Supabase in use, schema not versioned
Scan rule · RSC-SEC-056
- Security
- Severity: Medium
Reports Supabase in the code without migrations containing tables and RLS — access control then cannot be verified from the code.
Scan tier
- Source code from source maps
- Repo access (deep scan)
How to fix it
Version the schema as migrations (`supabase db pull`) and pin RLS there.