Columns

- ref: rename_table
  action: core.table.update_table
  args:
    name: asset_inventory
    new_name: assets
- ref: add_owner_team
  action: core.table.create_column
  depends_on:
    - rename_table
  args:
    table: assets
    column:
      name: owner_team
      type: SELECT
      options:
        - secops
        - platform
- ref: drop_owner_team
  action: core.table.delete_column
  depends_on:
    - add_owner_team
  args:
    table: assets
    column: owner_team

- ref: ensure_alerts_table
  action: core.table.create_table
  args:
    name: alerts
    columns:
      - name: alert_id
        type: TEXT
      - name: status
        type: TEXT
    raise_on_duplicate: false
- ref: alerts_metadata
  action: core.table.get_table_metadata
  depends_on:
    - ensure_alerts_table
  args:
    name: alerts
- ref: index_alert_id
  action: core.table.update_column
  depends_on:
    - alerts_metadata
  run_if: ${{ FN.length(ACTIONS.alerts_metadata.result.columns[?(@.is_index == true)]) == 0 }}
  args:
    table: alerts
    column: alert_id
    update:
      is_index: true
- ref: upsert_alert
  action: core.table.insert_row
  depends_on:
    - alerts_metadata
    - index_alert_id
  join_strategy: any
  args:
    table: alerts
    upsert: true
    row_data:
      alert_id: ${{ TRIGGER.alert_id }}
      status: ${{ TRIGGER.status }}

- ref: drop_owner_team
  action: core.table.delete_column
  args:
    table: assets
    column: owner_team