Taylor Luttrell-Williams

Gitar is Sonar’s AI code verification agent, complementing SonarQube with an understanding of each change’s context and intent. In this hands-on workshop, you’ll install Gitar as a GitHub App and use it across three pull request scenarios that show how verification goes beyond code review.

More security checks should mean more confidence, not more alerts to ignore. As AI accelerates code production, how do we add independent verification without turning development into an obstacle course? This session explores two dimensions of application security: using complementary analysis methods and placing checks at useful points throughout the software development lifecycle.

Gitar is Sonar’s AI code verification agent, complementing SonarQube with an understanding of each change’s context and intent. In this hands-on workshop, you’ll install Gitar as a GitHub App and use it across three pull request scenarios that show how verification goes beyond code review.

Attackers are starting to use autonomous reasoning to find and exploit vulnerabilities faster, while pattern-based scanners miss flaws that depend on intent rather than syntax. Hunter Agent is Sonar's guided reasoning agent, built to find the logic flaws conventional scanners can't see.