Checks · DB-002

DB-002 · RLS disabled on table

Why it matters

A table without row-level security uses the default grants. On Supabase that often means the public key can read it.

How we detect it

SQL migrations are parsed for tables that never enable row-level security.

How we fix it

Add a new migration that enables row-level security and creates owner policies.

Can it be fixed automatically? Yes, with a template change

Related checks

• SEC-001 · Secret committed in repo (current tree)
• SEC-002 · Secret in git history
• SEC-003 · Service-role or secret key in client bundle
• SEC-004 · Public env prefix on a secret