Auto-remediation added to Supabase security CLI

https://preview.redd.it/rjt616ybiakg1.jpg?width=1790&format=pjpg&auto=webp&s=a589a8cacb77502005523dbfbac66f4cd8602fd6

I posted here a while back about Ship Safe, an open-source tool I built to catch things like leaked service_role keys or missing RLS policies when shipping fast. Some of the feedback was that a simple scanner wasn't enough, so I spent the last week building a way for the CLI to actually help you fix the issues it finds.

What is new:

• Auto-Remediation: When the tool finds a hardcoded secret (like a Supabase key), it can now automatically move it to a .env file and replace the code with process.env.VAR_NAME.
• Smarter fix command: It generates your .env.example on the fly so your team stays in sync without you doing it manually.
• Deep Supabase Checks: The checklist now includes specific prompts for RLS, connection string safety, and edge function environment management.

I am trying to bridge the gap between "vibe coding" speed and senior-level security. It is still 100% local, MIT licensed, and runs via npx.

npx ship-safe

GitHub: https://github.com/asamassekou10/ship-safe