ERT-SECRETS-003
Supabase anon key present
Info
Why it matters
The anon key is meant to be public, but it means your data is only as safe as your RLS policies.
How to fix it
Keep it. Make sure every table has RLS enabled with owner-scoped policies.
How we test it
Passive — runs in the free check, looks only at what a browser can see.