MCP-282 Setup CAG

[nquinquenel]

No description provided.

[hashicorp-vault-sonar-prod]

MCP-282

[sonarqubecloud]

SonarQube reviewer guide

Summary: Integrates Code Analysis Generation (CAG) support into the SonarQube MCP server by adding a managed stdio transport for proxied MCP servers, removing tool name namespacing, updating Docker configuration with Python support, and implementing stderr log level parsing.

Review Focus:

• The new ManagedStdioClientTransport class handles process lifecycle management with timeout-based termination and forcible cleanup—verify the timeout logic (5s) and signal handling are robust
• Tool name changes: proxied tools now expose original names without namespace prefixes (e.g., get_weather instead of context/get_weather)—confirm this doesn't conflict with existing SonarQube tools
• Docker changes include copying sonar-code-context-mcp binary and requirements.txt; verify the docker-entrypoint.sh properly handles signal forwarding to the Java process
• Log level parsing in logProxiedServerOutput() uses case-insensitive pattern matching on stderr—check if all expected log formats are covered

Start review at: src/main/java/org/sonarsource/sonarqube/mcp/client/ManagedStdioClientTransport.java. This is the most complex new addition with 330 lines handling process management, threading, and resource cleanup.

💬 Please send your feedback

Quality Gate passed

Issues
0 New issues
10 Accepted issues
0 Dependency risks

Measures
0 Security Hotspots
81.1% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud