Issues

• Proposal: lint for RLS policies whose role lacks the table privilege (policy_without_privilege)

  supabase/splinter#196 · Filter by author larik15 opened on Oct 5, 2026

• 0028/0029 silently report zero findings for projects using a custom PostgREST request role

  supabase/splinter#185 · Filter by author bkereskenyi opened on Sep 2, 2026

• 0025_public_bucket_allows_listing silently returns zero findings when splinter.public_buckets is unset — undocumented transaction-local contract

  supabase/splinter#181 · Filter by author MisterTuur opened on Aug 8, 2026
  1

• Proposal update to make it where Supabase rule 0029 will skip functions whose body matches a reasonable "gated" heuristic - e.g. contains a check on 'auth.uid( )', 'has_role', 'is_admin', or equivalent.

  documentation
  supabase/splinter#172 · Filter by author larrypendletoniii opened on Jul 10, 2026
  1

• 0002_auth_users_exposed false positive: pg_depend join lacks a refclassid filter (cross-catalog OID collision)

  supabase/splinter#171 · Filter by author hoybilli opened on Jul 8, 2026

• Proposal: detect read policies whose USING is unconditionally true for unauthenticated sessions (inverted auth.* IS NULL disjunct)

  supabase/splinter#165 · Filter by author dmitrymaranik opened on Jun 3, 2026
  3

• Bug

  bug
  supabase/splinter#153 · Filter by author sjtull2004 opened on Apr 8, 2026
  1

• Security definer views should be allowed in certain conditions

  bug
  supabase/splinter#140 · Filter by author djgrant opened on Nov 14, 2025
  1

• Invalid function_search_path_mutable lint warning for aggregates

  bug
  supabase/splinter#139 · Filter by author WolfspiritM opened on Nov 14, 2025

• Bug: Issue auto-closes when password or secret detected by security automation

  bug
  supabase/splinter#138 · Filter by author kenwolfmankws-maker opened on Nov 12, 2025

• LICENSE file missing?

  bug
  supabase/splinter#137 · Filter by author IntranetFactory opened on Nov 5, 2025
  2

• add supabase_only flag to each rule

  supabase/splinter#135 · Filter by author psteinroe opened on Nov 1, 2025
  1

• Lint for replication lag

  enhancement
  supabase/splinter#131 · Filter by author chasers opened on Sep 9, 2025

• Fix

  bug
  supabase/splinter#129 · Filter by author turnupads opened on Aug 9, 2025

• Failed to toggle RLS: must be owner of table spatial_ref_sys

  bug
  supabase/splinter#125 · Filter by author Vedsaga opened on Jun 28, 2025
  4

• Lint for extensions deprecated in pg17 image

  bug
  supabase/splinter#105 · Filter by author olirice opened on Jan 8, 2025
  1

• Re-enable some RLS Lints on storage/auth/realtime tables

  bug
  supabase/splinter#35 · Filter by author olirice opened on Apr 4, 2024
  1

• Lint to detect if tables/views/functions were created outside of migrations

  enhancement
  supabase/splinter#32 · Filter by author olirice opened on Apr 3, 2024