Skip to content

sonarsource/sonarqube

v2.7.0SSAL-1.0

SonarQube is the AI code quality and security verification platform used by millions of developers to catch bugs, vulnerabilities, and leaked secrets. This plugin enforces those standards in the agent coding loop: 7,500+ distinct issue types, secrets scanning, agentic analysis, and quality gates across 40+ languages.

GitHubOpen Website
skills

sonar-triage-dependency-risks

Triage SonarQube SCA dependency risks by CVE reachability, prepare safe UI writeups, and optionally bundle confirmed package fixes.

Read SKILL.md at the source

Pinned to revision 2f8b420d6bfc, so it is the text this page describes rather than whatever the author pushed since.

Pre-approved tools experimental

Experimental field. Support varies between clients, so this list is what the author declared, not what your client will enforce.

  • Read
  • Grep
  • Glob
  • Bash(sonar:*)
  • WebFetch
  • WebSearch
  • Agent
  • AskUserQuestion
  • Skill
  • mcp__sonarqube__check_dependency

Files

Every link opens the file at its source, pinned to the revision this page describes.