Setting up AI features at the organization level

Some AI-related features are managed at the SonarQube Cloud Organization level. When applicable, features that can be managed by project-level administrators will be noted.

Detecting AI code in your projects

Knowing if your project contains AI-generated code helps raise awareness of code ownership and code security. To help build this awareness, SonarQube Cloud can autodetect AI-generated code in projects on GitHub using GitHub Copilot. If turned on, the feature alerts Instance Admins when project contributors recently used GitHub Copilot so that such projects can be protected with Sonar’s AI Code Assurance.

To activate the Autodetect AI-Generated Code feature for your projects, learn how to Set up AI Code Autodetection.

If you're a GitHub administrator for your organization, you'll have to enable the GitHub Copilot Business app in GitHub. More information is available on the Permissions for AI Autodetect page.

Setting your standards for AI code

Sonar's AI Code Assurance helps you ensure security and code quality within projects containing AI-generated code. By utilizing project labels, custom quality gate certification and marking, and dynamic project badge publishing, you can maintain high standards and confidently assure the quality of your AI projects.

Please see the Standards for AI Code Assurance page for additional tools, such as project labels and custom quality gates, that help you manage your AI projects at the organizational level.

Enabling AI CodeFix

SonarQube Cloud's AI CodeFix is an Early Access feature that uses Open AI’s GPT-4o (recommended) or Anthropic's Claude 3.5 or 3.7 Sonnet to suggest fixes for a select set of rules in Java, JavaScript, TypeScript, Python, C#, and C++. See the Sonar AI CodeFix terms for details about the terms of access. 

To learn more about which rules are eligible for AI CodeFix, please see the list of Rules covered with AI CodeFix.

See the dedicated page on Enabling AI CodeFix, or if you're a developer, find detailed information about getting AI fix suggestions on the Fixing issues page. 

Related pages

• Overview of SonarCloud's AI capabilities
• Learn how to Monitor your projects containing AI code