our latest survey results part 3
  413. Discussing cyclomatic complexity
  414. Sonarqube ldap sso
  415. How much time do developers spend actually writing code
  416. Lesser spotted react mistakes hooked on a feeling
  417. Lesser spotted react mistakes zombie methods
  418. Maintainer burnout is real
  419. Sonarqube alm good vibes
  420. Npm moment javascript package
  421. A brief history of package management
  422. Package signing
  423. Securing developer tools a new supply chain attack on php
  424. Spring framework pitfalls
  425. Level up coding skills
  426. Cloud native features in sonarqube 9 9 lts
  427. What i learned from the server side public license
  428. Zimbra webmail compromise via email
  429. 8 ways to build your continous vulnerability management strategy
  430. Ai based coding tools maintainers have some valid concerns
  431. Apache kylin command injection vulnerability
  432. Bit rot the silent killer
  433. Civicrm code execution vulnerability chain explained
  434. Codoforum 4.8.7 critical code vulnerabilities explained
  435. Common typescript issues no 4 don t create and drop objects immediately
  436. Dependency management and your software health
  437. Driveby rce exploit pimcore
  438. Evaluating an ethical license for corporate use
  439. Evaluating the rail license family
  440. Announcing gitar the future of code validation
  441. Gitar is joining sonar
  442. Make your codebase agent ready
  443. How google manages open source
  444. We switched to a 5x cheaper llm our costs went up
  445. Paying maintainers the howto
  446. Smartstorenet malicious message leading to e commerce takeover
  447. State of open source licenses today
  448. The simple magic of package manifests and lockfiles
  449. The state of copyleft licensing
  450. Winning the race against toctou vulnerabilities
  451. Guardrails for a multi agent system
  452. Meet the new project experience
  453. Younger open source maintainers and ai
  454. The missing intelligence layer for ci
  455. Unlocking speed part 2
  456. Designing a lightweight polyglot code transformation language
  457. Gitar achieves soc 2 type 2 compliance strengthening our commitment to security
  458. Automated code refactoring
  459. Gitars early access release at launchdarkly galaxy
  460. Polyglot code refactoring tools
  461. Introducing gitar
  462. Parsing kotlin
  463. How to develop comprehensive testing infrastructure
  464. More feature flags less tech debt
  465. Dead code dead weight the unseen drain on your resources
  466. Gitar your agentic team
  467. Scaling database access in rust
  468. Fantastic build speeds
  469. Automated refactoring at scale
  470. Automating java codebase annotations for null safety
  471. Unlocking speed
  472. How we used our own agentic ai to boost development velocity
  473. Automating code migrations with speed and accuracy
  474. The challenges of parsing kotlin part ii lookahead and ambiguity
  475. Taming null dereferences with pluggable type systems part i
  476. Its not a feature its a bug
  477. Ai code review without the comment spam
  478. We sent our code review ai to moltbook