← All runs

Trustify branch daily perf tests · 2026-10-26 11:13 UTC

Target trustify (release/0.7.z, scale snapshot) · 2026-10-26 11:13:55 UTC → 11:23:53 UTC · Users 10 · Deltas vs previous run (2026-10-26 05:04 UTC, branch_0.7.z_2026-10-26T04-14-29_4b6e0c2)

Type branch-daily · Dataset scale-20260317T023702Z · Scenario etc/scenarios/main/full-20260317T023702Z.json5 · Branch release/0.7.z · Commit e164b7ed2987 · Workflow run

Duration
9m 58s
Total requests
352,928 (+155,669)
Failure rate
0.0%
0 failed requests
Throughput
588.9 req/s (+259.7)
Latency 95%ile
61 ms (-11)
Latency 99%ile
100 ms (-100)
Endpoints
72
0 with failures

Over time

Throughput

Requests and failures per second

Response time

Percentiles over Locust's rolling window, ms

Users

Concurrent simulated users

Load plan

ActionStartedStoppedElapsedUsers
Increasing11:13:5511:13:590m 04s2 → 10
Maintaining11:13:5911:23:539m 54s10 → 10

Top 10 slowest endpoints (95%ile)

#MethodName95%ile (ms)Average (ms)# Requests
1GET/api/v3/advisory-labels?filter_text=type&limit=10003,4002,953184
2POST/api/v3/vulnerability/analyze2,300570626
3GET/api/v3/sbom/{sbom_id}/download2,1001,921143
4GET/api/v3/vulnerability?sort=base_score:desc&total=true1,300671294
5GET/api/v3/sbom?q=name~redhat&total=true1,100555138
6POST/api/v3/purl/recommend1,000716604
7GET/api/v3/advisory?q=CVE-2021-&total=true880209980
8GET/api/v3/advisory?offset={offset}&limit=1500202191
9GET/api/v3/sbom?sort=ingested:desc&total=true460203165
10GET/api/v3/sbom?limit=10&sort=name:asc&total=true380165165

Request metrics

MethodName# Requests# FailsFail %Average (ms)Min (ms)Max (ms)Avg size (B)RPSFailures/s
sbom 16
GET/api/v3/sbom/by-package?purl={purl}153 (+54)0 (0)0%77.7 (-31.8)35.31341,2870.26 (+0.1)0
GET/api/v3/sbom/count-by-package134 (+42)0 (0)0%25.5 (-2.6)3.2785.530.22 (+0.1)0
GET/api/v3/sbom/{sbom_id}141 (+51)0 (0)0%89.2 (-39.3)23.22912,0150.24 (+0.1)0
GET/api/v3/sbom/{sbom_id}/all-license-ids151 (+31)0 (0)0%13.1 (-12.8)1.4876.920.25 (+0.1)0
GET/api/v3/sbom/{sbom_id}/download143 (+41)0 (0)0%1,921 (-1,139.5)1,7562,321136,458,6380.24 (+0.1)0
GET/api/v3/sbom/{sbom_id}/license-export152 (+67)0 (0)0%23.4 (-4.1)2.9281.32340.25 (+0.1)0
GET/api/v3/sbom/{sbom_id}/packages170 (+84)0 (0)0%111 (-38.1)9.5235812,6480.28 (+0.1)0
GET/api/v3/sbom/{sbom_id}/related170 (+78)0 (0)0%82.8 (-71.9)12.425215,3720.28 (+0.1)0
GET/api/v3/sbom?limit=10&sort=name:asc&total=true165 (+56)0 (0)0%165 (-98.5)23.276112,1890.28 (+0.1)0
GET/api/v3/sbom?offset=100&limit=10&total=true295 (+90)0 (0)0%149 (-73.5)18.291911,9410.49 (+0.2)0
GET/api/v3/sbom?q=label:type=product&total=true147 (+59)0 (0)0%16.5 (-9.5)1.1673.3220.25 (+0.1)0
GET/api/v3/sbom?q=license~GPL&sort=name:desc&total=true135 (+22)0 (0)0%19.1 (-7.7)2.0777.0220.23 (0)0
GET/api/v3/sbom?q=name~redhat&total=true138 (+51)0 (0)0%555 (-50.1)7.181,506220.23 (+0.1)0
GET/api/v3/sbom?q=published>2024-01-01&total=true146 (+45)0 (0)0%121 (-53.6)19.41,06829,3170.24 (+0.1)0
GET/api/v3/sbom?sort=ingested:desc&total=true165 (+81)0 (0)0%203 (-119.0)16.993629,6000.28 (+0.1)0
GET/api/v3/sbom?total=true341 (+131)0 (0)0%96.2 (-64.6)17.556729,3170.57 (+0.2)0
advisory 13
GET/api/v3/advisory/urn:uuid:{advisory_id}967 (+369)0 (0)0%52.0 (-7.0)2.301142,3951.61 (+0.6)0
GET/api/v3/advisory/urn:uuid:{advisory_id}/download959 (+357)0 (0)0%16.8 (-13.1)2.8982.9178,4231.60 (+0.6)0
GET/api/v3/advisory?deprecated=Consider&total=true930 (+329)0 (0)0%39.5 (-28.6)3.342,12344,0031.55 (+0.5)0
GET/api/v3/advisory?limit=1&total=true191 (+77)0 (0)0%74.0 (-6.3)7.481,0742,2040.32 (+0.1)0
GET/api/v3/advisory?limit=10&sort=ingested:desc&total=true944 (+343)0 (0)0%32.6 (-30.7)2.571,75620,1931.58 (+0.6)0
GET/api/v3/advisory?offset=100&limit=10&total=true968 (+383)0 (0)0%49.7 (-18.5)3.752,06419,2951.62 (+0.6)0
GET/api/v3/advisory?offset={offset}&limit=1191 (+77)0 (0)0%202 (-54.0)24.07881,9460.32 (+0.1)0
GET/api/v3/advisory?q=CVE-2021-&total=true980 (+394)0 (0)0%209 (-184.5)5.702,14450,1961.64 (+0.7)0
GET/api/v3/advisory?q=identifier=CVE-2022-0981&total=true954 (+327)0 (0)0%53.0 (-3.6)2.161251,9711.59 (+0.5)0
GET/api/v3/advisory?q=modified>3 days ago&total=true974 (+392)0 (0)0%13.9 (-8.9)1.5579.4221.63 (+0.7)0
GET/api/v3/advisory?q=title~openssl&total=true960 (+355)0 (0)0%29.1 (-18.0)5.84588126,4521.60 (+0.6)0
GET/api/v3/advisory?sort=modified:desc&total=true956 (+370)0 (0)0%38.1 (-32.8)3.122,21538,1281.60 (+0.6)0
GET/api/v3/advisory?total=true942 (+325)0 (0)0%83.9 (-31.7)4.852,41949,6841.57 (+0.5)0
vulnerability 7
POST/api/v3/vulnerability/analyze626 (+199)0 (0)0%570 (-389.9)0.893,4234,503,9321.04 (+0.3)0
GET/api/v3/vulnerability?offset=100&limit=10&total=true311 (+88)0 (0)0%18.3 (-45.9)1.554389,1840.52 (+0.1)0
GET/api/v3/vulnerability?q=base_score>=7.0&total=true308 (+108)0 (0)0%30.8 (-14.3)1.9284119,3700.51 (+0.2)0
GET/api/v3/vulnerability?q=base_severity=high&total=true335 (+134)0 (0)0%32.8 (-11.5)2.211,16220,4110.56 (+0.2)0
GET/api/v3/vulnerability?q=cwes=CWE-79&total=true281 (+68)0 (0)0%36.7 (-2.9)1.901,54022,4000.47 (+0.1)0
GET/api/v3/vulnerability?sort=base_score:desc&total=true294 (+92)0 (0)0%671 (-8.4)97.51,86726,1180.49 (+0.2)0
GET/api/v3/vulnerability?total=true330 (+132)0 (0)0%12.3 (-21.0)1.9241119,3660.55 (+0.2)0
purl 15
GET/api/v3/purl/base/{purl}188 (+53)0 (0)0%82.9 (-15.1)3.9550648,8270.31 (+0.1)0
GET/api/v3/purl/base?q=namespace=redhat&total=true205 (+70)0 (0)0%71.9 (-3.5)2.637302,0800.34 (+0.1)0
GET/api/v3/purl/base?q=type=rpm&total=true224 (+89)0 (0)0%50.5 (-9.3)1.951052,0800.37 (+0.1)0
GET/api/v3/purl/base?sort=name:asc&total=true191 (+58)0 (0)0%60.1 (-160.1)1.953302,9430.32 (+0.1)0
GET/api/v3/purl/base?total=true190 (+41)0 (0)0%57.6 (-2.2)2.011392,4500.32 (+0.1)0
POST/api/v3/purl/recommend604 (+175)0 (0)0%716 (-237.1)98.81,5392,7471.01 (+0.3)0
GET/api/v3/purl/{purl_id}216 (+66)0 (0)0%53.1 (-41.0)9.201805370.36 (+0.1)0
GET/api/v3/purl?offset=100&limit=10&total=true201 (+50)0 (0)0%64.2 (-0.8)3.117084,4740.34 (+0.1)0
GET/api/v3/purl?q=curl&total=true199 (+29)0 (0)0%61.9 (-31.0)3.0098411,7140.33 (0)0
GET/api/v3/purl?q=license~GPLv3+...&sort=name:desc&total=true210 (+87)0 (0)0%22.0 (-13.9)3.6376.6220.35 (+0.1)0
GET/api/v3/purl?q=name=curl&total=true196 (+56)0 (0)0%27.6 (-5.2)1.5439812,0840.33 (+0.1)0
GET/api/v3/purl?q=purl:namespace=redhat&total=true206 (+62)0 (0)0%113 (-74.9)1.293,10013,6170.34 (+0.1)0
GET/api/v3/purl?q=purl:ty=rpm&total=true201 (+33)0 (0)0%96.9 (-66.4)1.212,37113,6170.34 (+0.1)0
GET/api/v3/purl?sort=purl:name:asc&total=true190 (+47)0 (0)0%34.8 (-19.9)1.2766711,1010.32 (+0.1)0
GET/api/v3/purl?total=true180 (+38)0 (0)0%20.8 (-27.4)1.063479,8770.30 (+0.1)0
license 9
GET/api/v3/license/spdx/license/{license_id}2,115 (+272)0 (0)0%41.1 (-0.8)0.7268.11,1433.53 (+0.5)0
GET/api/v3/license/spdx/license?q=apache&total=true2,238 (+442)0 (0)0%1.75 (-1.5)0.5221.81653.73 (+0.7)0
GET/api/v3/license/spdx/license?q=gpl&total=true2,185 (+351)0 (0)0%41.1 (-0.8)0.8377.11,9813.65 (+0.6)0
GET/api/v3/license/spdx/license?total=true2,099 (+297)0 (0)0%41.3 (-0.4)0.6189.11,5253.50 (+0.5)0
GET/api/v3/license?limit=10&sort=license:asc&total=true2,242 (+396)0 (0)0%23.4 (-13.7)2.6793.94253.74 (+0.7)0
GET/api/v3/license?q=ASL&sort=license:desc&total=true2,227 (+448)0 (0)0%20.8 (-10.7)1.7986.0223.72 (+0.7)0
GET/api/v3/license?q=license~Apache&total=true2,250 (+451)0 (0)0%18.7 (-8.5)1.3090.31203.75 (+0.8)0
GET/api/v3/license?q=license~GPL&total=true2,202 (+402)0 (0)0%18.6 (-8.6)1.3590.1923.67 (+0.7)0
GET/api/v3/license?total=true2,240 (+417)0 (0)0%62.2 (-7.9)4.251381,1013.74 (+0.7)0
analysis 3
GET/api/v3/analysis/component/{component}29,511 (+15,267)0 (0)0%6.47 (-7.0)0.7591.82549.24 (+25.5)0
GET/api/v3/analysis/latest/component/{cpe}29,351 (+15,014)0 (0)0%6.55 (-6.8)0.7592.32548.98 (+25.1)0
GET/api/v3/analysis/status29,345 (+15,094)0 (0)0%6.37 (-6.7)0.6910110348.97 (+25.2)0
importer 1
GET/api/v3/importer?total=true109,100 (+55,929)0 (0)0%5.10 (-5.3)0.5499.32182.05 (+93.3)0
group 3
GET/api/v3/group/sbom?parents=resolve&total=true29,328 (+14,052)0 (0)0%6.38 (-5.9)0.651653848.94 (+23.4)0
GET/api/v3/group/sbom?total=true29,337 (+14,263)0 (0)0%6.42 (-6.0)0.671602248.95 (+23.8)0
GET/api/v3/group/sbom?totals=true&total=true29,751 (+14,712)0 (0)0%6.39 (-6.1)0.671732249.64 (+24.5)0
labels 3
GET/api/v3/advisory-labels?filter_text=type&limit=1000184 (+88)0 (0)0%2,953 (-2,884.5)2,2443,722600.31 (+0.1)0
GET/api/v3/sbom-labels?limit=10&filter_text=&total=true165 (+50)0 (0)0%57.8 (-9.5)7.241211,0650.28 (+0.1)0
GET/api/v3/sbom-labels?total=true146 (+41)0 (0)0%55.6 (-16.2)6.631221,0650.24 (+0.1)0
other 2
GET/.well-known/trustify13,865 (+674)0 (0)0%41.0 (-0.8)0.4682.11,16923.14 (+1.1)0
POST/api/v3/ui/extract-sbom-purls13,499 (+153)0 (0)0%1.52 (-0.9)0.4547.34522.53 (+0.3)0

Response time metrics (ms)

MethodName50%ile75%ile90%ile95%ile99%ile100%ile
sbom 16
GET/api/v3/sbom/by-package?purl={purl}57 (-63)110 (-20)120 (-30)130 (-60)130 (-110)130 (-110)
GET/api/v3/sbom/count-by-package9 (-2)48 (-10)65 (-9)69 (-9)82 (-10)86 (-6)
GET/api/v3/sbom/{sbom_id}83 (-47)120 (-20)130 (-60)130 (-90)220 (-10)290 (+60)
GET/api/v3/sbom/{sbom_id}/all-license-ids4 (-5)6 (-49)55 (-15)66 (-8)77 (0)77 (-1)
GET/api/v3/sbom/{sbom_id}/download1,900 (-1,200)2,000 (-1,100)2,000 (-1,200)2,100 (-1,100)2,300 (-900)2,300 (-1,000)
GET/api/v3/sbom/{sbom_id}/license-export7 (-5)46 (-4)70 (-2)75 (0)78 (-22)81 (-19)
GET/api/v3/sbom/{sbom_id}/packages100 (0)180 (-40)210 (-100)260 (-70)360 (-30)360 (-30)
GET/api/v3/sbom/{sbom_id}/related83 (-77)110 (-90)170 (-70)180 (-110)240 (-120)250 (-110)
GET/api/v3/sbom?limit=10&sort=name:asc&total=true130 (-80)210 (-110)290 (-200)380 (-260)480 (-330)760 (-240)
GET/api/v3/sbom?offset=100&limit=10&total=true97 (-73)220 (-100)330 (-130)380 (-200)590 (-110)920 (+140)
GET/api/v3/sbom?q=label:type=product&total=true5 (-4)27 (-22)58 (-10)68 (-7)71 (-14)73 (-12)
GET/api/v3/sbom?q=license~GPL&sort=name:desc&total=true5 (-5)37 (-20)61 (-9)68 (-5)74 (-8)77 (-8)
GET/api/v3/sbom?q=name~redhat&total=true710 (+20)900 (-200)1,100 (-200)1,100 (-300)1,500 (0)1,500 (0)
GET/api/v3/sbom?q=published>2024-01-01&total=true85 (-25)110 (-80)250 (-70)310 (-100)900 (+130)1,100 (+200)
GET/api/v3/sbom?sort=ingested:desc&total=true170 (-150)300 (-180)400 (-190)460 (-280)700 (-500)940 (-260)
GET/api/v3/sbom?total=true80 (-30)95 (-85)210 (-100)290 (-100)500 (-20)570 (-240)
advisory 13
GET/api/v3/advisory/urn:uuid:{advisory_id}44 (-3)47 (-32)91 (-19)100 (-10)110 (-10)110 (-20)
GET/api/v3/advisory/urn:uuid:{advisory_id}/download8 (-6)12 (-41)58 (-15)66 (-13)76 (-10)83 (-17)
GET/api/v3/advisory?deprecated=Consider&total=true9 (-7)39 (-26)66 (-15)76 (-14)580 (-1,020)2,100 (-700)
GET/api/v3/advisory?limit=1&total=true46 (-4)55 (-17)85 (-25)97 (-13)950 (+180)1,100 (0)
GET/api/v3/advisory?limit=10&sort=ingested:desc&total=true7 (-6)24 (-41)63 (-12)71 (-10)870 (-830)1,800 (-1,200)
GET/api/v3/advisory?offset=100&limit=10&total=true32 (-37)75 (-10)85 (-9)90 (-9)140 (-20)2,100 (-800)
GET/api/v3/advisory?offset={offset}&limit=1150 (-90)260 (-50)410 (-20)500 (-40)620 (-150)790 (-30)
GET/api/v3/advisory?q=CVE-2021-&total=true110 (-80)190 (-120)580 (-820)880 (-920)1,200 (-1,300)2,100 (-1,800)
GET/api/v3/advisory?q=identifier=CVE-2022-0981&total=true44 (-3)48 (-16)97 (-3)100 (-10)110 (-10)130 (-30)
GET/api/v3/advisory?q=modified>3 days ago&total=true4 (-4)7 (-36)54 (-13)62 (-9)70 (-7)79 (0)
GET/api/v3/advisory?q=title~openssl&total=true11 (-11)43 (-30)69 (-15)77 (-15)330 (+30)590 (-180)
GET/api/v3/advisory?sort=modified:desc&total=true8 (-9)36 (-30)67 (-11)74 (-15)1,000 (-800)2,200 (-1,200)
GET/api/v3/advisory?total=true85 (-12)98 (-12)110 (-50)140 (-40)190 (-10)2,400 (-700)
vulnerability 7
POST/api/v3/vulnerability/analyze69 (+7)770 (-730)1,800 (-1,000)2,300 (-1,100)2,900 (-1,500)3,400 (-1,700)
GET/api/v3/vulnerability?offset=100&limit=10&total=true4 (-42)6 (-43)31 (-62)65 (-45)390 (-420)440 (-440)
GET/api/v3/vulnerability?q=base_score>=7.0&total=true5 (-3)9 (-12)44 (-26)69 (-131)710 (-390)840 (-360)
GET/api/v3/vulnerability?q=base_severity=high&total=true5 (-3)8 (-9)35 (-29)65 (-18)930 (+30)1,200 (+220)
GET/api/v3/vulnerability?q=cwes=CWE-79&total=true5 (-3)8 (-24)53 (-16)73 (-8)840 (+120)1,500 (+510)
GET/api/v3/vulnerability?sort=base_score:desc&total=true700 (+180)930 (+50)1,200 (0)1,300 (-100)1,700 (+100)1,900 (-300)
GET/api/v3/vulnerability?total=true4 (-3)8 (-12)27 (-38)66 (-7)80 (-630)410 (-310)
purl 15
GET/api/v3/purl/base/{purl}59 (-7)140 (-30)200 (-50)250 (-30)340 (-40)510 (+120)
GET/api/v3/purl/base?q=namespace=redhat&total=true44 (-3)76 (-8)97 (-3)110 (-70)560 (-20)730 (+70)
GET/api/v3/purl/base?q=type=rpm&total=true43 (-4)50 (-27)88 (-8)97 (-3)100 (-10)100 (-10)
GET/api/v3/purl/base?sort=name:asc&total=true47 (-173)80 (-170)99 (-221)110 (-230)120 (-290)330 (-100)
GET/api/v3/purl/base?total=true44 (-1)76 (-2)95 (-4)100 (-10)140 (0)140 (-10)
POST/api/v3/purl/recommend730 (-270)850 (-350)960 (-340)1,000 (-400)1,200 (-500)1,500 (-400)
GET/api/v3/purl/{purl_id}55 (-37)76 (-34)92 (-68)110 (-70)170 (-100)180 (-110)
GET/api/v3/purl?offset=100&limit=10&total=true44 (-2)75 (-5)96 (-3)100 (0)400 (-190)710 (+100)
GET/api/v3/purl?q=curl&total=true17 (-11)51 (-11)69 (-14)110 (-410)980 (-420)980 (-620)
GET/api/v3/purl?q=license~GPLv3+...&sort=name:desc&total=true8 (-20)41 (-17)58 (-11)63 (-16)75 (-15)77 (-83)
GET/api/v3/purl?q=name=curl&total=true9 (-4)43 (-13)63 (-8)81 (+1)200 (+10)400 (+140)
GET/api/v3/purl?q=purl:namespace=redhat&total=true4 (-4)18 (-31)55 (-8)71 (-1,329)2,500 (-800)3,100 (-300)
GET/api/v3/purl?q=purl:ty=rpm&total=true4 (-4)33 (-17)58 (-11)68 (-1,232)2,300 (-700)2,400 (-2,200)
GET/api/v3/purl?sort=purl:name:asc&total=true8 (-2)43 (-14)64 (-11)160 (-150)450 (-100)670 (-220)
GET/api/v3/purl?total=true4 (-4)18 (-28)58 (-10)62 (-278)290 (-300)350 (-340)
license 9
GET/api/v3/license/spdx/license/{license_id}42 (-1)42 (-1)43 (-2)44 (-2)49 (-16)68 (-52)
GET/api/v3/license/spdx/license?q=apache&total=true2 (-1)2 (-2)3 (-2)4 (-2)5 (-18)22 (-51)
GET/api/v3/license/spdx/license?q=gpl&total=true42 (-1)42 (-2)43 (-2)44 (-2)47 (-21)77 (-43)
GET/api/v3/license/spdx/license?total=true42 (-1)42 (-1)43 (-1)44 (-2)46 (-18)89 (-51)
GET/api/v3/license?limit=10&sort=license:asc&total=true10 (-17)47 (-13)59 (-18)65 (-18)76 (-24)94 (-66)
GET/api/v3/license?q=ASL&sort=license:desc&total=true7 (-10)41 (-13)57 (-14)61 (-17)73 (-20)86 (-94)
GET/api/v3/license?q=license~Apache&total=true6 (-6)36 (-13)56 (-9)60 (-14)72 (-15)90 (-70)
GET/api/v3/license?q=license~GPL&total=true6 (-6)37 (-12)56 (-8)60 (-12)72 (-13)90 (-70)
GET/api/v3/license?total=true49 (-9)86 (-8)99 (-11)100 (-20)120 (-20)140 (-70)
analysis 3
GET/api/v3/analysis/component/{component}2 (-3)3 (-4)5 (-57)55 (-14)69 (-6)92 (-7)
GET/api/v3/analysis/latest/component/{cpe}2 (-3)3 (-4)6 (-56)56 (-13)69 (-7)92 (-4)
GET/api/v3/analysis/status2 (-3)3 (-4)5 (-57)56 (-13)70 (-6)100 (+6)
importer 1
GET/api/v3/importer?total=true2 (-2)3 (-2)4 (-49)39 (-27)67 (-6)99 (-1)
group 3
GET/api/v3/group/sbom?parents=resolve&total=true2 (-2)3 (-3)5 (-55)55 (-13)70 (-5)160 (+60)
GET/api/v3/group/sbom?total=true2 (-2)3 (-3)5 (-56)56 (-12)70 (-5)160 (+62)
GET/api/v3/group/sbom?totals=true&total=true2 (-2)3 (-3)5 (-56)55 (-13)70 (-5)170 (+70)
labels 3
GET/api/v3/advisory-labels?filter_text=type&limit=10002,900 (-2,900)3,100 (-2,900)3,300 (-3,100)3,400 (-3,300)3,600 (-3,500)3,700 (-3,400)
GET/api/v3/sbom-labels?limit=10&filter_text=&total=true45 (-6)72 (-20)98 (-12)100 (-10)120 (0)120 (0)
GET/api/v3/sbom-labels?total=true45 (-7)49 (-49)98 (-22)100 (-20)120 (-10)120 (-10)
other 2
GET/.well-known/trustify42 (0)42 (-1)43 (-1)44 (-1)48 (-7)82 (+4)
POST/api/v3/ui/extract-sbom-purls1 (-1)2 (-1)3 (-2)3 (-3)5 (-3)47 (+9)

Failures

No failures recorded.

Exceptions

No exceptions raised in the locustfile.