
Security News
MCP Community Begins Work on Official MCP Metaregistry
The MCP community is launching an official registry to standardize AI tool discovery and let agents dynamically find and install MCP servers.
@backstage-community/plugin-sonarqube
Advanced tools
The SonarQube Plugin displays code statistics from SonarCloud or SonarQube.
# From your Backstage root directory
yarn --cwd packages/app add @backstage-community/plugin-sonarqube
EntitySonarQubeCard
to the EntityPage: // packages/app/src/components/catalog/EntityPage.tsx
+ import { EntitySonarQubeCard } from '@backstage-community/plugin-sonarqube';
...
const overviewContent = (
<Grid container spacing={3} alignItems="stretch">
<Grid item md={6}>
<EntityAboutCard variant="gridItem" />
</Grid>
+ <Grid item md={6}>
+ <EntitySonarQubeCard variant="gridItem" />
+ </Grid>
</Grid>
);
The "Read more" link that shows in the MissingAnnotationEmptyState is also configurable.
// packages/app/src/components/catalog/EntityPage.tsx
+ import { EntitySonarQubeCard } from '@backstage-community/plugin-sonarqube';
+ const MISSING_ANNOTATION_READ_MORE_URL = 'https://backstage.io/docs/features/software-catalog/descriptor';
...
const overviewContent = (
<Grid container spacing={3} alignItems="stretch">
<Grid item md={6}>
<EntityAboutCard variant="gridItem" />
</Grid>
+ <Grid item md={6}>
+ <EntitySonarQubeCard variant="gridItem" missingAnnotationReadMoreUrl={MISSING_ANNOTATION_READ_MORE_URL} />
+ </Grid>
</Grid>
);
yarn install
yarn tsc
sonarqube.org/project-key
annotation to the catalog-info.yaml
file of the target repo for which code quality analysis is needed.apiVersion: backstage.io/v1alpha1
kind: Component
metadata:
name: backstage
description: |
Backstage is an open-source developer portal that puts the developer experience first.
annotations:
sonarqube.org/project-key: YOUR_INSTANCE_NAME/YOUR_PROJECT_KEY
spec:
type: library
owner: CNCF
lifecycle: experimental
YOUR_INSTANCE_NAME/
is optional and will query the default instance if not provided.
EntityPage
(New Frontend System)Follow this section if you are using Backstage's new frontend system.
Import sonarQubePlugin
in your App.tsx
and add it to your app's features
array:
import sonarQubePlugin from '@backstage-community/plugin-sonarqube/alpha';
// ...
export const app = createApp({
features: [
// ...
sonarQubePlugin,
// ...
],
});
FAQs
Unknown package
We found that @backstage-community/plugin-sonarqube demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
The MCP community is launching an official registry to standardize AI tool discovery and let agents dynamically find and install MCP servers.
Research
Security News
Socket uncovers an npm Trojan stealing crypto wallets and BullX credentials via obfuscated code and Telegram exfiltration.
Research
Security News
Malicious npm packages posing as developer tools target macOS Cursor IDE users, stealing credentials and modifying files to gain persistent backdoor access.