Skip to content
ShipSecurelyShipSecurelySecurity reference
Menu

Supabase's October 30 change: new public tables need a grant for Data API access. What to doSupabase's October 30 change is live: new public tables need a grant for Data API access. What broke and how to fix it

24 tools · 139 fixes · 42 issue guides · Sources: Supabase, GitHub, postgresql.org, Vercel + 53

Tools

HOL Guard

Making a coding agent such as Cursor, Claude Code, or Codex ask or stop before a covered risky action runs on your own machine.

Share link · Share on X

Last updated

Free tierCoding agent guard
Price
$0
Free tier
Yes
Checks
Secrets
Last verified
Nov 2, 2026
Site
https://hol.org/guard

What the public pages say

HOL Guard runs on your computer. On supported integrations it can allow, ask, or block before an action runs, and it keeps a record of what happened. The product page lists Codex, Claude Code, Cursor, OpenCode, Antigravity CLI, Hermes, and OpenClaw. Its FAQ names secret and credential exposure, destructive commands, prompt-injection-driven actions, malicious or changed packages, risky MCP configuration, and unsafe plugins, skills, hooks, and agent settings, and says enforcement depth varies by agent and event type.

The coverage page lists those limits per agent. For Cursor, it says shell commands issued through Cursor's built-in terminal bypass Guard unless the terminal runs inside an agent session, and prompt submission is not surfaced through native Cursor hooks.

Free tier

The pricing page lists Free at $0 forever on one machine and says local leaked-secret scanning, runtime protection, approvals, and receipts do not require an account or cloud connection. Its FAQ says the free tier needs no credit card. The product page FAQ says the core Guard Local runtime is open source under Apache-2.0 and runs on the developer machine without a cloud account, and the GitHub repository lists the same license. Guard Cloud is a separate, optional paid plan for sync, shared policy, and team features: Solo is $4.99 a month, Pro is $15 a month, and Team is $30 per seat a month. Enterprise is contact sales.

Left off the vendor's site

  • Whether the coverage matrix is current. It covers stable channel 3.0.1, and its assertions say they were verified on 2026-09-09 and expire on 2026-10-09, a date that had passed when this page was checked.
  • Which secret types the local leaked-secret scan finds, and whether it reads git history or only the current files. The pricing page names the feature without those details.
  • The current version. The product page and its structured data name different versions.
  • A scored Guard Gauntlet run. The pricing FAQ says the site publishes the catalog and rules rather than a scored run, and describes the July 2026 export as a separate fixture model.

Sources

Listed here? Get your badge

Is this your tool?

Something out of date? Email team@shipsecurely.dev with the page that shows the change. Corrections are free.

Want it pinned to the top of its category? Featured is $49/month, labeled Featured, and it never changes comparison order.