← All runs

Trustify branch daily perf tests · 2026-10-22 15:51 UTC

Target trustify (release/0.6.z, scale snapshot) · 2026-10-22 15:51:16 UTC → 16:01:15 UTC · Users 10 · Deltas vs previous run (2026-10-22 08:23 UTC, branch_0.6.z_2026-10-22T07-35-12_a575145)

Type branch-daily · Dataset scale-20260317T023702Z · Scenario etc/scenarios/main/full-20260317T023702Z.json5 · Branch release/0.6.z · Commit a575145e4aec · Workflow run

Duration
9m 59s
Total requests
504,028 (+9,693)
Failure rate
0.0%
0 failed requests
Throughput
840.5 req/s (+16.1)
Latency 95%ile
56 ms (-1)
Latency 99%ile
100 ms (0)
Endpoints
72
0 with failures

Over time

Throughput

Requests and failures per second

Response time

Percentiles over Locust's rolling window, ms

Users

Concurrent simulated users

Load plan

ActionStartedStoppedElapsedUsers
Increasing15:51:1615:51:200m 04s2 → 10
Maintaining15:51:2016:01:159m 55s10 → 10

Top 10 slowest endpoints (95%ile)

#MethodName95%ile (ms)Average (ms)# Requests
1GET/api/v3/advisory-labels?filter_text=type&limit=10007,2005,96795
2GET/api/v3/sbom/{sbom_id}/download3,5003,280100
3GET/api/v3/advisory?q=CVE-2021-&total=true1,800387573
4POST/api/v3/vulnerability/analyze1,400478717
5GET/api/v3/sbom?q=name~redhat&total=true1,30058182
6GET/api/v3/vulnerability?sort=base_score:desc&total=true1,200561364
7GET/api/v3/sbom?limit=10&sort=name:asc&total=true69031374
8GET/api/v3/sbom?sort=ingested:desc&total=true67029398
9GET/api/v3/advisory?offset={offset}&limit=165028294
10GET/api/v3/sbom?offset=100&limit=10&total=true580222192

Request metrics

MethodName# Requests# FailsFail %Average (ms)Min (ms)Max (ms)Avg size (B)RPSFailures/s
sbom 16
GET/api/v3/sbom/by-package?purl={purl}81 (-13)0 (0)0%105 (-1.0)54.12221,2870.14 (0)0
GET/api/v3/sbom/count-by-package99 (+7)0 (0)0%34.0 (+2.6)2.7392.130.17 (0)0
GET/api/v3/sbom/{sbom_id}96 (-10)0 (0)0%144 (+1.3)66.44202,0150.16 (0)0
GET/api/v3/sbom/{sbom_id}/all-license-ids82 (-12)0 (0)0%24.0 (-7.1)2.5280.220.14 (0)0
GET/api/v3/sbom/{sbom_id}/download100 (+4)0 (0)0%3,280 (-7.2)3,1183,675136,458,6380.17 (0)0
GET/api/v3/sbom/{sbom_id}/license-export80 (-27)0 (0)0%33.5 (-2.0)5.3786.22340.13 (0)0
GET/api/v3/sbom/{sbom_id}/packages97 (+3)0 (0)0%153 (-22.5)14.439812,6480.16 (0)0
GET/api/v3/sbom/{sbom_id}/related93 (0)0 (0)0%136 (-16.6)22.439015,3720.16 (0)0
GET/api/v3/sbom?limit=10&sort=name:asc&total=true74 (-10)0 (0)0%313 (+22.6)77.678112,1890.12 (0)0
GET/api/v3/sbom?offset=100&limit=10&total=true192 (-8)0 (0)0%222 (+40.2)31.792411,9410.32 (0)0
GET/api/v3/sbom?q=label:type=product&total=true92 (-4)0 (0)0%25.8 (-2.0)3.0190.5220.15 (0)0
GET/api/v3/sbom?q=license~GPL&sort=name:desc&total=true97 (-2)0 (0)0%27.9 (-2.8)4.3379.5220.16 (0)0
GET/api/v3/sbom?q=name~redhat&total=true82 (-24)0 (0)0%581 (+54.1)10.21,606220.14 (0)0
GET/api/v3/sbom?q=published>2024-01-01&total=true98 (+8)0 (0)0%184 (+0.9)27.31,08029,3170.16 (0)0
GET/api/v3/sbom?sort=ingested:desc&total=true98 (-14)0 (0)0%293 (+22.6)30.087129,6000.16 (0)0
GET/api/v3/sbom?total=true195 (+3)0 (0)0%161 (-9.9)26.190529,3170.33 (0)0
advisory 13
GET/api/v3/advisory/urn:uuid:{advisory_id}567 (+164)0 (0)0%61.6 (+0.3)4.941582,3950.95 (+0.3)0
GET/api/v3/advisory/urn:uuid:{advisory_id}/download545 (+154)0 (0)0%29.8 (-0.3)5.8699.0178,4230.91 (+0.3)0
GET/api/v3/advisory?deprecated=Consider&total=true572 (+165)0 (0)0%80.1 (-8.4)7.953,21044,0030.95 (+0.3)0
GET/api/v3/advisory?limit=1&total=true94 (+26)0 (0)0%53.8 (-44.7)7.361122,2270.16 (0)0
GET/api/v3/advisory?limit=10&sort=ingested:desc&total=true598 (+172)0 (0)0%63.0 (-28.7)5.702,70420,1931.00 (+0.3)0
GET/api/v3/advisory?offset=100&limit=10&total=true544 (+167)0 (0)0%93.4 (+10.4)6.333,07519,5030.91 (+0.3)0
GET/api/v3/advisory?offset={offset}&limit=194 (+26)0 (0)0%282 (-20.8)50.27981,8570.16 (0)0
GET/api/v3/advisory?q=CVE-2021-&total=true573 (+202)0 (0)0%387 (-22.0)8.923,92450,2200.96 (+0.3)0
GET/api/v3/advisory?q=identifier=CVE-2022-0981&total=true574 (+202)0 (0)0%62.1 (-1.8)4.521371,9710.96 (+0.3)0
GET/api/v3/advisory?q=modified>3 days ago&total=true559 (+156)0 (0)0%24.5 (+0.6)2.50144220.93 (+0.3)0
GET/api/v3/advisory?q=title~openssl&total=true567 (+186)0 (0)0%51.8 (-413.1)9.56583126,4520.95 (+0.3)0
GET/api/v3/advisory?sort=modified:desc&total=true562 (+140)0 (0)0%75.5 (-24.1)7.713,72638,1280.94 (+0.2)0
GET/api/v3/advisory?total=true582 (+227)0 (0)0%108 (-22.7)9.552,86348,5010.97 (+0.4)0
vulnerability 7
POST/api/v3/vulnerability/analyze717 (+84)0 (0)0%478 (-71.3)1.923,4042,734,4881.20 (+0.1)0
GET/api/v3/vulnerability?offset=100&limit=10&total=true371 (+21)0 (0)0%17.7 (-5.3)1.995258,6760.62 (0)0
GET/api/v3/vulnerability?q=base_score>=7.0&total=true386 (+52)0 (0)0%26.3 (-5.6)3.2067018,9450.64 (+0.1)0
GET/api/v3/vulnerability?q=base_severity=high&total=true346 (+61)0 (0)0%30.7 (-5.9)3.041,08818,8830.58 (+0.1)0
GET/api/v3/vulnerability?q=cwes=CWE-79&total=true335 (+40)0 (0)0%29.2 (-2.6)3.2795022,1420.56 (+0.1)0
GET/api/v3/vulnerability?sort=base_score:desc&total=true364 (+36)0 (0)0%561 (-47.1)1692,46310,0730.61 (+0.1)0
GET/api/v3/vulnerability?total=true380 (+73)0 (0)0%26.3 (-1.4)4.0560919,1930.63 (+0.1)0
purl 15
GET/api/v3/purl/base/{purl}379 (+66)0 (0)0%45.3 (-10.6)5.6430048,8270.63 (+0.1)0
GET/api/v3/purl/base?q=namespace=redhat&total=true391 (+29)0 (0)0%57.6 (-6.9)2.997372,0800.65 (0)0
GET/api/v3/purl/base?q=type=rpm&total=true361 (-24)0 (0)0%57.2 (-3.3)3.021152,0800.60 (0)0
GET/api/v3/purl/base?sort=name:asc&total=true396 (+48)0 (0)0%191 (-12.6)71.34222,9430.66 (+0.1)0
GET/api/v3/purl/base?total=true377 (-2)0 (0)0%55.1 (-3.6)2.981172,4500.63 (0)0
POST/api/v3/purl/recommend1,115 (+63)0 (0)0%225 (-6.3)68.86122,7471.86 (+0.1)0
GET/api/v3/purl/{purl_id}359 (+1)0 (0)0%74.2 (-3.1)16.52645310.60 (0)0
GET/api/v3/purl?offset=100&limit=10&total=true385 (+48)0 (0)0%60.7 (-7.6)3.945804,7340.64 (+0.1)0
GET/api/v3/purl?q=curl&total=true373 (+25)0 (0)0%57.7 (-3.8)4.691,61411,7140.62 (0)0
GET/api/v3/purl?q=license~GPLv3+...&sort=name:desc&total=true354 (-4)0 (0)0%29.6 (-3.7)2.1887.2220.59 (0)0
GET/api/v3/purl?q=name=curl&total=true371 (+6)0 (0)0%25.7 (-1.5)2.1839212,0840.62 (0)0
GET/api/v3/purl?q=purl:namespace=redhat&total=true386 (+22)0 (0)0%93.7 (-8.0)2.393,57113,7700.64 (0)0
GET/api/v3/purl?q=purl:ty=rpm&total=true360 (-2)0 (0)0%95.8 (-4.9)1.953,37413,7700.60 (0)0
GET/api/v3/purl?sort=purl:name:asc&total=true355 (-3)0 (0)0%36.3 (-3.0)1.7068411,1010.59 (0)0
GET/api/v3/purl?total=true394 (+17)0 (0)0%24.8 (-3.0)1.896959,8770.66 (0)0
license 9
GET/api/v3/license/spdx/license/{license_id}1,830 (+56)0 (0)0%42.0 (+0.2)1.2071.11,1433.05 (+0.1)0
GET/api/v3/license/spdx/license?q=apache&total=true1,796 (+35)0 (0)0%3.19 (-0.1)1.1329.81653.00 (+0.1)0
GET/api/v3/license/spdx/license?q=gpl&total=true1,789 (-8)0 (0)0%41.9 (-0.6)1.3473.11,9812.98 (0)0
GET/api/v3/license/spdx/license?total=true1,885 (+72)0 (0)0%41.6 (-0.5)1.0076.91,5253.14 (+0.1)0
GET/api/v3/license?limit=10&sort=license:asc&total=true1,848 (+79)0 (0)0%35.3 (-0.7)6.071344253.08 (+0.1)0
GET/api/v3/license?q=ASL&sort=license:desc&total=true1,836 (-50)0 (0)0%30.4 (-0.9)3.6493.8223.06 (-0.1)0
GET/api/v3/license?q=license~Apache&total=true1,858 (+59)0 (0)0%27.0 (-1.3)2.771041203.10 (+0.1)0
GET/api/v3/license?q=license~GPL&total=true1,761 (-4)0 (0)0%26.4 (-1.6)2.61101922.94 (0)0
GET/api/v3/license?total=true1,883 (+177)0 (0)0%67.6 (-5.9)8.081711,1013.14 (+0.3)0
analysis 3
GET/api/v3/analysis/component/{component}13,122 (+1,777)0 (0)0%14.4 (-1.9)1.401032521.88 (+3.0)0
GET/api/v3/analysis/latest/component/{cpe}12,980 (+1,488)0 (0)0%14.5 (-2.0)1.5199.92521.65 (+2.5)0
GET/api/v3/analysis/status12,800 (+1,242)0 (0)0%14.0 (-2.0)1.2910910321.35 (+2.1)0
importer 1
GET/api/v3/importer?total=true46,416 (+5,767)0 (0)0%11.6 (-1.8)1.05105277.40 (+9.6)0
group 3
GET/api/v3/group/sbom?parents=resolve&total=true13,223 (+916)0 (0)0%13.9 (-1.0)1.3699.93822.05 (+1.5)0
GET/api/v3/group/sbom?total=true13,101 (+877)0 (0)0%14.1 (-1.1)1.311052221.85 (+1.5)0
GET/api/v3/group/sbom?totals=true&total=true13,046 (+810)0 (0)0%13.9 (-1.1)1.501092221.76 (+1.4)0
labels 3
GET/api/v3/advisory-labels?filter_text=type&limit=100095 (-2)0 (0)0%5,967 (+110.4)4,7757,573600.16 (0)0
GET/api/v3/sbom-labels?limit=10&filter_text=&total=true108 (+20)0 (0)0%71.0 (+0.4)10.41251,0650.18 (0)0
GET/api/v3/sbom-labels?total=true80 (-13)0 (0)0%70.4 (-1.1)8.441211,0650.13 (0)0
other 2
GET/.well-known/trustify172,570 (-2,761)0 (0)0%1.42 (0)0.7862.3886287.78 (-4.6)0
POST/api/v3/ui/extract-sbom-purls172,659 (-3,389)0 (0)0%1.66 (+0.1)0.8562.145287.93 (-5.7)0

Response time metrics (ms)

MethodName50%ile75%ile90%ile95%ile99%ile100%ile
sbom 16
GET/api/v3/sbom/by-package?purl={purl}120 (0)130 (0)140 (0)140 (-10)220 (0)220 (0)
GET/api/v3/sbom/count-by-package15 (0)60 (0)77 (+4)79 (+1)92 (+2)92 (+2)
GET/api/v3/sbom/{sbom_id}140 (0)150 (-10)210 (-10)230 (+10)420 (+100)420 (+10)
GET/api/v3/sbom/{sbom_id}/all-license-ids8 (-4)46 (-12)68 (-5)73 (-5)80 (-6)80 (-6)
GET/api/v3/sbom/{sbom_id}/download3,300 (0)3,300 (0)3,400 (0)3,500 (0)3,700 (+100)3,700 (+100)
GET/api/v3/sbom/{sbom_id}/license-export13 (-2)67 (-3)79 (+1)84 (+4)86 (-3)86 (-10)
GET/api/v3/sbom/{sbom_id}/packages110 (-60)230 (-30)290 (-20)300 (-90)400 (-120)400 (-120)
GET/api/v3/sbom/{sbom_id}/related110 (-20)180 (-20)210 (-70)250 (-40)390 (-50)390 (-50)
GET/api/v3/sbom?limit=10&sort=name:asc&total=true290 (+40)390 (0)490 (-60)690 (-20)780 (-160)780 (-160)
GET/api/v3/sbom?offset=100&limit=10&total=true180 (+70)300 (+50)410 (+40)580 (+100)870 (-10)920 (-180)
GET/api/v3/sbom?q=label:type=product&total=true9 (0)44 (-13)70 (+1)78 (+4)90 (+8)90 (+8)
GET/api/v3/sbom?q=license~GPL&sort=name:desc&total=true10 (-2)48 (-10)72 (-1)74 (-7)80 (-1)80 (-1)
GET/api/v3/sbom?q=name~redhat&total=true720 (+610)1,000 (-100)1,300 (0)1,300 (-200)1,600 (0)1,600 (-100)
GET/api/v3/sbom?q=published>2024-01-01&total=true120 (0)210 (+20)370 (-10)510 (+20)1,100 (+270)1,100 (+270)
GET/api/v3/sbom?sort=ingested:desc&total=true210 (+20)480 (+70)560 (-10)670 (-20)870 (-120)870 (-230)
GET/api/v3/sbom?total=true110 (-10)190 (-10)300 (0)360 (-60)860 (+70)910 (+30)
advisory 13
GET/api/v3/advisory/urn:uuid:{advisory_id}48 (0)87 (+2)110 (0)110 (0)130 (+10)160 (+30)
GET/api/v3/advisory/urn:uuid:{advisory_id}/download14 (-1)56 (+2)74 (0)79 (0)94 (+10)99 (+5)
GET/api/v3/advisory?deprecated=Consider&total=true21 (+1)69 (-2)82 (-4)100 (-20)2,500 (+700)3,200 (+300)
GET/api/v3/advisory?limit=1&total=true49 (-1)58 (-10)77 (-23)100 (-20)110 (-1,190)110 (-1,190)
GET/api/v3/advisory?limit=10&sort=ingested:desc&total=true13 (-2)62 (-1)75 (-2)81 (-2)1,800 (-700)2,700 (-600)
GET/api/v3/advisory?offset=100&limit=10&total=true65 (0)86 (+1)95 (-1)100 (0)2,200 (+900)3,100 (-500)
GET/api/v3/advisory?offset={offset}&limit=1240 (-40)370 (-30)580 (-80)650 (-60)800 (-20)800 (-20)
GET/api/v3/advisory?q=CVE-2021-&total=true190 (+20)340 (+40)1,200 (-200)1,800 (-100)2,300 (-400)3,900 (+700)
GET/api/v3/advisory?q=identifier=CVE-2022-0981&total=true48 (-2)87 (-5)110 (0)110 (0)120 (0)140 (0)
GET/api/v3/advisory?q=modified>3 days ago&total=true9 (0)44 (-1)67 (+3)72 (+2)87 (+11)140 (+52)
GET/api/v3/advisory?q=title~openssl&total=true40 (-350)74 (-516)86 (-884)95 (-1,205)410 (-1,090)580 (-920)
GET/api/v3/advisory?sort=modified:desc&total=true17 (-8)65 (-3)77 (-3)84 (-16)2,100 (-700)3,700 (+500)
GET/api/v3/advisory?total=true100 (+4)110 (0)170 (-10)180 (-10)200 (-2,000)2,900 (-200)
vulnerability 7
POST/api/v3/vulnerability/analyze330 (-240)850 (-50)1,100 (-100)1,400 (-400)2,300 (-500)3,400 (-100)
GET/api/v3/vulnerability?offset=100&limit=10&total=true7 (-1)11 (-1)51 (-7)65 (-4)100 (-240)530 (-220)
GET/api/v3/vulnerability?q=base_score>=7.0&total=true9 (0)22 (-2)66 (+1)75 (0)310 (-120)670 (-330)
GET/api/v3/vulnerability?q=base_severity=high&total=true9 (0)23 (+1)67 (0)76 (-1)380 (-410)1,100 (+110)
GET/api/v3/vulnerability?q=cwes=CWE-79&total=true9 (-1)24 (-10)63 (-9)75 (-7)440 (+70)950 (+420)
GET/api/v3/vulnerability?sort=base_score:desc&total=true490 (-20)600 (-30)850 (-150)1,200 (0)1,800 (-200)2,500 (-200)
GET/api/v3/vulnerability?total=true9 (0)22 (-8)61 (-8)70 (-4)460 (+210)610 (-10)
purl 15
GET/api/v3/purl/base/{purl}23 (-12)61 (-5)77 (-53)190 (-20)280 (-10)300 (-100)
GET/api/v3/purl/base?q=namespace=redhat&total=true46 (-1)74 (-12)98 (-1)100 (0)120 (-30)740 (-360)
GET/api/v3/purl/base?q=type=rpm&total=true47 (0)77 (-8)97 (-2)100 (0)110 (-10)120 (-10)
GET/api/v3/purl/base?sort=name:asc&total=true190 (-10)220 (-10)250 (-30)300 (-20)350 (-40)420 (-10)
GET/api/v3/purl/base?total=true46 (-1)72 (-10)95 (-3)100 (0)110 (-10)120 (-160)
POST/api/v3/purl/recommend220 (0)260 (-10)320 (-10)340 (-20)410 (-90)610 (-150)
GET/api/v3/purl/{purl_id}74 (-2)95 (0)120 (-10)160 (-10)200 (0)260 (-120)
GET/api/v3/purl?offset=100&limit=10&total=true46 (-1)72 (-9)95 (-5)100 (0)450 (-140)580 (-150)
GET/api/v3/purl?q=curl&total=true17 (-14)55 (-7)69 (-5)76 (-9)1,400 (+300)1,600 (+200)
GET/api/v3/purl?q=license~GPLv3+...&sort=name:desc&total=true15 (-10)54 (-3)64 (-4)68 (-7)80 (-3)87 (-6)
GET/api/v3/purl?q=name=curl&total=true9 (0)43 (-3)62 (+1)70 (-2)190 (-10)390 (+120)
GET/api/v3/purl?q=purl:namespace=redhat&total=true9 (-1)44 (-9)61 (-1)68 (0)2,900 (-100)3,600 (+200)
GET/api/v3/purl?q=purl:ty=rpm&total=true8 (-2)46 (-4)62 (0)71 (+4)2,900 (-500)3,400 (-300)
GET/api/v3/purl?sort=purl:name:asc&total=true10 (0)50 (+1)62 (0)73 (+4)460 (-120)680 (-110)
GET/api/v3/purl?total=true8 (-1)37 (-10)57 (-5)62 (-8)300 (+50)700 (+130)
license 9
GET/api/v3/license/spdx/license/{license_id}43 (0)44 (0)45 (0)46 (0)57 (0)71 (0)
GET/api/v3/license/spdx/license?q=apache&total=true3 (0)4 (0)5 (-1)6 (0)8 (0)30 (+1)
GET/api/v3/license/spdx/license?q=gpl&total=true43 (0)44 (0)45 (0)46 (0)56 (-2)73 (0)
GET/api/v3/license/spdx/license?total=true43 (0)44 (0)45 (0)46 (0)53 (-5)77 (+6)
GET/api/v3/license?limit=10&sort=license:asc&total=true22 (+1)58 (-1)74 (-3)81 (-1)91 (-3)130 (-50)
GET/api/v3/license?q=ASL&sort=license:desc&total=true16 (-2)52 (0)69 (+1)76 (0)83 (-3)94 (-6)
GET/api/v3/license?q=license~Apache&total=true12 (-2)49 (-1)63 (0)72 (0)80 (-1)100 (-40)
GET/api/v3/license?q=license~GPL&total=true12 (-1)46 (-3)63 (+1)72 (+1)79 (-2)100 (+1)
GET/api/v3/license?total=true57 (-6)90 (-7)110 (0)120 (0)130 (0)170 (-70)
analysis 3
GET/api/v3/analysis/component/{component}6 (0)8 (0)62 (-3)69 (-2)75 (-3)100 (-70)
GET/api/v3/analysis/latest/component/{cpe}6 (0)8 (-1)62 (-3)69 (-1)76 (-3)100 (-70)
GET/api/v3/analysis/status5 (-1)7 (-1)62 (-3)68 (-2)75 (-4)110 (-50)
importer 1
GET/api/v3/importer?total=true4 (-1)6 (-1)57 (-4)66 (-2)73 (-3)110 (-60)
group 3
GET/api/v3/group/sbom?parents=resolve&total=true5 (-1)7 (-1)61 (-2)68 (-1)75 (-1)100 (-10)
GET/api/v3/group/sbom?total=true5 (-1)7 (-1)62 (-2)68 (-1)75 (-2)110 (0)
GET/api/v3/group/sbom?totals=true&total=true5 (-1)7 (-1)62 (-2)68 (-1)75 (-1)110 (0)
labels 3
GET/api/v3/advisory-labels?filter_text=type&limit=10006,000 (+200)6,300 (+100)7,000 (+300)7,200 (+300)7,600 (+100)7,600 (+100)
GET/api/v3/sbom-labels?limit=10&filter_text=&total=true53 (-1)97 (-1)110 (0)120 (0)120 (-10)120 (-10)
GET/api/v3/sbom-labels?total=true54 (-2)110 (+12)120 (0)120 (0)120 (-10)120 (-10)
other 2
GET/.well-known/trustify1 (0)1 (0)3 (0)4 (0)6 (0)62 (+24)
POST/api/v3/ui/extract-sbom-purls1 (0)1 (0)3 (0)4 (0)7 (0)62 (+17)

Failures

No failures recorded.

Exceptions

No exceptions raised in the locustfile.