SonarQube CLI in agentic workflows

Use SonarQube CLI with agents to perform various actions.

This page explains how to use SonarQube CLI in agentic workflows, including integration with Claude Code.

Claude Code integration

The sonar integrate claude command integrates SonarQube CLI with Claude Code so you can perform tasks from the command line, such as:

Secrets scanning: Set up hooks that run before Claude reads or writes files. Once set up, Claude Code automatically blocks operations that would expose secrets. For more information, see Set up the Claude Code hook.

Code verification with Agentic Analysis: Configure Agentic Analysis on SonarQube Cloud.

Dependency analysis: Scan your project's open-source dependencies for known vulnerabilities, malware, and prohibited licenses with sonar analyze dependency-risks. Available on SonarQube Cloud and on SonarQube Server 2026.4+ with Advanced Security and SCA enabled. See sca.md.

Context Augmentation: Provide context to your agent to make it generate better code. See Add context to generate better code.

List of commands

For the full list of SonarQube CLI commands, see Commands.