SonarQube
for LuumenAI
SonarQube repos and pipelines as context — and as approved actions.
Use SonarQube as both context and control. LuumenAI reads repos, pipelines, and runbook code to understand a change, then proposes pull requests, triggers jobs, or rolls back releases as approved, audited steps.
The SonarQube toolbox
16 tools: 9 read, 7 write. Reads answer instantly. Writes require approval by default. Everything is logged.
- ReadRead repository & historyBrowse code, commits, and runbook scripts as context.
- ReadInspect pipeline runsSee recent builds, deployments, and their logs.
- ReadList branches & tagsBranches, tags, and their latest commits.
- ReadGet pull requestDiff, reviews, and checks for a PR.
- ReadList releasesReleases and what shipped in each.
- ReadGet pipeline logsLogs for a job or stage.
- ReadList environmentsDeploy targets and what is live where.
- ReadSearch codeFind a string or symbol across repositories.
- ReadGet commitAuthor, message, and files for a commit.
- WriteOpen pull requestPropose a change with the reasoning in the description. Approval by default
- WriteTrigger pipelineRun a job or workflow with the parameters shown first. Approval by default
- WriteRoll back deploymentRevert to a known-good release inside a governed run. Approval by default
- WriteMerge pull requestMerge once checks pass and a human approves. Approval by default
- WriteCreate tag or releaseCut a release with notes attached. Approval by default
- WriteApprove pipeline stageRelease a manual gate. Approval by default
- WriteCancel pipelineStop a running job. Approval by default
One prompt, start to finish
What a governed SonarQube run looks like inside Luumen.
Questions
Authorize once with OAuth 2.0. Luumen lists the scopes each action needs before you approve the connection, and credentials never appear in the chat.
This connection exposes write actions such as open pull request, trigger pipeline, roll back deployment, merge pull request, and more. For connected tools, admins configure which actions may run automatically and which require approval, within the access granted to the user. Review the configured approval policy before enabling write access.
You decide. Actions are granted per agent, skill, and team, and per environment — production is not staging. Read access can be broad while writes stay narrow.
Every call to SonarQube — read or write, approved or declined — is recorded with the actor, the input, and the result, and can be linked to the ticket or change record.
Often connected alongside
All integrations
GitHubRepos, actions, and runbook code as context and as actions.
GitLabMerge requests and pipelines proposed, triggered, and rolled back.
BitbucketRead commits, diffs, and branches in Bitbucket, then open the fix as a held write.
Azure DevOpsAzure DevOps repos and pipelines as context — and as approved actions.Put SonarQube to work with Luumen
Connect in minutes. Every action scoped, approved, and audited from day one.