perufitlife/Supabase Security Audit
Audit your Supabase project for RLS leaks, exposed buckets, anon-readable tables. Active anon-key probe confirms each finding live.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| project-ref | Supabase project reference (the subdomain in your *.supabase.co URL) | yes | — |
| token | Supabase Personal Access Token (read-only is enough). Generate at https://supabase.com/dashboard/account/tokens | yes | — |
| output-path | Path for the HTML report | no | supabase-security-report.html |
| fail-on | Severity to fail the workflow on: critical, high, medium, low, never | no | critical |
| webhook-url | Optional webhook to POST findings to (e.g., RLS Monitor) | no | — |
| webhook-token | Optional bearer token for the webhook | no | — |
Outputs
| name | description |
|---|---|
| critical-count | Number of CRITICAL findings |
| high-count | Number of HIGH findings |
| grade | Letter grade (A+ to F) |
| report-path | Path of the generated HTML report |