Add sbom_source_packages table
What does this MR do and why?
This MR adds a new table sbom_source_packages and links it to the sbom_occurrences table via the sbom_occurrences. source_package_id column.
The sbom_source_packages table contains the name (aka the source_package_name) for an sbom_occurrence, and also the purl_type in order to make lookups faster. See this discussion for details on why we decided to create an additional table to store this extra data.
MR acceptance checklist
Please evaluate this MR against the MR acceptance checklist. It helps you analyze changes to reduce risks in quality, performance, reliability, security, and maintainability.
Screenshots or screen recordings
Screenshots are required for UI changes, and strongly recommended for all other merge requests.
| Before | After |
|---|---|
How to set up and validate locally
Numbered steps to set up and validate the change are strongly suggested.
Edited by Adam Cohen