Function lintInlineSQL

cmd/gosqlx/cmd/lint.go:334–379

lintInlineSQL lints inline SQL passed as a command argument

(cmd *cobra.Command, sql string)

// lintInlineSQL lints inline SQL passed as a command argument
func lintInlineSQL(cmd *cobra.Command, sql string) error {
	l := createLinter()
	result := l.LintString(sql, "inline")

	var outputBuf bytes.Buffer
	outWriter := io.Writer(cmd.OutOrStdout())
	if outputFile != "" {
		outWriter = &outputBuf
	}

	if len(result.Violations) == 0 {
		fmt.Fprintln(outWriter, "No violations found.")
		if outputFile != "" {
			return WriteOutput(outputBuf.Bytes(), outputFile, cmd.OutOrStdout())
		}
		return nil
	}

	fmt.Fprintf(outWriter, "Found %d violation(s):\n\n", len(result.Violations))
	for i, violation := range result.Violations {
		fmt.Fprintf(outWriter, "%d. %s\n", i+1, linter.FormatViolation(violation))
	}

	if outputFile != "" {
		if err := WriteOutput(outputBuf.Bytes(), outputFile, cmd.OutOrStdout()); err != nil {
			return err
		}
	}

	errorCount := 0
	warningCount := 0
	for _, violation := range result.Violations {
		switch violation.Severity {
		case linter.SeverityError:
			errorCount++
		case linter.SeverityWarning:
			warningCount++
		}
	}

	if errorCount > 0 || (lintFailOnWarn && warningCount > 0) {
		return fmt.Errorf("%d error(s) and %d warning(s) found", errorCount, warningCount)
	}

	return nil
}

// runSecurityScan runs the security scanner on the given SQL and prints findings.
// Returns the number of security findings.