[EXPERIENCE BUG][code-analyzer] Code Analyzer does not detect custom ruleset even after specifying in code-analyzer.yml

[pranayjswl007]

Have you tried to resolve this issue yourself first?

Yes

Bug Description

I am trying to move away from v4 to v5 and have followed the migration guide.
I have declared a custom-ruleset file in : devops/masterRuleset.xml
in my config-file I have specified to use my custom-ruleset. URL

Then when I try to run my command as
sf code-analyzer rules --rule-selector pmd:quickstart --config-file devops/code-analyzer.yml

I get the following output

Streaming logs in real time to:
/var/folders/0l/9s3j_vns59l5rhf5fvyn7zqc0000gr/T/sfca-2025_05_09_18_25_20_997.log

Selecting rules... done.

=== Summary

Found 0 rules.

Additional log information written to:
/var/folders/0l/9s3j_vns59l5rhf5fvyn7zqc0000gr/T/sfca-2025_05_09_18_25_20_997.log

Output / Logs

[2025-05-09T17:48:55.760Z] Debug Core - Engine with name 'eslint' was added to Code Analyzer.
[2025-05-09T17:48:55.760Z] Debug Core - Engine with name 'retire-js' was added to Code Analyzer.
[2025-05-09T17:48:55.760Z] Debug Core - Engine with name 'regex' was added to Code Analyzer.
[2025-05-09T17:48:55.786Z] Debug Core - Engine with name 'flow' was added to Code Analyzer.
[2025-05-09T17:48:55.812Z] Debug Core - Engine with name 'pmd' was added to Code Analyzer.
[2025-05-09T17:48:55.814Z] Debug Core - Engine with name 'cpd' was added to Code Analyzer.
[2025-05-09T17:48:55.826Z] Debug Core - Engine with name 'sfge' was added to Code Analyzer.
[2025-05-09T17:48:55.827Z] Debug Core - Gathering all available rules from engine 'eslint'.
[2025-05-09T17:48:56.432Z] Debug Core - Gathering all available rules from engine 'retire-js'.
[2025-05-09T17:48:56.433Z] Debug Core - Gathering all available rules from engine 'regex'.
[2025-05-09T17:48:56.433Z] Debug Core - Gathering all available rules from engine 'flow'.
[2025-05-09T17:48:56.433Z] Debug Core - Gathering all available rules from engine 'pmd'.
[2025-05-09T17:48:56.433Z] Debug Core - Gathering all available rules from engine 'cpd'.
[2025-05-09T17:48:56.433Z] Debug Core - Gathering all available rules from engine 'sfge'.
[2025-05-09T17:48:56.441Z] Debug flow - No Flow files have been targeted in the workspace. Returning no flow rules.
[2025-05-09T17:48:56.441Z] Debug Core - Finished gathering 0 available rule(s) from engine 'flow'.
[2025-05-09T17:48:56.448Z] Debug Core - Finished gathering 0 available rule(s) from engine 'retire-js'.
[2025-05-09T17:48:56.452Z] Debug Core - Finished gathering 2 available rule(s) from engine 'cpd'.
[2025-05-09T17:48:56.452Z] Debug Core - The severity value of rule 'DetectCopyPasteForApex' of engine 'cpd' was overridden according to the specified configuration. The old value '5' was replaced with the new value '5'.
[2025-05-09T17:48:56.452Z] Debug Core - The tags value of rule 'DetectCopyPasteForApex' of engine 'cpd' was overridden according to the specified configuration. The old value '["Recommended","Design","Apex"]' was replaced with the new value '["Recommended","Design","Apex"]'.
[2025-05-09T17:48:56.452Z] Debug Core - The severity value of rule 'DetectCopyPasteForXml' of engine 'cpd' was overridden according to the specified configuration. The old value '5' was replaced with the new value '5'.
[2025-05-09T17:48:56.452Z] Debug Core - The tags value of rule 'DetectCopyPasteForXml' of engine 'cpd' was overridden according to the specified configuration. The old value '["Design","Xml"]' was replaced with the new value '["Design","Xml"]'.
[2025-05-09T17:48:56.453Z] Debug Core - Finished gathering 5 available rule(s) from engine 'regex'.
[2025-05-09T17:48:56.453Z] Debug Core - The severity value of rule 'NoTrailingWhitespace' of engine 'regex' was overridden according to the specified configuration. The old value '5' was replaced with the new value '5'.
[2025-05-09T17:48:56.453Z] Debug Core - The tags value of rule 'NoTrailingWhitespace' of engine 'regex' was overridden according to the specified configuration. The old value '["Recommended","CodeStyle","Apex"]' was replaced with the new value '["Recommended","CodeStyle","Apex"]'.
[2025-05-09T17:48:56.453Z] Debug Core - The severity value of rule 'AvoidTermsWithImplicitBias' of engine 'regex' was overridden according to the specified configuration. The old value '5' was replaced with the new value '5'.
[2025-05-09T17:48:56.453Z] Debug Core - The tags value of rule 'AvoidTermsWithImplicitBias' of engine 'regex' was overridden according to the specified configuration. The old value '["Recommended","BestPractices"]' was replaced with the new value '["Recommended","BestPractices"]'.
[2025-05-09T17:48:56.453Z] Debug Core - The severity value of rule 'AvoidOldSalesforceApiVersions' of engine 'regex' was overridden according to the specified configuration. The old value '2' was replaced with the new value '2'.
[2025-05-09T17:48:56.453Z] Debug Core - The tags value of rule 'AvoidOldSalesforceApiVersions' of engine 'regex' was overridden according to the specified configuration. The old value '["Recommended","Security","XML"]' was replaced with the new value '["Recommended","Security","XML"]'.
[2025-05-09T17:48:56.453Z] Debug Core - The severity value of rule 'AvoidGetHeapSizeInLoop' of engine 'regex' was overridden according to the specified configuration. The old value '2' was replaced with the new value '2'.
[2025-05-09T17:48:56.453Z] Debug Core - The tags value of rule 'AvoidGetHeapSizeInLoop' of engine 'regex' was overridden according to the specified configuration. The old value '["Recommended","Performance","Apex"]' was replaced with the new value '["Recommended","Performance","Apex"]'.
[2025-05-09T17:48:56.453Z] Debug Core - The severity value of rule 'MinVersionForAbstractVirtualClassesWithPrivateMethod' of engine 'regex' was overridden according to the specified configuration. The old value '2' was replaced with the new value '2'.
[2025-05-09T17:48:56.453Z] Debug Core - The tags value of rule 'MinVersionForAbstractVirtualClassesWithPrivateMethod' of engine 'regex' was overridden according to the specified configuration. The old value '["Recommended","BestPractices","Apex"]' was replaced with the new value '["Recommended","BestPractices","Apex"]'.
[2025-05-09T17:48:56.555Z] Debug Core - Finished gathering 0 available rule(s) from engine 'eslint'.
[2025-05-09T17:48:56.600Z] Debug sfge - Invoking SFGE's describe command. Logs being written to /var/folders/0l/9s3j_vns59l5rhf5fvyn7zqc0000gr/T/sfca-sfge-2025_05_09_18_48_55_826.log.
[2025-05-09T17:48:57.053Z] Debug Core - Finished gathering 92 available rule(s) from engine 'pmd'.
[2025-05-09T17:48:57.053Z] Debug Core - The severity value of rule 'ApexAssertionsShouldIncludeMessage' of engine 'pmd' was overridden according to the specified configuration. The old value '3' was replaced with the new value '3'.
[2025-05-09T17:48:57.053Z] Debug Core - The tags value of rule 'ApexAssertionsShouldIncludeMessage' of engine 'pmd' was overridden according to the specified configuration. The old value '["BestPractices","Apex"]' was replaced with the new value '["BestPractices","Apex"]'.
[2025-05-09T17:48:57.053Z] Debug Core - The severity value of rule 'ApexBadCrypto' of engine 'pmd' was overridden according to the specified configuration. The old value '2' was replaced with the new value '2'.
[2025-05-09T17:48:57.053Z] Debug Core - The tags value of rule 'ApexBadCrypto' of engine 'pmd' was overridden according to the specified configuration. The old value '["Recommended","Security","Apex","quickstart"]' was replaced with the new value '["Recommended","Security","Apex"]'.
[2025-05-09T17:48:57.053Z] Debug Core - The severity value of rule 'ApexCRUDViolation' of engine 'pmd' was overridden according to the specified configuration. The old value '2' was replaced with the new value '2'.
[2025-05-09T17:48:57.053Z] Debug Core - The tags value of rule 'ApexCRUDViolation' of engine 'pmd' was overridden according to the specified configuration. The old value '["Recommended","Security","Apex","quickstart"]' was replaced with the new value '["Recommended","Security","Apex"]'.
[2025-05-09T17:48:57.053Z] Debug Core - The severity value of rule 'ApexCSRF' of engine 'pmd' was overridden according to the specified configuration. The old value '1' was replaced with the new value '1'.
[2025-05-09T17:48:57.053Z] Debug Core - The tags value of rule 'ApexCSRF' of engine 'pmd' was overridden according to the specified configuration. The old value '["Recommended","Security","Apex","quickstart"]' was replaced with the new value '["Recommended","Security","Apex"]'.
[2025-05-09T17:48:57.053Z] Debug Core - The severity value of rule 'ApexDangerousMethods' of engine 'pmd' was overridden according to the specified configuration. The old value '3' was replaced with the new value '3'.
[2025-05-09T17:48:57.053Z] Debug Core - The tags value of rule 'ApexDangerousMethods' of engine 'pmd' was overridden according to the specified configuration. The old value '["Recommended","Security","Apex","quickstart"]' was replaced with the new value '["Recommended","Security","Apex"]'.
[2025-05-09T17:48:57.053Z] Debug Core - The severity value of rule 'ApexDoc' of engine 'pmd' was overridden according to the specified configuration. The old value '4' was replaced with the new value '4'.
[2025-05-09T17:48:57.053Z] Debug Core - The tags value of rule 'ApexDoc' of engine 'pmd' was overridden according to the specified configuration. The old value '["Recommended","Documentation","Apex"]' was replaced with the new value '["Recommended","Documentation","Apex"]'.
[2025-05-09T17:48:57.053Z] Debug Core - The severity value of rule 'ApexInsecureEndpoint' of engine 'pmd' was overridden according to the specified configuration. The old value '2' was replaced with the new value '2'.
[2025-05-09T17:48:57.053Z] Debug Core - The tags value of rule 'ApexInsecureEndpoint' of engine 'pmd' was overridden according to the specified configuration. The old value '["Recommended","Security","Apex","quickstart"]' was replaced with the new value '["Recommended","Security","Apex"]'.
[2025-05-09T17:48:57.053Z] Debug Core - The severity value of rule 'ApexOpenRedirect' of engine 'pmd' was overridden according to the specified configuration. The old value '2' was replaced with the new value '2'.
[2025-05-09T17:48:57.053Z] Debug Core - The tags value of rule 'ApexOpenRedirect' of engine 'pmd' was overridden according to the specified configuration. The old value '["Recommended","Security","Apex","quickstart"]' was replaced with the new value '["Recommended","Security","Apex"]'.
[2025-05-09T17:48:57.053Z] Debug Core - The severity value of rule 'ApexSharingViolations' of engine 'pmd' was overridden according to the specified configuration. The old value '3' was replaced with the new value '3'.
[2025-05-09T17:48:57.053Z] Debug Core - The tags value of rule 'ApexSharingViolations' of engine 'pmd' was overridden according to the specified configuration. The old value '["Recommended","Security","Apex","quickstart"]' was replaced with the new value '["Recommended","Security","Apex"]'.
[2025-05-09T17:48:57.053Z] Debug Core - The severity value of rule 'ApexSOQLInjection' of engine 'pmd' was overridden according to the specified configuration. The old value '2' was replaced with the new value '2'.
[2025-05-09T17:48:57.053Z] Debug Core - The tags value of rule 'ApexSOQLInjection' of engine 'pmd' was overridden according to the specified configuration. The old value '["Recommended","Security","Apex","quickstart"]' was replaced with the new value '["Recommended","Security","Apex"]'.
[2025-05-09T17:48:57.053Z] Debug Core - The severity value of rule 'ApexSuggestUsingNamedCred' of engine 'pmd' was overridden according to the specified configuration. The old value '2' was replaced with the new value '2'.
[2025-05-09T17:48:57.053Z] Debug Core - The tags value of rule 'ApexSuggestUsingNamedCred' of engine 'pmd' was overridden according to the specified configuration. The old value '["Recommended","Security","Apex","quickstart"]' was replaced with the new value '["Recommended","Security","Apex"]'.
[2025-05-09T17:48:57.053Z] Debug Core - The severity value of rule 'ApexUnitTestClassShouldHaveAsserts' of engine 'pmd' was overridden according to the specified configuration. The old value '3' was replaced with the new value '3'.
[2025-05-09T17:48:57.053Z] Debug Core - The tags value of rule 'ApexUnitTestClassShouldHaveAsserts' of engine 'pmd' was overridden according to the specified configuration. The old value '["Recommended","BestPractices","Apex","quickstart"]' was replaced with the new value '["Recommended","BestPractices","Apex"]'.
[2025-05-09T17:48:57.053Z] Debug Core - The severity value of rule 'ApexUnitTestClassShouldHaveRunAs' of engine 'pmd' was overridden according to the specified configuration. The old value '4' was replaced with the new value '4'.
[2025-05-09T17:48:57.053Z] Debug Core - The tags value of rule 'ApexUnitTestClassShouldHaveRunAs' of engine 'pmd' was overridden according to the specified configuration. The old value '["Recommended","BestPractices","Apex","quickstart"]' was replaced with the new value '["Recommended","BestPractices","Apex"]'.
[2025-05-09T17:48:57.053Z] Debug Core - The severity value of rule 'ApexUnitTestMethodShouldHaveIsTestAnnotation' of engine 'pmd' was overridden according to the specified configuration. The old value '2' was replaced with the new value '2'.
[2025-05-09T17:48:57.053Z] Debug Core - The tags value of rule 'ApexUnitTestMethodShouldHaveIsTestAnnotation' of engine 'pmd' was overridden according to the specified configuration. The old value '["Recommended","BestPractices","Apex"]' was replaced with the new value '["Recommended","BestPractices","Apex"]'.
[2025-05-09T17:48:57.053Z] Debug Core - The severity value of rule 'ApexUnitTestShouldNotUseSeeAllDataTrue' of engine 'pmd' was overridden according to the specified configuration. The old value '2' was replaced with the new value '2'.
[2025-05-09T17:48:57.053Z] Debug Core - The tags value of rule 'ApexUnitTestShouldNotUseSeeAllDataTrue' of engine 'pmd' was overridden according to the specified configuration. The old value '["Recommended","BestPractices","Apex","quickstart"]' was replaced with the new value '["Recommended","BestPractices","Apex"]'.
[2025-05-09T17:48:57.053Z] Debug Core - The severity value of rule 'ApexXSSFromEscapeFalse' of engine 'pmd' was overridden according to the specified configuration. The old value '2' was replaced with the new value '2'.
[2025-05-09T17:48:57.053Z] Debug Core - The tags value of rule 'ApexXSSFromEscapeFalse' of engine 'pmd' was overridden according to the specified configuration. The old value '["Recommended","Security","Apex","quickstart"]' was replaced with the new value '["Recommended","Security","Apex"]'.
[2025-05-09T17:48:57.053Z] Debug Core - The severity value of rule 'ApexXSSFromURLParam' of engine 'pmd' was overridden according to the specified configuration. The old value '2' was replaced with the new value '2'.
[2025-05-09T17:48:57.053Z] Debug Core - The tags value of rule 'ApexXSSFromURLParam' of engine 'pmd' was overridden according to the specified configuration. The old value '["Recommended","Security","Apex","quickstart"]' was replaced with the new value '["Recommended","Security","Apex"]'.
[2025-05-09T17:48:57.053Z] Debug Core - The severity value of rule 'AvoidApiSessionId' of engine 'pmd' was overridden according to the specified configuration. The old value '2' was replaced with the new value '2'.
[2025-05-09T17:48:57.053Z] Debug Core - The tags value of rule 'AvoidApiSessionId' of engine 'pmd' was overridden according to the specified configuration. The old value '["AppExchange","Security","XML"]' was replaced with the new value '["AppExchange","Security","XML"]'.
[2025-05-09T17:48:57.053Z] Debug Core - The severity value of rule 'AvoidAuraWithLockerDisabled' of engine 'pmd' was overridden according to the specified configuration. The old value '1' was replaced with the new value '1'.
[2025-05-09T17:48:57.053Z] Debug Core - The tags value of rule 'AvoidAuraWithLockerDisabled' of engine 'pmd' was overridden according to the specified configuration. The old value '["AppExchange","Security","XML"]' was replaced with the new value '["AppExchange","Security","XML"]'.
[2025-05-09T17:48:57.053Z] Debug Core - The severity value of rule 'AvoidChangeProtectionUnprotected' of engine 'pmd' was overridden according to the specified configuration. The old value '1' was replaced with the new value '1'.
[2025-05-09T17:48:57.053Z] Debug Core - The tags value of rule 'AvoidChangeProtectionUnprotected' of engine 'pmd' was overridden according to the specified configuration. The old value '["AppExchange","Security","Apex"]' was replaced with the new value '["AppExchange","Security","Apex"]'.
[2025-05-09T17:48:57.053Z] Debug Core - The severity value of rule 'AvoidDebugStatements' of engine 'pmd' was overridden according to the specified configuration. The old value '4' was replaced with the new value '4'.
[2025-05-09T17:48:57.053Z] Debug Core - The tags value of rule 'AvoidDebugStatements' of engine 'pmd' was overridden according to the specified configuration. The old value '["Recommended","Performance","Apex"]' was replaced with the new value '["Recommended","Performance","Apex"]'.
[2025-05-09T17:48:57.053Z] Debug Core - The severity value of rule 'AvoidDeeplyNestedIfStmts' of engine 'pmd' was overridden according to the specified configuration. The old value '3' was replaced with the new value '3'.
[2025-05-09T17:48:57.053Z] Debug Core - The tags value of rule 'AvoidDeeplyNestedIfStmts' of engine 'pmd' was overridden according to the specified configuration. The old value '["Recommended","Design","Apex","quickstart"]' was replaced with the new value '["Recommended","Design","Apex"]'.
[2025-05-09T17:48:57.053Z] Debug Core - The severity value of rule 'AvoidDirectAccessTriggerMap' of engine 'pmd' was overridden according to the specified configuration. The old value '3' was replaced with the new value '3'.
[2025-05-09T17:48:57.053Z] Debug Core - The tags value of rule 'AvoidDirectAccessTriggerMap' of engine 'pmd' was overridden according to the specified configuration. The old value '["Recommended","ErrorProne","Apex","quickstart"]' was replaced with the new value '["Recommended","ErrorProne","Apex"]'.
[2025-05-09T17:48:57.053Z] Debug Core - The severity value of rule 'AvoidDisableProtocolSecurityRemoteSiteSetting' of engine 'pmd' was overridden according to the specified configuration. The old value '3' was replaced with the new value '3'.
[2025-05-09T17:48:57.053Z] Debug Core - The tags value of rule 'AvoidDisableProtocolSecurityRemoteSiteSetting' of engine 'pmd' was overridden according to the specified configuration. The old value '["AppExchange","Security","XML"]' was replaced with the new value '["AppExchange","Security","XML"]'.
[2025-05-09T17:48:57.053Z] Debug Core - The severity value of rule 'AvoidGetInstanceWithTaint' of engine 'pmd' was overridden according to the specified configuration. The old value '3' was replaced with the new value '3'.
[2025-05-09T17:48:57.053Z] Debug Core - The tags value of rule 'AvoidGetInstanceWithTaint' of engine 'pmd' was overridden according to the specified configuration. The old value '["AppExchange","Security","Apex"]' was replaced with the new value '["AppExchange","Security","Apex"]'.
[2025-05-09T17:48:57.053Z] Debug Core - The severity value of rule 'AvoidGlobalInstallUninstallHandlers' of engine 'pmd' was overridden according to the specified configuration. The old value '1' was replaced with the new value '1'.
[2025-05-09T17:48:57.053Z] Debug Core - The tags value of rule 'AvoidGlobalInstallUninstallHandlers' of engine 'pmd' was overridden according to the specified configuration. The old value '["AppExchange","Security","Apex"]' was replaced with the new value '["AppExchange","Security","Apex"]'.
[2025-05-09T17:48:57.053Z] Debug Core - The severity value of rule 'AvoidGlobalModifier' of engine 'pmd' was overridden according to the specified configuration. The old value '3' was replaced with the new value '3'.
[2025-05-09T17:48:57.053Z] Debug Core - The tags value of rule 'AvoidGlobalModifier' of engine 'pmd' was overridden according to the specified configuration. The old value '["Recommended","BestPractices","Apex","quickstart"]' was replaced with the new value '["Recommended","BestPractices","Apex"]'.
[2025-05-09T17:48:57.053Z] Debug Core - The severity value of rule 'AvoidHardcodedCredentialsInFieldDecls' of engine 'pmd' was overridden according to the specified configuration. The old value '3' was replaced with the new value '3'.
[2025-05-09T17:48:57.053Z] Debug Core - The tags value of rule 'AvoidHardcodedCredentialsInFieldDecls' of engine 'pmd' was overridden according to the specified configuration. The old value '["AppExchange","Security","Apex"]' was replaced with the new value '["AppExchange","Security","Apex"]'.
[2025-05-09T17:48:57.053Z] Debug Core - The severity value of rule 'AvoidHardcodedCredentialsInHttpHeader' of engine 'pmd' was overridden according to the specified configuration. The old value '3' was replaced with the new value '3'.
[2025-05-09T17:48:57.053Z] Debug Core - The tags value of rule 'AvoidHardcodedCredentialsInHttpHeader' of engine 'pmd' was overridden according to the specified configuration. The old value '["AppExchange","Security","Apex"]' was replaced with the new value '["AppExchange","Security","Apex"]'.
[2025-05-09T17:48:57.053Z] Debug Core - The severity value of rule 'AvoidHardcodedCredentialsInSetPassword' of engine 'pmd' was overridden according to the specified configuration. The old value '1' was replaced with the new value '1'.
[2025-05-09T17:48:57.053Z] Debug Core - The tags value of rule 'AvoidHardcodedCredentialsInSetPassword' of engine 'pmd' was overridden according to the specified configuration. The old value '["AppExchange","Security","Apex"]' was replaced with the new value '["AppExchange","Security","Apex"]'.
[2025-05-09T17:48:57.053Z] Debug Core - The severity value of rule 'AvoidHardcodedCredentialsInVarAssign' of engine 'pmd' was overridden according to the specified configuration. The old value '3' was replaced with the new value '3'.
[2025-05-09T17:48:57.053Z] Debug Core - The tags value of rule 'AvoidHardcodedCredentialsInVarAssign' of engine 'pmd' was overridden according to the specified configuration. The old value '["AppExchange","Security","Apex"]' was replaced with the new value '["AppExchange","Security","Apex"]'.
[2025-05-09T17:48:57.053Z] Debug Core - The severity value of rule 'AvoidHardcodedCredentialsInVarDecls' of engine 'pmd' was overridden according to the specified configuration. The old value '3' was replaced with the new value '3'.
[2025-05-09T17:48:57.053Z] Debug Core - The tags value of rule 'AvoidHardcodedCredentialsInVarDecls' of engine 'pmd' was overridden according to the specified configuration. The old value '["AppExchange","Security","Apex"]' was replaced with the new value '["AppExchange","Security","Apex"]'.
[2025-05-09T17:48:57.053Z] Debug Core - The severity value of rule 'AvoidHardcodingId' of engine 'pmd' was overridden according to the specified configuration. The old value '3' was replaced with the new value '3'.
[2025-05-09T17:48:57.053Z] Debug Core - The tags value of rule 'AvoidHardcodingId' of engine 'pmd' was overridden according to the specified configuration. The old value '["Recommended","ErrorProne","Apex","quickstart"]' was replaced with the new value '["Recommended","ErrorProne","Apex"]'.
[2025-05-09T17:48:57.053Z] Debug Core - The severity value of rule 'AvoidInsecureHttpRemoteSiteSetting' of engine 'pmd' was overridden according to the specified configuration. The old value '3' was replaced with the new value '3'.
[2025-05-09T17:48:57.053Z] Debug Core - The tags value of rule 'AvoidInsecureHttpRemoteSiteSetting' of engine 'pmd' was overridden according to the specified configuration. The old value '["AppExchange","Security","XML"]' was replaced with the new value '["AppExchange","Security","XML"]'.
[2025-05-09T17:48:57.053Z] Debug Core - The severity value of rule 'AvoidInvalidCrudContentDistribution' of engine 'pmd' was overridden according to the specified configuration. The old value '3' was replaced with the new value '3'.
[2025-05-09T17:48:57.053Z] Debug Core - The tags value of rule 'AvoidInvalidCrudContentDistribution' of engine 'pmd' was overridden according to the specified configuration. The old value '["AppExchange","Security","Apex"]' was replaced with the new value '["AppExchange","Security","Apex"]'.
[2025-05-09T17:48:57.053Z] Debug Core - The severity value of rule 'AvoidJavaScriptCustomObject' of engine 'pmd' was overridden according to the specified configuration. The old value '2' was replaced with the new value '2'.
[2025-05-09T17:48:57.053Z] Debug Core - The tags value of rule 'AvoidJavaScriptCustomObject' of engine 'pmd' was overridden according to the specified configuration. The old value '["AppExchange","Security","XML"]' was replaced with the new value '["AppExchange","Security","XML"]'.
[2025-05-09T17:48:57.053Z] Debug Core - The severity value of rule 'AvoidJavaScriptHomePageComponent' of engine 'pmd' was overridden according to the specified configuration. The old value '2' was replaced with the new value '2'.
[2025-05-09T17:48:57.053Z] Debug Core - The tags value of rule 'AvoidJavaScriptHomePageComponent' of engine 'pmd' was overridden according to the specified configuration. The old value '["AppExchange","Security","XML"]' was replaced with the new value '["AppExchange","Security","XML"]'.
[2025-05-09T17:48:57.053Z] Debug Core - The severity value of rule 'AvoidJavaScriptInUrls' of engine 'pmd' was overridden according to the specified configuration. The old value '1' was replaced with the new value '1'.
[2025-05-09T17:48:57.053Z] Debug Core - The tags value of rule 'AvoidJavaScriptInUrls' of engine 'pmd' was overridden according to the specified configuration. The old value '["AppExchange","Security","XML"]' was replaced with the new value '["AppExchange","Security","XML"]'.
[2025-05-09T17:48:57.053Z] Debug Core - The severity value of rule 'AvoidJavaScriptWebLink' of engine 'pmd' was overridden according to the specified configuration. The old value '2' was replaced with the new value '2'.
[2025-05-09T17:48:57.053Z] Debug Core - The tags value of rule 'AvoidJavaScriptWebLink' of engine 'pmd' was overridden according to the specified configuration. The old value '["AppExchange","Security","XML"]' was replaced with the new value '["AppExchange","Security","XML"]'.
[2025-05-09T17:48:57.053Z] Debug Core - The severity value of rule 'AvoidLmcIsExposedTrue' of engine 'pmd' was overridden according to the specified configuration. The old value '2' was replaced with the new value '2'.
[2025-05-09T17:48:57.053Z] Debug Core - The tags value of rule 'AvoidLmcIsExposedTrue' of engine 'pmd' was overridden according to the specified configuration. The old value '["AppExchange","Security","XML"]' was replaced with the new value '["AppExchange","Security","XML"]'.
[2025-05-09T17:48:57.053Z] Debug Core - The severity value of rule 'AvoidLogicInTrigger' of engine 'pmd' was overridden according to the specified configuration. The old value '3' was replaced with the new value '3'.
[2025-05-09T17:48:57.053Z] Debug Core - The tags value of rule 'AvoidLogicInTrigger' of engine 'pmd' was overridden according to the specified configuration. The old value '["Recommended","BestPractices","Apex","quickstart"]' was replaced with the new value '["Recommended","BestPractices","Apex"]'.
[2025-05-09T17:48:57.053Z] Debug Core - The severity value of rule 'AvoidNonExistentAnnotations' of engine 'pmd' was overridden according to the specified configuration. The old value '4' was replaced with the new value '4'.
[2025-05-09T17:48:57.053Z] Debug Core - The tags value of rule 'AvoidNonExistentAnnotations' of engine 'pmd' was overridden according to the specified configuration. The old value '["Recommended","ErrorProne","Apex","quickstart"]' was replaced with the new value '["Recommended","ErrorProne","Apex"]'.
[2025-05-09T17:48:57.053Z] Debug Core - The severity value of rule 'AvoidNonRestrictiveQueries' of engine 'pmd' was overridden according to the specified configuration. The old value '4' was replaced with the new value '4'.
[2025-05-09T17:48:57.053Z] Debug Core - The tags value of rule 'AvoidNonRestrictiveQueries' of engine 'pmd' was overridden according to the specified configuration. The old value '["Recommended","Performance","Apex"]' was replaced with the new value '["Recommended","Performance","Apex"]'.
[2025-05-09T17:48:57.053Z] Debug Core - The severity value of rule 'AvoidSControls' of engine 'pmd' was overridden according to the specified configuration. The old value '1' was replaced with the new value '1'.
[2025-05-09T17:48:57.053Z] Debug Core - The tags value of rule 'AvoidSControls' of engine 'pmd' was overridden according to the specified configuration. The old value '["AppExchange","Security","XML"]' was replaced with the new value '["AppExchange","Security","XML"]'.
[2025-05-09T17:48:57.053Z] Debug Core - The severity value of rule 'AvoidSecurityEnforcedOldApiVersion' of engine 'pmd' was overridden according to the specified configuration. The old value '3' was replaced with the new value '3'.
[2025-05-09T17:48:57.053Z] Debug Core - The tags value of rule 'AvoidSecurityEnforcedOldApiVersion' of engine 'pmd' was overridden according to the specified configuration. The old value '["AppExchange","Security","Apex"]' was replaced with the new value '["AppExchange","Security","Apex"]'.
[2025-05-09T17:48:57.053Z] Debug Core - The severity value of rule 'AvoidStatefulDatabaseResult' of engine 'pmd' was overridden according to the specified configuration. The old value '3' was replaced with the new value '3'.
[2025-05-09T17:48:57.053Z] Debug Core - The tags value of rule 'AvoidStatefulDatabaseResult' of engine 'pmd' was overridden according to the specified configuration. The old value '["Recommended","ErrorProne","Apex","quickstart"]' was replaced with the new value '["Recommended","ErrorProne","Apex"]'.
[2025-05-09T17:48:57.053Z] Debug Core - The severity value of rule 'AvoidUnauthorizedApiSessionIdInApex' of engine 'pmd' was overridden according to the specified configuration. The old value '3' was replaced with the new value '3'.
[2025-05-09T17:48:57.053Z] Debug Core - The tags value of rule 'AvoidUnauthorizedApiSessionIdInApex' of engine 'pmd' was overridden according to the specified configuration. The old value '["AppExchange","Security","Apex"]' was replaced with the new value '["AppExchange","Security","Apex"]'.
[2025-05-09T17:48:57.053Z] Debug Core - The severity value of rule 'AvoidUnauthorizedGetSessionIdInApex' of engine 'pmd' was overridden according to the specified configuration. The old value '3' was replaced with the new value '3'.
[2025-05-09T17:48:57.053Z] Debug Core - The tags value of rule 'AvoidUnauthorizedGetSessionIdInApex' of engine 'pmd' was overridden according to the specified configuration. The old value '["AppExchange","Security","Apex"]' was replaced with the new value '["AppExchange","Security","Apex"]'.
[2025-05-09T17:48:57.053Z] Debug Core - The severity value of rule 'AvoidUnsafePasswordManagementUse' of engine 'pmd' was overridden according to the specified configuration. The old value '1' was replaced with the new value '1'.
[2025-05-09T17:48:57.053Z] Debug Core - The tags value of rule 'AvoidUnsafePasswordManagementUse' of engine 'pmd' was overridden according to the specified configuration. The old value '["AppExchange","Security","Apex"]' was replaced with the new value '["AppExchange","Security","Apex"]'.
[2025-05-09T17:48:57.053Z] Debug Core - The severity value of rule 'ClassNamingConventions' of engine 'pmd' was overridden according to the specified configuration. The old value '3' was replaced with the new value '3'.
[2025-05-09T17:48:57.053Z] Debug Core - The tags value of rule 'ClassNamingConventions' of engine 'pmd' was overridden according to the specified configuration. The old value '["Recommended","CodeStyle","Apex","quickstart"]' was replaced with the new value '["Recommended","CodeStyle","Apex"]'.
[2025-05-09T17:48:57.053Z] Debug Core - The severity value of rule 'CognitiveComplexity' of engine 'pmd' was overridden according to the specified configuration. The old value '3' was replaced with the new value '3'.
[2025-05-09T17:48:57.053Z] Debug Core - The tags value of rule 'CognitiveComplexity' of engine 'pmd' was overridden according to the specified configuration. The old value '["Recommended","Design","Apex"]' was replaced with the new value '["Recommended","Design","Apex"]'.
[2025-05-09T17:48:57.053Z] Debug Core - The severity value of rule 'CyclomaticComplexity' of engine 'pmd' was overridden according to the specified configuration. The old value '3' was replaced with the new value '3'.
[2025-05-09T17:48:57.053Z] Debug Core - The tags value of rule 'CyclomaticComplexity' of engine 'pmd' was overridden according to the specified configuration. The old value '["Recommended","Design","Apex","quickstart"]' was replaced with the new value '["Recommended","Design","Apex"]'.
[2025-05-09T17:48:57.053Z] Debug Core - The severity value of rule 'DebugsShouldUseLoggingLevel' of engine 'pmd' was overridden according to the specified configuration. The old value '4' was replaced with the new value '4'.
[2025-05-09T17:48:57.053Z] Debug Core - The tags value of rule 'DebugsShouldUseLoggingLevel' of engine 'pmd' was overridden according to the specified configuration. The old value '["Recommended","BestPractices","Apex","quickstart"]' was replaced with the new value '["Recommended","BestPractices","Apex"]'.
[2025-05-09T17:48:57.053Z] Debug Core - The severity value of rule 'EagerlyLoadedDescribeSObjectResult' of engine 'pmd' was overridden according to the specified configuration. The old value '2' was replaced with the new value '2'.
[2025-05-09T17:48:57.053Z] Debug Core - The tags value of rule 'EagerlyLoadedDescribeSObjectResult' of engine 'pmd' was overridden according to the specified configuration. The old value '["Recommended","Performance","Apex"]' was replaced with the new value '["Recommended","Performance","Apex"]'.
[2025-05-09T17:48:57.053Z] Debug Core - The severity value of rule 'EmptyCatchBlock' of engine 'pmd' was overridden according to the specified configuration. The old value '2' was replaced with the new value '2'.
[2025-05-09T17:48:57.053Z] Debug Core - The tags value of rule 'EmptyCatchBlock' of engine 'pmd' was overridden according to the specified configuration. The old value '["Recommended","ErrorProne","Apex","quickstart"]' was replaced with the new value '["Recommended","ErrorProne","Apex"]'.
[2025-05-09T17:48:57.053Z] Debug Core - The severity value of rule 'EmptyIfStmt' of engine 'pmd' was overridden according to the specified configuration. The old value '3' was replaced with the new value '3'.
[2025-05-09T17:48:57.053Z] Debug Core - The tags value of rule 'EmptyIfStmt' of engine 'pmd' was overridden according to the specified configuration. The old value '["Recommended","ErrorProne","Apex","quickstart"]' was replaced with the new value '["Recommended","ErrorProne","Apex"]'.
[2025-05-09T17:48:57.053Z] Debug Core - The severity value of rule 'EmptyStatementBlock' of engine 'pmd' was overridden according to the specified configuration. The old value '3' was replaced with the new value '3'.
[2025-05-09T17:48:57.053Z] Debug Core - The tags value of rule 'EmptyStatementBlock' of engine 'pmd' was overridden according to the specified configuration. The old value '["Recommended","ErrorProne","Apex","quickstart"]' was replaced with the new value '["Recommended","ErrorProne","Apex"]'.
[2025-05-09T17:48:57.053Z] Debug Core - The severity value of rule 'EmptyTryOrFinallyBlock' of engine 'pmd' was overridden according to the specified configuration. The old value '3' was replaced with the new value '3'.
[2025-05-09T17:48:57.053Z] Debug Core - The tags value of rule 'EmptyTryOrFinallyBlock' of engine 'pmd' was overridden according to the specified configuration. The old value '["Recommended","ErrorProne","Apex","quickstart"]' was replaced with the new value '["Recommended","ErrorProne","Apex"]'.
[2025-05-09T17:48:57.053Z] Debug Core - The severity value of rule 'EmptyWhileStmt' of engine 'pmd' was overridden according to the specified configuration. The old value '3' was replaced with the new value '3'.
[2025-05-09T17:48:57.053Z] Debug Core - The tags value of rule 'EmptyWhileStmt' of engine 'pmd' was overridden according to the specified configuration. The old value '["Recommended","ErrorProne","Apex","quickstart"]' was replaced with the new value '["Recommended","ErrorProne","Apex"]'.
[2025-05-09T17:48:57.053Z] Debug Core - The severity value of rule 'ExcessiveClassLength' of engine 'pmd' was overridden according to the specified configuration. The old value '3' was replaced with the new value '3'.
[2025-05-09T17:48:57.053Z] Debug Core - The tags value of rule 'ExcessiveClassLength' of engine 'pmd' was overridden according to the specified configuration. The old value '["Recommended","Design","Apex","quickstart"]' was replaced with the new value '["Recommended","Design","Apex"]'.
[2025-05-09T17:48:57.053Z] Debug Core - The severity value of rule 'ExcessiveParameterList' of engine 'pmd' was overridden according to the specified configuration. The old value '3' was replaced with the new value '3'.
[2025-05-09T17:48:57.053Z] Debug Core - The tags value of rule 'ExcessiveParameterList' of engine 'pmd' was overridden according to the specified configuration. The old value '["Recommended","Design","Apex","quickstart"]' was replaced with the new value '["Recommended","Design","Apex"]'.
[2025-05-09T17:48:57.053Z] Debug Core - The severity value of rule 'ExcessivePublicCount' of engine 'pmd' was overridden according to the specified configuration. The old value '3' was replaced with the new value '3'.
[2025-05-09T17:48:57.053Z] Debug Core - The tags value of rule 'ExcessivePublicCount' of engine 'pmd' was overridden according to the specified configuration. The old value '["Recommended","Design","Apex","quickstart"]' was replaced with the new value '["Recommended","Design","Apex"]'.
[2025-05-09T17:48:57.053Z] Debug Core - The severity value of rule 'FieldDeclarationsShouldBeAtStart' of engine 'pmd' was overridden according to the specified configuration. The old value '3' was replaced with the new value '3'.
[2025-05-09T17:48:57.053Z] Debug Core - The tags value of rule 'FieldDeclarationsShouldBeAtStart' of engine 'pmd' was overridden according to the specified configuration. The old value '["Recommended","CodeStyle","Apex","quickstart"]' was replaced with the new value '["Recommended","CodeStyle","Apex"]'.
[2025-05-09T17:48:57.053Z] Debug Core - The severity value of rule 'FieldNamingConventions' of engine 'pmd' was overridden according to the specified configuration. The old value '3' was replaced with the new value '3'.
[2025-05-09T17:48:57.053Z] Debug Core - The tags value of rule 'FieldNamingConventions' of engine 'pmd' was overridden according to the specified configuration. The old value '["Recommended","CodeStyle","Apex","quickstart"]' was replaced with the new value '["Recommended","CodeStyle","Apex"]'.
[2025-05-09T17:48:57.053Z] Debug Core - The severity value of rule 'ForLoopsMustUseBraces' of engine 'pmd' was overridden according to the specified configuration. The old value '3' was replaced with the new value '3'.
[2025-05-09T17:48:57.053Z] Debug Core - The tags value of rule 'ForLoopsMustUseBraces' of engine 'pmd' was overridden according to the specified configuration. The old value '["Recommended","CodeStyle","Apex","quickstart"]' was replaced with the new value '["Recommended","CodeStyle","Apex"]'.
[2025-05-09T17:48:57.053Z] Debug Core - The severity value of rule 'FormalParameterNamingConventions' of engine 'pmd' was overridden according to the specified configuration. The old value '3' was replaced with the new value '3'.
[2025-05-09T17:48:57.053Z] Debug Core - The tags value of rule 'FormalParameterNamingConventions' of engine 'pmd' was overridden according to the specified configuration. The old value '["Recommended","CodeStyle","Apex","quickstart"]' was replaced with the new value '["Recommended","CodeStyle","Apex"]'.
[2025-05-09T17:48:57.053Z] Debug Core - The severity value of rule 'IfElseStmtsMustUseBraces' of engine 'pmd' was overridden according to the specified configuration. The old value '3' was replaced with the new value '3'.
[2025-05-09T17:48:57.053Z] Debug Core - The tags value of rule 'IfElseStmtsMustUseBraces' of engine 'pmd' was overridden according to the specified configuration. The old value '["Recommended","CodeStyle","Apex","quickstart"]' was replaced with the new value '["Recommended","CodeStyle","Apex"]'.
[2025-05-09T17:48:57.053Z] Debug Core - The severity value of rule 'IfStmtsMustUseBraces' of engine 'pmd' was overridden according to the specified configuration. The old value '3' was replaced with the new value '3'.
[2025-05-09T17:48:57.053Z] Debug Core - The tags value of rule 'IfStmtsMustUseBraces' of engine 'pmd' was overridden according to the specified configuration. The old value '["Recommended","CodeStyle","Apex","quickstart"]' was replaced with the new value '["Recommended","CodeStyle","Apex"]'.
[2025-05-09T17:48:57.053Z] Debug Core - The severity value of rule 'InaccessibleAuraEnabledGetter' of engine 'pmd' was overridden according to the specified configuration. The old value '3' was replaced with the new value '3'.
[2025-05-09T17:48:57.053Z] Debug Core - The tags value of rule 'InaccessibleAuraEnabledGetter' of engine 'pmd' was overridden according to the specified configuration. The old value '["Recommended","ErrorProne","Apex","quickstart"]' was replaced with the new value '["Recommended","ErrorProne","Apex"]'.
[2025-05-09T17:48:57.053Z] Debug Core - The severity value of rule 'LimitConnectedAppScope' of engine 'pmd' was overridden according to the specified configuration. The old value '3' was replaced with the new value '3'.
[2025-05-09T17:48:57.053Z] Debug Core - The tags value of rule 'LimitConnectedAppScope' of engine 'pmd' was overridden according to the specified configuration. The old value '["AppExchange","Security","XML"]' was replaced with the new value '["AppExchange","Security","XML"]'.
[2025-05-09T17:48:57.053Z] Debug Core - The severity value of rule 'LocalVariableNamingConventions' of engine 'pmd' was overridden according to the specified configuration. The old value '3' was replaced with the new value '3'.
[2025-05-09T17:48:57.053Z] Debug Core - The tags value of rule 'LocalVariableNamingConventions' of engine 'pmd' was overridden according to the specified configuration. The old value '["Recommended","CodeStyle","Apex","quickstart"]' was replaced with the new value '["Recommended","CodeStyle","Apex"]'.
[2025-05-09T17:48:57.053Z] Debug Core - The severity value of rule 'MethodNamingConventions' of engine 'pmd' was overridden according to the specified configuration. The old value '3' was replaced with the new value '3'.
[2025-05-09T17:48:57.053Z] Debug Core - The tags value of rule 'MethodNamingConventions' of engine 'pmd' was overridden according to the specified configuration. The old value '["Recommended","CodeStyle","Apex","quickstart"]' was replaced with the new value '["Recommended","CodeStyle","Apex"]'.
[2025-05-09T17:48:57.053Z] Debug Core - The severity value of rule 'MethodWithSameNameAsEnclosingClass' of engine 'pmd' was overridden according to the specified configuration. The old value '3' was replaced with the new value '3'.
[2025-05-09T17:48:57.053Z] Debug Core - The tags value of rule 'MethodWithSameNameAsEnclosingClass' of engine 'pmd' was overridden according to the specified configuration. The old value '["Recommended","ErrorProne","Apex","quickstart"]' was replaced with the new value '["Recommended","ErrorProne","Apex"]'.
[2025-05-09T17:48:57.053Z] Debug Core - The severity value of rule 'MissingEncoding' of engine 'pmd' was overridden according to the specified configuration. The old value '3' was replaced with the new value '3'.
[2025-05-09T17:48:57.053Z] Debug Core - The tags value of rule 'MissingEncoding' of engine 'pmd' was overridden according to the specified configuration. The old value '["BestPractices","XML"]' was replaced with the new value '["BestPractices","XML"]'.
[2025-05-09T17:48:57.053Z] Debug Core - The severity value of rule 'MistypedCDATASection' of engine 'pmd' was overridden according to the specified configuration. The old value '3' was replaced with the new value '3'.
[2025-05-09T17:48:57.053Z] Debug Core - The tags value of rule 'MistypedCDATASection' of engine 'pmd' was overridden according to the specified configuration. The old value '["ErrorProne","XML"]' was replaced with the new value '["ErrorProne","XML"]'.
[2025-05-09T17:48:57.053Z] Debug Core - The severity value of rule 'NcssConstructorCount' of engine 'pmd' was overridden according to the specified configuration. The old value '4' was replaced with the new value '4'.
[2025-05-09T17:48:57.053Z] Debug Core - The tags value of rule 'NcssConstructorCount' of engine 'pmd' was overridden according to the specified configuration. The old value '["Recommended","Design","Apex","quickstart"]' was replaced with the new value '["Recommended","Design","Apex"]'.
[2025-05-09T17:48:57.053Z] Debug Core - The severity value of rule 'NcssMethodCount' of engine 'pmd' was overridden according to the specified configuration. The old value '4' was replaced with the new value '4'.
[2025-05-09T17:48:57.053Z] Debug Core - The tags value of rule 'NcssMethodCount' of engine 'pmd' was overridden according to the specified configuration. The old value '["Recommended","Design","Apex","quickstart"]' was replaced with the new value '["Recommended","Design","Apex"]'.
[2025-05-09T17:48:57.053Z] Debug Core - The severity value of rule 'NcssTypeCount' of engine 'pmd' was overridden according to the specified configuration. The old value '4' was replaced with the new value '4'.
[2025-05-09T17:48:57.053Z] Debug Core - The tags value of rule 'NcssTypeCount' of engine 'pmd' was overridden according to the specified configuration. The old value '["Design","Apex","quickstart"]' was replaced with the new value '["Design","Apex"]'.
[2025-05-09T17:48:57.053Z] Debug Core - The severity value of rule 'OneDeclarationPerLine' of engine 'pmd' was overridden according to the specified configuration. The old value '3' was replaced with the new value '3'.
[2025-05-09T17:48:57.053Z] Debug Core - The tags value of rule 'OneDeclarationPerLine' of engine 'pmd' was overridden according to the specified configuration. The old value '["Recommended","CodeStyle","Apex","quickstart"]' was replaced with the new value '["Recommended","CodeStyle","Apex"]'.
[2025-05-09T17:48:57.053Z] Debug Core - The severity value of rule 'OperationWithHighCostInLoop' of engine 'pmd' was overridden according to the specified configuration. The old value '3' was replaced with the new value '3'.
[2025-05-09T17:48:57.053Z] Debug Core - The tags value of rule 'OperationWithHighCostInLoop' of engine 'pmd' was overridden according to the specified configuration. The old value '["Recommended","Performance","Apex","quickstart"]' was replaced with the new value '["Recommended","Performance","Apex"]'.
[2025-05-09T17:48:57.053Z] Debug Core - The severity value of rule 'OperationWithLimitsInLoop' of engine 'pmd' was overridden according to the specified configuration. The old value '3' was replaced with the new value '3'.
[2025-05-09T17:48:57.053Z] Debug Core - The tags value of rule 'OperationWithLimitsInLoop' of engine 'pmd' was overridden according to the specified configuration. The old value '["Recommended","Performance","Apex","quickstart"]' was replaced with the new value '["Recommended","Performance","Apex"]'.
[2025-05-09T17:48:57.053Z] Debug Core - The severity value of rule 'OverrideBothEqualsAndHashcode' of engine 'pmd' was overridden according to the specified configuration. The old value '2' was replaced with the new value '2'.
[2025-05-09T17:48:57.053Z] Debug Core - The tags value of rule 'OverrideBothEqualsAndHashcode' of engine 'pmd' was overridden according to the specified configuration. The old value '["Recommended","ErrorProne","Apex","quickstart"]' was replaced with the new value '["Recommended","ErrorProne","Apex"]'.
[2025-05-09T17:48:57.053Z] Debug Core - The severity value of rule 'PropertyNamingConventions' of engine 'pmd' was overridden according to the specified configuration. The old value '3' was replaced with the new value '3'.
[2025-05-09T17:48:57.053Z] Debug Core - The tags value of rule 'PropertyNamingConventions' of engine 'pmd' was overridden according to the specified configuration. The old value '["Recommended","CodeStyle","Apex","quickstart"]' was replaced with the new value '["Recommended","CodeStyle","Apex"]'.
[2025-05-09T17:48:57.053Z] Debug Core - The severity value of rule 'ProtectSensitiveData' of engine 'pmd' was overridden according to the specified configuration. The old value '3' was replaced with the new value '3'.
[2025-05-09T17:48:57.053Z] Debug Core - The tags value of rule 'ProtectSensitiveData' of engine 'pmd' was overridden according to the specified configuration. The old value '["AppExchange","Security","XML"]' was replaced with the new value '["AppExchange","Security","XML"]'.
[2025-05-09T17:48:57.053Z] Debug Core - The severity value of rule 'QueueableWithoutFinalizer' of engine 'pmd' was overridden according to the specified configuration. The old value '4' was replaced with the new value '4'.
[2025-05-09T17:48:57.053Z] Debug Core - The tags value of rule 'QueueableWithoutFinalizer' of engine 'pmd' was overridden according to the specified configuration. The old value '["Recommended","BestPractices","Apex","quickstart"]' was replaced with the new value '["Recommended","BestPractices","Apex"]'.
[2025-05-09T17:48:57.053Z] Debug Core - The severity value of rule 'StdCyclomaticComplexity' of engine 'pmd' was overridden according to the specified configuration. The old value '3' was replaced with the new value '3'.
[2025-05-09T17:48:57.053Z] Debug Core - The tags value of rule 'StdCyclomaticComplexity' of engine 'pmd' was overridden according to the specified configuration. The old value '["Design","Apex","quickstart"]' was replaced with the new value '["Design","Apex"]'.
[2025-05-09T17:48:57.053Z] Debug Core - The severity value of rule 'TestMethodsMustBeInTestClasses' of engine 'pmd' was overridden according to the specified configuration. The old value '3' was replaced with the new value '3'.
[2025-05-09T17:48:57.053Z] Debug Core - The tags value of rule 'TestMethodsMustBeInTestClasses' of engine 'pmd' was overridden according to the specified configuration. The old value '["Recommended","ErrorProne","Apex"]' was replaced with the new value '["Recommended","ErrorProne","Apex"]'.
[2025-05-09T17:48:57.053Z] Debug Core - The severity value of rule 'TooManyFields' of engine 'pmd' was overridden according to the specified configuration. The old value '3' was replaced with the new value '3'.
[2025-05-09T17:48:57.053Z] Debug Core - The tags value of rule 'TooManyFields' of engine 'pmd' was overridden according to the specified configuration. The old value '["Recommended","Design","Apex","quickstart"]' was replaced with the new value '["Recommended","Design","Apex"]'.
[2025-05-09T17:48:57.053Z] Debug Core - The severity value of rule 'UnusedLocalVariable' of engine 'pmd' was overridden according to the specified configuration. The old value '3' was replaced with the new value '3'.
[2025-05-09T17:48:57.053Z] Debug Core - The tags value of rule 'UnusedLocalVariable' of engine 'pmd' was overridden according to the specified configuration. The old value '["Recommended","BestPractices","Apex","quickstart"]' was replaced with the new value '["Recommended","BestPractices","Apex"]'.
[2025-05-09T17:48:57.053Z] Debug Core - The severity value of rule 'UnusedMethod' of engine 'pmd' was overridden according to the specified configuration. The old value '3' was replaced with the new value '3'.
[2025-05-09T17:48:57.053Z] Debug Core - The tags value of rule 'UnusedMethod' of engine 'pmd' was overridden according to the specified configuration. The old value '["Recommended","Design","Apex"]' was replaced with the new value '["Recommended","Design","Apex"]'.
[2025-05-09T17:48:57.053Z] Debug Core - The severity value of rule 'UseHttpsCallbackUrlConnectedApp' of engine 'pmd' was overridden according to the specified configuration. The old value '3' was replaced with the new value '3'.
[2025-05-09T17:48:57.053Z] Debug Core - The tags value of rule 'UseHttpsCallbackUrlConnectedApp' of engine 'pmd' was overridden according to the specified configuration. The old value '["AppExchange","Security","XML"]' was replaced with the new value '["AppExchange","Security","XML"]'.
[2025-05-09T17:48:57.053Z] Debug Core - The severity value of rule 'WhileLoopsMustUseBraces' of engine 'pmd' was overridden according to the specified configuration. The old value '3' was replaced with the new value '3'.
[2025-05-09T17:48:57.053Z] Debug Core - The tags value of rule 'WhileLoopsMustUseBraces' of engine 'pmd' was overridden according to the specified configuration. The old value '["Recommended","CodeStyle","Apex","quickstart"]' was replaced with the new value '["Recommended","CodeStyle","Apex"]'.
[2025-05-09T17:48:57.128Z] Debug Core - Finished gathering 7 available rule(s) from engine 'sfge'.
[2025-05-09T17:48:57.128Z] Debug Core - The severity value of rule 'ApexFlsViolation' of engine 'sfge' was overridden according to the specified configuration. The old value '2' was replaced with the new value '2'.
[2025-05-09T17:48:57.128Z] Debug Core - The tags value of rule 'ApexFlsViolation' of engine 'sfge' was overridden according to the specified configuration. The old value '["DevPreview","Security","Apex"]' was replaced with the new value '["DevPreview","Security","Apex"]'.
[2025-05-09T17:48:57.128Z] Debug Core - The severity value of rule 'ApexNullPointerException' of engine 'sfge' was overridden according to the specified configuration. The old value '3' was replaced with the new value '3'.
[2025-05-09T17:48:57.128Z] Debug Core - The tags value of rule 'ApexNullPointerException' of engine 'sfge' was overridden according to the specified configuration. The old value '["DevPreview","ErrorProne","Apex"]' was replaced with the new value '["DevPreview","ErrorProne","Apex"]'.
[2025-05-09T17:48:57.128Z] Debug Core - The severity value of rule 'AvoidDatabaseOperationInLoop' of engine 'sfge' was overridden according to the specified configuration. The old value '2' was replaced with the new value '2'.
[2025-05-09T17:48:57.128Z] Debug Core - The tags value of rule 'AvoidDatabaseOperationInLoop' of engine 'sfge' was overridden according to the specified configuration. The old value '["DevPreview","Performance","Apex"]' was replaced with the new value '["DevPreview","Performance","Apex"]'.
[2025-05-09T17:48:57.128Z] Debug Core - The severity value of rule 'AvoidMultipleMassSchemaLookups' of engine 'sfge' was overridden according to the specified configuration. The old value '2' was replaced with the new value '2'.
[2025-05-09T17:48:57.128Z] Debug Core - The tags value of rule 'AvoidMultipleMassSchemaLookups' of engine 'sfge' was overridden according to the specified configuration. The old value '["DevPreview","Performance","Apex"]' was replaced with the new value '["DevPreview","Performance","Apex"]'.
[2025-05-09T17:48:57.128Z] Debug Core - The severity value of rule 'DatabaseOperationsMustUseWithSharing' of engine 'sfge' was overridden according to the specified configuration. The old value '2' was replaced with the new value '2'.
[2025-05-09T17:48:57.128Z] Debug Core - The tags value of rule 'DatabaseOperationsMustUseWithSharing' of engine 'sfge' was overridden according to the specified configuration. The old value '["DevPreview","Security","Apex"]' was replaced with the new value '["DevPreview","Security","Apex"]'.
[2025-05-09T17:48:57.128Z] Debug Core - The severity value of rule 'MissingNullCheckOnSoqlVariable' of engine 'sfge' was overridden according to the specified configuration. The old value '3' was replaced with the new value '3'.
[2025-05-09T17:48:57.128Z] Debug Core - The tags value of rule 'MissingNullCheckOnSoqlVariable' of engine 'sfge' was overridden according to the specified configuration. The old value '["DevPreview","Performance","Apex"]' was replaced with the new value '["DevPreview","Performance","Apex"]'.
[2025-05-09T17:48:57.128Z] Debug Core - The severity value of rule 'UnimplementedType' of engine 'sfge' was overridden according to the specified configuration. The old value '4' was replaced with the new value '4'.
[2025-05-09T17:48:57.128Z] Debug Core - The tags value of rule 'UnimplementedType' of engine 'sfge' was overridden according to the specified configuration. The old value '["DevPreview","Performance","Apex"]' was replaced with the new value '["DevPreview","Performance","Apex"]'.

We're continually improving Salesforce Code Analyzer. Tell us what you think! Give feedback at http://sfdc.co/CodeAnalyzerFeedback.

Steps To Reproduce

1. Declared ruleset file (https://github.com/pranayjswl007/ultimate-devops/blob/main/devops/masterRuleset.xml)
2. Declared config-file: https://github.com/pranayjswl007/ultimate-devops/blob/main/devops/code-analyzer.yml
3. ran the below set of command

sf code-analyzer rules --target 'force-app' --config-file devops/code-analyzer.yml --rule-selector pmd:q
uickstart --output-file "apexScanResults.json" || exit 1

Streaming logs in real time to:
/var/folders/0l/9s3j_vns59l5rhf5fvyn7zqc0000gr/T/sfca-2025_05_09_18_48_55_751.log

Selecting rules... done.

=== Summary

Found 0 rules.

Rules written to:
apexScanResults.json

Additional log information written to:
/var/folders/0l/9s3j_vns59l5rhf5fvyn7zqc0000gr/T/sfca-2025_05_09_18_48_55_751.log

Expected Behavior

it shoudl say it found 100 active rules in quickStart ruleset file

Operating System

15.4.1

Salesforce CLI Version

@salesforce/cli/2.87.7 darwin-arm64 node-v22.15.0

Code Analyzer Plugin (code-analyzer) Version

code-analyzer 5.0.0

Node Version

v22.12.0

Java Version

openjdk version "21.0.5" 2024-10-15 LTS OpenJDK Runtime Environment Zulu21.38+21-CA (build 21.0.5+11-LTS) OpenJDK 64-Bit Server VM Zulu21.38+21-CA (build 21.0.5+11-LTS, mixed mode, sharing)

Python Version

Python 3.13.2

Additional Context (Screenshots, Files, etc)

I tried running same locally as well as in GitHub Runner. Thus, it looks like the issue is with the plugin.

Workaround

We need this else we cant move from v4 to v5

Urgency

High

[stephen-carter-at-sf]

OK ... first I see that I'm unable to reproduce the issue.

I started with a clean code-analyzer.yml file and download your masterRuleset.xml file and this is what I see:

Let me keep looking through your logs...

[stephen-carter-at-sf]

OH...

The issue is you are overriding the tags in your config file.

You have: ApexBadCrypto for example in your custom ruleset at https://github.com/pranayjswl007/ultimate-devops/blob/main/devops/masterRuleset.xml#L208 but you also then override the tags in your code-analyzer.yml file at https://github.com/pranayjswl007/ultimate-devops/blob/main/devops/code-analyzer.yml#L2299-L2304

So you must have generated the config file first - locking everything in. And then updated the custom_rulesets.

This is a usability problem we have to work through... the chicken vs the egg problem that is.

We want the code-analyzer.yml file to be the final overrides for anything you specify. But when a user references existing PMD rules in their ruleset file and then supply their ruleset file after they have already generated the entire custom rulesets file... they will run into this.

Basically how Code Analyzer works is as follows:

• First Code Analyzer loads the code-analyzer.yml file and applies the engine configurations to create the engines and get all the rules from the engines.
• During this time, the PMD engine sees that your config supplied a custom_ruleset, so it adds the RuleSetName tag to those rules listed in your pmd ruleset file.
• But then Code Analyzer receives these rules from the engines and checks if the code-analyzer.yml file contains any rule overrides. If it does, then for only the rule override fields listed - it overrides just those fields. In this case, it is overriding the tags to exactly what you have specified in the code-analyzer.yml file for those rules.

For now the workaround for you is to remove these 55 rules from rule overrides section your code-analyzer.yml file, but keep the engine config to reference your ruleset file.

Then if you want to lock things in and then change them... then use the -c and -f options of the config command to consume your config file and update it.

I'll bring this up with my team since other users will probably run into this with the migration guide. We didn't catch it before because internally we usually start with a blank config file - add in engine config... and then maybe generate the config file from the existing one.

@pranayjswl007 Would you prefer it if we always just added in the ruleset name tag and maybe even the severity from your pmd ruleset file and have that override what the code-analyzer.yml rules has for its overrides?

[pranayjswl007]

@stephen-carter-at-sf Yes, if we can keep the name and severity from in master-ruleset.xml that would be ideal. The reason I wanna use ruleset XML is cause I can parameterize it. eg rule TooManyFields I want it to be 30 rather than default 20. Plus so many other PMD properties that we have customized for our business. If we always use the master-ruleset.xml as override we can ensure a single rule file can be forced and reused throughout different orgs and repos.

 <rule ref="category/apex/design.xml/TooManyFields" message="Too many fields">
      <priority>3</priority>
      <properties>
         <property name="maxfields" value="20" />
      </properties>
   </rule>

I am happy to move completely to code-analyzer.yml if we can parameterize it for pmd rules

[pranayjswl007]

@stephen-carter-at-sf I realized that the JSON response from the code scanner is different from what the previous plugin provided. It seems to be running one rule across all files before moving on to the next rule, whereas the previous scanner used to run all rules on a single file before proceeding to the next file.

[stephen-carter-at-sf]

@pranayjswl007 Regarding

I realized that the JSON response from the code scanner is different from what the previous plugin provided. It seems to be running one rule across all files before moving on to the next rule, whereas the previous scanner used to run all rules on a single file before proceeding to the next file.

What makes you think that we are running one rule across all files? We are letting PMD (using the JAVA API) do its thing over at:
https://github.com/forcedotcom/code-analyzer-core/blob/dev/packages/code-analyzer-pmd-engine/pmd-cpd-wrappers/src/main/java/com/salesforce/sfca/pmdwrapper/PmdRunner.java#L31-L73
and I don't think it runs one rule at a time (in fact I'm rather confident that it runs 1 file at a time)... but we do run one language at a time (all the apex rules... then all the visualforce rules... etc).

But I think you may be actually refering to the fact that our output schema (see https://developer.salesforce.com/docs/platform/salesforce-code-analyzer/guide/output-schemas.html) has a new JSON schema that is different than our old json output schema from (v4) sf scanner.

Yes this is intentional.

With v4, the violations were grouped by file. But with v5, we have the code locations array inside of each violation. https://developer.salesforce.com/docs/platform/salesforce-code-analyzer/guide/output-schemas-json.html

This is because a violation could potentially be either a path based violation where a violation is associated with a code path (like the flow and sfge engines - which may find a code path that has a data source and the data gets carried through to a data sink without being sanitized with a permissions check along the way). Likewise our CPD engine now is improved because it can have 1 violation (a block of code that it finds duplicated in many places) and points to all the places where the block as been duplicated so that it isn't N violations but 1 violation. So if a violation is not associated with a specific file, then we shouldn't be grouping that way. Thus the reason for the change.

But as shown by our new schema, we do point to the primary code location that can be used when attempting to show a violation in an IDE for example (like VS Code) or for reporting CSV (which flattens this is a lossy format and we just choose the 1) or if we want to create a table based summary - we might choose the primary file, etc.

Also don't be confused... we don't group by rule either. Each violation is independent. So you might have violation 1 be for rule A and file X and then violation 2 be for rule A and file Y. Each violation is associated with rule and a file location. So it is a flat violation structure without grouping.

First, if you want to see the results as a human would, then check out our new HTML format which allows you to group by file nicely!

But second, if you want to group by file with one of our machine readable formats - then you can easily parse the code with our existing structure and create a map based on the primary location's file if you wish. Since the violations are flat... it should take a single O(n) algorithm to bucket things as you wish.

Lastly note that there are scenarios where a violation may not even be associated with a file - like if an engine has an issue that can't be resolved... it may be provided as a critical violation without a code location.

See https://github.com/forcedotcom/code-analyzer-core/blob/dev/packages/code-analyzer-core/src/output-formats/results/json-run-results-format.ts#L9 to know exactly what we are doing behind the scenes if you want.

Does this make sense?

[pranayjswl007]

@stephen-carter-at-sf definitely makes sense. I was focusing only on PMD rules and realized CPD rules makes it bit robust. I have removed the PMD rules from my code-analyzer.yml, and now it works well. I rely solely on JSON and not on HTML viewer, My main use case is auto updating the Pull request with the comment on what rules it breaks. I might have to redo the parser , overall great improvement.

[pranayjswl007]

@stephen-carter-at-sf does SF plan on adding support of passing PMD variables via YML file instead of customRuleset.xml?

eg the rule

 <rule
      ref="category/apex/design.xml/ExcessivePublicCount"
      message="This class has too many public methods and attributes"
   >
      <priority>3</priority>
      <properties>
         <property name="minimum" value="25" />
      </properties>
   </rule>

can probably be inserted in code-analyzer.yml as

 pmd:
    "ExcessivePublicCount":
      severity: 3
      **minimum: 20**
      tags:
        - BestPractices
        - Apex

[stephen-carter-at-sf]

My main use case is auto updating the Pull request with the comment on what rules it breaks.
@stephen-carter-at-sf Currently @jfeingold35 is working on this very request for: forcedotcom/run-code-analyzer#55
So in the next release or two we might have a solution already for you if you are using GitHub workflows.

[stephen-carter-at-sf]

@pranayjswl007 Regarding:

does SF plan on adding support of passing PMD variables via YML file instead of customRuleset.xml?

We had this conversation internally today about this exact thing and our team is leaning towards "no" for a number of reasons, like:

• we do not want to introduce multiple different ways of doing things.
• we want to keep the rules section of our code-analyzer.yml config something that is relevant to all engines.
• it might provide confusion if you supply both the ruleset file with properties and then use our own... which one wins?

So instead we are still thinking about the original pain here - which is the chicken vs the egg problem.

Ideally I would like users to:

• Generate a code-analyzer.yml file just with the engine configurations but not the rule overrides first
• Then only update the rule overrides of your code-analyzer.yml file with the rules tags and/or severities that you actually want to override.

But users are locking in the rule overrides before the engines are configured which is causing this pain for you. But note that us adding in the ruleset tag for you as a default tag is a nice-to-have convenience. Your ruleset file shouldn't ideally be used for what you want to select.

So I recommend you use your ruleset file only for the rules you want to modify the properties for... because that brings back the purpose of supplying a custom ruleset file for PMD... to modify or add in custom rules.

But rule selection should be done via our rule selectors... preferably one that you set yourself instead of just using the convenient PMD Ruleset name tag that we are providing.

So if users can get closer to the Recommended tag... that is ideal because that allows us when moving from 1 version to the next... to automatically add in new recommended rules from release to release for you. With your currently strategy of selecting only based on the pmd ruleset that you have created - you are gaining the benefits of PMD and Salesforce adding in new up to date recommended rules.

[stephen-carter-at-sf]

We just had a discussion and we are thinking we will be changing the default behavior of the config command to show all the engine settings (associated with what you selected with -r) but not show all the possible rule overrides be default. Instead we will only show the rule overrides that you have modified. This will solve this use case - being able to generate a config file - but not lock in default values as overrides accidentally. Then we'll add in a new flag to give users the ability to show the unmodified rules to give them back the old behavior if they want. This will have the added bonus of making people's config files not so massive. That's our current thinking - i'll post here after we have finished review, designing, and implementing this.