audit-labs/gh-attest

 1CREATE TABLE installations (
 2  installation_id INTEGER PRIMARY KEY,
 3  org_login TEXT NOT NULL,
 4  installed_at TEXT NOT NULL,
 5  suspended_at TEXT
 6);
 7
 8CREATE TABLE snapshots (
 9  id INTEGER PRIMARY KEY AUTOINCREMENT,
10  installation_id INTEGER NOT NULL,
11  repo TEXT,                    -- null for org-level facts
12  control_id TEXT,               -- e.g. 'SOC2-CC6.1' — nullable until mapping table is built
13  resource TEXT NOT NULL,        -- e.g. 'branch_protection', 'secret_scanning_alert', 'member_access'
14  status TEXT NOT NULL,          -- e.g. 'enabled', 'disabled', 'open', 'resolved'
15  raw_payload TEXT,              -- original JSON, for audit trail / re-mapping later
16  captured_at TEXT NOT NULL,
17  FOREIGN KEY (installation_id) REFERENCES installations(installation_id)
18);
19
20CREATE INDEX idx_snapshots_installation ON snapshots(installation_id, captured_at);
21CREATE INDEX idx_snapshots_control ON snapshots(control_id);