Detect SonarQube
SonarQube is an open-source platform for the continuous inspection of code quality to perform automatic reviews with static analysis of code to detect bugs, code smells, and security vulnerabilities on 20+ programming languages.
Detection looks at meta tags, script sources, javascript globals, html markup across 6 fingerprint rules among the site's public responses.
Websites using SonarQube
Loading website list…
Signal classes
PluginView evaluates public page signals in these classes when identifying SonarQube. Individual fingerprint rule bodies are proprietary and are not published.
- Meta tags
- Script sources
- JavaScript globals
- HTML markup
Example public indicators for SonarQube
Illustrative indicators derived from public catalog metadata for SonarQube. A live scan may match additional proprietary rules beyond these examples.
- application-name: SonarQube
- js/bundles/sonar.js?v=
- SonarMeasures
- SonarRequest
- <link href="/css/sonar.css?v=
- <title>SonarQube</title>
What a detection means
- Establishes
- One or more public signals on the scanned page matched a known SonarQube signature (6 rules) at the time of the scan.
- Does not establish
- A sitewide install of SonarQube, an active vendor contract, exclusive use, or that SonarQube is still in place today.
How to check a site for SonarQube
- 1. Enter the website URL in the scan form — homepage, pricing, checkout, or login pages usually expose the strongest SonarQube signals.
- 2. PluginView reads only public responses (meta tags, script sources, javascript globals) and scores them against the SonarQube signature set (6 rules).
- 3. Review the confidence score and text explanation for SonarQube on the results page.
Commonly implies
A confirmed SonarQube match also implies these technologies are present.
FAQ: detecting SonarQube
- Can PluginView detect SonarQube without logging in?
- Yes. PluginView only reads publicly accessible responses when checking for SonarQube — typically meta tags, script sources, javascript globals, html markup. It does not bypass authentication or paywalls.
- What category is SonarQube?
- SonarQube is classified under Development in the PluginView directory.
- How many fingerprint rules cover SonarQube?
- This reference currently tracks 6 fingerprint rules across meta tags, script sources, javascript globals, html markup. Individual rule bodies are proprietary and are not published.
- What public signals suggest a site uses SonarQube?
- Illustrative public indicators for SonarQube include application-name: SonarQube; js/bundles/sonar.js?v=; SonarMeasures. A live scan may match additional proprietary rules beyond these examples.
