Issues

• [BUG][code-analyzer] AvoidOldSalesforceApiVersions sets its floor three versions too high every January

  forcedotcom/code-analyzer#2102 · Filter by author dschach opened on Oct 6, 2026

• [BUG][code-analyzer] 5.16.0 skips Apex classes that use multi-line string literals (''') without failing: bundled PMD 7.26.0 cannot parse them (fixed in PMD 7.27.0)

  forcedotcom/code-analyzer#2101 · Filter by author friskychicken opened on Oct 2, 2026

• [BUG][code-analyzer] PMD NullPointerException scanning two LWC JavaScript files

  forcedotcom/code-analyzer#2100 · Filter by author Phil4390 opened on Sep 28, 2026

• [BUG][code-analyzer] flow:TriggerCallout causes Flow engine error and CLI hang on Flow with External Service actions

  forcedotcom/code-analyzer#2099 · Filter by author dalden1981 opened on Sep 16, 2026

• [BUG][code-analyzer] <Unexpected Flow Engine Failure on metadata retrieved using API v68>

  forcedotcom/code-analyzer#2098 · Filter by author skaushik39 opened on Sep 15, 2026

• [BUG][code-analyzer] sfge: indexing a value the engine cannot resolve aborts the entry point instead of degrading

  forcedotcom/code-analyzer#2097 · Filter by author willbutler opened on Sep 6, 2026

• [BUG][code-analyzer] sfge: a null collection element passed to a typed parameter aborts the entry point (NOT_A_MATCH, re: #1195)

  forcedotcom/code-analyzer#2096 · Filter by author willbutler opened on Sep 6, 2026

• [BUG][code-analyzer] sfge: a guard condition on a SOQL result aborts the entry point (TodoException in SchemaBasedValidationAnalyzer)

  forcedotcom/code-analyzer#2095 · Filter by author willbutler opened on Sep 6, 2026

• [BUG][code-analyzer] sfge: JSON.deserialize with a Type variable throws ClassCastException and aborts the entry point

  forcedotcom/code-analyzer#2094 · Filter by author willbutler opened on Sep 6, 2026

• [BUG][code-analyzer] sfge: List.sort(Comparator) aborts the entry point (API 61 overload not accepted)

  forcedotcom/code-analyzer#2093 · Filter by author willbutler opened on Sep 6, 2026

• [BUG][code-analyzer] sfge: Decimal.setScale() — and every other unmodelled numeric method — aborts the entry point

  forcedotcom/code-analyzer#2092 · Filter by author willbutler opened on Sep 6, 2026

• [BUG][code-analyzer] sfge: SObjectType.newSObject(Id) and newSObject(Id, Boolean) abort the entry point

  forcedotcom/code-analyzer#2091 · Filter by author willbutler opened on Sep 6, 2026

• [BUG][code-analyzer] sfge: calling toString() on an enum aborts the entry point (UnimplementedMethodException)

  forcedotcom/code-analyzer#2090 · Filter by author willbutler opened on Sep 6, 2026

• [BUG][code-analyzer] sfge: a cast or array load inside a new SObject(Field = ...) constructor aborts the entry point

  forcedotcom/code-analyzer#2089 · Filter by author willbutler opened on Sep 6, 2026

• [BUG][code-analyzer] sfge: the ?? null-coalescing operator is unmodelled — four distinct crashes, one of which aborts the entire scan

  forcedotcom/code-analyzer#2088 · Filter by author willbutler opened on Sep 6, 2026

• [BUG][code-analyzer] 5.16.0 silently drops custom PMD rulesets that point at a sibling file by relative path

  forcedotcom/code-analyzer#2087 · Filter by author friskychicken opened on Sep 3, 2026
  1

• sfge: path evaluation never converges on a ~40-field DTO mapper, silently abandoning every entry point that reaches it

  forcedotcom/code-analyzer#2083 · Filter by author wandering-walnut opened on Aug 20, 2026
  1

• [Feature Request] Graph Engine: taint-tracking sinks for SSRF (HttpRequest.setEndpoint), resource injection, and dynamic type reflection

  forcedotcom/code-analyzer#2078 · Filter by author temadu opened on Aug 11, 2026

• [Feedback] InternalExecutionErrors in sfca v5.12

  forcedotcom/code-analyzer#2069 · Filter by author varsh-acn opened on Jul 24, 2026
  1

• [BUG] Bundled PMD 7.25.0 cannot load custom rulesets referencing PMD 7.26.0 rules — one unresolvable ref disables the whole ruleset

  forcedotcom/code-analyzer#2065 · Filter by author friskychicken opened on Jul 12, 2026
  1

• [BUG][code-analyzer] SRR checks done for LWC which are non lightning__ServerRenderable or lightning__ServerRenderableWithHydration

  forcedotcom/code-analyzer#2049 · Filter by author rupeshjSFDC opened on Jun 5, 2026
  1

• [Feature Request] Config check CLI commands for external config files

  forcedotcom/code-analyzer#2029 · Filter by author dschach opened on Apr 17, 2026

• [Feature Request] Filename-based suppression per engine or file

  forcedotcom/code-analyzer#2028 · Filter by author dschach opened on Apr 17, 2026
  6

• [BUG][code-analyzer] Flow rules producing false positives and flagging platform limitations (MissingFaultHandler, MissingDescription, UnusedResource, SameRecordUpdate)

  forcedotcom/code-analyzer#2026 · Filter by author pavancdogit opened on Apr 16, 2026
  1

• [BUG][code-analyzer] Disabled rules are moved to the end of the config file rules list

  BUG P3
  Bug

  forcedotcom/code-analyzer#2019 · Filter by author dschach opened on Mar 31, 2026
  3