I have fixed all the "Apex Critical Security Risk" issues but there are few apex code quality issues remaining. Some of them are false positives and some are correct. But due to time constraints and also I don't want to change what is working, can I skip these changes? Will I be able to pass the security review without fixing these changes? enter image description here

1 Answer 1


As stated in the documentation, you must fix:

All issues regardless of severity level that aren’t labeled “Code Quality”.

As long as you meet this requirement, you will be fine. Just don't wait too long to fix these issues, as it may affect your ability to scale up to larger customers (e.g. an unrestricted query causes your client's UI to crash in some cases).

  • Thanks @sfdcfox most of soql issues are related to custom metadata and also a few for scripts that run just once we update data for some legacy customers.. thanks for the feedback. Commented Aug 9, 2022 at 18:44

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .