← All runs

Trustify branch daily perf tests · 2026-10-24 06:10 UTC

Target trustify (release/0.7.z, scale snapshot) · 2026-10-24 06:10:04 UTC → 06:20:02 UTC · Users 10 · Deltas vs previous run (2026-10-23 05:22 UTC, branch_0.7.z_2026-10-23T04-33-04_9c54e1d)

Type branch-daily · Dataset scale-20260317T023702Z · Scenario etc/scenarios/main/full-20260317T023702Z.json5 · Branch release/0.7.z · Commit 9c54e1d1af5b · Workflow run

Duration
9m 58s
Total requests
311,263 (+119,484)
Failure rate
0.0%
0 failed requests
Throughput
519.6 req/s (+199.5)
Latency 95%ile
64 ms (-9)
Latency 99%ile
120 ms (-80)
Endpoints
72
0 with failures

Over time

Throughput

Requests and failures per second

Response time

Percentiles over Locust's rolling window, ms

Users

Concurrent simulated users

Load plan

ActionStartedStoppedElapsedUsers
Increasing06:10:0406:10:080m 04s2 → 10
Maintaining06:10:0806:20:029m 54s10 → 10

Top 10 slowest endpoints (95%ile)

#MethodName95%ile (ms)Average (ms)# Requests
1GET/api/v3/advisory-labels?filter_text=type&limit=10004,3003,794144
2POST/api/v3/vulnerability/analyze2,700700596
3GET/api/v3/sbom/{sbom_id}/download2,4002,295126
4GET/api/v3/purl?q=purl:namespace=redhat&total=true1,800147179
5GET/api/v3/sbom?q=name~redhat&total=true1,400485143
6GET/api/v3/advisory?q=CVE-2021-&total=true1,200303733
7POST/api/v3/purl/recommend1,100752541
8GET/api/v3/vulnerability?sort=base_score:desc&total=true1,100511264
9GET/api/v3/purl?q=curl&total=true710103176
10GET/api/v3/sbom?limit=10&sort=name:asc&total=true590214148

Request metrics

MethodName# Requests# FailsFail %Average (ms)Min (ms)Max (ms)Avg size (B)RPSFailures/s
sbom 16
GET/api/v3/sbom/by-package?purl={purl}139 (+47)0 (0)0%93.9 (-16.3)46.96441,2870.23 (+0.1)0
GET/api/v3/sbom/count-by-package140 (+26)0 (0)0%22.3 (-12.1)2.1289.130.23 (0)0
GET/api/v3/sbom/{sbom_id}126 (+15)0 (0)0%111 (-23.2)22.75322,0150.21 (0)0
GET/api/v3/sbom/{sbom_id}/all-license-ids136 (+13)0 (0)0%15.6 (-10.6)1.5985.220.23 (0)0
GET/api/v3/sbom/{sbom_id}/download126 (+34)0 (0)0%2,295 (-770.6)2,1362,470136,458,6380.21 (+0.1)0
GET/api/v3/sbom/{sbom_id}/license-export130 (+13)0 (0)0%22.7 (-8.3)3.1180.92340.22 (0)0
GET/api/v3/sbom/{sbom_id}/packages151 (+43)0 (0)0%104 (-47.9)9.8171212,6480.25 (+0.1)0
GET/api/v3/sbom/{sbom_id}/related141 (+50)0 (0)0%99.3 (-42.8)13.744015,3720.24 (+0.1)0
GET/api/v3/sbom?limit=10&sort=name:asc&total=true148 (+33)0 (0)0%214 (-70.0)28.987412,1890.25 (+0.1)0
GET/api/v3/sbom?offset=100&limit=10&total=true259 (+61)0 (0)0%133 (-94.7)18.71,10911,9000.43 (+0.1)0
GET/api/v3/sbom?q=label:type=product&total=true122 (+9)0 (0)0%19.6 (-2.1)2.0878.2220.20 (0)0
GET/api/v3/sbom?q=license~GPL&sort=name:desc&total=true135 (+42)0 (0)0%16.2 (-9.7)2.1378.5220.23 (+0.1)0
GET/api/v3/sbom?q=name~redhat&total=true143 (+24)0 (0)0%485 (-58.2)8.252,294220.24 (0)0
GET/api/v3/sbom?q=published>2024-01-01&total=true148 (+42)0 (0)0%138 (-66.0)20.969629,3170.25 (+0.1)0
GET/api/v3/sbom?sort=ingested:desc&total=true132 (+22)0 (0)0%245 (-63.1)24.41,08829,6000.22 (0)0
GET/api/v3/sbom?total=true248 (+77)0 (0)0%135 (-38.9)21.81,01729,3170.41 (+0.1)0
advisory 13
GET/api/v3/advisory/urn:uuid:{advisory_id}727 (+157)0 (0)0%54.7 (-1.1)3.031252,3951.21 (+0.3)0
GET/api/v3/advisory/urn:uuid:{advisory_id}/download724 (+144)0 (0)0%20.0 (-11.0)3.5189.1178,4231.21 (+0.2)0
GET/api/v3/advisory?deprecated=Consider&total=true769 (+220)0 (0)0%47.6 (-25.4)4.502,69244,0031.28 (+0.4)0
GET/api/v3/advisory?limit=1&total=true164 (+87)0 (0)0%78.7 (-15.4)6.699402,2340.27 (+0.1)0
GET/api/v3/advisory?limit=10&sort=ingested:desc&total=true732 (+212)0 (0)0%42.0 (-26.8)3.422,40920,1931.22 (+0.4)0
GET/api/v3/advisory?offset=100&limit=10&total=true756 (+186)0 (0)0%60.2 (-24.0)4.222,02019,4171.26 (+0.3)0
GET/api/v3/advisory?offset={offset}&limit=1164 (+87)0 (0)0%241 (+29.2)36.31,5031,9050.27 (+0.1)0
GET/api/v3/advisory?q=CVE-2021-&total=true733 (+152)0 (0)0%303 (-105.8)6.704,62750,1491.22 (+0.3)0
GET/api/v3/advisory?q=identifier=CVE-2022-0981&total=true729 (+217)0 (0)0%55.4 (-7.7)3.679511,9711.22 (+0.4)0
GET/api/v3/advisory?q=modified>3 days ago&total=true748 (+195)0 (0)0%15.5 (-8.3)1.7580.1221.25 (+0.3)0
GET/api/v3/advisory?q=title~openssl&total=true723 (+207)0 (0)0%34.9 (-17.9)6.42820126,4521.21 (+0.3)0
GET/api/v3/advisory?sort=modified:desc&total=true818 (+277)0 (0)0%45.7 (-27.4)4.392,12238,1281.37 (+0.5)0
GET/api/v3/advisory?total=true796 (+253)0 (0)0%113 (-15.6)5.402,59648,6811.33 (+0.4)0
vulnerability 7
POST/api/v3/vulnerability/analyze596 (+222)0 (0)0%700 (-358.7)1.144,1684,457,7190.99 (+0.4)0
GET/api/v3/vulnerability?offset=100&limit=10&total=true246 (+54)0 (0)0%57.9 (+16.8)2.826617,6520.41 (+0.1)0
GET/api/v3/vulnerability?q=base_score>=7.0&total=true283 (+92)0 (0)0%27.3 (-42.8)2.081,50118,4850.47 (+0.2)0
GET/api/v3/vulnerability?q=base_severity=high&total=true272 (+88)0 (0)0%29.6 (-24.8)2.0379218,8510.45 (+0.1)0
GET/api/v3/vulnerability?q=cwes=CWE-79&total=true268 (+87)0 (0)0%22.8 (-41.4)2.1180519,1270.45 (+0.1)0
GET/api/v3/vulnerability?sort=base_score:desc&total=true264 (+100)0 (0)0%511 (-402.8)67.72,29814,2600.44 (+0.2)0
GET/api/v3/vulnerability?total=true286 (+116)0 (0)0%21.1 (-9.0)1.811,23919,0920.48 (+0.2)0
purl 15
GET/api/v3/purl/base/{purl}173 (+48)0 (0)0%92.4 (-1.8)3.8645448,8270.29 (+0.1)0
GET/api/v3/purl/base?q=namespace=redhat&total=true167 (+45)0 (0)0%70.9 (-3.1)2.589662,0800.28 (+0.1)0
GET/api/v3/purl/base?q=type=rpm&total=true194 (+66)0 (0)0%51.3 (-7.4)2.651202,0800.32 (+0.1)0
GET/api/v3/purl/base?sort=name:asc&total=true176 (+56)0 (0)0%155 (-70.3)31.93472,9430.29 (+0.1)0
GET/api/v3/purl/base?total=true176 (+55)0 (0)0%55.1 (-5.4)2.261562,4500.29 (+0.1)0
POST/api/v3/purl/recommend541 (+124)0 (0)0%752 (-257.3)97.31,7262,7470.90 (+0.2)0
GET/api/v3/purl/{purl_id}202 (+63)0 (0)0%66.9 (-25.4)11.83265370.34 (+0.1)0
GET/api/v3/purl?offset=100&limit=10&total=true165 (+28)0 (0)0%62.9 (-26.1)2.404854,4740.28 (0)0
GET/api/v3/purl?q=curl&total=true176 (+54)0 (0)0%103 (-6.1)3.842,17311,7140.29 (+0.1)0
GET/api/v3/purl?q=license~GPLv3+...&sort=name:desc&total=true171 (+37)0 (0)0%23.3 (-9.4)2.3585.5220.29 (+0.1)0
GET/api/v3/purl?q=name=curl&total=true162 (+45)0 (0)0%30.3 (-9.1)1.7738012,0840.27 (+0.1)0
GET/api/v3/purl?q=purl:namespace=redhat&total=true179 (+67)0 (0)0%147 (-87.7)1.653,85613,6170.30 (+0.1)0
GET/api/v3/purl?q=purl:ty=rpm&total=true205 (+77)0 (0)0%132 (-80.8)1.614,31313,6170.34 (+0.1)0
GET/api/v3/purl?sort=purl:name:asc&total=true146 (+18)0 (0)0%53.0 (-11.9)1.7153011,1010.24 (0)0
GET/api/v3/purl?total=true148 (+14)0 (0)0%21.9 (-6.7)1.394059,8770.25 (0)0
license 9
GET/api/v3/license/spdx/license/{license_id}2,164 (+320)0 (0)0%41.3 (-0.4)1.221041,1433.61 (+0.5)0
GET/api/v3/license/spdx/license?q=apache&total=true2,097 (+239)0 (0)0%2.57 (-0.7)0.7057.11653.50 (+0.4)0
GET/api/v3/license/spdx/license?q=gpl&total=true2,101 (+216)0 (0)0%41.4 (-0.3)0.811091,9813.51 (+0.4)0
GET/api/v3/license/spdx/license?total=true1,977 (+156)0 (0)0%41.3 (-0.2)1.071091,5253.30 (+0.3)0
GET/api/v3/license?limit=10&sort=license:asc&total=true2,076 (+269)0 (0)0%27.6 (-10.1)4.311554253.47 (+0.4)0
GET/api/v3/license?q=ASL&sort=license:desc&total=true2,280 (+541)0 (0)0%22.5 (-8.9)2.48153223.81 (+0.9)0
GET/api/v3/license?q=license~Apache&total=true2,093 (+307)0 (0)0%20.5 (-6.7)1.951261203.49 (+0.5)0
GET/api/v3/license?q=license~GPL&total=true2,100 (+275)0 (0)0%20.6 (-7.1)1.81168923.51 (+0.5)0
GET/api/v3/license?total=true2,043 (+296)0 (0)0%63.3 (-9.0)5.782191,1013.41 (+0.5)0
analysis 3
GET/api/v3/analysis/component/{component}25,415 (+11,612)0 (0)0%7.48 (-6.4)0.9890.22542.43 (+19.4)0
GET/api/v3/analysis/latest/component/{cpe}25,605 (+11,667)0 (0)0%7.68 (-6.2)0.9994.12542.74 (+19.5)0
GET/api/v3/analysis/status25,295 (+11,297)0 (0)0%7.21 (-6.0)0.8993.410342.23 (+18.9)0
importer 1
GET/api/v3/importer?total=true92,957 (+41,310)0 (0)0%5.96 (-4.8)0.7492.62155.18 (+69.0)0
group 3
GET/api/v3/group/sbom?parents=resolve&total=true26,490 (+11,967)0 (0)0%7.16 (-5.8)0.8993.13844.22 (+20.0)0
GET/api/v3/group/sbom?total=true26,201 (+11,848)0 (0)0%7.06 (-6.1)0.8692.22243.74 (+19.8)0
GET/api/v3/group/sbom?totals=true&total=true26,442 (+11,901)0 (0)0%7.14 (-5.7)0.8891.12244.14 (+19.9)0
labels 3
GET/api/v3/advisory-labels?filter_text=type&limit=1000144 (+43)0 (0)0%3,794 (-1,888.8)2,8084,680600.24 (+0.1)0
GET/api/v3/sbom-labels?limit=10&filter_text=&total=true125 (+13)0 (0)0%61.1 (-4.7)7.681141,0650.21 (0)0
GET/api/v3/sbom-labels?total=true125 (+27)0 (0)0%61.1 (-7.9)6.781191,0650.21 (0)0
other 2
GET/.well-known/trustify13,613 (+375)0 (0)0%41.3 (-0.3)0.6976.31,17722.73 (+0.6)0
POST/api/v3/ui/extract-sbom-purls13,717 (+304)0 (0)0%1.78 (-0.7)0.6635.14522.90 (+0.5)0

Response time metrics (ms)

MethodName50%ile75%ile90%ile95%ile99%ile100%ile
sbom 16
GET/api/v3/sbom/by-package?purl={purl}83 (-37)120 (-10)130 (-10)130 (-30)380 (+150)640 (+410)
GET/api/v3/sbom/count-by-package8 (-6)38 (-29)67 (-11)75 (-5)86 (+1)89 (+1)
GET/api/v3/sbom/{sbom_id}120 (-10)140 (-10)150 (-50)180 (-40)320 (+80)530 (+290)
GET/api/v3/sbom/{sbom_id}/all-license-ids5 (-4)10 (-38)58 (-8)64 (-13)79 (-4)85 (-3)
GET/api/v3/sbom/{sbom_id}/download2,300 (-800)2,300 (-800)2,400 (-800)2,400 (-800)2,500 (-800)2,500 (-800)
GET/api/v3/sbom/{sbom_id}/license-export8 (-5)41 (-17)66 (-13)72 (-11)81 (-5)81 (-5)
GET/api/v3/sbom/{sbom_id}/packages79 (-31)170 (-60)220 (-90)280 (-30)420 (+20)710 (+310)
GET/api/v3/sbom/{sbom_id}/related88 (-22)120 (-80)200 (-10)220 (-50)280 (-100)440 (+60)
GET/api/v3/sbom?limit=10&sort=name:asc&total=true170 (-40)290 (-80)450 (-50)590 (-130)690 (-310)870 (-530)
GET/api/v3/sbom?offset=100&limit=10&total=true90 (-80)180 (-130)290 (-170)390 (-130)670 (-530)1,100 (-100)
GET/api/v3/sbom?q=label:type=product&total=true5 (-3)34 (-4)67 (-2)73 (-1)75 (-2)78 (-5)
GET/api/v3/sbom?q=license~GPL&sort=name:desc&total=true6 (-3)16 (-30)55 (-17)64 (-12)77 (-20)78 (-19)
GET/api/v3/sbom?q=name~redhat&total=true290 (+160)900 (-200)1,100 (-200)1,400 (0)1,900 (+200)2,300 (+600)
GET/api/v3/sbom?q=published>2024-01-01&total=true94 (-76)180 (-50)300 (-130)410 (-100)660 (-10)700 (-190)
GET/api/v3/sbom?sort=ingested:desc&total=true200 (-10)380 (-50)490 (-120)580 (-230)940 (-60)1,100 (0)
GET/api/v3/sbom?total=true95 (-25)160 (-30)300 (-20)410 (0)570 (-430)1,000 (-100)
advisory 13
GET/api/v3/advisory/urn:uuid:{advisory_id}45 (-2)56 (-10)98 (-12)110 (0)120 (0)130 (-70)
GET/api/v3/advisory/urn:uuid:{advisory_id}/download9 (-4)16 (-43)65 (-10)70 (-11)80 (-30)89 (-81)
GET/api/v3/advisory?deprecated=Consider&total=true10 (-8)45 (-26)71 (-13)80 (-15)1,300 (-600)2,700 (+400)
GET/api/v3/advisory?limit=1&total=true47 (-3)58 (-19)99 (-11)130 (+10)890 (-710)940 (-660)
GET/api/v3/advisory?limit=10&sort=ingested:desc&total=true8 (-7)36 (-28)68 (-11)75 (-14)1,100 (-700)2,400 (0)
GET/api/v3/advisory?offset=100&limit=10&total=true41 (-37)80 (-10)91 (-7)110 (0)370 (+150)2,000 (-700)
GET/api/v3/advisory?offset={offset}&limit=1200 (0)300 (+10)410 (+80)460 (+20)1,300 (+700)1,500 (+900)
GET/api/v3/advisory?q=CVE-2021-&total=true170 (-30)270 (-120)910 (-390)1,200 (-500)1,700 (-700)4,600 (-200)
GET/api/v3/advisory?q=identifier=CVE-2022-0981&total=true45 (-4)52 (-37)99 (-11)110 (0)120 (-10)950 (+740)
GET/api/v3/advisory?q=modified>3 days ago&total=true5 (-3)8 (-37)58 (-10)65 (-7)73 (-10)80 (-20)
GET/api/v3/advisory?q=title~openssl&total=true13 (-37)57 (-22)75 (-14)82 (-18)180 (-20)820 (+120)
GET/api/v3/advisory?sort=modified:desc&total=true10 (-8)46 (-24)70 (-12)79 (-21)1,200 (-500)2,100 (-400)
GET/api/v3/advisory?total=true94 (-16)110 (-20)170 (-20)200 (+10)890 (+610)2,600 (+300)
vulnerability 7
POST/api/v3/vulnerability/analyze69 (-691)1,000 (-600)2,300 (-800)2,700 (-1,000)3,400 (-1,400)4,200 (-1,600)
GET/api/v3/vulnerability?offset=100&limit=10&total=true44 (+36)47 (+34)93 (+25)110 (+31)610 (-190)660 (-230)
GET/api/v3/vulnerability?q=base_score>=7.0&total=true5 (-5)9 (-26)54 (-21)67 (-123)630 (-870)1,500 (0)
GET/api/v3/vulnerability?q=base_severity=high&total=true6 (-3)10 (-38)58 (-16)73 (-8)530 (-380)790 (-810)
GET/api/v3/vulnerability?q=cwes=CWE-79&total=true5 (-6)10 (-9)57 (-18)69 (-131)410 (-890)800 (-600)
GET/api/v3/vulnerability?sort=base_score:desc&total=true400 (-230)620 (-780)900 (-800)1,100 (-700)1,500 (-900)2,300 (-100)
GET/api/v3/vulnerability?total=true5 (-4)8 (-6)38 (-33)65 (-10)500 (-100)1,200 (+600)
purl 15
GET/api/v3/purl/base/{purl}59 (+3)140 (-30)260 (+10)300 (+20)430 (+40)450 (-10)
GET/api/v3/purl/base?q=namespace=redhat&total=true44 (-2)80 (-1)99 (-1)110 (-60)470 (+80)970 (+270)
GET/api/v3/purl/base?q=type=rpm&total=true44 (-3)52 (-23)90 (-10)96 (-4)100 (-10)120 (0)
GET/api/v3/purl/base?sort=name:asc&total=true150 (-70)190 (-90)220 (-110)240 (-160)330 (-100)350 (-100)
GET/api/v3/purl/base?total=true44 (-1)63 (-23)93 (-7)110 (0)140 (0)160 (+20)
POST/api/v3/purl/recommend810 (-290)950 (-250)1,100 (-300)1,100 (-400)1,300 (-400)1,700 (-200)
GET/api/v3/purl/{purl_id}61 (-28)89 (-31)110 (-60)150 (-30)280 (+70)330 (+110)
GET/api/v3/purl?offset=100&limit=10&total=true44 (-11)76 (-14)95 (-5)110 (-270)380 (-320)480 (-430)
GET/api/v3/purl?q=curl&total=true24 (-24)62 (-6)86 (0)710 (-140)1,700 (+500)2,200 (+500)
GET/api/v3/purl?q=license~GPLv3+...&sort=name:desc&total=true9 (-15)41 (-12)60 (-5)66 (-12)76 (-12)86 (-3)
GET/api/v3/purl?q=name=curl&total=true11 (-6)44 (-15)60 (-17)74 (-46)350 (+80)380 (+100)
GET/api/v3/purl?q=purl:namespace=redhat&total=true5 (-5)49 (+1)63 (-1)1,800 (-900)2,900 (-100)3,900 (+600)
GET/api/v3/purl?q=purl:ty=rpm&total=true6 (-6)40 (-16)61 (-3)230 (-2,370)2,600 (-700)4,300 (+700)
GET/api/v3/purl?sort=purl:name:asc&total=true25 (+11)58 (-1)75 (0)330 (-110)520 (-150)530 (-370)
GET/api/v3/purl?total=true4 (-2)15 (-23)53 (-6)62 (-4)390 (-150)400 (-190)
license 9
GET/api/v3/license/spdx/license/{license_id}42 (-1)43 (0)44 (-1)44 (-2)64 (-7)100 (-20)
GET/api/v3/license/spdx/license?q=apache&total=true2 (-1)3 (-1)3 (-2)4 (-2)24 (-2)57 (-30)
GET/api/v3/license/spdx/license?q=gpl&total=true42 (-1)43 (-1)44 (-1)45 (-1)63 (-6)110 (0)
GET/api/v3/license/spdx/license?total=true42 (-1)43 (0)44 (0)45 (-1)61 (-6)110 (-10)
GET/api/v3/license?limit=10&sort=license:asc&total=true12 (-15)50 (-9)64 (-14)74 (-10)89 (-21)160 (-10)
GET/api/v3/license?q=ASL&sort=license:desc&total=true8 (-7)43 (-11)58 (-14)67 (-12)79 (-17)150 (-20)
GET/api/v3/license?q=license~Apache&total=true7 (-5)39 (-9)57 (-7)64 (-8)80 (-6)130 (-40)
GET/api/v3/license?q=license~GPL&total=true7 (-5)40 (-10)57 (-10)65 (-9)78 (-9)170 (0)
GET/api/v3/license?total=true51 (-9)86 (-12)100 (-20)110 (-10)130 (-10)220 (-10)
analysis 3
GET/api/v3/analysis/component/{component}3 (-2)4 (-3)6 (-58)60 (-10)71 (-5)90 (-30)
GET/api/v3/analysis/latest/component/{cpe}3 (-2)4 (-3)7 (-57)61 (-9)71 (-6)94 (-16)
GET/api/v3/analysis/status3 (-2)4 (-3)6 (-57)59 (-10)71 (-5)93 (-7)
importer 1
GET/api/v3/importer?total=true2 (-2)3 (-2)4 (-53)53 (-14)69 (-5)93 (-17)
group 3
GET/api/v3/group/sbom?parents=resolve&total=true3 (-2)4 (-2)6 (-56)60 (-9)71 (-4)93 (-27)
GET/api/v3/group/sbom?total=true3 (-1)4 (-2)6 (-57)59 (-10)71 (-5)92 (-78)
GET/api/v3/group/sbom?totals=true&total=true3 (-1)4 (-2)6 (-57)60 (-9)71 (-5)91 (-19)
labels 3
GET/api/v3/advisory-labels?filter_text=type&limit=10003,800 (-1,800)4,000 (-1,900)4,200 (-2,000)4,300 (-2,000)4,700 (-2,300)4,700 (-2,700)
GET/api/v3/sbom-labels?limit=10&filter_text=&total=true47 (-4)81 (-3)100 (-10)110 (-10)110 (-10)110 (-20)
GET/api/v3/sbom-labels?total=true47 (-5)76 (-21)110 (0)110 (0)120 (0)120 (0)
other 2
GET/.well-known/trustify42 (0)42 (-1)43 (-1)44 (-1)50 (-4)76 (-6)
POST/api/v3/ui/extract-sbom-purls1 (-1)2 (-1)3 (-2)4 (-2)6 (-2)35 (-6)

Failures

No failures recorded.

Exceptions

No exceptions raised in the locustfile.