skills.rest
harshanandak
harshanandakCOMMUNITY
Explore all skills by this author →
GitHub

sonarcloud-analysis

Fetch SonarCloud issues, metrics, and quality gate status for a project.

4|Updated Jan 30, 2026
Search Tags:#security#metrics#issues#coverage#sonarcloud#technicaldebt
One-click install
npx skills add https://github.com/harshanandak/forge --skill sonarcloud-analysis
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: sonarcloud-analysis
Source: https://github.com/harshanandak/forge/tree/main/skills/sonarcloud-analysis
Command: npx skills add https://github.com/harshanandak/forge --skill sonarcloud-analysis

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Teams need up‑to‑date insight into code quality, security vulnerabilities, coverage, and technical debt, but manually gathering SonarCloud data is time‑consuming and error‑prone.

Core Features & Use Cases

  • Issue Retrieval: Pull bugs, vulnerabilities, and code smells from any branch or pull request.
  • Metrics Dashboard: Get coverage, duplication, technical debt, and reliability/maintainability ratings.
  • Quality Gate Checks: Evaluate pass/fail status for PRs and the main branch, highlighting blockers.

Quick Start

Ask the sonarcloud-analysis skill to retrieve the current quality gate status for the main branch of our project.

Frequently Asked Questions about sonarcloud-analysis

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I retrieve code quality and security issues from a specific branch using SonarCloud?▼

To retrieve SonarCloud issues for a specific branch, you can fetch bugs, vulnerabilities, and code smells by specifying the branch or pull request, provided the required authentication environment variables are configured.

Can I check the SonarCloud quality gate status for a pull request?▼

Yes, you can check the SonarCloud quality gate status for a pull request to evaluate pass or fail conditions, highlighting blockers that need resolution before merging.

What environment variables do I need to set up to fetch SonarCloud metrics?▼

To fetch SonarCloud metrics and technical debt data, you must configure three environment variables: SONARCLOUD_TOKEN, SONARCLOUD_ORG, and SONARCLOUD_PROJECT.

What is the best way to review technical debt and coverage metrics across different branches?▼

The best way to review technical debt and coverage metrics across branches is to pull the metrics dashboard data, which provides duplication, reliability, and maintainability ratings for the specified project.

Does this approach work for assessing security vulnerabilities on the main line?▼

Yes, assessing security vulnerabilities on the main line is supported, allowing teams to pull vulnerability reports and code quality analysis directly from the main branch of the specified project.

Related Skills

Explore More Software Engineering Skills→
opendatahub-ioopendatahub-io
36

pipeline-debugger

Fetch GitLab CI/CD pipeline and job statuses via the GitLab API.

Official
Intermediate
gvinokurgvinokur

code-reviewer

Validate pull requests for zero new SonarCloud issues before merge.

Community
Advanced
gvinokurgvinokur

gemini-auditor

Interpret SonarCloud reports and generate file-specific code fixes.

Community
Advanced
BagelHoleBagelHole
46

sast-scanning

Performs static security testing on source code using Semgrep, CodeQL, and SonarQube.

Community
Intermediate