storage: move to PostgreSQL

[flavio]

The codebase of storage must be changed to store its data inside of PostgreSQL instead of sqlite.

The dabase schema can stay the same right now, there's also no need to migrate the existing data.

Acceptance Criteria

• Connection is done using the credentials provided by the helm chart
• The connection is secured using the TLS CA provided by the helm chart
• All the database interactions are done with PostgreSQL
• There's no sqlite usage anymore
• Remove sqlx dependency
• Remove squirrel dependency
• Use json queries to apply field and label selectors
• Implement pagination tracked here and not planned for the MVP

[pohanhuangtw]

Hi team,

Since cnpg has no native driver, I’m evaluating which Go PostgreSQL driver we should adopt for SBOMbastic. Below are the options:

1. lib/pq

• Pros:

  • Classic, widely used in the Go ecosystem
  • Stable API with years of production usage

• Cons:

  • Low maintenance activity

2. pgx

• Pros:

  • More active community and ongoing development
  • Better performance

• Cons:

  • Less “classic” familiarity for some Go teams

Question: Which driver do you recommend for SBOMbastic’s long‑term needs? Any experiences or gotchas to share?

reference

Thanks!
cc: @flavio @fabriziosestito @alegrey91