Function securityScanInternal

pkg/mcp/tools.go:159–189

securityScanInternal scans a SQL string for injection patterns and other threats.

(sql string)

// securityScanInternal scans a SQL string for injection patterns and other threats.
func securityScanInternal(sql string) (map[string]any, error) {
	if sql == "" {
		return nil, fmt.Errorf("parameter 'sql' is required and must not be empty")
	}

	scanner := security.NewScanner()
	result := scanner.ScanSQL(sql)

	findings := make([]map[string]any, 0, len(result.Findings))
	for _, f := range result.Findings {
		findings = append(findings, map[string]any{
			"severity":    string(f.Severity),
			"pattern":     string(f.Pattern),
			"description": f.Description,
			"risk":        f.Risk,
			"suggestion":  f.Suggestion,
		})
	}

	return map[string]any{
		"is_clean":       result.IsClean(),
		"has_critical":   result.HasCritical(),
		"has_high":       result.HasHighOrAbove(),
		"total_count":    result.TotalCount,
		"critical_count": result.CriticalCount,
		"high_count":     result.HighCount,
		"medium_count":   result.MediumCount,
		"low_count":      result.LowCount,
		"findings":       findings,
	}, nil
}

// lintSQLInternal runs the full linter rule set against a SQL string.
func lintSQLInternal(sql string) (map[string]any, error) {