#224 Tariq Shaukat: How Safe Is AI-Assisted Coding?

This episode is sponsored by Oracle. Oracle Cloud Infrastructure, or OCI is a blazing fast and secure platform for your infrastructure, database, application development, plus all your AI and machine learning workloads. OCI costs 50% less for compute and 80% less for networking. So you’re saving a pile of money. Thousands of businesses have already upgraded to OCI, including MGM Resorts, Specialized Bikes, and Fireworks AI.   Cut your current cloud bill in HALF if you move to OCI now:  https://oracle.com/eyeonai   In this episode of the Eye on AI podcast, Tariq Shaukat, CEO of Sonar, joins Craig Smith to explore the future of code quality, security, and AI’s role in software development.   Tariq shares his journey from leading roles at Google Cloud and Bumble to helming Sonar, a company disrupting code assurance for developers worldwide. With over 7 million users and support for 30+ programming languages, Sonar has become a critical tool in ensuring clean, maintainable, and secure code.   We dive into Sonar’s innovative AI Code Assurance Workflow, which integrates seamlessly with generative AI tools like Copilot and Codium. Tariq discusses how Sonar addresses the challenges of AI-generated code, tackling issues like security vulnerabilities, maintainability problems, and the accountability crisis in today’s coding landscape.   Tariq also unpacks the importance of hybrid deterministic and AI-driven approaches, the role of design and architecture in modern software development, and how Sonar is helping companies manage tech debt across billions of lines of code.   With Sonar’s recent enterprise-grade SaaS launch and commitment to reducing developer toil, this episode offers valuable insights for developers, tech leaders, and anyone interested in the evolving intersection of AI and software engineering.   Don’t forget to like, subscribe, and hit the notification bell for more discussions on AI, technology, and innovation!     Stay Updated: Craig Smith Twitter: https://twitter.com/craigss Eye on A.I. Twitter: https://twitter.com/EyeOn_AI     (00:00) Introduction to Tariq Shaukat and Sonar (01:23) Overview of SonarQube (03:03) Deterministic Systems and AI Integration (07:36) Challenges of AI-Generated Code (10:12) Early Issue Detection in Development (12:33) Accountability in AI Code Generation (16:20) Importance of Rigorous Code Reviews (19:34) Managing Tech Debt with Continuous Improvement (22:16) Why Sonar Focuses on Integration (25:08) Reviewing Billion-Line Code Bases with Sonar (29:37) Tailoring Sonar for Specific Codebases and Workflows (32:40) Avoiding Overwhelming Developers with Noise (37:49) Governance and Managing Complex Codebases (40:50) Addressing Tech Debt in Legacy Systems (45:07) Sonar’s Open-Source Model and Philosophy (48:11) What’s Next for Sonar