Close the loop with automated remediation.
When verification fails, Sonar doesn’t just report issues — it resolves them. The SonarQube Remediation Agent generates verified fixes, validates them against the same quality gate that failed, and opens a ready-to-merge pull request. No manual review cycle required. The same workflow applies to existing backlogs: systematically clear accumulated findings at scale.
Automated remediation that closes the loop
When the quality gate fails at sandbox exit, there are two paths forward: manual investigation (slow, expensive, requires context) or automated remediation (fast, verified, no manual review required).
The SonarQube Remediation Agent handles the Solve stage. It reads the failing findings, generates fix candidates, validates each one against the same quality gate, and opens a pull request that’s ready to merge. Not a suggestion — a verified fix.
# SonarQube Remediation Agent will:
1. Analyze all BLOCKER and CRITICAL findings
2. Generate verified fixes for supported issues
3. Validate fix passes quality gate
4. Open a ready-to-review PR
1. GUIDE: mcp__sonar__get_current_architecture mcp__sonar__get_intended_architecture 2. GENERATE: agent writes code within guardrails 3. VERIFY: sonar analyze --file <file> → check quality gate 4. SOLVE: if issues found → Remediation Agent or AI CodeFix 5. REPEAT: until sonar auth status = PASSED
What Solve does
Reads all the coding issues (bugs, vulnerabilities, code smells) from the failed gate
Generates verified fix candidates for each finding
Validates each fix passes the same quality gate
Opens a ready-to-merge PR: no further manual review required