sonar-scan

Extract SonarCloud quality gates, issues, and hotspots into structured snapshots.

4|Updated Apr 4, 2026
One-click install
npx skills add https://github.com/ghbvf/gocell --skill sonar-scan
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: sonar-scan
Source: https://github.com/ghbvf/gocell/tree/main/.claude/skills/sonar-scan
Command: npx skills add https://github.com/ghbvf/gocell --skill sonar-scan

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

从 SonarCloud 获取静态扫描结果(质量门、issues、hotspots),并将结果汇总以便团队监控代码质量与合规性。

Core Features & Use Cases

  • 获取最新的质量门状态、未解决的问题、漏洞和热点等关键指标,便于快速了解当前代码基线。
  • 生成结构化快照,支持推送到仪表板、告警系统,或作为发布门控的输入。
  • 适用于 CI/CD、代码审计和治理工作流,跨多个仓库汇总质量信息。

Quick Start

执行导出脚本以获取最新的 SonarCloud 扫描结果并生成报告。

Frequently Asked Questions about sonar-scan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I fetch SonarCloud static scan results for CI/CD reporting?▼

To fetch SonarCloud static scan results, you run a Python export script that requires SonarCloud token access to extract quality gates, issues, and hotspots, generating a structured snapshot for CI/CD reporting and governance.

What SonarCloud metrics are included in the static scan report?▼

The static scan report includes the latest quality gate status, unresolved issues, vulnerabilities, and security hotspots, providing a baseline snapshot to monitor code quality and compliance across multiple repositories.

Do I need a SonarCloud token to extract quality gate status and issues?▼

Yes, you need a SonarCloud token to authenticate and extract quality gate status, issues, and hotspots. The Python export script requires this token access to generate your project's quality metrics snapshot.

Can I use SonarCloud scan snapshots as quality gates in release workflows?▼

Yes, SonarCloud scan snapshots can be used as release quality gates. The structured output can be pushed to dashboards or alerting systems, serving as a gate input for CI/CD governance workflows.

What's the best way to automate code quality reporting across multiple repositories?▼

Automating code quality reporting across multiple repositories is best handled by running the Python export script within CI/CD workflows to aggregate SonarCloud quality gates, issues, and hotspots into a unified snapshot.