sonarclaude

Fetch SonarCloud quality gate status, issues, metrics, and security hotspots.

112|6|Updated Mar 19, 2026
One-click install
npx skills add https://github.com/agentculture/culture --skill sonarclaude
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: sonarclaude
Source: https://github.com/agentculture/culture/tree/main/.claude/skills/sonarclaude
Command: npx skills add https://github.com/agentculture/culture --skill sonarclaude

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires bash, curl, jq, and includes scripts (resource) components.

What problem does it solve?

Sonarclaude helps you quickly assess code quality and security health in SonarCloud without manually navigating the SonarCloud UI.

Core Features & Use Cases

  • Quality Gate Status: Retrieves project quality gate pass/fail (and related condition details) so you can quickly judge whether the project meets thresholds.
  • Issues & Filters: Lists issues with optional filtering by severity and type to support triage and review prioritization.
  • Metrics & Hotspots: Pulls core measures (coverage, bugs, code smells, duplication, LOC, and security-related metrics) and security hotspots for targeted remediation.

Quick Start

Set SONAR_TOKEN and run the skill’s script to check the quality gate for your SonarCloud project.

Frequently Asked Questions about sonarclaude

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I check my SonarCloud quality gate status for a project?

To check SonarCloud quality gate status, you need a SONAR_TOKEN and a SONAR_PROJECT key, then run the script's status subcommand to retrieve pass/fail results and related condition details.

How can I retrieve SonarCloud security hotspots for targeted remediation?

You can retrieve SonarCloud security hotspots by running the script's hotspots subcommand, which pulls security-related metrics and identified vulnerabilities for targeted code remediation across your repositories.

Do I need a SonarCloud API token to fetch code quality metrics?

Yes, you need a SonarCloud API token. You must set the SONAR_TOKEN environment variable for authentication and define the SONAR_PROJECT variable or use a --project override to fetch code quality metrics.

Can I filter SonarCloud issues by severity and type during a code review?

Yes, you can filter SonarCloud issues by severity and type. Use the issues subcommand with optional filtering parameters to support triage and review prioritization for your project.

What is the best way to pull SonarCloud code coverage and duplication metrics?

The best way to pull SonarCloud metrics like code coverage and duplication is by using the script's metrics subcommand, which extracts core measures including bugs, code smells, and LOC.

Does this SonarCloud integration work with bash, curl, and jq dependencies?

Yes, this integration works with bash, curl, and jq dependencies. It uses these components to execute the sonar.sh entry point and parse API responses for your engineering health reporting.