infisical/backend-pg/src/ee/services/secret-scanning/secret-scanning-dal.ts

import { Knex } from "knex";

import { TDbClient } from "@app/db";
import { TableName,TSecretScanningGitRisksInsert } from "@app/db/schemas";
import { DatabaseError } from "@app/lib/errors";
import { ormify } from "@app/lib/knex";

export type TSecretScanningDalFactory = ReturnType<typeof secretScanningDalFactory>;

export const secretScanningDalFactory = (db: TDbClient) => {
  const gitRiskOrm = ormify(db, TableName.SecretScanningGitRisk);

  const upsert = async (data: TSecretScanningGitRisksInsert[], tx?: Knex) => {
    try {
      const docs = await (tx || db)(TableName.SecretScanningGitRisk)
        .insert(data)
        .onConflict("fingerprint")
        .merge();
      return docs;
    } catch (error) {
      throw new DatabaseError({ error, name: "GitRiskUpsert" });
    }
  };

  return { ...gitRiskOrm, upsert };
};