supabase-rls-check 0.6.3 handles PostGIS tables, Expo config files, and MCP scanners
The supabase-rls-check tool released versions 0.6.1 through 0.6.3 after version 0.6.0 shipped on November 11, 2026, fixing three edge cases without adding network calls to its analyzer. Enabling Row Level Security on PostGIS's spatial_ref_sys table fails because the extension's superuser owns it, so the tool now detects extension-owned tables via pg_depend and recommends moving the extension to a separate schema instead. Baselines exported before 0.6.1 record an empty basis for these tables, so they must be re-exported once to keep CI runs consistent. For mobile teams, the scanner now also checks app.json, app.config.*, and eas.json for hardcoded service_role keys and database connection strings that could be bundled into client apps. The scanner skips common build output directories to avoid false positives.
This is an AI-generated summary. ShortSingh links to the original source for the complete article.
Discussion (0)
Log in to join the discussion and vote.
Log in