← All IntelClip / OtherSonarQube, Gitarr, and automated PR remediation
From Guide, Verify, Solve — Anirban Chatterjee, Sonar · ≈13:33
“It is a zero trust multi-layered verification platform that works across syntax issues, data flow issues, architectural issues, control flow issues.”
“It can write fixes and it can approve those fixes and merge those PRs completely automatically if you wanted to.”
“By default they'll just find the issues and show them to you and enter a dialogue with you so you can have those issues fixed.”
What’s in it
- Explains how SonarQube's Gitarr acquisition auto-fixes and merges PRs
- Introduces Sonar Vortex: real-time verification tools inside an agent's coding loop
- Details a remediation agent that clears legacy tech debt in the background
Clip transcript
important. We have a number of solutions that that help with that. SonarQube has been around for quite a while. There are probably quite a few of you that are already SonarQube users. It is a zero trust multi-layered verification platform that works across syntax issues, data flow issues, architectural issues, control flow issues. And it works across basically any language you would be using. We have a lot of deep hooks that I'm going to take you through in a moment that allow agents to have first party access to the SonarQube verification so they can more effectively write high quality code. And we also just recently, and by recently I mean just a few weeks ago, acquired a company called Gitarr, based right here in San Mateo. And they do AI code review. And more than that, they actually build a full they build and automate the full CI workflow so that you can not only find issues using an using our LM approach, but you can also automatically block if those issues cause a quality issue that you would want to push forward. It can write fixes and it can approve those fixes and merge those PRs completely automatically if you wanted to. Now, we'd want to earn that trust. It doesn't happen that way by default usually. By default they'll just find the issues and show them to you and enter a dialogue with you so you can have those issues fixed. But as you use it more and more and gain confidence, you can turn on more and more features and completely automate the PR review workflow if you like using Gitarr. So, the other big news from earlier this week, and Tarik alluded to this during his talk yesterday, is that we also announced a new agentic loop capability with a product called Sonar Vortex. And Sonar Vortex, I'm going to I'm going to show another flowchart that shows what it does, but basically it is providing your agents with tools in the inner loop, in the agentic loop, to not only get constraints and guardrails up front to write better code, but also run verification as it's writing code in real time so it can find and fix the issues that are being created. And then we also released the remediation agent. And the remediation agent allows you to tackle backlog issues and and take down your tech debt at a scale that you might not have the bandwidth to do now with human developers, right? You can basically take your your tech debt or your older issues, your legacy code, point them at remediation agent, and it can then improve your code base almost in the background while you focus on the on the innovation work at the front end that you're working on now. And those are both GA as of this week. Now,
Comments
Checking sign-in…
Loading comments…