Codacy | Blog - Automate your code quality

AI Coding Assistant Dependency Version Selection Risks: How Codacy Dogfoods Verity With Its Own AI Agents (2026)

Codacy — Thu, 10 Sep 2026 13:41:07 GMT

Most teams working with AI coding agents are still at the same stage: a person prompts the agent, reads the diff, and decides whether to ship it. That's real progress, but it isn't a loop yet. Nothing runs on its own, and nothing has to earn a track record before it's trusted with more.

Agentic SDLC Loop Engineering: How Black Box Runs PR Review Gates at Scale (2026)

Codacy — Mon, 07 Sep 2026 19:29:43 GMT

It's 2 a.m. and a bug fix lands in the queue, gets picked up by Codex, gets reviewed by Claude because Claude didn’t write it, gets flagged by three more automated reviewers, and sits waiting for one human to click merge. Nobody wrote a ticket. Nobody assigned a reviewer. The system just did what it was built to do.

What we learned after migrating 300+ customers from SonarQube to Codacy

Codacy — Mon, 07 Sep 2026 13:01:37 GMT

With the growing adoption of agentic development workflows, we’ve seen an increase in SonarQube migrations over the last year, driven largely by AI-assisted development outpacing what a per-line pricing model was built to handle.

AI Code Review Governance Across Repositories: Why PR-Level Review Isn't Enough in 2026

Codacy — Fri, 28 Aug 2026 14:04:25 GMT

Most engineering leaders running AI code reviews can point to a clean PR history and still not answer the one question that actually matters: is the codebase, as a whole, getting safer?

Automation Bias in AI-Generated Code Review: Why Clean Code Still Ships Broken

Codacy — Fri, 28 Aug 2026 13:51:08 GMT

Look closely at your team's latest pull request. The syntax is pristine. The variable names perfectly match your enterprise style guide. The inline comments are beautifully articulate, and the AI assistant has even written a flawless markdown summary explaining its architectural choices. It feels almost insulting to question it. So, you hit “Approve.”

AI Code Review Cost Per Pull Request: What Engineering Teams Actually Pay in 2026

Codacy — Fri, 28 Aug 2026 12:31:39 GMT

AI code review costs anywhere from a few cents per pull request to $25 per review, depending on the tool, review depth, and PR complexity.

AI Coding Assistant Dependency Version Selection Risks: Stale, Bleeding Edge, or Non-Existent

Codacy — Fri, 21 Aug 2026 15:12:25 GMT

AI coding assistant dependency version selection risk describes the pattern of tools like GitHub Copilot, Cursor, and Claude Code choosing library versions that are outdated, published within the last few days, or entirely fictional.

The Engineering Manager's EU AI Act Compliance Checklist (2026)

Codacy — Wed, 19 Aug 2026 14:46:27 GMT

Building an EU AI Act compliance checklist for engineering managers starts with one correction: the calendar most teams use is outdated. Codacy's own compliance research and the European Commission'sDigital Omnibus agreement confirm that while the heaviest high-risk obligations now land in December 2027, the AI literacy duty has applied since February 2025, while its supervision and enforcement began in August 2026.

Teams Built Quality And Security Infrastructure Around The Repository And That Is Now Breaking

Codacy — Fri, 14 Aug 2026 22:58:39 GMT

A pull request used to be where a change became real. An engineer wrote the code, pushed it, and opened the PR; that was the moment the rest of the team could run the checks and decide whether it was safe to merge.

What Is an AgBOM? Inventorying the Autonomous Coding Agents in Your Pipeline

Codacy — Fri, 14 Aug 2026 17:28:03 GMT

Your team probably knows who merged the last pull request. But do you know which AI agent wrote it, what tools it invoked, what credentials it used, and whether those permissions had changed since yesterday?