diff --git a/.github/workflows/sonar.yml b/.github/workflows/sonar.yml
deleted file mode 100644
index 399209b..0000000
--- a/.github/workflows/sonar.yml
+++ /dev/null
@@ -1,54 +0,0 @@
----
-name: Sonar
-
-"on":
-  pull_request:
-  push:
-    branches:
-      - main
-
-permissions:
-  contents: read
-
-concurrency:
-  group: ${{ github.workflow }}-${{ github.ref }}
-  cancel-in-progress: ${{ github.ref != 'refs/heads/main' }}
-
-env:
-  CARGO_TERM_COLOR: always
-
-jobs:
-  sonar:
-    name: SonarQube scan
-    runs-on: ubuntu-latest
-    timeout-minutes: 30
-    # Neither a fork's pull request nor a Dependabot run can read SONAR_TOKEN.
-    if: >-
-      github.event_name == 'push' ||
-      (github.event.pull_request.head.repo.full_name == github.repository &&
-      github.event.pull_request.user.login != 'dependabot[bot]')
-    steps:
-      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
-        with:
-          # Full history improves blame-based new-code attribution.
-          fetch-depth: 0
-          persist-credentials: false
-
-      - name: Install stable toolchain with clippy and llvm-tools
-        run: |
-          rustup toolchain install stable \
-            --profile minimal \
-            --component clippy \
-            --component llvm-tools-preview
-
-      - uses: taiki-e/install-action@f7e5d7c961414b23f5b25b2da9294395d08513ad # v2.87.26
-        with:
-          tool: cargo-llvm-cov
-
-      - name: Test coverage
-        run: cargo +stable llvm-cov --all-targets --lcov --output-path lcov.info
-
-      - name: SonarQube scan
-        uses: SonarSource/sonarqube-scan-action@d209202bc7d53ff1cc128f7f907dac145c9d6ae9 # v8.3.0
-        env:
-          SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
diff --git a/.github/workflows/sqlite3mc-release.yml b/.github/workflows/sqlite3mc-release.yml
index 78342a3..7c79689 100644
--- a/.github/workflows/sqlite3mc-release.yml
+++ b/.github/workflows/sqlite3mc-release.yml
@@ -75,8 +75,8 @@ jobs:
           TARGET: ${{ steps.release.outputs.target }}
         run: ./bump.sh "$TARGET"
 
-      # A pull request from the app, unlike one from the workflow token, starts CI, CodeQL,
-      # Coverage and Sonar on it, and so does every later push to its branch.
+      # A pull request from the app, unlike one from the workflow token, starts CI, CodeQL
+      # and Coverage on it, and so does every later push to its branch.
       - if: steps.release.outputs.moved == 'yes'
         name: Mint an app token
         id: app-token
diff --git a/README.md b/README.md
index d9a792c..8031413 100644
--- a/README.md
+++ b/README.md
@@ -3,7 +3,6 @@
 [![CI](https://github.com/LucaCappelletti94/sqlite3mc-src/actions/workflows/ci.yml/badge.svg)](https://github.com/LucaCappelletti94/sqlite3mc-src/actions/workflows/ci.yml)
 [![ClusterFuzzLite](https://github.com/LucaCappelletti94/sqlite3mc-src/actions/workflows/cflite_build.yml/badge.svg)](https://github.com/LucaCappelletti94/sqlite3mc-src/actions/workflows/cflite_build.yml)
 [![Coverage](https://codecov.io/gh/LucaCappelletti94/sqlite3mc-src/graph/badge.svg)](https://codecov.io/gh/LucaCappelletti94/sqlite3mc-src)
-[![Quality gate](https://sonarcloud.io/api/project_badges/measure?project=LucaCappelletti94_sqlite3mc-src&metric=alert_status)](https://sonarcloud.io/summary/new_code?id=LucaCappelletti94_sqlite3mc-src)
 [![crates.io](https://img.shields.io/crates/v/sqlite3mc-src.svg)](https://crates.io/crates/sqlite3mc-src)
 [![docs.rs](https://docs.rs/sqlite3mc-src/badge.svg)](https://docs.rs/sqlite3mc-src)
 [![license](https://img.shields.io/crates/l/sqlite3mc-src.svg)](https://github.com/LucaCappelletti94/sqlite3mc-src/blob/main/LICENSE)
diff --git a/sonar-project.properties b/sonar-project.properties
deleted file mode 100644
index bb135bf..0000000
--- a/sonar-project.properties
+++ /dev/null
@@ -1,17 +0,0 @@
-# SonarQube Cloud analysis configuration. The organization and project keys
-# come from the SonarQube Cloud project import and must match it exactly.
-sonar.organization=lucacappelletti94-github
-sonar.projectKey=LucaCappelletti94_sqlite3mc-src
-sonar.projectName=sqlite3mc-src
-
-# The vendored amalgamation in sqlite3mc/ is upstream C and stays out.
-sonar.sources=src
-sonar.tests=tests
-sonar.exclusions=target/**
-sonar.sourceEncoding=UTF-8
-
-# The analyzer runs cargo clippy itself against the root manifest.
-sonar.rust.cargo.manifestPaths=Cargo.toml
-
-# Coverage generated by cargo-llvm-cov in the Sonar workflow.
-sonar.rust.lcov.reportPaths=lcov.info