Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.
Sign up free Scan another repo

supabase-ruby/supabase-rb

https://github.com/supabase-ruby/supabase-rb · scanned 2026-06-16 00:25 UTC (2 months, 2 weeks ago)

65 raw signals (0 security + 65 graph)

File as issue Image
UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 2 months, 2 weeks ago · v1 · 21 actionable findings from 1 signal source. 44 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON
Combined
75.2
/100
Security checks
75
0 findings
System graph
75
88.9% cov · 21 findings
Critical
14
click to filter
Agents
10
0 votes
Crowd
0
reported
Severity distribution — click a segment to filter
Active filters: excluding tests × Reset all
Severity: Critical 14 High 0 Medium 3 Low 2 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 0 System graph 21 Crowd 0 Layer: Hardware 1 Frontend 1 Security 14 Cicd 1 Quality 4

All 389 nodes from the latest scan, grouped by kind. Each node is a unit the engine identified (file, function, endpoint, table…). Most users won't need this view — it's primarily for debugging the engine's graph extraction or for AI agents that want to enumerate the project structure.

LabelLayerStatusPath
PARITY.md software healthy PARITY.md
Gemfile software healthy Gemfile
README.md software healthy README.md
MAINTAINERS.md software healthy MAINTAINERS.md
CONTRIBUTING.md software healthy CONTRIBUTING.md
LICENSE software healthy LICENSE
CODE_OF_CONDUCT.md software healthy CODE_OF_CONDUCT.md
CHANGELOG.md software healthy CHANGELOG.md
spec_helper.rb software healthy spec/spec_helper.rb
client_spec.rb software healthy spec/client_spec.rb
pkce_flow_spec.rb software healthy spec/pkce_flow_spec.rb
request_body_spec.rb software healthy spec/request_body_spec.rb
session_auto_refresh_spec.rb software healthy spec/session_auto_refresh_spec.rb
mfa_flow_spec.rb software healthy spec/mfa_flow_spec.rb
helpers_spec.rb software healthy spec/helpers_spec.rb
admin_api_spec.rb software healthy spec/admin_api_spec.rb
realtime_live_spec.rb software healthy spec/integration/realtime_live_spec.rb
realtime_seed.sql software healthy spec/integration/realtime_seed.sql
realtime_smoke_spec.rb software healthy spec/integration/realtime_smoke_spec.rb
legacy_options_detection_spec.rb software healthy spec/supabase/legacy_options_detection_spec.rb
client_state_isolation_spec.rb software healthy spec/supabase/client_state_isolation_spec.rb
auth_spec.rb software healthy spec/supabase/auth_spec.rb
client_spec.rb software healthy spec/supabase/client_spec.rb
us021_create_client_bootstrap_spec.rb software healthy spec/supabase/us021_create_client_bootstrap_spec.rb
us019_client_realtime_delegates_spec.rb software healthy spec/supabase/us019_client_realtime_delegates_spec.rb
lazy_realtime_token_spec.rb software healthy spec/supabase/lazy_realtime_token_spec.rb
us043_mutable_headers_isolation_spec.rb software healthy spec/supabase/us043_mutable_headers_isolation_spec.rb
us031_client_options_defaults_spec.rb software healthy spec/supabase/us031_client_options_defaults_spec.rb
client_options_spec.rb software healthy spec/supabase/client_options_spec.rb
us028_http_error_precedes_relay_spec.rb software healthy spec/supabase/functions/us028_http_error_precedes_relay_spe…
types_spec.rb software healthy spec/supabase/functions/types_spec.rb
us046_invoke_response_type_binary_spec.rb software healthy spec/supabase/functions/us046_invoke_response_type_binary_s…
us027_invoke_response_type_spec.rb software healthy spec/supabase/functions/us027_invoke_response_type_spec.rb
us030_invoke_drops_method_and_query_spec.rb software healthy spec/supabase/functions/us030_invoke_drops_method_and_query…
us026_invoke_returns_data_spec.rb software healthy spec/supabase/functions/us026_invoke_returns_data_spec.rb
us029_invoke_region_validation_spec.rb software healthy spec/supabase/functions/us029_invoke_region_validation_spec…
client_spec.rb software healthy spec/supabase/functions/client_spec.rb
errors_spec.rb software healthy spec/supabase/functions/errors_spec.rb
client_di_and_content_type_spec.rb software healthy spec/supabase/functions/client_di_and_content_type_spec.rb
client_spec.rb software healthy spec/supabase/functions/async/client_spec.rb
http_client_audit_spec.rb software healthy spec/supabase/auth/http_client_audit_spec.rb
types_spec.rb software healthy spec/supabase/auth/types_spec.rb
error_retry_spec.rb software healthy spec/supabase/auth/error_retry_spec.rb
us011_jwt_claims_jwks_audit_spec.rb software healthy spec/supabase/auth/us011_jwt_claims_jwks_audit_spec.rb
us009_http_client_audit_spec.rb software healthy spec/supabase/auth/us009_http_client_audit_spec.rb
us004_admin_api_audit_spec.rb software healthy spec/supabase/auth/us004_admin_api_audit_spec.rb
get_claims_algorithms_spec.rb software healthy spec/supabase/auth/get_claims_algorithms_spec.rb
oauth_client_admin_spec.rb software healthy spec/supabase/auth/oauth_client_admin_spec.rb
us039_get_valid_session_requires_user_spec.rb software healthy spec/supabase/auth/us039_get_valid_session_requires_user_sp…
jwt_claims_spec.rb software healthy spec/supabase/auth/jwt_claims_spec.rb

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

LabelLayerStatusPath
password_literal::spec/client_spec.rb security healthy spec/client_spec.rb
password_literal::spec/request_body_spec.rb security healthy spec/request_body_spec.rb
password_literal::spec/request_body_spec.rb security healthy spec/request_body_spec.rb
password_literal::spec/request_body_spec.rb security healthy spec/request_body_spec.rb
password_literal::spec/request_body_spec.rb security healthy spec/request_body_spec.rb
password_literal::spec/request_body_spec.rb security healthy spec/request_body_spec.rb
password_literal::spec/request_body_spec.rb security healthy spec/request_body_spec.rb
password_literal::spec/request_body_spec.rb security healthy spec/request_body_spec.rb
password_literal::spec/request_body_spec.rb security healthy spec/request_body_spec.rb
password_literal::spec/request_body_spec.rb security healthy spec/request_body_spec.rb
password_literal::spec/request_body_spec.rb security healthy spec/request_body_spec.rb
password_literal::spec/request_body_spec.rb security healthy spec/request_body_spec.rb
password_literal::spec/request_body_spec.rb security healthy spec/request_body_spec.rb
password_literal::spec/request_body_spec.rb security healthy spec/request_body_spec.rb
password_literal::spec/request_body_spec.rb security healthy spec/request_body_spec.rb
password_literal::spec/admin_api_spec.rb security healthy spec/admin_api_spec.rb
password_literal::spec/admin_api_spec.rb security healthy spec/admin_api_spec.rb
password_literal::spec/admin_api_spec.rb security healthy spec/admin_api_spec.rb
password_literal::spec/admin_api_spec.rb security healthy spec/admin_api_spec.rb
password_literal::spec/integration/realtime_live_spec.rb security healthy spec/integration/realtime_live_spec.rb
password_literal::spec/supabase/auth/http_client_audit_spec… security healthy spec/supabase/auth/http_client_audit_spec.rb
password_literal::spec/supabase/auth/us009_http_client_audi… security healthy spec/supabase/auth/us009_http_client_audit_spec.rb
password_literal::spec/supabase/auth/us004_admin_api_audit_… security healthy spec/supabase/auth/us004_admin_api_audit_spec.rb
password_literal::spec/supabase/auth/us004_admin_api_audit_… security healthy spec/supabase/auth/us004_admin_api_audit_spec.rb
password_literal::spec/supabase/auth/us004_admin_api_audit_… security healthy spec/supabase/auth/us004_admin_api_audit_spec.rb
password_literal::spec/supabase/auth/us004_admin_api_audit_… security healthy spec/supabase/auth/us004_admin_api_audit_spec.rb
password_literal::spec/supabase/auth/us004_admin_api_audit_… security healthy spec/supabase/auth/us004_admin_api_audit_spec.rb
password_literal::spec/supabase/auth/us004_admin_api_audit_… security healthy spec/supabase/auth/us004_admin_api_audit_spec.rb
password_literal::spec/supabase/auth/us015_comprehensive_co… security healthy spec/supabase/auth/us015_comprehensive_coverage_spec.rb
password_literal::spec/supabase/auth/us015_comprehensive_co… security healthy spec/supabase/auth/us015_comprehensive_coverage_spec.rb
password_literal::spec/supabase/auth/us015_comprehensive_co… security healthy spec/supabase/auth/us015_comprehensive_coverage_spec.rb
password_literal::spec/supabase/auth/event_subscription_spe… security healthy spec/supabase/auth/event_subscription_spec.rb
password_literal::spec/supabase/auth/event_subscription_spe… security healthy spec/supabase/auth/event_subscription_spec.rb
password_literal::spec/supabase/auth/event_subscription_spe… security healthy spec/supabase/auth/event_subscription_spec.rb
password_literal::spec/supabase/auth/event_subscription_spe… security healthy spec/supabase/auth/event_subscription_spec.rb
password_literal::spec/supabase/auth/event_subscription_spe… security healthy spec/supabase/auth/event_subscription_spec.rb
password_literal::spec/supabase/auth/event_subscription_spe… security healthy spec/supabase/auth/event_subscription_spec.rb
password_literal::spec/supabase/auth/us006_x_client_info_sp… security healthy spec/supabase/auth/us006_x_client_info_spec.rb
password_literal::spec/supabase/auth/us006_x_client_info_sp… security healthy spec/supabase/auth/us006_x_client_info_spec.rb
password_literal::spec/supabase/auth/us006_x_client_info_sp… security healthy spec/supabase/auth/us006_x_client_info_spec.rb
password_literal::spec/supabase/auth/us006_x_client_info_sp… security healthy spec/supabase/auth/us006_x_client_info_spec.rb
password_literal::spec/supabase/auth/us003_user_management_… security healthy spec/supabase/auth/us003_user_management_audit_spec.rb
password_literal::spec/supabase/auth/us012_event_subscripti… security healthy spec/supabase/auth/us012_event_subscription_audit_spec.rb
password_literal::spec/supabase/auth/us012_event_subscripti… security healthy spec/supabase/auth/us012_event_subscription_audit_spec.rb
password_literal::spec/supabase/auth/us012_event_subscripti… security healthy spec/supabase/auth/us012_event_subscription_audit_spec.rb
password_literal::spec/supabase/auth/us012_event_subscripti… security healthy spec/supabase/auth/us012_event_subscription_audit_spec.rb
password_literal::spec/supabase/auth/us012_event_subscripti… security healthy spec/supabase/auth/us012_event_subscription_audit_spec.rb
password_literal::spec/supabase/auth/us012_event_subscripti… security healthy spec/supabase/auth/us012_event_subscription_audit_spec.rb
password_literal::spec/supabase/auth/us012_event_subscripti… security healthy spec/supabase/auth/us012_event_subscription_audit_spec.rb
password_literal::spec/supabase/auth/us012_event_subscripti… security healthy spec/supabase/auth/us012_event_subscription_audit_spec.rb

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

LabelLayerStatusPath
auth::spec/supabase/auth/async/admin_api_spec.rb security healthy spec/supabase/auth/async/admin_api_spec.rb
auth::spec/supabase/auth/admin_oauth_api_spec.rb security healthy spec/supabase/auth/admin_oauth_api_spec.rb
auth::spec/supabase/auth/us040_reauthenticate_empty_respons… security healthy spec/supabase/auth/us040_reauthenticate_empty_response_spec…
auth::spec/supabase/us021_create_client_bootstrap_spec.rb security healthy spec/supabase/us021_create_client_bootstrap_spec.rb
auth::spec/support/clients.rb security healthy spec/support/clients.rb
auth::spec/supabase/auth/us011_jwt_claims_jwks_audit_spec.rb security healthy spec/supabase/auth/us011_jwt_claims_jwks_audit_spec.rb
auth::spec/supabase/auth/get_claims_error_masking_and_leewa… security healthy spec/supabase/auth/get_claims_error_masking_and_leeway_spec…
auth::spec/supabase/realtime/us018_realtime_cluster_parity_… security healthy spec/supabase/realtime/us018_realtime_cluster_parity_spec.rb
auth::lib/supabase/auth/admin_api.rb security healthy lib/supabase/auth/admin_api.rb
auth::spec/supabase/auth/us007_error_handling_audit_spec.rb security healthy spec/supabase/auth/us007_error_handling_audit_spec.rb
auth::spec/supabase/client_spec.rb security healthy spec/supabase/client_spec.rb
auth::spec/supabase/auth/async/admin_oauth_api_spec.rb security healthy spec/supabase/auth/async/admin_oauth_api_spec.rb
auth::lib/supabase/auth/async/admin_api.rb security healthy lib/supabase/auth/async/admin_api.rb
auth::spec/supabase/auth/us010_pkce_flow_audit_spec.rb security healthy spec/supabase/auth/us010_pkce_flow_audit_spec.rb
auth::spec/async/apply_auth_non_blocking_spec.rb security healthy spec/async/apply_auth_non_blocking_spec.rb
auth::lib/supabase/auth/admin_oauth_api.rb security healthy lib/supabase/auth/admin_oauth_api.rb
auth::spec/supabase/realtime/client_spec.rb security healthy spec/supabase/realtime/client_spec.rb
auth::lib/supabase/auth/types.rb security healthy lib/supabase/auth/types.rb
auth::spec/supabase/auth/us022_admin_mfa_namespace_spec.rb security healthy spec/supabase/auth/us022_admin_mfa_namespace_spec.rb
auth::lib/supabase/realtime/client.rb security healthy lib/supabase/realtime/client.rb
auth::spec/mfa_flow_spec.rb security healthy spec/mfa_flow_spec.rb
auth::spec/supabase/legacy_options_detection_spec.rb security healthy spec/supabase/legacy_options_detection_spec.rb
auth::lib/supabase/README.md security healthy lib/supabase/README.md
auth::spec/supabase/auth/errors_spec.rb security healthy spec/supabase/auth/errors_spec.rb
auth::spec/client_spec.rb security healthy spec/client_spec.rb
auth::spec/supabase/realtime/us015_set_auth_before_connect_… security healthy spec/supabase/realtime/us015_set_auth_before_connect_spec.rb
auth::spec/request_body_spec.rb security healthy spec/request_body_spec.rb
auth::spec/supabase/auth/us006_x_client_info_spec.rb security healthy spec/supabase/auth/us006_x_client_info_spec.rb
auth::spec/supabase/lazy_realtime_token_spec.rb security healthy spec/supabase/lazy_realtime_token_spec.rb
auth::spec/supabase/auth/audit_findings_spec.rb security healthy spec/supabase/auth/audit_findings_spec.rb
auth::lib/supabase/auth/client.rb security healthy lib/supabase/auth/client.rb
auth::lib/supabase/client.rb security healthy lib/supabase/client.rb
auth::spec/admin_api_spec.rb security healthy spec/admin_api_spec.rb
auth::spec/supabase/auth/us004_admin_api_audit_spec.rb security healthy spec/supabase/auth/us004_admin_api_audit_spec.rb
auth::lib/supabase/auth/async/client.rb security healthy lib/supabase/auth/async/client.rb
auth::lib/supabase/auth/api.rb security healthy lib/supabase/auth/api.rb
auth::spec/support/utils.rb security healthy spec/support/utils.rb
auth::spec/supabase/auth/us003_user_management_audit_spec.rb security healthy spec/supabase/auth/us003_user_management_audit_spec.rb
auth::spec/supabase/auth/us005_get_valid_session_parity_spe… security healthy spec/supabase/auth/us005_get_valid_session_parity_spec.rb
auth::spec/supabase/auth/jwt_claims_spec.rb security healthy spec/supabase/auth/jwt_claims_spec.rb
auth::spec/supabase/auth/us024_sign_out_suppresses_api_erro… security healthy spec/supabase/auth/us024_sign_out_suppresses_api_error_spec…
auth::lib/supabase/auth/errors.rb security healthy lib/supabase/auth/errors.rb
auth::spec/supabase/auth/http_client_audit_spec.rb security healthy spec/supabase/auth/http_client_audit_spec.rb
auth::lib/supabase/auth/helpers.rb security healthy lib/supabase/auth/helpers.rb
auth::spec/supabase/auth/us002_session_management_audit_spe… security healthy spec/supabase/auth/us002_session_management_audit_spec.rb
auth::lib/supabase/auth/admin_mfa_api.rb security healthy lib/supabase/auth/admin_mfa_api.rb
auth::spec/supabase/realtime/us008_join_access_token_spec.rb security healthy spec/supabase/realtime/us008_join_access_token_spec.rb
auth::lib/supabase/auth/README.md security healthy lib/supabase/auth/README.md
auth::lib/supabase/realtime/channel.rb security healthy lib/supabase/realtime/channel.rb
auth::spec/supabase/auth/oauth_client_admin_spec.rb security healthy spec/supabase/auth/oauth_client_admin_spec.rb

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

LabelLayerStatusPath
spec software healthy spec
integration software healthy spec/integration
supabase software healthy spec/supabase
functions software healthy spec/supabase/functions
async software healthy spec/supabase/functions/async
auth software healthy spec/supabase/auth
async software healthy spec/supabase/auth/async
postgrest software healthy spec/supabase/postgrest
async software healthy spec/supabase/postgrest/async
realtime software healthy spec/supabase/realtime
sockets software healthy spec/supabase/realtime/sockets
storage software healthy spec/supabase/storage
async software healthy spec/supabase/storage/async
support software healthy spec/support
async software healthy spec/async
docs software healthy docs
lib software healthy lib
supabase software healthy lib/supabase
functions software healthy lib/supabase/functions
async software healthy lib/supabase/functions/async
auth software healthy lib/supabase/auth
async software healthy lib/supabase/auth/async
postgrest software healthy lib/supabase/postgrest
async software healthy lib/supabase/postgrest/async
realtime software healthy lib/supabase/realtime
sockets software healthy lib/supabase/realtime/sockets
storage software healthy lib/supabase/storage
async software healthy lib/supabase/storage/async
infra software healthy infra
db software healthy infra/db
.github software healthy .github
workflows software healthy .github/workflows

LabelLayerStatusPath
port:9999 network healthy infra/docker-compose.yml
port:9998 network healthy infra/docker-compose.yml
port:9996 network healthy infra/docker-compose.yml
port:9997 network healthy infra/docker-compose.yml
port:2500 network healthy infra/docker-compose.yml
port:9000 network healthy infra/docker-compose.yml
port:1100 network healthy infra/docker-compose.yml
port:5432 network healthy infra/docker-compose.yml

LabelLayerStatusPath
gotrue hardware healthy infra/docker-compose.yml
autoconfirm hardware healthy infra/docker-compose.yml
autoconfirm_with_asymmetric_keys hardware healthy infra/docker-compose.yml
disabled hardware healthy infra/docker-compose.yml
mail hardware healthy infra/docker-compose.yml
db hardware healthy infra/docker-compose.yml

LabelLayerStatusPath
postgres data healthy lib/supabase/realtime/README.md
postgresql data healthy infra/docker-compose.yml

LabelLayerStatusPath
public data healthy spec/integration/realtime_seed.sql
auth data healthy infra/db/00-schema.sql

LabelLayerStatusPath
127.0.0.1 network healthy README.md
15.1.1.46 network healthy infra/docker-compose.yml

LabelLayerStatusPath
repobility-clone-0d7yj9ge software healthy /tmp/repobility-clone-0d7yj9ge

LabelLayerStatusPath
sidekiq data healthy lib/supabase/realtime/README.md

LabelLayerStatusPath
gha::ci cicd healthy .github/workflows/ci.yml

LabelLayerStatusPath
test cicd healthy .github/workflows/ci.yml

LabelLayerStatusPath
CODECOV_TOKEN cicd healthy —
For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.
For AI agents + API integrations
Email me when this repo regresses
Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.
API access

This page is publicly accessible at: https://repobility.com/scan/dbde67b0-b7ca-495d-8a3e-3fe4f942d572/

To check status programmatically (no auth required): 

curl -s https://repobility.com/api/v1/public/scan/dbde67b0-b7ca-495d-8a3e-3fe4f942d572/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.