sonarqube

Automate SonarQube code quality analysis with Docker and quality gates.

105|8|Updated Feb 18, 2026
One-click install
npx skills add https://github.com/686f6c61/alfred-dev --skill sonarqube
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: sonarqube
Source: https://github.com/686f6c61/alfred-dev/tree/main/skills/calidad/sonarqube
Command: npx skills add https://github.com/686f6c61/alfred-dev --skill sonarqube

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill automates the process of analyzing code quality, identifying bugs, vulnerabilities, and code smells, and suggesting improvements to enhance software maintainability and security.

Core Features & Use Cases

  • Automated Code Analysis: Integrates with SonarQube to perform static code analysis.
  • Quality Metrics: Detects bugs, security vulnerabilities, code smells, and code coverage.
  • Improvement Suggestions: Provides actionable recommendations for code refactoring and issue resolution.
  • Use Case: After developing a new feature, run this Skill to get an automated report on code quality, ensuring it meets predefined standards before proceeding to the next development phase.

Quick Start

Run the SonarQube skill to analyze the current project's code quality.

Frequently Asked Questions about sonarqube

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate static analysis to detect bugs and code smells?

Automate static analysis by running SonarQube with Docker to detect bugs, vulnerabilities, and code smells. It configures sonar-project.properties and executes appropriate scanners to generate actionable improvement reports for your project.

Can I use SonarQube scanners for Node.js and Python projects?

Yes, SonarQube supports various project stacks including Node.js and Python. It configures the sonar-project.properties file and executes the appropriate language-specific scanners to analyze code quality.

How do I set up automated quality gates for code vulnerability scanning?

Set up automated quality gates by running this Skill to perform static code analysis with SonarQube. It facilitates automated quality gates and provides actionable reports on security vulnerabilities and code coverage.

What's the best way to check code quality before merging new features?

Check code quality by running an automated analysis after developing a new feature. This evaluates the code against predefined standards, detecting bugs and security vulnerabilities to ensure maintainability before the next development phase.

Do I need Docker to run automated code quality analysis?

Yes, Docker is required to run the automated code quality analysis. The Skill uses SonarQube and Docker to execute static analysis, detect code smells, and enforce quality gates across your project stack.

How does static analysis identify security vulnerabilities in my codebase?

Static analysis identifies security vulnerabilities by scanning the codebase with SonarQube to evaluate code metrics. It detects bugs, vulnerabilities, and code smells, then provides actionable recommendations for issue resolution.