Menu
Use the SonarQube CLI to access and understand SonarQube analysis results. Use when the user asks about SonarQube issues.
Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.
Based on SOC occupation classification
Use whenever a user mentions or references a Jira ticket and you want to pull out description, comments, or more.
Use when writing or updating unit tests (in any language).
Generate Git commit messages from staged changes when requested.
Scan and triage Snyk security findings in local repositories and container images. Use for Snyk vulnerability reviews, scan summaries, severity filtering, and remediation planning.
Suggests improvements for English-language text but does not rewrite the original. Use when asked to correct spelling or wording and the text is English.
Review GitHub pull requests using gh CLI and the GitHub API. Use when asked to review a PR, inspect PR changes, or choose approve/comment/request-changes.
| name | sonar-cli |
| description | Use the SonarQube CLI to access and understand SonarQube analysis results. Use when the user asks about SonarQube issues. |
Knauf-Group accounts are hosted in the SonarQube Cloud EU region.
# Log in (opens browser for interactive auth)
sonar auth login -o knauf-group -s https://sonarcloud.io
# Check authentication status
sonar auth status
# List all projects
sonar list projects | jq
# List issues for a project
sonar list issues -p Knauf-Group_pas-frontend --severities HIGH,BLOCKER --statuses OPEN
Run secret scanning only on individual files, not directories or full repositories.
# Scan a file for hard-coded secrets
sonar analyze secrets ./Dockerfile