G2

Aman K.

Software Engineer

Information Technology and Services

Enterprise (> 1000 emp.)

11/3/2026

"Enforcing strict C# and Python quality gates across our Azure DevOps and agentic coding pipelines"

4.5/5

What do you like best about SonarQube?

Every pull request we open for our DPU UK and CEE Apps and Qchex backend services has to pass our SonarQube Quality Gate before Azure DevOps allows a merge. Because I write a mix of C# .NET microservices and Python data synchronization scripts for Decidalo, having a single verification engine that understands both ecosystems equally well saves our team hours of manual peer review. Recently, we enabled AI Code Assurance with the Sonar way for agentic AI quality gate alongside the SonarQube Claude Code Plugin and Sonar MCP server. Whenever I use an agent or IDE assistant to refactor a module, SonarQube for IDE and the MCP integration catch taint analysis flaws, SQL injection risks, or cognitive complexity spikes right inside my editor before I even commit the branch. When an issue does pop up on a pull request, using AI CodeFix to generate a verified C# or Python patch inline makes cleaning up code smells effortless. Review collected by and hosted on G2.com.

What do you dislike about SonarQube?

Strict default thresholds on the new code quality gate occasionally blocked urgent hotfix branches when we first enforced the eighty percent test coverage requirement across older SharePoint and Qchex integration modules. If you modify a few lines inside a legacy C# class that lacked historical unit tests, the scanner flags the coverage drop on the touched file unless you carefully tune your new code period definitions and path exclusions. Additionally, running deep taint analysis and dependency checks across massive multi repository solutions used to add noticeable wait times to our CI builds until we upgraded to the latest 2026 server release and optimized our build wrapper caching. Review collected by and hosted on G2.com.

What problems is SonarQube solving and how is that benefiting you?

Shipping C# and Python patches at high velocity with coding assistants created a serious verification bottleneck for our Agile team because human reviewers focus on business logic and can easily overlook subtle security vulnerabilities or duplicated utility methods. SonarQube solves this by acting as an independent verification gatekeeper that holds human written and AI generated code to the exact same reliability, maintainability, and security standards. In my daily engineering workflow, this prevents technical debt from creeping into our production Microsoft Azure deployments, reduces post release outages, and gives our leads auditable compliance reports before every User Acceptance Testing cycle. Review collected by and hosted on G2.com.