Automated SonarQube Cloud PR Comment Handling and Fixing

说明与用途

实施 sonar-fix 技能以自动修复低风险 SonarQube 问题，并在质量门禁失败时阻止 PR 合并。

问题

The existing PR workflow (pr-work) only checks GitHub Checks for merge readiness. It fails to detect Quality Gate failures reported as PR comments by sonarcloud[bot], allowing PRs with static analysis regressions to merge.

结果

Implemented a sonar-fix skill that integrates with the PR workflow to automatically resolve low-risk SonarQube issues and enforce Quality Gate compliance before merging.

工作流

• Parse sonarcloud[bot] PR comments using gh pr view --comments and GitHub API.
• Classify issues by rule_id and severity.
• Apply codified fixes for whitelisted risk-low rules (S1481, S1854, S1192, S1128, S125, S1116).
• Escalate non-whitelisted or complex issues.
• Verify Quality Gate status; if PASS, return control to pr-work for merge.
• Block merge if Quality Gate FAILs, even if GitHub Checks are green.

证据

Today pr-work only gates on gh pr checks... a FAIL Quality Gate that lands as a PR comment... is invisible to the merge logic

来源

The new sonar-fix skill parses sonarcloud[bot] PR comments, classifies issues... applies codified fixes

来源