# sonarqube

Made by Sonar SonarQube is the AI code quality and security verification platform used by millions of developers to catch bugs, vulnerabilities, and leaked secrets.

- Tier: Indexed (plain plugin)
- Category: Security
- Page: https://www.flowy.sh/listings/sonarsource-sonarqube-agent-plugins
- Source: https://github.com/SonarSource/sonarqube-agent-plugins
- Price: free and open source

## Summary
sonarqube is a Claude Code plugin with 10 hand-picked skills, indexed on Flowy in the Security category. Install it with the command on its page. It includes sonar-analyze, sonar-coverage, sonar-dependency-risks. Its skills do not fire on their own yet. Request auto-invocation to have Flowy route them as you prompt. Free and open source.

## Install (Claude Code)
```
/plugin marketplace add SonarSource/sonarqube-agent-plugins
/plugin install sonarqube@sonar
```

## Skills
- sonar-analyze
- sonar-coverage
- sonar-dependency-risks
- sonar-duplication
- sonar-fix-issue
- sonar-integrate
- sonar-list-issues
- sonar-list-projects
- sonar-quality-gate
- sonar-triage-dependency-risks

## FAQ

### What is sonarqube?
Made by Sonar SonarQube is the AI code quality and security verification platform used by millions of developers to catch bugs, vulnerabilities, and leaked secrets.

### How do I install sonarqube?
Run these in Claude Code: /plugin marketplace add SonarSource/sonarqube-agent-plugins then /plugin install sonarqube@sonar. Then prompt normally.

### Does sonarqube auto-invoke its skills?
Not yet. It is indexed on Flowy as a plain plugin. Request auto-invocation on its page and Flowy will route its skills for you as you prompt.

### Is sonarqube free?
Yes. Flowy is free and open source, with nothing gated. You can read every skill in full before you install.