Monitoring your projects containing AI code

Monitoring projects containing AI code is the final step in ensuring that your projects in SonarQube Cloud meet your AI Code Assurance standards.

Sonar's AI Code Assurance helps you ensure security and code quality within projects containing AI-generated code. By utilizing project labels, custom quality gate certification and marking, and dynamic project badge publishing, you can maintain high standards and confidently assure the quality of your AI projects.

By now, you've likely completed the first two steps to qualify your projects as AI Code Assured:

1. Label your project as containing AI code
2. Apply a quality gate for AI Code Assurance

You should be able to see your projects’ AI Code Assurance status on the Projects, main-branch Overview, and Project Information pages.

With those objectives in place, you can publish dynamic AI Code Assurance badges to your external websites to monitor projects.

Understanding your AI Code Assurance labels

Your project Overview and Project Information pages show labels highlighting the state of AI Code Assurance. These labels provide a quick visual reference of your project's state of AI Code Assurance status, including the state of containing AI-generated code and the status of your project's quality gate.

Internal AI Code Assurance status

Here’s what each AI Code Assurance label represents, and what you can do to update the status.

: Defined by a Project Admin that the project contains AI-generated code. 

• Go to Project settings > AI-generated code or use the API to activate and deactivate this label. 

AI Code Assurance passed: Your code is passing the quality gate qualified for AI-generated code. 

• Run a new analysis to check your code against the quality gate.

 AI Code Assurance failed: Your code is not passing the quality gate qualified for AI-generated code. 

• Address the issues in your code to meet the standards defined by your quality gate.

 AI Code Assurance is on: Your code uses a quality gate qualified for AI-generated code and the quality gate status has not been computed. 

• Run a new analysis to update the status of your quality gate.

 AI Code Assurance is off: Your code is not marked as containing AI code or is not using a quality gate qualified for AI-generated code. 

• Check that your project is marked as Contains AI-Generated Code,
• assign a quality gate qualified for AI-generated code,
• then run an analysis to update the quality gate status.

Using the AI Code Assurance badge

In Step 3, add a dynamic AI Code Assurance badge to monitor the current status of your AI Code Assured projects on your web pages. This badge works like other SonarQube external badges and can be used by any team member with project access. 

See the documentation on Using a project badge for instructions on how to publish SonarQube badges externally.

External AI Code Assurance badges

Here’s what each AI Code Assurance badge represents, and what you should do to update the status.

: Your code is passing the quality gate qualified for AI-generated code. 

• Run a new analysis to check your code against the quality gate.

: Your code is not passing the quality gate qualified for AI-generated code. 

• Address the issues in your code to meet the standards defined by your quality gate.

: Your code is using a quality gate qualified for AI-generated code and the quality gate status has not been computed. 

• Run a new analysis to update the status of your quality gate.

: Your code is not using a quality gate qualified for AI-generated code. 

• Assign a quality gate qualified for AI-generated code and run an analysis to update the quality gate status.

Related pages

• Overview of AI capabilities
• Overview of AI features for instance administration
  • Setting up AI code autodetection
• Overview of AI features at the project level
  • Setting up AI Code Assurance has information about using the API for AI Code Assurance.