Let a bot deal with your static analysis warnings backlog
summary
A tool called Sorald automatically repairs SonarQube warnings by applying AST transformation via Spoon, is integrable as a JAR, Maven plugin or in CI through Repairnator, and produces pull requests. On 161 popular Maven projects Sorald implements fixes for 30 rules, repairs about 65% of 1,300 sampled bug-type violations without introducing compilation errors, and created 29 PRs with 17 merged, while known false positives and uncertain fixes remain future work.
AI-written summary · about
chapters (6)
- 0:00Start
- 1:23STATIC ANALYSIS WARNING?
- 1:42STATIC ANALYSIS WARNING: EXAMPLE
- 10:33DEMO (COMMANDS)
- 22:34FUTURE IMPROVEMENTS
- 37:05SOURCE CODE EXAMPLE
related talks
12mAutomating Code Fixes with SonarQube Remediation Agent
01h 57mAutomatically improving Java codebases with Error Prone
01h 13mAutomating Security Fixes with OpenRewrite
38mSOBO: A Feedback Bot to Nudge Code Quality in Programming Courses
13mHow to Improve AI-Generated Code with SonarSweep
14mAnalyze your code with SonarLint for IntelliJ
48mSay goodbye to bugs and anti-patterns with Error Prone
15mSonar-Powered LLM Context Augmentation for AI Coding Agents