Skip to content
AI Marketplaces Leaderboard

SonarQube

ChatGPT plugin

Review code as it's written

View in ChatGPT directory

SonarQube is the AI code quality and security verification platform used by millions of developers to catch bugs, vulnerabilities, and leaked secrets. This plugin enforces those standards in the agent coding loop: 7,500+ distinct issue types, secrets scanning, agentic analysis, and quality gates across 40+ languages.

Featured
No

not on the featured shelf

Movement

From our daily snapshots over the last 30 days.

Rank by placement

#3902of 11,36036places down24h64places down7d
#3,611#4,014#4,417#4,820Oct 6Oct 12Oct 18Oct 24Oct 30Nov 4

Rank in Developer tools

#277of 9003places down24h07d
#252#272#292#312Oct 6Oct 12Oct 18Oct 24Oct 30Nov 4

2 listing changes logged · latest Oct 28: Skills, Version. See what changed

In its category

How this plugin compares with others in the same category. Positions are counted within the category, not across the whole directory.

Developer tools277th of 900 by placement
#PluginPosition7d
275Auth0#389464places down
276Replay.io#389962places down
277SonarQubeThis page#390264places down
278DocuWriter.ai#392031places up
279Fingerprint#395919places up

All 900 Developer tools plugins

Also on other marketplaces

Example prompts

  • “Help me fix the most severe SonarQube issues for this project”

Skills

  • sonar-analyze

    Analyze a file for quality and security issues using SonarQube

  • sonar-coverage

    Find files with low test coverage and inspect uncovered lines in a SonarQube project (project key optional when MCP integration already defines the default project)

  • sonar-dependency-risks

    Search for software composition analysis (SCA) dependency risks in a SonarQube project (project key optional when MCP integration already defines the default project)

  • sonar-duplication

    Find files with code duplications in a SonarQube project and inspect duplication blocks for a file (project key optional when MCP integration already defines the default project)

  • sonar-fix-issue

    Fix a specific SonarQube issue in code by rule key and location

  • sonar-integrate

    Installs sonarqube-cli if not already installed, authenticates, and integrates SonarQube with the current agent (installs analysis hooks & SonarQube MCP Server). Use when the user wants to set up SonarQube integration or asks to configure SonarQube.

  • sonar-list-issues

    Search and filter SonarQube issues for a project, branch, or pull request via sonarqube-cli (`-p` is always required on the CLI; resolve the key from user arguments or sonar-project.properties)

  • sonar-list-projects

    List SonarQube projects accessible to the current user

  • sonar-quality-gate

    Show SonarQube quality gate status for a project — pass/fail and each condition (metric key, threshold, actual value), plus worst-offender breakdowns. Project key optional — resolved from `sonar-project.properties` or the MCP integration default.

  • sonar-triage-dependency-risks

    Triage SonarQube SCA dependency risks by CVE reachability, prepare safe UI writeups, and optionally bundle confirmed package fixes.

Categories
Made by
Sonar · Website
Sign-in
On Install
Capabilities
Read, Interactive
Availability
Available
Version
2.7.0
Keywords
sonarqube, code-quality, static-analysis, security, secrets
Created
June 26, 2026
More info
Sponsorship
Promote this plugin