[NEW PLUGIN] a3openapi - Requesting inclusion in SonarQube Marketplace

SonarQube Server / Community Build Plugin Development
, ,
1

Hello SonarSource team,

We are API&AI Addicts community, and we would like to request the inclusion of our plugin a3openapi in the SonarQube Marketplace.

This plugin provides a set of custom rules specifically designed to analyze and improve the quality, security, and consistency of OpenAPI 2.0 and 3.0 specifications. It helps teams maintain architectural standards and detect anti-patterns in their API definitions.

The first release we would like to include is 1.3.2.

Here is the information about the plugin:

We have prepared the metadata for the Marketplace. Here is the related Pull Request in the sonar-update-center-properties repository: a3openapi PR

As part of our quality process, we maintain test cases and documentation within the repository to ensure rule accuracy.

Thank you!

4

Hi @API-AI-Addicts

Thanks a lot for the contribution.

Could you please provide me with a small test project for me to validate the plugin?

5

Hi Elena,

Thank you very much for your response!

We’ve prepared a small test project with several OpenAPI files to help validate the plugin’s behavior:

test-project.zip (2.8 KB)

The project mainly includes intentionally non-compliant specifications, designed to trigger different rules and validate their coverage and accuracy across a wide range of scenarios.

Given that the rules are quite strict and organization-oriented, this approach allows us to better demonstrate how the plugin detects issues and enforces consistency, security, and best practices.

Also, as a quick update, we have bumped the plugin version in the Pull Request to 1.3.3, which we are now proposing as the initial version for the Sonar Marketplace.

Here are the updated plugin details, including the refreshed PR:

Plugin key: a3openapi
License: LGPL v3
Version: 1.3.3
Project URL: a3openapi - Github
Plugin binaries URL: a3openapi - v1.3.3
SonarCloud URL: a3openapi - SonarCloud
Issue Tracker: a3openapi - Github Issues
Marketplace PR: a3openapi PR

Just to mention, the plugin uses our internal project sonar-openapi, which is already included in the packaging.

Please let us know if this works for you, or if you would prefer the test project in a different format.

Thanks again for your time and support!

6

Thanks a lot! I will try to prioritize my tests and review for next week.

1 Like