Sonarqube Integration
Automates SonarQube code quality analysis within Bitsoex workflows, identifying vulnerabilities and improving code maintainability.
Install on your platform
We auto-selected Claude Code based on this skill’s supported platforms.
Run in terminal (recommended)
claude mcp add sonarqube-integration npx -- -y @trustedskills/sonarqube-integration
Or manually add to ~/.claude/settings.json
{
"mcpServers": {
"sonarqube-integration": {
"command": "npx",
"args": [
"-y",
"@trustedskills/sonarqube-integration"
]
}
}
}Requires Claude Code (claude CLI). Run claude --version to verify your install.
About This Skill
What it does
This skill integrates with SonarQube, a static code analysis platform. It allows AI agents to interact with SonarQube projects, retrieve information about code quality, and potentially trigger analyses. The integration facilitates automated code review processes and helps maintain high coding standards within software development workflows.
When to use it
- Automated Code Review: Trigger a SonarQube analysis for a specific branch or commit as part of a CI/CD pipeline.
- Quality Gate Status Checks: Retrieve the current status of a project's quality gate in SonarQube and report on its health.
- Issue Reporting: Query SonarQube for new issues detected in code and generate reports for developers.
- Project Monitoring: Regularly check SonarQube metrics (e.g., technical debt, bugs) to track project quality trends over time.
Key capabilities
- SonarQube Project Interaction
- Quality Gate Status Retrieval
- Issue Querying and Reporting
- Automated Analysis Triggering
Example prompts
- "Check the SonarQube status of the 'main' branch."
- "What are the new issues found in the 'feature/new-login' branch?"
- "Trigger a code analysis for the 'develop' branch on SonarQube."
Tips & gotchas
- Requires access to a SonarQube instance and appropriate credentials.
- The agent needs permission within SonarQube to perform actions like triggering analyses or viewing project data.
Tags
TrustedSkills Verification
Unlike other registries that point to live repositories, TrustedSkills pins every skill to a verified commit hash. This protects you from malicious updates — what you install today is exactly what was reviewed and verified.
Security Audits
| Gen Agent Trust Hub | Pass |
| Socket | Pass |
| Snyk | Pass |
🌐 Community
Passed automated security scans.