Method Analyze

cmd/gosqlx/cmd/sql_analyzer.go:57–113

Analyze performs comprehensive AST-based analysis

(astObj *ast.AST, sqlArgs ...string)

// Analyze performs comprehensive AST-based analysis
func (a *SQLAnalyzer) Analyze(astObj *ast.AST, sqlArgs ...string) (*AnalysisReport, error) {
	// Extract optional SQL string for query metadata
	sql := ""
	if len(sqlArgs) > 0 {
		sql = sqlArgs[0]
	}

	// Reset analyzer state
	a.reset()

	// Traverse AST using visitor pattern
	for _, stmt := range astObj.Statements {
		if err := ast.Walk(a, stmt); err != nil {
			return nil, fmt.Errorf("AST traversal failed: %w", err)
		}
	}

	// Run security scanner for injection patterns (tautologies, UNION-based, time-based, etc.)
	securityScanner := security.NewScanner()
	securityResult := securityScanner.Scan(astObj)
	a.convertSecurityFindings(securityResult)

	// Calculate final metrics and scores
	a.calculateComplexityMetrics()
	a.calculateScores()

	// Generate recommendations
	recommendations := a.generateRecommendations()

	// Count issues by severity
	critical, high, medium, low := CountIssuesBySeverity(a.Issues)

	// Calculate final scores
	securityScore := a.calculateSecurityScore()
	overallScore := a.calculateOverallScore()

	// Build query metadata
	queryInfo := a.buildQueryInfo(astObj, sql)

	return &AnalysisReport{
		Timestamp:         time.Now(),
		Version:           "2.0.0-unified",
		Query:             queryInfo,
		Issues:            a.Issues,
		ComplexityMetrics: a.ComplexityMetrics,
		SecurityScore:     securityScore,
		PerformanceScore:  a.PerformanceScore,
		OverallScore:      overallScore,
		Grade:             CalculateGrade(overallScore),
		TotalIssues:       len(a.Issues),
		CriticalIssues:    critical,
		HighIssues:        high,
		MediumIssues:      medium,
		LowIssues:         low,
		Recommendations:   recommendations,
	}, nil
}