SN Code Guardian - ServiceNow

Tracking since Apr 21, 2026.

Changelog

• May 14, 2026
  description

  SN Code Guardian by Chitrada scans your ServiceNow scripts in real-time and flags anti-patterns, security vulnerabilities, and performance issues before they reach production.
  50 built-in checks across four categories: Performance, Security, Code Quality, and Governance.
  Detects critical issues like current.update() in Business Rules, eval() injection risks, getRowCount() on large tables, synchronous AJAX calls, hardcoded sys_ids, GlideRecord in client scripts, missing isLoading guards, and more.
  Works on 20+ ServiceNow script types including Business Rules, Client Scripts, Script Includes, ACLs, Transform Maps, Portal Widgets, and Scripted REST APIs.
  Features: sidebar panel with categorized findings, export reports as JSON/CSV, configurable severity filters and category toggles. All analysis runs locally , no code is sent to any server.

  SN Code Guardian by Kiran Chitrada scans your ServiceNow scripts in real-time and flags anti-patterns, security vulnerabilities, performance issues, and JavaScript code quality problems before they reach production.
  
  95 built-in checks across five categories: Performance (21), Security (14), Code Quality (15), Governance (10), and JavaScript Best Practices (35).
  
  Detects critical issues like current.update() in Business Rules, eval() injection risks, getRowCount() on large tables, synchronous AJAX calls, hardcoded sys_ids, hardcoded passwords/tokens/API keys, GlideRecord in client scripts, missing isLoading guards, nested N+1 queries, full table scans without filters, unfiltered updateMultiple(), and more. New in v1.2.0: expanded ServiceNow API conformance checks including chooseWindow() without setNoCount, GlideRecordSecure in Scripted REST, gs.include() deprecation, direct field assignment detection, and the setLimit()+deleteMultiple() trap. 35 JavaScript best practices checks including strict equality (=== vs ==), let/const instead of var, implicit globals, unreachable code, ES6+ compatibility in ES5 mode, Promise/async/await on server-side, deeply nested code, duplicate object keys, and more.
  Works on 20+ ServiceNow script types including Business Rules, Client Scripts, Script Includes, ACLs, Transform Maps, Portal Widgets, and Scripted REST APIs. Checks conform with official ServiceNow API documentation standards.
  
  Features: sidebar panel with categorized findings, export reports as JSON/CSV, configurable severity filters and 5 category toggles.

• Apr 26, 2026
  short_description

  Real-time code quality analysis for ServiceNow. Detects anti-patterns, security vulnerabilities, and performance issues as you type.

  Real-time code quality analysis for ServiceNow. Detects anti-patterns, security issues, and performance problems.

• Apr 26, 2026
  name

  SN Code Guardian

  SN Code Guardian - ServiceNow

Permissions & access

Permissions

activeTabstorage

Host access

https://*.service-now.com/*

Screenshots