fix: performance issue with PURL lookups #5710

[WoozyMasta]

Description

Added a missing database index on the VULNERABLESOFTWARE table to include the VERSION column. This significantly improves the performance of PURL lookups (specifically when checking for a concrete version) by enabling Index-Only Scans (or precise Index Scans) and eliminating heavy heap page thrashing (LWLock: BufferMapping) on large datasets.

Addressed Issue

Fixes #5710

Additional Details

Investigation revealed that the existing index VULNERABLESOFTWARE_PURL_TYPE_NS_NAME_IDX does not cover the VERSION column. Queries filtering by PURL + VERSION were forced to scan the heap for every row matching the component, leading to extreme I/O and CPU usage on tables with millions of records.

This PR:

1. Adds the @Index annotation to the VulnerableSoftware entity.
2. Implements an upgrade task (v4136Updater) to create the index VULNERABLESOFTWARE_FULL_PURL_IDX on existing installations.
3. Supports PostgreSQL, MySQL, MSSQL, and H2.

Checklist

• I have read and understand the contributing guidelines
• This PR fixes a defect, and I have provided tests to verify that the fix is effective
• This PR implements an enhancement, and I have provided tests to verify that it works as intended
• This PR introduces changes to the database model, and I have added corresponding update logic
• This PR introduces new or alters existing behavior, and I have updated the documentation accordingly

[owasp-dt-bot]

✅ Snyk checks have passed. No issues have been found so far.

Status	Scanner	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

[codacy-production]

Coverage summary from Codacy

See diff coverage on Codacy

Coverage variation	Diff coverage
✅ +0.01% (target: -1.00%)	✅ ∅ (target: 70.00%)

Coverage variation details

	Coverable lines	Covered lines	Coverage
Common ancestor commit (0304029)	24512	19940	81.35%
Head commit (960eb24)	24511 (-1)	19941 (+1)	81.36% (+0.01%)

Coverage variation is the difference between the coverage for the head and common ancestor commits of the pull request branch: <coverage of head commit> - <coverage of common ancestor commit>

Diff coverage details

	Coverable lines	Covered lines	Diff coverage
Pull request (#5711)	0	0	∅ (not applicable)

Diff coverage is the percentage of lines that are covered by tests out of the coverable lines that the pull request added or modified: <covered lines added or modified>/<coverable lines added or modified> * 100%

See your quality gate settings    Change summary preferences

[nscuro]

Thanks!