Sonarqube plugin for Grok Build
Automatically enforce SonarQube code quality and security in the agent coding loop — 7,000+ rules, secrets scanning, agentic analysis, and quality gates across 40+ languages. PostToolUse hooks run analysis after every file edit. Pre-tool secrets scanning prevents 450+ patterns from reaching the LLM. Slash commands give on-demand access to quality gate status, coverage, duplication, and dependency risks. Includes SonarQube CLI, MCP Server, skills, hooks, and slash commands.
How to install Sonarqube in Grok Build
Grok Build loads Claude Code plugins automatically (docs), but no Grok-specific command is documented. Claude Code's command:
/plugin install sonarqube@claude-plugins-officialSource: Claude Code docs
What it contains
Component list not published in the marketplace catalog. See the source repo.
About this listing
Sonarqube comes from Anthropic's official Claude Code plugin marketplace, published by SonarSource, and is listed as Claude Code compatible (why); not tested in Grok Build. The marketplace pins it to commit 5a9356d957db of its source repository. It's one of 18 listings in the Security category on GrokStacks.
Get new Grok Build plugins like Sonarqube every week
The weekly GrokStacks drop: what's new and updated in the directory, in one short email.
You'll get a confirmation email first. Unsubscribe anytime.
Sonarqube FAQ
How do I install Sonarqube in Grok Build?
Grok Build loads Claude Code plugins automatically, according to the Grok Build docs, but no Grok-specific install command is documented for Sonarqube. Claude Code's documented command is /plugin install sonarqube@claude-plugins-official.
Is Sonarqube an official Grok Build plugin?
No. Sonarqube comes from Anthropic's official Claude Code plugin marketplace, published by SonarSource. It isn't in xAI's Grok Build marketplace; GrokStacks labels it Claude Code compatible because Grok Build reads Claude Code plugins, and we haven't tested it in Grok Build.
What does Sonarqube include?
Component list not published in the marketplace catalog. See the source repo.
Details
- Type
- Plugin
- Category
- Security
- Source
- Claude Code compatible
- Author
- SonarSource
- Source repo
- https://github.com/SonarSource/sonarqube-agent-plugins
- Pinned commit
5a9356d957db- Homepage
- https://www.sonarsource.com
- Listed in
- catalog file
- Tested by GrokStacks
- Not yet
Something wrong or missing? Submit or improve this listing. Marketplace listings also refresh automatically every night.
For maintainers: badge and embeds
Maintain Sonarqube? Add the badge; it links to this page.
Markdown
[](https://grokstacks.com/p/sonarqube/)HTML
<a href="https://grokstacks.com/p/sonarqube/"><img src="https://grokstacks.com/badge.svg" alt="Listed on GrokStacks" width="164" height="28"></a>Embed card (static HTML and inline CSS, no JavaScript). Preview:
<a href="https://grokstacks.com/p/sonarqube/" style="display:block;max-width:380px;box-sizing:border-box;padding:14px 16px;border:1px solid #2a2e3c;border-radius:12px;background:#0a0b0f;color:#e8eaf0;font:14px/1.45 -apple-system,Segoe UI,Roboto,Helvetica,Arial,sans-serif;text-decoration:none"><span style="display:block;font-size:16px;font-weight:700;color:#e8eaf0">Sonarqube</span><span style="display:block;margin:2px 0 8px;font-size:12px;color:#9aa0b1">Claude Code plugin, Grok Build compatible</span><span style="display:block;margin:0 0 10px;color:#c9cdd8">Automatically enforce SonarQube code quality and security in the agent coding loop — 7,000+ rules, secrets scanning…</span><span style="font-size:12px;font-weight:600;color:#7c9cff">View on GrokStacks →</span></a>Markdown summary
**[Sonarqube on GrokStacks](https://grokstacks.com/p/sonarqube/)**: Claude Code plugin, Grok Build compatible.More on badges, embeds and keeping your listing up to date: GrokStacks for plugin authors.
Also in Security
42crunch API Security Testing
Automate API security directly in Claude Code with 42Crunch - automatically audit OpenAPI specs, detect vulnerabilities aligned with OWASP API Security risks (including BOLA/BFLA), and apply AI-powered fixes. Designed for AI-assisted development workflows, it provides continuous guardrails through an audit->scan->remediate->validate loop, ensuring APIs meet enterprise security standards before deployment.
Auth0
Enterprise-grade auth, easy to implement. Add login, SSO, MFA, and access control to any app with framework-aware guidance.
Claude Security
Deep vulnerability scanning of your own code, run entirely inside your Claude Code session at a chosen effort tier, with every finding challenged before it is reported and the verification tally computed in code. Turns surviving findings into targeted patches, each verified by a panel of agents, that you apply when you choose.
CrowdSec
Operational skill for installing, configuring, operating, and debugging CrowdSec (cscli, LAPI/CAPI, hub, bouncers, WAF/AppSec) across bare-metal, Docker, and Kubernetes.
Crowdstrike Falcon Foundry
CrowdStrike Falcon Foundry development skills for building cybersecurity applications on the Falcon platform. Includes UI development, collections, functions, workflows, API integration, security patterns, and debugging workflows.
Crowdstrike Falcon Fusion
CrowdStrike Falcon Fusion skills for authoring, deploying, and executing Fusion workflows. Includes live action discovery, YAML authoring with schema validation, workflow import and release, execution monitoring, and Falcon Next-Gen SIEM lookup files.