Skip to content

sonarsource/sonarqube

v2.7.0SSAL-1.0

SonarQube is the AI code quality and security verification platform used by millions of developers to catch bugs, vulnerabilities, and leaked secrets. This plugin enforces those standards in the agent coding loop: 7,500+ distinct issue types, secrets scanning, agentic analysis, and quality gates across 40+ languages.

GitHubOpen Website
skills

sonar-duplication

Find files with code duplications in a SonarQube project and inspect duplication blocks for a file (project key optional when MCP integration already defines the default project)

Read SKILL.md at the source

Pinned to revision 2f8b420d6bfc, so it is the text this page describes rather than whatever the author pushed since.

Pre-approved tools experimental

Experimental field. Support varies between clients, so this list is what the author declared, not what your client will enforce.

  • Read
  • Grep
  • Bash(docker ps:*)
  • Bash(podman ps:*)
  • Bash(nerdctl ps:*)
  • Bash(sonar:*)

Files

Every link opens the file at its source, pinned to the revision this page describes.