supabase / supabase / 41495955805

87%

push

github

docs: move the production security checklist to its own page (#52466)

Closes DOCS-1494

## Problem

The Security section of the Production checklist is split out as a part
of the Information Architecture plan laid out in Option 1 of the [Docs
navigation architecture
proposal](https://app.notion.com/p/supabase/Q4-2027-Proposal-Docs-navigation-architecture-3f25004b775f81f49dbad710a732ef61).

## Solution

- **Structure:** move `## Security` to
`guides/security/production-checklist`. The production checklist keeps
the heading, and its `#security` anchor, with a one-sentence pointer.
The page is in the Security sidebar under Guides, after Production
Checklist.
- **Option 1 navigation:** the "Production security checklist" entry in
Run and manage, Security and compliance, points to the new page. The
Option 1 test no longer expects the anchor.
- **Page shape:** a value-statement opener with the situations that call
for the checklist, then the items grouped under Database, Account and
organization, Auth, and Threat review. Each group opens with a lead-in
that says what its checks protect.
- **Inbound links:** two Studio linter entries for OTP settings, the
Studio Auth providers form, and `auth/auth-email-passwordless` now point
to `production-checklist#auth`. The password length lint points to the
password security guide instead, since the checklist has no password
item. They used to land on `going-into-prod#security`, which is a
pointer now.
- **Claim fixes:**
- The replication item told readers to enable replication on sensitive
tables. It now says to enable RLS on replicated tables that hold
sensitive data.
- The Auth items named **Authentication > Providers**. The Dashboard
label is **Sign In / Providers**.
- **Terminal path:** the Auth group links the Management API endpoint
for its settings. The Database items link to guides that carry CLI or
SQL paths.
- **Review fixes:** a note that RLS doesn't filter Postgres Changes
`DELETE` events, a SQL path for ... (continued)

1986 of 2356 branches covered (84.3%)

Branch coverage included in aggregate %.

2794 of 3152 relevant lines covered (88.64%)

195.27 hits per line