AI product
A Codex marketplace plugin that connects Codex with SonarQube-based code analysis. It adds secrets-detection and verification hooks, skills for listing SonarQube issues, MCP configuration, context augmentation, and agents.md directives. In the demonstrated workflow, SonarQube findings are brought into the coding loop so Codex can inspect issues such as SQL injection, replace vulnerable string interpolation with a parameterized query, and verify the edited code again.
1 use taken from transcripts — each links to the moment in the video.
Installed via Codex plugin marketplace; wires secrets detection hooks, skills, MCP config and agents.md directives into Codex.
1 in the library.