Use case · Change approval

Approve the exact script version.

Approve the script, not a description of it. Every report ties findings to line numbers, rule IDs and engine versions.

No card required. Your script is never executed.

Three patterns we flag

The change ticket says one server; the script says all
Get-ADComputer -Filter * | Restart-Computer -Force
The ticket says purge old rows; the query has no WHERE
Invoke-Sqlcmd -Query "DELETE FROM dbo.Events"
The backout plan assumes a snapshot the script deletes
Get-VM | Get-Snapshot | Remove-Snapshot

Real pattern, synthetic script. SQL changes every row in a table.

ScriptPreflightScriptPreflight ITIndividualSearch scripts, findings and commandsCtrl K12 / 40 preflightsIT

Explorer

ScriptPreflight IT

Recent preflights

restart-servers.ps1

purge-audit.ps1

stop-test-vms.ps1

offboard-user.ps1

cleanup-temp.ps1

purge-audit.ps1v1

ScriptPreflight IT Temporary preflight purge-audit.ps1Issues foundCheckpointRun Preflight

1# SYNTHETIC SAMPLE: purge old audit events

2# Intended: delete events older than 90 days

3Import-Module SqlServer

5Invoke-Sqlcmd -ServerInstance SQL01 -Database Audit -Query "DELETE FROM dbo.Events"

7Write-Host "Purge complete"

Problems 4TimelineReview

SQL changes every row in a tablepurge-audit.ps1 [Ln 5]SPF-SQL-001

ScriptPreflight ITTemporary · not retainedPreflight completeLn 5, Col 1PowerShellPacks: Core · SQL Server

Synthetic sample

Check the next script before it runs.