Use parameterized SQL queries

Proprietary

Find SQL queries built with string concatenation via db.Query, db.QueryRow, or db.Exec. Use parameterized queries to avoid SQL injection.

org.openrewrite.golang.codequality.UseParameterizedSqlQuery

mod run . --recipe=org.openrewrite.golang.codequality.UseParameterizedSqlQuery

Install it once, then run it on every repository under the current directory. New to the Moderne CLI? Set it up.