← All runs

Trustify branch daily perf tests · 2026-10-25 05:40 UTC

Target trustify (release/0.6.z, scale snapshot) · 2026-10-25 05:40:09 UTC → 05:50:08 UTC · Users 10 · Deltas vs previous run (2026-10-24 04:58 UTC, branch_0.6.z_2026-10-24T04-10-37_a575145)

Type branch-daily · Dataset scale-20260317T023702Z · Scenario etc/scenarios/main/full-20260317T023702Z.json5 · Branch release/0.6.z · Commit a575145e4aec · Workflow run

Duration
9m 59s
Total requests
705,749 (+202,760)
Failure rate
0.0%
0 failed requests
Throughput
1,177.3 req/s (+337.3)
Latency 95%ile
43 ms (-13)
Latency 99%ile
84 ms (-16)
Endpoints
72
0 with failures

Over time

Throughput

Requests and failures per second

Response time

Percentiles over Locust's rolling window, ms

Users

Concurrent simulated users

Load plan

ActionStartedStoppedElapsedUsers
Increasing05:40:0905:40:130m 04s2 → 10
Maintaining05:40:1305:50:089m 55s10 → 10

Top 10 slowest endpoints (95%ile)

#MethodName95%ile (ms)Average (ms)# Requests
1GET/api/v3/advisory-labels?filter_text=type&limit=10004,5003,890140
2GET/api/v3/sbom/{sbom_id}/download2,6002,446139
3GET/api/v3/advisory?q=CVE-2021-&total=true1,300281796
4GET/api/v3/vulnerability?sort=base_score:desc&total=true990458526
5POST/api/v3/vulnerability/analyze850312979
6GET/api/v3/advisory?offset={offset}&limit=1640270159
7GET/api/v3/sbom?sort=ingested:desc&total=true590218155
8GET/api/v3/sbom?limit=10&sort=name:asc&total=true570246112
9GET/api/v3/sbom?offset=100&limit=10&total=true410162260
10GET/api/v3/sbom?total=true320123247

Request metrics

MethodName# Requests# FailsFail %Average (ms)Min (ms)Max (ms)Avg size (B)RPSFailures/s
sbom 16
GET/api/v3/sbom/by-package?purl={purl}133 (+32)0 (0)0%87.8 (-13.3)14.81941,2870.22 (+0.1)0
GET/api/v3/sbom/count-by-package120 (+12)0 (0)0%21.8 (-9.1)2.5780.630.20 (0)0
GET/api/v3/sbom/{sbom_id}142 (+31)0 (0)0%104 (-24.5)22.82142,0150.24 (+0.1)0
GET/api/v3/sbom/{sbom_id}/all-license-ids126 (+16)0 (0)0%19.8 (-8.3)2.5785.720.21 (0)0
GET/api/v3/sbom/{sbom_id}/download139 (+35)0 (0)0%2,446 (-789.5)2,2482,701136,458,6380.23 (+0.1)0
GET/api/v3/sbom/{sbom_id}/license-export116 (+6)0 (0)0%26.3 (-7.2)4.4381.22340.19 (0)0
GET/api/v3/sbom/{sbom_id}/packages117 (+12)0 (0)0%114 (-35.5)11.738812,6480.20 (0)0
GET/api/v3/sbom/{sbom_id}/related166 (+56)0 (0)0%86.9 (-55.9)15.548815,3720.28 (+0.1)0
GET/api/v3/sbom?limit=10&sort=name:asc&total=true112 (+30)0 (0)0%246 (-27.7)34.31,05512,1890.19 (0)0
GET/api/v3/sbom?offset=100&limit=10&total=true260 (+30)0 (0)0%162 (-13.7)21.994111,9410.43 (0)0
GET/api/v3/sbom?q=label:type=product&total=true128 (+16)0 (0)0%18.8 (-5.2)1.8686.3220.21 (0)0
GET/api/v3/sbom?q=license~GPL&sort=name:desc&total=true127 (+11)0 (0)0%19.6 (-8.9)2.5078.9220.21 (0)0
GET/api/v3/sbom?q=name~redhat&total=true144 (+49)0 (0)0%151 (-98.1)37.0400220.24 (+0.1)0
GET/api/v3/sbom?q=published>2024-01-01&total=true130 (+28)0 (0)0%129 (-36.5)25.952829,3170.22 (0)0
GET/api/v3/sbom?sort=ingested:desc&total=true155 (+45)0 (0)0%218 (-81.7)21.268229,6000.26 (+0.1)0
GET/api/v3/sbom?total=true247 (+44)0 (0)0%123 (-36.5)22.281629,3170.41 (+0.1)0
advisory 13
GET/api/v3/advisory/urn:uuid:{advisory_id}728 (+185)0 (0)0%56.0 (-2.1)3.541262,3951.21 (+0.3)0
GET/api/v3/advisory/urn:uuid:{advisory_id}/download748 (+210)0 (0)0%19.6 (-9.4)4.0486.3178,4231.25 (+0.3)0
GET/api/v3/advisory?deprecated=Consider&total=true741 (+169)0 (0)0%53.8 (-24.8)5.443,40844,0031.24 (+0.3)0
GET/api/v3/advisory?limit=1&total=true159 (+55)0 (0)0%63.1 (-12.8)10.39852,2770.27 (+0.1)0
GET/api/v3/advisory?limit=10&sort=ingested:desc&total=true762 (+243)0 (0)0%49.1 (-22.2)3.493,17120,1931.27 (+0.4)0
GET/api/v3/advisory?offset=100&limit=10&total=true770 (+203)0 (0)0%62.4 (-20.8)4.852,72719,4221.28 (+0.3)0
GET/api/v3/advisory?offset={offset}&limit=1159 (+55)0 (0)0%270 (+3.8)30.89782,0660.27 (+0.1)0
GET/api/v3/advisory?q=CVE-2021-&total=true796 (+228)0 (0)0%281 (-118.7)6.653,18949,7901.33 (+0.4)0
GET/api/v3/advisory?q=identifier=CVE-2022-0981&total=true765 (+206)0 (0)0%55.2 (-4.8)3.791241,9711.28 (+0.3)0
GET/api/v3/advisory?q=modified>3 days ago&total=true771 (+196)0 (0)0%16.6 (-8.5)1.9380.4221.29 (+0.3)0
GET/api/v3/advisory?q=title~openssl&total=true778 (+214)0 (0)0%34.0 (-20.4)6.96417126,4521.30 (+0.4)0
GET/api/v3/advisory?sort=modified:desc&total=true772 (+216)0 (0)0%52.8 (-17.2)5.152,71238,1281.29 (+0.4)0
GET/api/v3/advisory?total=true759 (+195)0 (0)0%87.0 (-37.7)5.972,58749,1651.27 (+0.3)0
vulnerability 7
POST/api/v3/vulnerability/analyze979 (+290)0 (0)0%312 (-173.8)1.372,8812,732,9451.63 (+0.5)0
GET/api/v3/vulnerability?offset=100&limit=10&total=true492 (+157)0 (0)0%16.9 (-8.1)1.8931410,7020.82 (+0.3)0
GET/api/v3/vulnerability?q=base_score>=7.0&total=true507 (+182)0 (0)0%19.5 (-6.7)2.4573118,4150.85 (+0.3)0
GET/api/v3/vulnerability?q=base_severity=high&total=true482 (+168)0 (0)0%25.4 (-11.7)2.311,00318,5460.80 (+0.3)0
GET/api/v3/vulnerability?q=cwes=CWE-79&total=true521 (+177)0 (0)0%20.0 (-12.3)2.6669320,9720.87 (+0.3)0
GET/api/v3/vulnerability?sort=base_score:desc&total=true526 (+195)0 (0)0%458 (-178.9)91.51,72210,0190.88 (+0.3)0
GET/api/v3/vulnerability?total=true512 (+201)0 (0)0%13.5 (-12.1)2.5117918,1670.85 (+0.3)0
purl 15
GET/api/v3/purl/base/{purl}449 (+86)0 (0)0%41.2 (-9.5)3.9838848,8270.75 (+0.1)0
GET/api/v3/purl/base?q=namespace=redhat&total=true473 (+98)0 (0)0%58.9 (-2.6)2.466242,0800.79 (+0.2)0
GET/api/v3/purl/base?q=type=rpm&total=true487 (+116)0 (0)0%53.8 (-4.4)2.341412,0800.81 (+0.2)0
GET/api/v3/purl/base?sort=name:asc&total=true473 (+135)0 (0)0%156 (-43.8)31.75112,9430.79 (+0.2)0
GET/api/v3/purl/base?total=true467 (+106)0 (0)0%53.6 (-6.0)2.382302,4500.78 (+0.2)0
POST/api/v3/purl/recommend1,379 (+311)0 (0)0%178 (-49.4)49.25322,7472.30 (+0.5)0
GET/api/v3/purl/{purl_id}427 (+84)0 (0)0%57.8 (-20.2)11.01875310.71 (+0.1)0
GET/api/v3/purl?offset=100&limit=10&total=true450 (+51)0 (0)0%56.6 (-6.1)2.335884,7340.75 (+0.1)0
GET/api/v3/purl?q=curl&total=true406 (+74)0 (0)0%47.4 (-43.9)3.771,36611,7140.68 (+0.1)0
GET/api/v3/purl?q=license~GPLv3+...&sort=name:desc&total=true458 (+90)0 (0)0%26.3 (-6.2)1.75106220.76 (+0.1)0
GET/api/v3/purl?q=name=curl&total=true453 (+95)0 (0)0%24.8 (-4.3)1.8326312,0840.76 (+0.2)0
GET/api/v3/purl?q=purl:namespace=redhat&total=true492 (+121)0 (0)0%68.0 (-28.9)1.912,87813,7700.82 (+0.2)0
GET/api/v3/purl?q=purl:ty=rpm&total=true512 (+160)0 (0)0%53.8 (-38.6)1.972,47113,7700.85 (+0.3)0
GET/api/v3/purl?sort=purl:name:asc&total=true511 (+128)0 (0)0%26.3 (-9.3)1.7763611,1010.85 (+0.2)0
GET/api/v3/purl?total=true452 (+114)0 (0)0%21.3 (-9.8)1.585099,8770.75 (+0.2)0
license 9
GET/api/v3/license/spdx/license/{license_id}1,961 (+264)0 (0)0%41.7 (-0.4)1.0679.51,1433.27 (+0.4)0
GET/api/v3/license/spdx/license?q=apache&total=true2,011 (+154)0 (0)0%2.71 (-0.8)0.8843.01653.35 (+0.3)0
GET/api/v3/license/spdx/license?q=gpl&total=true2,070 (+271)0 (0)0%41.6 (-0.9)1.1985.01,9813.45 (+0.4)0
GET/api/v3/license/spdx/license?total=true1,984 (+267)0 (0)0%41.9 (-0.5)0.9687.11,5253.31 (+0.4)0
GET/api/v3/license?limit=10&sort=license:asc&total=true1,989 (+232)0 (0)0%29.7 (-6.3)4.321544253.32 (+0.4)0
GET/api/v3/license?q=ASL&sort=license:desc&total=true2,027 (+188)0 (0)0%25.3 (-7.5)2.69106223.38 (+0.3)0
GET/api/v3/license?q=license~Apache&total=true2,053 (+322)0 (0)0%22.1 (-5.7)2.351881203.42 (+0.5)0
GET/api/v3/license?q=license~GPL&total=true2,005 (+194)0 (0)0%22.5 (-5.4)2.26127923.34 (+0.3)0
GET/api/v3/license?total=true1,971 (+123)0 (0)0%64.7 (-6.4)5.642641,1013.29 (+0.2)0
analysis 3
GET/api/v3/analysis/component/{component}19,490 (+6,903)0 (0)0%9.53 (-5.1)1.121042532.51 (+11.5)0
GET/api/v3/analysis/latest/component/{cpe}19,395 (+6,806)0 (0)0%9.77 (-5.6)1.161012532.35 (+11.3)0
GET/api/v3/analysis/status19,588 (+6,946)0 (0)0%9.39 (-5.0)1.0099.210332.67 (+11.6)0
importer 1
GET/api/v3/importer?total=true70,725 (+23,813)0 (0)0%7.66 (-3.9)0.851022117.98 (+39.6)0
group 3
GET/api/v3/group/sbom?parents=resolve&total=true19,682 (+6,716)0 (0)0%9.48 (-5.1)1.0696.93832.83 (+11.2)0
GET/api/v3/group/sbom?total=true19,713 (+6,969)0 (0)0%9.24 (-4.9)1.041042232.88 (+11.6)0
GET/api/v3/group/sbom?totals=true&total=true19,637 (+7,015)0 (0)0%9.37 (-5.1)1.1095.12232.76 (+11.7)0
labels 3
GET/api/v3/advisory-labels?filter_text=type&limit=1000140 (+45)0 (0)0%3,890 (-1,978.0)2,9185,094600.23 (+0.1)0
GET/api/v3/sbom-labels?limit=10&filter_text=&total=true134 (+7)0 (0)0%63.7 (-3.8)11.31191,0650.22 (0)0
GET/api/v3/sbom-labels?total=true117 (-5)0 (0)0%62.9 (-7.5)7.391171,0650.20 (0)0
other 2
GET/.well-known/trustify238,287 (+65,227)0 (0)0%1.03 (-0.4)0.5543.3886397.48 (+108.5)0
POST/api/v3/ui/extract-sbom-purls237,792 (+64,336)0 (0)0%1.20 (-0.4)0.6238.145396.66 (+107.0)0

Response time metrics (ms)

MethodName50%ile75%ile90%ile95%ile99%ile100%ile
sbom 16
GET/api/v3/sbom/by-package?purl={purl}87 (-23)120 (-10)130 (-10)130 (-10)180 (-40)190 (-40)
GET/api/v3/sbom/count-by-package9 (-2)37 (-21)60 (-13)73 (-6)80 (-7)81 (-7)
GET/api/v3/sbom/{sbom_id}110 (-20)130 (-20)140 (-70)200 (-30)210 (-40)210 (-110)
GET/api/v3/sbom/{sbom_id}/all-license-ids6 (-5)36 (-16)61 (-11)70 (-5)81 (0)86 (+2)
GET/api/v3/sbom/{sbom_id}/download2,500 (-700)2,500 (-800)2,500 (-900)2,600 (-800)2,600 (-900)2,700 (-800)
GET/api/v3/sbom/{sbom_id}/license-export11 (-4)47 (-13)71 (-5)73 (-13)77 (-21)81 (-29)
GET/api/v3/sbom/{sbom_id}/packages93 (-17)180 (-30)210 (-80)270 (-80)300 (-80)390 (0)
GET/api/v3/sbom/{sbom_id}/related84 (-46)110 (-80)190 (-50)200 (-90)260 (-50)490 (+180)
GET/api/v3/sbom?limit=10&sort=name:asc&total=true210 (-10)350 (-20)420 (-100)570 (-40)950 (-250)1,100 (-100)
GET/api/v3/sbom?offset=100&limit=10&total=true100 (-10)230 (-10)370 (+30)410 (0)600 (-120)940 (+30)
GET/api/v3/sbom?q=label:type=product&total=true5 (-3)34 (-12)59 (-8)70 (-1)83 (+7)86 (+6)
GET/api/v3/sbom?q=license~GPL&sort=name:desc&total=true6 (-6)31 (-23)62 (-7)69 (-4)77 (-6)79 (-9)
GET/api/v3/sbom?q=name~redhat&total=true150 (-70)180 (-110)200 (-180)290 (-210)350 (-330)400 (-280)
GET/api/v3/sbom?q=published>2024-01-01&total=true99 (-11)170 (-30)270 (-40)280 (-160)490 (-280)530 (-250)
GET/api/v3/sbom?sort=ingested:desc&total=true180 (-40)310 (-130)410 (-120)590 (0)640 (-360)680 (-420)
GET/api/v3/sbom?total=true93 (-17)130 (-60)260 (-50)320 (-80)650 (+40)820 (-280)
advisory 13
GET/api/v3/advisory/urn:uuid:{advisory_id}46 (-2)61 (-12)100 (0)110 (0)110 (-10)130 (-50)
GET/api/v3/advisory/urn:uuid:{advisory_id}/download10 (-4)16 (-34)63 (-9)71 (-9)80 (-13)86 (-24)
GET/api/v3/advisory?deprecated=Consider&total=true11 (-9)46 (-23)72 (-10)78 (-16)1,600 (-700)3,400 (+200)
GET/api/v3/advisory?limit=1&total=true48 (-3)54 (-31)96 (-4)100 (-10)120 (-640)980 (+210)
GET/api/v3/advisory?limit=10&sort=ingested:desc&total=true9 (-6)47 (-16)67 (-10)73 (-10)1,400 (-500)3,200 (+400)
GET/api/v3/advisory?offset=100&limit=10&total=true33 (-39)77 (-11)88 (-8)97 (-3)200 (-10)2,700 (-200)
GET/api/v3/advisory?offset={offset}&limit=1200 (-30)370 (0)550 (+50)640 (+110)970 (+300)980 (+60)
GET/api/v3/advisory?q=CVE-2021-&total=true120 (-70)260 (-70)870 (-530)1,300 (-600)1,800 (-500)3,200 (-900)
GET/api/v3/advisory?q=identifier=CVE-2022-0981&total=true46 (-2)53 (-29)100 (-10)110 (0)110 (-10)120 (-20)
GET/api/v3/advisory?q=modified>3 days ago&total=true6 (-3)13 (-34)57 (-10)64 (-8)72 (-24)80 (-90)
GET/api/v3/advisory?q=title~openssl&total=true15 (-30)61 (-16)75 (-15)82 (-15)160 (-230)420 (-340)
GET/api/v3/advisory?sort=modified:desc&total=true11 (-5)51 (-16)69 (-9)77 (-18)1,700 (-200)2,700 (-200)
GET/api/v3/advisory?total=true86 (-14)99 (-21)120 (-60)170 (-20)190 (-120)2,600 (-200)
vulnerability 7
POST/api/v3/vulnerability/analyze220 (+156)550 (-310)660 (-340)850 (-650)1,700 (-700)2,900 (-500)
GET/api/v3/vulnerability?offset=100&limit=10&total=true5 (-3)21 (-1)47 (-13)62 (-8)98 (-302)310 (-380)
GET/api/v3/vulnerability?q=base_score>=7.0&total=true6 (-2)9 (-3)44 (-13)58 (-11)290 (-80)730 (+130)
GET/api/v3/vulnerability?q=base_severity=high&total=true6 (-3)11 (-5)52 (-10)68 (-3)500 (-120)1,000 (-500)
GET/api/v3/vulnerability?q=cwes=CWE-79&total=true6 (-4)11 (-10)49 (-16)65 (-11)310 (-200)690 (-310)
GET/api/v3/vulnerability?sort=base_score:desc&total=true400 (-170)530 (-180)790 (-210)990 (-310)1,400 (-600)1,700 (-400)
GET/api/v3/vulnerability?total=true6 (-2)9 (-6)42 (-16)57 (-14)72 (-428)180 (-400)
purl 15
GET/api/v3/purl/base/{purl}21 (-12)58 (-6)80 (-30)150 (-40)220 (-60)390 (+80)
GET/api/v3/purl/base?q=namespace=redhat&total=true45 (-2)74 (-8)95 (-4)100 (-10)140 (-50)620 (+220)
GET/api/v3/purl/base?q=type=rpm&total=true45 (-2)68 (-14)95 (-4)99 (-1)110 (0)140 (+20)
GET/api/v3/purl/base?sort=name:asc&total=true150 (-50)190 (-40)220 (-60)240 (-70)310 (-90)510 (+90)
GET/api/v3/purl/base?total=true44 (-3)66 (-17)92 (-6)98 (-2)110 (-10)230 (0)
POST/api/v3/purl/recommend170 (-60)210 (-60)250 (-70)290 (-50)330 (-110)530 (-160)
GET/api/v3/purl/{purl_id}60 (-17)80 (-16)98 (-12)110 (-50)170 (-20)190 (-110)
GET/api/v3/purl?offset=100&limit=10&total=true45 (-2)65 (-13)94 (-4)100 (0)200 (-290)590 (-180)
GET/api/v3/purl?q=curl&total=true12 (-18)52 (-6)67 (-11)75 (-415)930 (-370)1,400 (-2,400)
GET/api/v3/purl?q=license~GPLv3+...&sort=name:desc&total=true11 (-10)48 (-8)61 (-5)66 (-5)83 (-5)110 (+10)
GET/api/v3/purl?q=name=curl&total=true7 (-3)45 (-5)59 (-5)67 (-5)180 (0)260 (-10)
GET/api/v3/purl?q=purl:namespace=redhat&total=true6 (-2)43 (0)59 (-1)63 (-4)2,600 (-300)2,900 (-900)
GET/api/v3/purl?q=purl:ty=rpm&total=true6 (-2)41 (0)57 (-5)62 (-8)1,800 (-1,000)2,500 (-900)
GET/api/v3/purl?sort=purl:name:asc&total=true6 (-2)40 (-4)58 (-2)65 (0)260 (-300)640 (-20)
GET/api/v3/purl?total=true6 (-2)37 (-10)57 (-1)61 (-2)77 (-383)510 (-440)
license 9
GET/api/v3/license/spdx/license/{license_id}42 (-1)43 (-1)44 (-1)45 (-2)57 (-7)79 (-10)
GET/api/v3/license/spdx/license?q=apache&total=true2 (-1)3 (-1)4 (-2)5 (-2)18 (+4)43 (-7)
GET/api/v3/license/spdx/license?q=gpl&total=true43 (0)43 (-1)44 (-2)45 (-2)59 (-5)85 (-3)
GET/api/v3/license/spdx/license?total=true43 (0)43 (-1)44 (-2)45 (-3)61 (-8)87 (-9)
GET/api/v3/license?limit=10&sort=license:asc&total=true15 (-9)52 (-5)66 (-9)74 (-10)91 (-7)150 (-10)
GET/api/v3/license?q=ASL&sort=license:desc&total=true10 (-9)47 (-6)60 (-11)69 (-8)82 (-14)110 (-200)
GET/api/v3/license?q=license~Apache&total=true8 (-4)41 (-8)57 (-7)66 (-7)80 (-9)190 (+30)
GET/api/v3/license?q=license~GPL&total=true8 (-5)43 (-7)57 (-6)65 (-7)77 (-7)130 (-40)
GET/api/v3/license?total=true53 (-8)88 (-7)100 (-10)110 (-10)130 (0)260 (-50)
analysis 3
GET/api/v3/analysis/component/{component}4 (-2)5 (-3)20 (-42)63 (-6)71 (-4)100 (0)
GET/api/v3/analysis/latest/component/{cpe}4 (-2)5 (-3)31 (-32)63 (-6)71 (-5)100 (0)
GET/api/v3/analysis/status4 (-1)5 (-3)21 (-41)63 (-5)71 (-4)99 (0)
importer 1
GET/api/v3/importer?total=true3 (-1)4 (-2)6 (-50)59 (-6)69 (-4)100 (0)
group 3
GET/api/v3/group/sbom?parents=resolve&total=true4 (-1)5 (-3)24 (-38)63 (-6)72 (-3)97 (-1)
GET/api/v3/group/sbom?total=true4 (-1)5 (-3)17 (-45)62 (-6)71 (-4)100 (+4)
GET/api/v3/group/sbom?totals=true&total=true4 (-1)5 (-3)19 (-43)63 (-5)71 (-4)95 (-3)
labels 3
GET/api/v3/advisory-labels?filter_text=type&limit=10003,900 (-2,000)4,200 (-1,900)4,400 (-2,200)4,500 (-2,300)4,800 (-2,700)5,100 (-2,400)
GET/api/v3/sbom-labels?limit=10&filter_text=&total=true48 (-4)86 (+4)110 (-10)110 (-10)120 (-10)120 (-20)
GET/api/v3/sbom-labels?total=true48 (-5)85 (-15)110 (-10)110 (-10)120 (-10)120 (-10)
other 2
GET/.well-known/trustify1 (0)1 (0)2 (-1)3 (-1)4 (-2)43 (-4)
POST/api/v3/ui/extract-sbom-purls1 (0)1 (0)2 (-1)3 (-1)5 (-1)38 (-7)

Failures

No failures recorded.

Exceptions

No exceptions raised in the locustfile.