Checks · DB-009

DB-009 · SQL built by string concat

Why it matters

Building a query by joining strings lets a user change the query and read or change other rows.

How we detect it

Static analysis flags SQL built from concatenation.

How we fix it

Use parameterized queries.

Can it be fixed automatically? With review

Related checks

• SEC-001 · Secret committed in repo (current tree)
• SEC-002 · Secret in git history
• SEC-003 · Service-role or secret key in client bundle
• SEC-004 · Public env prefix on a secret