Do I need to have SonarQube already installed?

No, the skill handles the deployment of a SonarQube instance automatically using Docker containers, then cleans up once the analysis is complete.

Does it automatically fix the issues it finds?

No, it focuses on detection and reporting. It provides a prioritized list of findings and suggested fixes for you to review and implement safely.

Is my code sent to an external SonarQube server?

No, the analysis is performed on a local SonarQube instance running on your machine via Docker, ensuring your code stays private.

Does this skill require Docker to be running?

Yes, Docker is required. The skill can check for Docker, prompt for installation if missing, and start the daemon with your explicit permission.

Which programming languages are supported?

The skill includes specific scanners for Node.js, TypeScript, and Python, and offers a universal Docker-based scanner for other languages.

SonarQube Quality Analysis

Name: SonarQube Quality Analysis
Author: 686f6c61

by686f6c61

•

Security & Testing

Automates SonarQube analysis via Docker to identify technical debt, security vulnerabilities, and code smells in your codebase.

This skill automates the entire static analysis lifecycle by provisioning a temporary SonarQube instance using Docker. It scans your project for critical bugs, security vulnerabilities (OWASP/CWE), and maintenance 'code smells,' providing a comprehensive dashboard and actionable improvement reports. By bridging the gap between local linting and enterprise-grade quality gates, it helps developers maintain high standards for coverage and code health without the need for manual infrastructure configuration.

Key Features

01Automated SonarQube provisioning via Docker containers

02Generation of prioritized improvement reports based on real-world impact

03Smart Docker lifecycle management with automated environment cleanup

0437 GitHub stars

05Detection of bugs, vulnerabilities, and technical debt

06Support for multiple environments including Node.js, TypeScript, and Python

Use Cases

01Scanning for security vulnerabilities and OWASP compliance before a major release

02Auditing a legacy codebase to identify and prioritize critical technical debt

03Measuring and improving unit test coverage across specific project modules

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add 686f6c61/alfred-dev calidad

For use in Claude.ai and ChatGPT

Download Skill