supabase / splinter

Supabase Postgres Linter: Performance and Security Advisors

https://supabase.github.io/splinter/

83 stars 7 forks source link

Lint for common PII column names? #25

Closed olirice closed 1 month ago

olirice commented 6 months ago

Bug report

Any thoughts on how we could scan for problematic data types without a high false positive rate would be welcome

olirice commented 6 months ago

From Slack

what if we do a check where a table has columns like first_name, etc and has a rls policy
with select true? that would have caught the case in the <example> table and I assume
a lot of users would also add such a policy to silence warnings to test and forget to
remove it when they are in prod

olirice commented 2 months ago

@bymayanksingh could you post something in this issue. GH won't let me assign it to you unless your a participant

bymayanksingh commented 2 months ago

Sure @olirice, I am working on this.

olirice commented 1 month ago

Closed since this is less applicable now that we ERROR on insecure APIs