菜单
Use the SonarQube CLI to access and understand SonarQube analysis results. Use when the user asks about SonarQube issues.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
Use whenever a user mentions or references a Jira ticket and you want to pull out description, comments, or more.
Use when writing or updating unit tests (in any language).
Generate Git commit messages from staged changes when requested.
Scan and triage Snyk security findings in local repositories and container images. Use for Snyk vulnerability reviews, scan summaries, severity filtering, and remediation planning.
Suggests improvements for English-language text but does not rewrite the original. Use when asked to correct spelling or wording and the text is English.
Review GitHub pull requests using gh CLI and the GitHub API. Use when asked to review a PR, inspect PR changes, or choose approve/comment/request-changes.
| name | sonar-cli |
| description | Use the SonarQube CLI to access and understand SonarQube analysis results. Use when the user asks about SonarQube issues. |
Knauf-Group accounts are hosted in the SonarQube Cloud EU region.
# Log in (opens browser for interactive auth)
sonar auth login -o knauf-group -s https://sonarcloud.io
# Check authentication status
sonar auth status
# List all projects
sonar list projects | jq
# List issues for a project
sonar list issues -p Knauf-Group_pas-frontend --severities HIGH,BLOCKER --statuses OPEN
Run secret scanning only on individual files, not directories or full repositories.
# Scan a file for hard-coded secrets
sonar analyze secrets ./Dockerfile