PostgreSQL Rules | BeforeMerge

Pricing Blog Contributors Install Guide

Explore
PostgreSQL

PostgreSQL

v1.0.0

Lint PostgreSQL schemas, migrations, and functions using splinter, squawk, plpgsql_check, and pgTAP.

7 rules

3 categories

Security(3)

RLS Disabled on Public Tables

Tables in the public schema without Row Level Security allow unrestricted access through the API.

SplinterrlsDB Linting

Performance(3)

Add NOT NULL Constraint Safely

Adding NOT NULL to an existing column requires a full table scan and exclusive lock.

SquawkpostgresqlMigration Safety

Architecture(1)

Tables Must Have Primary Keys

Tables without primary keys cannot use logical replication and have degraded query performance.

Schema DesignSplinterpostgresql

Automate PostgreSQL checks on every PR

BeforeMerge scans your pull requests against all 7 PostgreSQL rules automatically. Get actionable feedback before code ships.

Join Waitlist Browse All Rules

AI-native code review knowledge base. Structured rules that catch what linters miss.

Product

Features
Explore
Pricing
Docs
GitHub

Company

About
Blog
Contributors
Contributing

Legal

Privacy Policy
Terms of Service
MIT License

© 2026 BeforeMerge. Built by

Auth Users Table Exposed to API

The auth.users table is accessible through the API schema, leaking user data.

supabaseSplinterDB Linting

CRITICAL

Mutable Search Path in Functions

Functions without a fixed search_path are vulnerable to search path injection attacks.

plpgsql_checkSplinterpostgresql

Create Indexes Concurrently

Non-concurrent index creation locks the table for writes during the entire build.

SquawkpostgresqlMigration Safety

HIGH

Unindexed Foreign Keys

Foreign key columns without indexes cause slow JOINs and cascade operations.

SplinterDB Lintingpostgresql

Features Explore

Rules Skills Knowledge Prompts

Pricing Blog Contributors Install Guide

PostgreSQL Linting & Analysis

A comprehensive review skill for PostgreSQL databases covering schema security, migration safety, function validation, and performance auditing.

Tools Covered

Splinter — Supabase schema linter (security, RLS, performance)
Squawk — Migration safety linter (locks, downtime)
plpgsql_check — PL/pgSQL static analysis
pgTAP — Schema testing framework
schemalint — Naming convention enforcement
SQLFluff — SQL formatting and style

Applicable Platforms

Supabase (hosted & self-hosted)
Neon
Amazon RDS / Aurora PostgreSQL
Google Cloud SQL for PostgreSQL
Azure Database for PostgreSQL
Self-managed PostgreSQL