← Claude plugins
Security

sonarqube

SonarSource v2.6.0

Automatically enforce SonarQube code quality and security in the agent coding loop — 7,000+ rules, secrets scanning, agentic analysis, and quality gates across 40+ languages. PostToolUse hooks run ...

Create a free account to save this plugin.

From the developer

License

SSAL-1.0

Declared components

Hooks

Works with

Claude Code

Description

From the marketplace listing

Automatically enforce SonarQube code quality and security in the agent coding loop — 7,000+ rules, secrets scanning, agentic analysis, and quality gates across 40+ languages. PostToolUse hooks run analysis after every file edit. Pre-tool secrets scanning prevents 450+ patterns from reaching the LLM. Slash commands give on-demand access to quality gate status, coverage, duplication, and dependency risks. Includes SonarQube CLI, MCP Server, skills, hooks, and slash commands.

What changed

Oct 16, 2026 · 06:00 UTC

Changed

Catalogs → Official updated; open the comparison for details.

Changed

Github → Source → Sha: “f194f77ab688c2a82b74a7c50023c552899c21ed” → “5a9356d957db063e4d2cf87511b44cc1ba88dc99”

View comparison →

Oct 3, 2026 · 22:13 UTC

Added

Catalogs updated; open the comparison for details.

View comparison →

Keywords

Files & skills

sonarqube · catalog manifest

Saved declaration

{
  "name": "sonarqube",
  "author": {
    "name": "SonarSource"
  },
  "source": {
    "sha": "5a9356d957db063e4d2cf87511b44cc1ba88dc99",
    "url": "https://github.com/SonarSource/sonarqube-agent-plugins.git",
    "source": "url"
  },
  "category": "security",
  "homepage": "https://www.sonarsource.com",
  "description": "Automatically enforce SonarQube code quality and security in the agent coding loop — 7,000+ rules, secrets scanning, agentic analysis, and quality gates across 40+ languages. PostToolUse hooks run analysis after every file edit. Pre-tool secrets scanning prevents 450+ patterns from reaching the LLM. Slash commands give on-demand access to quality gate status, coverage, duplication, and dependency risks. Includes SonarQube CLI, MCP Server, skills, hooks, and slash commands."
}
sonarqube · catalog manifest

Saved declaration

{
  "name": "sonarqube",
  "source": {
    "sha": "0e502ceb9a2083a586ad2b5ad14cd10174243626",
    "url": "https://github.com/SonarSource/sonarqube-agent-plugins.git",
    "source": "url"
  },
  "homepage": "https://www.sonarsource.com/",
  "description": "Integrate SonarQube code quality and security analysis into Claude Code: this includes namespaced slash commands, a guided skill to setup the SonarQube CLI, and a startup check for the CLI and wiring.\n\nMCP server registration and secrets-scanning hooks are installed on your machine by the SonarQube CLI as part of the setup."
}
sonarqube · catalog manifest

Hooks

"./claude-hooks/hooks.json"

Saved declaration

{
  "name": "sonarqube",
  "hooks": "./claude-hooks/hooks.json",
  "author": {
    "url": "https://www.sonarsource.com/",
    "name": "Sonar"
  },
  "license": "SSAL-1.0",
  "version": "2.6.0",
  "homepage": "https://www.sonarsource.com",
  "keywords": [
    "sonarqube",
    "code-quality",
    "static-analysis",
    "security",
    "secrets"
  ],
  "repository": "https://github.com/SonarSource/sonarqube-agent-plugins",
  "description": "SonarQube is the AI code quality and security verification platform used by millions of developers to catch bugs, vulnerabilities, and leaked secrets. This plugin enforces those standards in the agent coding loop: 7,500+ distinct issue types, secrets scanning, agentic analysis, and quality gates across 40+ languages."
}

plugin.json observed Nov 6, 2026 · 10:39 UTC. Manifest source ↗

Catalog declarations and available plugin.json metadata are saved. Referenced skills and executable source files are not downloaded or tested. Missing components in a manifest do not prove that the plugin has none.

Installation instructions

Official

/plugin install sonarqube@claude-plugins-official

Community

/plugin marketplace add anthropics/claude-plugins-community
/plugin install sonarqube@claude-community

Claude Code installation documentation

Technical details
Sources
Claude Marketplace · Official · Community
First seen
Oct 3, 2026 · 21:29 UTC
Last seen
Nov 10, 2026 · 12:00 UTC
Latest observed change
Oct 16, 2026 · 06:00 UTC
Collection status
Listed
Reported installs
6,433

Installation counts are source-reported, not independently verified active users. Observation dates are not release dates.

Download plugin data (JSON)

Plugin history: freshly prepared. Prepared . Refreshed when catalog data changes or after 6 hours. Your account and Follow status are live.