# SonarQube

> 7,000+ static-analysis rules enforced on every file edit

Source: https://aistack.sh/plugin/sonarqube-plugin
Real source: https://www.sonarsource.com
Author: SonarSource
Category: security
Marketplace: claude-plugins-official
Last verified: 2026-09-06

SonarSource's Claude Code plugin bundles the SonarQube CLI, MCP server, skills, hooks, and slash commands. PostToolUse hooks run analysis after every file edit across 40+ languages, and pre-tool secrets scanning blocks 450+ secret patterns before they reach the model.

## Install

### claude-code

```
/plugin marketplace add anthropics/claude-plugins-official
/plugin install sonarqube@claude-plugins-official
```

The official marketplace registers itself automatically on Claude Code's first interactive launch, so the marketplace-add step is often a no-op; running it is still safe and works on any machine.

---

From aistack.sh. Last verified 2026-09-06.