Method Scan

pkg/sql/security/scanner.go:562–579

Scan analyzes a parsed SQL AST for SQL injection patterns and vulnerabilities. It performs deep traversal of the AST to detect suspicious patterns including tautologies, dangerous functions, UNION-based injection, and other attack vectors. The method is safe for concurrent use as it does not modify

(tree *ast.AST)

//	    fmt.Printf("[%s] %s\n", finding.Severity, finding.Description)
//	}
func (s *Scanner) Scan(tree *ast.AST) *ScanResult {
	result := &ScanResult{
		Findings: make([]Finding, 0),
	}

	if tree == nil {
		return result
	}

	for _, stmt := range tree.Statements {
		s.scanStatement(stmt, result)
	}

	// Update counts
	s.updateCounts(result)

	return result
}

// ScanSQL analyzes raw SQL string for injection patterns using regex-based detection.
// This method is useful for detecting patterns that might not be visible in the AST,