database: Create github_oidc_configs table

Author: Turbo87

crates/crates_io_database/src/schema.rs

@@ -561,6 +561,28 @@ diesel::table! {
     }
 }
 
+diesel::table! {
+    /// Trusted Publisher OIDC configuration for GitHub Actions
+    github_oidc_configs (id) {
+        /// Unique identifier of the `github_oidc_configs` row
+        id -> Int4,
+        /// Unique identifier of the crate that this configuration is for
+        crate_id -> Int4,
+        /// GitHub user or organization that owns the repository
+        repository_owner -> Varchar,
+        /// Unique identifier of the user or organization that owns the repository
+        repository_owner_id -> Int4,
+        /// Name of the repository that this configuration is for
+        repository_name -> Varchar,
+        /// Name of the workflow file inside the repository that will be used to publish the crate
+        workflow_filename -> Varchar,
+        /// Optional publish environment that will be used to publish the crate
+        environment -> Nullable<Varchar>,
+        /// Date and time when the configuration was created
+        created_at -> Timestamptz,
+    }
+}
+
 diesel::table! {
     /// Representation of the `keywords` table.
     ///
@@ -1066,6 +1088,7 @@ diesel::joinable!(dependencies -> versions (version_id));
 diesel::joinable!(emails -> users (user_id));
 diesel::joinable!(follows -> crates (crate_id));
 diesel::joinable!(follows -> users (user_id));
+diesel::joinable!(github_oidc_configs -> crates (crate_id));
 diesel::joinable!(publish_limit_buckets -> users (user_id));
 diesel::joinable!(publish_rate_overrides -> users (user_id));
 diesel::joinable!(readme_renderings -> versions (version_id));
@@ -1093,6 +1116,7 @@ diesel::allow_tables_to_appear_in_same_query!(
     dependencies,
     emails,
     follows,
+    github_oidc_configs,
     keywords,
     metadata,
     processed_log_files,

crates/crates_io_database_dump/src/dump-db.toml

@@ -148,6 +148,18 @@ token_generated_at = "private"
 user_id = "private"
 crate_id = "private"
 
+[github_oidc_configs]
+dependencies = ["crates"]
+[github_oidc_configs.columns]
+id = "private"
+crate_id = "private"
+repository_owner = "private"
+repository_owner_id = "private"
+repository_name = "private"
+workflow_filename = "private"
+environment = "private"
+created_at = "private"
+
 [keywords.columns]
 id = "public"
 keyword = "public"

migrations/2025-04-15-100718_github-oidc-configs/down.sql

@@ -0,0 +1 @@
+drop table github_oidc_configs;

migrations/2025-04-15-100718_github-oidc-configs/up.sql

@@ -0,0 +1,24 @@
+create table github_oidc_configs
+(
+    id serial primary key,
+    crate_id int not null references crates on delete cascade,
+    repository_owner varchar not null,
+    repository_owner_id int not null,
+    repository_name varchar not null,
+    workflow_filename varchar not null,
+    environment varchar,
+    created_at timestamptz not null default now()
+);
+
+comment on table github_oidc_configs is 'Trusted Publisher OIDC configuration for GitHub Actions';
+comment on column github_oidc_configs.id is 'Unique identifier of the `github_oidc_configs` row';
+comment on column github_oidc_configs.crate_id is 'Unique identifier of the crate that this configuration is for';
+comment on column github_oidc_configs.repository_owner is 'GitHub user or organization that owns the repository';
+comment on column github_oidc_configs.repository_owner_id is 'Unique identifier of the user or organization that owns the repository';
+comment on column github_oidc_configs.repository_name is 'Name of the repository that this configuration is for';
+comment on column github_oidc_configs.workflow_filename is 'Name of the workflow file inside the repository that will be used to publish the crate';
+comment on column github_oidc_configs.environment is 'Optional publish environment that will be used to publish the crate';
+comment on column github_oidc_configs.created_at is 'Date and time when the configuration was created';
+
+create index github_oidc_configs_repository_owner_id_repository_name_index
+    on github_oidc_configs (repository_owner_id, repository_name);