With AI features
Use SonarQube Cloud's AI features, including the Remediation Agent, AI CodeFix, and the Hunter Agent, to find and fix issues in your code.
SonarQube Cloud offers AI features for working through your issues: the SonarQube Remediation Agent, which proposes fixes as pull requests; AI CodeFix, which generates a fix for a single issue on demand; and the SonarQube Hunter Agent, which raises complex, logic-level vulnerabilities as issues you triage. These are part of Sonar's Agent Centric Development Cycle.
Remediation Agent
The SonarQube Remediation Agent runs an independent review and analysis, then proposes fixes in a new pull request for you to review. It works on issues found in your pull requests and on the backlog of issues in your main branch. To learn how the agent works, see Remediation Agent. To enable it for your organization, see Administer the Remediation Agent.
The Remediation Agent is part of Sonar Agent Essentials, a product that requires a separate subscription to your SonarQube Cloud Team (annual) or Enterprise plan.
Agent activity
Every run of the SonarQube Remediation Agent is recorded in one place, whichever flow triggered it. To review the agent's activity, go to Your SonarQube Cloud Project > Agent activity. From there you'll see the agent's:
Status/duration: Time the agent spent to generate fixes.
Started: When the agent is triggered by the Automated backlog remediation schedule, by selecting Fix with Agent on the Issues page, or by selecting Fix automatically in the Quality Gate failed comment on a pull request.
Source: Where the agent is working. Backlog fixes means that the agent is working on issues found in your main branch; or a link will be provided to the branch where you first called the agent.
Outcome: A link to the agent's PR.
PRs made for Backlog fixes will be on your
mainbranch. See Backlog fix suggestions for details.PRs made for Pull request fixes will be made on your branch. See Engage with the agent for details.
AI CodeFix
AI CodeFix generates a fix suggestion for an individual issue, which you review in SonarQube Cloud or open in your IDE. See Getting AI-generated fix suggestions to use it, and AI CodeFix to learn how it works.
Hunter Agent
The SonarQube Hunter Agent runs a deep AI-powered analysis to find vulnerabilities that require human-like understanding of the code, such as broken access control and business-logic flaws, then raises them as issues you triage like any other. To learn how the agent works, see Hunter Agent. To enable it for your organization, see Hunter Agent (administration).
The Hunter Agent is a product that requires a separate subscription to your SonarQube Cloud Enterprise plan.
Last updated
Was this helpful?