Loading video...

Video Failed to Load

There was a problem loading this video. This could be due to a temporary network issue or the video might be unavailable.

Code quality, taste and judgement matter. Sonar is great for catching bug and security issues on every commit. Here's why I like using it. Learn more:

Addy Osmani

408,177 subscribers

801,576 views • 1 month ago •via X (Twitter)

Science & Technology Education

Anya Rossi• Live Now

Private livecam show

0 Comments

No comments available

Comments from the original post will appear here

Related Videos

Code quality, taste and judgment matter - especially now that agents write most of the first draft. Sonar helps set your quality gate:

Code quality, taste and judgment matter - especially now that agents write most of the first draft. Sonar helps set your quality gate:

Addy Osmani

584,837 views • 26 days ago

Every day more homes and businesses are using security cameras, and every day these security cameras improve the image quality and start to bring us images like this. WTF?!?!🧐

Every day more homes and businesses are using security cameras, and every day these security cameras improve the image quality and start to bring us images like this. WTF?!?!🧐

Bronze Giant

48,536 views • 2 months ago

Open Interpreter is like ChatGPT Code Interpreter, but you can run it locally on your computer, and it is 100% open-source. Write and execute code, analyze data, control your computer, and more. Great work killian Here's how to install and use it: 👇

Open Interpreter is like ChatGPT Code Interpreter, but you can run it locally on your computer, and it is 100% open-source. Write and execute code, analyze data, control your computer, and more. Great work killian Here's how to install and use it: 👇

Matthew Berman

142,918 views • 2 years ago

Introducing Claude Code Security, now in limited research preview. It scans codebases for vulnerabilities and suggests targeted software patches for human review, allowing teams to find and fix issues that traditional tools often miss. Learn more:

Introducing Claude Code Security, now in limited research preview. It scans codebases for vulnerabilities and suggests targeted software patches for human review, allowing teams to find and fix issues that traditional tools often miss. Learn more:

Claude

26,243,080 views • 6 months ago

Jules is an experimental AI-powered code agent designed to help developers get things done. 🛠️ Using Gemini 2.0, it seamlessly integrates with GitHub and allows you to offload bug fixes and other time-consuming tasks - so you can focus on more critical issues. ↓

Jules is an experimental AI-powered code agent designed to help developers get things done. 🛠️ Using Gemini 2.0, it seamlessly integrates with GitHub and allows you to offload bug fixes and other time-consuming tasks - so you can focus on more critical issues. ↓

Google DeepMind

146,354 views • 1 year ago

I stopped using the same AI to write and review code. Claude builds. GPT-5.2 Codex reviews. Result? More bugs caught, real security issues flagged, and better PRs all automated.

I stopped using the same AI to write and review code. Claude builds. GPT-5.2 Codex reviews. Result? More bugs caught, real security issues flagged, and better PRs all automated.

Mervin Praison

10,891 views • 7 months ago

Nobody is writing 90% of their code using AI. Here's the uncomfortable truth: The real productivity gain from using AI to write code is closer to 10%, nowhere near the 90% people claim. Sundar Pichai said in 2024 that 30% of the new code at Google was AI-generated. However, he went on to admit, during Lex Friedman's podcast, that engineering velocity had only increased by about 10%. AI-generated code isn't free code. It still has to be reviewed, tested, and made production-ready. Optimizing a single step (code generation) doesn't boost output if bottlenecks shift elsewhere (code reviews). It doesn't matter how much code you generate if you can't keep up the review process. The solution: Automate as much as you can the review and verification of your code. I'm working with Sonar, who is sponsoring this post, and they will take care of the code quality and security analysis of your code: • They review over 300B lines of code every single day • They cover reliability, security, and maintainability for your code • You can integrate them into your CI/CD pipeline • You can install them in your IDE (I use their VSCode extension) • Support for more than 30 languages Here is a link so you can check them out:

Nobody is writing 90% of their code using AI. Here's the uncomfortable truth: The real productivity gain from using AI to write code is closer to 10%, nowhere near the 90% people claim. Sundar Pichai said in 2024 that 30% of the new code at Google was AI-generated. However, he went on to admit, during Lex Friedman's podcast, that engineering velocity had only increased by about 10%. AI-generated code isn't free code. It still has to be reviewed, tested, and made production-ready. Optimizing a single step (code generation) doesn't boost output if bottlenecks shift elsewhere (code reviews). It doesn't matter how much code you generate if you can't keep up the review process. The solution: Automate as much as you can the review and verification of your code. I'm working with Sonar, who is sponsoring this post, and they will take care of the code quality and security analysis of your code: • They review over 300B lines of code every single day • They cover reliability, security, and maintainability for your code • You can integrate them into your CI/CD pipeline • You can install them in your IDE (I use their VSCode extension) • Support for more than 30 languages Here is a link so you can check them out:

Santiago

296,637 views • 11 months ago

An MCP server that detects production-grade code quality issues in real-time! Even though AI is now generating code at light speed, the engineering bottleneck has just moved from writing to reviewing, and now devs spend 90% of their debugging time on AI-generated code. AI reviewers aren't that reliable either because they share the same fundamental blind spots as AI generators do: - They pattern match, not proof check. - They validate syntax, not system behavior. - They review code, not consequences. I have been using the SonarQube MCP Server (by Sonar) to solve this. It produces enterprise-grade code analysis and returns instant feedback on bugs, vulnerabilities, and code smells right where you're working (Claude Code, Cursor, etc.). Its capabilities have emerged from the 750B+ lines of code SonarQube processes daily, so it has seen every bug pattern that exists. This includes: - Security vulnerabilities (SQL injection, XSS, hardcoded secrets) - Code smells and technical debt - Test coverage gaps - Maintainability issues The setup is simple: - Install the SonarQube MCP server - Add it to your AI assistant's config Done! SonarQube is now part of your AI coding workflow. I have shared the GitHub repo in the replies! P.S. Thanks to Sonar for working with me today.

An MCP server that detects production-grade code quality issues in real-time! Even though AI is now generating code at light speed, the engineering bottleneck has just moved from writing to reviewing, and now devs spend 90% of their debugging time on AI-generated code. AI reviewers aren't that reliable either because they share the same fundamental blind spots as AI generators do: - They pattern match, not proof check. - They validate syntax, not system behavior. - They review code, not consequences. I have been using the SonarQube MCP Server (by Sonar) to solve this. It produces enterprise-grade code analysis and returns instant feedback on bugs, vulnerabilities, and code smells right where you're working (Claude Code, Cursor, etc.). Its capabilities have emerged from the 750B+ lines of code SonarQube processes daily, so it has seen every bug pattern that exists. This includes: - Security vulnerabilities (SQL injection, XSS, hardcoded secrets) - Code smells and technical debt - Test coverage gaps - Maintainability issues The setup is simple: - Install the SonarQube MCP server - Add it to your AI assistant's config Done! SonarQube is now part of your AI coding workflow. I have shared the GitHub repo in the replies! P.S. Thanks to Sonar for working with me today.

Avi Chawla

28,628 views • 9 months ago

Write 100x better code using AI (for free!) Install the Codacy extension (VSCode, Cursor, WindSurf). This will install an MCP Server locally on your computer. Your coding copilot will use this server with the Codacy CLI to check every line of code it generates. The way this works is pretty awesome (assuming you are using Cursor): 1. You ask Cursor to generate some code 2. Cursor writes the code 3. Cursor then calls Codacy's MCP Server to check it 4. The MCP Server will use the Codacy CLI to find any issues 5. Cursor will fix the issues and call the MCP server again 6. When the code passes all checks, you are done Level of effort on your side: literally zero! Code quality and security because of this: 100x better! Codacy has been doing this for a long, long time, and their Guardrails MCP Server checks for a lot of potential issues: • Security issues • Quality standards • Pattern violations • Linting issues You can see more information about the extension here: I recorded a quick video to show you how it works. Thanks to the Codacy team for helping me set up everything, answering my 1,000 questions, and collaborating with me on this post.

Write 100x better code using AI (for free!) Install the Codacy extension (VSCode, Cursor, WindSurf). This will install an MCP Server locally on your computer. Your coding copilot will use this server with the Codacy CLI to check every line of code it generates. The way this works is pretty awesome (assuming you are using Cursor): 1. You ask Cursor to generate some code 2. Cursor writes the code 3. Cursor then calls Codacy's MCP Server to check it 4. The MCP Server will use the Codacy CLI to find any issues 5. Cursor will fix the issues and call the MCP server again 6. When the code passes all checks, you are done Level of effort on your side: literally zero! Code quality and security because of this: 100x better! Codacy has been doing this for a long, long time, and their Guardrails MCP Server checks for a lot of potential issues: • Security issues • Quality standards • Pattern violations • Linting issues You can see more information about the extension here: I recorded a quick video to show you how it works. Thanks to the Codacy team for helping me set up everything, answering my 1,000 questions, and collaborating with me on this post.

Santiago

63,316 views • 1 year ago

Sports Betting with AI is a cheat code. Here's how I am using it to win more:

Sports Betting with AI is a cheat code. Here's how I am using it to win more:

Sports By Dustin

426,706 views • 6 months ago

Truckers deliver for the American people every day. That’s why U.S. Department of Transportation is working with them on the issues that matter like training and parking. The best ideas don’t come from Washington, they come from the men and women who do the work and make this country great!

Truckers deliver for the American people every day. That’s why U.S. Department of Transportation is working with them on the issues that matter like training and parking. The best ideas don’t come from Washington, they come from the men and women who do the work and make this country great!

Secretary Sean Duffy

111,435 views • 1 year ago

Art is code. Code is art. Here's to more beauty and security in 2025. 🔒 (ian c rogers via Trame Paris)

Art is code. Code is art. Here's to more beauty and security in 2025. 🔒 (ian c rogers via Trame Paris)

Ledger

30,059 views • 1 year ago

I built a complex history feature for my Figma to Code plugin in 3 prompts. This is a 30-min tutorial using Claude Code. The difference in code generation between gpt-4o, Claude 3.5 and 3.7 is insane. 3.7 produces near-perfect results and is far more consistent. It's really a designer's best friend, not missing details from the design, like adaptive layout, outlines, spacing, etc. It seems like the new model has great taste now.

I built a complex history feature for my Figma to Code plugin in 3 prompts. This is a 30-min tutorial using Claude Code. The difference in code generation between gpt-4o, Claude 3.5 and 3.7 is insane. 3.7 produces near-perfect results and is far more consistent. It's really a designer's best friend, not missing details from the design, like adaptive layout, outlines, spacing, etc. It seems like the new model has great taste now.

Meng To

32,475 views • 1 year ago

I would like to personally thank the Carolina Panthers for using this bouncing kickoff in the preseason Here is why I think it can work and why more teams should try it out:

I would like to personally thank the Carolina Panthers for using this bouncing kickoff in the preseason Here is why I think it can work and why more teams should try it out:

Shawn Syed

374,685 views • 1 year ago

no na has released the music video for ‘sad face :(’. With stunning visuals and high-quality music, it showcases why the Indonesian girlgroup is catching attention everywhere and earning co-signs from BLACKPINK, IVE, and more.

no na has released the music video for ‘sad face :(’. With stunning visuals and high-quality music, it showcases why the Indonesian girlgroup is catching attention everywhere and earning co-signs from BLACKPINK, IVE, and more.

Kpop Charts

1,217,713 views • 11 months ago

I force Claude Code to review every single line of code it generates for security vulnerabilities. This is table stakes. Companies shouldn't allow their developers to commit any code without doing this first. (MCP is an amazing way to improve Claude Code's capabilities and generate code that's 10x better than what you get out of the box.)

I force Claude Code to review every single line of code it generates for security vulnerabilities. This is table stakes. Companies shouldn't allow their developers to commit any code without doing this first. (MCP is an amazing way to improve Claude Code's capabilities and generate code that's 10x better than what you get out of the box.)

Santiago

81,625 views • 11 months ago

THIS is how the future of agentic cross-platform coding looks like 👇 Claude Code reproducing and fixing a bug on iOS, Android and Web in parallel using Argent MCP

THIS is how the future of agentic cross-platform coding looks like 👇 Claude Code reproducing and fixing a bug on iOS, Android and Web in parallel using Argent MCP

Kacper Kapuściak

11,038 views • 2 months ago

AI assistance in Chrome DevTools is here with Chrome 131! 🚀 Using Gemini, it helps you debug styling issues, understand layouts, and get AI-generated fixes for CSS bugs. Learn more →

AI assistance in Chrome DevTools is here with Chrome 131! 🚀 Using Gemini, it helps you debug styling issues, understand layouts, and get AI-generated fixes for CSS bugs. Learn more →

Google for Developers

17,235 views • 1 year ago