SonarQube

Sonar is a software code-quality and code-security company whose products provide automated code review and verification from the IDE through CI/CD pipelines. Its platform uses a Guide–Verify–Solve model: teams set coding context and constraints, review code for reliability, security, quality, and compliance through algorithmic and agentic verification, and generate fixes for detected issues and technical debt. It also provides agentic CI verification and background code-maintenance loops intended to validate AI-generated code and improve the operating practices, tooling, and roles used by engineering teams adopting AI agents.

Gitar is Sonar's AI-powered code-change verification agent for reviewing pull requests and automating validation. It produces high-signal code review findings, diagnoses CI failures by separating real breakage from flaky tests and infrastructure noise, de-duplicates failures, and identifies root causes. Under rules defined in plain language and versioned in the repository, Gitar can generate fixes, commit them to the branch, and iterate until CI passes. Teams can specify what it may fix, what it must escalate, what blocks a merge, and whether it can approve and merge changes. It integrates with GitHub, GitLab, Bitbucket, Azure DevOps, and CircleCI. Its analytics dashboards report metrics such as time to merge, review cycles, CI failure patterns, flake rates, and fix rates. Sonar states that Gitar does not retain source code, use customer code to train models, or retain data through its LLM providers.

An AI-powered code-review platform that automatically analyzes pull requests in repositories hosted on platforms such as GitHub and GitLab, producing review comments, summaries, and suggestions within source-control and code-hosting workflows.

Project Rosetta Stone is a workshop and comparison repository for instrumenting the same AI agent with different agent frameworks and observability platforms. Its Wonder Toys application is a chat-to-purchase toy-store assistant with semantic vector search, product browsing, purchasing, order tracking, and cancellation; framework variants are provided without observability, with Arize Phoenix instrumentation, and with Arize AX instrumentation. Readers can compare the instrumentation footprint by diffing each framework's baseline and instrumented directories, then run the applications locally to send traces to Phoenix or AX. The repository also includes shared synthetic requests, evaluation harnesses, voice testing for the OpenAI voice tier, product data, and instructions for adding frameworks and running the end-to-end workflows; it is licensed under MIT.