← All runs

Trustify branch daily perf tests · 2026-10-26 05:04 UTC

Target trustify (release/0.7.z, scale snapshot) · 2026-10-26 05:04:33 UTC → 05:14:31 UTC · Users 10 · Deltas vs previous run (2026-10-25 06:45 UTC, branch_0.7.z_2026-10-25T05-55-13_4b6e0c2)

Type branch-daily · Dataset scale-20260317T023702Z · Scenario etc/scenarios/main/full-20260317T023702Z.json5 · Branch release/0.7.z · Commit 4b6e0c29dc63 · Workflow run

Duration
9m 58s
Total requests
197,259 (+10,671)
Failure rate
0.0%
0 failed requests
Throughput
329.2 req/s (+17.8)
Latency 95%ile
72 ms (-1)
Latency 99%ile
200 ms (-10)
Endpoints
72
0 with failures

Over time

Throughput

Requests and failures per second

Response time

Percentiles over Locust's rolling window, ms

Users

Concurrent simulated users

Load plan

ActionStartedStoppedElapsedUsers
Increasing05:04:3305:04:370m 04s2 → 10
Maintaining05:04:3705:14:319m 54s10 → 10

Top 10 slowest endpoints (95%ile)

#MethodName95%ile (ms)Average (ms)# Requests
1GET/api/v3/advisory-labels?filter_text=type&limit=10006,7005,83796
2POST/api/v3/vulnerability/analyze3,400960427
3GET/api/v3/sbom/{sbom_id}/download3,2003,061102
4GET/api/v3/advisory?q=CVE-2021-&total=true1,800393586
5POST/api/v3/purl/recommend1,400953429
6GET/api/v3/purl?q=purl:namespace=redhat&total=true1,400188144
7GET/api/v3/sbom?q=name~redhat&total=true1,40060587
8GET/api/v3/vulnerability?sort=base_score:desc&total=true1,400679202
9GET/api/v3/purl?q=purl:ty=rpm&total=true1,300163168
10GET/api/v3/sbom?sort=ingested:desc&total=true74032284

Request metrics

MethodName# Requests# FailsFail %Average (ms)Min (ms)Max (ms)Avg size (B)RPSFailures/s
sbom 16
GET/api/v3/sbom/by-package?purl={purl}99 (-9)0 (0)0%110 (+1.5)42.12351,2870.17 (0)0
GET/api/v3/sbom/count-by-package92 (-18)0 (0)0%28.1 (-7.3)4.0692.230.15 (0)0
GET/api/v3/sbom/{sbom_id}90 (-6)0 (0)0%129 (-8.4)58.92332,0150.15 (0)0
GET/api/v3/sbom/{sbom_id}/all-license-ids120 (+13)0 (0)0%25.9 (-1.0)2.3278.320.20 (0)0
GET/api/v3/sbom/{sbom_id}/download102 (-2)0 (0)0%3,061 (-46.4)2,8813,331136,458,6380.17 (0)0
GET/api/v3/sbom/{sbom_id}/license-export85 (-20)0 (0)0%27.5 (-6.1)4.221032340.14 (0)0
GET/api/v3/sbom/{sbom_id}/packages86 (+2)0 (0)0%149 (-7.5)13.838912,6480.14 (0)0
GET/api/v3/sbom/{sbom_id}/related92 (-6)0 (0)0%155 (+9.0)24.235915,3720.15 (0)0
GET/api/v3/sbom?limit=10&sort=name:asc&total=true109 (0)0 (0)0%263 (-12.0)34.71,04712,1890.18 (0)0
GET/api/v3/sbom?offset=100&limit=10&total=true205 (+19)0 (0)0%223 (+34.0)26.878011,9410.34 (0)0
GET/api/v3/sbom?q=label:type=product&total=true88 (-18)0 (0)0%25.9 (+3.2)2.6984.6220.15 (0)0
GET/api/v3/sbom?q=license~GPL&sort=name:desc&total=true113 (+12)0 (0)0%26.7 (+0.9)2.7685.4220.19 (0)0
GET/api/v3/sbom?q=name~redhat&total=true87 (-11)0 (0)0%605 (+221.8)10.71,496220.15 (0)0
GET/api/v3/sbom?q=published>2024-01-01&total=true101 (-11)0 (0)0%175 (-14.0)26.390329,3170.17 (0)0
GET/api/v3/sbom?sort=ingested:desc&total=true84 (-8)0 (0)0%322 (-5.5)25.61,17829,6000.14 (0)0
GET/api/v3/sbom?total=true210 (-4)0 (0)0%161 (-2.2)29.580729,3170.35 (0)0
advisory 13
GET/api/v3/advisory/urn:uuid:{advisory_id}598 (-2)0 (0)0%59.0 (+0.4)3.411272,3951.00 (0)0
GET/api/v3/advisory/urn:uuid:{advisory_id}/download602 (+78)0 (0)0%29.9 (-0.1)4.89100178,4231.00 (+0.1)0
GET/api/v3/advisory?deprecated=Consider&total=true601 (+40)0 (0)0%68.1 (-14.6)5.192,82144,0031.00 (+0.1)0
GET/api/v3/advisory?limit=1&total=true114 (+31)0 (0)0%80.4 (-4.7)7.701,1372,3320.19 (+0.1)0
GET/api/v3/advisory?limit=10&sort=ingested:desc&total=true601 (+47)0 (0)0%63.3 (-5.3)5.623,03020,1931.00 (+0.1)0
GET/api/v3/advisory?offset=100&limit=10&total=true585 (+3)0 (0)0%68.2 (-3.6)6.722,92219,3820.98 (0)0
GET/api/v3/advisory?offset={offset}&limit=1114 (+31)0 (0)0%256 (+19.2)20.88242,0430.19 (+0.1)0
GET/api/v3/advisory?q=CVE-2021-&total=true586 (+16)0 (0)0%393 (-2.5)14.53,93950,0420.98 (0)0
GET/api/v3/advisory?q=identifier=CVE-2022-0981&total=true627 (+66)0 (0)0%56.6 (-6.1)3.971571,9711.05 (+0.1)0
GET/api/v3/advisory?q=modified>3 days ago&total=true582 (+54)0 (0)0%22.8 (-3.0)2.2079.4220.97 (+0.1)0
GET/api/v3/advisory?q=title~openssl&total=true605 (+38)0 (0)0%47.1 (-4.2)9.13772126,4521.01 (+0.1)0
GET/api/v3/advisory?sort=modified:desc&total=true586 (+57)0 (0)0%70.9 (-2.0)6.153,41538,1280.98 (+0.1)0
GET/api/v3/advisory?total=true617 (+60)0 (0)0%116 (-15.2)6.873,13547,8001.03 (+0.1)0
vulnerability 7
POST/api/v3/vulnerability/analyze427 (+7)0 (0)0%960 (+31.6)1.525,1434,211,5060.71 (0)0
GET/api/v3/vulnerability?offset=100&limit=10&total=true223 (-9)0 (0)0%64.2 (-10.0)4.018777,4800.37 (0)0
GET/api/v3/vulnerability?q=base_score>=7.0&total=true200 (-17)0 (0)0%45.1 (+3.0)2.661,16518,4100.33 (0)0
GET/api/v3/vulnerability?q=base_severity=high&total=true201 (-17)0 (0)0%44.2 (-2.6)2.5997718,4360.34 (0)0
GET/api/v3/vulnerability?q=cwes=CWE-79&total=true213 (+7)0 (0)0%39.5 (-20.2)2.5699318,8840.36 (0)0
GET/api/v3/vulnerability?sort=base_score:desc&total=true202 (+7)0 (0)0%679 (-86.9)1632,17614,0520.34 (0)0
GET/api/v3/vulnerability?total=true198 (-24)0 (0)0%33.3 (+7.6)2.5272418,7550.33 (0)0
purl 15
GET/api/v3/purl/base/{purl}135 (-19)0 (0)0%98.0 (+6.0)7.9138948,8270.23 (0)0
GET/api/v3/purl/base?q=namespace=redhat&total=true135 (+9)0 (0)0%75.4 (-1.7)4.206612,0800.23 (0)0
GET/api/v3/purl/base?q=type=rpm&total=true135 (-38)0 (0)0%59.8 (+0.4)4.661132,0800.23 (-0.1)0
GET/api/v3/purl/base?sort=name:asc&total=true133 (-23)0 (0)0%220 (+0.4)70.54272,9430.22 (0)0
GET/api/v3/purl/base?total=true149 (+7)0 (0)0%59.8 (-3.0)3.101452,4500.25 (0)0
POST/api/v3/purl/recommend429 (+17)0 (0)0%953 (-28.6)1181,9032,7470.72 (0)0
GET/api/v3/purl/{purl_id}150 (+36)0 (0)0%94.2 (-6.0)17.22935370.25 (+0.1)0
GET/api/v3/purl?offset=100&limit=10&total=true151 (+27)0 (0)0%65.0 (-22.1)3.286123,7820.25 (0)0
GET/api/v3/purl?q=curl&total=true170 (+42)0 (0)0%92.9 (-5.8)6.351,57411,7140.28 (+0.1)0
GET/api/v3/purl?q=license~GPLv3+...&sort=name:desc&total=true123 (-28)0 (0)0%35.9 (+1.2)6.25162220.21 (0)0
GET/api/v3/purl?q=name=curl&total=true140 (+1)0 (0)0%32.8 (+1.0)2.6226112,0840.23 (0)0
GET/api/v3/purl?q=purl:namespace=redhat&total=true144 (+8)0 (0)0%188 (+3.3)2.263,3569,5550.24 (0)0
GET/api/v3/purl?q=purl:ty=rpm&total=true168 (+20)0 (0)0%163 (-38.3)1.994,5749,5550.28 (0)0
GET/api/v3/purl?sort=purl:name:asc&total=true143 (+1)0 (0)0%54.7 (-8.5)3.3089311,1010.24 (0)0
GET/api/v3/purl?total=true142 (-4)0 (0)0%48.2 (+8.2)2.5368620,4990.24 (0)0
license 9
GET/api/v3/license/spdx/license/{license_id}1,843 (+41)0 (0)0%41.9 (0)1.151181,1433.08 (+0.1)0
GET/api/v3/license/spdx/license?q=apache&total=true1,796 (+14)0 (0)0%3.23 (-0.3)0.9673.31653.00 (0)0
GET/api/v3/license/spdx/license?q=gpl&total=true1,834 (+82)0 (0)0%41.9 (+0.4)1.251201,9813.06 (+0.1)0
GET/api/v3/license/spdx/license?total=true1,802 (+91)0 (0)0%41.8 (-0.3)0.981381,5253.01 (+0.2)0
GET/api/v3/license?limit=10&sort=license:asc&total=true1,846 (+87)0 (0)0%37.1 (-1.8)6.511584253.08 (+0.1)0
GET/api/v3/license?q=ASL&sort=license:desc&total=true1,779 (-60)0 (0)0%31.5 (-2.0)3.18178222.97 (-0.1)0
GET/api/v3/license?q=license~Apache&total=true1,799 (+34)0 (0)0%27.2 (-1.9)2.401561203.00 (+0.1)0
GET/api/v3/license?q=license~GPL&total=true1,800 (+106)0 (0)0%27.2 (-1.5)2.34161923.00 (+0.2)0
GET/api/v3/license?total=true1,823 (+49)0 (0)0%70.1 (-2.5)8.142121,1013.04 (+0.1)0
analysis 3
GET/api/v3/analysis/component/{component}14,244 (+878)0 (0)0%13.5 (-0.8)1.3699.12523.77 (+1.5)0
GET/api/v3/analysis/latest/component/{cpe}14,337 (+1,011)0 (0)0%13.3 (-1.2)1.3896.32523.93 (+1.7)0
GET/api/v3/analysis/status14,251 (+864)0 (0)0%13.1 (-0.8)1.1993.510323.78 (+1.4)0
importer 1
GET/api/v3/importer?total=true53,171 (+3,705)0 (0)0%10.4 (-0.8)1.03101288.74 (+6.2)0
group 3
GET/api/v3/group/sbom?parents=resolve&total=true15,276 (+1,287)0 (0)0%12.3 (-1.2)1.2299.53825.49 (+2.2)0
GET/api/v3/group/sbom?total=true15,074 (+1,062)0 (0)0%12.4 (-1.0)1.2298.32225.16 (+1.8)0
GET/api/v3/group/sbom?totals=true&total=true15,039 (+1,009)0 (0)0%12.5 (-0.7)1.221042225.10 (+1.7)0
labels 3
GET/api/v3/advisory-labels?filter_text=type&limit=100096 (0)0 (0)0%5,837 (-96.9)5,0347,145600.16 (0)0
GET/api/v3/sbom-labels?limit=10&filter_text=&total=true115 (+11)0 (0)0%67.3 (-4.3)8.561251,0650.19 (0)0
GET/api/v3/sbom-labels?total=true105 (-4)0 (0)0%71.8 (+4.3)44.91351,0650.18 (0)0
other 2
GET/.well-known/trustify13,191 (-2)0 (0)0%41.8 (+0.1)0.8878.11,16922.01 (0)0
POST/api/v3/ui/extract-sbom-purls13,346 (-56)0 (0)0%2.44 (-0.1)0.9038.04522.27 (-0.1)0

Response time metrics (ms)

MethodName50%ile75%ile90%ile95%ile99%ile100%ile
sbom 16
GET/api/v3/sbom/by-package?purl={purl}120 (+10)130 (0)150 (+10)190 (-10)240 (+10)240 (+10)
GET/api/v3/sbom/count-by-package11 (-13)58 (-9)74 (-7)78 (-7)92 (+3)92 (-1)
GET/api/v3/sbom/{sbom_id}130 (0)140 (-10)190 (-10)220 (-10)230 (-90)230 (-90)
GET/api/v3/sbom/{sbom_id}/all-license-ids9 (+1)55 (+1)70 (-2)74 (-2)77 (-8)78 (-8)
GET/api/v3/sbom/{sbom_id}/download3,100 (0)3,100 (-100)3,200 (0)3,200 (-100)3,200 (-100)3,300 (-200)
GET/api/v3/sbom/{sbom_id}/license-export12 (-2)50 (-13)72 (-5)75 (-5)100 (+12)100 (+11)
GET/api/v3/sbom/{sbom_id}/packages100 (-40)220 (0)310 (+20)330 (+20)390 (-200)390 (-200)
GET/api/v3/sbom/{sbom_id}/related160 (+40)200 (+10)240 (-20)290 (+10)360 (-20)360 (-20)
GET/api/v3/sbom?limit=10&sort=name:asc&total=true210 (0)320 (-40)490 (+10)640 (+20)810 (+50)1,000 (-200)
GET/api/v3/sbom?offset=100&limit=10&total=true170 (+50)320 (+100)460 (+80)580 (+110)700 (-170)780 (-200)
GET/api/v3/sbom?q=label:type=product&total=true9 (+1)49 (+11)68 (-4)75 (0)85 (+4)85 (-6)
GET/api/v3/sbom?q=license~GPL&sort=name:desc&total=true10 (+1)57 (+3)70 (+1)73 (-1)82 (+1)85 (+3)
GET/api/v3/sbom?q=name~redhat&total=true690 (+595)1,100 (+140)1,300 (+100)1,400 (+100)1,500 (0)1,500 (0)
GET/api/v3/sbom?q=published>2024-01-01&total=true110 (-60)190 (-20)320 (-60)410 (-10)770 (+60)900 (+120)
GET/api/v3/sbom?sort=ingested:desc&total=true320 (0)480 (+30)590 (-70)740 (+20)1,200 (+100)1,200 (+100)
GET/api/v3/sbom?total=true110 (-20)180 (-10)310 (+20)390 (+30)520 (-160)810 (-130)
advisory 13
GET/api/v3/advisory/urn:uuid:{advisory_id}47 (0)79 (+5)110 (+10)110 (0)120 (-10)130 (-90)
GET/api/v3/advisory/urn:uuid:{advisory_id}/download14 (0)53 (-2)73 (-1)79 (+1)86 (-6)100 (-50)
GET/api/v3/advisory?deprecated=Consider&total=true16 (-9)65 (-7)81 (-4)90 (-20)1,600 (-600)2,800 (-700)
GET/api/v3/advisory?limit=1&total=true50 (0)72 (-4)110 (+10)110 (-10)770 (-210)1,100 (+120)
GET/api/v3/advisory?limit=10&sort=ingested:desc&total=true13 (-3)65 (-1)75 (-3)81 (-7)1,700 (-100)3,000 (+400)
GET/api/v3/advisory?offset=100&limit=10&total=true69 (-5)85 (-5)94 (-4)99 (-11)160 (-30)2,900 (+500)
GET/api/v3/advisory?offset={offset}&limit=1240 (+30)310 (-10)430 (-10)540 (+70)770 (+150)820 (+200)
GET/api/v3/advisory?q=CVE-2021-&total=true190 (-10)310 (-20)1,400 (+200)1,800 (0)2,500 (+100)3,900 (-300)
GET/api/v3/advisory?q=identifier=CVE-2022-0981&total=true47 (-1)64 (-23)100 (-10)110 (0)120 (-10)160 (+30)
GET/api/v3/advisory?q=modified>3 days ago&total=true8 (-1)43 (-12)67 (-3)71 (-3)77 (-6)79 (-13)
GET/api/v3/advisory?q=title~openssl&total=true22 (-14)73 (-6)84 (-4)92 (-6)300 (+20)770 (+160)
GET/api/v3/advisory?sort=modified:desc&total=true17 (-1)66 (-5)78 (-4)89 (-11)1,800 (+100)3,400 (+1,100)
GET/api/v3/advisory?total=true97 (-3)110 (-10)160 (-20)180 (-10)200 (-1,500)3,100 (+300)
vulnerability 7
POST/api/v3/vulnerability/analyze62 (-1,038)1,500 (0)2,800 (+800)3,400 (+500)4,400 (+300)5,100 (+500)
GET/api/v3/vulnerability?offset=100&limit=10&total=true46 (0)49 (-10)93 (-7)110 (0)810 (+80)880 (-50)
GET/api/v3/vulnerability?q=base_score>=7.0&total=true8 (-1)21 (-12)70 (+2)200 (+123)1,100 (+420)1,200 (+280)
GET/api/v3/vulnerability?q=base_severity=high&total=true8 (-1)17 (-8)64 (-2)83 (+7)900 (+100)980 (-420)
GET/api/v3/vulnerability?q=cwes=CWE-79&total=true8 (0)32 (-15)69 (-2)81 (-2)720 (-380)990 (-610)
GET/api/v3/vulnerability?sort=base_score:desc&total=true520 (-100)880 (-120)1,200 (-100)1,400 (0)1,600 (0)2,200 (+400)
GET/api/v3/vulnerability?total=true7 (-1)20 (+6)65 (+4)73 (-1)710 (+616)720 (-190)
purl 15
GET/api/v3/purl/base/{purl}66 (+10)170 (+30)250 (+10)280 (-10)380 (+20)390 (+30)
GET/api/v3/purl/base?q=namespace=redhat&total=true47 (0)84 (-4)100 (0)180 (+30)580 (-50)660 (+10)
GET/api/v3/purl/base?q=type=rpm&total=true47 (0)77 (-2)96 (-3)100 (0)110 (-10)110 (-20)
GET/api/v3/purl/base?sort=name:asc&total=true220 (+10)250 (0)320 (0)340 (0)410 (-30)430 (-30)
GET/api/v3/purl/base?total=true45 (-5)78 (-6)99 (-1)110 (0)140 (-30)150 (-40)
POST/api/v3/purl/recommend1,000 (-100)1,200 (0)1,300 (-100)1,400 (-100)1,700 (0)1,900 (0)
GET/api/v3/purl/{purl_id}92 (-3)110 (-20)160 (0)180 (-10)270 (+10)290 (+20)
GET/api/v3/purl?offset=100&limit=10&total=true46 (-1)80 (-13)99 (-1)100 (-20)590 (+70)610 (-330)
GET/api/v3/purl?q=curl&total=true28 (-23)62 (-10)83 (-3)520 (-80)1,400 (+300)1,600 (+400)
GET/api/v3/purl?q=license~GPLv3+...&sort=name:desc&total=true28 (+5)58 (-2)69 (-1)79 (-1)90 (0)160 (+50)
GET/api/v3/purl?q=name=curl&total=true13 (-2)56 (+5)71 (+5)80 (+3)190 (-20)260 (-30)
GET/api/v3/purl?q=purl:namespace=redhat&total=true8 (-1)49 (+2)63 (-4)1,400 (-600)3,300 (+200)3,400 (+200)
GET/api/v3/purl?q=purl:ty=rpm&total=true8 (-1)50 (-2)69 (+4)1,300 (-1,200)3,000 (-600)4,600 (+700)
GET/api/v3/purl?sort=purl:name:asc&total=true10 (-12)57 (+1)75 (+4)310 (-160)550 (-40)890 (-210)
GET/api/v3/purl?total=true8 (0)46 (-1)68 (+4)340 (+271)590 (0)690 (-160)
license 9
GET/api/v3/license/spdx/license/{license_id}43 (0)43 (-1)45 (0)46 (0)65 (-10)120 (0)
GET/api/v3/license/spdx/license?q=apache&total=true3 (0)4 (0)5 (0)6 (-1)23 (-8)73 (-5)
GET/api/v3/license/spdx/license?q=gpl&total=true43 (0)44 (0)45 (0)46 (0)68 (+4)120 (+10)
GET/api/v3/license/spdx/license?total=true43 (0)43 (-1)44 (-1)46 (0)64 (-6)140 (+20)
GET/api/v3/license?limit=10&sort=license:asc&total=true27 (-3)60 (-1)77 (-2)83 (-3)100 (-10)160 (-20)
GET/api/v3/license?q=ASL&sort=license:desc&total=true17 (-4)54 (-2)71 (-1)78 (0)93 (-1)180 (+10)
GET/api/v3/license?q=license~Apache&total=true12 (-1)49 (-3)65 (-4)74 (-2)87 (-1)160 (+10)
GET/api/v3/license?q=license~GPL&total=true12 (-1)49 (-2)64 (-3)72 (-2)85 (-2)160 (-60)
GET/api/v3/license?total=true58 (-3)94 (-3)110 (-10)120 (0)140 (0)210 (-10)
analysis 3
GET/api/v3/analysis/component/{component}5 (0)7 (0)62 (-2)69 (-1)75 (-2)99 (-1)
GET/api/v3/analysis/latest/component/{cpe}5 (0)7 (0)62 (-3)69 (-1)76 (-1)96 (-14)
GET/api/v3/analysis/status5 (0)7 (0)62 (-2)69 (-1)76 (0)94 (-16)
importer 1
GET/api/v3/importer?total=true4 (0)5 (0)53 (-5)66 (-1)73 (-1)100 (0)
group 3
GET/api/v3/group/sbom?parents=resolve&total=true4 (-1)6 (-1)60 (-3)68 (-1)75 (-1)100 (+1)
GET/api/v3/group/sbom?total=true4 (-1)6 (-1)61 (-2)68 (-1)75 (0)98 (-2)
GET/api/v3/group/sbom?totals=true&total=true4 (-1)6 (-1)61 (-2)68 (-1)75 (-1)100 (0)
labels 3
GET/api/v3/advisory-labels?filter_text=type&limit=10005,800 (-100)6,000 (-200)6,400 (-200)6,700 (-100)7,100 (0)7,100 (0)
GET/api/v3/sbom-labels?limit=10&filter_text=&total=true51 (-3)92 (-8)110 (-10)110 (-10)120 (-10)120 (-20)
GET/api/v3/sbom-labels?total=true52 (+1)98 (+5)120 (+10)120 (+10)130 (+10)130 (0)
other 2
GET/.well-known/trustify42 (0)43 (0)44 (0)45 (-1)55 (0)78 (0)
POST/api/v3/ui/extract-sbom-purls2 (0)3 (0)5 (0)6 (0)8 (0)38 (-2)

Failures

No failures recorded.

Exceptions

No exceptions raised in the locustfile.