SonarQube命令行AI扫描工具

Prerequisites

Before installing, you need:

• SonarQube Access (choose one):
• SonarQube Cloud — Free for open source projects, paid for private repositories
• SonarQube Server — Self-hosted instance (v9.9+)

• Operating System: Linux (x86-64, ARM64), macOS (ARM64), or Windows (x86-64)

Optional: - Git 2.x+ for git hook integrations - Claude Code or GitHub Copilot CLI for AI assistant integrations

First time with SonarQube? Create a free SonarQube Cloud account — no credit card required for open source projects.

Step 1: Install

Linux/macOS:

curl -o- https://raw.githubusercontent.com/SonarSource/sonarqube-cli/refs/heads/master/user-scripts/install.sh | bash

Windows (from PowerShell):

irm https://raw.githubusercontent.com/SonarSource/sonarqube-cli/refs/heads/master/user-scripts/install.ps1 | iex

Verify installation: ```bash sonar --version

Git hook doesn't run after installation

Symptom: Installed pre-commit hook but it doesn't execute on git commit

Solution:

1. Check the hook file exists and is executable:

   ls -la .git/hooks/pre-commit
   chmod +x .git/hooks/pre-commit
   

2. Test the hook manually:

   .git/hooks/pre-commit
   

3. For global hooks, verify git configuration:

   git config --global core.hooksPath
   # Should show: ~/.sonar/git-hooks (or similar)
   

---

"Command not found: sonar" after installation

Symptom: After running the installer, terminal doesn't recognize sonar

Solution:

1. Restart your terminal (required to reload PATH)

1. If still not working, manually add to PATH:

Linux/macOS — Add to ~/.bashrc or ~/.zshrc:

   export PATH="$HOME/.local/share/sonarqube-cli/bin:$PATH"
   

Windows — The installer should have updated PATH automatically. Try: - Opening a new PowerShell window - Restarting your computer if the issue persists

3. Verify the binary exists:

   # Linux/macOS:
   ls -la ~/.local/share/sonarqube-cli/bin/sonar

   # Windows (PowerShell):
   ls $env:LOCALAPPDATA\sonarqube-cli\bin\sonar.exe
   

---

Uninstalling

Quick Start

Example output: 1.0.0

```

Note: You may need to restart your terminal for the sonar command to be available.

Example Outputs

{"key":"my-org_demo","name":"demo-project"}],

Sonar Secrets CLI - BETA (2.43.0.11106)

Stripe API Key

Integrations

Claude Code Integration

Global setup (hooks apply to all Claude Code sessions):

sonar auth login
sonar integrate claude -g

Project-specific setup (hooks apply only to this project):

cd your-project
sonar auth login
sonar integrate claude --project my-org_my-project

This installs: - Pre-tool-use hook for secrets scanning — Prevents hardcoded credentials from being sent to LLM providers - SonarQube Agentic Analysis integration — Server-side code quality analysis in your workflow - Model Context Protocol (MCP) server — Access SonarQube data directly from Claude Code

GitHub Copilot Integration

Global setup:

sonar auth login
sonar integrate copilot -g

Project-specific setup:

cd your-project
sonar auth login
sonar integrate copilot --project my-org_my-project

This installs: - Pre-tool-use hook for secrets scanning — Prevents hardcoded credentials from being sent to LLM providers - SonarQube Agentic Analysis integration — Server-side code quality analysis in your workflow - Model Context Protocol (MCP) server — Access SonarQube data directly from Copilot

Troubleshooting