skills.rest
denniscalazans
denniscalazansCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

sonar-triage

Update SonarQube issue and security hotspot statuses via API.

3|1|Updated Mar 2, 2026
Search Tags:#code quality#issue management#triage#sonarqube#false positive#security hotspots
One-click install
npx skills add https://github.com/denniscalazans/denniscalazans-plugins --skill sonar-triage
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: sonar-triage
Source: https://github.com/denniscalazans/denniscalazans-plugins/tree/main/plugins/code-quality/skills/sonar-triage
Command: npx skills add https://github.com/denniscalazans/denniscalazans-plugins --skill sonar-triage

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill streamlines the process of managing SonarQube issues by allowing users to quickly mark them as false positives, accepted risks, or reopen previously triaged issues, reducing noise and focusing on actionable items.

Core Features & Use Cases

  • Status Updates: Efficiently change the status of SonarQube issues to falsepositive, accept, or reopen.
  • Security Hotspot Management: Handles status updates for security hotspots using specific parameters.
  • Use Case: A developer identifies a SonarQube finding that is not a true issue due to specific project context. They use this Skill to mark it as a falsepositive, preventing it from cluttering future reports.

Quick Start

Use the sonar-triage skill to mark the issue with key 'abc-123' as a false positive.

Frequently Asked Questions about sonar-triage

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I mark a SonarQube issue as a false positive?▼

To mark a SonarQube issue as a false positive, you use the sonar-triage skill to modify the issue status via direct API interaction. You need the specific issue key and the falsepositive status parameter to update it correctly.

Can I manage SonarQube security hotspots using this triage approach?▼

Yes, you can manage SonarQube security hotspots using this triage approach. The skill handles status updates for security hotspots by applying specific parameters through direct API interaction to change their lifecycle state.

What statuses can I assign to SonarQube issues during triage?▼

During SonarQube issue triage, you can assign statuses such as falsepositive, accept, or reopen. These status updates streamline code quality workflows by reducing noise and focusing on actionable items.

What information is required to change a SonarQube issue status through the API?▼

Changing a SonarQube issue status through the API requires the specific issue key and the desired status parameters. Accurate issue keys and specific status parameters are necessary for successful lifecycle management updates.

Does this SonarQube issue management method work without additional dependencies?▼

Yes, this SonarQube issue management method works without additional dependencies. The skill operates independently using scripts and references to interact directly with the SonarQube API for issue lifecycle management.

Related Skills

Explore More Software Engineering Skills→
koderoverkoderover
7

sonar

Retrieve and analyze SonarQube code quality metrics and quality gate statuses.

Official
Intermediate
bitsoexbitsoex
40

java-coverage

Configure JaCoCo for Java/Gradle projects to generate and verify coverage reports.

Official
Intermediate
Devvraj10Devvraj10

security_scan

Orchestrate dependency audit, static code analysis, and dataflow security scans.

Community
Advanced
jimwellerjimweller

SonarQube Query

Query SonarQube projects, issues, and quality gate status via Web API.

Community
Intermediate