| AI-Generated Code Demands ‘Trust, But Verify’ Approach to Software Development |
Tariq Shaukat |
Apr 11, 2024 |
1389 |
- |
| C# Logging Best Practices with .NET |
Denis Troller |
Apr 10, 2024 |
2561 |
- |
| Apache Dubbo Consumer Risks: The Road Not Taken |
Yaniv Nizry |
Apr 01, 2024 |
1633 |
- |
| Ensuring the right usage of Java 21 new features |
Jonathan Vila |
Apr 01, 2024 |
1510 |
- |
| Technical debt’s impact on development speed and code quality |
Bianka Banova |
Mar 27, 2024 |
831 |
- |
| DORA Compliance for Financial Entities: leveraging Sonar solutions to ensure code security by design |
Adam Surdy |
Mar 22, 2024 |
933 |
- |
| Micro Services, Major Headaches: Detecting Vulnerabilities in Erxes' Microservices |
Paul Gerste |
Mar 21, 2024 |
2210 |
- |
| __dirname is back in Node.js with ES modules |
Phil Nash |
Mar 21, 2024 |
911 |
3 |
| #CleanCodeTips: Unlock Your Coding Potential |
Peter McKee |
Mar 12, 2024 |
830 |
- |
| Reply to calc: The Attack Chain to Compromise Mailspring |
Yaniv Nizry |
Mar 11, 2024 |
1684 |
- |
| Are You Ready For PCI DSS 4.0? |
Robert Curlee |
Mar 11, 2024 |
949 |
- |
| Increase readability with Java's Pattern Matching |
Jonathan Vila |
Mar 04, 2024 |
638 |
1 |
| OpenNMS Vulnerabilities: Securing Code against Attackers’ Unexpected Ways |
Stefan Schiller |
Feb 29, 2024 |
1945 |
- |
| White House emphasizes need for proactive coding practices to counter cyber attacks |
Harry Wang |
Feb 29, 2024 |
782 |
- |
| Sonar Reaffirms Strength of its Information Security Management Systems by Earning The Latest ISO Certification, ISO27001:2022 |
Andrea Malagodi |
Feb 27, 2024 |
349 |
- |
| How timely delivery comes from transparent outsourced software development communication |
Liz Ryan |
Feb 27, 2024 |
1000 |
- |
| Builders, Withers, and Records - Java’s path to immutability |
Jonathan Vila |
Feb 21, 2024 |
927 |
- |
| Joomla: PHP Bug Introduces Multiple XSS Vulnerabilities |
Stefan Schiller |
Feb 20, 2024 |
1259 |
- |
| Union, intersection, difference, and more are coming to JavaScript Sets |
Phil Nash |
Feb 15, 2024 |
1280 |
115 |
| Write cleaner React code with SonarQube 10.4 |
Phil Nash |
Feb 13, 2024 |
1163 |
- |
| Introducing the new Sonar Web API V2 |
Aurélien Poscia |
Feb 08, 2024 |
935 |
- |
| Building the foundation for a strong AI future |
Harry Wang |
Feb 08, 2024 |
466 |
- |
| 5 Risks of Outsourcing Software Development and How to Avoid Them |
Liz Ryan |
Feb 07, 2024 |
1281 |
- |
| SonarQube 10.4 Release Announcement |
Robert Curlee |
Feb 06, 2024 |
665 |
- |
| Pitfalls of Desanitization: Leaking Customer Data from osTicket |
Oskar Zeino-Mahmalat |
Feb 06, 2024 |
1991 |
- |
| Juliet C# Benchmark and the SecureString case |
Gaëtan Ferry |
Feb 01, 2024 |
1413 |
- |
| Who are you? The Importance of Verifying Message Origins |
Stefan Schiller |
Jan 28, 2024 |
1203 |
- |
| Excessive Expansion: Uncovering Critical Security Vulnerabilities in Jenkins |
Yaniv Nizry |
Jan 24, 2024 |
1464 |
1 |
| Sonar is helping make C# code clean as Microsoft ASP.NET Core Blazor application development grows |
Denis Troller |
Jan 23, 2024 |
963 |
- |
| Lessons learned upgrading to React 18 in SonarQube |
Phil Nash |
Jan 17, 2024 |
1212 |
- |
| Vulnerability Research Highlights 2023 |
Stefan Schiller |
Jan 03, 2024 |
1572 |
- |
| Green Coding with Clean Code - A Recap of ecoCode Challenge Paris 2024 |
Fabrice Bellingard |
Jun 20, 2024 |
542 |
- |
| Re-moo-te Code Execution in Mailcow: Always Sanitize Error Messages |
Paul Gerste |
Jun 17, 2024 |
1978 |
- |
| Integrating SonarCloud with Amazon CodeCatalyst for Code Analysis |
Manish Kapur |
Jun 10, 2024 |
668 |
- |
| An Open Letter to Sonar[Qube] Users |
Lynne Doherty |
Jun 06, 2024 |
558 |
- |
| mXSS: The Vulnerability Hiding in Your Code |
Yaniv Nizry |
May 27, 2024 |
2965 |
1 |
| Sonar Named Leader in G2 Spring Report |
Zoe Bell |
May 20, 2024 |
331 |
- |
| Find Deeply Hidden Security Vulnerabilities with Deeper SAST by Sonar |
Johannes Dahse |
May 15, 2024 |
1054 |
- |
| Parallel Code Security: The Challenge of Concurrency |
Stefan Schiller |
May 14, 2024 |
2946 |
- |
| Code Interoperability: The Hazards of Technological Variety |
Stefan Schiller |
May 07, 2024 |
3428 |
- |
| Leveraging SonarQube, SonarCloud, and SonarLint for Effective Shift Left Practices |
Manish Kapur |
May 01, 2024 |
1240 |
- |
| Driving DevOps Transformation: Leveling Up CI/CD with Static Code Analysis |
Tony Graham |
Apr 30, 2024 |
876 |
- |
| Legacy Codebases are a DevOps Issue |
Ben Dechrai |
Apr 18, 2024 |
1346 |
- |
| SonarQube 10.5 Release Announcement |
Robert Curlee |
Apr 16, 2024 |
415 |
- |
| Dangerous Import: SourceForge Patches Critical Code Vulnerability |
Stefan Schiller |
Apr 16, 2024 |
1192 |
- |
| Sonar Named a Leader in G2 Grid Report for Sixteenth Consecutive Quarter |
Zoe Bell |
Jul 23, 2024 |
420 |
- |
| AutoConfig: C++ Code Analysis Redefined |
Abbas Sabra |
Jul 17, 2024 |
1143 |
- |
| SonarQube 10.6 Release Announcement |
Robert Curlee |
Jun 25, 2024 |
601 |
- |
| What Code Issues Caused the CrowdStrike Outage? |
Sonar |
Jul 25, 2024 |
1229 |
- |
| Securing Developer Tools: Unpatched Code Vulnerabilities in Gogs (2/2) |
Thomas Chauchefoin, Paul Gerste |
Jul 09, 2024 |
2344 |
- |
| Government Emails at Risk: Critical Cross-Site Scripting Vulnerability in Roundcube Webmail |
Oskar Zeino-Mahmalat |
Aug 05, 2024 |
580 |
- |
| Using and Understanding SonarQube for Code Coverage |
Manish Kapur |
Jul 08, 2024 |
1093 |
- |
| [ON DEMAND] Watch Sonar Founder Olivier Gaudin Break Down the Need for and Impact of Clean Code at QCon London 2024 |
Arden Gonzales |
Aug 15, 2024 |
743 |
- |
| Encoding Differentials: Why Charset Matters |
Stefan Schiller |
Jul 15, 2024 |
2136 |
3 |
| Now Introducing, SonarCloud Enterprise and SonarCloud Team |
Andrew Osborne |
Jul 31, 2024 |
692 |
- |
| The True Cost of Bad Code in Software Development |
Liz Ryan |
Jun 27, 2024 |
678 |
- |
| Deliver high-quality ASP.NET Core web apps with Sonar. |
Denis Troller |
Jul 24, 2024 |
1121 |
- |
| Front-End Frameworks: When Bypassing Built-in Sanitization Might Backfire |
Stefan Schiller |
Aug 13, 2024 |
1357 |
- |
| How Sonar Helps Meeting NIST SSDF Code Security Requirements |
Robert Curlee |
Aug 07, 2024 |
679 |
- |
| Securing Developer Tools: Unpatched Code Vulnerabilities in Gogs (1/2) |
Thomas Chauchefoin, Paul Gerste |
Jul 02, 2024 |
2279 |
2 |
| How to Choose an LLM in Software Development |
Manish Kapur |
Aug 27, 2024 |
1687 |
- |
| Basic HTTP Authentication Risk: Uncovering pyspider Vulnerabilities |
Yaniv Nizry |
Sep 02, 2024 |
1268 |
- |
| How can Sonar help with ISO 27001 compliance? |
Mark Clements |
Sep 03, 2024 |
684 |
- |
| Top security flaws hiding in your code - and how to fix them |
Jonathan Vila |
Sep 09, 2024 |
1311 |
- |
| Instant Code Fixes at Your Fingertips: Announcing Sonar AI CodeFix |
Manish Kapur |
Oct 03, 2024 |
751 |
- |
| Building Confidence and Trust in AI-Generated Code |
Manish Kapur |
Oct 03, 2024 |
930 |
- |
| SonarQube 10.7 Release Announcement |
Robert Curlee |
Oct 04, 2024 |
759 |
- |
| Announcing Sonar's Support for Dart: Elevate Your Code Quality |
Andrew Osborne |
Oct 07, 2024 |
710 |
- |
| Why Code Security Matters - Even in Hardened Environments |
Stefan Schiller |
Oct 08, 2024 |
2681 |
1 |
| The Power of Taint Analysis: Uncovering Critical Code Vulnerability in OpenAPI Generator |
Stefan Schiller |
Oct 22, 2024 |
1401 |
- |
| Sanitize Client-Side: Why Server-Side HTML Sanitization is Doomed to Fail |
Yaniv Nizry |
Nov 05, 2024 |
1835 |
2 |
| Our commitment to you – and an update on severity ratings for software quality |
Tom Howlett |
Nov 13, 2024 |
708 |
- |
| How to Trust AI Contributions to Your Codebase |
Anirban Chatterjee |
Nov 14, 2024 |
1319 |
- |
| A better (free) SonarQube experience |
Fabrice Bellingard |
Nov 19, 2024 |
717 |
- |
| The new SonarQube free tier is here - get started today! |
Andrew Osborne |
Dec 05, 2024 |
850 |
- |
| SonarQube Server 10.8 Release Announcement |
Robert Curlee |
Dec 04, 2024 |
641 |
- |
| Software and AI in 2025 — Sonar Perspectives on What’s to Come in the New Year |
Katie Hyman |
Dec 11, 2024 |
1021 |
- |
| Never Underestimate CSRF: Why Origin Reflection is a Bad Idea |
Paul Gerste |
Dec 10, 2024 |
1782 |
- |
| Announcing Sonar's Support for Dart: Elevate Your Code Quality |
Andrew Osborne |
Oct 07, 2024 |
826 |
- |
| Vulnerability Research Highlights 2024 |
Paul Gerste |
Jan 09, 2025 |
1353 |
- |
| SonarQube for IDE: Our journey this year, and sneak peek into 2025 |
Farah Bouassida |
Jan 10, 2025 |
871 |
- |
| SonarQube Server 2025.1 LTA Release Announcement |
Robert Curlee |
Jan 23, 2025 |
902 |
- |