SonarQube Plugin for AI Agents
Install
npx skills add SonarSource/sonarqube-agent-pluginsgh skill install SonarSource/sonarqube-agent-pluginsgit clone --depth 1 https://github.com/SonarSource/sonarqube-agent-pluginsSkills in this collection
- Sonar AnalyzeSonarAnalyze a file for quality and security issues using SonarQube
- Sonar CoverageSonarFind files with low test coverage and inspect uncovered lines in a SonarQube project (project key optional when MCP integration already defines the default project)
- Sonar Dependency RisksSonarSearch for software composition analysis (SCA) dependency risks in a SonarQube project (project key optional when MCP integration already defines the default project)
- Sonar DuplicationSonarFind files with code duplications in a SonarQube project and inspect duplication blocks for a file (project key optional when MCP integration already defines the default project)
- Sonar Fix IssueSonarFix a specific SonarQube issue in code by rule key and location
- Sonar IntegrateSonarInstalls sonarqube-cli if not already installed, authenticates, and integrates SonarQube with the current agent (installs analysis hooks & SonarQube MCP Server). Use when the user wants to set up SonarQube integration or asks to configure SonarQube.
- Sonar List IssuesSonarSearch and filter SonarQube issues for a project, branch, or pull request via sonarqube-cli (`-p` is always required on the CLI; resolve the key from user arguments or sonar-project.properties)
- Sonar List ProjectsSonarList SonarQube projects accessible to the current user
- Sonar Quality GateSonarShow SonarQube quality gate status for a project — pass/fail and each condition (metric key, threshold, actual value), plus worst-offender breakdowns. Project key optional — resolved from `sonar-project.properties` or the MCP integration default.
- Sonar Triage Dependency RisksSonarTriage SonarQube SCA dependency risks by CVE reachability, prepare safe UI writeups, and optionally bundle confirmed package fixes.