Company
Date Published
Author
Ziad Ghalleb
Word count
574
Language
English
Hacker News points
None

Summary

GitGuardian's Detector of the Month series highlights Supabase, an open-source alternative to Firebase, which allows developers to quickly set up a backend with components such as a hosted Postgres database, REST API, real-time server, and user authentication system. Supabase stands out for its exclusive use of open-source technologies like PostgreSQL and PostgREST, enabling users to extend and self-host projects using Docker. In response to Supabase's popularity, GitGuardian has developed detectors for Supabase JWT secrets and Service Role JWTs to prevent unauthorized access to projects by keeping these credentials out of git repositories. If a Supabase key is leaked, developers are advised to understand the situation's implications, rotate and revoke the secret, manage secrets properly, and review access logs for suspicious activity. GitGuardian offers solutions for detecting and managing over 250 types of secrets throughout the development lifecycle, integrating with various platforms and CI pipelines to secure code against accidental exposure of sensitive data.