Remediation Agent now runs on a Sonar-provided LLM key in SonarQube Cloud

Sonar Updates
1

Hi everyone,

You can now use SonarQube Remediation Agent in SonarQube Cloud without bringing your own LLM API key.

Until now, enabling Remediation Agent meant getting an LLM key from a provider and wiring it into your organization. That step often meant a procurement or security review before you could see a single fix. With the Sonar-provided key, you skip that step. Remediation Agent proposes a fix, verifies it with SonarQube analysis, and opens a pull request for you to review.

Availability
The Sonar-provided LLM key is available on SonarQube Cloud Enterprise and Team (annual) plans. It isn’t self-serve yet. To start a trial, contact your Sonar Account Manager, who will set it up for your organization. If you prefer to use your own provider, bring-your-own-key is still supported.

Getting started

  1. Contact your Account Manager to start a trial with the Sonar-provided key.
  2. Once it’s enabled, an org admin opens AI Capabilities and turns on Remediation Agent.
  3. In your project, go to Issues, filter by Fixable by agent, and assign an issue to the agent.

See the Remediation Agent documentation for the full setup steps.

We’d like to hear how it goes. Reply here with questions or feedback, particularly on the setup experience.

Thanks,

Alexander

2 Likes
Sonar Community Roundup, Oct 24 - 30