- Home
- SQL Linters and Formatters
- Valk Guard
On the recordRead 7 Oct 202619 facts
Valk Guard
On the record
- Analysis
- It parses Go, Python, and C# source and synthesizes SQL from supported ORM and query-builder patterns.github.com · read 7 Oct 2026
- Audience
- The README describes Valk Guard as built for CI and pull request review workflows.github.com · read 7 Oct 2026
- CI output
- It can output terminal, JSON, reviewdog rdjsonl, and SARIF formats for GitHub code scanning.github.com · read 7 Oct 2026
- Database connection
- Valk Guard requires no database connection to scan a project.github.com · read 7 Oct 2026
- Database support
- It uses a PostgreSQL parser; MySQL, SQLite, and other dialects are not supported.github.com · read 7 Oct 2026
- Installation
- The project provides prebuilt Linux, macOS, and Windows binaries and a Go install option.github.com · read 7 Oct 2026
- Integrations
- It supports Go database/sql and Goqu, Python SQLAlchemy, and C# EF Core scanning.github.com · read 7 Oct 2026
- License
- The repository identifies Valk Guard as Apache 2.0 licensed.github.com · read 7 Oct 2026
- License and support
- The repository identifies its license as Apache 2.0 and links to contributing and security policy documents.github.com · read 7 Oct 2026
- No database connection
- The project says scanning requires no database connection and runs in CI without database infrastructure.github.com · read 7 Oct 2026
- Notable limitation
- C# query-builder synthesis covers deterministic query shapes and skips uncertain dynamic expressions.github.com · read 7 Oct 2026
- Output formats
- Findings can be reported in terminal, JSON, rdjsonl, or SARIF formats.github.com · read 7 Oct 2026
- PostgreSQL only
- It uses a PostgreSQL parser; MySQL, SQLite, and other dialects are not supported.github.com · read 7 Oct 2026
- Pull request review
- The project documents a reviewdog workflow that posts findings as GitHub pull request comments.github.com · read 7 Oct 2026
- Purpose
- Valk Guard is a SQL linter that scans raw SQL and application code to catch risky queries before they merge.github.com · read 7 Oct 2026
- Requirements
- Building from source requires Go 1.25.8 or later; scanning Python files requires Python 3.6 or later, and scanning C# files requires .NET SDK 8.0 or later.github.com · read 7 Oct 2026
- Rules
- It ships with 19 rules covering query safety, schema drift, and query/schema validation.github.com · read 7 Oct 2026
- Security reporting
- The repository links to a security policy and vulnerability reporting route.github.com · read 7 Oct 2026