Update to SonarQube

Changed files

Choose a file to see its text changes. Binary or large files show metadata only.

.agents/plugins/marketplace.json →

.claude-plugin/marketplace.json →

.claude-plugin/plugin.json →

.codex-plugin/assets/composer-icon-dark.png →

.codex-plugin/assets/composer-icon.png →

.codex-plugin/assets/logo-dark.png →

.codex-plugin/assets/logo.png →

.codex-plugin/plugin.json →

.cursor-plugin/marketplace.json →

.cursor-plugin/plugin.json →

.factory-plugin/marketplace.json →

.factory-plugin/plugin.json →

.gitar/review/squad-specific.md →

.github/CODEOWNERS →

.github/plugin/marketplace.json →

.github/plugin/plugin.json →

.github/renovate.json →

.gitignore →

GEMINI.md →

LICENSE →

README.md →

SECURITY.md →

agents/sonarqube-reviewer.agent.md →

assets/logo.svg →

claude-hooks/hooks.json →

droids/sonarqube-reviewer.md →

gemini-extension.json →

kiro-power/POWER.md →

kiro-power/mcp.json →

mcp.json →

mcp_config.json →

plugin.json →

rules/sonarqube.md →

scripts/setup.js →

skills/sonar-analyze/SKILL.md →

skills/sonar-coverage/SKILL.md →

skills/sonar-dependency-risks/SKILL.md →

skills/sonar-duplication/SKILL.md →

skills/sonar-fix-issue/SKILL.md →

skills/sonar-integrate/SKILL.md →

skills/sonar-list-issues/SKILL.md →

skills/sonar-list-projects/SKILL.md →

skills/sonar-quality-gate/SKILL.md →

skills/sonar-triage-dependency-risks/SKILL.md →

scripts/setup.js

− removed · + added

--- before
+++ after
@@ -1,165 +1,165 @@
-#!/usr/bin/env node
-"use strict";
-
-const fs = require("node:fs");
-const path = require("node:path");
-const os = require("node:os");
-
-const CLAUDE_INTEGRATION_ID = "claude-code";
-
-const HOOK_DISPLAY_NAMES = {
-  "sonar-secrets": "Secrets Detection",
-  "sonar-sqaa": "Vortex analysis",
-  "sonar-secrets-hooks": "Secrets Detection",
-  "sonar-sqaa-hook": "Vortex analysis",
-};
-
-const DECLARATIVE_HOOK_FEATURE_IDS = new Set([
-  "sonar-secrets-hooks",
-  "sonar-sqaa-hook",
-]);
-
-// sonarqube-cli merged the standalone `sonar-sqaa-hook` container into the
-// shared Vortex container for Claude; the analysis hook now shows up as this
-// subfeature nested under `vortex-claude` instead of its own top-level id.
-const CLAUDE_VORTEX_FEATURE_ID = "vortex-claude";
-const VORTEX_ANALYSIS_SUBFEATURE_ID = "sqaa-posttooluse";
-
-function hasMergedVortexAnalysisHook(feature) {
-  return (
-    feature?.featureId === CLAUDE_VORTEX_FEATURE_ID &&
-    Array.isArray(feature.subfeatures) &&
-    feature.subfeatures.some(
-      (subfeature) => subfeature?.featureId === VORTEX_ANALYSIS_SUBFEATURE_ID
-    )
-  );
-}
-
-function hasSonarCli() {
-  const envPath = process.env.PATH || "";
-  const dirs = envPath.split(path.delimiter);
-  const exts =
-    process.platform === "win32"
-      ? (process.env.PATHEXT || ".COM;.EXE;.BAT;.CMD").split(";")
-      : [""];
-
-  for (const dir of dirs) {
-    for (const ext of exts) {
-      try {
-        fs.accessSync(path.join(dir, "sonar" + ext), fs.constants.F_OK);
-        return true;
-      } catch {
-        // not in this directory
-      }
-    }
-  }
-  return false;
-}
-
-function readState() {
-  const statePath = path.join(
-    os.homedir(),
-    ".sonar",
-    "sonarqube-cli",
-    "state.json"
-  );
-  try {
-    return JSON.parse(fs.readFileSync(statePath, "utf8"));
-  } catch {
-    return null;
-  }
-}
-
-function canonicalPath(p) {
-  try {
-    return fs.realpathSync.native(p);
-  } catch {
-    return path.resolve(p);
-  }
-}
-
-function samePath(a, b) {
-  if (!a || !b) return false;
-  const caseInsensitive =
-    process.platform === "darwin" || process.platform === "win32";
-  const norm = (p) => {
-    const c = canonicalPath(p);
-    return caseInsensitive ? c.toLowerCase() : c;
-  };
-  return norm(a) === norm(b);
-}
-
-function featureAppliesToCwd(feature, cwd) {
-  if (feature?.scope === "global") {
-    return true;
-  }
-  if (feature?.scope === "project") {
-    return samePath(cwd, feature.targetRoot);
-  }
-  return false;
-}
-
-function collectLegacyHookNames(state, cwd) {
-  const claudeHooks = (state?.agentExtensions ?? []).filter(
-    (entry) =>
-      entry?.agentId === CLAUDE_INTEGRATION_ID &&
-      entry.kind === "hook" &&
-      typeof entry.name === "string"
-  );
-  const globalHooks = claudeHooks.filter((entry) => entry.global === true);
-  const localHooks = claudeHooks.filter((entry) =>
-    samePath(cwd, entry.projectRoot)
-  );
-  return [...globalHooks, ...localHooks].map((entry) => entry.name);
-}
-
-function collectDeclarativeHookNames(state, cwd) {
-  const claudeIntegration = (state?.integrations?.installed ?? []).find(
-    (entry) => entry?.integrationId === CLAUDE_INTEGRATION_ID
-  );
-  if (!claudeIntegration) {
-    return [];
-  }
-
-  return (claudeIntegration.features ?? [])
-    .filter((feature) => featureAppliesToCwd(feature, cwd))
-    .filter(
-      (feature) =>
-        (typeof feature?.featureId === "string" &&
-          DECLARATIVE_HOOK_FEATURE_IDS.has(feature.featureId)) ||
-        hasMergedVortexAnalysisHook(feature)
-    )
-    .map((feature) =>
-      hasMergedVortexAnalysisHook(feature) ? "sonar-sqaa-hook" : feature.featureId
-    );
-}
-
-function collectInstalledHookNames(state, cwd) {
-  const names = [
-    ...collectLegacyHookNames(state, cwd),
-    ...collectDeclarativeHookNames(state, cwd),
-  ];
-  return new Set(names);
-}
-
-const cwd = process.cwd();
-const state = readState();
-const sonarOk = hasSonarCli();
-const installed = collectInstalledHookNames(state, cwd);
-
-const hookList = Array.from(
-  new Set(Array.from(installed).map((name) => HOOK_DISPLAY_NAMES[name] || name))
-).join(", ");
-
-const lines = [
-  "SonarQube plugin initialised.",
-  "  sonarqube-cli: " +
-    (sonarOk ? "✓ found" : "✗ not found — run /sonarqube:sonar-integrate"),
-  "  SonarQube hooks: " +
-    (installed.size > 0
-      ? "✓ " + hookList
-      : "✗ no hooks installed — run /sonarqube:sonar-integrate"),
-];
-
-process.stdout.write(JSON.stringify({ systemMessage: lines.join("\n") }) + "\n");
-process.exit(0);
+#!/usr/bin/env node
+"use strict";
+
+const fs = require("node:fs");
+const path = require("node:path");
+const os = require("node:os");
+
+const CLAUDE_INTEGRATION_ID = "claude-code";
+
+const HOOK_DISPLAY_NAMES = {
+  "sonar-secrets": "Secrets Detection",
+  "sonar-sqaa": "Vortex analysis",
+  "sonar-secrets-hooks": "Secrets Detection",
+  "sonar-sqaa-hook": "Vortex analysis",
+};
+
+const DECLARATIVE_HOOK_FEATURE_IDS = new Set([
+  "sonar-secrets-hooks",
+  "sonar-sqaa-hook",
+]);
+
+// sonarqube-cli merged the standalone `sonar-sqaa-hook` container into the
+// shared Vortex container for Claude; the analysis hook now shows up as this
+// subfeature nested under `vortex-claude` instead of its own top-level id.
+const CLAUDE_VORTEX_FEATURE_ID = "vortex-claude";
+const VORTEX_ANALYSIS_SUBFEATURE_ID = "sqaa-posttooluse";
+
+function hasMergedVortexAnalysisHook(feature) {
+  return (
+    feature?.featureId === CLAUDE_VORTEX_FEATURE_ID &&
+    Array.isArray(feature.subfeatures) &&
+    feature.subfeatures.some(
+      (subfeature) => subfeature?.featureId === VORTEX_ANALYSIS_SUBFEATURE_ID
+    )
+  );
+}
+
+function hasSonarCli() {
+  const envPath = process.env.PATH || "";
+  const dirs = envPath.split(path.delimiter);
+  const exts =
+    process.platform === "win32"
+      ? (process.env.PATHEXT || ".COM;.EXE;.BAT;.CMD").split(";")
+      : [""];
+
+  for (const dir of dirs) {
+    for (const ext of exts) {
+      try {
+        fs.accessSync(path.join(dir, "sonar" + ext), fs.constants.F_OK);
+        return true;
+      } catch {
+        // not in this directory
+      }
+    }
+  }
+  return false;
+}
+
+function readState() {
+  const statePath = path.join(
+    os.homedir(),
+    ".sonar",
+    "sonarqube-cli",
+    "state.json"
+  );
+  try {
+    return JSON.parse(fs.readFileSync(statePath, "utf8"));
+  } catch {
+    return null;
+  }
+}
+
+function canonicalPath(p) {
+  try {
+    return fs.realpathSync.native(p);
+  } catch {
+    return path.resolve(p);
+  }
+}
+
+function samePath(a, b) {
+  if (!a || !b) return false;
+  const caseInsensitive =
+    process.platform === "darwin" || process.platform === "win32";
+  const norm = (p) => {
+    const c = canonicalPath(p);
+    return caseInsensitive ? c.toLowerCase() : c;
+  };
+  return norm(a) === norm(b);
+}
+
+function featureAppliesToCwd(feature, cwd) {
+  if (feature?.scope === "global") {
+    return true;
+  }
+  if (feature?.scope === "project") {
+    return samePath(cwd, feature.targetRoot);
+  }
+  return false;
+}
+
+function collectLegacyHookNames(state, cwd) {
+  const claudeHooks = (state?.agentExtensions ?? []).filter(
+    (entry) =>
+      entry?.agentId === CLAUDE_INTEGRATION_ID &&
+      entry.kind === "hook" &&
+      typeof entry.name === "string"
+  );
+  const globalHooks = claudeHooks.filter((entry) => entry.global === true);
+  const localHooks = claudeHooks.filter((entry) =>
+    samePath(cwd, entry.projectRoot)
+  );
+  return [...globalHooks, ...localHooks].map((entry) => entry.name);
+}
+
+function collectDeclarativeHookNames(state, cwd) {
+  const claudeIntegration = (state?.integrations?.installed ?? []).find(
+    (entry) => entry?.integrationId === CLAUDE_INTEGRATION_ID
+  );
+  if (!claudeIntegration) {
+    return [];
+  }
+
+  return (claudeIntegration.features ?? [])
+    .filter((feature) => featureAppliesToCwd(feature, cwd))
+    .filter(
+      (feature) =>
+        (typeof feature?.featureId === "string" &&
+          DECLARATIVE_HOOK_FEATURE_IDS.has(feature.featureId)) ||
+        hasMergedVortexAnalysisHook(feature)
+    )
+    .map((feature) =>
+      hasMergedVortexAnalysisHook(feature) ? "sonar-sqaa-hook" : feature.featureId
+    );
+}
+
+function collectInstalledHookNames(state, cwd) {
+  const names = [
+    ...collectLegacyHookNames(state, cwd),
+    ...collectDeclarativeHookNames(state, cwd),
+  ];
+  return new Set(names);
+}
+
+const cwd = process.cwd();
+const state = readState();
+const sonarOk = hasSonarCli();
+const installed = collectInstalledHookNames(state, cwd);
+
+const hookList = Array.from(
+  new Set(Array.from(installed).map((name) => HOOK_DISPLAY_NAMES[name] || name))
+).join(", ");
+
+const lines = [
+  "SonarQube plugin initialised.",
+  "  sonarqube-cli: " +
+    (sonarOk ? "✓ found" : "✗ not found — run /sonarqube:sonar-integrate"),
+  "  SonarQube hooks: " +
+    (installed.size > 0
+      ? "✓ " + hookList
+      : "✗ no hooks installed — run /sonarqube:sonar-integrate"),
+];
+
+process.stdout.write(JSON.stringify({ systemMessage: lines.join("\n") }) + "\n");
+process.exit(0);