forcedotcom/code-analyzer

Stars: 240
Forks: 52
Open beginner issues: 0
Indexed issues: 44
Avg merge: 1d 23h
Merged PRs (30d): 5

Dominant language: TypeScript
License: BSD-3-Clause
Last GitHub push: Aug 26, 2026
Latest indexed: Sep 16, 2026
Contributing guide: Contributing guide
Code of conduct: Code of conduct
Beginner labels: No beginner labels indexed

Open All

44 open issues indexed

[Feature Request] Allow to share the scanner config file between CI/CD processes and developer environments Open

USER STORY

forcedotcom/code-analyzer#1894 · 5 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
[BUG][code-analyzer] `sf code-analyzer run ...` causes Windows Defender to spike the CPU Open

forcedotcom/code-analyzer#1796 · 4 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
[BUG][code-analyzer] SFGE engine fails on for loops with ?? operator Open

SFGE

forcedotcom/code-analyzer#1813 · 3 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
[BUG][code-analyzer] Potential PMD Issue: exclude-pattern in Referenced Ruleset Not Respected Open

WaitingForFixFromPMD

forcedotcom/code-analyzer#1820 · 9 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
[Feature Request] Option to match block highlight/decoration functionality of Apex PMD Open

forcedotcom/code-analyzer#1838 · 3 comments · 9 reactions · 0 assignees · Indexed Sep 16, 2026
[Feature Request] Verified Action Open

forcedotcom/code-analyzer#1845 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 16, 2026
[BUG][vscode-extension] Getting Stuck on rule-selector AppExchange Open

Need more info

forcedotcom/code-analyzer#1857 · 8 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
[Feature Request] SLDS Validator Support Open

USER STORY

forcedotcom/code-analyzer#1859 · 2 comments · 1 reaction · 0 assignees · Indexed Sep 16, 2026
[BUG][vscode-extension] Code Analyzer can't find SF CLI Open

BUG P2

forcedotcom/code-analyzer#1893 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 16, 2026
[Feature Request] Add notice/warning/error messages for PR violations Open

USER STORY

forcedotcom/code-analyzer#1903 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
[BUG][code-analyzer] Flow engine isn't producing results file Open

forcedotcom/code-analyzer#1958 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
[Feature Request] Enable ESLINT concurrency Open

forcedotcom/code-analyzer#1959 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 16, 2026
[BUG][vscode-extension] 404 on Changelog Release Notes Link Open

forcedotcom/code-analyzer#1964 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
[Feature Request] Add Input Variable To Control PR Review Behavior Open

forcedotcom/code-analyzer#1965 · 3 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
[BUG][code-analyzer] The engine with name 'sfge' threw an unexpected error Open

BUG P3

forcedotcom/code-analyzer#1967 · 5 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
[Feedback] How to Ignore Warnings in Flow Engine? Open

USER STORY

forcedotcom/code-analyzer#1968 · 9 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
[Feature Request] File based regex rules Open

forcedotcom/code-analyzer#1972 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
[Feature Request] Support (deep) directory imports of rules Open

Need more info

forcedotcom/code-analyzer#1974 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
[Feature Request] Configure properties in code-analyzer.yml Open

Need more info

forcedotcom/code-analyzer#1975 · 3 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
[Feedback] How is 'ProtectSensitiveData' flagged? Open

forcedotcom/code-analyzer#1989 · 3 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
[Feature Request] Add --no-progress flag for silent execution in VCS Open

USER STORY

forcedotcom/code-analyzer#1991 · 1 comment · 1 reaction · 0 assignees · Indexed Sep 16, 2026
[Feedback] Missing flow engine rules in documentation Open

forcedotcom/code-analyzer#1993 · 1 comment · 1 reaction · 0 assignees · Indexed Sep 16, 2026
[BUG][code-analyzer] regex:NoMixedIndentation: False positive on ApexDocs Open

forcedotcom/code-analyzer#2012 · 3 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
[BUG][code-analyzer] Disabled rules are moved to the end of the config file rules list Open

BUG P3

forcedotcom/code-analyzer#2019 · 3 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
[BUG][code-analyzer] Flow rules producing false positives and flagging platform limitations (MissingFaultHandler, MissingDescription, UnusedResource, SameRecordUpdate) Open

forcedotcom/code-analyzer#2026 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 16, 2026
[Feature Request] Filename-based suppression per engine or file Open

forcedotcom/code-analyzer#2028 · 6 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
[Feature Request] Config check CLI commands for external config files Open

forcedotcom/code-analyzer#2029 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
[BUG][code-analyzer] SRR checks done for LWC which are non lightning__ServerRenderable or lightning__ServerRenderableWithHydration Open

forcedotcom/code-analyzer#2049 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 16, 2026
[BUG] Bundled PMD 7.25.0 cannot load custom rulesets referencing PMD 7.26.0 rules — one unresolvable ref disables the whole ruleset Open

forcedotcom/code-analyzer#2065 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 16, 2026
[Feedback] InternalExecutionErrors in sfca v5.12 Open

forcedotcom/code-analyzer#2069 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 16, 2026
[Feature Request] Graph Engine: taint-tracking sinks for SSRF (HttpRequest.setEndpoint), resource injection, and dynamic type reflection Open

forcedotcom/code-analyzer#2078 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
sfge: path evaluation never converges on a ~40-field DTO mapper, silently abandoning every entry point that reaches it Open

forcedotcom/code-analyzer#2083 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 16, 2026
[BUG][code-analyzer] 5.16.0 silently drops custom PMD rulesets that point at a sibling file by relative path Open

forcedotcom/code-analyzer#2087 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 16, 2026
[BUG][code-analyzer] sfge: the ?? null-coalescing operator is unmodelled — four distinct crashes, one of which aborts the entire scan Open

forcedotcom/code-analyzer#2088 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
[BUG][code-analyzer] sfge: a cast or array load inside a new SObject(Field = ...) constructor aborts the entry point Open

forcedotcom/code-analyzer#2089 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
[BUG][code-analyzer] sfge: calling toString() on an enum aborts the entry point (UnimplementedMethodException) Open

forcedotcom/code-analyzer#2090 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
[BUG][code-analyzer] sfge: SObjectType.newSObject(Id) and newSObject(Id, Boolean) abort the entry point Open

forcedotcom/code-analyzer#2091 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
[BUG][code-analyzer] sfge: Decimal.setScale() — and every other unmodelled numeric method — aborts the entry point Open

forcedotcom/code-analyzer#2092 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
[BUG][code-analyzer] sfge: List.sort(Comparator) aborts the entry point (API 61 overload not accepted) Open

forcedotcom/code-analyzer#2093 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
[BUG][code-analyzer] sfge: JSON.deserialize with a Type variable throws ClassCastException and aborts the entry point Open

forcedotcom/code-analyzer#2094 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
[BUG][code-analyzer] sfge: a guard condition on a SOQL result aborts the entry point (TodoException in SchemaBasedValidationAnalyzer) Open

forcedotcom/code-analyzer#2095 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
[BUG][code-analyzer] sfge: a null collection element passed to a typed parameter aborts the entry point (NOT_A_MATCH, re: #1195) Open

forcedotcom/code-analyzer#2096 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
[BUG][code-analyzer] sfge: indexing a value the engine cannot resolve aborts the entry point instead of degrading Open

forcedotcom/code-analyzer#2097 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026
[BUG][code-analyzer] <Unexpected Flow Engine Failure on metadata retrieved using API v68> Open

forcedotcom/code-analyzer#2098 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 16, 2026

A short digest of beginner-friendly GitHub issues.