9
ability to mark false positives on security advisor page
Source: supabase/supabase#28090 · opened by @ardabeyazoglu
We need the ability to mark false positives to either hide them from the list or show them in a different style in the list. This is important when multiple devs/teams use the advisor. It is also good for a solo developer; we can forget why we skipped a certain advise from supabase.
For example; we have to restrict tables with RLS but we need views with DEFINER privilege to fetch a complex data that otherwise is not possible because of RLS. Currently, advisor sees these views as warning.
I recommend to put an "acknowledge" button with a free text description field for self-documentation. Then, acknowledged issues might be hidden or styled as strike-through.
For example; we have to restrict tables with RLS but we need views with DEFINER privilege to fetch a complex data that otherwise is not possible because of RLS. Currently, advisor sees these views as warning.
I recommend to put an "acknowledge" button with a free text description field for self-documentation. Then, acknowledged issues might be hidden or styled as strike-through.
No pledges yet. Be the first to back this.
Comments
Similar requests
Webhook for Security Advisor
2 votes · 0 comments
supabase cli: is it possible to get the security advisors errors/warnings/info from the cli?
2 votes · 0 comments
acknowledge/ignore security advisories
4 votes · 0 comments
Automatically Logout users in cases when persistSession is false and the user closes the browser window
1 vote · 0 comments
Ability to silence or customize linters
4 votes · 0 comments
No comments yet.