Tool
SonarQube SAST/SCA is Sonar's pattern-based static-analysis and software-composition-analysis layer for finding code defects and security issues. In the described setup, it runs alongside the SonarQube Hunter Agent as an independent verification layer: SAST identifies problematic code patterns, while the agent maps the repository, runs three specialist agents, and adversarially validates findings such as broken access control, authentication flaws, and business-logic gaps. Sonar describes its broader platform as providing automated code review and quality gates across IDEs and CI/CD pipelines, with algorithmic and agentic verification for reliability, security, quality, and compliance.
1 use taken from transcripts — each links to the moment in the video.
Pattern-based static analysis layered alongside Hunter Agent for two independent layers of verification
1 in the library.