← All runs

Trustify branch daily perf tests · 2026-10-23 06:28 UTC

Target trustify (release/0.6.z, scale snapshot) · 2026-10-23 06:28:27 UTC → 06:38:25 UTC · Users 10 · Deltas vs previous run (2026-10-22 15:51 UTC, branch_0.6.z_2026-10-22T15-03-37_a575145)

Type branch-daily · Dataset scale-20260317T023702Z · Scenario etc/scenarios/main/full-20260317T023702Z.json5 · Branch release/0.6.z · Commit a575145e4aec · Workflow run

Duration
9m 58s
Total requests
709,881 (+205,853)
Failure rate
0.0%
0 failed requests
Throughput
1,184.6 req/s (+344.1)
Latency 95%ile
43 ms (-13)
Latency 99%ile
84 ms (-16)
Endpoints
72
0 with failures

Over time

Throughput

Requests and failures per second

Response time

Percentiles over Locust's rolling window, ms

Users

Concurrent simulated users

Load plan

ActionStartedStoppedElapsedUsers
Increasing06:28:2706:28:310m 04s2 → 10
Maintaining06:28:3106:38:259m 54s10 → 10

Top 10 slowest endpoints (95%ile)

#MethodName95%ile (ms)Average (ms)# Requests
1GET/api/v3/advisory-labels?filter_text=type&limit=10004,3003,791147
2GET/api/v3/sbom/{sbom_id}/download2,6002,476135
3GET/api/v3/vulnerability?sort=base_score:desc&total=true1,300626423
4GET/api/v3/advisory?q=CVE-2021-&total=true1,200260797
5POST/api/v3/vulnerability/analyze1,100338819
6GET/api/v3/advisory?offset={offset}&limit=1540230138
7GET/api/v3/sbom?sort=ingested:desc&total=true510222142
8GET/api/v3/sbom?limit=10&sort=name:asc&total=true470212129
9GET/api/v3/sbom?q=published>2024-01-01&total=true350130134
10GET/api/v3/sbom?total=true330117291

Request metrics

MethodName# Requests# FailsFail %Average (ms)Min (ms)Max (ms)Avg size (B)RPSFailures/s
sbom 16
GET/api/v3/sbom/by-package?purl={purl}134 (+53)0 (0)0%82.6 (-22.3)50.21771,2870.22 (+0.1)0
GET/api/v3/sbom/count-by-package148 (+49)0 (0)0%21.2 (-12.8)2.8085.130.25 (+0.1)0
GET/api/v3/sbom/{sbom_id}164 (+68)0 (0)0%105 (-39.3)24.52122,0150.27 (+0.1)0
GET/api/v3/sbom/{sbom_id}/all-license-ids152 (+70)0 (0)0%19.3 (-4.8)1.9177.620.25 (+0.1)0
GET/api/v3/sbom/{sbom_id}/download135 (+35)0 (0)0%2,476 (-804.2)2,2722,701136,458,6380.23 (+0.1)0
GET/api/v3/sbom/{sbom_id}/license-export140 (+60)0 (0)0%23.7 (-9.8)3.761722340.23 (+0.1)0
GET/api/v3/sbom/{sbom_id}/packages159 (+62)0 (0)0%80.6 (-72.1)11.557012,6480.27 (+0.1)0
GET/api/v3/sbom/{sbom_id}/related156 (+63)0 (0)0%96.5 (-39.4)13.426915,3720.26 (+0.1)0
GET/api/v3/sbom?limit=10&sort=name:asc&total=true129 (+55)0 (0)0%212 (-101.1)26.782612,1890.22 (+0.1)0
GET/api/v3/sbom?offset=100&limit=10&total=true316 (+124)0 (0)0%122 (-100.0)18.661911,9000.53 (+0.2)0
GET/api/v3/sbom?q=label:type=product&total=true148 (+56)0 (0)0%18.0 (-7.8)1.8074.8220.25 (+0.1)0
GET/api/v3/sbom?q=license~GPL&sort=name:desc&total=true160 (+63)0 (0)0%17.8 (-10.0)2.5275.6220.27 (+0.1)0
GET/api/v3/sbom?q=name~redhat&total=true139 (+57)0 (0)0%145 (-436.2)34.7479220.23 (+0.1)0
GET/api/v3/sbom?q=published>2024-01-01&total=true134 (+36)0 (0)0%130 (-54.0)21.367929,3170.22 (+0.1)0
GET/api/v3/sbom?sort=ingested:desc&total=true142 (+44)0 (0)0%222 (-70.6)21.072129,6000.24 (+0.1)0
GET/api/v3/sbom?total=true291 (+96)0 (0)0%117 (-43.8)21.91,20529,3170.49 (+0.2)0
advisory 13
GET/api/v3/advisory/urn:uuid:{advisory_id}813 (+246)0 (0)0%52.2 (-9.4)3.391352,3951.36 (+0.4)0
GET/api/v3/advisory/urn:uuid:{advisory_id}/download808 (+263)0 (0)0%22.3 (-7.5)4.19117178,4231.35 (+0.4)0
GET/api/v3/advisory?deprecated=Consider&total=true825 (+253)0 (0)0%45.3 (-34.8)5.312,58044,0031.38 (+0.4)0
GET/api/v3/advisory?limit=1&total=true138 (+44)0 (0)0%63.8 (+10.0)6.727452,4360.23 (+0.1)0
GET/api/v3/advisory?limit=10&sort=ingested:desc&total=true811 (+213)0 (0)0%42.8 (-20.2)3.982,51820,1931.35 (+0.4)0
GET/api/v3/advisory?offset=100&limit=10&total=true825 (+281)0 (0)0%56.9 (-36.6)4.392,22919,2701.38 (+0.5)0
GET/api/v3/advisory?offset={offset}&limit=1138 (+44)0 (0)0%230 (-51.9)50.77381,8770.23 (+0.1)0
GET/api/v3/advisory?q=CVE-2021-&total=true797 (+224)0 (0)0%260 (-126.8)7.782,38049,9921.33 (+0.4)0
GET/api/v3/advisory?q=identifier=CVE-2022-0981&total=true816 (+242)0 (0)0%53.2 (-8.9)3.491351,9711.36 (+0.4)0
GET/api/v3/advisory?q=modified>3 days ago&total=true771 (+212)0 (0)0%17.1 (-7.4)2.2798.1221.29 (+0.4)0
GET/api/v3/advisory?q=title~openssl&total=true822 (+255)0 (0)0%32.0 (-19.8)7.62280126,4521.37 (+0.4)0
GET/api/v3/advisory?sort=modified:desc&total=true862 (+300)0 (0)0%43.5 (-31.9)4.632,12038,1281.44 (+0.5)0
GET/api/v3/advisory?total=true879 (+297)0 (0)0%95.7 (-12.7)5.972,45948,2671.47 (+0.5)0
vulnerability 7
POST/api/v3/vulnerability/analyze819 (+102)0 (0)0%338 (-139.4)1.213,2362,843,6141.37 (+0.2)0
GET/api/v3/vulnerability?offset=100&limit=10&total=true447 (+76)0 (0)0%17.5 (-0.2)1.785898,6420.75 (+0.1)0
GET/api/v3/vulnerability?q=base_score>=7.0&total=true412 (+26)0 (0)0%32.7 (+6.4)2.611,16718,1620.69 (0)0
GET/api/v3/vulnerability?q=base_severity=high&total=true427 (+81)0 (0)0%29.5 (-1.2)3.051,33817,8910.71 (+0.1)0
GET/api/v3/vulnerability?q=cwes=CWE-79&total=true426 (+91)0 (0)0%28.7 (-0.5)2.221,41822,2350.71 (+0.2)0
GET/api/v3/vulnerability?sort=base_score:desc&total=true423 (+59)0 (0)0%626 (+64.3)1252,3169,6510.71 (+0.1)0
GET/api/v3/vulnerability?total=true407 (+27)0 (0)0%16.1 (-10.2)2.8532318,6530.68 (0)0
purl 15
GET/api/v3/purl/base/{purl}502 (+123)0 (0)0%37.1 (-8.2)3.8335748,8270.84 (+0.2)0
GET/api/v3/purl/base?q=namespace=redhat&total=true447 (+56)0 (0)0%55.4 (-2.3)2.584322,0800.75 (+0.1)0
GET/api/v3/purl/base?q=type=rpm&total=true483 (+122)0 (0)0%54.8 (-2.4)2.891272,0800.81 (+0.2)0
GET/api/v3/purl/base?sort=name:asc&total=true488 (+92)0 (0)0%148 (-42.4)55.83072,9430.81 (+0.2)0
GET/api/v3/purl/base?total=true477 (+100)0 (0)0%56.3 (+1.2)1.691372,4500.80 (+0.2)0
POST/api/v3/purl/recommend1,429 (+314)0 (0)0%172 (-53.2)27.35072,7472.38 (+0.5)0
GET/api/v3/purl/{purl_id}512 (+153)0 (0)0%50.8 (-23.3)9.684835310.85 (+0.3)0
GET/api/v3/purl?offset=100&limit=10&total=true498 (+113)0 (0)0%57.1 (-3.6)2.203484,7340.83 (+0.2)0
GET/api/v3/purl?q=curl&total=true479 (+106)0 (0)0%42.2 (-15.4)3.211,44311,7140.80 (+0.2)0
GET/api/v3/purl?q=license~GPLv3+...&sort=name:desc&total=true474 (+120)0 (0)0%24.4 (-5.1)1.5076.5220.79 (+0.2)0
GET/api/v3/purl?q=name=curl&total=true501 (+130)0 (0)0%21.1 (-4.5)1.7925312,0840.84 (+0.2)0
GET/api/v3/purl?q=purl:namespace=redhat&total=true492 (+106)0 (0)0%64.1 (-29.5)1.792,93713,7700.82 (+0.2)0
GET/api/v3/purl?q=purl:ty=rpm&total=true475 (+115)0 (0)0%58.6 (-37.2)1.772,34213,7700.79 (+0.2)0
GET/api/v3/purl?sort=purl:name:asc&total=true432 (+77)0 (0)0%25.6 (-10.8)1.5444411,1010.72 (+0.1)0
GET/api/v3/purl?total=true468 (+74)0 (0)0%23.3 (-1.5)1.638999,8770.78 (+0.1)0
license 9
GET/api/v3/license/spdx/license/{license_id}2,023 (+193)0 (0)0%41.7 (-0.3)0.8995.01,1433.38 (+0.3)0
GET/api/v3/license/spdx/license?q=apache&total=true2,130 (+334)0 (0)0%2.66 (-0.5)0.8948.41653.55 (+0.6)0
GET/api/v3/license/spdx/license?q=gpl&total=true2,021 (+232)0 (0)0%41.9 (0)1.1779.01,9813.37 (+0.4)0
GET/api/v3/license/spdx/license?total=true1,982 (+97)0 (0)0%41.2 (-0.4)1.0880.31,5253.31 (+0.2)0
GET/api/v3/license?limit=10&sort=license:asc&total=true2,048 (+200)0 (0)0%27.9 (-7.4)4.192654253.42 (+0.3)0
GET/api/v3/license?q=ASL&sort=license:desc&total=true2,071 (+235)0 (0)0%24.2 (-6.3)2.72103223.46 (+0.4)0
GET/api/v3/license?q=license~Apache&total=true2,116 (+258)0 (0)0%21.5 (-5.5)2.251651203.53 (+0.4)0
GET/api/v3/license?q=license~GPL&total=true2,040 (+279)0 (0)0%21.4 (-5.0)2.12109923.40 (+0.5)0
GET/api/v3/license?total=true2,069 (+186)0 (0)0%63.5 (-4.1)6.171621,1013.45 (+0.3)0
analysis 3
GET/api/v3/analysis/component/{component}20,300 (+7,178)0 (0)0%9.13 (-5.3)1.1193.12533.87 (+12.0)0
GET/api/v3/analysis/latest/component/{cpe}20,376 (+7,396)0 (0)0%9.39 (-5.2)1.161012534.00 (+12.4)0
GET/api/v3/analysis/status20,422 (+7,622)0 (0)0%8.90 (-5.1)0.9295.110334.08 (+12.7)0
importer 1
GET/api/v3/importer?total=true73,991 (+27,575)0 (0)0%7.29 (-4.4)0.8799.82123.47 (+46.1)0
group 3
GET/api/v3/group/sbom?parents=resolve&total=true20,795 (+7,572)0 (0)0%8.85 (-5.1)1.0794.73834.70 (+12.6)0
GET/api/v3/group/sbom?total=true20,612 (+7,511)0 (0)0%8.66 (-5.5)1.071012234.40 (+12.5)0
GET/api/v3/group/sbom?totals=true&total=true20,739 (+7,693)0 (0)0%9.11 (-4.8)1.0693.92234.61 (+12.9)0
labels 3
GET/api/v3/advisory-labels?filter_text=type&limit=1000147 (+52)0 (0)0%3,791 (-2,176.3)3,0484,786600.25 (+0.1)0
GET/api/v3/sbom-labels?limit=10&filter_text=&total=true153 (+45)0 (0)0%61.5 (-9.6)5.461191,0650.26 (+0.1)0
GET/api/v3/sbom-labels?total=true138 (+58)0 (0)0%66.7 (-3.7)44.41311,0650.23 (+0.1)0
other 2
GET/.well-known/trustify234,412 (+61,842)0 (0)0%1.04 (-0.4)0.5550.1886391.16 (+103.4)0
POST/api/v3/ui/extract-sbom-purls235,826 (+63,167)0 (0)0%1.21 (-0.5)0.6142.645393.52 (+105.6)0

Response time metrics (ms)

MethodName50%ile75%ile90%ile95%ile99%ile100%ile
sbom 16
GET/api/v3/sbom/by-package?purl={purl}65 (-55)110 (-20)120 (-20)130 (-10)140 (-80)180 (-40)
GET/api/v3/sbom/count-by-package8 (-7)39 (-21)63 (-14)67 (-12)73 (-19)85 (-7)
GET/api/v3/sbom/{sbom_id}110 (-30)130 (-20)140 (-70)150 (-80)210 (-210)210 (-210)
GET/api/v3/sbom/{sbom_id}/all-license-ids6 (-2)37 (-9)63 (-5)66 (-7)73 (-7)78 (-2)
GET/api/v3/sbom/{sbom_id}/download2,500 (-800)2,500 (-800)2,600 (-800)2,600 (-900)2,700 (-1,000)2,700 (-1,000)
GET/api/v3/sbom/{sbom_id}/license-export9 (-4)38 (-29)71 (-8)73 (-11)84 (-2)170 (+84)
GET/api/v3/sbom/{sbom_id}/packages66 (-44)95 (-135)190 (-100)240 (-60)500 (+100)570 (+170)
GET/api/v3/sbom/{sbom_id}/related91 (-19)120 (-60)180 (-30)190 (-60)270 (-120)270 (-120)
GET/api/v3/sbom?limit=10&sort=name:asc&total=true180 (-110)280 (-110)400 (-90)470 (-220)690 (-90)830 (+50)
GET/api/v3/sbom?offset=100&limit=10&total=true94 (-86)170 (-130)260 (-150)300 (-280)470 (-400)620 (-300)
GET/api/v3/sbom?q=label:type=product&total=true6 (-3)32 (-12)60 (-10)67 (-11)75 (-15)75 (-15)
GET/api/v3/sbom?q=license~GPL&sort=name:desc&total=true6 (-4)20 (-28)64 (-8)68 (-6)74 (-6)76 (-4)
GET/api/v3/sbom?q=name~redhat&total=true130 (-590)190 (-810)250 (-1,050)270 (-1,030)410 (-1,190)480 (-1,120)
GET/api/v3/sbom?q=published>2024-01-01&total=true92 (-28)150 (-60)290 (-80)350 (-160)660 (-440)680 (-420)
GET/api/v3/sbom?sort=ingested:desc&total=true190 (-20)320 (-160)420 (-140)510 (-160)710 (-160)720 (-150)
GET/api/v3/sbom?total=true91 (-19)120 (-70)230 (-70)330 (-30)690 (-170)1,200 (+290)
advisory 13
GET/api/v3/advisory/urn:uuid:{advisory_id}46 (-2)50 (-37)97 (-13)110 (0)110 (-20)140 (-20)
GET/api/v3/advisory/urn:uuid:{advisory_id}/download9 (-5)36 (-20)64 (-10)71 (-8)82 (-12)120 (+21)
GET/api/v3/advisory?deprecated=Consider&total=true11 (-10)39 (-30)67 (-15)76 (-24)1,100 (-1,400)2,600 (-600)
GET/api/v3/advisory?limit=1&total=true47 (-2)50 (-8)94 (+17)110 (+10)480 (+370)750 (+640)
GET/api/v3/advisory?limit=10&sort=ingested:desc&total=true9 (-4)42 (-20)66 (-9)73 (-8)900 (-900)2,500 (-200)
GET/api/v3/advisory?offset=100&limit=10&total=true36 (-29)78 (-8)89 (-6)97 (-3)220 (-1,980)2,200 (-900)
GET/api/v3/advisory?offset={offset}&limit=1200 (-40)330 (-40)420 (-160)540 (-110)660 (-140)740 (-60)
GET/api/v3/advisory?q=CVE-2021-&total=true130 (-60)220 (-120)700 (-500)1,200 (-600)1,600 (-700)2,400 (-1,500)
GET/api/v3/advisory?q=identifier=CVE-2022-0981&total=true46 (-2)53 (-34)98 (-12)100 (-10)120 (0)130 (-10)
GET/api/v3/advisory?q=modified>3 days ago&total=true6 (-3)15 (-29)59 (-8)66 (-6)80 (-7)98 (-42)
GET/api/v3/advisory?q=title~openssl&total=true15 (-25)56 (-18)74 (-12)81 (-14)100 (-310)280 (-300)
GET/api/v3/advisory?sort=modified:desc&total=true11 (-6)52 (-13)70 (-7)76 (-8)960 (-1,140)2,100 (-1,600)
GET/api/v3/advisory?total=true90 (-10)100 (-10)130 (-40)170 (-10)300 (+100)2,500 (-400)
vulnerability 7
POST/api/v3/vulnerability/analyze290 (-40)560 (-290)760 (-340)1,100 (-300)1,500 (-800)3,200 (-200)
GET/api/v3/vulnerability?offset=100&limit=10&total=true5 (-2)9 (-2)44 (-7)60 (-5)90 (-10)590 (+60)
GET/api/v3/vulnerability?q=base_score>=7.0&total=true6 (-3)11 (-11)55 (-11)68 (-7)900 (+590)1,200 (+530)
GET/api/v3/vulnerability?q=base_severity=high&total=true6 (-3)9 (-14)41 (-26)65 (-11)1,000 (+620)1,300 (+200)
GET/api/v3/vulnerability?q=cwes=CWE-79&total=true6 (-3)9 (-15)50 (-13)69 (-6)720 (+280)1,400 (+450)
GET/api/v3/vulnerability?sort=base_score:desc&total=true470 (-20)930 (+330)1,200 (+350)1,300 (+100)1,900 (+100)2,300 (-200)
GET/api/v3/vulnerability?total=true6 (-3)9 (-13)41 (-20)63 (-7)180 (-280)320 (-290)
purl 15
GET/api/v3/purl/base/{purl}12 (-11)52 (-9)77 (0)160 (-30)220 (-60)360 (+60)
GET/api/v3/purl/base?q=namespace=redhat&total=true45 (-1)64 (-10)93 (-5)98 (-2)120 (0)430 (-310)
GET/api/v3/purl/base?q=type=rpm&total=true45 (-2)69 (-8)93 (-4)99 (-1)110 (0)130 (+10)
GET/api/v3/purl/base?sort=name:asc&total=true140 (-50)190 (-30)210 (-40)230 (-70)260 (-90)310 (-110)
GET/api/v3/purl/base?total=true45 (-1)77 (+5)94 (-1)100 (0)110 (0)140 (+20)
POST/api/v3/purl/recommend160 (-60)210 (-50)240 (-80)280 (-60)330 (-80)510 (-100)
GET/api/v3/purl/{purl_id}47 (-27)71 (-24)86 (-34)100 (-60)170 (-30)480 (+220)
GET/api/v3/purl?offset=100&limit=10&total=true45 (-1)71 (-1)93 (-2)99 (-1)120 (-330)350 (-230)
GET/api/v3/purl?q=curl&total=true11 (-6)49 (-6)62 (-7)70 (-6)850 (-550)1,400 (-200)
GET/api/v3/purl?q=license~GPLv3+...&sort=name:desc&total=true10 (-5)45 (-9)60 (-4)63 (-5)73 (-7)77 (-10)
GET/api/v3/purl?q=name=curl&total=true6 (-3)35 (-8)56 (-6)62 (-8)150 (-40)250 (-140)
GET/api/v3/purl?q=purl:namespace=redhat&total=true6 (-3)36 (-8)56 (-5)62 (-6)2,300 (-600)2,900 (-700)
GET/api/v3/purl?q=purl:ty=rpm&total=true6 (-2)36 (-10)57 (-5)63 (-8)2,200 (-700)2,300 (-1,100)
GET/api/v3/purl?sort=purl:name:asc&total=true6 (-4)36 (-14)54 (-8)62 (-11)380 (-80)440 (-240)
GET/api/v3/purl?total=true5 (-3)35 (-2)55 (-2)60 (-2)380 (+80)900 (+200)
license 9
GET/api/v3/license/spdx/license/{license_id}43 (0)43 (-1)44 (-1)46 (0)62 (+5)95 (+24)
GET/api/v3/license/spdx/license?q=apache&total=true2 (-1)3 (-1)4 (-1)5 (-1)14 (+6)48 (+18)
GET/api/v3/license/spdx/license?q=gpl&total=true43 (0)43 (-1)45 (0)46 (0)57 (+1)79 (+6)
GET/api/v3/license/spdx/license?total=true42 (-1)43 (-1)44 (-1)45 (-1)55 (+2)80 (+3)
GET/api/v3/license?limit=10&sort=license:asc&total=true13 (-9)49 (-9)64 (-10)73 (-8)89 (-2)260 (+130)
GET/api/v3/license?q=ASL&sort=license:desc&total=true10 (-6)45 (-7)59 (-10)67 (-9)80 (-3)100 (+6)
GET/api/v3/license?q=license~Apache&total=true8 (-4)41 (-8)56 (-7)62 (-10)77 (-3)160 (+60)
GET/api/v3/license?q=license~GPL&total=true8 (-4)41 (-5)56 (-7)63 (-9)75 (-4)110 (+10)
GET/api/v3/license?total=true53 (-4)85 (-5)100 (-10)110 (-10)130 (0)160 (-10)
analysis 3
GET/api/v3/analysis/component/{component}4 (-2)5 (-3)11 (-51)62 (-7)71 (-4)93 (-7)
GET/api/v3/analysis/latest/component/{cpe}4 (-2)5 (-3)18 (-44)62 (-7)71 (-5)100 (0)
GET/api/v3/analysis/status4 (-1)5 (-2)10 (-52)61 (-7)70 (-5)95 (-15)
importer 1
GET/api/v3/importer?total=true3 (-1)4 (-2)6 (-51)57 (-9)69 (-4)100 (-10)
group 3
GET/api/v3/group/sbom?parents=resolve&total=true3 (-2)5 (-2)10 (-51)61 (-7)71 (-4)95 (-5)
GET/api/v3/group/sbom?total=true4 (-1)5 (-2)8 (-54)60 (-8)70 (-5)100 (-10)
GET/api/v3/group/sbom?totals=true&total=true4 (-1)5 (-2)13 (-49)61 (-7)71 (-4)94 (-16)
labels 3
GET/api/v3/advisory-labels?filter_text=type&limit=10003,800 (-2,200)4,000 (-2,300)4,200 (-2,800)4,300 (-2,900)4,600 (-3,000)4,800 (-2,800)
GET/api/v3/sbom-labels?limit=10&filter_text=&total=true48 (-5)83 (-14)100 (-10)110 (-10)120 (0)120 (0)
GET/api/v3/sbom-labels?total=true49 (-5)94 (-16)110 (-10)110 (-10)120 (0)130 (+10)
other 2
GET/.well-known/trustify1 (0)1 (0)2 (-1)3 (-1)4 (-2)50 (-12)
POST/api/v3/ui/extract-sbom-purls1 (0)1 (0)2 (-1)3 (-1)5 (-2)43 (-19)

Failures

No failures recorded.

Exceptions

No exceptions raised in the locustfile.