perf(api): replace JOINs with pre-check in threat score aggregation query

[prowler-bot]

Backport

This will backport the following commits from master to v5.21:

• perf(api): replace JOINs with pre-check in threat score aggregation query (#10394)

Questions ?

Please refer to the Backport tool documentation

[github-actions]

✅ All necessary CHANGELOG.md files have been updated.

[github-actions]

✅ Conflict Markers Resolved

All conflict markers have been successfully resolved in this pull request.

[github-actions]

🔒 Container Security Scan

Image: prowler-api:70c20dc
Last scan: 2026-03-19 16:39:07 UTC

📊 Vulnerability Summary

Severity	Count
🔴 Critical	5
Total	5

4 package(s) affected

⚠️ Action Required

Critical severity vulnerabilities detected. These should be addressed before merging:

• Review the detailed scan results
• Update affected packages to patched versions
• Consider using a different base image if updates are unavailable

---

📋 Resources:

• Download full report (see artifacts)
• View in Security tab
• Scanned with Trivy

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 93.38%. Comparing base (1b3ed72) to head (c8d22e0).
⚠️ Report is 3 commits behind head on v5.21.

Additional details and impacted files

@@           Coverage Diff           @@
##            v5.21   #10399   +/-   ##
=======================================
  Coverage   93.37%   93.38%           
=======================================
  Files         218      218           
  Lines       30390    30393    +3     
=======================================
+ Hits        28378    28381    +3     
  Misses       2012     2012           

Flag	Coverage Δ
api	93.38% <100.00%> (+<0.01%)	⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

Components	Coverage Δ
prowler	∅ <ø> (∅)
api	93.38% <100.00%> (+<0.01%)	⬆️

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.