| 1 | -- Organization secrets choose which repositories get them, as on GitHub: every repository (`all`), |
| 2 | -- private and internal ones (`private`), or the ones listed in org_secret_repos (`selected`). |
| 3 | ALTER TABLE org_secrets ADD COLUMN visibility TEXT NOT NULL DEFAULT 'all'; |
| 4 | CREATE TABLE org_secret_repos ( |
| 5 | org_id TEXT NOT NULL, |
| 6 | name TEXT NOT NULL, |
| 7 | repo_id TEXT NOT NULL REFERENCES repos(id) ON DELETE CASCADE, |
| 8 | PRIMARY KEY (org_id, name, repo_id) |
| 9 | ); |