← All runs

Trustify branch daily perf tests · 2026-10-23 05:22 UTC

Target trustify (release/0.7.z, scale snapshot) · 2026-10-23 05:22:53 UTC → 05:32:51 UTC · Users 10 · Deltas vs previous run (2026-10-22 14:49 UTC, branch_0.7.z_2026-10-22T13-59-05_9c54e1d)

Type branch-daily · Dataset scale-20260317T023702Z · Scenario etc/scenarios/main/full-20260317T023702Z.json5 · Branch release/0.7.z · Commit 9c54e1d1af5b · Workflow run

Duration
9m 58s
Total requests
191,779 (+643)
Failure rate
0.0%
0 failed requests
Throughput
320.1 req/s (+1.3)
Latency 95%ile
73 ms (0)
Latency 99%ile
200 ms (0)
Endpoints
72
0 with failures

Over time

Throughput

Requests and failures per second

Response time

Percentiles over Locust's rolling window, ms

Users

Concurrent simulated users

Load plan

ActionStartedStoppedElapsedUsers
Increasing05:22:5305:22:570m 04s2 → 10
Maintaining05:22:5705:32:519m 54s10 → 10

Top 10 slowest endpoints (95%ile)

#MethodName95%ile (ms)Average (ms)# Requests
1GET/api/v3/advisory-labels?filter_text=type&limit=10006,3005,682101
2POST/api/v3/vulnerability/analyze3,7001,059374
3GET/api/v3/sbom/{sbom_id}/download3,2003,06692
4GET/api/v3/purl?q=purl:namespace=redhat&total=true2,700235112
5GET/api/v3/purl?q=purl:ty=rpm&total=true2,600213128
6GET/api/v3/vulnerability?sort=base_score:desc&total=true1,800914164
7GET/api/v3/advisory?q=CVE-2021-&total=true1,700409581
8POST/api/v3/purl/recommend1,5001,009417
9GET/api/v3/sbom?q=name~redhat&total=true1,400543119
10GET/api/v3/purl?q=curl&total=true850109122

Request metrics

MethodName# Requests# FailsFail %Average (ms)Min (ms)Max (ms)Avg size (B)RPSFailures/s
sbom 16
GET/api/v3/sbom/by-package?purl={purl}92 (+1)0 (0)0%110 (+7.8)24.52351,2870.15 (0)0
GET/api/v3/sbom/count-by-package114 (+1)0 (0)0%34.5 (-0.1)2.9587.930.19 (0)0
GET/api/v3/sbom/{sbom_id}111 (+12)0 (0)0%134 (-6.6)55.42392,0150.19 (0)0
GET/api/v3/sbom/{sbom_id}/all-license-ids123 (+11)0 (0)0%26.3 (-0.4)1.9787.520.21 (0)0
GET/api/v3/sbom/{sbom_id}/download92 (-12)0 (0)0%3,066 (+34.4)2,8973,336136,458,6380.15 (0)0
GET/api/v3/sbom/{sbom_id}/license-export117 (-9)0 (0)0%31.0 (-1.6)4.3786.32340.20 (0)0
GET/api/v3/sbom/{sbom_id}/packages108 (-1)0 (0)0%152 (+29.3)14.140412,6480.18 (0)0
GET/api/v3/sbom/{sbom_id}/related91 (-19)0 (0)0%142 (+2.9)25.238415,3720.15 (0)0
GET/api/v3/sbom?limit=10&sort=name:asc&total=true115 (+18)0 (0)0%284 (+8.0)56.31,39612,1890.19 (0)0
GET/api/v3/sbom?offset=100&limit=10&total=true198 (-17)0 (0)0%228 (+68.9)25.91,23511,9410.33 (0)0
GET/api/v3/sbom?q=label:type=product&total=true113 (+8)0 (0)0%21.7 (-3.0)2.4482.6220.19 (0)0
GET/api/v3/sbom?q=license~GPL&sort=name:desc&total=true93 (-14)0 (0)0%26.0 (+0.9)3.0596.6220.16 (0)0
GET/api/v3/sbom?q=name~redhat&total=true119 (-1)0 (0)0%543 (+111.3)8.831,717220.20 (0)0
GET/api/v3/sbom?q=published>2024-01-01&total=true106 (-3)0 (0)0%204 (+12.0)29.488829,3170.18 (0)0
GET/api/v3/sbom?sort=ingested:desc&total=true110 (+20)0 (0)0%308 (+9.8)28.51,05129,6000.18 (0)0
GET/api/v3/sbom?total=true171 (-40)0 (0)0%174 (+2.8)27.71,10129,3170.29 (-0.1)0
advisory 13
GET/api/v3/advisory/urn:uuid:{advisory_id}570 (-21)0 (0)0%55.7 (-6.5)3.771992,3950.95 (0)0
GET/api/v3/advisory/urn:uuid:{advisory_id}/download580 (-14)0 (0)0%31.0 (+1.2)4.48175178,4230.97 (0)0
GET/api/v3/advisory?deprecated=Consider&total=true549 (-14)0 (0)0%73.0 (-1.2)5.742,30244,0030.92 (0)0
GET/api/v3/advisory?limit=1&total=true77 (-20)0 (0)0%94.1 (+26.1)7.931,6412,2940.13 (0)0
GET/api/v3/advisory?limit=10&sort=ingested:desc&total=true520 (-67)0 (0)0%68.8 (+10.0)5.912,38620,1930.87 (-0.1)0
GET/api/v3/advisory?offset=100&limit=10&total=true570 (-32)0 (0)0%84.1 (+12.4)6.772,69920,0190.95 (-0.1)0
GET/api/v3/advisory?offset={offset}&limit=177 (-20)0 (0)0%212 (-15.8)35.36032,2430.13 (0)0
GET/api/v3/advisory?q=CVE-2021-&total=true581 (-26)0 (0)0%409 (+39.6)12.04,81450,2030.97 (0)0
GET/api/v3/advisory?q=identifier=CVE-2022-0981&total=true512 (-97)0 (0)0%63.1 (+3.3)4.582051,9710.85 (-0.2)0
GET/api/v3/advisory?q=modified>3 days ago&total=true553 (+3)0 (0)0%23.8 (+0.8)2.35103220.92 (0)0
GET/api/v3/advisory?q=title~openssl&total=true516 (-96)0 (0)0%52.7 (+6.1)6.86701126,4520.86 (-0.2)0
GET/api/v3/advisory?sort=modified:desc&total=true541 (-31)0 (0)0%73.1 (+1.4)6.432,53338,1280.90 (-0.1)0
GET/api/v3/advisory?total=true543 (-78)0 (0)0%129 (+8.1)7.982,30949,1080.91 (-0.1)0
vulnerability 7
POST/api/v3/vulnerability/analyze374 (-39)0 (0)0%1,059 (+150.0)1.685,8214,518,3670.62 (-0.1)0
GET/api/v3/vulnerability?offset=100&limit=10&total=true192 (-13)0 (0)0%41.2 (-24.1)2.548917,4940.32 (0)0
GET/api/v3/vulnerability?q=base_score>=7.0&total=true191 (+12)0 (0)0%70.1 (+15.6)3.801,49624,4900.32 (0)0
GET/api/v3/vulnerability?q=base_severity=high&total=true184 (-30)0 (0)0%54.4 (-0.8)4.231,62423,1000.31 (0)0
GET/api/v3/vulnerability?q=cwes=CWE-79&total=true181 (+26)0 (0)0%64.2 (-7.8)3.971,40519,2230.30 (0)0
GET/api/v3/vulnerability?sort=base_score:desc&total=true164 (-36)0 (0)0%914 (+80.7)2082,39517,9610.27 (-0.1)0
GET/api/v3/vulnerability?total=true170 (-36)0 (0)0%30.1 (-3.8)3.8860424,9130.28 (-0.1)0
purl 15
GET/api/v3/purl/base/{purl}125 (-11)0 (0)0%94.3 (+12.8)7.2346248,8270.21 (0)0
GET/api/v3/purl/base?q=namespace=redhat&total=true122 (-32)0 (0)0%74.0 (-4.5)3.177002,0800.20 (-0.1)0
GET/api/v3/purl/base?q=type=rpm&total=true128 (-22)0 (0)0%58.7 (-0.2)3.341182,0800.21 (0)0
GET/api/v3/purl/base?sort=name:asc&total=true120 (-10)0 (0)0%226 (+2.9)84.74552,9430.20 (0)0
GET/api/v3/purl/base?total=true121 (-13)0 (0)0%60.5 (+0.7)3.511432,4500.20 (0)0
POST/api/v3/purl/recommend417 (0)0 (0)0%1,009 (+15.2)1611,9082,7470.70 (0)0
GET/api/v3/purl/{purl_id}139 (+6)0 (0)0%92.3 (-1.6)17.32165370.23 (0)0
GET/api/v3/purl?offset=100&limit=10&total=true137 (+15)0 (0)0%89.0 (+11.8)4.659074,4740.23 (0)0
GET/api/v3/purl?q=curl&total=true122 (-23)0 (0)0%109 (+25.1)6.611,69711,7140.20 (0)0
GET/api/v3/purl?q=license~GPLv3+...&sort=name:desc&total=true134 (-18)0 (0)0%32.7 (+0.6)2.0988.8220.22 (0)0
GET/api/v3/purl?q=name=curl&total=true117 (-14)0 (0)0%39.4 (+3.4)2.2227812,0840.20 (0)0
GET/api/v3/purl?q=purl:namespace=redhat&total=true112 (-54)0 (0)0%235 (+63.0)2.163,32813,6170.19 (-0.1)0
GET/api/v3/purl?q=purl:ty=rpm&total=true128 (+1)0 (0)0%213 (+0.1)1.903,58513,6170.21 (0)0
GET/api/v3/purl?sort=purl:name:asc&total=true128 (-5)0 (0)0%64.9 (+8.6)2.1289611,1010.21 (0)0
GET/api/v3/purl?total=true134 (-9)0 (0)0%28.6 (-13.9)1.855879,8770.22 (0)0
license 9
GET/api/v3/license/spdx/license/{license_id}1,844 (+13)0 (0)0%41.7 (+0.6)0.941191,1433.08 (0)0
GET/api/v3/license/spdx/license?q=apache&total=true1,858 (+117)0 (0)0%3.27 (0)0.9687.41653.10 (+0.2)0
GET/api/v3/license/spdx/license?q=gpl&total=true1,885 (+135)0 (0)0%41.7 (-0.2)1.061131,9813.15 (+0.2)0
GET/api/v3/license/spdx/license?total=true1,821 (+69)0 (0)0%41.5 (+0.2)0.961241,5253.04 (+0.1)0
GET/api/v3/license?limit=10&sort=license:asc&total=true1,807 (+17)0 (0)0%37.6 (-0.9)6.581674253.02 (0)0
GET/api/v3/license?q=ASL&sort=license:desc&total=true1,739 (-53)0 (0)0%31.4 (-1.4)3.20171222.90 (-0.1)0
GET/api/v3/license?q=license~Apache&total=true1,786 (-29)0 (0)0%27.3 (-1.3)2.571661202.98 (0)0
GET/api/v3/license?q=license~GPL&total=true1,825 (+10)0 (0)0%27.7 (+0.8)2.41171923.05 (0)0
GET/api/v3/license?total=true1,747 (-72)0 (0)0%72.3 (+0.4)7.162281,1012.92 (-0.1)0
analysis 3
GET/api/v3/analysis/component/{component}13,803 (+174)0 (0)0%13.8 (-0.2)1.361152523.04 (+0.3)0
GET/api/v3/analysis/latest/component/{cpe}13,938 (+122)0 (0)0%13.9 (0)1.401062523.26 (+0.2)0
GET/api/v3/analysis/status13,998 (+171)0 (0)0%13.2 (-0.3)1.2910110323.36 (+0.3)0
importer 1
GET/api/v3/importer?total=true51,647 (+892)0 (0)0%10.7 (-0.2)1.00114286.20 (+1.6)0
group 3
GET/api/v3/group/sbom?parents=resolve&total=true14,523 (+91)0 (0)0%13.0 (+0.1)1.221163824.24 (+0.2)0
GET/api/v3/group/sbom?total=true14,353 (-291)0 (0)0%13.2 (+0.4)1.221722223.96 (-0.5)0
GET/api/v3/group/sbom?totals=true&total=true14,541 (+36)0 (0)0%12.9 (-0.3)1.231082224.27 (+0.1)0
labels 3
GET/api/v3/advisory-labels?filter_text=type&limit=1000101 (+3)0 (0)0%5,682 (-90.2)4,9117,427600.17 (0)0
GET/api/v3/sbom-labels?limit=10&filter_text=&total=true112 (+25)0 (0)0%65.9 (-6.1)12.51291,0650.19 (0)0
GET/api/v3/sbom-labels?total=true98 (-16)0 (0)0%68.9 (+1.3)8.611231,0650.16 (0)0
other 2
GET/.well-known/trustify13,238 (+27)0 (0)0%41.6 (-0.1)0.8781.81,17722.09 (+0.1)0
POST/api/v3/ui/extract-sbom-purls13,413 (+65)0 (0)0%2.44 (0)0.8941.54522.39 (+0.1)0

Response time metrics (ms)

MethodName50%ile75%ile90%ile95%ile99%ile100%ile
sbom 16
GET/api/v3/sbom/by-package?purl={purl}120 (0)130 (0)140 (0)160 (+20)230 (0)230 (0)
GET/api/v3/sbom/count-by-package14 (-3)67 (+5)78 (+1)80 (+1)85 (+1)88 (-3)
GET/api/v3/sbom/{sbom_id}130 (0)150 (+10)200 (-10)220 (-10)240 (-490)240 (-490)
GET/api/v3/sbom/{sbom_id}/all-license-ids9 (-1)48 (-6)66 (-8)77 (+1)83 (-3)88 (-3)
GET/api/v3/sbom/{sbom_id}/download3,100 (+100)3,100 (0)3,200 (+100)3,200 (0)3,300 (+100)3,300 (0)
GET/api/v3/sbom/{sbom_id}/license-export13 (+1)58 (-7)79 (-2)83 (-2)86 (-14)86 (-14)
GET/api/v3/sbom/{sbom_id}/packages110 (+15)230 (+50)310 (+40)310 (+10)400 (+10)400 (-10)
GET/api/v3/sbom/{sbom_id}/related110 (-30)200 (+10)210 (+10)270 (+60)380 (+120)380 (+70)
GET/api/v3/sbom?limit=10&sort=name:asc&total=true210 (-20)370 (-10)500 (+20)720 (+190)1,000 (+130)1,400 (+530)
GET/api/v3/sbom?offset=100&limit=10&total=true170 (+60)310 (+120)460 (+150)520 (+150)1,200 (+700)1,200 (+410)
GET/api/v3/sbom?q=label:type=product&total=true8 (0)38 (-8)69 (0)74 (-4)77 (-8)83 (-3)
GET/api/v3/sbom?q=license~GPL&sort=name:desc&total=true9 (+1)46 (-6)72 (0)76 (+2)97 (+18)97 (+16)
GET/api/v3/sbom?q=name~redhat&total=true130 (+35)1,100 (+180)1,300 (+100)1,400 (+100)1,700 (+200)1,700 (+100)
GET/api/v3/sbom?q=published>2024-01-01&total=true170 (+30)230 (+20)430 (+80)510 (0)670 (-290)890 (-310)
GET/api/v3/sbom?sort=ingested:desc&total=true210 (-40)430 (+40)610 (+40)810 (+30)1,000 (0)1,100 (+100)
GET/api/v3/sbom?total=true120 (-20)190 (-10)320 (0)410 (0)1,000 (+550)1,100 (+450)
advisory 13
GET/api/v3/advisory/urn:uuid:{advisory_id}47 (-1)66 (-21)110 (0)110 (0)120 (0)200 (+60)
GET/api/v3/advisory/urn:uuid:{advisory_id}/download13 (-1)59 (+1)75 (+2)81 (+1)110 (+19)170 (+60)
GET/api/v3/advisory?deprecated=Consider&total=true18 (-1)71 (0)84 (+2)95 (+5)1,900 (-100)2,300 (-100)
GET/api/v3/advisory?limit=1&total=true50 (0)77 (-4)110 (+10)120 (+10)1,600 (+1,010)1,600 (+1,010)
GET/api/v3/advisory?limit=10&sort=ingested:desc&total=true15 (+2)64 (0)79 (+4)89 (+8)1,800 (+100)2,400 (+500)
GET/api/v3/advisory?offset=100&limit=10&total=true78 (+7)90 (+4)98 (+2)110 (+10)220 (+90)2,700 (+400)
GET/api/v3/advisory?offset={offset}&limit=1200 (-10)290 (-10)330 (-100)440 (-110)600 (-50)600 (-50)
GET/api/v3/advisory?q=CVE-2021-&total=true200 (+10)390 (+90)1,300 (+200)1,700 (0)2,400 (0)4,800 (+1,000)
GET/api/v3/advisory?q=identifier=CVE-2022-0981&total=true49 (+1)89 (+8)110 (0)110 (0)130 (+10)210 (+80)
GET/api/v3/advisory?q=modified>3 days ago&total=true8 (0)45 (+4)68 (+2)72 (0)83 (+2)100 (0)
GET/api/v3/advisory?q=title~openssl&total=true50 (+24)79 (+4)89 (+3)100 (+4)200 (+20)700 (+90)
GET/api/v3/advisory?sort=modified:desc&total=true18 (0)70 (0)82 (+1)100 (+11)1,700 (-200)2,500 (-200)
GET/api/v3/advisory?total=true110 (+10)130 (+20)190 (+10)190 (0)280 (-100)2,300 (+100)
vulnerability 7
POST/api/v3/vulnerability/analyze760 (+688)1,600 (+100)3,100 (+700)3,700 (+700)4,800 (+600)5,800 (+800)
GET/api/v3/vulnerability?offset=100&limit=10&total=true8 (-37)13 (-37)68 (-32)79 (-31)800 (+150)890 (+100)
GET/api/v3/vulnerability?q=base_score>=7.0&total=true10 (+2)35 (-4)75 (+4)190 (-30)1,500 (+200)1,500 (+100)
GET/api/v3/vulnerability?q=base_severity=high&total=true9 (0)48 (+4)74 (+3)81 (-8)910 (-190)1,600 (+400)
GET/api/v3/vulnerability?q=cwes=CWE-79&total=true11 (+3)19 (0)75 (+5)200 (-90)1,300 (0)1,400 (0)
GET/api/v3/vulnerability?sort=base_score:desc&total=true630 (+50)1,400 (+100)1,700 (+200)1,800 (+200)2,400 (-100)2,400 (-200)
GET/api/v3/vulnerability?total=true9 (+1)14 (-13)71 (+5)75 (+1)600 (-170)600 (-210)
purl 15
GET/api/v3/purl/base/{purl}56 (-4)170 (+50)250 (+50)280 (+20)390 (+40)460 (+100)
GET/api/v3/purl/base?q=namespace=redhat&total=true46 (-1)81 (-1)100 (+2)170 (+50)390 (-320)700 (-170)
GET/api/v3/purl/base?q=type=rpm&total=true47 (0)75 (-9)100 (+3)100 (0)110 (0)120 (-10)
GET/api/v3/purl/base?sort=name:asc&total=true220 (0)280 (+20)330 (+30)400 (+60)430 (+20)450 (+20)
GET/api/v3/purl/base?total=true45 (-1)86 (+1)100 (0)110 (0)140 (+10)140 (-70)
POST/api/v3/purl/recommend1,100 (0)1,200 (0)1,400 (0)1,500 (0)1,700 (-200)1,900 (-200)
GET/api/v3/purl/{purl_id}89 (+1)120 (+10)170 (0)180 (-10)210 (+10)220 (+10)
GET/api/v3/purl?offset=100&limit=10&total=true55 (+9)90 (+15)100 (0)380 (+270)700 (+80)910 (+200)
GET/api/v3/purl?q=curl&total=true48 (+8)68 (0)86 (-1)850 (+590)1,200 (+100)1,700 (+500)
GET/api/v3/purl?q=license~GPLv3+...&sort=name:desc&total=true24 (+8)53 (-5)65 (-2)78 (+6)88 (-1)89 (-51)
GET/api/v3/purl?q=name=curl&total=true17 (+7)59 (+1)77 (+3)120 (-10)270 (+20)280 (+10)
GET/api/v3/purl?q=purl:namespace=redhat&total=true10 (+1)48 (-5)64 (-4)2,700 (+1,600)3,000 (-400)3,300 (-500)
GET/api/v3/purl?q=purl:ty=rpm&total=true12 (+2)56 (+4)64 (-9)2,600 (0)3,300 (0)3,600 (+100)
GET/api/v3/purl?sort=purl:name:asc&total=true14 (+4)59 (+9)75 (+10)440 (-10)670 (+60)900 (+290)
GET/api/v3/purl?total=true6 (-2)38 (-9)59 (-3)66 (-6)540 (-20)590 (-360)
license 9
GET/api/v3/license/spdx/license/{license_id}43 (0)43 (0)45 (+1)46 (0)71 (+12)120 (+10)
GET/api/v3/license/spdx/license?q=apache&total=true3 (+1)4 (0)5 (0)6 (0)26 (+2)87 (+12)
GET/api/v3/license/spdx/license?q=gpl&total=true43 (0)44 (0)45 (0)46 (0)69 (+3)110 (-20)
GET/api/v3/license/spdx/license?total=true43 (0)43 (0)44 (-1)46 (-1)67 (-4)120 (0)
GET/api/v3/license?limit=10&sort=license:asc&total=true27 (-3)59 (-2)78 (-1)84 (-1)110 (+10)170 (-10)
GET/api/v3/license?q=ASL&sort=license:desc&total=true15 (-3)54 (-1)72 (0)79 (0)96 (+2)170 (+10)
GET/api/v3/license?q=license~Apache&total=true12 (-1)48 (-3)64 (-4)72 (-3)86 (-1)170 (+20)
GET/api/v3/license?q=license~GPL&total=true12 (+1)50 (+2)67 (+3)74 (+2)87 (-4)170 (+20)
GET/api/v3/license?total=true60 (0)98 (+1)120 (0)120 (0)140 (0)230 (+20)
analysis 3
GET/api/v3/analysis/component/{component}5 (0)7 (0)64 (0)70 (0)76 (-1)120 (+10)
GET/api/v3/analysis/latest/component/{cpe}5 (0)7 (0)64 (0)70 (0)77 (0)110 (+10)
GET/api/v3/analysis/status5 (0)7 (0)63 (0)69 (-1)76 (-1)100 (0)
importer 1
GET/api/v3/importer?total=true4 (0)5 (0)57 (0)67 (0)74 (0)110 (-10)
group 3
GET/api/v3/group/sbom?parents=resolve&total=true5 (+1)6 (0)62 (0)69 (0)75 (0)120 (+10)
GET/api/v3/group/sbom?total=true4 (0)6 (0)63 (+1)69 (0)76 (+1)170 (+60)
GET/api/v3/group/sbom?totals=true&total=true4 (-1)6 (0)63 (0)69 (0)76 (0)110 (+11)
labels 3
GET/api/v3/advisory-labels?filter_text=type&limit=10005,600 (-100)5,900 (-200)6,200 (-100)6,300 (-500)7,000 (-1,100)7,400 (-700)
GET/api/v3/sbom-labels?limit=10&filter_text=&total=true51 (-2)84 (-16)110 (-10)120 (0)120 (-10)130 (0)
GET/api/v3/sbom-labels?total=true52 (+1)97 (+7)110 (-10)110 (-10)120 (0)120 (0)
other 2
GET/.well-known/trustify42 (0)43 (0)44 (0)45 (0)54 (-1)82 (0)
POST/api/v3/ui/extract-sbom-purls2 (+1)3 (0)5 (0)6 (0)8 (-1)41 (+6)

Failures

No failures recorded.

Exceptions

No exceptions raised in the locustfile.