Fix Sonarqube
This skill automatically resolves common SonarQube issues, streamlining your code quality checks and saving development time.
Install on your platform
We auto-selected Claude Code based on this skill’s supported platforms.
Run in terminal (recommended)
claude mcp add fix-sonarqube npx -- -y @trustedskills/fix-sonarqube
Or manually add to ~/.claude/settings.json
{
"mcpServers": {
"fix-sonarqube": {
"command": "npx",
"args": [
"-y",
"@trustedskills/fix-sonarqube"
]
}
}
}Requires Claude Code (claude CLI). Run claude --version to verify your install.
About This Skill
What it does
The fix-sonarqube skill automates common fixes and remediation steps identified by SonarQube, a static code analysis tool. It can automatically apply suggested changes to address quality issues, security vulnerabilities, and maintainability concerns within Java projects. This skill aims to streamline the process of incorporating SonarQube feedback into development workflows.
When to use it
- When your team uses SonarQube for code analysis and you want to automate some remediation tasks.
- To quickly address common issues flagged by SonarQube in Java projects, reducing manual effort.
- For continuous integration pipelines where automated code quality improvements are desired.
- During code reviews to automatically apply fixes suggested by SonarQube.
Key capabilities
- Automated remediation of SonarQube findings.
- Support for Java projects.
- Integration with SonarQube analysis results.
Example prompts
- "Apply the recommended fixes from my latest SonarQube scan."
- "Fix the security vulnerabilities reported by SonarQube in this project."
- "Automate remediation of code smells identified by SonarQube."
Tips & gotchas
This skill requires access to and integration with a SonarQube instance. Ensure proper permissions are configured for automated changes within your codebase.
Tags
TrustedSkills Verification
Unlike other registries that point to live repositories, TrustedSkills pins every skill to a verified commit hash. This protects you from malicious updates — what you install today is exactly what was reviewed and verified.
Security Audits
| Gen Agent Trust Hub | Pass |
| Socket | Pass |
| Snyk | Pass |
🌐 Community
Passed automated security scans.