FeatureFuel
9

ability to mark false positives on security advisor page

Source: supabase/supabase#28090 · opened by @ardabeyazoglu
We need the ability to mark false positives to either hide them from the list or show them in a different style in the list. This is important when multiple devs/teams use the advisor. It is also good for a solo developer; we can forget why we skipped a certain advise from supabase.

For example; we have to restrict tables with RLS but we need views with DEFINER privilege to fetch a complex data that otherwise is not possible because of RLS. Currently, advisor sees these views as warning.

I recommend to put an "acknowledge" button with a free text description field for self-documentation. Then, acknowledged issues might be hidden or styled as strike-through.

No pledges yet. Be the first to back this.

Make a pledge

Pledge your monetary support if this feature is added.

$

Comments

No comments yet.

Replying to

Add a comment

What do you think about this feature request?


Similar requests