← All runs

Trustify branch daily perf tests · 2026-10-28 06:14 UTC

Target trustify (release/0.6.z, scale snapshot) · 2026-10-28 06:14:54 UTC → 06:24:52 UTC · Users 10 · Deltas vs previous run (2026-10-27 06:05 UTC, branch_0.6.z_2026-10-27T05-16-26_a575145)

Type branch-daily · Dataset scale-20260317T023702Z · Scenario etc/scenarios/main/full-20260317T023702Z.json5 · Branch release/0.6.z · Commit a575145e4aec · Workflow run

Duration
9m 58s
Total requests
756,856 (+7,184)
Failure rate
0.0%
0 failed requests
Throughput
1,263.8 req/s (+13.0)
Latency 95%ile
20 ms (-16)
Latency 99%ile
74 ms (-2)
Endpoints
72
0 with failures

Over time

Throughput

Requests and failures per second

Response time

Percentiles over Locust's rolling window, ms

Users

Concurrent simulated users

Load plan

ActionStartedStoppedElapsedUsers
Increasing06:14:5406:14:580m 04s2 → 10
Maintaining06:14:5806:24:529m 54s10 → 10

Top 10 slowest endpoints (95%ile)

#MethodName95%ile (ms)Average (ms)# Requests
1GET/api/v3/advisory-labels?filter_text=type&limit=10007,7004,434118
2GET/api/v3/sbom/{sbom_id}/download2,5002,352113
3GET/api/v3/sbom?q=name~redhat&total=true2,200735110
4GET/api/v3/advisory?offset={offset}&limit=12,000534112
5GET/api/v3/advisory?q=CVE-2021-&total=true1,300352557
6GET/api/v3/vulnerability?sort=base_score:desc&total=true1,300539433
7GET/api/v3/sbom?sort=ingested:desc&total=true900357103
8GET/api/v3/sbom?limit=10&sort=name:asc&total=true840318112
9POST/api/v3/vulnerability/analyze7502981,021
10GET/api/v3/sbom/{sbom_id}/packages480157106

Request metrics

MethodName# Requests# FailsFail %Average (ms)Min (ms)Max (ms)Avg size (B)RPSFailures/s
sbom 16
GET/api/v3/sbom/by-package?purl={purl}113 (-9)0 (0)0%96.4 (0)49.78251,2870.19 (0)0
GET/api/v3/sbom/count-by-package98 (-16)0 (0)0%19.3 (-5.0)2.7776.730.16 (0)0
GET/api/v3/sbom/{sbom_id}110 (-1)0 (0)0%116 (-0.4)18.52882,0150.18 (0)0
GET/api/v3/sbom/{sbom_id}/all-license-ids111 (+3)0 (0)0%13.6 (-0.6)2.3273.120.19 (0)0
GET/api/v3/sbom/{sbom_id}/download113 (+4)0 (0)0%2,352 (-20.5)2,1322,599136,458,6380.19 (0)0
GET/api/v3/sbom/{sbom_id}/license-export99 (-43)0 (0)0%75.7 (+52.4)3.304,7192340.17 (-0.1)0
GET/api/v3/sbom/{sbom_id}/packages106 (-2)0 (0)0%157 (-2.5)11.81,47312,6480.18 (0)0
GET/api/v3/sbom/{sbom_id}/related106 (+1)0 (0)0%156 (+33.6)15.62,36615,3720.18 (0)0
GET/api/v3/sbom?limit=10&sort=name:asc&total=true112 (-4)0 (0)0%318 (+69.8)25.77,34712,1890.19 (0)0
GET/api/v3/sbom?offset=100&limit=10&total=true205 (-19)0 (0)0%173 (-7.8)18.23,01811,9000.34 (0)0
GET/api/v3/sbom?q=label:type=product&total=true107 (-5)0 (0)0%18.3 (+4.3)2.1686.7220.18 (0)0
GET/api/v3/sbom?q=license~GPL&sort=name:desc&total=true111 (-18)0 (0)0%20.1 (+0.5)2.5677.0220.19 (0)0
GET/api/v3/sbom?q=name~redhat&total=true110 (-23)0 (0)0%735 (+42.3)8.0411,838220.18 (0)0
GET/api/v3/sbom?q=published>2024-01-01&total=true120 (+15)0 (0)0%156 (-31.7)20.82,57029,3170.20 (0)0
GET/api/v3/sbom?sort=ingested:desc&total=true103 (-9)0 (0)0%357 (+40.7)22.35,19229,6000.17 (0)0
GET/api/v3/sbom?total=true207 (-39)0 (0)0%182 (+15.7)20.73,75129,3170.35 (-0.1)0
advisory 13
GET/api/v3/advisory/urn:uuid:{advisory_id}592 (-50)0 (0)0%52.1 (-0.9)3.001312,3950.99 (-0.1)0
GET/api/v3/advisory/urn:uuid:{advisory_id}/download593 (-87)0 (0)0%24.2 (+4.7)4.17662178,4230.99 (-0.1)0
GET/api/v3/advisory?deprecated=Consider&total=true579 (-57)0 (0)0%81.2 (+24.9)5.5211,64044,0030.97 (-0.1)0
GET/api/v3/advisory?limit=1&total=true112 (-21)0 (0)0%111 (+1.1)5.841,8903,5810.19 (0)0
GET/api/v3/advisory?limit=10&sort=ingested:desc&total=true592 (-82)0 (0)0%64.1 (+2.0)3.757,89920,1930.99 (-0.1)0
GET/api/v3/advisory?offset=100&limit=10&total=true604 (-48)0 (0)0%97.0 (+16.6)5.893,39919,9301.01 (-0.1)0
GET/api/v3/advisory?offset={offset}&limit=1112 (-21)0 (0)0%534 (+276.6)53.09,5741,9880.19 (0)0
GET/api/v3/advisory?q=CVE-2021-&total=true557 (-134)0 (0)0%352 (+30.8)7.935,13649,7650.93 (-0.2)0
GET/api/v3/advisory?q=identifier=CVE-2022-0981&total=true564 (-107)0 (0)0%53.7 (-0.1)3.721371,9710.94 (-0.2)0
GET/api/v3/advisory?q=modified>3 days ago&total=true598 (-75)0 (0)0%17.3 (+0.8)2.3184.9221.00 (-0.1)0
GET/api/v3/advisory?q=title~openssl&total=true551 (-89)0 (0)0%50.5 (+11.1)6.873,707126,4520.92 (-0.1)0
GET/api/v3/advisory?sort=modified:desc&total=true629 (-30)0 (0)0%86.0 (+29.2)4.9014,14538,1281.05 (0)0
GET/api/v3/advisory?total=true580 (-59)0 (0)0%147 (+15.8)5.725,27648,3290.97 (-0.1)0
vulnerability 7
POST/api/v3/vulnerability/analyze1,021 (+110)0 (0)0%298 (-32.7)1.127,3082,737,2261.70 (+0.2)0
GET/api/v3/vulnerability?offset=100&limit=10&total=true512 (+87)0 (0)0%19.7 (+3.4)2.0078410,0880.85 (+0.1)0
GET/api/v3/vulnerability?q=base_score>=7.0&total=true508 (+77)0 (0)0%23.1 (+2.0)2.581,96719,3980.85 (+0.1)0
GET/api/v3/vulnerability?q=base_severity=high&total=true485 (+32)0 (0)0%20.6 (-3.3)2.6354319,5200.81 (+0.1)0
GET/api/v3/vulnerability?q=cwes=CWE-79&total=true464 (+56)0 (0)0%29.5 (+0.1)2.412,21118,8830.77 (+0.1)0
GET/api/v3/vulnerability?sort=base_score:desc&total=true433 (+29)0 (0)0%539 (-69.1)86.49,18110,0280.72 (0)0
GET/api/v3/vulnerability?total=true494 (+29)0 (0)0%21.4 (+4.7)2.461,10619,2740.82 (0)0
purl 15
GET/api/v3/purl/base/{purl}458 (-22)0 (0)0%43.9 (+4.8)4.023,67048,8270.76 (0)0
GET/api/v3/purl/base?q=namespace=redhat&total=true510 (+16)0 (0)0%60.0 (+4.5)2.007982,0800.85 (0)0
GET/api/v3/purl/base?q=type=rpm&total=true485 (+7)0 (0)0%52.9 (-0.5)2.782362,0800.81 (0)0
GET/api/v3/purl/base?sort=name:asc&total=true449 (-71)0 (0)0%130 (-6.1)26.11,4832,9430.75 (-0.1)0
GET/api/v3/purl/base?total=true499 (+7)0 (0)0%52.3 (-1.8)2.841722,4500.83 (0)0
POST/api/v3/purl/recommend1,479 (-23)0 (0)0%153 (-3.7)35.91,4522,7472.47 (0)0
GET/api/v3/purl/{purl_id}450 (-60)0 (0)0%47.4 (+2.3)8.671,0555310.75 (-0.1)0
GET/api/v3/purl?offset=100&limit=10&total=true490 (+1)0 (0)0%56.6 (-1.0)2.216454,0370.82 (0)0
GET/api/v3/purl?q=curl&total=true454 (-43)0 (0)0%64.3 (+11.8)2.253,1339,9930.76 (-0.1)0
GET/api/v3/purl?q=license~GPLv3+...&sort=name:desc&total=true456 (-50)0 (0)0%19.4 (+0.7)1.6982.0220.76 (-0.1)0
GET/api/v3/purl?q=name=curl&total=true469 (-33)0 (0)0%22.1 (+3.3)1.631,07612,0840.78 (-0.1)0
GET/api/v3/purl?q=purl:namespace=redhat&total=true473 (-12)0 (0)0%116 (+41.2)1.7217,7369,9480.79 (0)0
GET/api/v3/purl?q=purl:ty=rpm&total=true505 (+23)0 (0)0%62.4 (-10.1)1.626,6329,9430.84 (0)0
GET/api/v3/purl?sort=purl:name:asc&total=true486 (-24)0 (0)0%23.8 (+0.2)1.6971011,1010.81 (0)0
GET/api/v3/purl?total=true460 (-39)0 (0)0%21.4 (+3.5)1.409079,9650.77 (-0.1)0
license 9
GET/api/v3/license/spdx/license/{license_id}2,239 (+102)0 (0)0%41.8 (-0.2)0.8880.41,1433.74 (+0.2)0
GET/api/v3/license/spdx/license?q=apache&total=true2,176 (+30)0 (0)0%2.81 (+0.2)0.8941.21653.63 (+0.1)0
GET/api/v3/license/spdx/license?q=gpl&total=true2,158 (-21)0 (0)0%42.1 (+0.1)1.1484.51,9813.60 (0)0
GET/api/v3/license/spdx/license?total=true2,207 (+53)0 (0)0%42.1 (+0.3)1.041061,5253.69 (+0.1)0
GET/api/v3/license?limit=10&sort=license:asc&total=true2,191 (+14)0 (0)0%22.3 (-2.5)4.451524253.66 (0)0
GET/api/v3/license?q=ASL&sort=license:desc&total=true2,126 (+9)0 (0)0%20.2 (-0.4)2.821,394223.55 (0)0
GET/api/v3/license?q=license~Apache&total=true2,175 (+113)0 (0)0%17.9 (-1.1)2.241451203.63 (+0.2)0
GET/api/v3/license?q=license~GPL&total=true2,150 (+132)0 (0)0%16.5 (-2.4)2.1593.9923.59 (+0.2)0
GET/api/v3/license?total=true2,240 (+83)0 (0)0%59.7 (-1.9)5.503251,1013.74 (+0.1)0
analysis 3
GET/api/v3/analysis/component/{component}29,714 (+4,477)0 (0)0%6.23 (-1.2)1.0094.32549.62 (+7.5)0
GET/api/v3/analysis/latest/component/{cpe}29,306 (+4,142)0 (0)0%6.26 (-1.1)1.021692548.93 (+6.9)0
GET/api/v3/analysis/status29,891 (+4,450)0 (0)0%5.94 (-1.1)0.911,39110349.91 (+7.5)0
importer 1
GET/api/v3/importer?total=true105,471 (+13,321)0 (0)0%4.96 (-0.8)0.871,3912176.11 (+22.4)0
group 3
GET/api/v3/group/sbom?parents=resolve&total=true29,635 (+3,950)0 (0)0%6.02 (-1.0)1.141593849.48 (+6.6)0
GET/api/v3/group/sbom?total=true29,721 (+3,980)0 (0)0%6.01 (-1.0)1.092972249.63 (+6.7)0
GET/api/v3/group/sbom?totals=true&total=true30,274 (+4,862)0 (0)0%5.97 (-1.2)0.991,3922250.55 (+8.2)0
labels 3
GET/api/v3/advisory-labels?filter_text=type&limit=1000118 (-26)0 (0)0%4,434 (+632.9)3,07918,776600.20 (0)0
GET/api/v3/sbom-labels?limit=10&filter_text=&total=true109 (-1)0 (0)0%58.8 (-0.2)8.461181,0650.18 (0)0
GET/api/v3/sbom-labels?total=true102 (-5)0 (0)0%59.6 (-1.2)6.811171,0650.17 (0)0
other 2
GET/.well-known/trustify216,562 (-15,110)0 (0)0%1.13 (+0.1)0.561,390886361.61 (-24.9)0
POST/api/v3/ui/extract-sbom-purls215,657 (-16,443)0 (0)0%1.26 (+0.1)0.6212545360.10 (-27.2)0

Response time metrics (ms)

MethodName50%ile75%ile90%ile95%ile99%ile100%ile
sbom 16
GET/api/v3/sbom/by-package?purl={purl}82 (-1)110 (-10)130 (-10)140 (-40)490 (+220)820 (+410)
GET/api/v3/sbom/count-by-package8 (-1)32 (-15)59 (-8)69 (-4)77 (-2)77 (-15)
GET/api/v3/sbom/{sbom_id}120 (0)130 (-10)150 (-10)220 (+10)280 (0)290 (-40)
GET/api/v3/sbom/{sbom_id}/all-license-ids5 (0)8 (0)56 (+1)62 (-6)71 (-1)73 (+1)
GET/api/v3/sbom/{sbom_id}/download2,300 (-100)2,400 (0)2,500 (0)2,500 (0)2,600 (-100)2,600 (-100)
GET/api/v3/sbom/{sbom_id}/license-export8 (0)51 (+13)73 (+6)78 (+7)4,700 (+4,624)4,700 (+4,540)
GET/api/v3/sbom/{sbom_id}/packages87 (-53)200 (-10)300 (-60)480 (+80)1,200 (+620)1,500 (+790)
GET/api/v3/sbom/{sbom_id}/related94 (-5)160 (0)250 (0)430 (+120)1,200 (+820)2,400 (+1,920)
GET/api/v3/sbom?limit=10&sort=name:asc&total=true170 (-50)270 (-70)490 (+10)840 (+230)2,600 (+1,820)7,300 (+6,400)
GET/api/v3/sbom?offset=100&limit=10&total=true98 (-2)180 (-100)350 (-60)440 (-60)1,500 (+720)3,000 (+1,700)
GET/api/v3/sbom?q=label:type=product&total=true6 (+1)33 (+23)60 (+14)66 (+1)77 (+5)87 (+11)
GET/api/v3/sbom?q=license~GPL&sort=name:desc&total=true6 (0)35 (+2)63 (+2)69 (-2)74 (0)77 (0)
GET/api/v3/sbom?q=name~redhat&total=true300 (-390)1,100 (0)1,600 (+100)2,200 (+500)6,100 (+2,600)12,000 (+7,100)
GET/api/v3/sbom?q=published>2024-01-01&total=true94 (0)130 (-120)300 (-180)460 (-60)1,600 (+600)2,600 (+1,500)
GET/api/v3/sbom?sort=ingested:desc&total=true190 (-90)390 (-40)520 (-140)900 (+140)5,100 (+4,000)5,200 (+3,100)
GET/api/v3/sbom?total=true99 (+2)180 (0)370 (-20)440 (-140)1,800 (+700)3,800 (+2,300)
advisory 13
GET/api/v3/advisory/urn:uuid:{advisory_id}46 (0)50 (-2)92 (-4)110 (+10)120 (+10)130 (0)
GET/api/v3/advisory/urn:uuid:{advisory_id}/download9 (0)29 (+13)65 (+5)74 (+5)85 (-2)660 (+490)
GET/api/v3/advisory?deprecated=Consider&total=true12 (+1)58 (+6)74 (+1)84 (-2)1,900 (+100)12,000 (+9,300)
GET/api/v3/advisory?limit=1&total=true48 (0)63 (+1)110 (-10)290 (-260)1,400 (+300)1,900 (+100)
GET/api/v3/advisory?limit=10&sort=ingested:desc&total=true10 (+2)39 (-4)65 (-4)75 (-1)1,600 (-1,000)7,900 (+4,800)
GET/api/v3/advisory?offset=100&limit=10&total=true64 (-3)85 (-2)100 (-30)210 (+10)1,200 (+800)3,400 (+1,000)
GET/api/v3/advisory?offset={offset}&limit=1230 (+40)430 (+90)950 (+340)2,000 (+1,300)4,700 (+3,600)9,600 (+8,400)
GET/api/v3/advisory?q=CVE-2021-&total=true170 (-10)290 (-30)1,000 (+120)1,300 (0)2,900 (+1,000)5,100 (+1,700)
GET/api/v3/advisory?q=identifier=CVE-2022-0981&total=true46 (0)54 (+2)97 (0)110 (+10)120 (0)140 (-100)
GET/api/v3/advisory?q=modified>3 days ago&total=true6 (0)14 (-1)59 (+3)65 (0)78 (+1)85 (-25)
GET/api/v3/advisory?q=title~openssl&total=true17 (+3)64 (+6)80 (+3)96 (+4)420 (+40)3,700 (+2,760)
GET/api/v3/advisory?sort=modified:desc&total=true12 (+2)53 (+6)72 (+1)82 (0)1,500 (-200)14,000 (+10,900)
GET/api/v3/advisory?total=true94 (-5)110 (-20)180 (-30)270 (-30)2,300 (+1,520)5,300 (+2,900)
vulnerability 7
POST/api/v3/vulnerability/analyze190 (+135)490 (-40)640 (-20)750 (-550)2,500 (+100)7,300 (-100)
GET/api/v3/vulnerability?offset=100&limit=10&total=true5 (0)11 (+3)46 (+2)64 (+2)270 (+160)780 (+260)
GET/api/v3/vulnerability?q=base_score>=7.0&total=true5 (0)8 (0)42 (-4)63 (-1)290 (-10)2,000 (+1,280)
GET/api/v3/vulnerability?q=base_severity=high&total=true5 (-1)9 (0)46 (-1)67 (-1)390 (+100)540 (-660)
GET/api/v3/vulnerability?q=cwes=CWE-79&total=true6 (0)13 (-4)57 (-7)69 (-11)540 (+20)2,200 (+1,360)
GET/api/v3/vulnerability?sort=base_score:desc&total=true370 (-140)490 (-310)1,000 (-100)1,300 (0)4,100 (+2,400)9,200 (+6,400)
GET/api/v3/vulnerability?total=true5 (-1)8 (-1)43 (+2)58 (-3)690 (+530)1,100 (+500)
purl 15
GET/api/v3/purl/base/{purl}9 (-1)52 (+3)80 (+2)160 (-30)280 (-30)3,700 (+3,260)
GET/api/v3/purl/base?q=namespace=redhat&total=true44 (0)63 (+5)93 (+1)99 (0)300 (+150)800 (+270)
GET/api/v3/purl/base?q=type=rpm&total=true44 (0)55 (-8)90 (+2)98 (+3)110 (+10)240 (+130)
GET/api/v3/purl/base?sort=name:asc&total=true130 (0)160 (-10)200 (-10)210 (-20)300 (-30)1,500 (+890)
GET/api/v3/purl/base?total=true44 (0)55 (-6)91 (0)98 (+2)110 (0)170 (-70)
POST/api/v3/purl/recommend150 (0)200 (0)230 (0)270 (+20)330 (+10)1,500 (+970)
GET/api/v3/purl/{purl_id}27 (-5)67 (+2)85 (0)97 (+3)220 (+30)1,100 (+680)
GET/api/v3/purl?offset=100&limit=10&total=true44 (-1)53 (-1)93 (+1)98 (-1)370 (+110)640 (-160)
GET/api/v3/purl?q=curl&total=true6 (-2)36 (-4)65 (+5)220 (+148)1,400 (-300)3,100 (+800)
GET/api/v3/purl?q=license~GPLv3+...&sort=name:desc&total=true7 (0)36 (+4)58 (+5)62 (+2)73 (0)82 (-1)
GET/api/v3/purl?q=name=curl&total=true5 (0)27 (+1)54 (0)61 (+1)240 (+100)1,100 (+610)
GET/api/v3/purl?q=purl:namespace=redhat&total=true5 (0)14 (-12)55 (+2)60 (-1)2,500 (-300)18,000 (+10,900)
GET/api/v3/purl?q=purl:ty=rpm&total=true5 (0)27 (+2)56 (0)60 (-3)2,000 (-900)6,600 (+2,900)
GET/api/v3/purl?sort=purl:name:asc&total=true5 (0)17 (-11)54 (-3)61 (-2)540 (+220)710 (-20)
GET/api/v3/purl?total=true5 (0)19 (0)53 (+4)60 (+2)320 (+50)910 (+330)
license 9
GET/api/v3/license/spdx/license/{license_id}43 (0)43 (0)44 (0)45 (0)60 (+3)80 (-4)
GET/api/v3/license/spdx/license?q=apache&total=true2 (0)3 (0)4 (0)5 (0)21 (+8)41 (-3)
GET/api/v3/license/spdx/license?q=gpl&total=true43 (0)44 (0)44 (-1)45 (-1)60 (+2)85 (-1)
GET/api/v3/license/spdx/license?total=true43 (0)43 (0)44 (0)45 (0)59 (-3)110 (+31)
GET/api/v3/license?limit=10&sort=license:asc&total=true10 (-2)36 (-7)61 (-1)70 (-1)81 (-8)150 (+20)
GET/api/v3/license?q=ASL&sort=license:desc&total=true8 (0)32 (-4)57 (0)65 (+1)79 (+2)1,400 (+1,230)
GET/api/v3/license?q=license~Apache&total=true6 (-1)27 (-7)55 (+1)61 (+1)75 (0)140 (+43)
GET/api/v3/license?q=license~GPL&total=true6 (-1)19 (-14)54 (-1)60 (-1)75 (0)94 (-46)
GET/api/v3/license?total=true49 (-2)72 (-8)98 (-1)110 (0)120 (0)330 (+180)
analysis 3
GET/api/v3/analysis/component/{component}3 (0)4 (0)6 (-1)41 (-14)69 (-1)94 (-1)
GET/api/v3/analysis/latest/component/{cpe}3 (0)4 (0)6 (-1)36 (-18)69 (0)170 (+76)
GET/api/v3/analysis/status3 (0)4 (0)5 (-1)25 (-29)69 (0)1,400 (+1,290)
importer 1
GET/api/v3/importer?total=true2 (0)3 (0)4 (-1)7 (-36)67 (0)1,400 (+1,130)
group 3
GET/api/v3/group/sbom?parents=resolve&total=true3 (0)4 (0)6 (0)34 (-20)69 (0)160 (+40)
GET/api/v3/group/sbom?total=true3 (0)4 (0)6 (0)35 (-19)69 (0)300 (+214)
GET/api/v3/group/sbom?totals=true&total=true3 (0)4 (0)5 (-1)25 (-29)69 (-1)1,400 (+1,200)
labels 3
GET/api/v3/advisory-labels?filter_text=type&limit=10003,800 (+100)4,300 (+300)6,000 (+1,700)7,700 (+3,100)13,000 (+7,100)19,000 (+13,100)
GET/api/v3/sbom-labels?limit=10&filter_text=&total=true48 (+1)68 (-8)97 (+2)110 (0)120 (0)120 (0)
GET/api/v3/sbom-labels?total=true48 (0)79 (-2)99 (-1)100 (0)110 (-10)120 (0)
other 2
GET/.well-known/trustify1 (0)1 (0)2 (0)3 (0)4 (0)1,400 (+1,364)
POST/api/v3/ui/extract-sbom-purls1 (0)2 (+1)2 (0)3 (0)4 (0)120 (+77)

Failures

No failures recorded.

Exceptions

No exceptions raised in the locustfile.