SN Code Guardian - ServiceNow

Real-time code quality analysis for ServiceNow. Detects anti-patterns, security issues, and performance problems.

SN Code Guardian by Kiran Chitrada scans your ServiceNow scripts in real-time and flags anti-patterns, security vulnerabilities, performance issues, and JavaScript code quality problems before they reach production. 95 built-in checks across five categories: Performance (21), Security (14), Code Quality (15), Governance (10), and JavaScript Best Practices (35). Detects critical issues like current.update() in Business Rules, eval() injection risks, getRowCount() on large tables, synchronous AJAX calls, hardcoded sys_ids, hardcoded passwords/tokens/API keys, GlideRecord in client scripts, missing isLoading guards, nested N+1 queries, full table scans without filters, unfiltered updateMultiple(), and more. New in v1.2.0: expanded ServiceNow API conformance checks including chooseWindow() without setNoCount, GlideRecordSecure in Scripted REST, gs.include() deprecation, direct field assignment detection, and the setLimit()+deleteMultiple() trap. 35 JavaScript best practices checks including strict equality (=== vs ==), let/const instead of var, implicit globals, unreachable code, ES6+ compatibility in ES5 mode, Promise/async/await on server-side, deeply nested code, duplicate object keys, and more. Works on 20+ ServiceNow script types including Business Rules, Client Scripts, Script Includes, ACLs, Transform Maps, Portal Widgets, and Scripted REST APIs. Checks conform with official ServiceNow API documentation standards. Features: sidebar panel with categorized findings, export reports as JSON/CSV, configurable severity filters and 5 category toggles.