Scan rule · RSC-SEC-056
Supabase in use, schema not versioned
SecuritySeverity: Medium
Reports Supabase in the code without migrations containing tables and RLS — access control then cannot be verified from the code.
Scan tier
Source code from source mapsRepo access (deep scan)
How to fix it
Version the schema as migrations (`supabase db pull`) and pin RLS there.