`vulkro-sf asrr`

Deprecated: use vulkro-sf appexchange-report --format table, which shows the same review categories. asrr keeps working with the same output and exit code for at least one more release, and prints one stderr line pointing at the replacement.

vulkro-sf asrr ./force-app
vulkro-sf asrr ./force-app --format markdown > readiness.md

It scans the package and rolls the findings up into the six AgentExchange (formerly AppExchange) Security Review requirement categories, SF-ASRR-001 to SF-ASRR-006: secure coding and injection defence, sensitive data and cryptography, sharing and access control, client-side and UI security, integrations and callouts, and least-privilege metadata and automation.

Each category is pass, gap or not-evaluated, and the report ends with one verdict: READY or GAPS. A not-evaluated category means no detector covered it on this scan: check it by hand. It does not block.

Flag	What it does
`[PATH]`	SFDX project or retrieved metadata. Default `.`.
`--format <table\|json\|markdown>`	Output format. Default `table`.

Exit codes

Code	Meaning
`0`	READY: no category has a gap.
`1`	GAPS: at least one category has a gap.
`2`	Error (unscannable path, unknown `--format`).

Exit codes​

Exit codes