← All runs

Trustify branch daily perf tests · 2026-10-24 04:58 UTC

Target trustify (release/0.6.z, scale snapshot) · 2026-10-24 04:58:15 UTC → 05:08:14 UTC · Users 10 · Deltas vs previous run (2026-10-23 06:28 UTC, branch_0.6.z_2026-10-23T05-43-18_a575145)

Type branch-daily · Dataset scale-20260317T023702Z · Scenario etc/scenarios/main/full-20260317T023702Z.json5 · Branch release/0.6.z · Commit a575145e4aec · Workflow run

Duration
9m 59s
Total requests
502,989 (-206,892)
Failure rate
0.0%
0 failed requests
Throughput
839.9 req/s (-344.7)
Latency 95%ile
56 ms (+13)
Latency 99%ile
100 ms (+16)
Endpoints
72
0 with failures

Over time

Throughput

Requests and failures per second

Response time

Percentiles over Locust's rolling window, ms

Users

Concurrent simulated users

Load plan

ActionStartedStoppedElapsedUsers
Increasing04:58:1504:58:190m 04s2 → 10
Maintaining04:58:1905:08:119m 52s10 → 10

Top 10 slowest endpoints (95%ile)

#MethodName95%ile (ms)Average (ms)# Requests
1GET/api/v3/advisory-labels?filter_text=type&limit=10006,8005,86895
2GET/api/v3/sbom/{sbom_id}/download3,4003,235104
3GET/api/v3/advisory?q=CVE-2021-&total=true1,900399568
4POST/api/v3/vulnerability/analyze1,500485689
5GET/api/v3/vulnerability?sort=base_score:desc&total=true1,300637331
6GET/api/v3/sbom?limit=10&sort=name:asc&total=true61027482
7GET/api/v3/sbom?sort=ingested:desc&total=true590300110
8GET/api/v3/advisory?offset={offset}&limit=1530266104
9GET/api/v3/sbom?q=name~redhat&total=true50024995
10GET/api/v3/purl?q=curl&total=true49091.3332

Request metrics

MethodName# Requests# FailsFail %Average (ms)Min (ms)Max (ms)Avg size (B)RPSFailures/s
sbom 16
GET/api/v3/sbom/by-package?purl={purl}101 (-33)0 (0)0%101 (+18.6)24.72251,2870.17 (-0.1)0
GET/api/v3/sbom/count-by-package108 (-40)0 (0)0%31.0 (+9.8)5.6987.730.18 (-0.1)0
GET/api/v3/sbom/{sbom_id}111 (-53)0 (0)0%128 (+23.5)60.93152,0150.19 (-0.1)0
GET/api/v3/sbom/{sbom_id}/all-license-ids110 (-42)0 (0)0%28.1 (+8.9)3.5884.420.18 (-0.1)0
GET/api/v3/sbom/{sbom_id}/download104 (-31)0 (0)0%3,235 (+759.5)3,0443,537136,458,6380.17 (-0.1)0
GET/api/v3/sbom/{sbom_id}/license-export110 (-30)0 (0)0%33.5 (+9.8)4.971092350.18 (0)0
GET/api/v3/sbom/{sbom_id}/packages105 (-54)0 (0)0%150 (+69.1)14.639312,6480.18 (-0.1)0
GET/api/v3/sbom/{sbom_id}/related110 (-46)0 (0)0%143 (+46.3)27.230915,3720.18 (-0.1)0
GET/api/v3/sbom?limit=10&sort=name:asc&total=true82 (-47)0 (0)0%274 (+61.6)46.01,19212,1890.14 (-0.1)0
GET/api/v3/sbom?offset=100&limit=10&total=true230 (-86)0 (0)0%176 (+54.2)23.090611,9000.38 (-0.1)0
GET/api/v3/sbom?q=label:type=product&total=true112 (-36)0 (0)0%24.0 (+6.0)2.9279.8220.19 (-0.1)0
GET/api/v3/sbom?q=license~GPL&sort=name:desc&total=true116 (-44)0 (0)0%28.5 (+10.7)4.8288.1220.19 (-0.1)0
GET/api/v3/sbom?q=name~redhat&total=true95 (-44)0 (0)0%249 (+104.8)47.9683220.16 (-0.1)0
GET/api/v3/sbom?q=published>2024-01-01&total=true102 (-32)0 (0)0%166 (+35.6)27.977829,3170.17 (-0.1)0
GET/api/v3/sbom?sort=ingested:desc&total=true110 (-32)0 (0)0%300 (+77.9)55.01,06529,6000.18 (-0.1)0
GET/api/v3/sbom?total=true203 (-88)0 (0)0%159 (+42.1)25.71,07929,3170.34 (-0.1)0
advisory 13
GET/api/v3/advisory/urn:uuid:{advisory_id}543 (-270)0 (0)0%58.0 (+5.8)4.361802,3950.91 (-0.4)0
GET/api/v3/advisory/urn:uuid:{advisory_id}/download538 (-270)0 (0)0%29.0 (+6.7)6.68113178,4230.90 (-0.4)0
GET/api/v3/advisory?deprecated=Consider&total=true572 (-253)0 (0)0%78.7 (+33.4)8.443,20444,0030.96 (-0.4)0
GET/api/v3/advisory?limit=1&total=true104 (-34)0 (0)0%75.9 (+12.0)10.17672,4120.17 (-0.1)0
GET/api/v3/advisory?limit=10&sort=ingested:desc&total=true519 (-292)0 (0)0%71.2 (+28.4)5.122,76920,1930.87 (-0.5)0
GET/api/v3/advisory?offset=100&limit=10&total=true567 (-258)0 (0)0%83.2 (+26.3)7.212,88419,2050.95 (-0.4)0
GET/api/v3/advisory?offset={offset}&limit=1104 (-34)0 (0)0%266 (+36.4)58.39152,0120.17 (-0.1)0
GET/api/v3/advisory?q=CVE-2021-&total=true568 (-229)0 (0)0%399 (+139.1)15.94,08849,4970.95 (-0.4)0
GET/api/v3/advisory?q=identifier=CVE-2022-0981&total=true559 (-257)0 (0)0%60.0 (+6.8)4.721361,9710.93 (-0.4)0
GET/api/v3/advisory?q=modified>3 days ago&total=true575 (-196)0 (0)0%25.1 (+8.0)2.59169220.96 (-0.3)0
GET/api/v3/advisory?q=title~openssl&total=true564 (-258)0 (0)0%54.4 (+22.3)10.1762126,4520.94 (-0.4)0
GET/api/v3/advisory?sort=modified:desc&total=true556 (-306)0 (0)0%70.0 (+26.5)5.972,87838,1280.93 (-0.5)0
GET/api/v3/advisory?total=true564 (-315)0 (0)0%125 (+29.0)7.582,83047,9200.94 (-0.5)0
vulnerability 7
POST/api/v3/vulnerability/analyze689 (-130)0 (0)0%485 (+146.9)2.263,3722,617,6551.15 (-0.2)0
GET/api/v3/vulnerability?offset=100&limit=10&total=true335 (-112)0 (0)0%24.9 (+7.5)2.336939,2550.56 (-0.2)0
GET/api/v3/vulnerability?q=base_score>=7.0&total=true325 (-87)0 (0)0%26.2 (-6.5)2.7459922,1250.54 (-0.1)0
GET/api/v3/vulnerability?q=base_severity=high&total=true314 (-113)0 (0)0%37.2 (+7.7)3.391,51223,9600.52 (-0.2)0
GET/api/v3/vulnerability?q=cwes=CWE-79&total=true344 (-82)0 (0)0%32.3 (+3.6)3.591,02420,9860.57 (-0.1)0
GET/api/v3/vulnerability?sort=base_score:desc&total=true331 (-92)0 (0)0%637 (+11.6)2242,1249,9980.55 (-0.2)0
GET/api/v3/vulnerability?total=true311 (-96)0 (0)0%25.6 (+9.5)3.5258421,9490.52 (-0.2)0
purl 15
GET/api/v3/purl/base/{purl}363 (-139)0 (0)0%50.7 (+13.7)4.7130648,8270.61 (-0.2)0
GET/api/v3/purl/base?q=namespace=redhat&total=true375 (-72)0 (0)0%61.5 (+6.1)3.743992,0800.63 (-0.1)0
GET/api/v3/purl/base?q=type=rpm&total=true371 (-112)0 (0)0%58.2 (+3.4)4.191202,0800.62 (-0.2)0
GET/api/v3/purl/base?sort=name:asc&total=true338 (-150)0 (0)0%200 (+51.2)71.54172,9430.56 (-0.2)0
GET/api/v3/purl/base?total=true361 (-116)0 (0)0%59.6 (+3.3)2.382352,4500.60 (-0.2)0
POST/api/v3/purl/recommend1,068 (-361)0 (0)0%227 (+55.4)39.66862,7471.78 (-0.6)0
GET/api/v3/purl/{purl_id}343 (-169)0 (0)0%78.0 (+27.2)17.33025310.57 (-0.3)0
GET/api/v3/purl?offset=100&limit=10&total=true399 (-99)0 (0)0%62.7 (+5.6)2.227714,1400.67 (-0.2)0
GET/api/v3/purl?q=curl&total=true332 (-147)0 (0)0%91.3 (+49.1)2.913,79910,0710.55 (-0.2)0
GET/api/v3/purl?q=license~GPLv3+...&sort=name:desc&total=true368 (-106)0 (0)0%32.4 (+8.0)2.3499.9220.61 (-0.2)0
GET/api/v3/purl?q=name=curl&total=true358 (-143)0 (0)0%29.1 (+8.0)2.2726512,0840.60 (-0.2)0
GET/api/v3/purl?q=purl:namespace=redhat&total=true371 (-121)0 (0)0%96.9 (+32.7)2.433,76110,2740.62 (-0.2)0
GET/api/v3/purl?q=purl:ty=rpm&total=true352 (-123)0 (0)0%92.4 (+33.8)2.363,41310,1910.59 (-0.2)0
GET/api/v3/purl?sort=purl:name:asc&total=true383 (-49)0 (0)0%35.6 (+10.0)2.0765611,1010.64 (-0.1)0
GET/api/v3/purl?total=true338 (-130)0 (0)0%31.1 (+7.8)2.2994810,1630.56 (-0.2)0
license 9
GET/api/v3/license/spdx/license/{license_id}1,697 (-326)0 (0)0%42.2 (+0.4)1.5588.51,1432.83 (-0.5)0
GET/api/v3/license/spdx/license?q=apache&total=true1,857 (-273)0 (0)0%3.47 (+0.8)1.2150.31653.10 (-0.5)0
GET/api/v3/license/spdx/license?q=gpl&total=true1,799 (-222)0 (0)0%42.4 (+0.6)1.4588.31,9813.00 (-0.4)0
GET/api/v3/license/spdx/license?total=true1,717 (-265)0 (0)0%42.4 (+1.2)1.2395.71,5252.87 (-0.4)0
GET/api/v3/license?limit=10&sort=license:asc&total=true1,757 (-291)0 (0)0%36.0 (+8.1)4.901644252.93 (-0.5)0
GET/api/v3/license?q=ASL&sort=license:desc&total=true1,839 (-232)0 (0)0%32.7 (+8.6)4.80313223.07 (-0.4)0
GET/api/v3/license?q=license~Apache&total=true1,731 (-385)0 (0)0%27.8 (+6.3)2.931641202.89 (-0.6)0
GET/api/v3/license?q=license~GPL&total=true1,811 (-229)0 (0)0%27.9 (+6.5)2.75167923.02 (-0.4)0
GET/api/v3/license?total=true1,848 (-221)0 (0)0%71.2 (+7.6)8.913141,1013.09 (-0.4)0
analysis 3
GET/api/v3/analysis/component/{component}12,587 (-7,713)0 (0)0%14.6 (+5.5)1.441002521.02 (-12.9)0
GET/api/v3/analysis/latest/component/{cpe}12,589 (-7,787)0 (0)0%15.4 (+6.0)1.731032521.02 (-13.0)0
GET/api/v3/analysis/status12,642 (-7,780)0 (0)0%14.4 (+5.5)1.3899.010321.11 (-13.0)0
importer 1
GET/api/v3/importer?total=true46,912 (-27,079)0 (0)0%11.5 (+4.2)1.26102278.34 (-45.1)0
group 3
GET/api/v3/group/sbom?parents=resolve&total=true12,966 (-7,829)0 (0)0%14.5 (+5.7)1.4598.23821.65 (-13.0)0
GET/api/v3/group/sbom?total=true12,744 (-7,868)0 (0)0%14.2 (+5.5)1.5695.62221.28 (-13.1)0
GET/api/v3/group/sbom?totals=true&total=true12,622 (-8,117)0 (0)0%14.5 (+5.4)1.5097.82221.08 (-13.5)0
labels 3
GET/api/v3/advisory-labels?filter_text=type&limit=100095 (-52)0 (0)0%5,868 (+2,077.7)4,7847,489600.16 (-0.1)0
GET/api/v3/sbom-labels?limit=10&filter_text=&total=true127 (-26)0 (0)0%67.5 (+6.0)36.11391,0650.21 (0)0
GET/api/v3/sbom-labels?total=true122 (-16)0 (0)0%70.5 (+3.8)11.01311,0650.20 (0)0
other 2
GET/.well-known/trustify173,060 (-61,352)0 (0)0%1.44 (+0.4)0.7947.1886288.99 (-102.2)0
POST/api/v3/ui/extract-sbom-purls173,456 (-62,370)0 (0)0%1.61 (+0.4)0.8544.945289.65 (-103.9)0

Response time metrics (ms)

MethodName50%ile75%ile90%ile95%ile99%ile100%ile
sbom 16
GET/api/v3/sbom/by-package?purl={purl}110 (+45)130 (+20)140 (+20)140 (+10)220 (+80)230 (+50)
GET/api/v3/sbom/count-by-package11 (+3)58 (+19)73 (+10)79 (+12)87 (+14)88 (+3)
GET/api/v3/sbom/{sbom_id}130 (+20)150 (+20)210 (+70)230 (+80)250 (+40)320 (+110)
GET/api/v3/sbom/{sbom_id}/all-license-ids11 (+5)52 (+15)72 (+9)75 (+9)81 (+8)84 (+6)
GET/api/v3/sbom/{sbom_id}/download3,200 (+700)3,300 (+800)3,400 (+800)3,400 (+800)3,500 (+800)3,500 (+800)
GET/api/v3/sbom/{sbom_id}/license-export15 (+6)60 (+22)76 (+5)86 (+13)98 (+14)110 (-60)
GET/api/v3/sbom/{sbom_id}/packages110 (+44)210 (+115)290 (+100)350 (+110)380 (-120)390 (-180)
GET/api/v3/sbom/{sbom_id}/related130 (+39)190 (+70)240 (+60)290 (+100)310 (+40)310 (+40)
GET/api/v3/sbom?limit=10&sort=name:asc&total=true220 (+40)370 (+90)520 (+120)610 (+140)1,200 (+510)1,200 (+370)
GET/api/v3/sbom?offset=100&limit=10&total=true110 (+16)240 (+70)340 (+80)410 (+110)720 (+250)910 (+290)
GET/api/v3/sbom?q=label:type=product&total=true8 (+2)46 (+14)67 (+7)71 (+4)76 (+1)80 (+5)
GET/api/v3/sbom?q=license~GPL&sort=name:desc&total=true12 (+6)54 (+34)69 (+5)73 (+5)83 (+9)88 (+12)
GET/api/v3/sbom?q=name~redhat&total=true220 (+90)290 (+100)380 (+130)500 (+230)680 (+270)680 (+200)
GET/api/v3/sbom?q=published>2024-01-01&total=true110 (+18)200 (+50)310 (+20)440 (+90)770 (+110)780 (+100)
GET/api/v3/sbom?sort=ingested:desc&total=true220 (+30)440 (+120)530 (+110)590 (+80)1,000 (+290)1,100 (+380)
GET/api/v3/sbom?total=true110 (+19)190 (+70)310 (+80)400 (+70)610 (-80)1,100 (-100)
advisory 13
GET/api/v3/advisory/urn:uuid:{advisory_id}48 (+2)73 (+23)100 (+3)110 (0)120 (+10)180 (+40)
GET/api/v3/advisory/urn:uuid:{advisory_id}/download14 (+5)50 (+14)72 (+8)80 (+9)93 (+11)110 (-10)
GET/api/v3/advisory?deprecated=Consider&total=true20 (+9)69 (+30)82 (+15)94 (+18)2,300 (+1,200)3,200 (+600)
GET/api/v3/advisory?limit=1&total=true51 (+4)85 (+35)100 (+6)110 (0)760 (+280)770 (+20)
GET/api/v3/advisory?limit=10&sort=ingested:desc&total=true15 (+6)63 (+21)77 (+11)83 (+10)1,900 (+1,000)2,800 (+300)
GET/api/v3/advisory?offset=100&limit=10&total=true72 (+36)88 (+10)96 (+7)100 (+3)210 (-10)2,900 (+700)
GET/api/v3/advisory?offset={offset}&limit=1230 (+30)370 (+40)500 (+80)530 (-10)670 (+10)920 (+180)
GET/api/v3/advisory?q=CVE-2021-&total=true190 (+60)330 (+110)1,400 (+700)1,900 (+700)2,300 (+700)4,100 (+1,700)
GET/api/v3/advisory?q=identifier=CVE-2022-0981&total=true48 (+2)82 (+29)110 (+12)110 (+10)120 (0)140 (+10)
GET/api/v3/advisory?q=modified>3 days ago&total=true9 (+3)47 (+32)67 (+8)72 (+6)96 (+16)170 (+72)
GET/api/v3/advisory?q=title~openssl&total=true45 (+30)77 (+21)90 (+16)97 (+16)390 (+290)760 (+480)
GET/api/v3/advisory?sort=modified:desc&total=true16 (+5)67 (+15)78 (+8)95 (+19)1,900 (+940)2,900 (+800)
GET/api/v3/advisory?total=true100 (+10)120 (+20)180 (+50)190 (+20)310 (+10)2,800 (+300)
vulnerability 7
POST/api/v3/vulnerability/analyze64 (-226)860 (+300)1,000 (+240)1,500 (+400)2,400 (+900)3,400 (+200)
GET/api/v3/vulnerability?offset=100&limit=10&total=true8 (+3)22 (+13)60 (+16)70 (+10)400 (+310)690 (+100)
GET/api/v3/vulnerability?q=base_score>=7.0&total=true8 (+2)12 (+1)57 (+2)69 (+1)370 (-530)600 (-600)
GET/api/v3/vulnerability?q=base_severity=high&total=true9 (+3)16 (+7)62 (+21)71 (+6)620 (-380)1,500 (+200)
GET/api/v3/vulnerability?q=cwes=CWE-79&total=true10 (+4)21 (+12)65 (+15)76 (+7)510 (-210)1,000 (-400)
GET/api/v3/vulnerability?sort=base_score:desc&total=true570 (+100)710 (-220)1,000 (-200)1,300 (0)2,000 (+100)2,100 (-200)
GET/api/v3/vulnerability?total=true8 (+2)15 (+6)58 (+17)71 (+8)500 (+320)580 (+260)
purl 15
GET/api/v3/purl/base/{purl}33 (+21)64 (+12)110 (+33)190 (+30)280 (+60)310 (-50)
GET/api/v3/purl/base?q=namespace=redhat&total=true47 (+2)82 (+18)99 (+6)110 (+12)190 (+70)400 (-30)
GET/api/v3/purl/base?q=type=rpm&total=true47 (+2)82 (+13)99 (+6)100 (+1)110 (0)120 (-10)
GET/api/v3/purl/base?sort=name:asc&total=true200 (+60)230 (+40)280 (+70)310 (+80)400 (+140)420 (+110)
GET/api/v3/purl/base?total=true47 (+2)83 (+6)98 (+4)100 (0)120 (+10)230 (+90)
POST/api/v3/purl/recommend230 (+70)270 (+60)320 (+80)340 (+60)440 (+110)690 (+180)
GET/api/v3/purl/{purl_id}77 (+30)96 (+25)110 (+24)160 (+60)190 (+20)300 (-180)
GET/api/v3/purl?offset=100&limit=10&total=true47 (+2)78 (+7)98 (+5)100 (+1)490 (+370)770 (+420)
GET/api/v3/purl?q=curl&total=true30 (+19)58 (+9)78 (+16)490 (+420)1,300 (+450)3,800 (+2,400)
GET/api/v3/purl?q=license~GPLv3+...&sort=name:desc&total=true21 (+11)56 (+11)66 (+6)71 (+8)88 (+15)100 (+23)
GET/api/v3/purl?q=name=curl&total=true10 (+4)50 (+15)64 (+8)72 (+10)180 (+30)270 (+20)
GET/api/v3/purl?q=purl:namespace=redhat&total=true8 (+2)43 (+7)60 (+4)67 (+5)2,900 (+600)3,800 (+900)
GET/api/v3/purl?q=purl:ty=rpm&total=true8 (+2)41 (+5)62 (+5)70 (+7)2,800 (+600)3,400 (+1,100)
GET/api/v3/purl?sort=purl:name:asc&total=true8 (+2)44 (+8)60 (+6)65 (+3)560 (+180)660 (+220)
GET/api/v3/purl?total=true8 (+3)47 (+12)58 (+3)63 (+3)460 (+80)950 (+50)
license 9
GET/api/v3/license/spdx/license/{license_id}43 (0)44 (+1)45 (+1)47 (+1)64 (+2)89 (-6)
GET/api/v3/license/spdx/license?q=apache&total=true3 (+1)4 (+1)6 (+2)7 (+2)14 (0)50 (+2)
GET/api/v3/license/spdx/license?q=gpl&total=true43 (0)44 (+1)46 (+1)47 (+1)64 (+7)88 (+9)
GET/api/v3/license/spdx/license?total=true43 (+1)44 (+1)46 (+2)48 (+3)69 (+14)96 (+16)
GET/api/v3/license?limit=10&sort=license:asc&total=true24 (+11)57 (+8)75 (+11)84 (+11)98 (+9)160 (-100)
GET/api/v3/license?q=ASL&sort=license:desc&total=true19 (+9)53 (+8)71 (+12)77 (+10)96 (+16)310 (+210)
GET/api/v3/license?q=license~Apache&total=true12 (+4)49 (+8)64 (+8)73 (+11)89 (+12)160 (0)
GET/api/v3/license?q=license~GPL&total=true13 (+5)50 (+9)63 (+7)72 (+9)84 (+9)170 (+60)
GET/api/v3/license?total=true61 (+8)95 (+10)110 (+10)120 (+10)130 (0)310 (+150)
analysis 3
GET/api/v3/analysis/component/{component}6 (+2)8 (+3)62 (+51)69 (+7)75 (+4)100 (+7)
GET/api/v3/analysis/latest/component/{cpe}6 (+2)8 (+3)63 (+45)69 (+7)76 (+5)100 (0)
GET/api/v3/analysis/status5 (+1)8 (+3)62 (+52)68 (+7)75 (+5)99 (+4)
importer 1
GET/api/v3/importer?total=true4 (+1)6 (+2)56 (+50)65 (+8)73 (+4)100 (0)
group 3
GET/api/v3/group/sbom?parents=resolve&total=true5 (+2)8 (+3)62 (+52)69 (+8)75 (+4)98 (+3)
GET/api/v3/group/sbom?total=true5 (+1)8 (+3)62 (+54)68 (+8)75 (+5)96 (-4)
GET/api/v3/group/sbom?totals=true&total=true5 (+1)8 (+3)62 (+49)68 (+7)75 (+4)98 (+4)
labels 3
GET/api/v3/advisory-labels?filter_text=type&limit=10005,900 (+2,100)6,100 (+2,100)6,600 (+2,400)6,800 (+2,500)7,500 (+2,900)7,500 (+2,700)
GET/api/v3/sbom-labels?limit=10&filter_text=&total=true52 (+4)82 (-1)120 (+20)120 (+10)130 (+10)140 (+20)
GET/api/v3/sbom-labels?total=true53 (+4)100 (+6)120 (+10)120 (+10)130 (+10)130 (0)
other 2
GET/.well-known/trustify1 (0)1 (0)3 (+1)4 (+1)6 (+2)47 (-3)
POST/api/v3/ui/extract-sbom-purls1 (0)1 (0)3 (+1)4 (+1)6 (+1)45 (+2)

Failures

No failures recorded.

Exceptions

No exceptions raised in the locustfile.