Code Reviews
The code review and analysis platform for Salesforce
By David and 10 others11 authors191 articles
- What is Code Reviews?
- What does Code Reviews review?
- Understanding Code Reviews Scan results
- Monitor your code with automatic reviews
- Code Reviews Workspace Settings
- What's the Code Reviews score? How is it calculated?
- Branch health scans in Gearset
- How to use Code Reviews Autofix in Pipelines
- How do I find the existing vulnerabilities in a specific piece of metadata in Code Reviews?
- Code Reviews Legacy Code Filter
- Archiving and Deleting Code Reviews projects
- Exporting Code Reviews's results?
- Data retention policy for archived projects
- Code Reviews's Suggested resources
- Understanding Policy Updates in Code Reviews
- Using the Autofix feature in Code Reviews
- How to Scan PRs only when destination is a tracked branch in Code Reviews
- Code Reviews protection modes
- Setting up GitHub Code Scanning Alerts and Bitbucket Code Insights in Code Reviews
- Creating Outgoing Webhooks in Code Reviews
- Connecting a self-hosted GitLab instance to Code Reviews
- Integrating Code Review with GitHub Enterprise
- SSO (SAML) support in Code Reviews
- Using Code Reviews with VS Code
- Slack Integration for Code Reviews
- Using Code Reviews with Copado
- Connecting Your Version Control System to Code Reviews
- Code reviews rule: Missing comment in test assertions
- Code reviews rule: Insecure direct object references (DOR)
- Code reviews rule: Apex User Registration Without Limit
- Code reviews rule: Invalid access modifier on abstract, override or virtual method
- Code reviews rule: Inconsistent naming Apex inner classes
- Code reviews rule: Untested flows
- Code reviews rule: Excessive number of custom fields
- Code reviews rule: Test coverage padding method
- Code reviews rule: Insecure JavaScript operations
- Code reviews rule: Insecure contents
- Code reviews rule: Missing custom fields description
- Code reviews rule: Missing fault path in flows
- Code reviews rule: Method with global visibility
- Code reviews rule: Use native ZIP functions over Zippex
- Code reviews rule: Multiple forms in Visualforce page
- Code reviews rule: Insecure page redirects
- Code reviews rule: Hardcoded callouts authentication
- Code reviews rule: Vulnerable code to SOQL/SOSL injections
- Code reviews rule: Inconsistent naming Apex triggers
- Code reviews rule: Use of JavaScript in WebLinks
- Code reviews rule: Business logic in triggers
- Code reviews rule: Hardcoded IDs in code
- Code reviews rule: Excessive code complexity
- Code reviews rule: Missing output assignment for Agentforce customer verification
- Code reviews rule: Visualforce Cross-Site Scripting (XSS)
- Code reviews rule: Use of deprecated: AccountInsights and OpportunityInsights settings
- Code reviews rule: Dynamic imports for platformResourceLoader
- Code reviews rule: Access to Session ID in flows
- Code reviews rule: Use of @future method in loop
- Code reviews rule: Apex Send Email Restriction
- Code reviews rule: Missing condition on record-triggered flows
- Code reviews rule: Untested Lightning Web Components
- Code reviews rule: Missed opportunity: defaultValue and placeholderText modifiers
- Code reviews rule: Breaking change in LWC host access
- Code reviews rule: Invalid RestResponse headers
- Code reviews rule: Use of Session storage and Local storage
- Code reviews rule: Inactive flows
- Code reviews rule: Excessive number of method arguments
- Code reviews rule: Constructor with side effects
- Code reviews rule: Missing messages in Visualforce page
- Code reviews rule: Use of deprecated: Salesforce API (21-30)
- Code reviews rule: Missed opportunity: Null Coalescing Operator
- Code reviews rule: Missing custom object descriptions
- Code reviews rule: Serializing exceptions with `JSON.serialize`
- Code reviews rule: Multiple record-triggered flows on the same object
- Code reviews rule: Use of deprecated `URL.getSalesforceBaseUrl()` method
- Code reviews rule: Modify All Data permission enabled
- Code reviews rule: OmniStudio component without a required permission
- Code reviews rule: Data transform without field-level security
- Code reviews rule: Unused method parameter
- Code reviews rule: Incorrect sharing clauses
- Code reviews rule: Apex Use of Salesforce Function
- Code reviews rule: Use of retired Workflows and Process Builders
- Code reviews rule: Untested Apex method
- Code reviews rule: Missed opportunity: Safe navigation operator
- Code reviews rule: Untested Agentforce action
- Code reviews rule: Unspecified JavaScript cookie accessibility
- Code reviews rule: Use of deprecated instance URL
- Code reviews rule: Multiple automation on the same object
- Code reviews rule: Missing descriptions in flows
- Code reviews rule: Insufficient number of assertions
- Code reviews rule: Flow naming conventions
- Code reviews rule: Hardcoded IDs in flow
- Code reviews rule: Insecure serialization and deserialization for Visualforce pages
- Code reviews rule: User password set programmatically
- Code reviews rule: Hardcoded encryption keys
- Code reviews rule: Use of outdated API version for ICU locale
- Code reviews rule: Apex Leftover Debug Statement
- Code reviews rule: Vulnerable third-party dependency
- Code reviews rule: Insecure storage of sensitive information
- Code reviews rule: Multiple triggers on the same object
- Code reviews rule: Excessive number of methods in class
- Code reviews rule: Insecure cookies
- Code reviews rule: Unused Apex method
- Code reviews rule: Apex CRUD/FLS
- Code reviews rule: Excessive data access privileges
- Code reviews rule: Disabled Lightning Locker
- Code reviews rule: Incorrect Agentforce settings
- Code reviews rule: Excessive number of Agentforce topics
- Code reviews rule: Visualforce Tags not supported by Salesforce1
- Code reviews rule: Use of deprecated: SiteSettings
- Code reviews rule: Use template strings rather than string concatenation for dynamic formulas
- Code reviews rule: Missing controls in transactions
- Code reviews rule: Use of deprecated: API version
- Code reviews rule: Inline Cascading Style Sheets (CSS)
- Code reviews rule: Untested Agentforce topic
- Code reviews rule: Use of the lightning/uiGraphQLApi module
- Code reviews rule: Insufficient length of instructions in Agentforce topic
- Code reviews rule: LWC Sensitive Object Field Import
- Code reviews rule: Untested Agentforce agent
- Code reviews rule: Inconsistent naming Aura controller properties
- Code reviews rule: Missing data factory in test methods
- Code reviews rule: Exposure of sensitive information in logs
- Code reviews rule: Inefficient calls to Schema.getGlobalDescribe().get()
- Code reviews rule: Inefficient JavaScript loading
- Code reviews rule: Missing customer verification in Agentforce agent
- Code reviews rule: Undocumented Apex methods
- Code reviews rule: Use of spaces in attribute class selectors
- Code reviews rule: Excessive flow complexity
- Code reviews rule: Update roleAndSubordinates to roleAndSubordinatesInternal
- Code reviews rule: Inline JavaScript
- Code reviews rule: Missing entry in Apex documentation
- Code reviews rule: Use of Session IDs in Visualforce
- Code reviews rule: Inconsistent naming custom object
- Code reviews rule: Inactive validation rules
- Code reviews rule: Inactive workflow rules
- Code reviews rule: Breaking change in LWC import and export statements
- Code reviews rule: Hardcoded secrets
- Code reviews rule: Excessive nesting of conditional statements
- Code reviews rule: Insecure endpoint callouts
- Code reviews rule: Missing exception handling in database operations
- Code reviews rule: Test methods with full data access
- Code reviews rule: Use of deprecated Streaming API versions
- Code reviews rule: Inconsistent naming Apex test classes (inner classes)
- Code reviews rule: Insecure reference to external resources
- Code reviews rule: Missing Apex documentation
- Code reviews rule: Inconsistent naming Apex variables
- Code reviews rule: Insecure sharing to external users
- Code reviews rule: Missing annotation @IsTest in test methods
- Code reviews rule: Data access or manipulation in loops
- Code reviews rule: Use of sendEmail in loops
- Code reviews rule: Unbound SOQL statement
- Code reviews rule: Missing invocation target for Agentforce action
- Code reviews rules summary