SonarQube plugin for Codex
SonarQube is the AI code quality and security verification platform used by millions of developers to catch bugs, vulnerabilities, and leaked secrets. This plugin enforces those standards in the agent coding loop: 7,500+ distinct issue types, secrets scanning, agentic analysis, and quality gates across 40+ languages.
How to install SonarQube in Codex
1. Add the repo as a Codex plugin marketplace:
codex plugin marketplace add SonarSource/sonarqube-agent-plugins2. Install the plugin from it:
codex plugin add sonarqube@sonarThis repo ships a Codex marketplace file (.agents/plugins/marketplace.json). The first command adds it as a marketplace (Codex CLI reference); the second installs the plugin 'sonarqube'. 'sonar' is the marketplace name from that file. Check the repo README too. Command format: Codex CLI reference.
New Codex plugins every Tuesday, install line ready to copy.
Stacks Weekly is one short email from GrokStacks and CodexStacks. Subscribe and get the free starter list: 20 Codex plugins worth installing first.
Confirmation email first. Unsubscribe anytime.
What it contains
Plugins in this marketplace (1)
sonarqube— SonarQube is the AI code quality and security verification platform used by millions of developers to catch bugs, vulnerabilities, and leaked secrets. This plugin enforces those standards in the agent coding loop: 7,500+ distinct issue types, secrets…
Example prompts from the manifest
- Help me fix the most severe SonarQube issues for this project
About this listing
SonarQube is a community plugin on GitHub by SonarSource. Its README documents a Codex install and the repo ships a Codex plugin manifest. It passed the CodexStacks quality filter for repos found this way (at least 100 stars, pushed in the last 90 days, not a fork or a list). OpenAI hasn't reviewed it, but it passed our Codex install check on Oct 29, 2026 (an install and load check, not a code review). From its files we found 1 plugin. The manifest says version 2.7.0. It's one of 441 listings in the Developer Tools category. It also appears in best Codex plugins for security, best Codex plugins for code review.
SonarQube FAQ
How do I install SonarQube in Codex?
Add the repo as a Codex plugin marketplace with codex plugin marketplace add SonarSource/sonarqube-agent-plugins, then install it with codex plugin add sonarqube@sonar. Commands: the command format from the Codex CLI reference; check the repo README too.
Is SonarQube an official Codex plugin?
No. SonarQube is a community repo on GitHub by SonarSource. It passed the CodexStacks quality filter, but OpenAI hasn't reviewed it, but it passed our Codex install check on Oct 29, 2026 (an install and load check, not a code review), so read the code before you install it.
What does SonarQube include?
From its manifest and repo files, SonarQube includes 1 plugin: sonarqube.
Details
- Type
- Plugin
- Category
- Developer Tools
- Source
- Community
- Author
- Sonar
- Version
- 2.7.0
- GitHub stars
- 114 (at last sync)
- Last push
- 2026-10-29
- Manifest
.agents/plugins/marketplace.json- GitHub topics
- agent, ai, sonarqube
- Source
- https://github.com/SonarSource/sonarqube-agent-plugins
- Listed via
- GitHub search: README documents a Codex install
- Install check by CodexStacks
- Passed on Oct 29, 2026 with Codex CLI 0.163.0: Codex loaded its skills. proof · how we check
Something wrong or missing? Submit or improve this listing. Listings also refresh automatically every night.
For maintainers: badge and embeds
Maintain SonarQube? Add the badge; it links to this page.
Markdown
[](https://codexstacks.com/p/sonarqube-agent-plugins/)HTML
<a href="https://codexstacks.com/p/sonarqube-agent-plugins/"><img src="https://codexstacks.com/badge.svg" alt="Listed on CodexStacks" width="172" height="28"></a>Embed card (static HTML and inline CSS, no JavaScript). Preview:
<a href="https://codexstacks.com/p/sonarqube-agent-plugins/" style="display:block;max-width:380px;box-sizing:border-box;padding:14px 16px;border:1px solid #3a2c26;border-radius:12px;background:#0d0b0a;color:#f3ece6;font:14px/1.45 -apple-system,Segoe UI,Roboto,Helvetica,Arial,sans-serif;text-decoration:none"><span style="display:block;font-size:16px;font-weight:700;color:#f3ece6">SonarQube</span><span style="display:block;margin:2px 0 8px;font-size:12px;color:#b5a9a1">Community Codex plugin · 1 plugin</span><span style="display:block;margin:0 0 10px;color:#ddd3cc">SonarQube is the AI code quality and security verification platform used by millions of developers to catch bugs…</span><span style="font-size:12px;font-weight:600;color:#ffb347">View on CodexStacks →</span></a>Markdown summary
**[SonarQube on CodexStacks](https://codexstacks.com/p/sonarqube-agent-plugins/)**: Community Codex plugin with 1 plugin.More on badges, embeds and keeping your listing up to date: CodexStacks for plugin authors.
Also in Developer Tools
Rea
Reverse engineer anything with agents, from app behavior down to native binaries.
Skills (mattpocock)
Skills for Real Engineers. Straight from my .agents directory.
Agents
Multi-harness agentic plugin marketplace for Claude Code, Codex, Cursor, OpenCode, GitHub Copilot, Google Antigravity, and Pi
Playwright MCP
Playwright MCP server
Nuwa Skill
你想蒸馏的下一个员工,何必是同事。蒸馏任何人的思维方式——心智模型、决策启发式、表达DNA。Distill how anyone thinks.
Oh My Codex
OmX - Oh My codeX: Your codex is not alone. Add hooks, agent teams, HUDs, and so much more.