sf-audit v1.0: New Checks, Configurable Scoring, and Externalized Queries
The audit plugin has grown from 22 checks to 23, added four new threat surfaces, and gained a fully configurable scoring model. Here is what changed and why it matters.
The audit plugin has grown from 22 checks to 23, added four new threat surfaces, and gained a fully configurable scoring model. Here is what changed and why it matters.
Most Salesforce orgs are carrying security debt they don't know about. This plugin surfaces it in a single command.
We had a working Python script. Here is why we rewrote it as a native sf plugin, and the design decisions that made 22 parallel security checks practical.
Master the complex challenge of mixing setup and non-setup object operations in Salesforce user provisioning workflows with production-proven patterns and error handling strategies.
Master advanced techniques for diagnosing, preventing, and recovering from CPU timeout errors in production Salesforce environments with architectural patterns that scale.
Learn how to automatically share documents with grandparent records when uploaded to child records using clean, maintainable Salesforce code patterns.
Explore how different user personas in software development teams create specification drift, amplified by LLMs, and discover solutions for better collaboration.
A deep dive into the hidden costs of Salesforce Platform Events and the surprising optimization that saved us 50,000+ delivery allocations per day
Learn how to migrate data between Salesforce organizations with proven strategies, tool recommendations, and code solutions. Complete guide covering relationships, attachments, and migration order.
Learn how to set up Meld as your default Git merge and diff tool on Windows. Step-by-step configuration guide with troubleshooting tips and alternative tools comparison.
Explore why and how to use PowerMock to test private methods in Java, focusing on scenarios where refactoring isn't feasible and the benefits for continuous delivery.
Learn how to secure your APIs against XML External Entity (XEE) attacks, including XML Injection and XML Expansion attacks, with practical mitigation steps for Java and RestEasy.
Learn how to implement and configure custom Apache Tomcat Valves to insert logic into the request processing pipeline.
Learn how to handle invalid XML characters in input data, especially when converting JSON to XML, and how to resolve issues with curl requests.