Supabase Adds Configurable Lint Rules to Security and Performance Advisors.

Supabase has updated its security and performance advisors to give developers control over which lint rules apply to their projects. The change, announced on LinkedIn, addresses a common developer pain point: advisory tools that flag issues irrelevant to a specific codebase.

The advisors, which scan Postgres databases for security vulnerabilities and performance bottlenecks, previously applied all lint rules uniformly. Teams working with non-standard schemas or intentional design choices often saw warnings they knew didn't apply. Now, users can disable individual rules at the project level, tailoring advisor output to match their actual needs.

Advisor tools are most useful when they surface genuine issues, not false positives. Supabase's update lets teams silence rules that conflict with their architecture. For example, a project might intentionally use certain Postgres patterns flagged by a performance rule, or adopt security models that trigger standard warnings but align with their threat model.

The feature builds on Supabase's existing advisor infrastructure, which monitors database configurations and query patterns. By making rules optional rather than mandatory, the platform improves signal-to-noise ratio without removing safety nets entirely. Developers still see warnings for applicable rules while avoiding alert fatigue from irrelevant checks.

The update follows several Supabase changes aimed at reducing log volume and improving configurability. Earlier this month, the company announced it would disable log_connections by default for new and Free or Pro tier projects, citing reduced noise and alignment with industry standards. Both changes reflect a broader shift toward letting users tune platform behavior to their specific context.

Supabase has also been expanding its developer tooling in recent months, including launching a TanStack DB adapter for live queries and introducing declarative schema commands in its CLI alpha. The advisor update fits this pattern: incremental improvements that give developers finer control over platform features.

The configurable lint rules are available now across all Supabase projects. Users can disable rules through the dashboard's advisor settings or via the platform API. The company has not detailed which specific rules can be toggled, but the feature applies to both security and performance categories.