Search everything...

Stats

Actions

Available In

sonarqube

Name: sonarqube
Author: sonarsource

By SonarSource

Enforce SonarQube code quality and security within the agent coding loop, allowing you to analyze files, fix issues, check test coverage, detect dependency risks, find duplicated code, and verify quality gate status across projects.

Bash

code-quality

security

npx claudepluginhub sonarsource/sonarqube-agent-plugins --plugin sonarqube

Popularity

Stars

Top 10%

Med: 0·Avg: 281

Installs

Top 1%

Med: 0·Avg: 1

What's Inside

Skills9

sonar-analyze

/sonar-analyze

Analyze a file or code snippet for quality and security issues using SonarQube

sonar-coverage

/sonar-coverage

Find files with low test coverage and inspect uncovered lines in a SonarQube project (project key optional when MCP integration already defines the default project)

sonar-dependency-risks

/sonar-dependency-risks

Search for software composition analysis (SCA) dependency risks in a SonarQube project (project key optional when MCP integration already defines the default project)

sonar-duplication

/sonar-duplication

Find files with code duplications in a SonarQube project and inspect duplication blocks for a file (project key optional when MCP integration already defines the default project)

sonar-fix-issue

/sonar-fix-issue

Fix a specific SonarQube issue in code by rule key and location

Hooks1

Event Hooks

1 hook across 1 event

Stats

Version2.2.0

ReleasedMay 7, 2026

LanguageJavaScript

Stars95

Forks3

Copy clicks6

MaintenanceExcellent

LicenseSSAL-1.0

Last CommitJun 23, 2026

AddedMar 25, 2026

Actions

View on GitHub View README Plugin Marketplace JSON Homepage

Own this plugin?

Verify ownership to unlock analytics, metadata editing, and a verified badge. GitHub access is read-only (username + org membership).

Available In

claude-plugins-official31,017 sonar95 claude-plugins-official ccode-personal-plugins claude-plugins-official

README

SonarQube agent integrations

Made by Sonar

Automatically enforce SonarQube code quality and security in the agent coding loop — 7,000+ rules, secrets scanning, agentic analysis, and quality gates across 40+ languages.

SonarQube combines deterministic checks with AI-assisted workflows so quality rules apply consistently to code from both developers and agents. Where your stack supports it, analysis and secrets scanning can run inside the agent loop instead of only in CI.

What do the plugins include

The Plugin helps agents connect to SonarQube CLI and SonarQube MCP Server for issue detection, checking project metrics such as test coverage and duplications, fetch dependency risks, etc. Claude Code, Copilot CLI, Codex, and Antigravity (through SonarQube CLI) install agent hooks for secrets scanning and, when entitled, Agentic Analysis.

How to use: Run /sonarqube:sonar-integrate after installation to walk through setup — CLI installation, authentication, and wiring up the MCP Server and hooks. From there, use slash commands like /sonarqube:sonar-quality-gate to check quality gates or interact naturally with prompts like "analyze my code for issues," "show open SonarQube findings," or "check my coverage." With Agentic Analysis enabled, verification happens automatically after each edit with no manual invocation required.

Prerequisites

A SonarQube account (SonarQube Cloud, Server, or Community Build). Some features (for example Agentic Analysis) depend on your SonarQube Cloud organization settings.
SonarQube CLI (sonar) on your machine.
A container runtime (Docker, Podman, or Nerdctl) for the MCP server image.

Authenticate once with sonar auth login (browser flow; credentials stay in your OS keychain). The MCP server uses that login.

Check auth anytime:

sonar auth status

How plugins connect to SonarQube

Claude Code and GitHub Copilot CLI

SonarQube CLI can wire everything for you:

sonar integrate claude        # Claude Code: MCP, hooks, secrets scanning, etc.
sonar integrate copilot       # GitHub Copilot CLI: MCP, hooks, secrets scanning, etc.
sonar integrate codex         # Codex: MCP, hooks, secrets scanning, Agentic Analysis hook
sonar integrate antigravity   # Antigravity: hooks, instructions, CAG, MCP patch (after plugin install)

Run these after sonar auth login. Use the /sonarqube:sonar-integrate skill if you prefer a guided flow (install/update CLI, login, then integrate).

Other agents (Cursor, Kiro)

Each layout includes MCP configuration (for example mcp.json or kiro-power/mcp.json) that runs the mcp/sonarqube image and relies on SonarQube CLI for authentication—the same sonar auth login session.

Antigravity (two-step setup)

Antigravity uses two independent install surfaces. For full parity with Claude/Copilot you need both:

Step	Command	What it installs
1. Plugin bundle	`agy plugin install <git-url\|path>`	Skills, agent rules (`rules/sonarqube.md`), MCP (`mcp_config.json`)
2. CLI integrate	`sonar integrate antigravity`	Secrets hooks, Agentic Analysis instructions, Context Augmentation, MCP patch

There is no @vendor marketplace install (for example sonarqube@sonar is not supported). Use a Git URL, archive, or local path.

Repository layout

Agent	Location
Claude Code	`.claude-plugin/`, `skills/`, `claude-hooks/`, `scripts/`
Cursor	`.cursor-plugin/` (+ shared `mcp.json`)
GitHub Copilot CLI	`.github/plugin/` (+ shared `mcp.json`)
Codex	`.codex-plugin/`
Antigravity	`plugin.json`, `mcp_config.json`, `rules/`, shared `skills/`
Gemini CLI (legacy)	`gemini-extension.json`, `GEMINI.md`
Kiro	`kiro-power/`

Usage

Skills are the same across agents. Ask in natural language, invoke skills explicitly, or use the SonarQube MCP tools your client shows after MCP starts.

MCP reference: SonarQube MCP Server docs.

Skills

Set up

/sonarqube:sonar-integrate

View full README on GitHub

Similar Plugins

code-quality-orchestrator

12·

Curator - Ancient guardian of code excellence. Orchestrates 5 quality gates (Static Analysis, Test Coverage, Security Scanning, Complexity Analysis, Dependency Health) in a unified flow. Ensures pristine code through Forerunner precision and automated enforcement.

4mo

v1.0.0

markus41

ceo-quality-controller-agent

682·

Universal quality control orchestrator and final authority for any software development project. Dynamically discovers and coordinates with available sub-agents, performs comprehensive multi-dimensional quality assessment, security validation, and deployment readiness verification. Adapts to any project type, programming language, or development framework while maintaining enterprise-grade quality standards. Examples: <example>Context: Code changes ready for review across any project. user: 'Please review this code before commit' assistant: 'I'll use the 1-ceo-quality-control-agent to orchestrate comprehensive quality validation, discover available specialists, and perform final security scanning before approval.' <commentary>Universal quality control requires comprehensive validation across all dimensions regardless of project type.</commentary></example> <example>Context: Multi-agent work completion needing validation. user: 'Several agents completed their tasks, need quality review' assistant: 'Let me engage the 1-ceo-quality-control-agent to coordinate comprehensive validation across all completed work and ensure quality standards.' <commentary>Multi-agent coordination and quality validation applies to any development project.</commentary></example>

7mo

v1.0.0

ananddtyagi

sentrux

2.3k·

Live codebase visualization and structural quality gate — 14 health dimensions graded A-F, dependency analysis, and architecture governance via MCP

3mo

v0.3.12

sentrux

agents-quality-security

2.9k·2·

Agents for code review, security audits, debugging, and quality assurance

5mo

v1.0.0

davepoon

composure

68·

Code quality enforcement, architecture skills, structural code graph, and impact-aware reviews.

2mo

v1.47.17

hrconsultnj

executive-quality-assurance

53·

3mo

v1.0.0

devsforge

sonarqube

Popularity

What's Inside

Confidence

README

SonarQube agent integrations

What do the plugins include

Prerequisites

How plugins connect to SonarQube

Claude Code and GitHub Copilot CLI

Other agents (Cursor, Kiro)

Antigravity (two-step setup)

Repository layout

Usage

Skills

Set up

Similar Plugins

code-quality-orchestrator

ceo-quality-controller-agent

sentrux

agents-quality-security

composure

executive-quality-assurance

SonarQube agent integrations

What do the plugins include

Prerequisites

How plugins connect to SonarQube

Claude Code and GitHub Copilot CLI

Other agents (Cursor, Kiro)

Antigravity (two-step setup)

Repository layout

Usage

Skills

Set up

Popularity

Health & Quality

Similar Plugins

code-quality-orchestrator

ceo-quality-controller-agent

sentrux

agents-quality-security

composure

executive-quality-assurance