← All runs

Trustify branch daily perf tests · 2026-10-27 06:05 UTC

Target trustify (release/0.6.z, scale snapshot) · 2026-10-27 06:05:03 UTC → 06:15:02 UTC · Users 10 · Deltas vs previous run (2026-10-26 12:20 UTC, branch_0.6.z_2026-10-26T11-32-23_a575145)

Type branch-daily · Dataset scale-20260317T023702Z · Scenario etc/scenarios/main/full-20260317T023702Z.json5 · Branch release/0.6.z · Commit a575145e4aec · Workflow run

Duration
9m 59s
Total requests
749,672 (+259,369)
Failure rate
0.0%
0 failed requests
Throughput
1,250.8 req/s (+432.1)
Latency 95%ile
36 ms (-21)
Latency 99%ile
76 ms (-24)
Endpoints
72
0 with failures

Over time

Throughput

Requests and failures per second

Response time

Percentiles over Locust's rolling window, ms

Users

Concurrent simulated users

Load plan

ActionStartedStoppedElapsedUsers
Increasing06:05:0306:05:070m 04s2 → 10
Maintaining06:05:0706:15:029m 55s10 → 10

Top 10 slowest endpoints (95%ile)

#MethodName95%ile (ms)Average (ms)# Requests
1GET/api/v3/advisory-labels?filter_text=type&limit=10004,6003,801144
2GET/api/v3/sbom/{sbom_id}/download2,5002,373109
3GET/api/v3/sbom?q=name~redhat&total=true1,700693133
4GET/api/v3/advisory?q=CVE-2021-&total=true1,300322691
5POST/api/v3/vulnerability/analyze1,300330911
6GET/api/v3/vulnerability?sort=base_score:desc&total=true1,300608404
7GET/api/v3/sbom?sort=ingested:desc&total=true760316112
8GET/api/v3/advisory?offset={offset}&limit=1700258133
9GET/api/v3/sbom?limit=10&sort=name:asc&total=true610248116
10GET/api/v3/sbom?total=true580166246

Request metrics

MethodName# Requests# FailsFail %Average (ms)Min (ms)Max (ms)Avg size (B)RPSFailures/s
sbom 16
GET/api/v3/sbom/by-package?purl={purl}122 (+36)0 (0)0%96.4 (-20.1)49.74111,2870.20 (+0.1)0
GET/api/v3/sbom/count-by-package114 (+21)0 (0)0%24.4 (-7.9)3.4892.030.19 (0)0
GET/api/v3/sbom/{sbom_id}111 (+32)0 (0)0%117 (-36.4)28.33292,0150.19 (+0.1)0
GET/api/v3/sbom/{sbom_id}/all-license-ids108 (+20)0 (0)0%14.3 (-16.6)1.9372.420.18 (0)0
GET/api/v3/sbom/{sbom_id}/download109 (+4)0 (0)0%2,373 (-968.2)2,2082,681136,458,6380.18 (0)0
GET/api/v3/sbom/{sbom_id}/license-export142 (+57)0 (0)0%23.3 (-8.6)3.691592340.24 (+0.1)0
GET/api/v3/sbom/{sbom_id}/packages108 (+23)0 (0)0%160 (+1.9)11.870812,6480.18 (0)0
GET/api/v3/sbom/{sbom_id}/related105 (+27)0 (0)0%123 (-37.6)14.347815,3720.18 (0)0
GET/api/v3/sbom?limit=10&sort=name:asc&total=true116 (+14)0 (0)0%248 (-17.4)24.290112,1890.19 (0)0
GET/api/v3/sbom?offset=100&limit=10&total=true224 (+67)0 (0)0%181 (-15.1)18.41,27811,9000.37 (+0.1)0
GET/api/v3/sbom?q=label:type=product&total=true112 (+19)0 (0)0%14.1 (-13.3)2.1475.6220.19 (0)0
GET/api/v3/sbom?q=license~GPL&sort=name:desc&total=true129 (+43)0 (0)0%19.6 (-13.2)2.6976.5220.22 (+0.1)0
GET/api/v3/sbom?q=name~redhat&total=true133 (+58)0 (0)0%693 (+132.3)8.484,925220.22 (+0.1)0
GET/api/v3/sbom?q=published>2024-01-01&total=true105 (+21)0 (0)0%188 (-5.8)20.61,05229,3170.18 (0)0
GET/api/v3/sbom?sort=ingested:desc&total=true112 (+28)0 (0)0%316 (+16.9)22.22,08829,6000.19 (0)0
GET/api/v3/sbom?total=true246 (+84)0 (0)0%166 (-18.4)20.81,54629,3170.41 (+0.1)0
advisory 13
GET/api/v3/advisory/urn:uuid:{advisory_id}642 (+48)0 (0)0%53.0 (-7.3)3.561302,3951.07 (+0.1)0
GET/api/v3/advisory/urn:uuid:{advisory_id}/download680 (+128)0 (0)0%19.4 (-11.6)4.30166178,4231.13 (+0.2)0
GET/api/v3/advisory?deprecated=Consider&total=true636 (+105)0 (0)0%56.2 (-28.6)5.502,71044,0031.06 (+0.2)0
GET/api/v3/advisory?limit=1&total=true133 (+40)0 (0)0%110 (+37.0)9.641,7572,2480.22 (+0.1)0
GET/api/v3/advisory?limit=10&sort=ingested:desc&total=true674 (+126)0 (0)0%62.1 (-14.2)3.603,12720,1931.12 (+0.2)0
GET/api/v3/advisory?offset=100&limit=10&total=true652 (+64)0 (0)0%80.4 (-3.1)4.552,38119,2251.09 (+0.1)0
GET/api/v3/advisory?offset={offset}&limit=1133 (+40)0 (0)0%258 (-50.4)50.01,1901,8930.22 (+0.1)0
GET/api/v3/advisory?q=CVE-2021-&total=true691 (+129)0 (0)0%322 (-67.4)6.753,35949,3521.15 (+0.2)0
GET/api/v3/advisory?q=identifier=CVE-2022-0981&total=true671 (+117)0 (0)0%53.8 (-7.4)3.442391,9711.12 (+0.2)0
GET/api/v3/advisory?q=modified>3 days ago&total=true673 (+114)0 (0)0%16.5 (-9.0)2.27108221.12 (+0.2)0
GET/api/v3/advisory?q=title~openssl&total=true640 (+119)0 (0)0%39.4 (-12.8)6.66942126,4521.07 (+0.2)0
GET/api/v3/advisory?sort=modified:desc&total=true659 (+122)0 (0)0%56.8 (-20.9)4.763,06438,1281.10 (+0.2)0
GET/api/v3/advisory?total=true639 (+68)0 (0)0%131 (+14.8)6.642,39649,2351.07 (+0.1)0
vulnerability 7
POST/api/v3/vulnerability/analyze911 (+235)0 (0)0%330 (-174.4)1.207,4442,580,2331.52 (+0.4)0
GET/api/v3/vulnerability?offset=100&limit=10&total=true425 (+80)0 (0)0%16.3 (-4.6)2.065239,8390.71 (+0.1)0
GET/api/v3/vulnerability?q=base_score>=7.0&total=true431 (+105)0 (0)0%21.1 (-11.2)2.5672119,1950.72 (+0.2)0
GET/api/v3/vulnerability?q=base_severity=high&total=true453 (+90)0 (0)0%23.9 (-13.0)2.321,19019,2700.76 (+0.1)0
GET/api/v3/vulnerability?q=cwes=CWE-79&total=true408 (+83)0 (0)0%29.4 (-9.0)2.7183822,0030.68 (+0.1)0
GET/api/v3/vulnerability?sort=base_score:desc&total=true404 (+76)0 (0)0%608 (-3.1)83.22,83710,1840.67 (+0.1)0
GET/api/v3/vulnerability?total=true465 (+139)0 (0)0%16.7 (-7.1)2.6159719,7560.78 (+0.2)0
purl 15
GET/api/v3/purl/base/{purl}480 (+128)0 (0)0%39.1 (-6.4)3.6243948,8270.80 (+0.2)0
GET/api/v3/purl/base?q=namespace=redhat&total=true494 (+136)0 (0)0%55.6 (-5.1)2.795342,0800.82 (+0.2)0
GET/api/v3/purl/base?q=type=rpm&total=true478 (+126)0 (0)0%53.4 (-4.6)1.641142,0800.80 (+0.2)0
GET/api/v3/purl/base?sort=name:asc&total=true520 (+171)0 (0)0%136 (-70.2)59.66072,9430.87 (+0.3)0
GET/api/v3/purl/base?total=true492 (+132)0 (0)0%54.0 (-5.4)1.752392,4500.82 (+0.2)0
POST/api/v3/purl/recommend1,502 (+445)0 (0)0%157 (-74.5)33.75252,7472.51 (+0.7)0
GET/api/v3/purl/{purl_id}510 (+152)0 (0)0%45.1 (-36.4)9.414195310.85 (+0.3)0
GET/api/v3/purl?offset=100&limit=10&total=true489 (+144)0 (0)0%57.6 (-3.6)2.887974,7340.82 (+0.2)0
GET/api/v3/purl?q=curl&total=true497 (+145)0 (0)0%52.5 (-34.0)3.512,26011,7140.83 (+0.2)0
GET/api/v3/purl?q=license~GPLv3+...&sort=name:desc&total=true506 (+169)0 (0)0%18.8 (-15.1)1.4683.0220.84 (+0.3)0
GET/api/v3/purl?q=name=curl&total=true502 (+144)0 (0)0%18.7 (-12.6)1.7948712,0840.84 (+0.2)0
GET/api/v3/purl?q=purl:namespace=redhat&total=true485 (+118)0 (0)0%75.0 (-4.5)1.897,12213,7700.81 (+0.2)0
GET/api/v3/purl?q=purl:ty=rpm&total=true482 (+133)0 (0)0%72.4 (-36.1)1.693,65113,7700.80 (+0.2)0
GET/api/v3/purl?sort=purl:name:asc&total=true510 (+181)0 (0)0%23.6 (-14.3)1.6772911,1010.85 (+0.3)0
GET/api/v3/purl?total=true499 (+157)0 (0)0%17.9 (-13.0)1.705809,8770.83 (+0.3)0
license 9
GET/api/v3/license/spdx/license/{license_id}2,137 (+368)0 (0)0%41.9 (-0.8)0.9483.81,1433.57 (+0.6)0
GET/api/v3/license/spdx/license?q=apache&total=true2,146 (+450)0 (0)0%2.59 (-1.3)0.8843.61653.58 (+0.7)0
GET/api/v3/license/spdx/license?q=gpl&total=true2,179 (+417)0 (0)0%42.0 (-0.5)1.0786.21,9813.64 (+0.7)0
GET/api/v3/license/spdx/license?total=true2,154 (+376)0 (0)0%41.8 (-0.5)1.0178.51,5253.59 (+0.6)0
GET/api/v3/license?limit=10&sort=license:asc&total=true2,177 (+471)0 (0)0%24.8 (-13.2)4.151274253.63 (+0.8)0
GET/api/v3/license?q=ASL&sort=license:desc&total=true2,117 (+367)0 (0)0%20.6 (-12.1)2.78166223.53 (+0.6)0
GET/api/v3/license?q=license~Apache&total=true2,062 (+317)0 (0)0%18.9 (-9.5)2.2097.11203.44 (+0.5)0
GET/api/v3/license?q=license~GPL&total=true2,018 (+262)0 (0)0%19.0 (-9.0)2.22142923.37 (+0.4)0
GET/api/v3/license?total=true2,157 (+376)0 (0)0%61.5 (-10.4)6.181521,1013.60 (+0.6)0
analysis 3
GET/api/v3/analysis/component/{component}25,237 (+12,765)0 (0)0%7.44 (-7.6)0.9595.42542.11 (+21.3)0
GET/api/v3/analysis/latest/component/{cpe}25,164 (+12,869)0 (0)0%7.36 (-8.1)0.9694.12541.99 (+21.5)0
GET/api/v3/analysis/status25,441 (+13,246)0 (0)0%7.05 (-7.9)0.8711010342.45 (+22.1)0
importer 1
GET/api/v3/importer?total=true92,150 (+45,763)0 (0)0%5.77 (-5.9)0.862722153.75 (+76.3)0
group 3
GET/api/v3/group/sbom?parents=resolve&total=true25,685 (+13,216)0 (0)0%7.06 (-7.7)1.061193842.86 (+22.0)0
GET/api/v3/group/sbom?total=true25,741 (+13,232)0 (0)0%7.04 (-7.7)1.0685.82242.95 (+22.1)0
GET/api/v3/group/sbom?totals=true&total=true25,412 (+12,948)0 (0)0%7.17 (-7.6)0.931972242.40 (+21.6)0
labels 3
GET/api/v3/advisory-labels?filter_text=type&limit=1000144 (+50)0 (0)0%3,801 (-2,147.4)2,6845,925600.24 (+0.1)0
GET/api/v3/sbom-labels?limit=10&filter_text=&total=true110 (+21)0 (0)0%59.0 (-10.9)5.821241,0650.18 (0)0
GET/api/v3/sbom-labels?total=true107 (+40)0 (0)0%60.9 (-13.4)43.91191,0650.18 (+0.1)0
other 2
GET/.well-known/trustify231,672 (+63,367)0 (0)0%1.06 (-0.4)0.5535.8886386.54 (+105.5)0
POST/api/v3/ui/extract-sbom-purls232,100 (+63,385)0 (0)0%1.19 (-0.5)0.6142.645387.26 (+105.5)0

Response time metrics (ms)

MethodName50%ile75%ile90%ile95%ile99%ile100%ile
sbom 16
GET/api/v3/sbom/by-package?purl={purl}83 (-37)120 (-10)140 (-30)180 (-40)270 (-60)410 (+80)
GET/api/v3/sbom/count-by-package9 (-5)47 (-10)67 (-3)73 (-6)79 (-21)92 (-8)
GET/api/v3/sbom/{sbom_id}120 (-20)140 (-40)160 (-70)210 (-30)280 (-40)330 (+10)
GET/api/v3/sbom/{sbom_id}/all-license-ids5 (-7)8 (-51)55 (-19)68 (-10)72 (-19)72 (-19)
GET/api/v3/sbom/{sbom_id}/download2,400 (-900)2,400 (-1,000)2,500 (-1,000)2,500 (-1,000)2,700 (-900)2,700 (-1,000)
GET/api/v3/sbom/{sbom_id}/license-export8 (-5)38 (-23)67 (-10)71 (-9)76 (-24)160 (+60)
GET/api/v3/sbom/{sbom_id}/packages140 (+20)210 (-10)360 (+60)400 (+90)580 (+90)710 (+220)
GET/api/v3/sbom/{sbom_id}/related99 (-71)160 (-40)250 (+20)310 (+10)380 (+80)480 (+180)
GET/api/v3/sbom?limit=10&sort=name:asc&total=true220 (+10)340 (-20)480 (0)610 (+110)780 (-40)900 (0)
GET/api/v3/sbom?offset=100&limit=10&total=true100 (-40)280 (0)410 (+10)500 (+30)780 (+30)1,300 (+490)
GET/api/v3/sbom?q=label:type=product&total=true5 (-5)10 (-46)46 (-24)65 (-11)72 (-8)76 (-4)
GET/api/v3/sbom?q=license~GPL&sort=name:desc&total=true6 (-9)33 (-28)61 (-15)71 (-9)74 (-12)77 (-9)
GET/api/v3/sbom?q=name~redhat&total=true690 (+220)1,100 (+100)1,500 (+300)1,700 (+400)3,500 (+2,100)4,900 (+3,500)
GET/api/v3/sbom?q=published>2024-01-01&total=true94 (-36)250 (+40)480 (+100)520 (+20)1,000 (-200)1,100 (-100)
GET/api/v3/sbom?sort=ingested:desc&total=true280 (0)430 (+20)660 (+160)760 (+140)1,100 (+210)2,100 (+1,210)
GET/api/v3/sbom?total=true97 (-53)180 (-50)390 (+40)580 (+160)1,100 (+450)1,500 (+810)
advisory 13
GET/api/v3/advisory/urn:uuid:{advisory_id}46 (-2)52 (-31)96 (-4)100 (-10)110 (-20)130 (-20)
GET/api/v3/advisory/urn:uuid:{advisory_id}/download9 (-5)16 (-41)60 (-14)69 (-11)87 (-5)170 (+20)
GET/api/v3/advisory?deprecated=Consider&total=true11 (-13)52 (-20)73 (-15)86 (-24)1,800 (-400)2,700 (-300)
GET/api/v3/advisory?limit=1&total=true48 (-3)62 (-12)120 (+10)550 (+440)1,100 (+340)1,800 (+1,040)
GET/api/v3/advisory?limit=10&sort=ingested:desc&total=true8 (-7)43 (-20)69 (-8)76 (-10)2,600 (+200)3,100 (-100)
GET/api/v3/advisory?offset=100&limit=10&total=true67 (-7)87 (-2)130 (+31)200 (+90)400 (-1,000)2,400 (-100)
GET/api/v3/advisory?offset={offset}&limit=1190 (-90)340 (-110)610 (0)700 (+30)1,100 (+210)1,200 (+310)
GET/api/v3/advisory?q=CVE-2021-&total=true180 (-10)320 (+10)880 (-420)1,300 (-600)1,900 (-500)3,400 (0)
GET/api/v3/advisory?q=identifier=CVE-2022-0981&total=true46 (-3)52 (-31)97 (-13)100 (-10)120 (-10)240 (+100)
GET/api/v3/advisory?q=modified>3 days ago&total=true6 (-3)15 (-35)56 (-12)65 (-9)77 (-6)110 (+10)
GET/api/v3/advisory?q=title~openssl&total=true14 (-26)58 (-17)77 (-13)92 (-5)380 (+90)940 (+150)
GET/api/v3/advisory?sort=modified:desc&total=true10 (-7)47 (-22)71 (-12)82 (-16)1,700 (-500)3,100 (+300)
GET/api/v3/advisory?total=true99 (0)130 (+20)210 (+40)300 (+120)780 (+570)2,400 (-400)
vulnerability 7
POST/api/v3/vulnerability/analyze55 (-445)530 (-330)660 (-340)1,300 (-200)2,400 (0)7,400 (+3,900)
GET/api/v3/vulnerability?offset=100&limit=10&total=true5 (-3)8 (-9)44 (-15)62 (-6)110 (+10)520 (-50)
GET/api/v3/vulnerability?q=base_score>=7.0&total=true5 (-4)8 (-7)46 (-14)64 (-6)300 (-250)720 (-380)
GET/api/v3/vulnerability?q=base_severity=high&total=true6 (-3)9 (-13)47 (-18)68 (-5)290 (-540)1,200 (-300)
GET/api/v3/vulnerability?q=cwes=CWE-79&total=true6 (-4)17 (-9)64 (-2)80 (+6)520 (-180)840 (-460)
GET/api/v3/vulnerability?sort=base_score:desc&total=true510 (-20)800 (+80)1,100 (+160)1,300 (+200)1,700 (+200)2,800 (+1,100)
GET/api/v3/vulnerability?total=true6 (-3)9 (-5)41 (-16)61 (-8)160 (-260)600 (-40)
purl 15
GET/api/v3/purl/base/{purl}10 (-14)49 (-13)78 (-4)190 (+10)310 (+30)440 (+150)
GET/api/v3/purl/base?q=namespace=redhat&total=true44 (-4)58 (-27)92 (-8)99 (-11)150 (+10)530 (+330)
GET/api/v3/purl/base?q=type=rpm&total=true44 (-3)63 (-21)88 (-10)95 (-5)100 (-10)110 (-10)
GET/api/v3/purl/base?sort=name:asc&total=true130 (-80)170 (-70)210 (-80)230 (-80)330 (-60)610 (-130)
GET/api/v3/purl/base?total=true44 (-3)61 (-20)91 (-8)96 (-4)110 (0)240 (+10)
POST/api/v3/purl/recommend150 (-80)200 (-80)230 (-90)250 (-100)320 (-110)530 (-90)
GET/api/v3/purl/{purl_id}32 (-45)65 (-35)85 (-65)94 (-76)190 (-20)420 (+50)
GET/api/v3/purl?offset=100&limit=10&total=true45 (-2)54 (-26)92 (-6)99 (-1)260 (-90)800 (+270)
GET/api/v3/purl?q=curl&total=true8 (-6)40 (-17)60 (-24)72 (-368)1,700 (+400)2,300 (-2,100)
GET/api/v3/purl?q=license~GPLv3+...&sort=name:desc&total=true7 (-23)32 (-26)53 (-15)60 (-12)73 (-12)83 (-8)
GET/api/v3/purl?q=name=curl&total=true5 (-7)26 (-25)54 (-9)60 (-12)140 (-60)490 (+150)
GET/api/v3/purl?q=purl:namespace=redhat&total=true5 (-4)26 (-20)53 (-7)61 (-4)2,800 (+200)7,100 (+4,100)
GET/api/v3/purl?q=purl:ty=rpm&total=true5 (-3)25 (-22)56 (-4)63 (-7)2,900 (-500)3,700 (-600)
GET/api/v3/purl?sort=purl:name:asc&total=true5 (-5)28 (-24)57 (-6)63 (-9)320 (-170)730 (+110)
GET/api/v3/purl?total=true5 (-3)19 (-23)49 (-10)58 (-7)270 (-240)580 (-220)
license 9
GET/api/v3/license/spdx/license/{license_id}43 (0)43 (-1)44 (-2)45 (-3)57 (-11)84 (-16)
GET/api/v3/license/spdx/license?q=apache&total=true2 (-1)3 (-2)4 (-2)5 (-2)13 (-14)44 (-11)
GET/api/v3/license/spdx/license?q=gpl&total=true43 (0)44 (0)45 (-1)46 (-2)58 (-5)86 (-4)
GET/api/v3/license/spdx/license?total=true43 (0)43 (-1)44 (-2)45 (-3)62 (-2)79 (-10)
GET/api/v3/license?limit=10&sort=license:asc&total=true12 (-17)43 (-16)62 (-16)71 (-13)89 (-8)130 (-40)
GET/api/v3/license?q=ASL&sort=license:desc&total=true8 (-10)36 (-18)57 (-15)64 (-15)77 (-19)170 (+20)
GET/api/v3/license?q=license~Apache&total=true7 (-6)34 (-15)54 (-12)60 (-14)75 (-17)97 (-43)
GET/api/v3/license?q=license~GPL&total=true7 (-6)33 (-15)55 (-9)61 (-11)75 (-12)140 (-30)
GET/api/v3/license?total=true51 (-10)80 (-16)99 (-11)110 (-10)120 (-10)150 (-50)
analysis 3
GET/api/v3/analysis/component/{component}3 (-3)4 (-4)7 (-55)55 (-13)70 (-6)95 (-5)
GET/api/v3/analysis/latest/component/{cpe}3 (-3)4 (-4)7 (-56)54 (-15)69 (-7)94 (-16)
GET/api/v3/analysis/status3 (-3)4 (-4)6 (-56)54 (-15)69 (-7)110 (+11)
importer 1
GET/api/v3/importer?total=true2 (-2)3 (-3)5 (-51)43 (-23)67 (-5)270 (+160)
group 3
GET/api/v3/group/sbom?parents=resolve&total=true3 (-3)4 (-4)6 (-56)54 (-15)69 (-7)120 (+20)
GET/api/v3/group/sbom?total=true3 (-3)4 (-4)6 (-57)54 (-15)69 (-6)86 (-24)
GET/api/v3/group/sbom?totals=true&total=true3 (-3)4 (-4)6 (-56)54 (-15)70 (-6)200 (+90)
labels 3
GET/api/v3/advisory-labels?filter_text=type&limit=10003,700 (-2,200)4,000 (-2,300)4,300 (-2,600)4,600 (-2,400)5,900 (-1,600)5,900 (-1,600)
GET/api/v3/sbom-labels?limit=10&filter_text=&total=true47 (-9)76 (-22)95 (-15)110 (-10)120 (-10)120 (-10)
GET/api/v3/sbom-labels?total=true48 (-14)81 (-19)100 (-10)100 (-20)120 (0)120 (0)
other 2
GET/.well-known/trustify1 (0)1 (0)2 (-1)3 (-1)4 (-2)36 (-3)
POST/api/v3/ui/extract-sbom-purls1 (0)1 (0)2 (-1)3 (-1)4 (-3)43 (-1)

Failures

No failures recorded.

Exceptions

No exceptions raised in the locustfile.