Questions tagged [source-scanner]
The source-scanner tag has no usage guidance.
9
questions
0
votes
1
answer
26
views
Force.com code Scanner Portal Inability to Track FLS Checks on Dynamic Objects
In Salesforce Apex, it is often necessary to handle objects and fields dynamically using the generic 'SObject' type. This approach allows for flexible and generic code that can work with different ...
- 5
0
votes
0
answers
25
views
Coding a Delete DML that doesn't get flagged for CRUD checking by code scanner
I can do an update this way and it pass the scanner --
SObjectAccessDecision securityDecision = Security.stripInaccessible(AccessType.UPDATABLE, sObjectList);
update securityDecision.getRecords();
I ...
- 488
1
vote
1
answer
59
views
For stripInaccessible checks on READ operation discard unsanitized data
Salesforce does a terrible job at providing documentation for addressing errors thrown by its own tools. For example, after executing the sf scanner dfa command, we get the following error:
For ...
- 582
2
votes
1
answer
222
views
Salesforce code analyzer DFA
Im hitting a strange error when running the salesforce code analyzer DFA report -
sf scanner run dfa --format csv --outfile CodeAnalyzerDFA.csv --target ./ --projectdir ./ --category Security
Scanner ...
- 67
0
votes
0
answers
102
views
Test Methods With No Assert result
I'm using the Salesforce code scanner to validate my package and am seeing a lot of "Test Methods With No Assert result" messages for methods that do contain asserts, and test methods run ...
- 67
4
votes
2
answers
2k
views
Strange error is showing when trying to open partner security portal with primary partner community user
https://security.secure.force.com/sourcescanner/ is down for
maintenance
Sorry for the inconvenience. We'll be back shortly. Please email us if
you need to get in touch.
This error is shown when I ...
- 17.4k
0
votes
1
answer
435
views
Why newly released package version is not available in Partner Security Portal scanner?
We have released a new minor 2GMP release version and try to check it for Security and Quality rules in Partner Security Portal scanner, but the new version doesn't show up in the picklist for Select ...
- 17.4k
1
vote
0
answers
300
views
Not able to fix checkmarx scanner issue
I am trying to fix checkmarx scanner issue in different ways but nothing helps to fix FLS Update and Crete.
Below are the things I tried
if(Schema.sObjectType.ProviderRecordQuestion__c.fields....
- 383
1
vote
1
answer
149
views
Force.com Source Scanner Results: FLS Update and Create
I've run the Force.com Source Scanner against my Managed Package and here are the summary results:
There are two areas FLS Update and FLS Create where I got 28, and 37 risks respectively...
I am ...
- 9,426