size-limit report 📦

⚠️ Warning: Base artifact is not the latest one, because the latest workflow run is not done yet. This may lead to incorrect results. Try to re-run all tests to get up to date results.

View base workflow run

I haven't worked with supabase yet, but it would be interesting to know if the query really contains sensitive data, usually it is stripped away.

as far as I can see (I also have no prior experience with the supabase integration) we monkey patch this ourselves and thus get all the content directly, so I assume there would be no sanitization from supabases side here?

Also FWIW the db.query and db.body are not in our convetions: https://getsentry.github.io/sentry-conventions/attributes/db/#db-query-text

good point, we should look at possibly adjusting this in a follow up!

I just checked it and it is Pii:

(no pii)

await supabase.from('todos').insert({
  task: 'PLAINTEXT-MARKER-abc123-secret',
  email: 'alice.secret@example.com',
  name: 'Alice Private',
})

Produces: https://sentry-sdks.sentry.io/explore/traces/trace/0fe31d6488d01268fd56d6f4577f7845/?node=span-1e3ecc6bd26bc043&project=4510555608449024&source=traces&statsPeriod=1h&targetId=0ed06734b3444fe7&timestamp=1777031451

Picture

(pii)

This one is quite interesting, as on the attributes it is "[Filtered]" but on the top it shows the query in plain text

await supabase
  .from('todos')
  .select('*')
  .eq('email', 'alice.secret@example.com')

Produces: https://sentry-sdks.sentry.io/explore/traces/trace/0fe31d6488d01268fd56d6f4577f7845/?node=span-72b3ea27d93fc700&project=4510555608449024&source=traces&statsPeriod=1h&targetId=0ed06734b3444fe7&timestamp=1777031451

Picture