Guides

Guides

Short notes on what a passive scan can see, and what you still check yourself before you launch.

• Supabase stops auto-exposing new tables on 30 October 2026

  On 30 October 2026, new public tables on existing Supabase projects need an explicit GRANT or supabase-js returns 42501. Keep RLS on. Do not disable it to silence the error.

• Is my Lovable app secure?

  What a passive security scan can tell you about a Lovable app, what it cannot see, and where Supabase grants and row level security still have to be checked by you.

• Supabase RLS check

  How to read a Supabase row level security setup, how grants differ from policies, and why ShipShape Scan does not query your tables.