← All runs

Trustify branch daily perf tests · 2026-10-22 08:23 UTC

Target trustify (release/0.6.z, scale snapshot) · 2026-10-22 08:23:40 UTC → 08:33:39 UTC · Users 10 · Deltas vs previous run (2026-10-21 05:53 UTC, branch_0.6.z_2026-10-21T05-06-08_a575145)

Type branch-daily · Dataset scale-20260317T023702Z · Scenario etc/scenarios/main/full-20260317T023702Z.json5 · Branch release/0.6.z · Commit a575145e4aec · Workflow run

Duration
9m 59s
Total requests
494,335 (-8,446)
Failure rate
0.0%
0 failed requests
Throughput
824.4 req/s (-14.1)
Latency 95%ile
57 ms (0)
Latency 99%ile
100 ms (0)
Endpoints
72
0 with failures

Over time

Throughput

Requests and failures per second

Response time

Percentiles over Locust's rolling window, ms

Users

Concurrent simulated users

Load plan

ActionStartedStoppedElapsedUsers
Increasing08:23:4008:23:440m 04s2 → 10
Maintaining08:23:4408:33:399m 55s10 → 10

Top 10 slowest endpoints (95%ile)

#MethodName95%ile (ms)Average (ms)# Requests
1GET/api/v3/advisory-labels?filter_text=type&limit=10006,9005,85797
2GET/api/v3/sbom/{sbom_id}/download3,5003,28796
3GET/api/v3/advisory?q=CVE-2021-&total=true1,900409371
4POST/api/v3/vulnerability/analyze1,800549633
5GET/api/v3/sbom?q=name~redhat&total=true1,500527106
6GET/api/v3/advisory?q=title~openssl&total=true1,300465381
7GET/api/v3/vulnerability?sort=base_score:desc&total=true1,200609328
8GET/api/v3/advisory?offset={offset}&limit=171030368
9GET/api/v3/sbom?limit=10&sort=name:asc&total=true71029084
10GET/api/v3/sbom?sort=ingested:desc&total=true690270112

Request metrics

MethodName# Requests# FailsFail %Average (ms)Min (ms)Max (ms)Avg size (B)RPSFailures/s
sbom 16
GET/api/v3/sbom/by-package?purl={purl}94 (-18)0 (0)0%106 (-5.2)14.92221,2870.16 (0)0
GET/api/v3/sbom/count-by-package92 (-18)0 (0)0%31.4 (-1.6)3.6890.330.15 (0)0
GET/api/v3/sbom/{sbom_id}106 (-4)0 (0)0%143 (+5.1)62.54062,0150.18 (0)0
GET/api/v3/sbom/{sbom_id}/all-license-ids94 (-7)0 (0)0%31.1 (+5.7)3.0086.220.16 (0)0
GET/api/v3/sbom/{sbom_id}/download96 (+9)0 (0)0%3,287 (-27.9)3,0783,630136,458,6380.16 (0)0
GET/api/v3/sbom/{sbom_id}/license-export107 (-5)0 (0)0%35.6 (+0.7)5.7595.62340.18 (0)0
GET/api/v3/sbom/{sbom_id}/packages94 (-15)0 (0)0%175 (+30.0)16.351712,6480.16 (0)0
GET/api/v3/sbom/{sbom_id}/related93 (-8)0 (0)0%152 (+8.9)24.844415,3720.16 (0)0
GET/api/v3/sbom?limit=10&sort=name:asc&total=true84 (-11)0 (0)0%290 (-17.6)33.694512,1890.14 (0)0
GET/api/v3/sbom?offset=100&limit=10&total=true200 (-10)0 (0)0%182 (-18.5)22.01,09711,9000.33 (0)0
GET/api/v3/sbom?q=label:type=product&total=true96 (-10)0 (0)0%27.8 (+6.7)2.8682.4220.16 (0)0
GET/api/v3/sbom?q=license~GPL&sort=name:desc&total=true99 (+2)0 (0)0%30.7 (+2.3)3.1781.4220.17 (0)0
GET/api/v3/sbom?q=name~redhat&total=true106 (-19)0 (0)0%527 (-17.2)12.51,687220.18 (0)0
GET/api/v3/sbom?q=published>2024-01-01&total=true90 (+10)0 (0)0%183 (-3.9)27.282729,3170.15 (0)0
GET/api/v3/sbom?sort=ingested:desc&total=true112 (+16)0 (0)0%270 (-14.8)29.01,08529,6000.19 (0)0
GET/api/v3/sbom?total=true192 (-26)0 (0)0%171 (+4.2)27.088429,3170.32 (0)0
advisory 13
GET/api/v3/advisory/urn:uuid:{advisory_id}403 (-173)0 (0)0%61.3 (+1.2)6.111312,3950.67 (-0.3)0
GET/api/v3/advisory/urn:uuid:{advisory_id}/download391 (-205)0 (0)0%30.1 (+2.0)6.0394.2178,4230.65 (-0.3)0
GET/api/v3/advisory?deprecated=Consider&total=true407 (-215)0 (0)0%88.5 (+14.2)8.572,88044,0030.68 (-0.4)0
GET/api/v3/advisory?limit=1&total=true68 (-61)0 (0)0%98.5 (+39.4)9.611,2822,3230.11 (-0.1)0
GET/api/v3/advisory?limit=10&sort=ingested:desc&total=true426 (-167)0 (0)0%91.7 (+28.9)4.483,28120,1930.71 (-0.3)0
GET/api/v3/advisory?offset=100&limit=10&total=true377 (-216)0 (0)0%83.0 (-3.3)6.243,62320,2270.63 (-0.4)0
GET/api/v3/advisory?offset={offset}&limit=168 (-61)0 (0)0%303 (+37.6)38.88162,0030.11 (-0.1)0
GET/api/v3/advisory?q=CVE-2021-&total=true371 (-245)0 (0)0%409 (+51.5)21.03,20349,2370.62 (-0.4)0
GET/api/v3/advisory?q=identifier=CVE-2022-0981&total=true372 (-250)0 (0)0%63.9 (+2.0)5.691371,9710.62 (-0.4)0
GET/api/v3/advisory?q=modified>3 days ago&total=true403 (-205)0 (0)0%23.9 (+1.2)3.5887.7220.67 (-0.3)0
GET/api/v3/advisory?q=title~openssl&total=true381 (-229)0 (0)0%465 (+417.5)20.31,50756,8990.64 (-0.4)0
GET/api/v3/advisory?sort=modified:desc&total=true422 (-156)0 (0)0%99.6 (+33.6)7.073,19038,1280.70 (-0.3)0
GET/api/v3/advisory?total=true355 (-250)0 (0)0%131 (+23.6)9.313,08150,3380.59 (-0.4)0
vulnerability 7
POST/api/v3/vulnerability/analyze633 (-31)0 (0)0%549 (+41.0)2.353,4552,857,7801.06 (-0.1)0
GET/api/v3/vulnerability?offset=100&limit=10&total=true350 (+24)0 (0)0%23.0 (+1.7)3.327559,2100.58 (0)0
GET/api/v3/vulnerability?q=base_score>=7.0&total=true334 (+11)0 (0)0%31.9 (+3.0)3.301,01520,3550.56 (0)0
GET/api/v3/vulnerability?q=base_severity=high&total=true285 (-51)0 (0)0%36.6 (+6.5)4.5298920,6480.48 (-0.1)0
GET/api/v3/vulnerability?q=cwes=CWE-79&total=true295 (-35)0 (0)0%31.8 (-5.6)3.6653020,3240.49 (-0.1)0
GET/api/v3/vulnerability?sort=base_score:desc&total=true328 (-7)0 (0)0%609 (-14.5)2062,68110,1070.55 (0)0
GET/api/v3/vulnerability?total=true307 (-46)0 (0)0%27.7 (+2.4)3.2562419,6230.51 (-0.1)0
purl 15
GET/api/v3/purl/base/{purl}313 (-63)0 (0)0%55.8 (+3.3)6.9740448,8270.52 (-0.1)0
GET/api/v3/purl/base?q=namespace=redhat&total=true362 (+26)0 (0)0%64.6 (-1.5)4.901,0762,0800.60 (0)0
GET/api/v3/purl/base?q=type=rpm&total=true385 (+9)0 (0)0%60.5 (+0.7)3.121352,0800.64 (0)0
GET/api/v3/purl/base?sort=name:asc&total=true348 (-6)0 (0)0%203 (+6.0)74.04292,9430.58 (0)0
GET/api/v3/purl/base?total=true379 (+34)0 (0)0%58.7 (-1.3)3.352832,4500.63 (+0.1)0
POST/api/v3/purl/recommend1,052 (-22)0 (0)0%232 (+4.3)46.07612,7471.75 (0)0
GET/api/v3/purl/{purl_id}358 (+9)0 (0)0%77.3 (+1.7)16.83755310.60 (0)0
GET/api/v3/purl?offset=100&limit=10&total=true337 (-53)0 (0)0%68.3 (+10.2)4.347354,7340.56 (-0.1)0
GET/api/v3/purl?q=curl&total=true348 (+6)0 (0)0%61.5 (-31.7)5.701,43811,7140.58 (0)0
GET/api/v3/purl?q=license~GPLv3+...&sort=name:desc&total=true358 (-12)0 (0)0%33.3 (+2.5)2.2692.8220.60 (0)0
GET/api/v3/purl?q=name=curl&total=true365 (+12)0 (0)0%27.2 (-0.6)2.2926512,0840.61 (0)0
GET/api/v3/purl?q=purl:namespace=redhat&total=true364 (+19)0 (0)0%102 (+2.0)2.323,40513,7700.61 (0)0
GET/api/v3/purl?q=purl:ty=rpm&total=true362 (+7)0 (0)0%101 (+9.7)2.313,69913,7700.60 (0)0
GET/api/v3/purl?sort=purl:name:asc&total=true358 (+9)0 (0)0%39.3 (+1.6)2.4079111,1010.60 (0)0
GET/api/v3/purl?total=true377 (+31)0 (0)0%27.7 (-6.2)2.025729,8770.63 (+0.1)0
license 9
GET/api/v3/license/spdx/license/{license_id}1,774 (-55)0 (0)0%41.8 (-0.3)1.3270.61,1432.96 (-0.1)0
GET/api/v3/license/spdx/license?q=apache&total=true1,761 (+39)0 (0)0%3.30 (-0.1)1.2328.51652.94 (+0.1)0
GET/api/v3/license/spdx/license?q=gpl&total=true1,797 (-55)0 (0)0%42.5 (+0.5)1.4572.61,9813.00 (-0.1)0
GET/api/v3/license/spdx/license?total=true1,813 (-50)0 (0)0%42.1 (-0.2)1.2470.71,5253.02 (-0.1)0
GET/api/v3/license?limit=10&sort=license:asc&total=true1,769 (+18)0 (0)0%36.0 (-0.1)6.201794252.95 (0)0
GET/api/v3/license?q=ASL&sort=license:desc&total=true1,886 (+76)0 (0)0%31.3 (+0.8)3.66102223.15 (+0.1)0
GET/api/v3/license?q=license~Apache&total=true1,799 (+28)0 (0)0%28.3 (+1.3)3.291351203.00 (0)0
GET/api/v3/license?q=license~GPL&total=true1,765 (+19)0 (0)0%28.0 (+1.9)3.1698.7922.94 (0)0
GET/api/v3/license?total=true1,706 (-103)0 (0)0%73.5 (+1.7)7.222451,1012.84 (-0.2)0
analysis 3
GET/api/v3/analysis/component/{component}11,345 (-1,311)0 (0)0%16.3 (+1.5)1.381722518.92 (-2.2)0
GET/api/v3/analysis/latest/component/{cpe}11,492 (-1,101)0 (0)0%16.6 (+1.4)1.501722519.16 (-1.8)0
GET/api/v3/analysis/status11,558 (-882)0 (0)0%16.0 (+1.6)1.2816310319.27 (-1.5)0
importer 1
GET/api/v3/importer?total=true40,649 (-3,237)0 (0)0%13.4 (+1.0)1.30175267.79 (-5.4)0
group 3
GET/api/v3/group/sbom?parents=resolve&total=true12,307 (-433)0 (0)0%15.0 (+0.6)1.461113820.52 (-0.7)0
GET/api/v3/group/sbom?total=true12,224 (-484)0 (0)0%15.2 (+0.6)1.581072220.39 (-0.8)0
GET/api/v3/group/sbom?totals=true&total=true12,236 (-407)0 (0)0%15.0 (+0.4)1.581092220.41 (-0.7)0
labels 3
GET/api/v3/advisory-labels?filter_text=type&limit=100097 (+3)0 (0)0%5,857 (-17.0)4,7877,540600.16 (0)0
GET/api/v3/sbom-labels?limit=10&filter_text=&total=true88 (-17)0 (0)0%70.6 (+2.0)8.271281,0650.15 (0)0
GET/api/v3/sbom-labels?total=true93 (-38)0 (0)0%71.5 (+4.9)8.141311,0650.16 (-0.1)0
other 2
GET/.well-known/trustify175,331 (+711)0 (0)0%1.41 (0)0.7837.6886292.39 (+1.2)0
POST/api/v3/ui/extract-sbom-purls176,048 (+1,509)0 (0)0%1.61 (0)0.8545.045293.58 (+2.5)0

Response time metrics (ms)

MethodName50%ile75%ile90%ile95%ile99%ile100%ile
sbom 16
GET/api/v3/sbom/by-package?purl={purl}120 (+10)130 (0)140 (0)150 (-60)220 (-10)220 (-110)
GET/api/v3/sbom/count-by-package15 (+2)60 (-2)73 (-3)78 (-1)90 (-6)90 (-8)
GET/api/v3/sbom/{sbom_id}140 (0)160 (+10)220 (+10)220 (-10)320 (+50)410 (+100)
GET/api/v3/sbom/{sbom_id}/all-license-ids12 (+3)58 (+13)73 (+3)78 (+5)86 (+1)86 (-7)
GET/api/v3/sbom/{sbom_id}/download3,300 (0)3,300 (-100)3,400 (0)3,500 (0)3,600 (-200)3,600 (-200)
GET/api/v3/sbom/{sbom_id}/license-export15 (-4)70 (+7)78 (+6)80 (+2)89 (+1)96 (+6)
GET/api/v3/sbom/{sbom_id}/packages170 (+60)260 (+50)310 (+20)390 (+80)520 (+130)520 (+10)
GET/api/v3/sbom/{sbom_id}/related130 (+10)200 (-10)280 (+10)290 (+10)440 (+140)440 (+70)
GET/api/v3/sbom?limit=10&sort=name:asc&total=true250 (0)390 (+10)550 (-90)710 (-110)940 (-260)940 (-260)
GET/api/v3/sbom?offset=100&limit=10&total=true110 (-60)250 (-10)370 (-50)480 (-20)880 (+180)1,100 (+320)
GET/api/v3/sbom?q=label:type=product&total=true9 (+1)57 (+28)69 (+6)74 (+2)82 (+4)82 (-3)
GET/api/v3/sbom?q=license~GPL&sort=name:desc&total=true12 (+1)58 (+4)73 (+2)81 (+5)81 (-19)81 (-19)
GET/api/v3/sbom?q=name~redhat&total=true110 (-430)1,100 (+100)1,300 (+100)1,500 (+200)1,600 (+100)1,700 (+200)
GET/api/v3/sbom?q=published>2024-01-01&total=true120 (-40)190 (-40)380 (-20)490 (+20)830 (+130)830 (+130)
GET/api/v3/sbom?sort=ingested:desc&total=true190 (-80)410 (+20)570 (+90)690 (+30)990 (+80)1,100 (+190)
GET/api/v3/sbom?total=true120 (0)200 (0)300 (-20)420 (+20)790 (+110)880 (+180)
advisory 13
GET/api/v3/advisory/urn:uuid:{advisory_id}48 (0)85 (+9)110 (0)110 (0)120 (0)130 (0)
GET/api/v3/advisory/urn:uuid:{advisory_id}/download15 (+1)54 (+7)74 (+1)79 (+2)84 (+2)94 (-1)
GET/api/v3/advisory?deprecated=Consider&total=true20 (+3)71 (+5)86 (+5)120 (+30)1,800 (-300)2,900 (-200)
GET/api/v3/advisory?limit=1&total=true50 (0)68 (-1)100 (0)120 (+10)1,300 (+1,180)1,300 (+1,180)
GET/api/v3/advisory?limit=10&sort=ingested:desc&total=true15 (+2)63 (+2)77 (+3)83 (+3)2,500 (+900)3,300 (-400)
GET/api/v3/advisory?offset=100&limit=10&total=true65 (-5)85 (0)96 (+1)100 (0)1,300 (-800)3,600 (+500)
GET/api/v3/advisory?offset={offset}&limit=1280 (+60)400 (+60)660 (+170)710 (+70)820 (0)820 (-110)
GET/api/v3/advisory?q=CVE-2021-&total=true170 (-10)300 (-10)1,400 (+300)1,900 (+300)2,700 (+400)3,200 (+400)
GET/api/v3/advisory?q=identifier=CVE-2022-0981&total=true50 (+1)92 (+7)110 (0)110 (0)120 (0)140 (+10)
GET/api/v3/advisory?q=modified>3 days ago&total=true9 (0)45 (+5)64 (-2)70 (-1)76 (-4)88 (-7)
GET/api/v3/advisory?q=title~openssl&total=true390 (+357)590 (+516)970 (+885)1,300 (+1,208)1,500 (+1,310)1,500 (+1,010)
GET/api/v3/advisory?sort=modified:desc&total=true25 (+8)68 (+1)80 (+1)100 (+13)2,800 (+1,100)3,200 (+700)
GET/api/v3/advisory?total=true96 (-1)110 (0)180 (+10)190 (+10)2,200 (+2,000)3,100 (+100)
vulnerability 7
POST/api/v3/vulnerability/analyze570 (+507)900 (+30)1,200 (0)1,800 (0)2,800 (+300)3,500 (-500)
GET/api/v3/vulnerability?offset=100&limit=10&total=true8 (0)12 (-6)58 (0)69 (+1)340 (+230)750 (+150)
GET/api/v3/vulnerability?q=base_score>=7.0&total=true9 (+1)24 (+10)65 (+4)75 (+4)430 (-20)1,000 (+220)
GET/api/v3/vulnerability?q=base_severity=high&total=true9 (0)22 (+5)67 (+3)77 (+4)790 (+290)990 (+400)
GET/api/v3/vulnerability?q=cwes=CWE-79&total=true10 (0)34 (+11)72 (+4)82 (+3)370 (-230)530 (-670)
GET/api/v3/vulnerability?sort=base_score:desc&total=true510 (-10)630 (-110)1,000 (+50)1,200 (0)2,000 (+200)2,700 (+300)
GET/api/v3/vulnerability?total=true9 (+1)30 (+17)69 (+9)74 (+5)250 (-260)620 (-150)
purl 15
GET/api/v3/purl/base/{purl}35 (-1)66 (+1)130 (-20)210 (+20)290 (+20)400 (+90)
GET/api/v3/purl/base?q=namespace=redhat&total=true47 (0)86 (+4)99 (+2)100 (0)150 (-60)1,100 (+170)
GET/api/v3/purl/base?q=type=rpm&total=true47 (0)85 (+5)99 (+2)100 (0)120 (+10)130 (+10)
GET/api/v3/purl/base?sort=name:asc&total=true200 (0)230 (0)280 (+20)320 (+20)390 (+30)430 (+10)
GET/api/v3/purl/base?total=true47 (0)82 (-1)98 (+1)100 (0)120 (0)280 (+110)
POST/api/v3/purl/recommend220 (0)270 (0)330 (+10)360 (+10)500 (+50)760 (+50)
GET/api/v3/purl/{purl_id}76 (0)95 (-2)130 (+10)170 (+10)200 (+10)380 (+110)
GET/api/v3/purl?offset=100&limit=10&total=true47 (0)81 (+6)100 (+5)100 (0)590 (+470)730 (+190)
GET/api/v3/purl?q=curl&total=true31 (+6)62 (+3)74 (-21)85 (-365)1,100 (-400)1,400 (-1,000)
GET/api/v3/purl?q=license~GPLv3+...&sort=name:desc&total=true25 (+5)57 (+3)68 (+2)75 (+4)83 (+3)93 (+3)
GET/api/v3/purl?q=name=curl&total=true9 (0)46 (-2)61 (-3)72 (+2)200 (+10)270 (-20)
GET/api/v3/purl?q=purl:namespace=redhat&total=true10 (+1)53 (+2)62 (0)68 (+3)3,000 (+200)3,400 (0)
GET/api/v3/purl?q=purl:ty=rpm&total=true10 (+2)50 (+4)62 (0)67 (-2)3,400 (+700)3,700 (+200)
GET/api/v3/purl?sort=purl:name:asc&total=true10 (-1)49 (0)62 (0)69 (-3)580 (+20)790 (+150)
GET/api/v3/purl?total=true9 (+1)47 (+1)62 (+1)70 (+3)250 (-290)570 (-240)
license 9
GET/api/v3/license/spdx/license/{license_id}43 (0)44 (0)45 (0)46 (0)57 (+4)71 (-4)
GET/api/v3/license/spdx/license?q=apache&total=true3 (0)4 (0)6 (0)6 (-1)8 (-1)29 (-4)
GET/api/v3/license/spdx/license?q=gpl&total=true43 (0)44 (0)45 (0)46 (0)58 (+4)73 (-4)
GET/api/v3/license/spdx/license?total=true43 (0)44 (0)45 (0)46 (0)58 (+1)71 (-15)
GET/api/v3/license?limit=10&sort=license:asc&total=true21 (-4)59 (+1)77 (+3)82 (+1)94 (+1)180 (+50)
GET/api/v3/license?q=ASL&sort=license:desc&total=true18 (+2)52 (0)68 (-1)76 (0)86 (+2)100 (0)
GET/api/v3/license?q=license~Apache&total=true14 (+2)50 (+2)63 (0)72 (+1)81 (+1)140 (+47)
GET/api/v3/license?q=license~GPL&total=true13 (+1)49 (+3)62 (0)71 (0)81 (+1)99 (-1)
GET/api/v3/license?total=true63 (+4)97 (+1)110 (0)120 (0)130 (0)240 (+100)
analysis 3
GET/api/v3/analysis/component/{component}6 (0)8 (0)65 (+3)71 (+2)78 (+3)170 (+70)
GET/api/v3/analysis/latest/component/{cpe}6 (0)9 (+1)65 (+2)70 (0)79 (+3)170 (+60)
GET/api/v3/analysis/status6 (0)8 (0)65 (+3)70 (+1)79 (+3)160 (+60)
importer 1
GET/api/v3/importer?total=true5 (+1)7 (+1)61 (+3)68 (+1)76 (+2)170 (0)
group 3
GET/api/v3/group/sbom?parents=resolve&total=true6 (0)8 (0)63 (+1)69 (+1)76 (+1)110 (+10)
GET/api/v3/group/sbom?total=true6 (+1)8 (0)64 (+1)69 (0)77 (+2)110 (-70)
GET/api/v3/group/sbom?totals=true&total=true6 (0)8 (0)64 (+2)69 (+1)76 (+1)110 (+10)
labels 3
GET/api/v3/advisory-labels?filter_text=type&limit=10005,800 (0)6,200 (0)6,700 (0)6,900 (-100)7,500 (+100)7,500 (+100)
GET/api/v3/sbom-labels?limit=10&filter_text=&total=true54 (+3)98 (0)110 (0)120 (+10)130 (+10)130 (0)
GET/api/v3/sbom-labels?total=true56 (+5)98 (+5)120 (+10)120 (0)130 (+10)130 (+10)
other 2
GET/.well-known/trustify1 (0)1 (0)3 (0)4 (0)6 (0)38 (-9)
POST/api/v3/ui/extract-sbom-purls1 (0)1 (0)3 (0)4 (0)7 (+1)45 (-12)

Failures

No failures recorded.

Exceptions

No exceptions raised in the locustfile.