Permissions for AI autodetect
Setting up AI autodetection in SonarQube Server requires that a DevOps platform administrator set the correct permission level in your AI-powered web service.
To activate AI Code Autodetection, a SonarQube Server Instance Admin must first check that the feature is enabled.
Then, a DevOps platform administrator must set the correct permission level in your AI-powered web service. For specific instructions in your DevOps platform, please refer to the applicable section below.
GitHub Copilot Business
When a SonarQube Server administrator activates AI Code Autodetection for a instance of SonarQube Server, GitHub Copilot Business app administrators must enable the GitHub integration. See the Permissions for AI autodetect article, for the complete details. Once enabling the integration in GitHub, the GitHub Copilot Business app administrator will receive an will receive an email notification to confirm the SonarQube App’s permission request.
With access to your GitHub Copilot Business App, SonarQube Server can evaluate users’ GitHub Copilot usage and code contribution patterns to identify potential AI-generated code. If there is a match in user data, SonarQube Server will display the AI code detected status on the project’s Overview and Project Information pages. The GitHub organization connected to Copilot should match the organization bound to SonarQube Server.
SonarQube Server does not retroactively check older code from previous commits. In addition, projects that have the applied by a quality standards admin will be excluded from automatic AI code detection. See theLabeling projects with AI code page for details.
If the GitHub Copilot Business and Enterprise account administrator chooses to ignore the request, Sonar’s AI Code Autodetection will be turned on, but not be activated.
Related pages
Overview of AI capabilities
Learn how toSet your AI standards
Learn about AI CodeFix to get AI-generated fix suggestions
Last updated
Was this helpful?