Running Code Analyzer

{
  "metadata": {
    "engine": "Recommended",
    "executedAt": "2026-05-19T10:15:30.123Z",
    "filesAnalyzed": 45,
    "violationCount": 127
  },
  "violations": [
    {
      "rule": "ApexCRUDViolation",
      "engine": "pmd",
      "severity": 2,
      "message": "Validate CRUD permission before SOQL/DML operation",
      "file": "force-app/main/default/classes/AccountService.cls",
      "line": 42,
      "column": 9,
      "fix": null
    },
    {
      "rule": "no-var",
      "engine": "eslint",
      "severity": 3,
      "message": "Unexpected var, use let or const instead.",
      "file": "force-app/main/default/lwc/accountCard/accountCard.js",
      "line": 12,
      "column": 5,
      "fix": {
        "range": [180, 183],
        "text": "let"
      }
    },
    {
      "rule": "ApexDoc",
      "engine": "pmd",
      "severity": 3,
      "message": "Missing ApexDoc comment",
      "file": "force-app/main/default/classes/AccountService.cls",
      "line": 15,
      "column": 1,
      "fix": null
    },
    {
      "rule": "@lwc/lwc/no-inner-html",
      "engine": "eslint",
      "severity": 2,
      "message": "Disallow use of innerHTML",
      "file": "force-app/main/default/lwc/riskComponent/riskComponent.js",
      "line": 28,
      "column": 9,
      "fix": null
    },
    {
      "rule": "prefer-const",
      "engine": "eslint",
      "severity": 3,
      "message": "'data' is never reassigned. Use 'const' instead.",
      "file": "force-app/main/default/lwc/accountCard/accountCard.js",
      "line": 18,
      "column": 5,
      "fix": {
        "range": [245, 248],
        "text": "const"
      }
    }
  ],
  "summary": {
    "bySeverity": {
      "1": 0,
      "2": 32,
      "3": 78,
      "4": 15,
      "5": 2
    },
    "byEngine": {
      "pmd": 65,
      "eslint": 58,
      "regex": 4
    },
    "topRules": [
      {"rule": "ApexDoc", "count": 45},
      {"rule": "no-var", "count": 28},
      {"rule": "prefer-const", "count": 19},
      {"rule": "ApexCRUDViolation", "count": 12},
      {"rule": "@lwc/lwc/no-inner-html", "count": 8}
    ],
    "topFiles": [
      {"file": "force-app/main/default/classes/AccountService.cls", "count": 23},
      {"file": "force-app/main/default/lwc/accountCard/accountCard.js", "count": 18},
      {"file": "force-app/main/default/classes/ContactTriggerHandler.cls", "count": 15}
    ]
  }
}


# Common Command Variations

Real-world command patterns with explanations. Use these as reference when building commands for specific scenarios.

---

## Basic Scans

### 1. Scan Entire Workspace (Default)
```bash
sf code-analyzer run \
  --rule-selector Recommended \
  --output-file ./code-analyzer-results-20260519-101030.json \
  --include-fixes \
  2>&1 | tee ./code-analyzer-results-20260519-101030.log
```
**When:** User says "scan my code" with no specifics.

---

### 2. Security-Focused Scan
```bash
sf code-analyzer run \
  --rule-selector "all:Security:(1,2)" \
  --output-file ./code-analyzer-results-20260519-101030.json \
  --include-fixes \
  2>&1 | tee ./code-analyzer-results-20260519-101030.log
```
**When:** User says "check for security issues", "find vulnerabilities", "AppExchange security review".  
**Selector breakdown:** `all` = all engines, `:Security` = Security category only, `:(1,2)` = Critical and High severity only.

---

### 3. Specific Engine
```bash
sf code-analyzer run \
  --rule-selector "pmd" \
  --output-file ./code-analyzer-results-20260519-101030.json \
  --include-fixes \
  2>&1 | tee ./code-analyzer-results-20260519-101030.log
```
**When:** User says "run PMD", "check my Apex code".

---

### 4. Multiple Engines
```bash
sf code-analyzer run \
  --rule-selector "(pmd,eslint)" \
  --output-file ./code-analyzer-results-20260519-101030.json \
  --include-fixes \
  2>&1 | tee ./code-analyzer-results-20260519-101030.log
```
**When:** User says "scan Apex and JavaScript", "run PMD and ESLint".  
**Selector breakdown:** Parentheses + comma = OR logic.

---

## Targ