← All runs

Trustify branch daily perf tests · 2026-10-22 05:16 UTC

Target trustify (release/0.7.z, scale snapshot) · 2026-10-22 05:16:38 UTC → 05:26:36 UTC · Users 10 · Deltas vs previous run (2026-10-20 18:39 UTC, branch_0.7.z_2026-10-20T17-51-03_9c54e1d)

Type branch-daily · Dataset scale-20260317T023702Z · Scenario etc/scenarios/main/full-20260317T023702Z.json5 · Branch release/0.7.z · Commit 9c54e1d1af5b · Workflow run

Duration
9m 58s
Total requests
189,583 (-17,767)
Failure rate
0.0%
0 failed requests
Throughput
316.5 req/s (-29.3)
Latency 95%ile
72 ms (0)
Latency 99%ile
190 ms (0)
Endpoints
72
0 with failures

Over time

Throughput

Requests and failures per second

Response time

Percentiles over Locust's rolling window, ms

Users

Concurrent simulated users

Load plan

ActionStartedStoppedElapsedUsers
Increasing05:16:3805:16:420m 04s2 → 10
Maintaining05:16:4205:26:369m 54s10 → 10

Top 10 slowest endpoints (95%ile)

#MethodName95%ile (ms)Average (ms)# Requests
1GET/api/v3/advisory-labels?filter_text=type&limit=10006,5005,71698
2GET/api/v3/purl?sort=purl:name:asc&total=true4,200298119
3POST/api/v3/vulnerability/analyze4,0001,249330
4GET/api/v3/sbom/{sbom_id}/download3,2003,10095
5GET/api/v3/purl?q=purl:ty=rpm&total=true2,600234115
6GET/api/v3/purl?q=purl:namespace=redhat&total=true2,300196134
7GET/api/v3/advisory?q=CVE-2021-&total=true1,800395574
8POST/api/v3/purl/recommend1,5001,028350
9GET/api/v3/sbom?q=name~redhat&total=true1,50065092
10GET/api/v3/vulnerability?sort=base_score:desc&total=true1,500784179

Request metrics

MethodName# Requests# FailsFail %Average (ms)Min (ms)Max (ms)Avg size (B)RPSFailures/s
sbom 16
GET/api/v3/sbom/by-package?purl={purl}74 (-52)0 (0)0%114 (+20.8)19.72321,2870.12 (-0.1)0
GET/api/v3/sbom/count-by-package90 (-26)0 (0)0%29.4 (-5.4)5.5286.130.15 (0)0
GET/api/v3/sbom/{sbom_id}79 (-41)0 (0)0%125 (-5.7)47.12382,0150.13 (-0.1)0
GET/api/v3/sbom/{sbom_id}/all-license-ids90 (-42)0 (0)0%24.2 (+5.3)2.6879.620.15 (-0.1)0
GET/api/v3/sbom/{sbom_id}/download95 (-4)0 (0)0%3,100 (+271.7)2,9343,283136,458,6380.16 (0)0
GET/api/v3/sbom/{sbom_id}/license-export92 (-26)0 (0)0%33.4 (+2.2)5.7191.82340.15 (0)0
GET/api/v3/sbom/{sbom_id}/packages91 (-17)0 (0)0%175 (+43.9)19.639812,6480.15 (0)0
GET/api/v3/sbom/{sbom_id}/related114 (0)0 (0)0%153 (+16.8)22.043315,3720.19 (0)0
GET/api/v3/sbom?limit=10&sort=name:asc&total=true85 (-32)0 (0)0%298 (+56.4)39.61,39512,1890.14 (-0.1)0
GET/api/v3/sbom?offset=100&limit=10&total=true206 (-50)0 (0)0%233 (+43.1)29.388511,9410.34 (-0.1)0
GET/api/v3/sbom?q=label:type=product&total=true97 (-12)0 (0)0%23.1 (+1.3)2.0480.7220.16 (0)0
GET/api/v3/sbom?q=license~GPL&sort=name:desc&total=true93 (+3)0 (0)0%29.5 (+3.7)2.7279.7220.16 (0)0
GET/api/v3/sbom?q=name~redhat&total=true92 (-43)0 (0)0%650 (+202.3)11.31,706220.15 (-0.1)0
GET/api/v3/sbom?q=published>2024-01-01&total=true105 (-19)0 (0)0%212 (+39.6)33.999829,3170.18 (0)0
GET/api/v3/sbom?sort=ingested:desc&total=true108 (-12)0 (0)0%284 (+23.1)35.598829,6000.18 (0)0
GET/api/v3/sbom?total=true190 (-49)0 (0)0%194 (+35.7)29.41,06429,3170.32 (-0.1)0
advisory 13
GET/api/v3/advisory/urn:uuid:{advisory_id}550 (-122)0 (0)0%57.7 (-2.4)4.001182,3950.92 (-0.2)0
GET/api/v3/advisory/urn:uuid:{advisory_id}/download554 (-118)0 (0)0%27.9 (+0.3)4.7894.9178,4230.92 (-0.2)0
GET/api/v3/advisory?deprecated=Consider&total=true537 (-88)0 (0)0%75.4 (+10.1)7.152,44744,0030.90 (-0.1)0
GET/api/v3/advisory?limit=1&total=true95 (-18)0 (0)0%108 (+32.7)7.801,5352,3360.16 (0)0
GET/api/v3/advisory?limit=10&sort=ingested:desc&total=true589 (-78)0 (0)0%67.2 (+11.3)5.612,70820,1930.98 (-0.1)0
GET/api/v3/advisory?offset=100&limit=10&total=true631 (-21)0 (0)0%69.9 (+1.9)6.193,10619,4841.05 (0)0
GET/api/v3/advisory?offset={offset}&limit=195 (-18)0 (0)0%262 (+22.5)53.38962,1380.16 (0)0
GET/api/v3/advisory?q=CVE-2021-&total=true574 (-81)0 (0)0%395 (+67.4)8.953,52750,0570.96 (-0.1)0
GET/api/v3/advisory?q=identifier=CVE-2022-0981&total=true549 (-140)0 (0)0%59.9 (-0.3)4.601301,9710.92 (-0.2)0
GET/api/v3/advisory?q=modified>3 days ago&total=true578 (-116)0 (0)0%23.2 (+2.3)2.1483.2220.97 (-0.2)0
GET/api/v3/advisory?q=title~openssl&total=true597 (-69)0 (0)0%50.3 (+3.1)8.67753126,4521.00 (-0.1)0
GET/api/v3/advisory?sort=modified:desc&total=true631 (+30)0 (0)0%66.4 (-8.0)6.322,33138,1281.05 (+0.1)0
GET/api/v3/advisory?total=true605 (-33)0 (0)0%126 (+23.7)8.202,84647,8131.01 (-0.1)0
vulnerability 7
POST/api/v3/vulnerability/analyze330 (-84)0 (0)0%1,249 (+247.5)1.356,4914,627,9010.55 (-0.1)0
GET/api/v3/vulnerability?offset=100&limit=10&total=true184 (-5)0 (0)0%70.5 (-2.9)3.961,4017,5130.31 (0)0
GET/api/v3/vulnerability?q=base_score>=7.0&total=true155 (-58)0 (0)0%52.1 (+14.0)2.8092518,4230.26 (-0.1)0
GET/api/v3/vulnerability?q=base_severity=high&total=true161 (-25)0 (0)0%51.7 (+6.5)2.671,18418,6320.27 (0)0
GET/api/v3/vulnerability?q=cwes=CWE-79&total=true184 (-6)0 (0)0%41.6 (+5.0)2.4485918,9070.31 (0)0
GET/api/v3/vulnerability?sort=base_score:desc&total=true179 (-59)0 (0)0%784 (+199.5)2212,18613,9990.30 (-0.1)0
GET/api/v3/vulnerability?total=true174 (-18)0 (0)0%29.9 (+4.5)3.5589418,8410.29 (0)0
purl 15
GET/api/v3/purl/base/{purl}141 (+10)0 (0)0%96.7 (+9.8)7.3940948,8270.24 (0)0
GET/api/v3/purl/base?q=namespace=redhat&total=true135 (+31)0 (0)0%80.5 (+5.1)4.396312,0800.23 (+0.1)0
GET/api/v3/purl/base?q=type=rpm&total=true141 (+2)0 (0)0%59.7 (-0.7)3.811252,0800.24 (0)0
GET/api/v3/purl/base?sort=name:asc&total=true136 (+15)0 (0)0%207 (+2.4)85.04522,9430.23 (0)0
GET/api/v3/purl/base?total=true117 (-20)0 (0)0%57.2 (-6.6)3.891362,4500.20 (0)0
POST/api/v3/purl/recommend350 (-12)0 (0)0%1,028 (-18.3)2191,8082,7470.58 (0)0
GET/api/v3/purl/{purl_id}103 (-17)0 (0)0%107 (+0.2)19.53025370.17 (0)0
GET/api/v3/purl?offset=100&limit=10&total=true115 (-7)0 (0)0%138 (+51.3)1.875,2755,5000.19 (0)0
GET/api/v3/purl?q=curl&total=true134 (+18)0 (0)0%118 (-56.6)6.401,57211,7160.22 (0)0
GET/api/v3/purl?q=license~GPLv3+...&sort=name:desc&total=true120 (-14)0 (0)0%29.8 (-1.1)5.75109220.20 (0)0
GET/api/v3/purl?q=name=curl&total=true130 (+10)0 (0)0%35.4 (-2.1)2.2928512,0840.22 (0)0
GET/api/v3/purl?q=purl:namespace=redhat&total=true134 (+18)0 (0)0%196 (-1.3)2.013,70015,4640.22 (0)0
GET/api/v3/purl?q=purl:ty=rpm&total=true115 (-16)0 (0)0%234 (+66.6)2.153,23415,4780.19 (0)0
GET/api/v3/purl?sort=purl:name:asc&total=true119 (-8)0 (0)0%298 (+25.9)1.894,67111,1010.20 (0)0
GET/api/v3/purl?total=true123 (+5)0 (0)0%236 (+24.2)2.014,90913,9180.21 (0)0
license 9
GET/api/v3/license/spdx/license/{license_id}1,832 (-8)0 (0)0%41.2 (-0.4)1.1463.91,1433.06 (0)0
GET/api/v3/license/spdx/license?q=apache&total=true1,847 (-46)0 (0)0%2.86 (0)0.9832.71653.08 (-0.1)0
GET/api/v3/license/spdx/license?q=gpl&total=true1,920 (+90)0 (0)0%41.4 (-0.6)1.2573.21,9813.21 (+0.2)0
GET/api/v3/license/spdx/license?total=true1,829 (-38)0 (0)0%41.0 (-0.2)1.2867.21,5253.05 (-0.1)0
GET/api/v3/license?limit=10&sort=license:asc&total=true1,830 (-3)0 (0)0%37.9 (+1.7)6.011774253.06 (0)0
GET/api/v3/license?q=ASL&sort=license:desc&total=true1,804 (-80)0 (0)0%31.5 (+1.5)3.04157223.01 (-0.1)0
GET/api/v3/license?q=license~Apache&total=true1,772 (-83)0 (0)0%27.2 (+1.2)2.4099.31202.96 (-0.1)0
GET/api/v3/license?q=license~GPL&total=true1,786 (-133)0 (0)0%27.0 (+1.1)2.3397.4922.98 (-0.2)0
GET/api/v3/license?total=true1,774 (-85)0 (0)0%71.3 (+1.4)8.171541,1012.96 (-0.1)0
analysis 3
GET/api/v3/analysis/component/{component}13,750 (-1,541)0 (0)0%14.0 (+1.4)1.3599.72522.96 (-2.5)0
GET/api/v3/analysis/latest/component/{cpe}13,751 (-1,560)0 (0)0%13.8 (+1.1)1.371012522.96 (-2.6)0
GET/api/v3/analysis/status13,719 (-1,217)0 (0)0%13.5 (+1.3)1.2610110322.90 (-2.0)0
importer 1
GET/api/v3/importer?total=true50,920 (-5,249)0 (0)0%10.9 (+1.0)1.02101285.01 (-8.7)0
group 3
GET/api/v3/group/sbom?parents=resolve&total=true14,259 (-1,838)0 (0)0%13.2 (+1.4)1.261723823.81 (-3.0)0
GET/api/v3/group/sbom?total=true14,257 (-1,904)0 (0)0%13.0 (+1.5)1.221702223.80 (-3.1)0
GET/api/v3/group/sbom?totals=true&total=true14,296 (-1,792)0 (0)0%13.3 (+1.6)1.241632223.87 (-3.0)0
labels 3
GET/api/v3/advisory-labels?filter_text=type&limit=100098 (-8)0 (0)0%5,716 (+425.8)4,9197,433600.16 (0)0
GET/api/v3/sbom-labels?limit=10&filter_text=&total=true112 (-16)0 (0)0%66.9 (+0.2)7.521251,0650.19 (0)0
GET/api/v3/sbom-labels?total=true76 (-32)0 (0)0%74.5 (+5.6)10.71261,0650.13 (-0.1)0
other 2
GET/.well-known/trustify13,190 (-180)0 (0)0%41.8 (+0.3)0.8981.11,17722.02 (-0.3)0
POST/api/v3/ui/extract-sbom-purls12,995 (-510)0 (0)0%2.46 (+0.2)0.9143.34521.70 (-0.8)0

Response time metrics (ms)

MethodName50%ile75%ile90%ile95%ile99%ile100%ile
sbom 16
GET/api/v3/sbom/by-package?purl={purl}120 (+23)130 (+10)150 (+20)190 (+50)230 (+40)230 (+10)
GET/api/v3/sbom/count-by-package11 (-7)64 (-2)76 (0)78 (-4)86 (+3)86 (-14)
GET/api/v3/sbom/{sbom_id}130 (0)140 (-10)200 (-10)210 (-10)240 (0)240 (-10)
GET/api/v3/sbom/{sbom_id}/all-license-ids8 (+1)45 (+30)72 (+4)73 (-2)80 (+1)80 (0)
GET/api/v3/sbom/{sbom_id}/download3,100 (+300)3,100 (+200)3,200 (+300)3,200 (+200)3,300 (+100)3,300 (+100)
GET/api/v3/sbom/{sbom_id}/license-export14 (+1)63 (+1)77 (+2)80 (+3)92 (+9)92 (+5)
GET/api/v3/sbom/{sbom_id}/packages160 (+60)290 (+90)310 (+50)370 (+90)400 (+110)400 (+100)
GET/api/v3/sbom/{sbom_id}/related150 (+30)200 (+20)260 (+50)290 (+40)390 (+100)430 (+130)
GET/api/v3/sbom?limit=10&sort=name:asc&total=true260 (+60)370 (+80)520 (+110)670 (+150)1,400 (+700)1,400 (+400)
GET/api/v3/sbom?offset=100&limit=10&total=true180 (+30)310 (+50)500 (+130)590 (+180)710 (+20)890 (-210)
GET/api/v3/sbom?q=label:type=product&total=true8 (+1)38 (0)71 (-1)74 (-1)81 (+1)81 (-6)
GET/api/v3/sbom?q=license~GPL&sort=name:desc&total=true10 (+2)59 (+9)71 (-2)76 (0)80 (-2)80 (-2)
GET/api/v3/sbom?q=name~redhat&total=true790 (+550)1,100 (+200)1,300 (+310)1,500 (+500)1,700 (+500)1,700 (+400)
GET/api/v3/sbom?q=published>2024-01-01&total=true120 (0)210 (0)480 (+170)610 (+220)1,000 (+310)1,000 (+160)
GET/api/v3/sbom?sort=ingested:desc&total=true220 (-10)400 (+40)590 (+100)700 (+100)810 (+40)990 (+200)
GET/api/v3/sbom?total=true150 (+40)230 (+30)390 (+100)490 (+110)890 (+380)1,100 (+550)
advisory 13
GET/api/v3/advisory/urn:uuid:{advisory_id}47 (0)70 (-13)100 (-10)110 (0)120 (0)120 (-20)
GET/api/v3/advisory/urn:uuid:{advisory_id}/download14 (+2)42 (-10)73 (0)78 (+1)84 (-1)95 (-15)
GET/api/v3/advisory?deprecated=Consider&total=true20 (+3)71 (+3)87 (+5)120 (+10)1,900 (+500)2,400 (-300)
GET/api/v3/advisory?limit=1&total=true60 (+12)91 (+31)110 (+10)470 (+360)1,500 (+710)1,500 (+530)
GET/api/v3/advisory?limit=10&sort=ingested:desc&total=true14 (+2)63 (0)75 (-1)82 (-1)2,100 (+600)2,700 (0)
GET/api/v3/advisory?offset=100&limit=10&total=true74 (+8)88 (+2)95 (+3)100 (+4)120 (-90)3,100 (+700)
GET/api/v3/advisory?offset={offset}&limit=1230 (+20)380 (+90)440 (+40)510 (-90)900 (-10)900 (-20)
GET/api/v3/advisory?q=CVE-2021-&total=true190 (+10)330 (+50)1,400 (+540)1,800 (+100)2,300 (+200)3,500 (+200)
GET/api/v3/advisory?q=identifier=CVE-2022-0981&total=true48 (+1)75 (-8)110 (0)110 (0)120 (0)130 (-60)
GET/api/v3/advisory?q=modified>3 days ago&total=true8 (+1)47 (+13)67 (+1)73 (+3)79 (+1)83 (-4)
GET/api/v3/advisory?q=title~openssl&total=true29 (+7)77 (+5)88 (0)95 (-4)220 (+20)750 (-20)
GET/api/v3/advisory?sort=modified:desc&total=true17 (0)69 (-1)83 (-1)98 (-2)1,800 (-500)2,300 (-200)
GET/api/v3/advisory?total=true100 (+5)140 (+40)180 (+50)190 (+20)300 (+90)2,800 (+300)
vulnerability 7
POST/api/v3/vulnerability/analyze980 (+50)2,200 (+600)3,500 (+700)4,000 (+900)4,700 (+1,000)6,500 (+1,800)
GET/api/v3/vulnerability?offset=100&limit=10&total=true46 (+1)60 (+11)100 (0)110 (0)630 (-200)1,400 (+470)
GET/api/v3/vulnerability?q=base_score>=7.0&total=true9 (+1)44 (+11)73 (0)300 (+219)870 (+380)920 (+230)
GET/api/v3/vulnerability?q=base_severity=high&total=true9 (+1)51 (+33)71 (+1)280 (-20)910 (-90)1,200 (+100)
GET/api/v3/vulnerability?q=cwes=CWE-79&total=true9 (+1)21 (+7)69 (+2)79 (-16)800 (+110)860 (-30)
GET/api/v3/vulnerability?sort=base_score:desc&total=true620 (+120)1,100 (+420)1,400 (+470)1,500 (+300)2,000 (+600)2,200 (+100)
GET/api/v3/vulnerability?total=true8 (+1)12 (-2)67 (-1)73 (-3)800 (+120)890 (+190)
purl 15
GET/api/v3/purl/base/{purl}61 (-4)170 (+20)250 (+50)270 (+50)310 (0)410 (+80)
GET/api/v3/purl/base?q=namespace=redhat&total=true46 (0)89 (+6)100 (0)150 (+20)630 (+150)630 (+100)
GET/api/v3/purl/base?q=type=rpm&total=true46 (0)82 (-1)99 (-1)100 (-10)120 (-10)130 (-70)
GET/api/v3/purl/base?sort=name:asc&total=true200 (0)240 (0)300 (+10)350 (+40)420 (+90)450 (+100)
GET/api/v3/purl/base?total=true45 (-1)74 (-10)99 (-1)100 (-10)120 (-40)140 (-80)
POST/api/v3/purl/recommend1,100 (0)1,200 (-100)1,400 (0)1,500 (0)1,600 (-100)1,800 (-200)
GET/api/v3/purl/{purl_id}97 (-2)150 (0)170 (-20)190 (-20)210 (-50)300 (-50)
GET/api/v3/purl?offset=100&limit=10&total=true7 (-38)42 (-28)58 (-38)63 (-36)4,800 (+3,820)5,300 (+1,800)
GET/api/v3/purl?q=curl&total=true42 (-16)70 (-100)97 (-523)860 (-20)1,500 (+100)1,600 (-200)
GET/api/v3/purl?q=license~GPLv3+...&sort=name:desc&total=true14 (-2)52 (-1)69 (+2)72 (0)79 (-9)110 (+14)
GET/api/v3/purl?q=name=curl&total=true13 (-4)57 (+2)69 (-5)80 (-70)240 (+30)280 (+20)
GET/api/v3/purl?q=purl:namespace=redhat&total=true8 (0)45 (-8)66 (-10)2,300 (+200)3,200 (+600)3,700 (+1,000)
GET/api/v3/purl?q=purl:ty=rpm&total=true9 (-1)50 (-4)63 (-3)2,600 (+900)3,100 (+500)3,200 (+400)
GET/api/v3/purl?sort=purl:name:asc&total=true14 (-10)57 (0)72 (-4)4,200 (+1,100)4,500 (+600)4,700 (+600)
GET/api/v3/purl?total=true7 (-4)40 (-15)63 (-10)85 (-2,715)4,800 (+1,200)4,900 (+1,200)
license 9
GET/api/v3/license/spdx/license/{license_id}43 (+1)43 (0)44 (0)45 (0)54 (-10)64 (-56)
GET/api/v3/license/spdx/license?q=apache&total=true2 (0)4 (+1)5 (0)6 (0)10 (-1)33 (-41)
GET/api/v3/license/spdx/license?q=gpl&total=true43 (0)44 (+1)45 (0)46 (0)54 (-16)73 (-37)
GET/api/v3/license/spdx/license?total=true43 (+1)43 (0)44 (0)45 (0)51 (-15)67 (-43)
GET/api/v3/license?limit=10&sort=license:asc&total=true30 (+7)60 (+1)76 (0)82 (-1)94 (-6)180 (0)
GET/api/v3/license?q=ASL&sort=license:desc&total=true17 (+3)54 (+1)70 (0)77 (+1)85 (-9)160 (0)
GET/api/v3/license?q=license~Apache&total=true12 (+1)50 (+3)64 (+4)72 (+1)80 (-3)99 (-81)
GET/api/v3/license?q=license~GPL&total=true12 (+2)49 (+1)63 (+1)72 (0)80 (-2)97 (-73)
GET/api/v3/license?total=true60 (+2)96 (+2)110 (0)120 (0)130 (-10)150 (-60)
analysis 3
GET/api/v3/analysis/component/{component}5 (+1)7 (+1)64 (+2)70 (+1)76 (0)100 (+5)
GET/api/v3/analysis/latest/component/{cpe}5 (0)7 (+1)63 (+1)70 (+1)76 (0)100 (+3)
GET/api/v3/analysis/status5 (+1)7 (+1)62 (+1)69 (0)76 (+1)100 (0)
importer 1
GET/api/v3/importer?total=true4 (+1)5 (0)56 (+8)66 (0)74 (+1)100 (+2)
group 3
GET/api/v3/group/sbom?parents=resolve&total=true5 (+1)6 (0)62 (+2)69 (+1)77 (+2)170 (+72)
GET/api/v3/group/sbom?total=true4 (0)6 (0)62 (+3)69 (+1)77 (+2)170 (+60)
GET/api/v3/group/sbom?totals=true&total=true5 (+1)6 (0)62 (+3)69 (+1)77 (+2)160 (+65)
labels 3
GET/api/v3/advisory-labels?filter_text=type&limit=10005,700 (+500)5,900 (+300)6,400 (+500)6,500 (+500)7,400 (+1,000)7,400 (+900)
GET/api/v3/sbom-labels?limit=10&filter_text=&total=true52 (+1)94 (+9)110 (0)120 (0)120 (0)120 (0)
GET/api/v3/sbom-labels?total=true59 (+6)110 (+17)120 (+10)120 (0)130 (+10)130 (-10)
other 2
GET/.well-known/trustify42 (0)43 (0)44 (0)45 (0)54 (+2)81 (+5)
POST/api/v3/ui/extract-sbom-purls2 (+1)3 (0)5 (+1)6 (+1)8 (+1)43 (+5)

Failures

No failures recorded.

Exceptions

No exceptions raised in the locustfile.