The SonarQube Remediation Agent is now available on SonarQube Server
Blog post from Sonar
SonarQube Remediation Agent, available for Enterprise and Data Center editions of SonarQube Server, automates the generation, verification, and submission of pull requests that address technical debt and selected security issues in C#, Java, JavaScript/TypeScript, and Python. Operating within self-hosted, VPC-restricted, or air-gapped infrastructure, it lets organizations retain control over code residency while choosing approved AI endpoints including AWS Bedrock, Azure AI Foundry, Anthropic, OpenAI, or custom gateways. Users can manually assign issues or schedule recurring remediation jobs, while the agent groups similar fixes by rule and file type, applies them in a sandbox, and reruns Sonar analysis to reject changes that fail to resolve issues or introduce new ones. Developers retain approval control through standard pull-request workflows in GitHub, GitLab, and Azure DevOps, although existing CI and reviewers must still validate tests because the agent does not run test suites.
| Trend | Post Mentions | Total Month Mentions | Posts | Companies | MoM |
|---|---|---|---|---|---|
| Secrets Management | 1 | 2,195 | 470 | 125 | +7% |
Use this post, company, and trend context to find content marketing opportunities, perform competitive analysis, or address product feature gaps via the Plushcap MCP server or the Plushcap API.