SonarQube CLI

Read-only command-line tool for inspecting a self-hosted SonarQube instance via af sonar. Intentionally companion-shaped to af bb pr — the same numeric PR id identifies both sides.

Setup

SonarQube uses its own bearer token. Atlassian and Bitbucket credentials are not interchangeable. Add the following to your project's .env:

• SONAR_TOKEN — User token from <sonar>/account/security (required)
• SONAR_BASE_URL — Sonar instance URL (optional; falls back to sonar.host.url in sonar-project.properties)

Project Key Resolution

Walks the same path sonar-scanner does:

1. --project <key> flag (highest priority)
2. sonar.projectKey in sonar-project.properties (walking up from cwd)

There is intentionally no af.json block for Sonar — the properties file is the canonical source of truth.