Standards for AI Code Assurance
On this page
Sonar's AI Code Assurance helps you ensure security and code quality within projects containing AI-generated code. By utilizing project labels, custom quality gate certification and marking, and dynamic project badge publishing, you can maintain high standards and confidently assure the quality of your AI projects.
Assuring your AI code
SonarQube Server recognizes that AI-generated code should be monitored with additional quality standards. Recommended checks include high standards to reduce code complexity, remove bugs, and eliminate injection vulnerabilities. SonarQube’s AI Code Assurance features bring confidence that your AI-generated code is being reviewed to avoid any accountability crisis.
These objectives are achieved with three features that allow Quality Standard administrators to qualify projects as AI Code Assured:
- Label your project as containing AI code
- Apply a quality gate for AI Code Assurance
- Publish an AI Code Assurance badge externally to your websites to Monitor projects containing AI code.
The full details are outlined on the Setting your quality standards for AI Code Assurance page.
Quality gates for AI code
Quality gates designed for projects containing AI-generated code are an important part of the quality control and review process. The Managing quality gates for AI code page outlines the important control measures that help protect against the buildup of new issues as you leverage AI assistance in your coding process, and adds an extra layer of protection helps catch vulnerabilities and critical reliability issues that could be lurking in your project.
In SonarQube Server version 10.7, the Sonar way quality gate was enforced on projects marked as containing AI Code. If you're migrating from this version, projects using this quality gate will lose their AI Code Assurance status until a new, AI-qualified quality gate is applied.
Monitoring your projects
If you've completed the steps above to apply AI Code Assured quality gates to your projects, a series of external badges are available to publish on your websites. For more details, please see the Monitoring projects with AI code page.
Related pages
- Overview of AI capabilities
- Autodetecting AI-generated code
- Learning about AI CodeFix to get AI-generated fix suggestions
Was this page helpful?
© 2008-2025 SonarSource SA. All rights reserved. SONAR, SONARSOURCE, SONARQUBE, and CLEAN AS YOU CODE are trademarks of SonarSource SA.
