vetkit.data-access.destructive-schema-sync.alter
The application alters database tables to match its models every time it starts (Sequelize sync({ alter: true })). Schema changes made this way are not reviewed or versioned and can drop or rewrite columns and data when a model changes; on a large table the ALTER also locks it during a deploy.
Last updated:
Suite: Production readiness
javascript, typescript
The application alters database tables to match its models every time it starts (Sequelize sync({ alter: true })). Schema changes made this way are not reviewed or versioned and can drop or rewrite columns and data when a model changes; on a large table the ALTER also locks it during a deploy.
Category: DATABASE · Engine rule severity: WARNING
How to fix it
Remove alter: true from start-up and manage the schema with versioned migrations (Sequelize CLI or Umzug) that are reviewed and run once per deploy.
References
Source: packages/engine/rules/data-access/javascript.yml.
Generated from shipped rule definitions at build time. Matching is a review signal, not proof of exploitability. “generic” denotes text matching, not complete language or framework coverage. Runtime configuration and available tools affect whether a rule runs.