Have few questions regarding Sonarqube 2025.1 LTA version with AI capabalities

Must-share information (formatted with Markdown):

  • Sonarqube 2025.1 LTA
  • how is SonarQube deployed: zip
  • Get approval from security for AI capabalities related queries
  • Checked in forum
    |-|How will Organizations customer’s data/prompt be captured and stored by the service ?|
    |—|—|
    |-|How does the product vendor store and process customer data|
    |-|Is Organizations data being retained, retrained the models and potentially generated to other customers? |

Hi,

Welcome to the community!

First, it’s important to note that per the docs (emphasis mine):

AI CodeFix currently uses Open AI’s GPT-4o or your own Azure OpenAI LLM

When you use AI CodeFix, we send the necessary snippets of your code to the AI engine you’ve chosen to use. We might use some of your snippets to improve AI CodeFix. However, your data won’t be used to train or improve third-party LLMs.

 
HTH,
Ann