AI product
A SonarQube plugin for OpenAI Codex that brings Sonar's code-quality and security checks into the agent's coding loop. It provides a secrets-detection hook that blocks credentials in prompts, a list-issues skill backed by SonarQube's MCP server, context augmentation that supplies project guidelines before generation, and agentic analysis that scans edits server-side as they are made. The workflow can surface findings such as SQL injection data flows, guide the agent toward fixes such as parameterized queries, and verify the resulting edits through another check.
1 use taken from transcripts — each links to the moment in the video.
A plugin installed from the SonarQube marketplace into OpenAI's Codex that wires Sonar capabilities into the agent: a secrets detection hook that blocks credentials in prompts, a list-issues skill backed by the MCP server, context augmentation to feed project guidelines before generation, and agentic analysis that scans edits server-side as they happen.
1 in the library.