7 stories
Vulnerability Reachability in SonarQube Advanced Security shows which dependency risks your code can reach. Fix what matters first. See how it works.
Give coding agents your architecture and standards before they write, and check every change as it is produced, inside your own infrastructure.
<ul> <li>13.0 - Raise minimal supported SonarQube Server version to 2025.1. 23 new rules for Java. 5 new rules for JS/TS. 1 new rule for C#. Fewer FPs for PHP and JS/TS.
Shift Left Security, Explained! Shift left is the practice of moving security checks earlier in the software delivery line so issues get caught before code reaches production. SAST (static application security testing) scans code without running it, like CodeQL in a CI pipeline.
Clear technical debt faster with SonarQube Remediation Agent, which generates verified fixes and submits pull requests for developer review.
SonarQube Cloud automatic analysis for GitLab scans code for security issues and bugs with zero configuration and no CI pipeline setup required.
SonarQube adds native R support with centralized quality gates, security analysis, coverage, and auditable governance for regulated enterprises.
Showing 7 of 7 stories
You're all caught up.
Get the top AI news and tools straight to your inbox every week.
Weekly · AI news
Join 15,000+ AI enthusiasts
