Running PMD using ANT tasks

What is PMD?

PMD is a source code analyzer. It finds common programming flaws like unused variables, empty catch blocks, unnecessary object creation, and so forth.

Here we cover these languages:

• Salesforce Apex
• Java
• Javascript

Apex

$ bash run_apex_scan_ant.sh
Buildfile: /Users/mchinnappan/code-scan-tools/pmd-dist/test-apex.xml

pmd:
      [pmd] Feb 01, 2017 7:36:35 PM apex.jorje.parser.impl.BaseApexLexer dedupe
      [pmd] INFO: Deduped array ApexLexer.DFA23_transition. Found 7927114 shorts which is 15MB not including array overhead. Removed 7204963 shorts which is 13MB not counting array overhead. Took 7ms.

BUILD SUCCESSFUL
Total time: 1 second

Java

bash run_java_scan_ant.sh
Buildfile: /Users/mchinnappan/code-scan-tools/pmd-dist/test-java.xml

pmd:

BUILD SUCCESSFUL
Total time: 1 seconds

Javascript

bash run_js_scan_ant.sh
Buildfile: /Users/mchinnappan/code-scan-tools/pmd-dist/test-js.xml

pmd:

BUILD SUCCESSFUL
Total time: 1 seconds

---

Ref: Standing on the shoulders of:

PMD

---

How about Lightning code linting?

Here it is!

---

Resources

• Trailhead: Discover Built-in XSS Protections in Lightning Platform

• Trailhead: Injection Vulnerability Prevention

• Cross Site Scripting (XSS)

• Secure Coding Cross Site Scripting

• Salesforce Platform Security FAQs

• Force.com Source Scanner Portal

• Apex Parser embedded in the IDE

• Apex Jorje Parser library

• ApexJorjeExample

• Howto add a new language to PMD

---

• Rules that flag potential security flaws

• Rules which enforce generally accepted best practices

• Rules which enforce a specific coding style

• Rules that help you discover design issues

• Rules to detect constructs that are either broken, extremely confusing or prone to runtime errors

• Rules that flag suboptimal code

• How to reuse ApexParser for static code analysis tool?