Solution checker
The solution checker embraces the Power Apps checker service to execute code analysis in solutions by submitting jobs for the Power Platform backend. There are predefined rulesets with rules to cover certain security recommendations and coding best practices of our solutions. The solution checker can report the found issues in SARIF format, which we can easily upload to our DevOps tools, such as GitHub with GHAS or GHAS for Azure DevOps. The solution checker reviews the following Power Platform assets in unmanaged solutions:
- Dataverse custom workflow activities
- Dataverse web resources (HTML and JavaScript)
- Dataverse configurations, such as SDK message steps
- Power Automate flows (via Power Automate Flow Checker)
- Power Fx expressions (via App Checker – part of the Power Apps checker service)
The rulesets and their rules are predefined and categorized to cover the previously listed components: plug-in or workflow activity, web resources...