BLOG
Sonar's latest blog posts
Building Confidence and Trust in AI-Generated Code
To tackle the accountability and ownership challenge accompanying AI-generated code, we are introducing Sonar AI Code Assurance
Excessive Expansion: Uncovering Critical Security Vulnerabilities in Jenkins
This blog uncovers two vulnerabilities, a Critical and High severity, recently discovered by our research team. Exploiting these vulnerabilities, attackers have the potential to gain Remote Code Execution on a Jenkins instance.
Read article >
Sonar is helping make C# code clean as Microsoft ASP.NET Core Blazor application development grows
Sonar is helping make C# code clean as Microsoft ASP.NET Core Blazor application development grows
Read blog post >
Lessons learned upgrading to React 18 in SonarQube
We share the biggest three issues we faced and the lessons we learned as we upgraded SonarQube to React 18.
Read blog post >
Vulnerability Research Highlights 2023
Our Vulnerability Research team looks back at a great year and summarizes the highlights of 2023.
Read article >
Sonar's Scoring on the Top 3 Python SAST Benchmarks
We're excited to share not only how Sonar performs on Python benchmarks but also the ground truth corresponding to the list of expected and not-so-expected issues.
Read article >
2024 DevOps Predictions from the Sonar Developer Advocate Team
The Developer Advocate team shares their predictions on what they foresee for DevOps trends and hot topics in 2024.
Read article >
2024 Security Predictions from the Sonar Research Team
Reflecting on changes in the industry over the past year, as well as the research we’ve published, the Sonar Vulnerability Research team came together and compiled our thoughts on what we foresee for cybersecurity in 2024.
Read Blog post >
Sonar @ Black Hat Europe!
Last week, several SonarSourcers traveled to London to attend our third Black Hat event of the year. Here's what happened!
Read article >
pfSense Security: Sensing Code Vulnerabilities with SonarCloud
Our Clean Code solution SonarCloud discovered multiple vulnerabilities leading to remote code execution on pfSense CE 2.7.0. Let's see how SonarCloud found them and how it can keep your code clean.
Read blog post >
Spring framework pitfalls
Spring framework offers a lot of help in the development, but we still have to pay attention and make the right use of it in order to avoid some issues.
Read blog post >
Stop nesting ternaries in JavaScript
Nesting ternary operators makes code more complex and less clear. Let's investigate other ways to write conditional expressions.
Read article >