Developer
Sonar Vortex analysis
Sonar Vortex lets AI agents verify code changes with the precision of a full CI scan, in seconds instead of minutes.
Last updated
Was this helpful?
Sonar Vortex lets AI agents verify code changes with the precision of a full CI scan, in seconds instead of minutes.
Sonar Vortex verifies your agent's code inside the agentic loop of the Agent Centric Development Cycle. It performs Sonar's trusted, deterministic analysis right inside your agent, reusing the context from a previous SonarQube Cloud CI analysis to deliver results in record times. This lets AI agents verify code changes with minimal latency while maintaining full CI analysis precision.
During a CI analysis, SonarQube collects and stores your project's context: its dependencies, compiled artifacts, type information, and build configuration, tagged by project key and branch. This is why your project must be analyzed in your CI pipeline on a long-lived branch before you can use Vortex analysis.
When your agent analyzes a file, that context is restored on demand, so the analysis runs with the same inputs as a full CI scan without recomputing any of them.
For most agents, the SonarQube plugin configures hooks, custom instructions, or both, so that Vortex analyzes the files your agent edits without you having to ask.
For details, see the installation instructions for your agent in Installing Vortex.
Sonar Vortex analysis is available for the following languages:
Java
JavaScript
TypeScript
C#
C
C++
Python
Dart
Swift
Kotlin
Go
Objective-C
PHP
PowerShell
Shell
Ruby
Apex
SQL
VB.NET
CSS
HTML
Terraform
Docker
Kubernetes
Groovy
Taint analysis (injection vulnerabilities detection) is also supported for Java, JavaScript, TypeScript, C# and VB.NET. Secrets detection is supported for all files.
Note: If your Java project was analyzed using Automatic analysis, only basic analysis results are returned.
For step-by-step setup instructions, see Installing Vortex.
Last updated
Was this helpful?
Was this helpful?