Add gounqvet linter for detecting SELECT * usage

This PR adds gounqvet as a new linter to detect SELECT * usage in SQL queries
and SQL builders, encouraging explicit column selection for better performance,
maintainability, and API stability.

## Features

- **SQL String Detection**: Finds SELECT * in string literals
- **SQL Builder Support**: Works with popular builders like Squirrel, GORM
- **Smart Pattern Recognition**: Avoids false positives for COUNT(*), system queries
- **Highly Configurable**: Extensive configuration options
- **Standard Integration**: Supports //nolint:gounqvet directives
- **Zero Dependencies**: Built on go/analysis framework

## Configuration Options

```yaml
linters-settings:
  gounqvet:
    check-sql-builders: true        # Enable SQL builder checking
    ignored-functions: []           # Functions to skip
    ignored-packages: []            # Packages to ignore
    allowed-patterns: []            # Regex for acceptable SELECT *
    ignored-file-patterns: []       # File patterns to ignore
    ignored-directories: []         # Directories to ignore
```

## Why Avoid SELECT *?

- **Performance**: Reduces unnecessary network bandwidth and memory usage
- **Maintainability**: Prevents breakage when schema changes
- **Security**: Avoids exposing sensitive columns unintentionally
- **API Stability**: Prevents issues when new columns are added

## Examples

**Problematic code (detected):**
```go
query := "SELECT * FROM users"
rows := squirrel.Select("*").From("products")
```

**Good code (not flagged):**
```go
query := "SELECT id, name FROM users"
rows := squirrel.Select("id", "name").From("products")
count := "SELECT COUNT(*) FROM users"  // Aggregate functions OK
```

Available since golangci-lint v1.50.0 for maximum compatibility.

Repository: https://github.com/MirrexOne/gounqvet

Author: MirrexOne

go.mod

@@ -147,6 +147,7 @@ require (
 	codeberg.org/chavacava/garif v0.2.0 // indirect
 	dev.gaijin.team/go/golib v0.6.0 // indirect
 	github.com/Masterminds/semver/v3 v3.3.1 // indirect
+	github.com/MirrexOne/gounqvet v1.1.0
 	github.com/alfatraining/structtag v1.0.0 // indirect
 	github.com/aymanbagabas/go-osc52/v2 v2.0.1 // indirect
 	github.com/beorn7/perks v1.0.1 // indirect

go.sum

@@ -250,6 +250,7 @@ type LintersSettings struct {
 	Gosec                    GoSecSettings                    `mapstructure:"gosec"`
 	Gosmopolitan             GosmopolitanSettings             `mapstructure:"gosmopolitan"`
 	Govet                    GovetSettings                    `mapstructure:"govet"`
+	Gounqvet                 GounqvetSettings                 `mapstructure:"gounqvet"`
 	Grouper                  GrouperSettings                  `mapstructure:"grouper"`
 	Iface                    IfaceSettings                    `mapstructure:"iface"`
 	ImportAs                 ImportAsSettings                 `mapstructure:"importas"`
@@ -1078,3 +1079,12 @@ func (s *CustomLinterSettings) Validate() error {
 
 	return nil
 }
+
+type GounqvetSettings struct {
+	CheckSQLBuilders      bool     `mapstructure:"check-sql-builders"`
+	IgnoredFunctions      []string `mapstructure:"ignored-functions"`
+	IgnoredPackages       []string `mapstructure:"ignored-packages"`
+	AllowedPatterns       []string `mapstructure:"allowed-patterns"`
+	IgnoredFilePatterns   []string `mapstructure:"ignored-file-patterns"`
+	IgnoredDirectories    []string `mapstructure:"ignored-directories"`
+}

pkg/config/linters_settings.go

@@ -0,0 +1,33 @@
+package gounqvet
+
+import (
+	"golang.org/x/tools/go/analysis"
+
+	"github.com/MirrexOne/gounqvet"
+	pkgconfig "github.com/MirrexOne/gounqvet/pkg/config"
+	"github.com/golangci/golangci-lint/v2/pkg/config"
+	"github.com/golangci/golangci-lint/v2/pkg/goanalysis"
+)
+
+func New(settings *config.GounqvetSettings) *goanalysis.Linter {
+	var cfg *pkgconfig.GounqvetSettings
+	if settings != nil {
+		cfg = &pkgconfig.GounqvetSettings{
+			CheckSQLBuilders:      settings.CheckSQLBuilders,
+			IgnoredFunctions:      settings.IgnoredFunctions,
+			IgnoredPackages:       settings.IgnoredPackages,
+			AllowedPatterns:       settings.AllowedPatterns,
+			IgnoredFilePatterns:   settings.IgnoredFilePatterns,
+			IgnoredDirectories:    settings.IgnoredDirectories,
+		}
+	}
+
+	analyzer := gounqvet.NewWithConfig(cfg)
+	
+	return goanalysis.NewLinter(
+		"gounqvet",
+		"Detects SELECT * usage in SQL queries and SQL builders, encouraging explicit column selection",
+		[]*analysis.Analyzer{analyzer},
+		nil,
+	).WithLoadMode(goanalysis.LoadModeTypesInfo)
+}

pkg/golinters/gounqvet/gounqvet.go

@@ -0,0 +1,39 @@
+package gounqvet
+
+import (
+	"testing"
+
+	"github.com/golangci/golangci-lint/v2/pkg/config"
+)
+
+func TestGounqvetWithSettings(t *testing.T) {
+	settings := &config.GounqvetSettings{
+		CheckSQLBuilders:    true,
+		IgnoredFunctions:    []string{"fmt.Printf"},
+		AllowedPatterns:     []string{`SELECT \* FROM information_schema\..*`},
+		IgnoredDirectories:  []string{"vendor"},
+		IgnoredFilePatterns: []string{"*_test.go"},
+	}
+	
+	linter := New(settings)
+	
+	if linter == nil {
+		t.Fatal("Expected linter to be created")
+	}
+	
+	if linter.Name() != "gounqvet" {
+		t.Fatalf("Expected linter name 'gounqvet', got '%s'", linter.Name())
+	}
+}
+
+func TestGounqvetNilSettings(t *testing.T) {
+	linter := New(nil)
+	
+	if linter == nil {
+		t.Fatal("Expected linter to be created with nil settings")
+	}
+	
+	if linter.Name() != "gounqvet" {
+		t.Fatalf("Expected linter name 'gounqvet', got '%s'", linter.Name())
+	}
+}

pkg/golinters/gounqvet/gounqvet_test.go

@@ -0,0 +1,49 @@
+package testdata
+
+import (
+	"database/sql"
+	"fmt"
+)
+
+func badQueries() {
+	// want "avoid SELECT \\* - explicitly specify needed columns for better performance, maintainability and stability"
+	query := "SELECT * FROM users"
+	
+	var db *sql.DB
+	// want "avoid SELECT \\* - explicitly specify needed columns for better performance, maintainability and stability"
+	rows, _ := db.Query("SELECT * FROM orders WHERE status = ?", "active")
+	_ = rows
+	
+	// This should not trigger because it's a COUNT function
+	count := "SELECT COUNT(*) FROM users"
+	_ = count
+	
+	// This should not trigger because of nolint comment
+	debug := "SELECT * FROM debug_table" //nolint:gounqvet
+	_ = debug
+	
+	// Good queries (should not trigger)
+	goodQuery := "SELECT id, name, email FROM users"
+	_ = goodQuery
+	
+	fmt.Println(query)
+}
+
+type SQLBuilder interface {
+	Select(columns ...string) SQLBuilder
+	From(table string) SQLBuilder
+	Where(condition string) SQLBuilder
+	Query() string
+}
+
+func badSQLBuilder(builder SQLBuilder) {
+	// want "avoid SELECT \\* in SQL builder - explicitly specify columns to prevent unnecessary data transfer and schema change issues"
+	query := builder.Select("*").From("products")
+	_ = query
+}
+
+func goodSQLBuilder(builder SQLBuilder) {
+	// Good usage - should not trigger
+	query := builder.Select("id", "name", "price").From("products")
+	_ = query
+}

pkg/golinters/gounqvet/testdata/gounqvet.go

@@ -56,6 +56,7 @@ import (
 	"github.com/golangci/golangci-lint/v2/pkg/golinters/gosec"
 	"github.com/golangci/golangci-lint/v2/pkg/golinters/gosmopolitan"
 	"github.com/golangci/golangci-lint/v2/pkg/golinters/govet"
+	"github.com/golangci/golangci-lint/v2/pkg/golinters/gounqvet"
 	"github.com/golangci/golangci-lint/v2/pkg/golinters/grouper"
 	"github.com/golangci/golangci-lint/v2/pkg/golinters/iface"
 	"github.com/golangci/golangci-lint/v2/pkg/golinters/importas"
@@ -404,6 +405,11 @@ func (LinterBuilder) Build(cfg *config.Config) ([]*linter.Config, error) {
 			WithAutoFix().
 			WithURL("https://pkg.go.dev/cmd/vet"),
 
+		linter.NewConfig(gounqvet.New(&cfg.Linters.Settings.Gounqvet)).
+			WithSince("v1.50.0").
+			WithLoadForGoAnalysis().
+			WithURL("https://github.com/MirrexOne/gounqvet"),
+
 		linter.NewConfig(grouper.New(&cfg.Linters.Settings.Grouper)).
 			WithSince("v1.44.0").
 			WithURL("https://github.com/leonklingele/grouper"),