DB-Size Scoring

Risk levels automatically escalate when a migration targets a large table. pgfence never requires database credentials.

Stats Snapshot (Recommended)

Your CI runs a read-only stats step against a replica or trusted snapshot, writes pgfence-stats.json, and pgfence consumes it locally. pgfence never sees your database credentials.

# Step 1: generate stats in CI (your script, your credentials)
# Step 2: analyze with the stats file
pgfence analyze --stats-file pgfence-stats.json migrations/*.sql

Direct Connection

pgfence analyze --db-url postgres://readonly@replica:5432/mydb migrations/*.sql

Risk Escalation Table