← All runs

Trustify branch daily perf tests · 2026-10-22 14:49 UTC

Target trustify (release/0.7.z, scale snapshot) · 2026-10-22 14:49:32 UTC → 14:59:31 UTC · Users 10 · Deltas vs previous run (2026-10-22 05:16 UTC, branch_0.7.z_2026-10-22T04-26-10_9c54e1d)

Type branch-daily · Dataset scale-20260317T023702Z · Scenario etc/scenarios/main/full-20260317T023702Z.json5 · Branch release/0.7.z · Commit 9c54e1d1af5b · Workflow run

Duration
9m 59s
Total requests
191,136 (+1,553)
Failure rate
0.0%
0 failed requests
Throughput
318.8 req/s (+2.3)
Latency 95%ile
73 ms (+1)
Latency 99%ile
200 ms (+10)
Endpoints
72
0 with failures

Over time

Throughput

Requests and failures per second

Response time

Percentiles over Locust's rolling window, ms

Users

Concurrent simulated users

Load plan

ActionStartedStoppedElapsedUsers
Increasing14:49:3214:49:360m 04s2 → 10
Maintaining14:49:3614:59:319m 55s10 → 10

Top 10 slowest endpoints (95%ile)

#MethodName95%ile (ms)Average (ms)# Requests
1GET/api/v3/advisory-labels?filter_text=type&limit=10006,8005,77398
2GET/api/v3/sbom/{sbom_id}/download3,2003,031104
3POST/api/v3/vulnerability/analyze3,000909413
4GET/api/v3/purl?q=purl:ty=rpm&total=true2,600213127
5GET/api/v3/advisory?q=CVE-2021-&total=true1,700369607
6GET/api/v3/vulnerability?sort=base_score:desc&total=true1,600833200
7POST/api/v3/purl/recommend1,500994417
8GET/api/v3/sbom?q=name~redhat&total=true1,300431120
9GET/api/v3/purl?q=purl:namespace=redhat&total=true1,100172166
10GET/api/v3/sbom?sort=ingested:desc&total=true78029890

Request metrics

MethodName# Requests# FailsFail %Average (ms)Min (ms)Max (ms)Avg size (B)RPSFailures/s
sbom 16
GET/api/v3/sbom/by-package?purl={purl}91 (+17)0 (0)0%102 (-11.9)18.22321,2870.15 (0)0
GET/api/v3/sbom/count-by-package113 (+23)0 (0)0%34.6 (+5.2)5.2391.230.19 (0)0
GET/api/v3/sbom/{sbom_id}99 (+20)0 (0)0%141 (+15.5)56.67262,0150.17 (0)0
GET/api/v3/sbom/{sbom_id}/all-license-ids112 (+22)0 (0)0%26.6 (+2.4)2.4191.320.19 (0)0
GET/api/v3/sbom/{sbom_id}/download104 (+9)0 (0)0%3,031 (-68.6)2,8853,342136,458,6380.17 (0)0
GET/api/v3/sbom/{sbom_id}/license-export126 (+34)0 (0)0%32.7 (-0.7)4.321012350.21 (+0.1)0
GET/api/v3/sbom/{sbom_id}/packages109 (+18)0 (0)0%123 (-52.3)17.640812,6480.18 (0)0
GET/api/v3/sbom/{sbom_id}/related110 (-4)0 (0)0%139 (-14.1)24.131415,3720.18 (0)0
GET/api/v3/sbom?limit=10&sort=name:asc&total=true97 (+12)0 (0)0%276 (-22.3)71.487212,1890.16 (0)0
GET/api/v3/sbom?offset=100&limit=10&total=true215 (+9)0 (0)0%159 (-74.1)26.579311,9000.36 (0)0
GET/api/v3/sbom?q=label:type=product&total=true105 (+8)0 (0)0%24.7 (+1.6)2.5185.6220.18 (0)0
GET/api/v3/sbom?q=license~GPL&sort=name:desc&total=true107 (+14)0 (0)0%25.1 (-4.4)2.6581.4220.18 (0)0
GET/api/v3/sbom?q=name~redhat&total=true120 (+28)0 (0)0%431 (-218.5)9.821,558220.20 (0)0
GET/api/v3/sbom?q=published>2024-01-01&total=true109 (+4)0 (0)0%192 (-20.4)28.51,17629,3170.18 (0)0
GET/api/v3/sbom?sort=ingested:desc&total=true90 (-18)0 (0)0%298 (+14.6)67.499629,6000.15 (0)0
GET/api/v3/sbom?total=true211 (+21)0 (0)0%171 (-23.2)28.565429,3170.35 (0)0
advisory 13
GET/api/v3/advisory/urn:uuid:{advisory_id}591 (+41)0 (0)0%62.3 (+4.5)4.161412,3950.99 (+0.1)0
GET/api/v3/advisory/urn:uuid:{advisory_id}/download594 (+40)0 (0)0%29.8 (+2.0)4.69110178,4230.99 (+0.1)0
GET/api/v3/advisory?deprecated=Consider&total=true563 (+26)0 (0)0%74.1 (-1.3)7.492,41644,0030.94 (0)0
GET/api/v3/advisory?limit=1&total=true97 (+2)0 (0)0%68.0 (-40.1)9.225912,4870.16 (0)0
GET/api/v3/advisory?limit=10&sort=ingested:desc&total=true587 (-2)0 (0)0%58.8 (-8.4)5.791,90520,1930.98 (0)0
GET/api/v3/advisory?offset=100&limit=10&total=true602 (-29)0 (0)0%71.8 (+1.9)5.672,33019,7921.00 (0)0
GET/api/v3/advisory?offset={offset}&limit=197 (+2)0 (0)0%228 (-34.5)56.76512,0020.16 (0)0
GET/api/v3/advisory?q=CVE-2021-&total=true607 (+33)0 (0)0%369 (-25.9)8.853,78649,7881.01 (+0.1)0
GET/api/v3/advisory?q=identifier=CVE-2022-0981&total=true609 (+60)0 (0)0%59.8 (-0.1)4.091311,9711.02 (+0.1)0
GET/api/v3/advisory?q=modified>3 days ago&total=true550 (-28)0 (0)0%23.0 (-0.2)2.14103220.92 (0)0
GET/api/v3/advisory?q=title~openssl&total=true612 (+15)0 (0)0%46.6 (-3.7)8.67613126,4521.02 (0)0
GET/api/v3/advisory?sort=modified:desc&total=true572 (-59)0 (0)0%71.7 (+5.3)6.552,69138,1280.95 (-0.1)0
GET/api/v3/advisory?total=true621 (+16)0 (0)0%121 (-5.6)7.872,21748,4101.04 (0)0
vulnerability 7
POST/api/v3/vulnerability/analyze413 (+83)0 (0)0%909 (-339.5)1.384,9624,441,7860.69 (+0.1)0
GET/api/v3/vulnerability?offset=100&limit=10&total=true205 (+21)0 (0)0%65.3 (-5.3)3.787947,6710.34 (0)0
GET/api/v3/vulnerability?q=base_score>=7.0&total=true179 (+24)0 (0)0%54.5 (+2.4)2.511,41518,9190.30 (0)0
GET/api/v3/vulnerability?q=base_severity=high&total=true214 (+53)0 (0)0%55.2 (+3.5)4.221,21218,9360.36 (+0.1)0
GET/api/v3/vulnerability?q=cwes=CWE-79&total=true155 (-29)0 (0)0%72.0 (+30.4)3.011,42218,9910.26 (0)0
GET/api/v3/vulnerability?sort=base_score:desc&total=true200 (+21)0 (0)0%833 (+49.1)2422,63415,1480.33 (0)0
GET/api/v3/vulnerability?total=true206 (+32)0 (0)0%33.9 (+4.0)2.7780518,9890.34 (+0.1)0
purl 15
GET/api/v3/purl/base/{purl}136 (-5)0 (0)0%81.5 (-15.3)7.2035548,8270.23 (0)0
GET/api/v3/purl/base?q=namespace=redhat&total=true154 (+19)0 (0)0%78.5 (-2.0)4.708712,0800.26 (0)0
GET/api/v3/purl/base?q=type=rpm&total=true150 (+9)0 (0)0%58.9 (-0.8)3.641272,0800.25 (0)0
GET/api/v3/purl/base?sort=name:asc&total=true130 (-6)0 (0)0%223 (+16.0)81.44322,9430.22 (0)0
GET/api/v3/purl/base?total=true134 (+17)0 (0)0%59.8 (+2.6)2.852082,4500.22 (0)0
POST/api/v3/purl/recommend417 (+67)0 (0)0%994 (-34.4)1902,1472,7470.70 (+0.1)0
GET/api/v3/purl/{purl_id}133 (+30)0 (0)0%93.9 (-13.0)18.02125370.22 (0)0
GET/api/v3/purl?offset=100&limit=10&total=true122 (+7)0 (0)0%77.2 (-61.0)4.597054,4740.20 (0)0
GET/api/v3/purl?q=curl&total=true145 (+11)0 (0)0%83.7 (-33.8)6.641,19611,7140.24 (0)0
GET/api/v3/purl?q=license~GPLv3+...&sort=name:desc&total=true152 (+32)0 (0)0%32.1 (+2.3)4.77139220.25 (+0.1)0
GET/api/v3/purl?q=name=curl&total=true131 (+1)0 (0)0%36.0 (+0.5)2.0226612,0840.22 (0)0
GET/api/v3/purl?q=purl:namespace=redhat&total=true166 (+32)0 (0)0%172 (-23.8)2.173,80013,6170.28 (+0.1)0
GET/api/v3/purl?q=purl:ty=rpm&total=true127 (+12)0 (0)0%213 (-21.0)2.193,46413,6170.21 (0)0
GET/api/v3/purl?sort=purl:name:asc&total=true133 (+14)0 (0)0%56.3 (-241.4)1.7861511,1010.22 (0)0
GET/api/v3/purl?total=true143 (+20)0 (0)0%42.5 (-193.1)1.799509,8770.24 (0)0
license 9
GET/api/v3/license/spdx/license/{license_id}1,831 (-1)0 (0)0%41.1 (-0.1)1.121121,1433.05 (0)0
GET/api/v3/license/spdx/license?q=apache&total=true1,741 (-106)0 (0)0%3.23 (+0.4)0.9574.91652.90 (-0.2)0
GET/api/v3/license/spdx/license?q=gpl&total=true1,750 (-170)0 (0)0%41.9 (+0.5)1.241311,9812.92 (-0.3)0
GET/api/v3/license/spdx/license?total=true1,752 (-77)0 (0)0%41.3 (+0.3)1.091211,5252.92 (-0.1)0
GET/api/v3/license?limit=10&sort=license:asc&total=true1,790 (-40)0 (0)0%38.5 (+0.6)5.351774252.99 (-0.1)0
GET/api/v3/license?q=ASL&sort=license:desc&total=true1,792 (-12)0 (0)0%32.8 (+1.2)4.43164222.99 (0)0
GET/api/v3/license?q=license~Apache&total=true1,815 (+43)0 (0)0%28.6 (+1.3)2.531511203.03 (+0.1)0
GET/api/v3/license?q=license~GPL&total=true1,815 (+29)0 (0)0%26.9 (-0.1)2.50153923.03 (0)0
GET/api/v3/license?total=true1,819 (+45)0 (0)0%71.9 (+0.6)7.532131,1013.03 (+0.1)0
analysis 3
GET/api/v3/analysis/component/{component}13,629 (-121)0 (0)0%14.0 (0)1.331082522.73 (-0.2)0
GET/api/v3/analysis/latest/component/{cpe}13,816 (+65)0 (0)0%13.9 (+0.1)1.371052523.04 (+0.1)0
GET/api/v3/analysis/status13,827 (+108)0 (0)0%13.5 (0)1.2310310323.06 (+0.2)0
importer 1
GET/api/v3/importer?total=true50,755 (-165)0 (0)0%11.0 (+0.1)1.01116284.65 (-0.4)0
group 3
GET/api/v3/group/sbom?parents=resolve&total=true14,432 (+173)0 (0)0%12.8 (-0.3)1.201083824.07 (+0.3)0
GET/api/v3/group/sbom?total=true14,644 (+387)0 (0)0%12.8 (-0.2)1.171092224.42 (+0.6)0
GET/api/v3/group/sbom?totals=true&total=true14,505 (+209)0 (0)0%13.2 (-0.1)1.2099.42224.19 (+0.3)0
labels 3
GET/api/v3/advisory-labels?filter_text=type&limit=100098 (0)0 (0)0%5,773 (+56.5)5,0308,134600.16 (0)0
GET/api/v3/sbom-labels?limit=10&filter_text=&total=true87 (-25)0 (0)0%71.9 (+5.1)15.41271,0650.15 (0)0
GET/api/v3/sbom-labels?total=true114 (+38)0 (0)0%67.6 (-6.9)9.991241,0650.19 (+0.1)0
other 2
GET/.well-known/trustify13,211 (+21)0 (0)0%41.8 (0)0.8882.31,17722.03 (0)0
POST/api/v3/ui/extract-sbom-purls13,348 (+353)0 (0)0%2.42 (0)0.9035.44522.26 (+0.6)0

Response time metrics (ms)

MethodName50%ile75%ile90%ile95%ile99%ile100%ile
sbom 16
GET/api/v3/sbom/by-package?purl={purl}120 (0)130 (0)140 (-10)140 (-50)230 (0)230 (0)
GET/api/v3/sbom/count-by-package17 (+6)62 (-2)77 (+1)79 (+1)84 (-2)91 (+5)
GET/api/v3/sbom/{sbom_id}130 (0)140 (0)210 (+10)230 (+20)730 (+490)730 (+490)
GET/api/v3/sbom/{sbom_id}/all-license-ids10 (+2)54 (+9)74 (+2)76 (+3)86 (+6)91 (+11)
GET/api/v3/sbom/{sbom_id}/download3,000 (-100)3,100 (0)3,100 (-100)3,200 (0)3,200 (-100)3,300 (0)
GET/api/v3/sbom/{sbom_id}/license-export12 (-2)65 (+2)81 (+4)85 (+5)100 (+8)100 (+8)
GET/api/v3/sbom/{sbom_id}/packages95 (-65)180 (-110)270 (-40)300 (-70)390 (-10)410 (+10)
GET/api/v3/sbom/{sbom_id}/related140 (-10)190 (-10)200 (-60)210 (-80)260 (-130)310 (-120)
GET/api/v3/sbom?limit=10&sort=name:asc&total=true230 (-30)380 (+10)480 (-40)530 (-140)870 (-530)870 (-530)
GET/api/v3/sbom?offset=100&limit=10&total=true110 (-70)190 (-120)310 (-190)370 (-220)500 (-210)790 (-100)
GET/api/v3/sbom?q=label:type=product&total=true8 (0)46 (+8)69 (-2)78 (+4)85 (+4)86 (+5)
GET/api/v3/sbom?q=license~GPL&sort=name:desc&total=true8 (-2)52 (-7)72 (+1)74 (-2)79 (-1)81 (+1)
GET/api/v3/sbom?q=name~redhat&total=true95 (-695)920 (-180)1,200 (-100)1,300 (-200)1,500 (-200)1,600 (-100)
GET/api/v3/sbom?q=published>2024-01-01&total=true140 (+20)210 (0)350 (-130)510 (-100)960 (-40)1,200 (+200)
GET/api/v3/sbom?sort=ingested:desc&total=true250 (+30)390 (-10)570 (-20)780 (+80)1,000 (+190)1,000 (+10)
GET/api/v3/sbom?total=true140 (-10)200 (-30)320 (-70)410 (-80)450 (-440)650 (-450)
advisory 13
GET/api/v3/advisory/urn:uuid:{advisory_id}48 (+1)87 (+17)110 (+10)110 (0)120 (0)140 (+20)
GET/api/v3/advisory/urn:uuid:{advisory_id}/download14 (0)58 (+16)73 (0)80 (+2)91 (+7)110 (+15)
GET/api/v3/advisory?deprecated=Consider&total=true19 (-1)71 (0)82 (-5)90 (-30)2,000 (+100)2,400 (0)
GET/api/v3/advisory?limit=1&total=true50 (-10)81 (-10)100 (-10)110 (-360)590 (-910)590 (-910)
GET/api/v3/advisory?limit=10&sort=ingested:desc&total=true13 (-1)64 (+1)75 (0)81 (-1)1,700 (-400)1,900 (-800)
GET/api/v3/advisory?offset=100&limit=10&total=true71 (-3)86 (-2)96 (+1)100 (0)130 (+10)2,300 (-800)
GET/api/v3/advisory?offset={offset}&limit=1210 (-20)300 (-80)430 (-10)550 (+40)650 (-250)650 (-250)
GET/api/v3/advisory?q=CVE-2021-&total=true190 (0)300 (-30)1,100 (-300)1,700 (-100)2,400 (+100)3,800 (+300)
GET/api/v3/advisory?q=identifier=CVE-2022-0981&total=true48 (0)81 (+6)110 (0)110 (0)120 (0)130 (0)
GET/api/v3/advisory?q=modified>3 days ago&total=true8 (0)41 (-6)66 (-1)72 (-1)81 (+2)100 (+17)
GET/api/v3/advisory?q=title~openssl&total=true26 (-3)75 (-2)86 (-2)96 (+1)180 (-40)610 (-140)
GET/api/v3/advisory?sort=modified:desc&total=true18 (+1)70 (+1)81 (-2)89 (-9)1,900 (+100)2,700 (+400)
GET/api/v3/advisory?total=true100 (0)110 (-30)180 (0)190 (0)380 (+80)2,200 (-600)
vulnerability 7
POST/api/v3/vulnerability/analyze72 (-908)1,500 (-700)2,400 (-1,100)3,000 (-1,000)4,200 (-500)5,000 (-1,500)
GET/api/v3/vulnerability?offset=100&limit=10&total=true45 (-1)50 (-10)100 (0)110 (0)650 (+20)790 (-610)
GET/api/v3/vulnerability?q=base_score>=7.0&total=true8 (-1)39 (-5)71 (-2)220 (-80)1,300 (+430)1,400 (+480)
GET/api/v3/vulnerability?q=base_severity=high&total=true9 (0)44 (-7)71 (0)89 (-191)1,100 (+190)1,200 (0)
GET/api/v3/vulnerability?q=cwes=CWE-79&total=true8 (-1)19 (-2)70 (+1)290 (+211)1,300 (+500)1,400 (+540)
GET/api/v3/vulnerability?sort=base_score:desc&total=true580 (-40)1,300 (+200)1,500 (+100)1,600 (+100)2,500 (+500)2,600 (+400)
GET/api/v3/vulnerability?total=true8 (0)27 (+15)66 (-1)74 (+1)770 (-30)810 (-80)
purl 15
GET/api/v3/purl/base/{purl}60 (-1)120 (-50)200 (-50)260 (-10)350 (+40)360 (-50)
GET/api/v3/purl/base?q=namespace=redhat&total=true47 (+1)82 (-7)98 (-2)120 (-30)710 (+80)870 (+240)
GET/api/v3/purl/base?q=type=rpm&total=true47 (+1)84 (+2)97 (-2)100 (0)110 (-10)130 (0)
GET/api/v3/purl/base?sort=name:asc&total=true220 (+20)260 (+20)300 (0)340 (-10)410 (-10)430 (-20)
GET/api/v3/purl/base?total=true46 (+1)85 (+11)100 (+1)110 (+10)130 (+10)210 (+70)
POST/api/v3/purl/recommend1,100 (0)1,200 (0)1,400 (0)1,500 (0)1,900 (+300)2,100 (+300)
GET/api/v3/purl/{purl_id}88 (-9)110 (-40)170 (0)190 (0)200 (-10)210 (-90)
GET/api/v3/purl?offset=100&limit=10&total=true46 (+39)75 (+33)100 (+42)110 (+47)620 (-4,180)710 (-4,590)
GET/api/v3/purl?q=curl&total=true40 (-2)68 (-2)87 (-10)260 (-600)1,100 (-400)1,200 (-400)
GET/api/v3/purl?q=license~GPLv3+...&sort=name:desc&total=true16 (+2)58 (+6)67 (-2)72 (0)89 (+10)140 (+30)
GET/api/v3/purl?q=name=curl&total=true10 (-3)58 (+1)74 (+5)130 (+50)250 (+10)270 (-10)
GET/api/v3/purl?q=purl:namespace=redhat&total=true9 (+1)53 (+8)68 (+2)1,100 (-1,200)3,400 (+200)3,800 (+100)
GET/api/v3/purl?q=purl:ty=rpm&total=true10 (+1)52 (+2)73 (+10)2,600 (0)3,300 (+200)3,500 (+300)
GET/api/v3/purl?sort=purl:name:asc&total=true10 (-4)50 (-7)65 (-7)450 (-3,750)610 (-3,890)610 (-4,090)
GET/api/v3/purl?total=true8 (+1)47 (+7)62 (-1)72 (-13)560 (-4,240)950 (-3,950)
license 9
GET/api/v3/license/spdx/license/{license_id}43 (0)43 (0)44 (0)46 (+1)59 (+5)110 (+46)
GET/api/v3/license/spdx/license?q=apache&total=true2 (0)4 (0)5 (0)6 (0)24 (+14)75 (+42)
GET/api/v3/license/spdx/license?q=gpl&total=true43 (0)44 (0)45 (0)46 (0)66 (+12)130 (+57)
GET/api/v3/license/spdx/license?total=true43 (0)43 (0)45 (+1)47 (+2)71 (+20)120 (+53)
GET/api/v3/license?limit=10&sort=license:asc&total=true30 (0)61 (+1)79 (+3)85 (+3)100 (+6)180 (0)
GET/api/v3/license?q=ASL&sort=license:desc&total=true18 (+1)55 (+1)72 (+2)79 (+2)94 (+9)160 (0)
GET/api/v3/license?q=license~Apache&total=true13 (+1)51 (+1)68 (+4)75 (+3)87 (+7)150 (+51)
GET/api/v3/license?q=license~GPL&total=true11 (-1)48 (-1)64 (+1)72 (0)91 (+11)150 (+53)
GET/api/v3/license?total=true60 (0)97 (+1)120 (+10)120 (0)140 (+10)210 (+60)
analysis 3
GET/api/v3/analysis/component/{component}5 (0)7 (0)64 (0)70 (0)77 (+1)110 (+10)
GET/api/v3/analysis/latest/component/{cpe}5 (0)7 (0)64 (+1)70 (0)77 (+1)100 (0)
GET/api/v3/analysis/status5 (0)7 (0)63 (+1)70 (+1)77 (+1)100 (0)
importer 1
GET/api/v3/importer?total=true4 (0)5 (0)57 (+1)67 (+1)74 (0)120 (+20)
group 3
GET/api/v3/group/sbom?parents=resolve&total=true4 (-1)6 (0)62 (0)69 (0)75 (-2)110 (-60)
GET/api/v3/group/sbom?total=true4 (0)6 (0)62 (0)69 (0)75 (-2)110 (-60)
GET/api/v3/group/sbom?totals=true&total=true5 (0)6 (0)63 (+1)69 (0)76 (-1)99 (-61)
labels 3
GET/api/v3/advisory-labels?filter_text=type&limit=10005,700 (0)6,100 (+200)6,300 (-100)6,800 (+300)8,100 (+700)8,100 (+700)
GET/api/v3/sbom-labels?limit=10&filter_text=&total=true53 (+1)100 (+6)120 (+10)120 (0)130 (+10)130 (+10)
GET/api/v3/sbom-labels?total=true51 (-8)90 (-20)120 (0)120 (0)120 (-10)120 (-10)
other 2
GET/.well-known/trustify42 (0)43 (0)44 (0)45 (0)55 (+1)82 (+1)
POST/api/v3/ui/extract-sbom-purls1 (-1)3 (0)5 (0)6 (0)9 (+1)35 (-8)

Failures

No failures recorded.

Exceptions

No exceptions raised in the locustfile.