sonarqube
Пакет плагинов · SonarSource
sonarqube: пакет плагинов для ИИ-инструментов разработки, издатель SonarSource. Витрин, которые мы читаем и где он опубликован: 3 (Claude Code: claude-plugins-official, Copilot CLI: github/awesome-copilot, Claude Code: claude-plugins-community). Мы впервые увидели его 2026-10-11 и с тех пор изменений не фиксировали. Данные нашего прохода по витринам на 2026-10-12.
Automatically enforce SonarQube code quality and security in the agent coding loop — 7,000+ rules, secrets scanning, agentic analysis, and quality gates across 40+ languages. PostToolUse hooks run analysis after every file edit. Pre-tool secrets scanning prevents 450+ patterns from reaching the LLM. Slash commands give on-demand access to quality gate status, coverage, duplication, and dependency risks. Includes SonarQube CLI, MCP Server, skills, hooks, and slash commands.
- Витрины
- 3
- Где работает
- Ставится как пакет плагинов
- Самое большое опубликованное число
- 111 Звёзды (GitHub) · Claude Code: claude-plugins-official
- Впервые замечен
- 2026-10-11
- Последнее изменение
- Не зафиксировано
- Отметка о проверке
- Не помечен
Где опубликован
| Витрина | Статус | Версия | Числа | Проверен | Впервые замечен |
|---|---|---|---|---|---|
| Claude Code: claude-plugins-official (Открыть исходники на GitHub) | Опубликован | 2.6.0 | Форки (GitHub): 6 Звёзды (GitHub): 111 |
Не помечен | |
| Copilot CLI: github/awesome-copilot (Открыть исходники на GitHub) | Опубликован | 2.6.0 | Форки (GitHub): 6 Звёзды (GitHub): 111 |
Не помечен | |
| Claude Code: claude-plugins-community (Открыть исходники на GitHub) | Опубликован | 2.3.0 | Число не опубликовано | Не помечен |
Каждое число принадлежит своей витрине и никогда не складывается с числами других витрин. Если витрина число не публикует, мы его не показываем: нет числа не значит ноль.
Что умеет
Устанавливается в ИИ-инструмент как пакет плагинов; что он запускает, перечислено ниже.
- Объявляет инструментов
- Не опубликовано
- Просит переменных окружения
- Не опубликовано
- Запускает хуков
- 1
Что входит в пакет
Так опубликовано на витрине Claude Code: claude-plugins-official.
Скиллы: 9
sonar-analyzesonar-coveragesonar-dependency-riskssonar-duplicationsonar-fix-issuesonar-integratesonar-list-issuessonar-list-projectssonar-quality-gate
Агенты: 1
sonarqube-reviewer.agent
Хуки: 1
SessionStart
Правила: 1
sonarqube
Что менялось
С тех пор как мы следим за плагином, ничего не менялось.
Издатель
SonarSource · Репозиторий: github.com/sonarsource/sonarqube-agent-plugins
Возможно, тот же плагин
Листинги, у которых есть общий признак с этим, но недостаточно, чтобы считать их одним продуктом.
Похожие плагины
Продукты, чьи собственные названия, описания, инструменты и скиллы ближе всего по смыслу к этому, на всех витринах, которые мы читаем. Близость упорядочена только внутри этого списка.
- harness-sast-and-scaThe Harness SAST and SCA plugin for Claude Code enables Secure AI Coding, bringing real-time security into your AI-assisted development workflow. All AI-generated code is…
- sourcery-agentSourcery security findings for AI coding agents: triage and minimal-change remediation via the public Sourcery API (12 MCP tools + skills).
- Semgrep GuardianSemgrep catches security vulnerabilities in real-time and guides Claude to write secure code from the start.
- codebase-qualityAutomated code review for codebase using multiple specialized agents.
- opsera-devsecopsOpsera DevSecOps Agent — AI-powered architecture analysis, security scanning, compliance auditing, and SQL security for your codebase. Free trial included.
- advanced-securityAdvanced Security plugin for GitHub Copilot.
- shieldSecurity orchestrator — autonomous pentests, SAST, secrets scanning, dependency audits, and outdated checks from your code editor CLI. Wraps Shannon pentester with Semgrep…
- codebase-auditProduces a thorough, evidence-based software quality assessment of any git repository. Grades 16 dimensions — architecture, security, database design, observability, testing…
- tulaLLM-native code quality, security, and documentation analysis tool. Scores projects on a 1000-point scale across five categories using YAML rules, static analysis tools, and…
- security-guidanceSecurity review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF…
Похожие плагины по витринам
Тот же вопрос к каждой витрине по отдельности: есть ли там аналог этого плагина?
Есть на витрине Claude Code: claude-plugins-community (5)
- harness-sast-and-scaThe Harness SAST and SCA plugin for Claude Code enables Secure AI Coding, bringing real-time security into your AI-assisted development workflow. All AI-generated code is…
- Semgrep GuardianSemgrep catches security vulnerabilities in real-time and guides Claude to write secure code from the start.
- codebase-qualityAutomated code review for codebase using multiple specialized agents.
- opsera-devsecopsOpsera DevSecOps Agent — AI-powered architecture analysis, security scanning, compliance auditing, and SQL security for your codebase. Free trial included.
- shieldSecurity orchestrator — autonomous pentests, SAST, secrets scanning, dependency audits, and outdated checks from your code editor CLI. Wraps Shannon pentester with Semgrep…
Есть на витрине Claude Code: claude-plugins-official (5)
- Semgrep GuardianSemgrep catches security vulnerabilities in real-time and guides Claude to write secure code from the start.
- security-guidanceSecurity review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF…
- code-reviewAutomated code review for pull requests using multiple specialized agents with confidence-based scoring to filter false positives
- aikidoAikido Security scanning for Claude Code — SAST, secrets, and IaC vulnerability detection powered by the Aikido MCP server.
- claude-securityDeep vulnerability scanning of your own code, run entirely inside your Claude Code session at a chosen effort tier, with every finding challenged before it is reported and the…
Есть на витрине Claude: knowledge-work-plugins (5)
- security-guidanceSecurity review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF…
- QodoBring Qodo's codebase intelligence, coding standards, and code review into your coding agent.
- buildkiteOfficial Buildkite skills for Claude Code, Cursor, and other AI coding agents — pipelines, migration, preflight, agent runtime, CLI, and API
- stackhawk-hawkscanConfigure, run, and interpret HawkScan DAST results inside Claude Code. Generates stackhawk.yml configs, runs scans via CLI or Docker, and transforms security findings into…
- vantaThe Vanta plugin connects Claude Code to Vanta's security and compliance platform through the Vanta MCP server. It combines Vanta's test-specific remediation intelligence with…
Есть на витрине Codex: openai-curated (openai/plugins) (5)
- CodeRabbitAI-powered code review in Codex, powered by CodeRabbit.
- QodoQodo setup, code intelligence, and review workflows.
- GitHubInspect repositories, triage pull requests and issues, debug CI, and publish changes through a hybrid GitHub connector and CLI workflow.
- Codex SecurityCodex Security workflows for security scans, analysis, and investigation.
- Plugin EvalEvaluate Codex skills and plugins from chat with a beginner-friendly start command, local-first reports, token budget explanations, and guided benchmarking.
Есть на витрине Community GitHub marketplaces (5)
- sourcery-agentSourcery security findings for AI coding agents: triage and minimal-change remediation via the public Sourcery API (12 MCP tools + skills).
- aikidoAikido Security scanning for Claude Code — SAST, secrets, and IaC vulnerability detection powered by the Aikido MCP server.
- 42crunch-api-security-testingAutomate API security directly in Claude Code with 42Crunch - automatically audit OpenAPI specs, detect vulnerabilities aligned with OWASP API Security risks (including…
- aws-agents-for-devsecopsInvestigate incidents, review code and execute UAT for release readiness, scan code for vulnerabilities, and run penetration tests with AWS DevOps Agent and AWS Security Agent.
- Endor Labs Agent KitEndor Labs workflow agents and setup for Claude Code.
Есть на витрине Copilot CLI: github/awesome-copilot (5)
- modernization-workflowVisualize and guide the GitHub Copilot Modernize CLI Assess, Plan, and Execute workflow for .NET, Java, and C++ application repositories.
- ai-readyAnalyze any repository and generate AI-ready configuration — AGENTS.md, copilot-instructions.md, CI workflows, issue templates, and more. Mines your PR review patterns and creates…
- copilot-sdkBuild applications with the GitHub Copilot SDK across multiple programming languages. Includes comprehensive instructions for C#, Go, Node.js/TypeScript, and Python to help you…
- cast-imagingA comprehensive collection of specialized agents for software analysis, impact assessment, structural quality advisories, and architectural review using CAST Imaging.
- dependabot-triageTriage Dependabot alerts and recommend safe, evidence-based dependency updates.
Есть на витрине Copilot CLI: github/copilot-plugins (5)
- advanced-securityAdvanced Security plugin for GitHub Copilot.
- azure-devops-copilot-pluginBring Azure DevOps work-item, repository, and pull-request workflows into GitHub Copilot.
- microsoft-365-agents-toolkitToolkit for building Microsoft 365 Copilot declarative agents — scaffolding, JSON manifest development, and capability configuration.
- cpp-language-serverNavigate and interact with your C++ code using the Microsoft C++ Language Server.
- code-apps-previewBuild and deploy Power Apps code apps using React, Vite, and Power Platform connectors.
Есть на витрине Cursor: cursor/plugins (5)
- Cursor Team KitInternal team workflows for CI, code review, shipping, local automation, and verification.
- pstackif you want to go fast, go deep first. pstack helps you write less, but higher quality code. rigorous agent workflows you can parallelize with confidence.
- Agent CompatibilityCLI-backed repo compatibility scans plus agents that audit startup, validation, and docs against reality.
- Create PluginScaffold and validate new agent plugins.
- CLI for AgentsPatterns for designing CLIs that coding agents can run reliably: flags, help with examples, pipelines, errors, idempotency, dry-run.
Есть на витрине Docker MCP Catalog (5)
- SemgrepMCP server for using Semgrep to scan code for security vulnerabilities.
- SonarQube MCP ServerAnalyze code quality and security with SonarQube Server or Cloud directly in AI assistants.
- Sequa.AIStop stitching context for Copilot and Cursor. With Sequa MCP, your AI tools know your entire codebase and docs out of the box.
- ZenBridges multiple AI models and CLIs, enabling orchestrated workflows across Claude Code, Gemini CLI, Codex CLI, and other AI development tools.
- Python Refactoring AssistantEducational Python refactoring assistant that provides guided suggestions for AI assistants.
Есть на витрине Official MCP Registry (5)
- code-sentinel io.github.salrad22/code-sentinelCode quality analysis MCP server - detects security issues, deceptive patterns, and placeholders
- fixme-agent io.github.rotem1230/fixme-agentReal-time AI code quality — 30 validators, 17 languages, 813+ checks
- LiveCheck AISecure MCP runtime server for scanning and autofixing code issues
- mcp-codeaudit io.github.infoinlet-marketplace/mcp-codeauditSecurity audit for AI agents — scan code/diffs for leaked secrets, check deps via OSV.
- codebase-doctor io.github.subhajitlucky/codebase-doctorRead-only codebase audits for coding agents: secrets, RLS, deps, review verdicts. No writes.
Найдено по смыслу, а не по общему коду или репозиторию: похожие плагины остаются разными продуктами, и это не обзор и не рекомендация.
Это ваш плагин?
Докажите, что поддерживаете плагин: файлом в его репозитории, файлом на вашем домене или DNS-записью. Вы будете получать уведомления, когда витрина добавит плагин, снимет его, изменит отметку verified или список того, что он просит, и сможете поставить его удалённый endpoint на мониторинг как веб-сервис.
Данные витрины Claude Code: claude-plugins-official. Данные витрины Copilot CLI: github/awesome-copilot. Данные витрины Claude Code: claude-plugins-community. Числа взяты из наших регулярных обходов витрин, последняя проверка . Контакты издателей плагинов мы не публикуем.