Blueprints

Developer Guides & Best Practices

Explore in-depth technical guides and engineering best practices for improving code quality and security with practical tutorials from Sonar.

Category
Category
Blueprint

Find and fix issues with SonarQube Hunter Agent & Remediation Agent

Find logic flaws with Hunter Agent, then fix them with Remediation Agent. Review each pull request and merge with a passing quality gate. Read the guide.

Read article

Blueprint

Gitar Risk Triage and Cross-PR Analysis for sensitive code

Mark sensitive paths high risk, catch two open pull requests that break only when both merge, and auto-approve only low-risk changes.

Read article

Blueprint

Gitar Knowledge for team review conventions

Teach Gitar your coding conventions once in a pull request comment, then apply them to every later review. Follow the blueprint to set it up.

Read article

Blueprint

Set up the SonarQube plugin for GitHub Copilot in VS Code

Learn how to integrate SonarQube with VS Code and GitHub Copilot for project context, secure coding guidance, and deep code analysis.

Read article

Blueprint

How to set up Sonar Vortex in VS Code with GitHub Copilot

Learn how to integrate Sonar Vortex with VS Code and GitHub Copilot for project context, secure coding guidance, and deep code analysis.

Read article

Blueprint

Use the SonarQube CLI to analyze code and configure AI agents

Set up the SonarQube CLI so agents get Sonar Vortex findings after every edit and hardcoded secrets are blocked before the agent or a commit can use them.

Read article