Pixeebot – a GitHub App that fixes your Sonar findings (Java/Python)
We made a bot, built on an [open source framework](https://codemodder.io), that fixes the problems Sonar (and others!) find in your code. Here are a handful of examples of pixeebot fixing Sonar findings on some OSS code: https://github.com/nahsra/cql-evaluator-fork/pull/1/files https://github.com/nahsra/bsights-engine-spark-fork/pull/1/f... https://github.com/pixee/pygoat/pull/2/files The changes aren't all super fancy, but we're orienting towards solving real problems and…
In plain words
Pixeebot is a GitHub App that automatically fixes code issues detected by Sonar in Java and Python repositories. Built on an open-source framework, it addresses around 25 common Sonar findings and additional security problems by generating pull requests with corrections. The bot targets developers who want to remediate compliance issues and reduce manual remediation work, handling routine security fixes that code scanning tools identify.
written from the facts on this page · September 2026
From the sources
In the maker’s words, at launch
We made a bot, built on an [open source framework](https://codemodder.io), that fixes the problems Sonar (and others!) find in your code. Here are a handful of examples of pixeebot fixing Sonar findings on some OSS code: https://github.com/nahsra/cql-evaluator-fork/pull/1/files https://github.com/nahsra/bsights-engine-spark-fork/pull/1/f... https://github.com/pixee/pygoat/pull/2/files The changes aren't all super fancy, but we're orienting towards solving real problems and remediating issues -- grunt work you don't want to have to do, but compliance says you should (and you probably should)! Right now, we fix around 25 of the things that Sonar commonly finds (and a lot more that it doesn't find!). You can see the complete list of things we fix here: https://docs.pixee.ai/codemods/overview/ I'll tell you, it's so much nicer to receive PRs than tool warnings. To try it out: 1. Install the Pixeebot GitHub App on a Sonar-monitored GitHub repository - https://github.com/apps/pixeebot 2. Create a Sonar token that Pixeebot can use to read your findings - For SonarCloud users: go here https://sonarcloud.io/account/security - For other Sonar users, go to User > My Account > Security - Put that token in a SONAR_TOKEN repository secret 3. Add the GitHub Action that will connect Pixeebot to Sonar - Copy this sample action into your repo: https://github.com/pixee/upload-tool-results-action/blob/mai... - Set the Sonar URL if you're using a locally hosted SonarQube Boom! Now, pixeebot will monitor your repository and thoughtfully send you PRs at the right moments. Like, when Sonar finds some issues in your new PR, or when we think there's a good opportunity to address something in your backlog. We've got so much more in the pipeline I'd love to tell you about, but we're eager to get feedback on what we've got so far for Sonar users. P.S. By the way, we're a small team but we offer all the right security and compliance controls a company might want: https://trust.pixee.ai/.
Does the same job
all alternatives →
- SASourcebot, an open-source Sourcegraph alternative2024 · github.com · ▲259
Hi HN, We’re Brendan and Michael, the creators of Sourcebot (https://github.com/sourcebot-dev/sourcebot). Sourcebot is an open-source code search tool that allows you to quickly search across many large codebases. Check out our demo video here: https://youtu.be/mrIFYSB_1F4, or try it for yourself on our demo site here: https://demo.sourcebot.dev While at prior roles, we’ve both felt the pain of searching across hundreds of multi-million line codebases. Using local tools like grep were ill-suited since you often only had a handful of codebases…
- CWCrawlee – Web scraping and browser automation library for Node.js2022 · crawlee.dev · ▲282
Hey HN, This is Jan, founder of Apify, a web scraping and automation platform. Drawing on our team's years of experience, today we're launching Crawlee [1], the web scraping and browser automation library for Node.js that's designed for the fastest development and maximum reliability in production. For details, see the short video [2] or read the announcement blog post [3]. Main features: - Supports headless browsers with Playwright or Puppeteer - Supports raw HTTP crawling with Cheerio or JSDOM - Automated parallelization and scaling of crawlers for best performance - Avoids blocking using…
- DRDontBeEvil.rip: Search, for developers (API, expressions, CLI)2022 · ▲269
I'd like to invite everyone to try out DontBeEvil.rip, an experimental search engine for developers. tl;dr $ alias rip="curl -G -H 'Accept: text/plain' --url https://dontbeevil.rip/search --data-urlencode " $ rip 'q=Heartbleed bug' DontBeEvil.rip is a year long experiment to see if a small team can build a developer-focused search engine that is self-sustaining on $10 monthly subscriptions. It works by only indexing high-quality resources that are relevant to developers. You won't get useless listicles because we'll never crawl them. Relevant urls are harvested from HN,…
More dev tools this month
the category →
The first open-source price index for GPU compute
Dev tools · 10d ago · getcomputable.com
OpenTrailPaper is open-source bike computer firmware for the LilyGO T5S3 4.7" E-Paper PRO. It supports offline maps, GPX routes, FIT recording and Bluetooth sensors.
Dev tools · 2d ago · opentrailpaper.com
Open-source GTM skills for technical founders
Dev tools · 29d ago · gtmcofounder.com
Launched alongside, March 2024
the whole month →
- 3Y
Life & fun · 2024 · github.com
Microlaunch▲1,116Launch and get feedback on both the idea and product
Dev tools · 2024 · microlaunch.net
