snowflake-postgres-discovery-bundle
Read-only workflow that runs the Snowflake Postgres discovery miners as JSSG steps in one package. It writes no files. Metrics answer where a Keycloak-style deployment still carries Aurora JDBC assumptions, how database addresses and secrets are supplied, and which Java call sites need a Snowflake Postgres compatibility test.
| Step | Script | Metric |
|---|---|---|
| AWS JDBC settings in Java | scripts/aws-jdbc.ts | snowflake-aws-jdbc, snowflake-aws-jdbc-file |
| AWS JDBC settings in XML | scripts/aws-jdbc-xml.ts | snowflake-aws-jdbc, snowflake-aws-jdbc-file |
| Database address options | scripts/db-address.ts | snowflake-db-address |
| Additional datasources | scripts/datasource.ts | snowflake-datasource |
| JDBC TLS settings | scripts/jdbc-tls.ts | snowflake-jdbc-tls |
targetServerType routing | scripts/target-server-type.ts | snowflake-target-server-type |
| Pool maximums | scripts/db-pool.ts | snowflake-db-pool |
| Native SQL call sites | scripts/native-sql.ts | snowflake-native-sql |
| PostgreSQL test containers | scripts/postgres-test.ts | snowflake-postgres-test |
| Deployment YAML | scripts/deployment.ts | snowflake-postgres-deployment, snowflake-postgres-deployment-file |
snowflake-aws-jdbc-file.pairing=wrapper-url-with-aws-driver and snowflake-postgres-deployment-file.pairing=wrapper-url-with-aws-driver are the files that set a wrapper URL and still set the Amazon JDBC driver.
Count snowflake-db-address rows with role=option-definition when the question is how many option definitions exist. Constant references are mapper and call-site uses of those options.
Metrics
snowflake-aws-jdbc and snowflake-aws-jdbc-file
Java and XML steps record AWS JDBC wrapper URLs and software.amazon.jdbc.Driver. XML hits set source=xml and include the property element that holds the value.
| Metric | Cardinalities |
|---|---|
snowflake-aws-jdbc | signal (wrapper-url, aws-driver), host, property, source, file, line, snippet |
snowflake-aws-jdbc-file | pairing, host, source, file, line |
pairing is wrapper-url-with-aws-driver, wrapper-url-only, or aws-driver-only. A Java compilation unit is not one connection definition, so a standard jdbc:postgresql: URL elsewhere in the same file does not count as a paired override. Deployment YAML uses document scope for that relation.
snowflake-db-address
Separates full JDBC URL settings from host settings, and option definitions from constant references and prose.
| Cardinality | Meaning |
|---|---|
token | db-url, db-url-host, db-url-full, DB_URL, DB_URL_HOST, KC_DB_URL, KC_DB_URL_HOST, KC_DB_URL_FULL |
addressKind | full-url or host |
role | option-definition, option-key, constant-definition, constant-reference, env-var, prose |
file, line, snippet | location |
snowflake-datasource
| Cardinality | Meaning |
|---|---|
symbol | getDatasourceOption, getDatasourceOptionValue, or DATABASE_DATASOURCES |
kind | declaration, invocation, or category |
file, line, snippet | location |
snowflake-jdbc-tls
| Cardinality | Meaning |
|---|---|
property | sslmode, sslrootcert, sslkey, sslfactory, sslpassword, db-tls-mode, db-tls-trust-store-file, db-mtls-key-store-file, or tls-mode |
mode | extracted mode (verify-full, verify-server, disabled, …) or unspecified |
file, line, snippet | location |
snowflake-target-server-type
Records the default append when targetServerType is absent, the contains check that guards it, explicit parameters, and the Quarkus property key.
| Cardinality | Meaning |
|---|---|
signal | absence-check, default-append, explicit-parameter, property-key |
value | primary, another parameter value, or absent |
file, line, snippet | location |
snowflake-db-pool
Explicit database pool maximums: db-pool-max-size, DB_POOL_MAX_SIZE, KC_DB_POOL_MAX_SIZE, and operator poolMaxSize accessors. Minimum and initial pool settings are left alone.
| Cardinality | Meaning |
|---|---|
key | the option, constant, environment variable, or accessor |
file, line, snippet | location |
snowflake-native-sql
createNativeQuery and prepareStatement call sites. assembly=concatenation marks statements built at runtime. createQuery and createNamedQuery are left alone.
| Cardinality | Meaning |
|---|---|
sink | createNativeQuery or prepareStatement |
assembly | literal, concatenation, variable, method_call, field, expression, or none |
file, line, snippet | location |
snowflake-postgres-test
| Cardinality | Meaning |
|---|---|
symbol | PostgreSQLContainer or PostgresTestDatabase |
kind | constructor or class |
file, line, snippet | location |
snowflake-postgres-deployment and snowflake-postgres-deployment-file
JDBC URLs, the AWS JDBC driver, database secret fields, pool maximums, TLS mode, and truststores. The file-level metric relates the URL and the driver inside one document.
| Metric | Cardinalities |
|---|---|
snowflake-postgres-deployment | signal, scope, host, tlsMode, file, line, snippet |
snowflake-postgres-deployment-file | pairing, host, tlsMode, dbSecret, file, line |
signal is wrapper-url, jdbc-url, aws-driver, username-secret, password-secret, secret-key-ref, pool-max-size, tls-mode, truststore, or certificate-material.
scope is db for usernameSecret, passwordSecret, and secretKeyRef values whose environment name is a database credential (KC_DB_*, POSTGRES*, DATABASE*). A bootstrap admin secretKeyRef is other. tlsMode=absent means the file did not state a TLS mode.