← All runs

Trustify branch daily perf tests · 2026-10-26 12:20 UTC

Target trustify (release/0.6.z, scale snapshot) · 2026-10-26 12:20:11 UTC → 12:30:10 UTC · Users 10 · Deltas vs previous run (2026-10-26 06:05 UTC, branch_0.6.z_2026-10-26T05-18-02_a575145)

Type branch-daily · Dataset scale-20260317T023702Z · Scenario etc/scenarios/main/full-20260317T023702Z.json5 · Branch release/0.6.z · Commit a575145e4aec · Workflow run

Duration
9m 59s
Total requests
490,303 (-22,519)
Failure rate
0.0%
0 failed requests
Throughput
818.8 req/s (-37.4)
Latency 95%ile
57 ms (+1)
Latency 99%ile
100 ms (+1)
Endpoints
72
0 with failures

Over time

Throughput

Requests and failures per second

Response time

Percentiles over Locust's rolling window, ms

Users

Concurrent simulated users

Load plan

ActionStartedStoppedElapsedUsers
Increasing12:20:1112:20:150m 04s2 → 10
Maintaining12:20:1512:30:089m 53s10 → 10

Top 10 slowest endpoints (95%ile)

#MethodName95%ile (ms)Average (ms)# Requests
1GET/api/v3/advisory-labels?filter_text=type&limit=10007,0005,94894
2GET/api/v3/sbom/{sbom_id}/download3,5003,341105
3GET/api/v3/advisory?q=CVE-2021-&total=true1,900389562
4POST/api/v3/vulnerability/analyze1,500505676
5GET/api/v3/sbom?q=name~redhat&total=true1,30056175
6GET/api/v3/vulnerability?sort=base_score:desc&total=true1,100611328
7GET/api/v3/advisory?offset={offset}&limit=167030893
8GET/api/v3/sbom?sort=ingested:desc&total=true62029984
9GET/api/v3/sbom?limit=10&sort=name:asc&total=true500266102
10GET/api/v3/sbom?q=published>2024-01-01&total=true50019384

Request metrics

MethodName# Requests# FailsFail %Average (ms)Min (ms)Max (ms)Avg size (B)RPSFailures/s
sbom 16
GET/api/v3/sbom/by-package?purl={purl}86 (-5)0 (0)0%117 (+12.8)53.13251,2870.14 (0)0
GET/api/v3/sbom/count-by-package93 (-12)0 (0)0%32.2 (-6.9)5.4710430.16 (0)0
GET/api/v3/sbom/{sbom_id}79 (-38)0 (0)0%153 (+10.7)61.93242,0150.13 (-0.1)0
GET/api/v3/sbom/{sbom_id}/all-license-ids88 (-2)0 (0)0%30.8 (+5.8)3.7391.120.15 (0)0
GET/api/v3/sbom/{sbom_id}/download105 (+15)0 (0)0%3,341 (+93.9)3,1543,665136,458,6380.18 (0)0
GET/api/v3/sbom/{sbom_id}/license-export85 (+5)0 (0)0%31.9 (-0.8)6.591022350.14 (0)0
GET/api/v3/sbom/{sbom_id}/packages85 (-6)0 (0)0%158 (+7.2)20.049112,6480.14 (0)0
GET/api/v3/sbom/{sbom_id}/related78 (-18)0 (0)0%160 (+24.7)26.930415,3720.13 (0)0
GET/api/v3/sbom?limit=10&sort=name:asc&total=true102 (-4)0 (0)0%266 (+7.4)32.090012,1890.17 (0)0
GET/api/v3/sbom?offset=100&limit=10&total=true157 (-38)0 (0)0%196 (-22.8)27.881011,9000.26 (-0.1)0
GET/api/v3/sbom?q=label:type=product&total=true93 (-2)0 (0)0%27.4 (+5.5)3.9079.5220.16 (0)0
GET/api/v3/sbom?q=license~GPL&sort=name:desc&total=true86 (-14)0 (0)0%32.8 (+6.2)4.2886.0220.14 (0)0
GET/api/v3/sbom?q=name~redhat&total=true75 (-38)0 (0)0%561 (-58.3)12.61,399220.13 (-0.1)0
GET/api/v3/sbom?q=published>2024-01-01&total=true84 (-24)0 (0)0%193 (+17.8)35.31,17229,3170.14 (0)0
GET/api/v3/sbom?sort=ingested:desc&total=true84 (-4)0 (0)0%299 (-2.7)31.389229,6000.14 (0)0
GET/api/v3/sbom?total=true162 (-52)0 (0)0%184 (+22.3)29.069429,3170.27 (-0.1)0
advisory 13
GET/api/v3/advisory/urn:uuid:{advisory_id}594 (+3)0 (0)0%60.2 (+0.5)5.191462,3950.99 (0)0
GET/api/v3/advisory/urn:uuid:{advisory_id}/download552 (-30)0 (0)0%31.0 (+1.2)5.93145178,4230.92 (0)0
GET/api/v3/advisory?deprecated=Consider&total=true531 (-31)0 (0)0%84.8 (+12.2)8.502,98744,0030.89 (-0.1)0
GET/api/v3/advisory?limit=1&total=true93 (-7)0 (0)0%72.9 (+0.2)12.07572,2840.16 (0)0
GET/api/v3/advisory?limit=10&sort=ingested:desc&total=true548 (-46)0 (0)0%76.3 (+4.6)5.823,17520,1930.92 (-0.1)0
GET/api/v3/advisory?offset=100&limit=10&total=true588 (-10)0 (0)0%83.5 (+14.2)7.422,52619,2260.98 (0)0
GET/api/v3/advisory?offset={offset}&limit=193 (-7)0 (0)0%308 (+31.5)49.38932,0150.16 (0)0
GET/api/v3/advisory?q=CVE-2021-&total=true562 (-4)0 (0)0%389 (+7.6)21.43,38149,9750.94 (0)0
GET/api/v3/advisory?q=identifier=CVE-2022-0981&total=true554 (-59)0 (0)0%61.2 (+2.0)3.581421,9710.93 (-0.1)0
GET/api/v3/advisory?q=modified>3 days ago&total=true559 (-37)0 (0)0%25.5 (+0.3)2.4899.7220.93 (-0.1)0
GET/api/v3/advisory?q=title~openssl&total=true521 (-77)0 (0)0%52.1 (+2.2)9.66788126,4520.87 (-0.1)0
GET/api/v3/advisory?sort=modified:desc&total=true537 (-24)0 (0)0%77.6 (+2.0)5.962,80938,1280.90 (0)0
GET/api/v3/advisory?total=true571 (-8)0 (0)0%116 (-11.3)10.82,81648,7920.95 (0)0
vulnerability 7
POST/api/v3/vulnerability/analyze676 (-40)0 (0)0%505 (+40.2)1.873,4632,852,2611.13 (-0.1)0
GET/api/v3/vulnerability?offset=100&limit=10&total=true345 (-26)0 (0)0%20.9 (0)2.555688,3340.58 (0)0
GET/api/v3/vulnerability?q=base_score>=7.0&total=true326 (-31)0 (0)0%32.2 (+2.5)3.841,13319,0390.54 (-0.1)0
GET/api/v3/vulnerability?q=base_severity=high&total=true363 (+1)0 (0)0%36.9 (+0.7)3.731,45418,8530.61 (0)0
GET/api/v3/vulnerability?q=cwes=CWE-79&total=true325 (-46)0 (0)0%38.4 (+7.2)4.341,32319,4860.54 (-0.1)0
GET/api/v3/vulnerability?sort=base_score:desc&total=true328 (-28)0 (0)0%611 (+25.7)1861,71210,1810.55 (0)0
GET/api/v3/vulnerability?total=true326 (-56)0 (0)0%23.7 (+0.2)3.2964119,2740.54 (-0.1)0
purl 15
GET/api/v3/purl/base/{purl}352 (-7)0 (0)0%45.6 (-9.4)7.8828548,8270.59 (0)0
GET/api/v3/purl/base?q=namespace=redhat&total=true358 (-44)0 (0)0%60.7 (-6.5)3.381992,0800.60 (-0.1)0
GET/api/v3/purl/base?q=type=rpm&total=true352 (-37)0 (0)0%58.0 (-4.2)2.611222,0800.59 (-0.1)0
GET/api/v3/purl/base?sort=name:asc&total=true349 (+1)0 (0)0%207 (-0.1)74.87412,9430.58 (0)0
GET/api/v3/purl/base?total=true360 (0)0 (0)0%59.4 (-1.0)2.002282,4500.60 (0)0
POST/api/v3/purl/recommend1,057 (-5)0 (0)0%231 (+3.7)40.86162,7471.77 (0)0
GET/api/v3/purl/{purl_id}358 (-40)0 (0)0%81.5 (+7.6)16.13715310.60 (-0.1)0
GET/api/v3/purl?offset=100&limit=10&total=true345 (-16)0 (0)0%61.2 (-10.2)3.665304,0630.58 (0)0
GET/api/v3/purl?q=curl&total=true352 (+1)0 (0)0%86.5 (+28.5)2.794,44410,0550.59 (0)0
GET/api/v3/purl?q=license~GPLv3+...&sort=name:desc&total=true337 (-40)0 (0)0%33.8 (+5.3)2.0590.8220.56 (-0.1)0
GET/api/v3/purl?q=name=curl&total=true358 (-15)0 (0)0%31.3 (+3.3)2.4833912,0840.60 (0)0
GET/api/v3/purl?q=purl:namespace=redhat&total=true367 (-26)0 (0)0%79.5 (-0.1)2.322,98010,0670.61 (0)0
GET/api/v3/purl?q=purl:ty=rpm&total=true349 (-21)0 (0)0%109 (+17.3)2.474,31110,1160.58 (0)0
GET/api/v3/purl?sort=purl:name:asc&total=true329 (-45)0 (0)0%37.9 (-1.9)2.0561911,1010.55 (-0.1)0
GET/api/v3/purl?total=true342 (-3)0 (0)0%30.9 (+4.3)2.308019,9790.57 (0)0
license 9
GET/api/v3/license/spdx/license/{license_id}1,769 (-15)0 (0)0%42.7 (+0.3)1.251011,1432.95 (0)0
GET/api/v3/license/spdx/license?q=apache&total=true1,696 (-96)0 (0)0%3.93 (+0.1)1.2755.51652.83 (-0.2)0
GET/api/v3/license/spdx/license?q=gpl&total=true1,762 (+7)0 (0)0%42.6 (+0.1)1.4589.81,9812.94 (0)0
GET/api/v3/license/spdx/license?total=true1,778 (+24)0 (0)0%42.3 (-0.3)1.4289.21,5252.97 (0)0
GET/api/v3/license?limit=10&sort=license:asc&total=true1,706 (-78)0 (0)0%37.9 (+0.6)6.751704252.85 (-0.1)0
GET/api/v3/license?q=ASL&sort=license:desc&total=true1,750 (+2)0 (0)0%32.7 (+1.2)5.64154222.92 (0)0
GET/api/v3/license?q=license~Apache&total=true1,745 (+6)0 (0)0%28.5 (+0.4)3.031361202.91 (0)0
GET/api/v3/license?q=license~GPL&total=true1,756 (+5)0 (0)0%27.9 (-0.4)3.30172922.93 (0)0
GET/api/v3/license?total=true1,781 (-36)0 (0)0%71.9 (+0.4)7.932031,1012.97 (-0.1)0
analysis 3
GET/api/v3/analysis/component/{component}12,472 (-347)0 (0)0%15.0 (+0.3)1.621012520.83 (-0.6)0
GET/api/v3/analysis/latest/component/{cpe}12,295 (-378)0 (0)0%15.5 (+0.5)1.771092520.53 (-0.6)0
GET/api/v3/analysis/status12,195 (-513)0 (0)0%14.9 (+0.7)1.3899.310320.36 (-0.9)0
importer 1
GET/api/v3/importer?total=true46,387 (-1,224)0 (0)0%11.7 (+0.3)1.27109277.46 (-2.0)0
group 3
GET/api/v3/group/sbom?parents=resolve&total=true12,469 (-650)0 (0)0%14.7 (+0.6)1.741013820.82 (-1.1)0
GET/api/v3/group/sbom?total=true12,509 (-276)0 (0)0%14.8 (+0.5)1.721092220.89 (-0.5)0
GET/api/v3/group/sbom?totals=true&total=true12,464 (-388)0 (0)0%14.8 (+0.5)1.741062220.81 (-0.6)0
labels 3
GET/api/v3/advisory-labels?filter_text=type&limit=100094 (-3)0 (0)0%5,948 (+144.0)4,9827,491600.16 (0)0
GET/api/v3/sbom-labels?limit=10&filter_text=&total=true89 (-11)0 (0)0%69.9 (-5.3)8.201311,0650.15 (0)0
GET/api/v3/sbom-labels?total=true67 (-22)0 (0)0%74.3 (+1.8)14.91221,0650.11 (0)0
other 2
GET/.well-known/trustify168,305 (-9,315)0 (0)0%1.47 (+0.1)0.7938.7886281.06 (-15.5)0
POST/api/v3/ui/extract-sbom-purls168,715 (-8,114)0 (0)0%1.67 (+0.1)0.8743.845281.74 (-13.5)0

Response time metrics (ms)

MethodName50%ile75%ile90%ile95%ile99%ile100%ile
sbom 16
GET/api/v3/sbom/by-package?purl={purl}120 (+10)130 (0)170 (+30)220 (+50)330 (+110)330 (+110)
GET/api/v3/sbom/count-by-package14 (-26)57 (-13)70 (-10)79 (-5)100 (+9)100 (0)
GET/api/v3/sbom/{sbom_id}140 (0)180 (+20)230 (0)240 (0)320 (+80)320 (+70)
GET/api/v3/sbom/{sbom_id}/all-license-ids12 (+3)59 (+4)74 (+4)78 (+1)91 (+4)91 (+4)
GET/api/v3/sbom/{sbom_id}/download3,300 (0)3,400 (+100)3,500 (+200)3,500 (+100)3,600 (+100)3,700 (+200)
GET/api/v3/sbom/{sbom_id}/license-export13 (0)61 (-1)77 (+1)80 (-4)100 (0)100 (0)
GET/api/v3/sbom/{sbom_id}/packages120 (+20)220 (0)300 (+10)310 (-70)490 (+70)490 (+70)
GET/api/v3/sbom/{sbom_id}/related170 (+50)200 (+10)230 (-10)300 (+10)300 (-30)300 (-30)
GET/api/v3/sbom?limit=10&sort=name:asc&total=true210 (+10)360 (+40)480 (0)500 (-100)820 (+10)900 (0)
GET/api/v3/sbom?offset=100&limit=10&total=true140 (-30)280 (-10)400 (-20)470 (-90)750 (-110)810 (-120)
GET/api/v3/sbom?q=label:type=product&total=true10 (+2)56 (+17)70 (+6)76 (+8)80 (+9)80 (+9)
GET/api/v3/sbom?q=license~GPL&sort=name:desc&total=true15 (+3)61 (+10)76 (+5)80 (+4)86 (-24)86 (-24)
GET/api/v3/sbom?q=name~redhat&total=true470 (-310)1,000 (+30)1,200 (0)1,300 (0)1,400 (-200)1,400 (-200)
GET/api/v3/sbom?q=published>2024-01-01&total=true130 (0)210 (+10)380 (0)500 (+60)1,200 (+610)1,200 (+600)
GET/api/v3/sbom?sort=ingested:desc&total=true280 (+20)410 (0)500 (-100)620 (-160)890 (-310)890 (-310)
GET/api/v3/sbom?total=true150 (+40)230 (+40)350 (+20)420 (0)650 (+40)690 (0)
advisory 13
GET/api/v3/advisory/urn:uuid:{advisory_id}48 (0)83 (-1)100 (0)110 (0)130 (+10)150 (+10)
GET/api/v3/advisory/urn:uuid:{advisory_id}/download14 (+1)57 (+2)74 (0)80 (+2)92 (-5)150 (-20)
GET/api/v3/advisory?deprecated=Consider&total=true24 (+4)72 (+7)88 (+6)110 (+11)2,200 (+400)3,000 (+100)
GET/api/v3/advisory?limit=1&total=true51 (0)74 (+6)110 (+15)110 (0)760 (-120)760 (-120)
GET/api/v3/advisory?limit=10&sort=ingested:desc&total=true15 (+2)63 (+3)77 (+3)86 (+3)2,400 (+200)3,200 (+200)
GET/api/v3/advisory?offset=100&limit=10&total=true74 (+10)89 (+2)99 (+2)110 (+10)1,400 (+1,210)2,500 (-200)
GET/api/v3/advisory?offset={offset}&limit=1280 (+60)450 (+50)610 (+90)670 (+60)890 (+180)890 (+180)
GET/api/v3/advisory?q=CVE-2021-&total=true190 (0)310 (0)1,300 (+200)1,900 (+100)2,400 (0)3,400 (-600)
GET/api/v3/advisory?q=identifier=CVE-2022-0981&total=true49 (+1)83 (+7)110 (0)110 (0)130 (0)140 (-10)
GET/api/v3/advisory?q=modified>3 days ago&total=true9 (0)50 (-1)68 (+1)74 (+2)83 (-1)100 (-50)
GET/api/v3/advisory?q=title~openssl&total=true40 (+4)75 (0)90 (0)97 (-3)290 (+110)790 (+100)
GET/api/v3/advisory?sort=modified:desc&total=true17 (0)69 (+2)83 (+1)98 (+2)2,200 (+100)2,800 (-500)
GET/api/v3/advisory?total=true99 (+1)110 (-10)170 (0)180 (-10)210 (-1,890)2,800 (-600)
vulnerability 7
POST/api/v3/vulnerability/analyze500 (+447)860 (+10)1,000 (-100)1,500 (-200)2,400 (0)3,500 (-200)
GET/api/v3/vulnerability?offset=100&limit=10&total=true8 (0)17 (+2)59 (+7)68 (+1)100 (-90)570 (-130)
GET/api/v3/vulnerability?q=base_score>=7.0&total=true9 (0)15 (-3)60 (-1)70 (-1)550 (+150)1,100 (0)
GET/api/v3/vulnerability?q=base_severity=high&total=true9 (0)22 (+8)65 (+3)73 (0)830 (+20)1,500 (0)
GET/api/v3/vulnerability?q=cwes=CWE-79&total=true10 (0)26 (+2)66 (0)74 (-1)700 (+340)1,300 (0)
GET/api/v3/vulnerability?sort=base_score:desc&total=true530 (+30)720 (+70)940 (+30)1,100 (0)1,500 (-300)1,700 (-700)
GET/api/v3/vulnerability?total=true9 (0)14 (0)57 (+1)69 (0)420 (-70)640 (+40)
purl 15
GET/api/v3/purl/base/{purl}24 (-14)62 (-5)82 (-68)180 (-30)280 (0)290 (-80)
GET/api/v3/purl/base?q=namespace=redhat&total=true48 (+1)85 (0)100 (0)110 (0)140 (-150)200 (-740)
GET/api/v3/purl/base?q=type=rpm&total=true47 (-1)84 (-5)98 (-2)100 (0)110 (0)120 (0)
GET/api/v3/purl/base?sort=name:asc&total=true210 (+10)240 (0)290 (-10)310 (0)390 (-30)740 (+120)
GET/api/v3/purl/base?total=true47 (0)81 (-6)99 (0)100 (0)110 (0)230 (+110)
POST/api/v3/purl/recommend230 (+10)280 (+10)320 (0)350 (+10)430 (-20)620 (+10)
GET/api/v3/purl/{purl_id}77 (+3)100 (+7)150 (+30)170 (+10)210 (+20)370 (+110)
GET/api/v3/purl?offset=100&limit=10&total=true47 (0)80 (-3)98 (-2)100 (-10)350 (-270)530 (-470)
GET/api/v3/purl?q=curl&total=true14 (-7)57 (+2)84 (+15)440 (+365)1,300 (+100)4,400 (+2,700)
GET/api/v3/purl?q=license~GPLv3+...&sort=name:desc&total=true30 (+16)58 (+9)68 (+3)72 (+1)85 (+1)91 (-1)
GET/api/v3/purl?q=name=curl&total=true12 (+2)51 (+4)63 (0)72 (+1)200 (+10)340 (+60)
GET/api/v3/purl?q=purl:namespace=redhat&total=true9 (0)46 (-2)60 (-1)65 (-4)2,600 (+100)3,000 (-200)
GET/api/v3/purl?q=purl:ty=rpm&total=true8 (0)47 (0)60 (-3)70 (-4)3,400 (+700)4,300 (+900)
GET/api/v3/purl?sort=purl:name:asc&total=true10 (0)52 (0)63 (0)72 (-1)490 (-90)620 (-40)
GET/api/v3/purl?total=true8 (0)42 (-3)59 (-1)65 (+2)510 (+416)800 (+320)
license 9
GET/api/v3/license/spdx/license/{license_id}43 (0)44 (0)46 (+1)48 (+1)68 (+5)100 (+7)
GET/api/v3/license/spdx/license?q=apache&total=true3 (0)5 (+1)6 (0)7 (0)27 (-3)55 (-5)
GET/api/v3/license/spdx/license?q=gpl&total=true43 (0)44 (0)46 (0)48 (+1)63 (-6)90 (+1)
GET/api/v3/license/spdx/license?total=true43 (0)44 (0)46 (0)48 (0)64 (-1)89 (-21)
GET/api/v3/license?limit=10&sort=license:asc&total=true29 (+2)59 (0)78 (+1)84 (0)97 (-2)170 (-10)
GET/api/v3/license?q=ASL&sort=license:desc&total=true18 (+2)54 (+1)72 (+1)79 (0)96 (+3)150 (0)
GET/api/v3/license?q=license~Apache&total=true13 (0)49 (0)66 (+3)74 (+3)92 (+8)140 (-20)
GET/api/v3/license?q=license~GPL&total=true13 (0)48 (-2)64 (0)72 (-1)87 (0)170 (+10)
GET/api/v3/license?total=true61 (+2)96 (+1)110 (0)120 (0)130 (-10)200 (-10)
analysis 3
GET/api/v3/analysis/component/{component}6 (0)8 (0)62 (0)68 (-1)76 (0)100 (0)
GET/api/v3/analysis/latest/component/{cpe}6 (0)8 (0)63 (0)69 (0)76 (-1)110 (-170)
GET/api/v3/analysis/status6 (+1)8 (0)62 (0)69 (+1)76 (+1)99 (-1)
importer 1
GET/api/v3/importer?total=true4 (0)6 (0)56 (+1)66 (0)72 (-1)110 (0)
group 3
GET/api/v3/group/sbom?parents=resolve&total=true6 (+1)8 (+1)62 (0)69 (+1)76 (+1)100 (-10)
GET/api/v3/group/sbom?total=true6 (+1)8 (+1)63 (+1)69 (0)75 (0)110 (+10)
GET/api/v3/group/sbom?totals=true&total=true6 (+1)8 (+1)62 (0)69 (+1)76 (+1)110 (0)
labels 3
GET/api/v3/advisory-labels?filter_text=type&limit=10005,900 (+100)6,300 (0)6,900 (+200)7,000 (-100)7,500 (-600)7,500 (-600)
GET/api/v3/sbom-labels?limit=10&filter_text=&total=true56 (-4)98 (-2)110 (0)120 (0)130 (-210)130 (-210)
GET/api/v3/sbom-labels?total=true62 (+6)100 (0)110 (0)120 (0)120 (-10)120 (-10)
other 2
GET/.well-known/trustify1 (0)1 (0)3 (0)4 (0)6 (0)39 (0)
POST/api/v3/ui/extract-sbom-purls1 (0)1 (0)3 (0)4 (0)7 (+1)44 (-6)

Failures

No failures recorded.

Exceptions

No exceptions raised in the locustfile.