菜单
SonarQube integration via MCP for Java projects. Fix issues, check coverage, review security hotspots, and analyze code duplications using the SonarQube MCP Server (v1.10+). No local setup required.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
RFC-39 compliant API best practices for Java services. Covers request/response patterns, error handling, pagination, versioning, and authentication standards. Use when designing or reviewing REST APIs in Java services.
RFC-29 compliant changelog management with Common Changelog format and Unreleased section extension. Validates changelog on commits, generates from git history, and ensures all merged PRs are documented. Use when setting up changelog workflows or retrofitting existing repositories.
Systematic workflow for CodeRabbit reviews - local CLI, PR threads, and commit attribution
Enforces consistent coding standards across the codebase including naming conventions, code organization, and documentation requirements. Use when writing new code, reviewing pull requests, or refactoring existing code.
Database integration patterns for Java services using jOOQ and Flyway. Covers code generation, read/write splitting, migration guidelines, and version compatibility. Use when setting up or maintaining PostgreSQL integration.
Version catalog strategy, dependency management, BOMs, and version constraints for Java/Gradle projects. Covers version centralization, never-downgrade policy, bundle patterns, resolution strategies, and compatibility matrices.
基于 SOC 职业分类
| name | fix-sonarqube |
| description | SonarQube integration via MCP for Java projects. Fix issues, check coverage, review security hotspots, and analyze code duplications using the SonarQube MCP Server (v1.10+). No local setup required. |
| compatibility | All Java projects with SonarQube analysis |
| metadata | {"version":"3.0.0","technology":"java","category":"quality","tags":["java","sonarqube","mcp","code-quality","coverage","security-hotspots"]} |
SonarQube integration via MCP (Model Context Protocol) for Java code quality analysis, coverage checking, security hotspot review, and duplication analysis.
references/ - Detailed documentation
The SonarQube MCP server runs remotely at https://sonarqube-mcp.bitso.io/mcp and is automatically configured in all supported IDEs.
No setup required - just use natural language:
"Find BLOCKER issues in my-project"
"Show me details about rule java:S1128"
"What's the quality gate status for my-service?"
"What files have the lowest coverage in my-project?"
"Search for security hotspots in my-service"
"Find duplicated files in my-project"
"Analyze this code for SonarQube issues"
| Tool | Purpose |
|---|---|
search_sonar_issues_in_projects | Search issues by project, severity, quality |
change_sonar_issue_status | Accept, mark false positive, or reopen |
show_rule | Get rule documentation and fix guidance |
| Tool | Purpose |
|---|---|
search_files_by_coverage | Find files with lowest test coverage |
get_file_coverage_details | Line-by-line coverage for a file |
get_component_measures | Coverage metrics for project/dir/file |
| Tool | Purpose |
|---|---|
search_security_hotspots | Search for security hotspots |
show_security_hotspot | Get hotspot details |
change_security_hotspot_status | Review and resolve hotspots |
| Tool | Purpose |
|---|---|
search_duplicated_files | Find files with highest duplication |
get_duplications | Line-by-line duplication details |
| Tool | Purpose |
|---|---|
get_project_quality_gate_status | Check quality gate status |
list_quality_gates | List all quality gates |
search_my_sonarqube_projects | Find project keys |
list_pull_requests | List PRs for a project |
analyze_code_snippet | Analyze code snippet inline |
"Find all BLOCKER issues in payment-service"
"Show me the rule java:S2259"
"What's the quality gate status for my-service?"
"What files have the lowest coverage in my-service?"
"Show me line-by-line coverage for src/main/java/PaymentService.java"
"What's the coverage for PR #247 in my-service?"
"Search for security hotspots to review in payment-service"
"Show me details about this security hotspot"
"Mark this hotspot as safe with comment: verified input is sanitized"
"Find the most duplicated files in my-service"
"Show duplication details for this file"
"Explain rule java:S1128 (unused imports)"
"What are the BLOCKER rules for Java?"
The MCP is automatically available in:
| IDE | Configuration |
|---|---|
| Cursor | .cursor/mcp.json |
| VS Code + Copilot | .vscode/mcp.json |
| Claude Code | .mcp.json |
| IntelliJ IDEA | See manual setup |
| Copilot CLI | See manual setup |
For IntelliJ and Copilot CLI, see: java/commands/add-sonarqube-mcp-to-intellij-and-copilot-cli.md
| Reference | Description |
|---|---|
| references/mcp-tools.md | Full MCP tool reference (all 25 tools) |
| references/coverage-via-mcp.md | Coverage checking via SonarQube MCP |
| references/common-rules.md | Common Java rules |
| Skill | Purpose |
|---|---|
| java-coverage | JaCoCo coverage for SonarQube |
| gradle-standards | SonarQube Gradle plugin |