← Back to report

Investigate Supabase project reference

Build 1.2.8 · Scan 2026-10-13T09:28:48.909Z

1 distinct recorded findings; 1 have inspectable metadata. Locations are representative, not an inventory of every source match.

A Supabase project URL. Normal for apps built on Supabase — it's only an exposure if Row-Level Security is disabled and the anon key allows reading data. Verify RLS is enabled on your tables.

Static evidence does not establish runtime impact. Source excerpts and line numbers were not recorded.

Evidence preview

Evidence type

Static string match

Representative location

assets/flutter_assets/.env

Recorded match

Pattern recorded; identifying value redacted.

Detector rule

supabase_url

Recorded file locations

• assets/flutter_assets/.env