0

I am trying to get 2nd generation managed package ready for security review. It is not showing up in the devhub org. How do I submit the package. Do I zip up the source code and submit it?

I have tried locating the package in the devhub but it is showing 0 packages.

[Update] I am listing the points from the documentation and what I have done on it.

• Connect a Packaging Org to the Publishing Console

  • As it is 2nd gen package I do not have packaging org.

• Create or Edit Your Provider Profile This is done.

• Create or Edit Your AppExchange Listing This is done.

• Add a Business Plan to an AppExchange Listing This is done.

• Make Your AppExchange Listing Effective

• Select an Installation Option We selected an option to install to admins by default.

• Register Your Package and Choose License Settings

Is LMA required for security review ?

• Complete the Security Review Cycle This is the goal.

Improve this question
5
  • Have you seen this documentation? Did you follow the steps precisely?
    – sfdcfox ♦
    Commented Sep 9, 2022 at 18:01
  • We are still navigating through the process. We reached a step where it showed our devhub org and showed 0 package. I am assuming if it had been 1st generation managed package it would have showed up. I saw similar question from 2019 when 2nd gen managed package was beta. So I am not sure if I need to upload all components and create package for this review or if there is another way to submit, i.e a zip of source code. I will go through the documentation again. Thank you.
    – Birey
    Commented Sep 9, 2022 at 18:30
  • Does this help?(trailhead.salesforce.com/content/learn/modules/…)
    – Vinay
    Commented Sep 9, 2022 at 18:35
  • @Vinay I am going through that document as well and assembling needed materials. Yes this one was much helpful than the text documentation. Thanks.
    – Birey
    Commented Sep 9, 2022 at 18:44
  • @sfdcfox do I have to release my app to make it appear in the packages list so i can select that app in the App tab. I am not able to add the package and security review tab says there is nothing to review since I am not able to add the package. I am not able to add package as it is not visible because I think it is not released, and it is not released because we have not gone through security review. Going in circles.
    – Birey
    Commented Sep 9, 2022 at 20:46

1 Answer 1

Reset to default
3

You note in your question and in comments:

I have tried locating the package in the devhub but it is showing 0 packages... [D]o I have to release my app to make it appear in the packages list so i can select that app in the App tab. I am not able to add the package and security review tab says there is nothing to review since I am not able to add the package. I am not able to add package as it is not visible because I think it is not released, and it is not released because we have not gone through security review. Going in circles

You must promote a managed release version of your application before you can submit it to Security Review. A managed beta is not eligible for Security Review submission. Make sure that (a) you've connected the Dev Hub that owns this package and (b) you've promoted a release to be able to select it for Security Review submission.

Note that promoting a managed release is an operation that exclusively affects the package artifact: it is not the same thing as posting your release on the AppExchange, which you can do after Security Review.

Other questions from your post:

• Connect a Packaging Org to the Publishing Console

As it is 2nd gen package I do not have packaging org.

Your Dev Hub is the "packaging org" for a 2GP package.

• Register Your Package and Choose License Settings

Is LMA required for security review ?

No, it is not.

Improve this answer
0

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .