# \#plugin **URL:** https://community.sonarsource.com/tag/plugin/155.md [Latest](https://community.sonarsource.com/latest.md) · [Categories](https://community.sonarsource.com/categories.md) · [Tags](https://community.sonarsource.com/tags.md) --- ## [Sonarqube-cli leaves behind empty .sonar scratch directories in project folder](https://community.sonarsource.com/t/sonarqube-cli-leaves-behind-empty-sonar-scratch-directories-in-project-folder/184368)
**Author:** [@lpieprzyk](https://community.sonarsource.com/u/lpieprzyk)\ **Replies:** 4\ **Last updated:** [September 24, 2026, 3:58pm UTC](https://community.sonarsource.com/t/sonarqube-cli-leaves-behind-empty-sonar-scratch-directories-in-project-folder/184368 "2026-09-24T15:58:18Z")
Description When the sonarqube-cli runs an analysis (e.g. triggered automatically via the Claude Code agent plugin), it creates a .sonar/ scratch directory inside the project root. After the analysis completes, this dir… --- ## [How can I identify the sonarqube-webapp commit corresponding to a SonarQube Server release?](https://community.sonarsource.com/t/how-can-i-identify-the-sonarqube-webapp-commit-corresponding-to-a-sonarqube-server-release/187841)
**Author:** [@amoriki](https://community.sonarsource.com/u/amoriki)\ **Replies:** 2\ **Last updated:** [September 3, 2026, 1:32am UTC](https://community.sonarsource.com/t/how-can-i-identify-the-sonarqube-webapp-commit-corresponding-to-a-sonarqube-server-release/187841 "2026-09-03T01:32:56Z")
Hello, I created a Japanese localization plugin for SonarQube Community Build and SonarQube Server. Although it has not been updated since its initial release, I would now like to resume updating it for newer SonarQube … --- ## [\[NEW RELEASE\] SonarQube Metrics Exporter — v3.0.0 Released + (v3.1.0 Update)](https://community.sonarsource.com/t/new-release-sonarqube-metrics-exporter-v3-0-0-released-v3-1-0-update/186562)
**Author:** [@Etam](https://community.sonarsource.com/u/Etam)\ **Replies:** 5\ **Last updated:** [August 12, 2026, 11:55pm UTC](https://community.sonarsource.com/t/new-release-sonarqube-metrics-exporter-v3-0-0-released-v3-1-0-update/186562 "2026-08-12T23:55:40Z")
:warning: Update — v3.1.0 now available | Download links fixed The JAR download links in the original post returned 404 due to a naming mismatch in the v3.0.0 release. This is fixed in v3.1.0 — please use the updated l… --- ## [SonarScanner for Gradle 7.3.1](https://community.sonarsource.com/t/sonarscanner-for-gradle-7-3-1/183205)
**Author:** [@aurelien.coet](https://community.sonarsource.com/u/aurelien.coet)\ **Replies:** 3\ **Last updated:** [June 9, 2026, 6:58am UTC](https://community.sonarsource.com/t/sonarscanner-for-gradle-7-3-1/183205 "2026-06-09T06:58:41Z")
We are pleased to announce the release of the Sonar scanner for Gradle 7.3.1. This patch version addresses key issues encountered by users running the scanner alongside the Android Gradle Plugin 9. Specifically, this re… --- ## [SonarScanner for Gradle 7.3.0](https://community.sonarsource.com/t/sonarscanner-for-gradle-7-3-0/181881)
**Author:** [@aurelien.coet](https://community.sonarsource.com/u/aurelien.coet)\ **Replies:** 3\ **Last updated:** [June 2, 2026, 6:34am UTC](https://community.sonarsource.com/t/sonarscanner-for-gradle-7-3-0/181881 "2026-06-02T06:34:11Z")
We are pleased to announce the release of the Sonar scanner for Gradle 7.3, now supporting Android Gradle Plugin version 9. The release also fixes some issues that were present in previous versions of the scanner and mo… --- ## [Working towards the support of Android Gradle Plugin 9](https://community.sonarsource.com/t/working-towards-the-support-of-android-gradle-plugin-9/177015)
**Author:** [@Dorian\_Burihabwa](https://community.sonarsource.com/u/Dorian_Burihabwa)\ **Replies:** 8\ **Last updated:** [April 30, 2026, 9:09am UTC](https://community.sonarsource.com/t/working-towards-the-support-of-android-gradle-plugin-9/177015 "2026-04-30T09:09:03Z")
Hey folks, With the release Android Gradle Plugin 9, we assume most of you will be migrating to the newest version of AGP very soon. However, as some of you have attempted to do so, we have been made aware of conflicts … --- ## [\[NEW PLUGIN\] a3openapi - Requesting inclusion in SonarQube Marketplace](https://community.sonarsource.com/t/new-plugin-a3openapi-requesting-inclusion-in-sonarqube-marketplace/179369)
**Author:** [@API-AI-Addicts](https://community.sonarsource.com/u/API-AI-Addicts)\ **Replies:** 3\ **Last updated:** [March 27, 2026, 8:20am UTC](https://community.sonarsource.com/t/new-plugin-a3openapi-requesting-inclusion-in-sonarqube-marketplace/179369 "2026-03-27T08:20:10Z")
Hello SonarSource team, We are API&AI Addicts community, and we would like to request the inclusion of our plugin a3openapi in the SonarQube Marketplace. This plugin provides a set of custom rules specifically designed… --- ## [\[Solved\] Trivy OS Vulnerabilities missing in SonarQube Dashboard](https://community.sonarsource.com/t/solved-trivy-os-vulnerabilities-missing-in-sonarqube-dashboard/177654)
**Author:** [@gabrielviegas](https://community.sonarsource.com/u/gabrielviegas)\ **Replies:** 1\ **Last updated:** [February 16, 2026, 1:46pm UTC](https://community.sonarsource.com/t/solved-trivy-os-vulnerabilities-missing-in-sonarqube-dashboard/177654 "2026-02-16T13:46:37Z")
Hi everyone, I recently faced a challenge integrating Trivy scans with SonarQube (Community Edition), specifically regarding Docker image vulnerabilities. I noticed many users in this forum have struggled with this same… --- ## [SonarQube Gradle Plugin 7.2.2.6593 has no data for NPM](https://community.sonarsource.com/t/sonarqube-gradle-plugin-7-2-2-6593-has-no-data-for-npm/172574)
**Author:** [@Adam\_Jankovec](https://community.sonarsource.com/u/Adam_Jankovec)\ **Replies:** 1\ **Last updated:** [January 20, 2026, 4:15pm UTC](https://community.sonarsource.com/t/sonarqube-gradle-plugin-7-2-2-6593-has-no-data-for-npm/172574 "2026-01-20T16:15:22Z")
Hi, update of SonarQube Gradle plugin from 7.1.0.6387 to 7.2.0.6526 broke npm projects for us completely - no coverage, no issues, no duplicates. Even the latest version 7.2.2.6593 is still broken. 7.1.0.6387 is the las… --- ## [Error when running sonar task with Gradle 9.0.0-rc-1](https://community.sonarsource.com/t/error-when-running-sonar-task-with-gradle-9-0-0-rc-1/143857)
**Author:** [@G00fY2](https://community.sonarsource.com/u/G00fY2)\ **Replies:** 26\ **Last updated:** [November 24, 2025, 11:48am UTC](https://community.sonarsource.com/t/error-when-running-sonar-task-with-gradle-9-0-0-rc-1/143857 "2025-11-24T11:48:04Z")
Currently we prepare the migration to Gradle 9. Our whole Android project build and pipeline is working so far. But we get the following error when running sonar Gradle task: \[2025-07-03T14:42:18.387Z\] \> Task :sonar FAI… --- ## [Need to install SWIFT plugin in SonarQube Community editon (25.7 version)](https://community.sonarsource.com/t/need-to-install-swift-plugin-in-sonarqube-community-editon-25-7-version/148982)
**Author:** [@Huzaifa](https://community.sonarsource.com/u/Huzaifa)\ **Replies:** 1\ **Last updated:** [September 18, 2025, 10:42am UTC](https://community.sonarsource.com/t/need-to-install-swift-plugin-in-sonarqube-community-editon-25-7-version/148982 "2025-09-18T10:42:57Z")
Hello Team, We are using Sonarqube community build of version 25.7 and as of now there is no support language for SWIFT. We need to scan SWIFT code on our SonarQube Community build edition. so, Is it feasible or not? R… --- ## [Integrate sonarQube within dynamics 365 OnPremise](https://community.sonarsource.com/t/integrate-sonarqube-within-dynamics-365-onpremise/147764)
**Author:** [@faten\_gharbi](https://community.sonarsource.com/u/faten_gharbi)\ **Replies:** 0\ **Last updated:** [August 31, 2025, 5:46pm UTC](https://community.sonarsource.com/t/integrate-sonarqube-within-dynamics-365-onpremise/147764 "2025-08-31T17:46:14Z")
I am working on integrating SonarQube with our Dynamics 365 Customer Engagement (on-premise) development pipeline. The goal is to automatically enforce critical best practices for our customizations, specifically targeti… --- ## [Rust language support in 2025.1 LTA](https://community.sonarsource.com/t/rust-language-support-in-2025-1-lta/144759)
**Author:** [@Marcin\_Karwinski](https://community.sonarsource.com/u/Marcin_Karwinski)\ **Replies:** 4\ **Last updated:** [July 23, 2025, 11:37am UTC](https://community.sonarsource.com/t/rust-language-support-in-2025-1-lta/144759 "2025-07-23T11:37:40Z")
Must-share information: SonarQube Server 2025.1.1 LTA Plugin C4tWithShell/community-rust v0.2.6 (from Releases · C4tWithShell/community-rust · GitHub) SonarQube deployment method: Helm chart (from GitHub - SonarSource/… --- ## [More issue reported after installing YAML analyser](https://community.sonarsource.com/t/more-issue-reported-after-installing-yaml-analyser/144594)
**Author:** [@Shivashree](https://community.sonarsource.com/u/Shivashree)\ **Replies:** 4\ **Last updated:** [July 18, 2025, 3:43pm UTC](https://community.sonarsource.com/t/more-issue-reported-after-installing-yaml-analyser/144594 "2025-07-18T15:43:55Z")
Hello team, After installing yaml analyzer plugin recently we are noticing more issue reporting in the project. scanned after installing the YAML plugin Link: https://github.com/sbaudoin/sonar-yaml/releases/download/v… --- ## [SonarQube Gradle Plugin 6 can't read cacerts](https://community.sonarsource.com/t/sonarqube-gradle-plugin-6-cant-read-cacerts/142863)
**Author:** [@Paul\_Birtle](https://community.sonarsource.com/u/Paul_Birtle)\ **Replies:** 20\ **Last updated:** [July 17, 2025, 8:02am UTC](https://community.sonarsource.com/t/sonarqube-gradle-plugin-6-cant-read-cacerts/142863 "2025-07-17T08:02:12Z")
When upgrading the SonarQube Gradle Plugin from 5.1 to 6.2 I get an issue where it fails with Unable to read truststore from ‘/usr/lib/jvm/temurin-21-jdk-amd64/lib/security/cacerts’. My build/scan runs from a ubuntu-late… --- ## [Javascript plugin version 11 seems to be broken](https://community.sonarsource.com/t/javascript-plugin-version-11-seems-to-be-broken/144101)
**Author:** [@Roman\_Mykhailiuk](https://community.sonarsource.com/u/Roman_Mykhailiuk)\ **Replies:** 7\ **Last updated:** [July 10, 2025, 7:24am UTC](https://community.sonarsource.com/t/javascript-plugin-version-11-seems-to-be-broken/144101 "2025-07-10T07:24:12Z")
Since javascript plugin version 11.0.0.33655 all our Sonar analysis are failing with error: 07:30:09.240 ERROR: Error during SonarScanner execution java.lang.IllegalStateException: Analysis of JS/TS files failed at org… --- ## [Extension sonar-rust-plugin reconized as malware Trojan.GenericKD.76426429](https://community.sonarsource.com/t/extension-sonar-rust-plugin-reconized-as-malware-trojan-generickd-76426429/142406)
**Author:** [@jrmagots](https://community.sonarsource.com/u/jrmagots)\ **Replies:** 1\ **Last updated:** [June 10, 2025, 9:39am UTC](https://community.sonarsource.com/t/extension-sonar-rust-plugin-reconized-as-malware-trojan-generickd-76426429/142406 "2025-06-10T09:39:47Z")
Some security tools are pointing the file bellow as Infected by Trojan.GenericKD.76426429 VirusTotal Analyze /opt/sonarqube/lib/extensions/sonar-rust-plugin-1.0.2.734.jar I assumed it as a false positive, as I saw in … --- ## [Sonar-auth-oidc-plugin version compatibility](https://community.sonarsource.com/t/sonar-auth-oidc-plugin-version-compatibility/134941)
**Author:** [@priyabelhekar](https://community.sonarsource.com/u/priyabelhekar)\ **Replies:** 9\ **Last updated:** [June 2, 2025, 12:27pm UTC](https://community.sonarsource.com/t/sonar-auth-oidc-plugin-version-compatibility/134941 "2025-06-02T12:27:47Z")
Current Version: sonarqube:10.7.0-community Trying to deploy: sonarqube:25.1.0.102122-community We use plugin sonar-auth-oidc-plugin in our Dockerfile: sonar-auth-oidc-plugin-2.1.1.jar - which is the latest available v… --- ## [SonarQube Gradle Plugin 6.0 breaks Android tasks](https://community.sonarsource.com/t/sonarqube-gradle-plugin-6-0-breaks-android-tasks/130863)
**Author:** [@G00fY2](https://community.sonarsource.com/u/G00fY2)\ **Replies:** 11\ **Last updated:** [April 23, 2025, 8:04pm UTC](https://community.sonarsource.com/t/sonarqube-gradle-plugin-6-0-breaks-android-tasks/130863 "2025-04-23T20:04:38Z")
When updating to latest SonarQube Gradle plugin 6.0.0.5145 Android tasks in our project fail with NoClassDefFoundError exception. I assume the reason for this is because of Bouncy Castle incompatibilities introduced by u… --- ## [Maven plugin 5.1.0.4751 fails during Docker run command on Corretto Java 21](https://community.sonarsource.com/t/maven-plugin-5-1-0-4751-fails-during-docker-run-command-on-corretto-java-21/137757)
**Author:** [@SpanTcgplayer](https://community.sonarsource.com/u/SpanTcgplayer)\ **Replies:** 5\ **Last updated:** [March 26, 2025, 4:32pm UTC](https://community.sonarsource.com/t/maven-plugin-5-1-0-4751-fails-during-docker-run-command-on-corretto-java-21/137757 "2025-03-26T16:32:23Z")
ALM used Github CI system used: Github Scanner command used when applicable (private details masked) In Dockerfile RUN mvn clean package org.sonarsource.scanner.maven:sonar-maven-plugin:sonar Languages of th… --- ## [Plugins that disappeared when upgrading SonarQube versions](https://community.sonarsource.com/t/plugins-that-disappeared-when-upgrading-sonarqube-versions/137051)
**Author:** [@yoonbeen](https://community.sonarsource.com/u/yoonbeen)\ **Replies:** 1\ **Last updated:** [March 19, 2025, 5:27pm UTC](https://community.sonarsource.com/t/plugins-that-disappeared-when-upgrading-sonarqube-versions/137051 "2025-03-19T17:27:36Z")
I upgraded SonarQube from version 7.6 to version 9.9.8. I don’t see the plugins that were installed by default. Do I need to find and install another plugin or is this just an addition to the default functionality? Li… --- ## [SonarQube Plugin for SBOM Generation](https://community.sonarsource.com/t/sonarqube-plugin-for-sbom-generation/136425)
**Author:** [@JB95](https://community.sonarsource.com/u/JB95)\ **Replies:** 1\ **Last updated:** [March 7, 2025, 2:46pm UTC](https://community.sonarsource.com/t/sonarqube-plugin-for-sbom-generation/136425 "2025-03-07T14:46:36Z")
Is there a SonarQube plugin that generates an SBOM? Third-party plugins are also acceptable. --- ## [Custom Plugin - Unable to Access Sonar Parameters and Share Measures in MeasureComputer](https://community.sonarsource.com/t/custom-plugin-unable-to-access-sonar-parameters-and-share-measures-in-measurecomputer/136014)
**Author:** [@Feako](https://community.sonarsource.com/u/Feako)\ **Replies:** 5\ **Last updated:** [March 4, 2025, 2:22pm UTC](https://community.sonarsource.com/t/custom-plugin-unable-to-access-sonar-parameters-and-share-measures-in-measurecomputer/136014 "2025-03-04T14:22:42Z")
What are you trying to accomplish? I am developing a custom SonarQube plugin and trying to: Access SonarQube configuration parameters within MeasureComputer. Share computed measures from MeasureComputer with other par… --- ## [MethodInvocationTree Cheat Sheet for SonarQube Plugin Developers](https://community.sonarsource.com/t/methodinvocationtree-cheat-sheet-for-sonarqube-plugin-developers/136069)
**Author:** [@TSYBUKS](https://community.sonarsource.com/u/TSYBUKS)\ **Replies:** 0\ **Last updated:** [February 28, 2025, 9:10pm UTC](https://community.sonarsource.com/t/methodinvocationtree-cheat-sheet-for-sonarqube-plugin-developers/136069 "2025-02-28T21:10:41Z")
If you’re diving into developing SonarQube plugins, understanding the MethodInvocationTree API is crucial for analyzing method invocations in your code. Here’s a concise cheat sheet that can help you navigate through the… --- ## [\[NEW PLUGIN\] creedengo iOS - Requesting inclusion in SonarQube Marketplace](https://community.sonarsource.com/t/new-plugin-creedengo-ios-requesting-inclusion-in-sonarqube-marketplace/134364)
**Author:** [@dedece35](https://community.sonarsource.com/u/dedece35)\ **Replies:** 4\ **Last updated:** [February 14, 2025, 5:15pm UTC](https://community.sonarsource.com/t/new-plugin-creedengo-ios-requesting-inclusion-in-sonarqube-marketplace/134364 "2025-02-14T17:15:13Z")
Hello SonarSource team :wave: I am a member of the Green-Code-Initiative core team. We would like to request the addition of the Creedengo iOS plugin to the SonarQube Marketplace. Some description of the Creedengo proje… --- ## [Question : plugin to support mustache](https://community.sonarsource.com/t/question-plugin-to-support-mustache/133305)
**Author:** [@CharlesLgn](https://community.sonarsource.com/u/CharlesLgn)\ **Replies:** 4\ **Last updated:** [January 23, 2025, 1:35pm UTC](https://community.sonarsource.com/t/question-plugin-to-support-mustache/133305 "2025-01-23T13:35:13Z")
Hello, Someone in my company asked me if there is a way to add custom rule for .mustache files. As I dive into it, I found nothing. Is there a plugin to add mustache files, and is there a way to create rule on it ? t… --- ## [Sonar webhook fails with bitbucket certification](https://community.sonarsource.com/t/sonar-webhook-fails-with-bitbucket-certification/133297)
**Author:** [@arielman](https://community.sonarsource.com/u/arielman)\ **Replies:** 1\ **Last updated:** [January 13, 2025, 8:33am UTC](https://community.sonarsource.com/t/sonar-webhook-fails-with-bitbucket-certification/133297 "2025-01-13T08:33:24Z")
Hi All I’m using sonar and bitbucket integration plugin: Include Code Quality for Bitbucket I configured the webhook in sonar, but it’s red and I see this error in the sonar log: Failed to send webhook ‘ch.mibex.bit… --- ## [Flutter custom rules - SonarQube 10.8+](https://community.sonarsource.com/t/flutter-custom-rules-sonarqube-10-8/132221)
**Author:** [@balbi-uff](https://community.sonarsource.com/u/balbi-uff)\ **Replies:** 1\ **Last updated:** [December 17, 2024, 1:39pm UTC](https://community.sonarsource.com/t/flutter-custom-rules-sonarqube-10-8/132221 "2024-12-17T13:39:24Z")
SonarQube 10.8 - Enterprise Edition What are you trying to accomplish? I’m trying to set up a dart analyzer to assure compliance of some of my company’s business rules. I wish to extend the Dart Language, should I use… --- ## [Import XML rules on the standalone SonarLint IntelliJ plugin](https://community.sonarsource.com/t/import-xml-rules-on-the-standalone-sonarlint-intellij-plugin/131596)
**Author:** [@gantoin](https://community.sonarsource.com/u/gantoin)\ **Replies:** 1\ **Last updated:** [December 16, 2024, 3:20pm UTC](https://community.sonarsource.com/t/import-xml-rules-on-the-standalone-sonarlint-intellij-plugin/131596 "2024-12-16T15:20:52Z")
Hello :wave: I would like to import XML rules into the SonarLint IntelliJ standalone plugin. I cannot connect to my client’s SonarQube server when I’m not on his local network. I guess it’s not possible currently into … --- ## [Sonar dependency-check plugin not working properly](https://community.sonarsource.com/t/sonar-dependency-check-plugin-not-working-properly/124369)
**Author:** [@Dimitrios\_Nikolakako](https://community.sonarsource.com/u/Dimitrios_Nikolakako)\ **Replies:** 3\ **Last updated:** [November 6, 2024, 11:11am UTC](https://community.sonarsource.com/t/sonar-dependency-check-plugin-not-working-properly/124369 "2024-11-06T11:11:24Z")
Hello everyone, the issue we are facing is more or less described here (Dynamic parts of dependency report when opened from SonarQube not working · Issue #970 · dependency-check/dependency-check-sonar-plugin · GitHub). … [Next page](https://community.sonarsource.com/tag/plugin/155.md?match_all_tags=true&page=1&tags%5B%5D=plugin)