claudecodex

sonarqube

Automatically enforce SonarQube code quality and security in the agent coding loop — 7,000+ rules, secrets scanning, agentic analysis, and quality gates across 40+ languages. PostToolUse hooks run analysis after every file edit. Pre-tool secrets scanning prevents 450+ patterns from reaching the LLM. Slash commands give on-demand access to quality gate status, coverage, duplication, and dependency risks. Includes SonarQube CLI, MCP Server, skills, hooks, and slash commands.

0 on GitHubby SonarSourcev2.6.0SSAL-1.0updated 4 months agosecurity
/

Plugin sonarqube from marketplace claude-plugins-official in ai-integr8tor/anthropics-claude-plugins-official. Commands read from the repo's manifest — 1 month ago.

What it installs

Skills (9)

  • sonar-analyze

    Analyze a file for quality and security issues using SonarQube

  • sonar-coverage

    Find files with low test coverage and inspect uncovered lines in a SonarQube project (project key optional when MCP integration already defines the default project)

  • sonar-dependency-risks

    Search for software composition analysis (SCA) dependency risks in a SonarQube project (project key optional when MCP integration already defines the default project)

  • sonar-duplication

    Find files with code duplications in a SonarQube project and inspect duplication blocks for a file (project key optional when MCP integration already defines the default project)

  • sonar-fix-issue

    Fix a specific SonarQube issue in code by rule key and location

  • sonar-integrate

    Installs sonarqube-cli if not already installed, authenticates, and integrates SonarQube with the current agent (installs analysis hooks & SonarQube MCP Server). Use when the user wants to set up SonarQube integration or asks to configure SonarQube.

  • sonar-list-issues

    Search and filter SonarQube issues for a project, branch, or pull request via sonarqube-cli (`-p` is always required on the CLI; resolve the key from user arguments or sonar-project.properties)

  • sonar-list-projects

    List SonarQube projects accessible to the current user

  • sonar-quality-gate

    Show SonarQube quality gate status for a project — pass/fail and each condition (metric key, threshold, actual value), plus worst-offender breakdowns. Project key optional — resolved from `sonar-project.properties` or the MCP integration default.

Subagents (1)

  • sonarqube-reviewer

    Reviews code changes against SonarQube quality, security, and dependency-risk standards by composing this plugin's sonar-* skills. Use proactively before merging a PR or when the user asks for a SonarQube-based code review, a second opinion on code quality, or to "review my changes with SonarQube.

View source on GitHub sonarsource.com

Problems found in this repo's manifests

  • "autofix-bot" points to ./external_plugins/autofix-bot, which doesn't exist in the repo — install will fail

More from ai-integr8tor/anthropics-claude-plugins-official

All 162 plugins →

posthog

claudecodex

Access PostHog analytics, feature flags, experiments, error tracking, and insights directly from Claude Code.

161 skills · 3 commands · 1 agent · 1 MCP server · hooks

0

zscaler

claude

Manage Zscaler cloud security platform including ZPA (private access), ZIA (internet access), ZDX (digital experience), ZCC (client connector), EASM (attack surface), and Z-Insights (analytics). Create and manage policies, troubleshoot connectivity, audit security configurations, and investigate incidents across the full Zscaler ecosystem.

42 skills · 20 commands · 1 MCP server

0

zoom-plugin

claude

Claude plugin for planning, building, and debugging Zoom integrations across REST APIs, SDKs, webhooks, bots, and MCP workflows.

47 skills · 7 MCP servers

0

vercel

claude

Vercel deployment platform integration. Manage deployments, check build status, access logs, configure domains, and control your frontend infrastructure directly from Claude Code.

42 skills · 5 commands · 3 agents · 1 MCP server · hooks

0

azure

claude

Transform Claude into an Azure expert. This plugin integrates the Azure MCP server and specialized Azure skills to move beyond generic advice. It enables Claude to perform real-world tasks: listing resources, validating deployments, diagnosing infrastructure issues, and optimizing costs across 50+ Azure services.

48 skills · 1 MCP server

0

cockroachdb

claude

Connect Claude Code directly to your CockroachDB clusters for hands-on database work — explore schemas, write optimized SQL, debug queries, and manage distributed database clusters. This plugin provides 14 tools across two active MCP backends (self-hosted MCP Toolbox and managed CockroachDB Cloud MCP Server), three specialized agents (DBA, Developer, Operator), 32 skills across 6 operational domains, and built-in safety hooks.

34 skills · 3 agents · 3 MCP servers · hooks

0

Similar plugins

ecc

claudecodex

Harness-native ECC operator layer - 71 agents, 314 skills, 98 legacy command shims, reusable hooks, rules, selective install profiles, and production-ready workflows for Claude Code, Codex, OpenCode, Cursor, and related agent harnesses

200 skills · 98 commands · 71 agents · 1 MCP server · hooks

affaan-m/ECC 302,088

security-guidance

claude

Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF, hardcoded secrets, and 25+ other vulnerability classes.

hooks

anthropics/claude-code 155,476

ruflo-federation

claude

Cross-installation agent federation with zero-trust security, PII-gated data flow, and compliance-grade audit trails

3 skills · 1 command · 1 agent

ruvnet/ruflo 81,589

gitnexus

claudecodex

Code intelligence powered by a knowledge graph. Provides execution flow tracing, blast radius analysis, and augmented search across your codebase.

12 skills · 1 MCP server · hooks

abhigyanpatwari/GitNexus 48,482

duende-skills

claudecodex

Duende development skills and agents for Claude Code — covering OAuth/OIDC protocols, IdentityServer, token management, ASP.NET Core authentication/authorization, BFF patterns, and secure identity architecture

24 skills · 2 agents

anthropics/claude-plugins-official 47,076

Maintain sonarqube?

This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.

claude & codex plugins162 plugins