Open
Description
I've had cases like this ->
row := db.sql.QueryRowContext(ctx, `
INSERT INTO source_creation_requests
(user_id, input_url)
VALUES
($1, $2, $3)`, st, inputURL)pop up many times in the past, where there are 3 bindVars in the query string, but only 2 get passed from Go.
I think there's a limited subset of this check that shouldn't have any false positives (i.e. a fixed length of sql args, a single static string as the query), would be really useful to be able to check this before runtime.