SlowQL

SlowQL is a production-focused offline SQL static analyzer with 272 built-in rules across 14 SQL dialects. It catches security vulnerabilities, performance regressions, reliability issues, compliance risks, cost inefficiencies and code quality problems before they reach production.

No database connection required. Works entirely on SQL source files making it safe to run anywhere including air-gapped environments.

Key features:

• 272 rules across security, performance, reliability, compliance, cost and quality
• 14 SQL dialects including PostgreSQL, MySQL, SQL Server, Oracle, Snowflake, BigQuery, Redshift, ClickHouse, DuckDB, Presto, Trino, Spark, Databricks and SQLite
• Schema-aware validation against your DDL files
• Safe autofix engine with diff preview
• VS Code extension with real-time diagnostics
• GitHub Actions native with inline PR annotations
• SARIF output for GitHub Code Scanning
• Pre-commit hook support
• HTML, JSON, CSV export formats
• Completely offline, your SQL never leaves your machine