Sonar

Trusted by 7M developers, our @SonarQube solutions (Server, Cloud, for IDE) cover your code quality and security needs –AI-generated or written by developers 🚀

[Sonar @SonarSource]

@NasdaqExchange 🚀 🚀 🚀

[John Crickett @johncrickett]

AI isn't killing software engineering.

Not even close. Instead it's exposing how much we've confused software engineering with writing code.

Yes, coding is a fundamentally important part of the job, but it's only one part.

Understanding what users need, figuring out what's worth building, making architectural decisions, and delivering software that actually solves problems are all part of software engineering.

AI might change who, or what, writes the code. But that doesn't make those other skills less important.

If anything, it makes them more important. In fact they're critical to stopping us spending a lot of time and effort building the wrong things.

This clip is from a chat I had with Tom Howlett (@leantomato) on The Next Commit podcast.

We talked about how AI agents are changing software engineering, why developers still need strong fundamentals, and the growing importance of human skills, engineering judgement, and taking responsibility for the software we ship.

You can listen to the full episode here: https://t.co/WFZyPBPADU

[Sonar @SonarSource]

Supply chain attacks are designed to cascade.

One weak link can reach thousands of downstream builds, and the attack surface is still expanding. Our blog covers what changed and the Sonar capabilities built to close the new gaps.

Read more:
https://t.co/Z1AsReX30K

[Sonar @SonarSource]

The SonarQube plugin for Devin CLI is here 🎉

It brings Sonar's verification into Devin sessions, so the code Devin writes is checked against your standards & most issues get fixed before the PR, making review faster.

Read how it works ⬇️ w/ @cognition
https://t.co/37gfW6uMxe

[Sonar @SonarSource]

As agents write more of the code, where does a developer's judgment come from?

Coding Challenges founder @johncrickett tells @leantomato how to build it, from staying in the code to keeping the struggle that teaches, this week on The Next Commit.

Listen: https://t.co/1jslYNwg9Z

[Sonar @SonarSource]

How do you modernize legacy code without adding technical debt, apply governance across teams and tools, and win back agentic ROI lost to rework?

That's the focus of Sonar's global partnership with @ltm_ofcl, pairing SonarQube with LTM's engineers.

https://t.co/dnVYZP5yyP

[Sonar @SonarSource]

A feature can meet its specification and still fail to help anyone.

Built correctly isn't the same as worth building. @slashBene, co-CEO at hackers&wizards, joins @leantomato on The Next Commit to discuss why.

Watch: https://t.co/5B1Uqn19gw
Deep dive: https://t.co/1fTrkSEjGd

[Cassidy @cassidoo]

I finally watched Tariq Shaukat's keynote from AI Engineer World Fair, and there's one line that I've been noodling on: "code is abundant, confidence is scarce."

We're writing code faster than ever before, but we're not necessarily that much faster at shipping it. Agentic coding has pushed lines of code up 2,450% and commits up 240%, but production releases are only up 30%. The bottlenecks still exist later in the SDLC.

Human reviews aren't the silver bullet (even though I admittedly wish they were) to fix this. The research in the talk shows reviewers agree with AI 93% of the time when it's right, and 80% of the time when it's wrong. Which is... not good enough. LLM-as-a-judge has the same problem, in that identical prompts get different verdicts 7-17% of the time, and asking "are you sure?" flips the answer 7-34% of the time.

There's a confidence formula framing that I like, which is intent × guide rails × verification × evidence.

If any one of those is zero, the whole thing is zero. Verification is deterministic where it can be.

That's what @SonarSource is pitching here, Sonar Vortex keeping agents anchored on intent, and SonarQube as the deterministic check on the other side.

If your team is shipping agent-written code faster than you can review it, worth a watch:

https://t.co/97ZkOTpkUk

[Sonar @SonarSource]

New York is always a good idea.

See you soon, NYC 👀🚀

[Sonar @SonarSource]

When an agent gets it wrong, do you fix the code or the process behind it?

@slashBene, co-CEO at hackers&wizards, wants engineers to fix the process so the mistake doesn't come back. Hear why on this week's ep of The Next Commit w/ @leantomato.

Listen: https://t.co/8prGUSHXl1

[Sonar @SonarSource]

AI generates huge amounts of code, but code creation is not code confidence.

@FastCompany explores how Sonar is helping companies build confidence in their software, & why Sonar is one of its Next Big Things in Tech, in a Q&A w/ Sonar CEO @tariqshaukat: https://t.co/cH9eocHTN3

[AI.Engineer @ CODE @aiDotEngineer]

Agents can write code all day. Someone still has to review it.

Andrew Finch of @SonarSource is speaking at AIE CODE.

Thank you to Sonar, a Platinum Sponsor.

November 10 to 12, San Francisco.
Apply: https://t.co/N46r5deFR1

[Kunal Kushwaha @kunalstwt]

One week to go until the Cloud Native Hackathon in Salt Lake City, and things are moving fast.

250 people have registered in the last 48 hours alone 🔥

Next Monday, November 9, we’re spending the day building with Kelsey Hightower and an amazing group of judges.

The best project takes home an NVIDIA DGX Spark, there’s $20,000 in cash prizes on top, and everyone who shows up gets a free Keychron keyboard.

It’s free to join, but we only have limited spots left. Grab yours at https://t.co/aqpxBiPbTC

Sponsored by @dash0hq, @RadarK8s, @SonarSource and @elastic search 💙

[Fast Company @FastCompany]

When ​AI agents write ​your code, verification and governance matter more than ever. ​ Here's how @SonarSource earned its place among Fast Company's 2026 Next Big Things in Tech​,​ by ​helping companies​ ship agentic code with confidence​​​​​​.

[Sonar @SonarSource]

Small pull requests are easier to understand, yet a steady stream asks a lot of a team's attention.

Simon Vane, Staff Engineer at @MKOPAGlobal joins @leantomato on The Next Commit to talk contextual AI review.

Listen: https://t.co/A7aww60otE
Read: https://t.co/1TZAHokMcG

[Sonar @SonarSource]

4 for 4 on bulk import support ✅

Administrators can now import every repository in an @AzureDevOps or @Bitbucket organization into SonarQube Cloud in a single action, matching the bulk import experience already available for @github and @gitlab.

https://t.co/0zWzP8OmMG

[Manish Kapur @kapmani]

I think a tsunami of security vulnerabilities is coming.

CVEs published per month:
- Jan 2026: 4,302
- Sep 2026: 14,934

That’s one every 2.9 minutes, and 3.5x September 2025.

Q3 alone had more CVEs than any full year before 2024. From January through September, 72,802 CVEs were published. That’s already 51% more than all of 2025.

With so many new vulnerabilities, a lot of your exposure comes from code you didn’t write: open source dependencies, build pipelines and AI tools. I wrote a blog post covering how @SonarSource can help you reduce supply chain risk:
https://t.co/guvShtUa4D

[Sonar @SonarSource]

Say hello to the newest member of the Sonar team, Dr. David Knott!

David joins Sonar as a Senior Advisor, bringing his experience as former CTO of the UK Government and Chief Architect at HSBC to help guide our next phase of growth.

Details: https://t.co/j5kBReGvay

[AI.Engineer @ CODE @aiDotEngineer]

A big thank you to our AIE CODE Platinum sponsors:

@awscloud, @cognition (Devin), @databricks, @ExaAILabs, @FactoryAI and @SonarSource.

You help bring the AI engineering community together.

Nov 10–12, San Francisco.
Apply: https://t.co/N46r5deFR1

[Sonar @SonarSource]

Killian wishes more people were checking their agent's code before it reaches production. We agree.

That's where Sonar Vortex comes in 👀 🌀

Learn more about verifying agentic code with Sonar Vortex: https://t.co/2R1aQLIpkF

[Sonar @SonarSource]

Agents tend to do better work on well-designed code 💡 Changes land more easily, and existing behavior holds.

Simon Vane, Staff Engineer at @MKOPAGlobal, joins @leantomato on The Next Commit to explore the foundation agents need for success.

Listen: https://t.co/wwjCoSs8AZ