@www.sonarsource.com@rss-parrot.net
I'm an automated parrot! I relay a website's RSS feed to the Fediverse. Every time a new post appears in the feed, I toot about it. Follow me to get all new posts in your Mastodon timeline! Brought to you by the RSS Parrot.
---
SonarSource Blog
Site URL: www.sonarsource.com
Feed URL: sonarsource.com/rss/blog.xml
Posts: 20
Followers: 1
Sonar joins the Open Secure AI Alliance to advance AI safety and security
https://www.sonarsource.com/blog/sonar-joins-the-open-secure-ai-alliance/
Published: August 10, 2026 13:00
Sonar joins the Open Secure AI Alliance to help strengthen AI code security through open source collaboration with NVIDIA and other industry leaders.
OpenAI GPT-5.6 Sol and Terra: An evaluation
https://www.sonarsource.com/blog/openai-gpt-5-6-sol-and-terra/
Published: August 6, 2026 13:00
Learn what changed in GPT 5.6 coding performance from correctness gains to new security and concurrency challenges in this detailed evaluation.
The return of Shai-Hulud: How SonarQube detects and contains the npm worm
https://www.sonarsource.com/blog/the-return-of-shai-hulud/
Published: August 5, 2026 13:00
Learn how the Shai-Hulud npm worm spreads and see how SonarQube detects malicious packages before they reach production and steal credentials.
Why Sonar signed the Open Weights and American AI Leadership letter
Published: July 31, 2026 13:00
Discover why Sonar signed the Open Weights and American AI Leadership letter and why openness and verification matter for trusted AI.
Migrating to SonarQube Cloud just got a whole lot easier
https://www.sonarsource.com/blog/migrating-to-sonarqube-cloud-just-got-a-whole-lot-easier/
Published: July 31, 2026 13:00
Introducing the new Sonar Migration Tool to automate moving from SonarQube Server to SonarQube Cloud. Now migrating is easier than ever.
CLI vs. IDE: How to choose the best environment
https://www.sonarsource.com/blog/cli-vs-ide/
Published: July 28, 2026 13:00
Choose the AI coding environment that fits your style and use SonarQube to keep code quality, security, and reliability consistent everywhere.
Scaling AI-assisted development in US financial services without losing control
https://www.sonarsource.com/blog/scaling-ai-assisted-development-in-us-financial-services/
Published: July 28, 2026 13:00
Learn how AI-assisted development helps US financial institutions deliver software faster while maintaining security, quality, and FFIEC-aligned controls.
Now available: SonarQube plugin for Antigravity
https://www.sonarsource.com/blog/now-available-sonarqube-plugin-for-antigravity/
Published: July 27, 2026 13:00
Discover the SonarQube plugin for Antigravity and verify AI generated code with trusted quality security and coverage checks in every session.
COBOL is back, and AI is writing it. Who's verifying the code?
https://www.sonarsource.com/blog/cobol-is-back/
Published: July 23, 2026 13:00
As AI accelerates COBOL modernization, organizations face a new bottleneck. See why trusted verification is essential for every commit.
Escape from AppleScript: Even folder names can be user input
https://www.sonarsource.com/blog/escape-from-applescript/
Published: July 22, 2026 13:00
Learn how an AppleScript injection flaw in OpenInTerminal let crafted folder names execute arbitrary code and how safer APIs prevent similar attacks.
Introducing SonarQube Server 2026.4
https://www.sonarsource.com/blog/introducing-sonarqube-server-2026-4/
Published: July 22, 2026 13:00
Discover SonarQube Server 2026.4 with architecture management, faster scans and stronger verification for agent generated code.
SonarQube Cloud now supports GitHub Enterprise Cloud with data residency (GHE.com)
https://www.sonarsource.com/blog/github-enterprise-cloud-data-residency/
Published: July 14, 2026 13:00
SonarQube Cloud now supports GitHub Enterprise Cloud with data residency (GHE.com). Bind your GHE.com org, bulk-import repos & verify code—no CI needed.
AI Assistant Development in Regulated Industries
https://www.sonarsource.com/blog/ai-regulated-industries-innovation/
Published: July 13, 2026 13:00
Scale secure AI-assisted development in regulated industries. Learn how SonarQube and the AC/DC framework automate code verification and compliance.
Introducing SonarQube Hunter Agent(beta): Catch logic flaws, as you code.
https://www.sonarsource.com/blog/hunter-agent-beta/
Published: July 9, 2026 13:00
Close the security logic gap with SonarQube Hunter Agent. Automate your whitebox code audits to find broken access control & business logic flaws instantly.
More than just data: The hidden security risks in Jupyter notebooks
https://www.sonarsource.com/blog/hidden-security-risks-in-jupyter-notebooks/
Published: July 6, 2026 13:00
Are your data science tools safe? Sonar researchers uncover vulnerabilities leading to code execution in JupyterLab Desktop and PyCharm.
SonarQube plugins bring trusted verification to Claude Code, Copilot, Codex, Cursor, and others in the agentic loop
https://www.sonarsource.com/blog/secure-ai-coding-agent-workflows-plugin/
Published: July 1, 2026 13:00
Eliminate verification debt with plugins & how to secure AI coding agents across Claude, Copilot, and Cursor using SonarQube. Reduce code outages by up to 44%.
Introducing Sonar Vortex and the SonarQube Remediation Agent
https://www.sonarsource.com/blog/introducing-sonar-vortex/
Published: June 30, 2026 13:00
Sonar Vortex guides and verifies AI agent output in real time. SonarQube Remediation Agent is now GA. 92% fewer issues. Up to 36% lower token costs.
Cut your coding agent's cost with Sonar Vortex
https://www.sonarsource.com/blog/cut-your-coding-agents-cost-with-sonar-semantic-code-navigation/
Published: June 30, 2026 13:00
New benchmarks show semantic code graphs helping coding agents find change locations faster and complete updates more efficiently.
Model-agnostic AI is key to business continuity as models keep changing
Published: June 26, 2026 16:00
In a fast-moving AI market, model-agnosticism is discussed as a technical preference. It sounds like an architecture choice: avoid vendor lock-in, keep interfaces flexible, support multiple providers, route tasks based on cost, latency, or capability.
Now available: SonarQube plugin for Cursor
https://www.sonarsource.com/blog/now-available-sonarqube-plugin-for-cursor/
Published: June 24, 2026 16:00
Learn how the SonarQube plugin for Cursor brings code quality coverage insights and security checks directly into agent workflows.