# sonar-analyze

> Claude/Codex skill by [@sonarsource](https://omgskills.com/library/sonarsource/index.md) · 113 stars · Updated 2026-10-22

Analyze a file for quality and security issues using SonarQube

Tags: agent, ai, sonarqube

## Install

```sh
git clone https://github.com/SonarSource/sonarqube-agent-plugins /tmp/sonarqube-agent-plugins && ln -s /tmp/sonarqube-agent-plugins/skills/sonar-analyze ~/.claude/skills/sonar-analyze
```

## From README

SonarQube — Code Analysis Analyze code for quality and security issues using the SonarQube MCP Server. Prerequisites This skill requires the SonarQube MCP Server to be configured and at least one of the tools mcpsonarquberunadvancedcodeanalysis or mcpsonarqubeanalyzefilelist to be available in your session. Before proceeding, verify at least one of these tools is accessible. If none are, try the CLI fallback in Step 3 before giving up — don't invent other CLI commands (e.g. sonar mcp call does not exist). If the CLI fallback also fails or doesn't apply, narrow down the cause — check whether the sonarqube MCP server is enabled in this agent's configuration. Not enabled / not registered → recommend running the sonar-integrate skill. Enabled but its tools are still unavailable → configuration is correct but the server failed to start.

## Links

- HTML page: https://omgskills.com/library/sonarsource/sonarqube-agent-plugins/skills/sonar-analyze/
- GitHub: https://github.com/SonarSource/sonarqube-agent-plugins
- Author: [@sonarsource](https://omgskills.com/library/sonarsource/index.md)

## More from this repo

- [sonar-coverage](https://omgskills.com/library/sonarsource/sonarqube-agent-plugins/skills/sonar-coverage/index.md) — Used to find files with low test coverage and inspect uncovered lines in a SonarQube project (project key optional when...
   - [@sonarsource](https://omgskills.com/library/sonarsource/index.md) · 113 stars
- [sonar-dependency-risks](https://omgskills.com/library/sonarsource/sonarqube-agent-plugins/skills/sonar-dependency-risks/index.md) — Used to search for software composition analysis (SCA) dependency risks in a SonarQube project (project key optional...
   - [@sonarsource](https://omgskills.com/library/sonarsource/index.md) · 113 stars
- [sonar-duplication](https://omgskills.com/library/sonarsource/sonarqube-agent-plugins/skills/sonar-duplication/index.md) — Used to find files with code duplications in a SonarQube project and inspect duplication blocks for a file (project key...
   - [@sonarsource](https://omgskills.com/library/sonarsource/index.md) · 113 stars