菜单
Access SonarQube 2025.1 Developer Edition via sonar-issues.sh CLI
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
| name | SonarQube Analysis Integration |
| description | Access SonarQube 2025.1 Developer Edition via sonar-issues.sh CLI |
| keywords | sonarqube, sonar, code quality, issues, bugs, vulnerabilities, code smells, security hotspots, coverage |
Uses the sonar-issues.sh script for all SonarQube queries.
Project: YOUR-PROJECT-KEY (update with your SonarQube project key)
sonar-issues.sh summary
Shows: Total Issues, Counts by Severity/Type, Metrics
sonar-issues.sh critical
# Bugs only
sonar-issues.sh bugs
# Vulnerabilities only
sonar-issues.sh vulns
# Code Smells only (optional: Severity)
sonar-issues.sh smells
sonar-issues.sh smells MAJOR
sonar-issues.sh hotspots
sonar-issues.sh file src/main/java/com/example/Service.java
sonar-issues.sh metrics
Shows: bugs, vulnerabilities, code_smells, coverage, duplicated_lines_density, ncloc, ratings
sonar-issues.sh all
sonar-issues.sh all MAJOR
sonar-issues.sh all BLOCKER,CRITICAL
sonar-issues.sh projects
# JSON output for Claude analysis
sonar-issues.sh json > sonar-issues.json
sonar-issues.sh json BLOCKER,CRITICAL,MAJOR > critical-issues.json
JSON Format:
[
{
"severity": "CRITICAL",
"type": "BUG",
"rule": "java:S2259",
"file": "src/main/java/com/example/Service.java",
"line": 42,
"message": "A \"NullPointerException\" could be thrown...",
"effort": "10min",
"tags": ["cwe", "cert"]
}
]
For custom queries:
sonar-issues.sh raw "severities=MAJOR&types=BUG&createdInLast=1w"
sonar-issues.sh summary
sonar-issues.sh critical
sonar-issues.sh file src/main/java/com/example/service/
sonar-issues.sh json BLOCKER,CRITICAL > .claude/analysis/sonar-critical.json
sonar-issues.sh vulns
sonar-issues.sh hotspots
Severities: BLOCKER, CRITICAL, MAJOR, MINOR, INFO
Types: BUG, VULNERABILITY, CODE_SMELL
Hotspot Status: TO_REVIEW, ACKNOWLEDGED, FIXED, SAFE
Empty Results:
sonar-issues.sh projects to verifyAPI Docs for Your Instance:
https://YOUR-SONARQUBE/web_api
Fetch Your Application logs from Google Cloud Logging using gcloud-logs.sh CLI. Use when debugging production issues, tracing request flows, analyzing errors, or investigating service behavior.
PostgreSQL schema access via grep lookups - provides table structures, columns, constraints, indexes, and relationships on-demand without embedding full schema
Template for documenting domain model entities and relationships
Expert knowledge on testing strategies - covers unit testing, integration testing, test data builders, async verification patterns, external API mocking, and debugging test failures. Use when writing tests, debugging test failures, understanding test infrastructure, creating test data, or setting up mocks.