Code verification that runs inside the agent’s session

SonarQube CLI offers static analysis integration for development workflows, accommodating various AI coding agents and providing safeguards against secret leakage. The CLI integrates with Git hooks, Claude Code, GitHub Copilot CLI, Codex, Cursor, Antigravity, CI/CD pipelines, and custom automation tools. It supports multiple operating systems, including Linux, macOS, and Windows.

Users can create a free SonarQube Cloud account for open source projects and generate an authentication token for secure CLI usage. The CLI offers three primary use cases: agentic use for AI coding agents, interactive CLI for manual scans, and scripting/automation for reporting and quality gates. Users must set environment variables for the token to avoid prompts and ensure secure storage.

The CLI provides JSON output by default, which can be filtered using tools like jq. Error codes include 0 (no secrets found) and 51 (at least one secret detected). The CLI supports various output formats, including json, table, toon, and csv. It also supports global and project-specific setup through git hooks. When secrets are detected, the CLI exits with code 51. Supported formats and exit codes ensure compatibility with different workflows and requirements.