`vulkro-sf presubmit`

Deprecated: use vulkro-sf appexchange-report --format table --gate (--format json for CI). presubmit keeps working with the same output and exit code for at least one more release, and prints one stderr line pointing at the replacement.

vulkro-sf presubmit ./force-app
vulkro-sf presubmit ./force-app --format json > presubmit.json

It scans the package and collapses the findings into ten pass or fail items, SF-PRESUBMIT-001 to SF-PRESUBMIT-010: no hardcoded secrets, CRUD and FLS enforced, no SOQL or runtime injection, sharing declared, no cleartext HTTP endpoints, modern cryptography, Lightning component security, Visualforce security, least-privilege metadata, and Flow security. A failing item is a likely AgentExchange (formerly AppExchange) Security Review rejection.

An item no detector covered on this scan is not-evaluated: check it by hand. It does not block.

Flag	What it does
`[PATH]`	SFDX project or retrieved metadata. Default `.`.
`--format <table\|json>`	Output format. Default `table`.

Exit codes

Code	Meaning
`0`	Every item passes.
`1`	At least one item failed.
`2`	Error (unscannable path, unknown `--format`).

Exit codes​

Exit codes