unqueryvet

Configuration for unqueryvet - a Go linter for SQL queries

Type object
File match .unqueryvet.yaml .unqueryvet.yml
Schema URL https://catalog.lintel.tools/schemas/schemastore/unqueryvet/latest.json
Source https://raw.githubusercontent.com/MirrexOne/unqueryvet/main/schema.json

Validate with Lintel

npx @lintel/lintel check
Type: object

Configuration schema for unqueryvet - a Go static analysis tool for SQL queries

Properties

rules object

Built-in rules severity configuration

4 nested properties
select-star string

Severity level for a rule

Values: "error" "warning" "info" "ignore"
n1-queries string

Severity level for a rule

Values: "error" "warning" "info" "ignore"
sql-injection string

Severity level for a rule

Values: "error" "warning" "info" "ignore"
tx-leak string

Severity level for a rule

Values: "error" "warning" "info" "ignore"
ignore string[]

File patterns to ignore (glob syntax)

Examples: ["*_test.go","testdata/**","vendor/**"]
allow string[]

SQL patterns to whitelist (won't trigger warnings)

Examples: ["COUNT(*)","information_schema.*"]
severity string

Default severity level

Values: "error" "warning"
check-sql-builders boolean

Enable SQL builder library checking

Default: true
check-aliased-wildcard boolean

Enable aliased wildcard detection (e.g., SELECT t.*)

Default: true
check-string-concat boolean

Enable string concatenation analysis

Default: true
check-format-strings boolean

Enable format string analysis (e.g., fmt.Sprintf)

Default: true
check-string-builder boolean

Enable strings.Builder analysis

Default: true
check-subqueries boolean

Enable SELECT * detection in subqueries

Default: true
sql-builders object

SQL builder libraries to check

12 nested properties
squirrel boolean

Check github.com/Masterminds/squirrel

Default: true
gorm boolean

Check gorm.io/gorm

Default: true
sqlx boolean

Check github.com/jmoiron/sqlx

Default: true
ent boolean

Check entgo.io/ent

Default: true
pgx boolean

Check github.com/jackc/pgx

Default: true
bun boolean

Check github.com/uptrace/bun

Default: true
sqlboiler boolean

Check github.com/volatiletech/sqlboiler

Default: true
jet boolean

Check github.com/go-jet/jet

Default: true
sqlc boolean

Check sqlc generated code

Default: true
goqu boolean

Check github.com/doug-martin/goqu

Default: true
rel boolean

Check github.com/go-rel/rel

Default: true
reform boolean

Check gopkg.in/reform.v1

Default: true
ignored-files string[]

Legacy: File patterns to ignore (use 'ignore' instead)

ignored-functions string[]

Function patterns to ignore (regex)

Examples: ["debug\\..*","test.*"]
allowed-patterns string[]

Legacy: Regex patterns to allow (use 'allow' instead)

custom-rules customRule[]

Custom analysis rules using DSL

output object

Output configuration options

4 nested properties
format string

Output format

Default: "text"
Values: "text" "json" "sarif"
color string

Color output mode

Default: "auto"
Values: "auto" "always" "never"
verbose boolean

Enable verbose output

Default: false
quiet boolean

Quiet mode (only errors)

Default: false

Definitions

severity string

Severity level for a rule

severityLevel string

Default severity level

customRule object

Custom analysis rule definition

id string required

Unique identifier for the rule

pattern=^[a-z][a-z0-9-]*$
pattern string

SQL/code pattern to match (supports metavariables: $TABLE, $VAR, $QUERY, $COLS, $DB, $EXPR)

patterns string[]

Multiple patterns (any match triggers the rule)

when string

Condition expression using expr-lang syntax. Available variables: file, package, function, query, query_type, table, tables, columns, has_join, has_where, in_loop, loop_depth, builder

message string

Diagnostic message to display when rule matches

severity string

Severity level for a rule

Values: "error" "warning" "info" "ignore"
action string

Action to take when rule matches

Default: "report"
Values: "report" "allow" "ignore"
fix string

Suggested fix message