← All runs

Trustify branch daily perf tests · 2026-10-25 06:45 UTC

Target trustify (release/0.7.z, scale snapshot) · 2026-10-25 06:45:55 UTC → 06:55:53 UTC · Users 10 · Deltas vs previous run (2026-10-24 06:10 UTC, branch_0.7.z_2026-10-24T05-13-26_9c54e1d)

Type branch-daily · Dataset scale-20260317T023702Z · Scenario etc/scenarios/main/full-20260317T023702Z.json5 · Branch release/0.7.z · Commit 4b6e0c29dc63 · Workflow run

Duration
9m 58s
Total requests
186,588 (-124,675)
Failure rate
0.0%
0 failed requests
Throughput
311.4 req/s (-208.2)
Latency 95%ile
73 ms (+9)
Latency 99%ile
210 ms (+90)
Endpoints
72
0 with failures

Over time

Throughput

Requests and failures per second

Response time

Percentiles over Locust's rolling window, ms

Users

Concurrent simulated users

Load plan

ActionStartedStoppedElapsedUsers
Increasing06:45:5506:45:590m 04s2 → 10
Maintaining06:45:5906:55:539m 54s10 → 10

Top 10 slowest endpoints (95%ile)

#MethodName95%ile (ms)Average (ms)# Requests
1GET/api/v3/advisory-labels?filter_text=type&limit=10006,8005,93496
2GET/api/v3/sbom/{sbom_id}/download3,3003,107104
3POST/api/v3/vulnerability/analyze2,900929420
4GET/api/v3/purl?q=purl:ty=rpm&total=true2,500202148
5GET/api/v3/purl?q=purl:namespace=redhat&total=true2,000185136
6GET/api/v3/advisory?q=CVE-2021-&total=true1,800396570
7POST/api/v3/purl/recommend1,500982412
8GET/api/v3/vulnerability?sort=base_score:desc&total=true1,400766195
9GET/api/v3/sbom?q=name~redhat&total=true1,30038398
10GET/api/v3/sbom?sort=ingested:desc&total=true72032892

Request metrics

MethodName# Requests# FailsFail %Average (ms)Min (ms)Max (ms)Avg size (B)RPSFailures/s
sbom 16
GET/api/v3/sbom/by-package?purl={purl}108 (-31)0 (0)0%108 (+14.1)17.32301,2870.18 (-0.1)0
GET/api/v3/sbom/count-by-package110 (-30)0 (0)0%35.4 (+13.1)3.4293.230.18 (-0.1)0
GET/api/v3/sbom/{sbom_id}96 (-30)0 (0)0%137 (+26.1)56.43172,0150.16 (-0.1)0
GET/api/v3/sbom/{sbom_id}/all-license-ids107 (-29)0 (0)0%26.9 (+11.2)3.6686.320.18 (0)0
GET/api/v3/sbom/{sbom_id}/download104 (-22)0 (0)0%3,107 (+812.0)2,9353,475136,458,6380.17 (0)0
GET/api/v3/sbom/{sbom_id}/license-export105 (-25)0 (0)0%33.6 (+10.9)5.1888.72350.18 (0)0
GET/api/v3/sbom/{sbom_id}/packages84 (-67)0 (0)0%156 (+52.2)17.859112,6480.14 (-0.1)0
GET/api/v3/sbom/{sbom_id}/related98 (-43)0 (0)0%146 (+46.5)22.937715,3720.16 (-0.1)0
GET/api/v3/sbom?limit=10&sort=name:asc&total=true109 (-39)0 (0)0%275 (+61.4)55.31,20512,1890.18 (-0.1)0
GET/api/v3/sbom?offset=100&limit=10&total=true186 (-73)0 (0)0%189 (+55.2)24.298411,9000.31 (-0.1)0
GET/api/v3/sbom?q=label:type=product&total=true106 (-16)0 (0)0%22.7 (+3.1)3.0090.7220.18 (0)0
GET/api/v3/sbom?q=license~GPL&sort=name:desc&total=true101 (-34)0 (0)0%25.8 (+9.6)4.0582.3220.17 (-0.1)0
GET/api/v3/sbom?q=name~redhat&total=true98 (-45)0 (0)0%383 (-101.5)9.371,542220.16 (-0.1)0
GET/api/v3/sbom?q=published>2024-01-01&total=true112 (-36)0 (0)0%189 (+50.6)36.978129,3170.19 (-0.1)0
GET/api/v3/sbom?sort=ingested:desc&total=true92 (-40)0 (0)0%328 (+82.8)30.41,10429,6000.15 (-0.1)0
GET/api/v3/sbom?total=true214 (-34)0 (0)0%163 (+28.2)25.994429,3170.36 (-0.1)0
advisory 13
GET/api/v3/advisory/urn:uuid:{advisory_id}600 (-127)0 (0)0%58.5 (+3.9)3.712222,3951.00 (-0.2)0
GET/api/v3/advisory/urn:uuid:{advisory_id}/download524 (-200)0 (0)0%30.0 (+10.0)4.82153178,4230.87 (-0.3)0
GET/api/v3/advisory?deprecated=Consider&total=true561 (-208)0 (0)0%82.7 (+35.1)5.203,50344,0030.94 (-0.3)0
GET/api/v3/advisory?limit=1&total=true83 (-81)0 (0)0%85.0 (+6.3)7.819822,3570.14 (-0.1)0
GET/api/v3/advisory?limit=10&sort=ingested:desc&total=true554 (-178)0 (0)0%68.6 (+26.6)5.412,58220,1930.92 (-0.3)0
GET/api/v3/advisory?offset=100&limit=10&total=true582 (-174)0 (0)0%71.8 (+11.6)7.492,44819,3360.97 (-0.3)0
GET/api/v3/advisory?offset={offset}&limit=183 (-81)0 (0)0%237 (-4.3)53.56202,0620.14 (-0.1)0
GET/api/v3/advisory?q=CVE-2021-&total=true570 (-163)0 (0)0%396 (+92.9)19.34,18249,7410.95 (-0.3)0
GET/api/v3/advisory?q=identifier=CVE-2022-0981&total=true561 (-168)0 (0)0%62.7 (+7.3)4.531341,9710.94 (-0.3)0
GET/api/v3/advisory?q=modified>3 days ago&total=true528 (-220)0 (0)0%25.7 (+10.3)2.3392.2220.88 (-0.4)0
GET/api/v3/advisory?q=title~openssl&total=true567 (-156)0 (0)0%51.4 (+16.5)10.3606126,4520.95 (-0.3)0
GET/api/v3/advisory?sort=modified:desc&total=true529 (-289)0 (0)0%72.8 (+27.1)6.882,28738,1280.88 (-0.5)0
GET/api/v3/advisory?total=true557 (-239)0 (0)0%131 (+17.4)8.802,80148,2610.93 (-0.4)0
vulnerability 7
POST/api/v3/vulnerability/analyze420 (-176)0 (0)0%929 (+228.3)1.784,6104,905,6470.70 (-0.3)0
GET/api/v3/vulnerability?offset=100&limit=10&total=true232 (-14)0 (0)0%74.2 (+16.3)3.999257,4940.39 (0)0
GET/api/v3/vulnerability?q=base_score>=7.0&total=true217 (-66)0 (0)0%42.1 (+14.8)3.0091618,6130.36 (-0.1)0
GET/api/v3/vulnerability?q=base_severity=high&total=true218 (-54)0 (0)0%46.9 (+17.3)3.051,40718,5590.36 (-0.1)0
GET/api/v3/vulnerability?q=cwes=CWE-79&total=true206 (-62)0 (0)0%59.7 (+36.9)3.411,59719,1630.34 (-0.1)0
GET/api/v3/vulnerability?sort=base_score:desc&total=true195 (-69)0 (0)0%766 (+254.9)2741,77913,9320.33 (-0.1)0
GET/api/v3/vulnerability?total=true222 (-64)0 (0)0%25.7 (+4.6)2.8091219,0420.37 (-0.1)0
purl 15
GET/api/v3/purl/base/{purl}154 (-19)0 (0)0%91.9 (-0.5)6.8736448,8270.26 (0)0
GET/api/v3/purl/base?q=namespace=redhat&total=true126 (-41)0 (0)0%77.1 (+6.2)4.966472,0800.21 (-0.1)0
GET/api/v3/purl/base?q=type=rpm&total=true173 (-21)0 (0)0%59.4 (+8.1)4.421322,0800.29 (0)0
GET/api/v3/purl/base?sort=name:asc&total=true156 (-20)0 (0)0%220 (+64.5)73.14592,9430.26 (0)0
GET/api/v3/purl/base?total=true142 (-34)0 (0)0%62.8 (+7.7)4.831872,4500.24 (-0.1)0
POST/api/v3/purl/recommend412 (-129)0 (0)0%982 (+229.9)1461,9172,7470.69 (-0.2)0
GET/api/v3/purl/{purl_id}114 (-88)0 (0)0%100 (+33.2)17.62735370.19 (-0.1)0
GET/api/v3/purl?offset=100&limit=10&total=true124 (-41)0 (0)0%87.1 (+24.1)2.039384,4740.21 (-0.1)0
GET/api/v3/purl?q=curl&total=true128 (-48)0 (0)0%98.7 (-4.0)6.081,22511,7140.21 (-0.1)0
GET/api/v3/purl?q=license~GPLv3+...&sort=name:desc&total=true151 (-20)0 (0)0%34.7 (+11.4)2.05107220.25 (0)0
GET/api/v3/purl?q=name=curl&total=true139 (-23)0 (0)0%31.7 (+1.4)2.0729012,0840.23 (0)0
GET/api/v3/purl?q=purl:namespace=redhat&total=true136 (-43)0 (0)0%185 (+37.7)2.153,20213,6170.23 (-0.1)0
GET/api/v3/purl?q=purl:ty=rpm&total=true148 (-57)0 (0)0%202 (+69.7)2.023,92713,6170.25 (-0.1)0
GET/api/v3/purl?sort=purl:name:asc&total=true142 (-4)0 (0)0%63.2 (+10.2)1.831,10911,1010.24 (0)0
GET/api/v3/purl?total=true146 (-2)0 (0)0%40.0 (+18.1)1.888529,8770.24 (0)0
license 9
GET/api/v3/license/spdx/license/{license_id}1,802 (-362)0 (0)0%41.8 (+0.5)1.121211,1433.01 (-0.6)0
GET/api/v3/license/spdx/license?q=apache&total=true1,782 (-315)0 (0)0%3.50 (+0.9)0.9678.41652.97 (-0.5)0
GET/api/v3/license/spdx/license?q=gpl&total=true1,752 (-349)0 (0)0%41.5 (+0.1)1.241151,9812.92 (-0.6)0
GET/api/v3/license/spdx/license?total=true1,711 (-266)0 (0)0%42.1 (+0.7)1.221191,5252.86 (-0.4)0
GET/api/v3/license?limit=10&sort=license:asc&total=true1,759 (-317)0 (0)0%38.9 (+11.4)5.071824252.94 (-0.5)0
GET/api/v3/license?q=ASL&sort=license:desc&total=true1,839 (-441)0 (0)0%33.6 (+11.1)3.35172223.07 (-0.7)0
GET/api/v3/license?q=license~Apache&total=true1,765 (-328)0 (0)0%29.1 (+8.5)2.741541202.95 (-0.5)0
GET/api/v3/license?q=license~GPL&total=true1,694 (-406)0 (0)0%28.7 (+8.1)2.46224922.83 (-0.7)0
GET/api/v3/license?total=true1,774 (-269)0 (0)0%72.6 (+9.3)8.252211,1012.96 (-0.5)0
analysis 3
GET/api/v3/analysis/component/{component}13,366 (-12,049)0 (0)0%14.3 (+6.8)1.361012522.30 (-20.1)0
GET/api/v3/analysis/latest/component/{cpe}13,326 (-12,279)0 (0)0%14.5 (+6.8)1.371062522.24 (-20.5)0
GET/api/v3/analysis/status13,387 (-11,908)0 (0)0%13.9 (+6.7)1.2510610322.34 (-19.9)0
importer 1
GET/api/v3/importer?total=true49,466 (-43,491)0 (0)0%11.2 (+5.3)1.0299.6282.54 (-72.6)0
group 3
GET/api/v3/group/sbom?parents=resolve&total=true13,989 (-12,501)0 (0)0%13.5 (+6.3)1.2899.03823.34 (-20.9)0
GET/api/v3/group/sbom?total=true14,012 (-12,189)0 (0)0%13.5 (+6.4)1.2499.82223.38 (-20.4)0
GET/api/v3/group/sbom?totals=true&total=true14,030 (-12,412)0 (0)0%13.2 (+6.1)1.221042223.41 (-20.7)0
labels 3
GET/api/v3/advisory-labels?filter_text=type&limit=100096 (-48)0 (0)0%5,934 (+2,140.7)5,0367,099600.16 (-0.1)0
GET/api/v3/sbom-labels?limit=10&filter_text=&total=true104 (-21)0 (0)0%71.6 (+10.5)12.71411,0650.17 (0)0
GET/api/v3/sbom-labels?total=true109 (-16)0 (0)0%67.5 (+6.5)44.01251,0650.18 (0)0
other 2
GET/.well-known/trustify13,193 (-420)0 (0)0%41.7 (+0.3)0.8877.81,16922.02 (-0.7)0
POST/api/v3/ui/extract-sbom-purls13,402 (-315)0 (0)0%2.52 (+0.7)0.9239.64522.36 (-0.5)0

Response time metrics (ms)

MethodName50%ile75%ile90%ile95%ile99%ile100%ile
sbom 16
GET/api/v3/sbom/by-package?purl={purl}110 (+27)130 (+10)140 (+10)200 (+70)230 (-150)230 (-410)
GET/api/v3/sbom/count-by-package24 (+16)67 (+29)81 (+14)85 (+10)89 (+3)93 (+4)
GET/api/v3/sbom/{sbom_id}130 (+10)150 (+10)200 (+50)230 (+50)320 (0)320 (-210)
GET/api/v3/sbom/{sbom_id}/all-license-ids8 (+3)54 (+44)72 (+14)76 (+12)85 (+6)86 (+1)
GET/api/v3/sbom/{sbom_id}/download3,100 (+800)3,200 (+900)3,200 (+800)3,300 (+900)3,300 (+800)3,500 (+1,000)
GET/api/v3/sbom/{sbom_id}/license-export14 (+6)63 (+22)77 (+11)80 (+8)88 (+7)89 (+8)
GET/api/v3/sbom/{sbom_id}/packages140 (+61)220 (+50)290 (+70)310 (+30)590 (+170)590 (-120)
GET/api/v3/sbom/{sbom_id}/related120 (+32)190 (+70)260 (+60)280 (+60)380 (+100)380 (-60)
GET/api/v3/sbom?limit=10&sort=name:asc&total=true210 (+40)360 (+70)480 (+30)620 (+30)760 (+70)1,200 (+330)
GET/api/v3/sbom?offset=100&limit=10&total=true120 (+30)220 (+40)380 (+90)470 (+80)870 (+200)980 (-120)
GET/api/v3/sbom?q=label:type=product&total=true8 (+3)38 (+4)72 (+5)75 (+2)81 (+6)91 (+13)
GET/api/v3/sbom?q=license~GPL&sort=name:desc&total=true9 (+3)54 (+38)69 (+14)74 (+10)81 (+4)82 (+4)
GET/api/v3/sbom?q=name~redhat&total=true95 (-195)960 (+60)1,200 (+100)1,300 (-100)1,500 (-400)1,500 (-800)
GET/api/v3/sbom?q=published>2024-01-01&total=true170 (+76)210 (+30)380 (+80)420 (+10)710 (+50)780 (+80)
GET/api/v3/sbom?sort=ingested:desc&total=true320 (+120)450 (+70)660 (+170)720 (+140)1,100 (+160)1,100 (0)
GET/api/v3/sbom?total=true130 (+35)190 (+30)290 (-10)360 (-50)680 (+110)940 (-60)
advisory 13
GET/api/v3/advisory/urn:uuid:{advisory_id}47 (+2)74 (+18)100 (+2)110 (0)130 (+10)220 (+90)
GET/api/v3/advisory/urn:uuid:{advisory_id}/download14 (+5)55 (+39)74 (+9)78 (+8)92 (+12)150 (+61)
GET/api/v3/advisory?deprecated=Consider&total=true25 (+15)72 (+27)85 (+14)110 (+30)2,200 (+900)3,500 (+800)
GET/api/v3/advisory?limit=1&total=true50 (+3)76 (+18)100 (+1)120 (-10)980 (+90)980 (+40)
GET/api/v3/advisory?limit=10&sort=ingested:desc&total=true16 (+8)66 (+30)78 (+10)88 (+13)1,800 (+700)2,600 (+200)
GET/api/v3/advisory?offset=100&limit=10&total=true74 (+33)90 (+10)98 (+7)110 (0)190 (-180)2,400 (+400)
GET/api/v3/advisory?offset={offset}&limit=1210 (+10)320 (+20)440 (+30)470 (+10)620 (-680)620 (-880)
GET/api/v3/advisory?q=CVE-2021-&total=true200 (+30)330 (+60)1,200 (+290)1,800 (+600)2,400 (+700)4,200 (-400)
GET/api/v3/advisory?q=identifier=CVE-2022-0981&total=true48 (+3)87 (+35)110 (+11)110 (0)130 (+10)130 (-820)
GET/api/v3/advisory?q=modified>3 days ago&total=true9 (+4)55 (+47)70 (+12)74 (+9)83 (+10)92 (+12)
GET/api/v3/advisory?q=title~openssl&total=true36 (+23)79 (+22)88 (+13)98 (+16)280 (+100)610 (-210)
GET/api/v3/advisory?sort=modified:desc&total=true18 (+8)71 (+25)82 (+12)100 (+21)1,700 (+500)2,300 (+200)
GET/api/v3/advisory?total=true100 (+6)120 (+10)180 (+10)190 (-10)1,700 (+810)2,800 (+200)
vulnerability 7
POST/api/v3/vulnerability/analyze1,100 (+1,031)1,500 (+500)2,000 (-300)2,900 (+200)4,100 (+700)4,600 (+400)
GET/api/v3/vulnerability?offset=100&limit=10&total=true46 (+2)59 (+12)100 (+7)110 (0)730 (+120)930 (+270)
GET/api/v3/vulnerability?q=base_score>=7.0&total=true9 (+4)33 (+24)68 (+14)77 (+10)680 (+50)920 (-580)
GET/api/v3/vulnerability?q=base_severity=high&total=true9 (+3)25 (+15)66 (+8)76 (+3)800 (+270)1,400 (+610)
GET/api/v3/vulnerability?q=cwes=CWE-79&total=true8 (+3)47 (+37)71 (+14)83 (+14)1,100 (+690)1,600 (+800)
GET/api/v3/vulnerability?sort=base_score:desc&total=true620 (+220)1,000 (+380)1,300 (+400)1,400 (+300)1,600 (+100)1,800 (-500)
GET/api/v3/vulnerability?total=true8 (+3)14 (+6)61 (+23)74 (+9)94 (-406)910 (-290)
purl 15
GET/api/v3/purl/base/{purl}56 (-3)140 (0)240 (-20)290 (-10)360 (-70)360 (-90)
GET/api/v3/purl/base?q=namespace=redhat&total=true47 (+3)88 (+8)100 (+1)150 (+40)630 (+160)650 (-320)
GET/api/v3/purl/base?q=type=rpm&total=true47 (+3)79 (+27)99 (+9)100 (+4)120 (+20)130 (+10)
GET/api/v3/purl/base?sort=name:asc&total=true210 (+60)250 (+60)320 (+100)340 (+100)440 (+110)460 (+110)
GET/api/v3/purl/base?total=true50 (+6)84 (+21)100 (+7)110 (0)170 (+30)190 (+30)
POST/api/v3/purl/recommend1,100 (+290)1,200 (+250)1,400 (+300)1,500 (+400)1,700 (+400)1,900 (+200)
GET/api/v3/purl/{purl_id}95 (+34)130 (+41)160 (+50)190 (+40)260 (-20)270 (-60)
GET/api/v3/purl?offset=100&limit=10&total=true47 (+3)93 (+17)100 (+5)120 (+10)520 (+140)940 (+460)
GET/api/v3/purl?q=curl&total=true51 (+27)72 (+10)86 (0)600 (-110)1,100 (-600)1,200 (-1,000)
GET/api/v3/purl?q=license~GPLv3+...&sort=name:desc&total=true23 (+14)60 (+19)70 (+10)80 (+14)90 (+14)110 (+24)
GET/api/v3/purl?q=name=curl&total=true15 (+4)51 (+7)66 (+6)77 (+3)210 (-140)290 (-90)
GET/api/v3/purl?q=purl:namespace=redhat&total=true9 (+4)47 (-2)67 (+4)2,000 (+200)3,100 (+200)3,200 (-700)
GET/api/v3/purl?q=purl:ty=rpm&total=true9 (+3)52 (+12)65 (+4)2,500 (+2,270)3,600 (+1,000)3,900 (-400)
GET/api/v3/purl?sort=purl:name:asc&total=true22 (-3)56 (-2)71 (-4)470 (+140)590 (+70)1,100 (+570)
GET/api/v3/purl?total=true8 (+4)47 (+32)64 (+11)69 (+7)590 (+200)850 (+450)
license 9
GET/api/v3/license/spdx/license/{license_id}43 (+1)44 (+1)45 (+1)46 (+2)75 (+11)120 (+20)
GET/api/v3/license/spdx/license?q=apache&total=true3 (+1)4 (+1)5 (+2)7 (+3)31 (+7)78 (+21)
GET/api/v3/license/spdx/license?q=gpl&total=true43 (+1)44 (+1)45 (+1)46 (+1)64 (+1)110 (0)
GET/api/v3/license/spdx/license?total=true43 (+1)44 (+1)45 (+1)46 (+1)70 (+9)120 (+10)
GET/api/v3/license?limit=10&sort=license:asc&total=true30 (+18)61 (+11)79 (+15)86 (+12)110 (+21)180 (+20)
GET/api/v3/license?q=ASL&sort=license:desc&total=true21 (+13)56 (+13)72 (+14)78 (+11)94 (+15)170 (+20)
GET/api/v3/license?q=license~Apache&total=true13 (+6)52 (+13)69 (+12)76 (+12)88 (+8)150 (+20)
GET/api/v3/license?q=license~GPL&total=true13 (+6)51 (+11)67 (+10)74 (+9)87 (+9)220 (+50)
GET/api/v3/license?total=true61 (+10)97 (+11)120 (+20)120 (+10)140 (+10)220 (0)
analysis 3
GET/api/v3/analysis/component/{component}5 (+2)7 (+3)64 (+58)70 (+10)77 (+6)100 (+10)
GET/api/v3/analysis/latest/component/{cpe}5 (+2)7 (+3)65 (+58)70 (+9)77 (+6)110 (+16)
GET/api/v3/analysis/status5 (+2)7 (+3)64 (+58)70 (+11)76 (+5)110 (+17)
importer 1
GET/api/v3/importer?total=true4 (+2)5 (+2)58 (+54)67 (+14)74 (+5)100 (+7)
group 3
GET/api/v3/group/sbom?parents=resolve&total=true5 (+2)7 (+3)63 (+57)69 (+9)76 (+5)99 (+6)
GET/api/v3/group/sbom?total=true5 (+2)7 (+3)63 (+57)69 (+10)75 (+4)100 (+8)
GET/api/v3/group/sbom?totals=true&total=true5 (+2)7 (+3)63 (+57)69 (+9)76 (+5)100 (+9)
labels 3
GET/api/v3/advisory-labels?filter_text=type&limit=10005,900 (+2,100)6,200 (+2,200)6,600 (+2,400)6,800 (+2,500)7,100 (+2,400)7,100 (+2,400)
GET/api/v3/sbom-labels?limit=10&filter_text=&total=true54 (+7)100 (+19)120 (+20)120 (+10)130 (+20)140 (+30)
GET/api/v3/sbom-labels?total=true51 (+4)93 (+17)110 (0)110 (0)120 (0)130 (+10)
other 2
GET/.well-known/trustify42 (0)43 (+1)44 (+1)46 (+2)55 (+5)78 (+2)
POST/api/v3/ui/extract-sbom-purls2 (+1)3 (+1)5 (+2)6 (+2)8 (+2)40 (+5)

Failures

No failures recorded.

Exceptions

No exceptions raised in the locustfile.