supabase / splinter

Supabase Postgres Linter: Performance and Security Advisors

https://supabase.github.io/splinter/

supabase/splinter Issues

unindexed foreign keys should use order of the underlying unique index, not fkey definition
Updated a month ago
The lint test for function paths has a misleading description
Closed 2 months ago2
Correct Rationale explanation for 0013 RLS disabled in public
Closed 2 months ago15
Feature request: configurable additional functions for `0003 auth rls initplan` rule
Closed 2 months ago3
0010_security_definer_view is not in general an error
Closed 2 months ago1
Third option to address 0002_auth_users_exposed
Closed 2 months ago1
Space at end of column name.
Closed 3 months ago5
RLS on custom schemas created by Timescale
Closed 3 months ago3
Lint for non-immutable generated columns
Updated 3 months ago1
Performance Advisor showing warning for Auth RLS Initialization Plan after policy has been fixed
Closed 3 months ago3
Database linter recommendation don't work after update and resfresh
Closed 3 months ago21
Suggestion: add a 'docs link' in response / or use markdown for links in details
Closed 3 months ago2
Lint to enforce functions have an empty search path
Closed 3 months ago1
Lint for foreign tables and materialized view on API search path
Updated 4 months ago
Lint for non-immutable check constraints
Updated 4 months ago
Lint for `reg<whatever>` types outside of `pg_catalog`
Updated 4 months ago
Lint for extensions installed in the public schema
Closed 4 months ago
Exclude entities owned by extensions in all lints
Closed 4 months ago
Lint to find duplicate indexes
Closed 4 months ago2
Lint for common PII column names?
Updated 4 months ago1
Re-enable some RLS Lints on storage/auth/realtime tables
Updated 4 months ago
Feature: Public table, RLS not enabled
Closed 4 months ago
Lint to detect if tables/views/functions were created outside of migrations
Updated 4 months ago
Lint to enforce views are `security invoker`
Closed 4 months ago
Lint for RLS disabled but policies exist
Closed 4 months ago2
Lint for RLS enabled but no policies exist
Closed 4 months ago
Document security invoker + RLS on auth.users as an option for exposing auth.users in a view
Closed 4 months ago
Lint to detect missing event triggers for PostgREST automatic schema cache reloading
Updated 4 months ago3
(maybe) Detect unqualified references to functions/tables
Closed 4 months ago