Integration Requirements

Integration Requirements for CodeScan v25.1.0

Please note that there are updated requirements for customers who are using one or more of the following to integrate with CodeScan:

• SFDX

• SonarScanner

• ADO

• VS Code

• IntelliJ

Overview

For customers who are using the SonarScanner in CI/CD pipelines and/or using the SFDX plugin, the latest CodeScan release (v25.1.0) now requires Java 17 and Node.js 20 for these integrations. Further, IDE integrations (VS Code and IntelliJ) also require these upgrades.

While this change may not affect all users, any customer who is dependent upon automated builds and pipelines and/or running CodeScan plugins locally (via CLI or IDE) should review and update their Java and Node.js versions to ensure continued compatibility.

Affected Integrations, Required Updates, and Actions Required

1. VS Code Plugin

   • Requirement: Java 17 and Node.js 20 LTS

   • Latest version: VS Code CodeScan plugin v2.1.0

   • Action Required: Upgrade to latest version of the plugin and restart VS Code after verifying installations.

2. IntelliJ IDE Plugin

   • Requirement: Java 17 and Node.js 20 LTS

   • Latest version: IntelliJ CodeScan plugin v7.3.0

   • Actions Required: Upgrade to the latest version of the plugin and restart the IDE to apply changes.

3. SonarScanner CLI

   1. Download SonarScanner v5.0.1.3006 (comes pre-bundled with Java 17).

   2. Verify SonarScanner is a supported version using the command: sonar-scanner –v

   3. Run Scan: sonar-scanner ^ -Dsonar.host.url=https://app.codescan.io -Dsonar.organization={org} ^ -Dsonar.projectKey={projectKey} -Dsonar.token={token}

4. CodeScan SFDX Plugin

   • Latest version: CodeScan SFDX plugin v1.0.9

   • Action Required: Ensure the latest version of SFDX plugin is being used.

5. CodeScan Azure Plugin

   • Latest version: CodeScan Azure plugin v2.0.1

   • Action Required: At the "Run Code Analysis" step, select the correct JDK version source for analysis (use the built-in JAVA_HOME_17_X64 on hosted agents or specify JAVA_HOME as 17).

Additional Notes

• The environment running your Salesforce CLI requires an upgrade to JDK 17 and NodeJS 20. Typically, organizations run the Salesforce CLI either in a docker container or on a CI/CD server. Alternatively, the CLI could be run with a dev environment (either locally or in a shared environment [like a cloud-based IDE]).

• Node.js v20 should be accessible via system PATH. Node is a mandatory requirement for analyzing JavaScript files.

• A new version of CodeScan plugin for VS Code (v2.1.0) is available on the VS marketplace at https://marketplace.visualstudio.com/items?itemName=codescansf.codescan-vscode. You can also install it directly from extensions within VS Code. Please note that users running their IDEs locally need to ensure that they are running JDK 17 and NodeJS 20.
• A new version of the CodeScan plugin for IntelliJ (v7.3.0) is available on the JetBrains marketplace at https://plugins.jetbrains.com/plugin/16087-codescan. You can also install directly from extensions within IntelliJ. Please note that users running their IDEs locally need to ensure that they are running JDK 17 and NodeJS 20.