sonarsource/sonarqube
v2.7.0SSAL-1.0
SonarQube is the AI code quality and security verification platform used by millions of developers to catch bugs, vulnerabilities, and leaked secrets. This plugin enforces those standards in the agent coding loop: 7,500+ distinct issue types, secrets scanning, agentic analysis, and quality gates across 40+ languages.
commands
- sonar
allowed-tools
- Bash(sonar:*)10 skills
- Read8 skills
- Bash(docker ps:*)6 skills
- Bash(nerdctl ps:*)6 skills
- Bash(podman ps:*)6 skills
- Grep6 skills
- Glob2 skills
- Agent1 skill
14 more
- AskUserQuestion1 skill
- Bash(brew:*)1 skill
- Bash(curl:*)1 skill
- Bash(Get-Command:*)1 skill
- Bash(git branch:*)1 skill
- Bash(iex:*)1 skill
- Bash(irm:*)1 skill
- Bash(mise:*)1 skill
- Bash(which:*)1 skill
- Edit1 skill
- mcp__sonarqube__check_dependency1 skill
- Skill1 skill
- WebFetch1 skill
- WebSearch1 skill
plugin.json
- name
- sonarqube
- version
- 2.7.0
- description
- SonarQube is the AI code quality and security verification platform used by millions of developers to catch bugs, vulnerabilities, and leaked secrets. This plugin enforces those standards in the agent coding loop: 7,500+ distinct issue types, secrets scanning, agentic analysis, and quality gates across 40+ languages.
- author
- Sonarhttps://www.sonarsource.com/
- license
- SSAL-1.0
- homepage
- https://www.sonarsource.com
mcp.json
- sonarqubesonar run mcp
{
"$schema": "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json",
"name": "sonarqube",
"version": "2.7.0",
"description": "SonarQube is the AI code quality and security verification platform used by millions of developers to catch bugs, vulnerabilities, and leaked secrets. This plugin enforces those standards in the agent coding loop: 7,500+ distinct issue types, secrets scanning, agentic analysis, and quality gates across 40+ languages.",
"author": {
"name": "Sonar",
"url": "https://www.sonarsource.com/"
},
"keywords": [
"sonarqube",
"code-quality",
"static-analysis",
"security",
"secrets"
],
"license": "SSAL-1.0",
"repository": "https://github.com/SonarSource/sonarqube-agent-plugins",
"homepage": "https://www.sonarsource.com"
}
What else this package ships
These files come with the package and this site does not publish them. They are listed so you know what is there before you install it.
- LICENSE