Oct 11, 2026

SonarQube + OpenAI: Agentic Development — Killian Carlsen-Phelan, Sonar

A hands-on look at pairing Codex with SonarQube to verify agent-generated code inside the coding loop. The walkthrough covers secrets blocking, SQL injection remediation with a parameterized query, real-time agentic analysis, and the argument that completion requires evidence, containment is not correctness, and feedback belongs inside the agent loop.

May 11, 2026

Stop AI Agents From SQL Injecting Your Database

Averi Kitsch, Staff Software Engineer at Google, outlines a four-step evolution for securing AI agents that access databases, moving from dangerous, model-controlled tools to a zero-trust architecture. Drawing on insights from over 20 million monthly tool calls, the talk provides a practical roadmap for preventing data leaks by separating identities, constraining actions, and removing credentials and PII from the agent's control.