sonar-triage

Update SonarQube issue and security hotspot statuses via API.

3|1|Updated Mar 2, 2026

Search Tags:#code quality #issue management #triage #sonarqube #false positive #security hotspots

Ready to run

npx skills add https://github.com/denniscalazans/denniscalazans-plugins --skill sonar-triage

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: sonar-triage
Source: https://github.com/denniscalazans/denniscalazans-plugins/tree/main/plugins/code-quality/skills/sonar-triage
Command: npx skills add https://github.com/denniscalazans/denniscalazans-plugins --skill sonar-triage

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill streamlines the process of managing SonarQube issues by allowing users to quickly mark them as false positives, accepted risks, or reopen previously triaged issues, reducing noise and focusing on actionable items.

Core Features & Use Cases

Status Updates: Efficiently change the status of SonarQube issues to falsepositive, accept, or reopen.
Security Hotspot Management: Handles status updates for security hotspots using specific parameters.
Use Case: A developer identifies a SonarQube finding that is not a true issue due to specific project context. They use this Skill to mark it as a falsepositive, preventing it from cluttering future reports.

Quick Start

Use the sonar-triage skill to mark the issue with key 'abc-123' as a false positive.

Frequently Asked Questions about sonar-triage

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I mark a SonarQube issue as a false positive?▼

To mark a SonarQube issue as a false positive, you use the sonar-triage skill to modify the issue status via direct API interaction. You need the specific issue key and the falsepositive status parameter to update it correctly.

Can I manage SonarQube security hotspots using this triage approach?▼

Yes, you can manage SonarQube security hotspots using this triage approach. The skill handles status updates for security hotspots by applying specific parameters through direct API interaction to change their lifecycle state.

What statuses can I assign to SonarQube issues during triage?▼

During SonarQube issue triage, you can assign statuses such as falsepositive, accept, or reopen. These status updates streamline code quality workflows by reducing noise and focusing on actionable items.

What information is required to change a SonarQube issue status through the API?▼

Changing a SonarQube issue status through the API requires the specific issue key and the desired status parameters. Accurate issue keys and specific status parameters are necessary for successful lifecycle management updates.

Does this SonarQube issue management method work without additional dependencies?▼

Yes, this SonarQube issue management method works without additional dependencies. The skill operates independently using scripts and references to interact directly with the SonarQube API for issue lifecycle management.