Valk Guard

Spec sheet

Purpose

Valk Guard is a SQL linter that scans raw SQL and application code to catch risky queries before they merge.Read 7 Oct 2026 · github.com

Audience

The README describes Valk Guard as built for CI and pull request review workflows.Read 7 Oct 2026 · github.com

Platforms

Prebuilt binaries are offered for Linux, macOS, and Windows, with amd64 and arm64 builds.Read 7 Oct 2026 · github.com

Integrations

It supports Go database/sql and Goqu, Python SQLAlchemy, and C# EF Core scanning.Read 7 Oct 2026 · github.com

License

The repository identifies Valk Guard as Apache 2.0 licensed.Read 7 Oct 2026 · github.com

Analysis

It parses Go, Python, and C# source and synthesizes SQL from supported ORM and query-builder patterns.Read 7 Oct 2026 · github.com

CI output

It can output terminal, JSON, reviewdog rdjsonl, and SARIF formats for GitHub code scanning.Read 7 Oct 2026 · github.com

Database connection

Valk Guard requires no database connection to scan a project.Read 7 Oct 2026 · github.com

Database support

It uses a PostgreSQL parser; MySQL, SQLite, and other dialects are not supported.Read 7 Oct 2026 · github.com

Installation

The project provides prebuilt Linux, macOS, and Windows binaries and a Go install option.Read 7 Oct 2026 · github.com

License and support

The repository identifies its license as Apache 2.0 and links to contributing and security policy documents.Read 7 Oct 2026 · github.com

No database connection

The project says scanning requires no database connection and runs in CI without database infrastructure.Read 7 Oct 2026 · github.com

Notable limitation

C# query-builder synthesis covers deterministic query shapes and skips uncertain dynamic expressions.Read 7 Oct 2026 · github.com

Output formats

Findings can be reported in terminal, JSON, rdjsonl, or SARIF formats.Read 7 Oct 2026 · github.com

PostgreSQL only

It uses a PostgreSQL parser; MySQL, SQLite, and other dialects are not supported.Read 7 Oct 2026 · github.com

Pull request review

The project documents a reviewdog workflow that posts findings as GitHub pull request comments.Read 7 Oct 2026 · github.com

Requirements

Building from source requires Go 1.25.8 or later; scanning Python files requires Python 3.6 or later, and scanning C# files requires .NET SDK 8.0 or later.Read 7 Oct 2026 · github.com

Rules

It ships with 19 rules covering query safety, schema drift, and query/schema validation.Read 7 Oct 2026 · github.com

Security reporting

The repository links to a security policy and vulnerability reporting route.Read 7 Oct 2026 · github.com

Where Specifiction places it

• SQL Linters and Formatters#26 of 266.7