This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(310.4, 21%, 40%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJJ%3C/text%3E%3C/svg%3E)
Hi,
In the market we have many paid version of static code analysis tools to check many programming languages and scripts. I would like to know, Do you have any recommended static code analysis (free) tool to analyze SQL files.
Requirement: It has to inspect the SQL script quality and security.
Please share the details. Will be helpful.
Thanks,
J
I saw a flash for something called SQL Fluff today: https://docs.sqlfluff.com/en/stable/. It was described as an open-source SQL Linter. There is also a VS Code extension: https://marketplace.visualstudio.com/items?itemName=dorzey.vscode-sqlfluff.
I only saw this today, and I have not had the time to try it myself.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(67.2, 1%, 16%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ETP%3C/text%3E%3C/svg%3E)
That is functionality built-in to the SSDT add-in for Visual Studio for common problems.