Error fetching path to component - db context deadline exceeded

[seb-kw]

3:03PM ERR monitoring/alert.go:33 critical error encountered msg="Database error" error="timeout: context deadline exceeded" id=644e9bd9a8a14114b5032c4fa6bf58d4
3:03PM ERR middlewares/server.go:34 timeout: context deadline exceeded method=GET path="/api/v1/organizations/@opencode/projects/opencode-shared-container-images/assets/coreutils/refs/main/path-to-component/?purl=pkg%3Adeb%2Fdebian%2Flibzstd%401.5.7%2Bdfsg-1%3Farch%3Darm64"
2026/01/08 15:03:55 github.com/l3montree-dev/devguard/database/database.go:70 timeout: context deadline exceeded
[20266.310ms] [rows:949507] WITH RECURSIVE components_cte AS (
	SELECT
		cd.component_purl,
		cd.dependency_purl,
		cd.asset_id,
		0 AS depth,
		ARRAY[cd.dependency_purl] AS path
	FROM component_dependencies cd
	JOIN artifact_component_dependencies acd ON acd.component_dependency_id = cd.id
	WHERE
		cd.dependency_purl = 'pkg:deb/debian/libzstd@1.5.7+dfsg-1?arch=arm64' AND
		cd.asset_id = '124fd5e7-f347-4bbf-b799-fe575f824ba3' AND
		cd.asset_version_name = 'main' AND
		acd.artifact_asset_version_name = 'main' AND
		acd.artifact_asset_id = '124fd5e7-f347-4bbf-b799-fe575f824ba3'
	UNION ALL
	SELECT
		co.component_purl,
		co.dependency_purl,
		co.asset_id,
		cte.depth + 1,
		co.dependency_purl || cte.path
	FROM component_dependencies co
	INNER JOIN components_cte cte
		ON co.dependency_purl = cte.component_purl
	WHERE
		co.asset_id = '124fd5e7-f347-4bbf-b799-fe575f824ba3' AND
		co.asset_version_name = 'main' AND
		NOT co.dependency_purl = ANY(cte.path) AND cte.depth < 100
),
target_path AS (
	SELECT * FROM components_cte
	ORDER BY depth DESC
)
SELECT * FROM target_path;

Example to reproduce:

CVE-2022-4899 for debian/libzstd
sbom.json