How does this skill interact with SonarQube?

It uses Model Context Protocol (MCP) tools to search for project issues and update their statuses directly within your SonarQube or SonarCloud instance.

Can it automatically fix security vulnerabilities?

Yes, the skill is configured to prioritize vulnerabilities and blocker-level issues for immediate code fixes rather than suppression.

Does this work with my CI/CD pipeline?

Yes, it is designed to be integrated into PR workflows, allowing Claude to resolve issues that would otherwise cause a quality gate to fail in your CI pipeline.

How are code suppressions handled?

When a fix isn't feasible, the skill applies language-specific suppression comments (such as // NOSONAR) including the rule key and a clear justification.

SonarQube Workflow Integration

Name: SonarQube Workflow Integration
Author: cuioss

bycuioss

0•

安全与测试

Automates the retrieval, triage, and resolution of SonarQube issues within your development workflow.

This skill streamlines code quality management by integrating SonarQube directly into Claude Code. It automates the end-to-end process of fetching issues for specific pull requests or projects, intelligently triaging them to decide between code fixes or justified suppressions, and executing the necessary file modifications. By enforcing consistency and handling quality gate failures automatically, it ensures that your codebase remains compliant with organizational standards without the manual overhead of context switching between tools.

主要功能

01Intelligent triage logic to determine when to fix vs. suppress issues

02Integration with PR workflows to resolve quality gate failures

03Automated code modification for bug fixes and security vulnerabilities

040 GitHub stars

05Automated Sonar issue fetching via MCP tools and GitHub context

06Language-specific suppression patterns for Java, JavaScript, and more

使用场景

01Bulk processing technical debt and code smells in large repositories

02Resolving SonarQube quality gate failures in a Pull Request automatically

03Remediating security vulnerabilities identified by static analysis

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add cuioss/plan-marshall workflow-integration-sonar

For use in Claude.ai and ChatGPT

Download Skill