sonarqube-mcp

📁 moto-nrw/project-phoenix 📅 Feb 8, 2026
4
总安装量
4
周安装量
#53505
全站排名
安装命令
npx skills add https://github.com/moto-nrw/project-phoenix --skill sonarqube-mcp

Agent 安装分布

codex 3
gemini-cli 3
amp 2
opencode 2
kimi-cli 2
github-copilot 2

Skill 文档

SonarQube MCP

Use SonarQube/SonarCloud MCP tools to check code quality, find issues, and analyze code before pushing.

Quick Actions

Check Quality Gate

get_project_quality_gate_status
  projectKey: "org_project"
  pullRequest: "123"  # or branch: "feature-branch"
  • status: "OK" = passes
  • status: "ERROR" = fails
  • Check conditions array for specific metrics

Find Issues

search_sonar_issues_in_projects
  projects: ["org_project"]
  pullRequestId: "123"
  severities: ["BLOCKER", "CRITICAL"]  # optional filter

Analyze Code Before Push

analyze_code_snippet
  code: "your code here"
  language: "typescript"  # or go, python, java, etc.

This runs analysis WITHOUT triggering CI – great for catching issues early.

Understand a Rule

show_rule
  key: "typescript:S1082"  # or go:S3776, etc.

Mark False Positive

change_sonar_issue_status
  key: "issue-key-from-search"
  status: ["falsepositive"]  # or ["accept"], ["reopen"]

Tool Reference

See TOOLS.md for complete tool documentation.

Severity Levels

Level Meaning
BLOCKER Must fix immediately
CRITICAL High impact
MAJOR Significant problems
MINOR Code smells
INFO Informational

Common Metrics

Key Description
coverage Test coverage %
duplicated_lines_density Duplication %
reliability_rating Bug rating (A-E)
security_rating Vulnerability rating
sqale_rating Maintainability rating
ncloc Lines of code
complexity Cyclomatic complexity

Tips

  1. Pre-commit check: Use analyze_code_snippet before pushing
  2. PR status: Always check get_project_quality_gate_status with pullRequest param
  3. Understand failures: Use show_rule to learn why code was flagged
  4. Triage efficiently: Filter by severities: ["BLOCKER", "CRITICAL"] first