BLOG
Sonar's latest blog posts
Building Confidence and Trust in AI-Generated Code
To tackle the accountability and ownership challenge accompanying AI-generated code, we are introducing Sonar AI Code Assurance
Lessons learned upgrading to React 18 in SonarQube Server
We share the biggest three issues we faced and the lessons we learned as we upgraded SonarQube Server to React 18.
Read blog post >
Vulnerability Research Highlights 2023
Our Vulnerability Research team looks back at a great year and summarizes the highlights of 2023.
Read article >
Sonar's Scoring on the Top 3 Python SAST Benchmarks
We're excited to share not only how Sonar performs on Python benchmarks but also the ground truth corresponding to the list of expected and not-so-expected issues.
Read article >
2024 DevOps Predictions from the Sonar Developer Advocate Team
The Developer Advocate team shares their predictions on what they foresee for DevOps trends and hot topics in 2024.
Read article >
2024 Security Predictions from the Sonar Research Team
Reflecting on changes in the industry over the past year, as well as the research we’ve published, the Sonar Vulnerability Research team came together and compiled our thoughts on what we foresee for cybersecurity in 2024.
Read Blog post >
Sonar @ Black Hat Europe!
Last week, several SonarSourcers traveled to London to attend our third Black Hat event of the year. Here's what happened!
Read article >
pfSense Security: Sensing Code Vulnerabilities with SonarQube Cloud
Our Clean Code solution SonarQube Cloud discovered multiple vulnerabilities leading to remote code execution on pfSense CE 2.7.0. Let's see how SonarQube Cloud found them and how it can keep your code clean.
Read blog post >
Spring framework pitfalls
Spring framework offers a lot of help in the development, but we still have to pay attention and make the right use of it in order to avoid some issues.
Read blog post >
Stop nesting ternaries in JavaScript
Nesting ternary operators makes code more complex and less clear. Let's investigate other ways to write conditional expressions.
Read article >
Unraveling the Costs of Bad Code in Software Development
Not only does bad code cost companies millions of dollars, but countless hours of lost time, productivity, and brand reputation too. By acknowledging the existence of bad code and implementing proactive measures to mitigate its impact, developers and organizations can steer software toward success.
Read blog post >
Sonar keeps your secrets from leaking … unlike that "trusted" friend from grade school
What are hard coded secrets? Why do you care if secrets are hidden in your code? How does Sonar help prevent secrets from getting into your code, entering your repository, and leaking out from your CI/CD pipeline? In this post, Product Manager, Alex Gigleux, answers all your questions.
Read blog post >