← All runs

Trustify branch daily perf tests · 2026-10-27 05:01 UTC

Target trustify (release/0.7.z, scale snapshot) · 2026-10-27 05:01:07 UTC → 05:11:05 UTC · Users 10 · Deltas vs previous run (2026-10-26 11:13 UTC, branch_0.7.z_2026-10-26T10-33-56_e164b7e)

Type branch-daily · Dataset scale-20260317T023702Z · Scenario etc/scenarios/main/full-20260317T023702Z.json5 · Branch release/0.7.z · Commit 9f25ba2d586d · Workflow run

Duration
9m 58s
Total requests
199,819 (-153,109)
Failure rate
0.0%
0 failed requests
Throughput
333.4 req/s (-255.6)
Latency 95%ile
72 ms (+11)
Latency 99%ile
190 ms (+90)
Endpoints
72
0 with failures

Over time

Throughput

Requests and failures per second

Response time

Percentiles over Locust's rolling window, ms

Users

Concurrent simulated users

Load plan

ActionStartedStoppedElapsedUsers
Increasing05:01:0705:01:110m 04s2 → 10
Maintaining05:01:1105:11:059m 54s10 → 10

Top 10 slowest endpoints (95%ile)

#MethodName95%ile (ms)Average (ms)# Requests
1GET/api/v3/advisory-labels?filter_text=type&limit=10006,5005,70699
2POST/api/v3/vulnerability/analyze3,4001,059373
3GET/api/v3/sbom/{sbom_id}/download3,2003,06999
4GET/api/v3/purl?q=purl:ty=rpm&total=true2,300181171
5GET/api/v3/purl?q=purl:namespace=redhat&total=true2,200185154
6GET/api/v3/advisory?q=CVE-2021-&total=true1,700364621
7GET/api/v3/vulnerability?sort=base_score:desc&total=true1,600733211
8POST/api/v3/purl/recommend1,500960439
9GET/api/v3/sbom?q=name~redhat&total=true1,300503105
10GET/api/v3/purl?q=curl&total=true90097.9128

Request metrics

MethodName# Requests# FailsFail %Average (ms)Min (ms)Max (ms)Avg size (B)RPSFailures/s
sbom 16
GET/api/v3/sbom/by-package?purl={purl}94 (-59)0 (0)0%102 (+24.6)53.02181,2870.16 (-0.1)0
GET/api/v3/sbom/count-by-package94 (-40)0 (0)0%30.3 (+4.8)3.2392.530.16 (-0.1)0
GET/api/v3/sbom/{sbom_id}128 (-13)0 (0)0%130 (+41.2)59.22872,0150.21 (0)0
GET/api/v3/sbom/{sbom_id}/all-license-ids101 (-50)0 (0)0%22.5 (+9.4)2.3082.920.17 (-0.1)0
GET/api/v3/sbom/{sbom_id}/download99 (-44)0 (0)0%3,069 (+1,148.1)2,8973,398136,458,6380.17 (-0.1)0
GET/api/v3/sbom/{sbom_id}/license-export106 (-46)0 (0)0%33.7 (+10.3)5.0697.42340.18 (-0.1)0
GET/api/v3/sbom/{sbom_id}/packages98 (-72)0 (0)0%155 (+44.1)17.758212,6480.16 (-0.1)0
GET/api/v3/sbom/{sbom_id}/related82 (-88)0 (0)0%146 (+63.4)26.030615,3720.14 (-0.1)0
GET/api/v3/sbom?limit=10&sort=name:asc&total=true93 (-72)0 (0)0%306 (+141.9)67.790412,1890.16 (-0.1)0
GET/api/v3/sbom?offset=100&limit=10&total=true229 (-66)0 (0)0%201 (+52.3)25.976611,9410.38 (-0.1)0
GET/api/v3/sbom?q=label:type=product&total=true107 (-40)0 (0)0%23.2 (+6.7)2.0681.6220.18 (-0.1)0
GET/api/v3/sbom?q=license~GPL&sort=name:desc&total=true118 (-17)0 (0)0%26.8 (+7.7)2.9591.3220.20 (0)0
GET/api/v3/sbom?q=name~redhat&total=true105 (-33)0 (0)0%503 (-51.4)9.211,393220.18 (-0.1)0
GET/api/v3/sbom?q=published>2024-01-01&total=true77 (-69)0 (0)0%233 (+112.2)29.21,21929,3170.13 (-0.1)0
GET/api/v3/sbom?sort=ingested:desc&total=true111 (-54)0 (0)0%285 (+81.5)33.91,29229,6000.19 (-0.1)0
GET/api/v3/sbom?total=true210 (-131)0 (0)0%162 (+65.7)27.271529,3170.35 (-0.2)0
advisory 13
GET/api/v3/advisory/urn:uuid:{advisory_id}578 (-389)0 (0)0%59.5 (+7.6)2.322092,3950.96 (-0.6)0
GET/api/v3/advisory/urn:uuid:{advisory_id}/download601 (-358)0 (0)0%29.3 (+12.6)4.57116178,4231.00 (-0.6)0
GET/api/v3/advisory?deprecated=Consider&total=true604 (-326)0 (0)0%73.2 (+33.7)7.132,97244,0031.01 (-0.5)0
GET/api/v3/advisory?limit=1&total=true94 (-97)0 (0)0%85.1 (+11.1)7.001,1072,5610.16 (-0.2)0
GET/api/v3/advisory?limit=10&sort=ingested:desc&total=true610 (-334)0 (0)0%59.6 (+27.0)5.762,29320,1931.02 (-0.6)0
GET/api/v3/advisory?offset=100&limit=10&total=true580 (-388)0 (0)0%87.4 (+37.7)6.342,59519,0690.97 (-0.6)0
GET/api/v3/advisory?offset={offset}&limit=194 (-97)0 (0)0%247 (+44.9)45.88051,9470.16 (-0.2)0
GET/api/v3/advisory?q=CVE-2021-&total=true621 (-359)0 (0)0%364 (+155.4)9.343,50649,9571.04 (-0.6)0
GET/api/v3/advisory?q=identifier=CVE-2022-0981&total=true618 (-336)0 (0)0%57.7 (+4.7)4.832121,9711.03 (-0.6)0
GET/api/v3/advisory?q=modified>3 days ago&total=true610 (-364)0 (0)0%21.3 (+7.5)2.2798.4221.02 (-0.6)0
GET/api/v3/advisory?q=title~openssl&total=true566 (-394)0 (0)0%50.7 (+21.5)9.23586126,4520.94 (-0.7)0
GET/api/v3/advisory?sort=modified:desc&total=true616 (-340)0 (0)0%63.5 (+25.5)4.592,37538,1281.03 (-0.6)0
GET/api/v3/advisory?total=true628 (-314)0 (0)0%107 (+23.6)8.053,08748,5991.05 (-0.5)0
vulnerability 7
POST/api/v3/vulnerability/analyze373 (-253)0 (0)0%1,059 (+488.7)1.565,4134,651,6140.62 (-0.4)0
GET/api/v3/vulnerability?offset=100&limit=10&total=true191 (-120)0 (0)0%63.3 (+45.0)4.301,0457,6710.32 (-0.2)0
GET/api/v3/vulnerability?q=base_score>=7.0&total=true201 (-107)0 (0)0%37.8 (+7.0)2.4672218,4410.34 (-0.2)0
GET/api/v3/vulnerability?q=base_severity=high&total=true201 (-134)0 (0)0%45.4 (+12.6)2.781,10218,8360.34 (-0.2)0
GET/api/v3/vulnerability?q=cwes=CWE-79&total=true189 (-92)0 (0)0%48.8 (+12.2)2.791,07818,8690.32 (-0.2)0
GET/api/v3/vulnerability?sort=base_score:desc&total=true211 (-83)0 (0)0%733 (+62.4)1701,91714,5490.35 (-0.1)0
GET/api/v3/vulnerability?total=true199 (-131)0 (0)0%40.1 (+27.8)2.6198719,1270.33 (-0.2)0
purl 15
GET/api/v3/purl/base/{purl}161 (-27)0 (0)0%79.4 (-3.5)7.1138048,8270.27 (0)0
GET/api/v3/purl/base?q=namespace=redhat&total=true139 (-66)0 (0)0%87.4 (+15.5)3.867372,0800.23 (-0.1)0
GET/api/v3/purl/base?q=type=rpm&total=true138 (-86)0 (0)0%56.8 (+6.3)4.191182,0800.23 (-0.1)0
GET/api/v3/purl/base?sort=name:asc&total=true152 (-39)0 (0)0%64.9 (+4.9)5.702062,9430.25 (-0.1)0
GET/api/v3/purl/base?total=true146 (-44)0 (0)0%63.2 (+5.6)3.882342,4500.24 (-0.1)0
POST/api/v3/purl/recommend439 (-165)0 (0)0%960 (+244.1)1181,9222,7470.73 (-0.3)0
GET/api/v3/purl/{purl_id}148 (-68)0 (0)0%91.4 (+38.3)20.82705370.25 (-0.1)0
GET/api/v3/purl?offset=100&limit=10&total=true127 (-74)0 (0)0%78.7 (+14.5)4.119104,4740.21 (-0.1)0
GET/api/v3/purl?q=curl&total=true128 (-71)0 (0)0%97.9 (+36.0)6.411,16411,7140.21 (-0.1)0
GET/api/v3/purl?q=license~GPLv3+...&sort=name:desc&total=true148 (-62)0 (0)0%31.9 (+9.9)5.21101220.25 (-0.1)0
GET/api/v3/purl?q=name=curl&total=true156 (-40)0 (0)0%35.6 (+8.0)1.8948012,0840.26 (-0.1)0
GET/api/v3/purl?q=purl:namespace=redhat&total=true154 (-52)0 (0)0%185 (+71.6)1.863,56313,6170.26 (-0.1)0
GET/api/v3/purl?q=purl:ty=rpm&total=true171 (-30)0 (0)0%181 (+83.9)1.903,26213,6170.29 (-0.1)0
GET/api/v3/purl?sort=purl:name:asc&total=true157 (-33)0 (0)0%61.8 (+27.0)1.7688811,1010.26 (-0.1)0
GET/api/v3/purl?total=true157 (-23)0 (0)0%43.0 (+22.1)1.977019,8770.26 (0)0
license 9
GET/api/v3/license/spdx/license/{license_id}1,805 (-310)0 (0)0%41.9 (+0.8)0.971251,1433.01 (-0.5)0
GET/api/v3/license/spdx/license?q=apache&total=true1,835 (-403)0 (0)0%3.29 (+1.5)0.9671.01653.06 (-0.7)0
GET/api/v3/license/spdx/license?q=gpl&total=true1,780 (-405)0 (0)0%41.5 (+0.4)1.221111,9812.97 (-0.7)0
GET/api/v3/license/spdx/license?total=true1,818 (-281)0 (0)0%41.5 (+0.2)0.941081,5253.03 (-0.5)0
GET/api/v3/license?limit=10&sort=license:asc&total=true1,841 (-401)0 (0)0%37.6 (+14.2)4.611774253.07 (-0.7)0
GET/api/v3/license?q=ASL&sort=license:desc&total=true1,856 (-371)0 (0)0%30.8 (+10.0)3.17150223.10 (-0.6)0
GET/api/v3/license?q=license~Apache&total=true1,796 (-454)0 (0)0%27.8 (+9.1)2.511541203.00 (-0.8)0
GET/api/v3/license?q=license~GPL&total=true1,839 (-363)0 (0)0%26.9 (+8.3)2.34168923.07 (-0.6)0
GET/api/v3/license?total=true1,801 (-439)0 (0)0%71.7 (+9.5)6.762111,1013.00 (-0.7)0
analysis 3
GET/api/v3/analysis/component/{component}14,534 (-14,977)0 (0)0%13.2 (+6.8)1.3199.72524.25 (-25.0)0
GET/api/v3/analysis/latest/component/{cpe}14,583 (-14,768)0 (0)0%13.1 (+6.5)1.341032524.33 (-24.6)0
GET/api/v3/analysis/status14,655 (-14,690)0 (0)0%12.7 (+6.4)1.2411010324.45 (-24.5)0
importer 1
GET/api/v3/importer?total=true54,285 (-54,815)0 (0)0%10.2 (+5.1)1.00118290.56 (-91.5)0
group 3
GET/api/v3/group/sbom?parents=resolve&total=true15,424 (-13,904)0 (0)0%12.3 (+5.9)1.211163825.73 (-23.2)0
GET/api/v3/group/sbom?total=true15,339 (-13,998)0 (0)0%12.6 (+6.1)1.221072225.59 (-23.4)0
GET/api/v3/group/sbom?totals=true&total=true15,109 (-14,642)0 (0)0%12.0 (+5.7)1.253872225.21 (-24.4)0
labels 3
GET/api/v3/advisory-labels?filter_text=type&limit=100099 (-85)0 (0)0%5,706 (+2,753.2)4,5808,179600.17 (-0.1)0
GET/api/v3/sbom-labels?limit=10&filter_text=&total=true103 (-62)0 (0)0%69.2 (+11.4)10.51291,0650.17 (-0.1)0
GET/api/v3/sbom-labels?total=true88 (-58)0 (0)0%68.3 (+12.6)44.61311,0650.15 (-0.1)0
other 2
GET/.well-known/trustify13,324 (-541)0 (0)0%41.5 (+0.6)0.8693.11,16922.23 (-0.9)0
POST/api/v3/ui/extract-sbom-purls13,147 (-352)0 (0)0%2.38 (+0.9)0.8938.24521.93 (-0.6)0

Response time metrics (ms)

MethodName50%ile75%ile90%ile95%ile99%ile100%ile
sbom 16
GET/api/v3/sbom/by-package?purl={purl}100 (+43)130 (+20)140 (+20)210 (+80)220 (+90)220 (+90)
GET/api/v3/sbom/count-by-package14 (+5)52 (+4)77 (+12)79 (+10)93 (+11)93 (+7)
GET/api/v3/sbom/{sbom_id}130 (+47)140 (+20)200 (+70)230 (+100)280 (+60)290 (0)
GET/api/v3/sbom/{sbom_id}/all-license-ids8 (+4)37 (+31)66 (+11)72 (+6)77 (0)83 (+6)
GET/api/v3/sbom/{sbom_id}/download3,100 (+1,200)3,100 (+1,100)3,200 (+1,200)3,200 (+1,100)3,400 (+1,100)3,400 (+1,100)
GET/api/v3/sbom/{sbom_id}/license-export16 (+9)63 (+17)77 (+7)82 (+7)87 (+9)97 (+16)
GET/api/v3/sbom/{sbom_id}/packages150 (+50)210 (+30)290 (+80)320 (+60)580 (+220)580 (+220)
GET/api/v3/sbom/{sbom_id}/related140 (+57)190 (+80)240 (+70)280 (+100)310 (+70)310 (+60)
GET/api/v3/sbom?limit=10&sort=name:asc&total=true260 (+130)400 (+190)590 (+300)760 (+380)900 (+420)900 (+140)
GET/api/v3/sbom?offset=100&limit=10&total=true150 (+53)280 (+60)410 (+80)480 (+100)610 (+20)770 (-150)
GET/api/v3/sbom?q=label:type=product&total=true8 (+3)48 (+21)68 (+10)75 (+7)78 (+7)82 (+9)
GET/api/v3/sbom?q=license~GPL&sort=name:desc&total=true10 (+5)54 (+17)69 (+8)72 (+4)80 (+6)91 (+14)
GET/api/v3/sbom?q=name~redhat&total=true98 (-612)1,000 (+100)1,200 (+100)1,300 (+200)1,300 (-200)1,400 (-100)
GET/api/v3/sbom?q=published>2024-01-01&total=true150 (+65)300 (+190)500 (+250)640 (+330)1,200 (+300)1,200 (+100)
GET/api/v3/sbom?sort=ingested:desc&total=true220 (+50)390 (+90)530 (+130)650 (+190)850 (+150)1,300 (+360)
GET/api/v3/sbom?total=true130 (+50)190 (+95)300 (+90)380 (+90)570 (+70)710 (+140)
advisory 13
GET/api/v3/advisory/urn:uuid:{advisory_id}47 (+3)81 (+34)110 (+19)110 (+10)120 (+10)210 (+100)
GET/api/v3/advisory/urn:uuid:{advisory_id}/download13 (+5)54 (+42)74 (+16)79 (+13)95 (+19)120 (+37)
GET/api/v3/advisory?deprecated=Consider&total=true17 (+8)71 (+32)82 (+16)95 (+19)2,100 (+1,520)3,000 (+900)
GET/api/v3/advisory?limit=1&total=true50 (+4)82 (+27)100 (+15)120 (+23)1,100 (+150)1,100 (0)
GET/api/v3/advisory?limit=10&sort=ingested:desc&total=true13 (+6)61 (+37)75 (+12)83 (+12)1,500 (+630)2,300 (+500)
GET/api/v3/advisory?offset=100&limit=10&total=true71 (+39)88 (+13)98 (+13)110 (+20)1,800 (+1,660)2,600 (+500)
GET/api/v3/advisory?offset={offset}&limit=1210 (+60)310 (+50)480 (+70)550 (+50)810 (+190)810 (+20)
GET/api/v3/advisory?q=CVE-2021-&total=true190 (+80)310 (+120)910 (+330)1,700 (+820)2,200 (+1,000)3,500 (+1,400)
GET/api/v3/advisory?q=identifier=CVE-2022-0981&total=true47 (+3)71 (+23)110 (+13)110 (+10)120 (+10)210 (+80)
GET/api/v3/advisory?q=modified>3 days ago&total=true8 (+4)35 (+28)65 (+11)71 (+9)84 (+14)98 (+19)
GET/api/v3/advisory?q=title~openssl&total=true31 (+20)75 (+32)87 (+18)99 (+22)370 (+40)590 (0)
GET/api/v3/advisory?sort=modified:desc&total=true16 (+8)68 (+32)78 (+11)89 (+15)1,700 (+700)2,400 (+200)
GET/api/v3/advisory?total=true100 (+15)110 (+12)180 (+70)190 (+50)230 (+40)3,100 (+700)
vulnerability 7
POST/api/v3/vulnerability/analyze930 (+861)1,700 (+930)2,800 (+1,000)3,400 (+1,100)4,400 (+1,500)5,400 (+2,000)
GET/api/v3/vulnerability?offset=100&limit=10&total=true46 (+42)49 (+43)100 (+69)110 (+45)810 (+420)1,000 (+560)
GET/api/v3/vulnerability?q=base_score>=7.0&total=true8 (+3)17 (+8)65 (+21)75 (+6)700 (-10)720 (-120)
GET/api/v3/vulnerability?q=base_severity=high&total=true8 (+3)15 (+7)62 (+27)78 (+13)890 (-40)1,100 (-100)
GET/api/v3/vulnerability?q=cwes=CWE-79&total=true8 (+3)18 (+10)69 (+16)160 (+87)970 (+130)1,100 (-400)
GET/api/v3/vulnerability?sort=base_score:desc&total=true600 (-100)930 (0)1,200 (0)1,600 (+300)1,900 (+200)1,900 (0)
GET/api/v3/vulnerability?total=true8 (+4)28 (+20)70 (+43)78 (+12)890 (+810)990 (+580)
purl 15
GET/api/v3/purl/base/{purl}53 (-6)110 (-30)220 (+20)270 (+20)350 (+10)380 (-130)
GET/api/v3/purl/base?q=namespace=redhat&total=true47 (+3)89 (+13)110 (+13)210 (+100)670 (+110)740 (+10)
GET/api/v3/purl/base?q=type=rpm&total=true46 (+3)71 (+21)100 (+12)100 (+3)120 (+20)120 (+20)
GET/api/v3/purl/base?sort=name:asc&total=true51 (+4)88 (+8)100 (+1)120 (+10)160 (+40)210 (-120)
GET/api/v3/purl/base?total=true48 (+4)85 (+9)98 (+3)110 (+10)150 (+10)230 (+90)
POST/api/v3/purl/recommend1,000 (+270)1,200 (+350)1,400 (+440)1,500 (+500)1,600 (+400)1,900 (+400)
GET/api/v3/purl/{purl_id}86 (+31)110 (+34)170 (+78)190 (+80)250 (+80)270 (+90)
GET/api/v3/purl?offset=100&limit=10&total=true46 (+2)82 (+7)100 (+4)110 (+10)740 (+340)910 (+200)
GET/api/v3/purl?q=curl&total=true38 (+21)67 (+16)93 (+24)900 (+790)1,100 (+120)1,200 (+220)
GET/api/v3/purl?q=license~GPLv3+...&sort=name:desc&total=true18 (+10)55 (+14)69 (+11)74 (+11)88 (+13)100 (+23)
GET/api/v3/purl?q=name=curl&total=true12 (+3)51 (+8)64 (+1)150 (+69)290 (+90)480 (+80)
GET/api/v3/purl?q=purl:namespace=redhat&total=true9 (+5)47 (+29)64 (+9)2,200 (+2,129)3,300 (+800)3,600 (+500)
GET/api/v3/purl?q=purl:ty=rpm&total=true9 (+5)54 (+21)67 (+9)2,300 (+2,232)3,000 (+700)3,300 (+900)
GET/api/v3/purl?sort=purl:name:asc&total=true12 (+4)50 (+7)70 (+6)470 (+310)850 (+400)890 (+220)
GET/api/v3/purl?total=true9 (+5)53 (+35)61 (+3)67 (+5)650 (+360)700 (+350)
license 9
GET/api/v3/license/spdx/license/{license_id}42 (0)43 (+1)45 (+2)46 (+2)67 (+18)130 (+62)
GET/api/v3/license/spdx/license?q=apache&total=true3 (+1)4 (+2)5 (+2)6 (+2)25 (+20)71 (+49)
GET/api/v3/license/spdx/license?q=gpl&total=true43 (+1)44 (+2)45 (+2)46 (+2)65 (+18)110 (+33)
GET/api/v3/license/spdx/license?total=true42 (0)43 (+1)44 (+1)46 (+2)60 (+14)110 (+21)
GET/api/v3/license?limit=10&sort=license:asc&total=true26 (+16)61 (+14)78 (+19)85 (+20)100 (+24)180 (+86)
GET/api/v3/license?q=ASL&sort=license:desc&total=true15 (+8)54 (+13)69 (+12)77 (+16)92 (+19)150 (+64)
GET/api/v3/license?q=license~Apache&total=true13 (+7)50 (+14)66 (+10)74 (+14)88 (+16)150 (+60)
GET/api/v3/license?q=license~GPL&total=true12 (+6)49 (+12)66 (+10)74 (+14)87 (+15)170 (+80)
GET/api/v3/license?total=true60 (+11)97 (+11)110 (+11)120 (+20)130 (+10)210 (+70)
analysis 3
GET/api/v3/analysis/component/{component}5 (+3)7 (+4)62 (+57)69 (+14)76 (+7)100 (+8)
GET/api/v3/analysis/latest/component/{cpe}5 (+3)7 (+4)62 (+56)69 (+13)76 (+7)100 (+8)
GET/api/v3/analysis/status4 (+2)6 (+3)62 (+57)69 (+13)75 (+5)110 (+10)
importer 1
GET/api/v3/importer?total=true3 (+1)5 (+2)52 (+48)66 (+27)74 (+7)120 (+21)
group 3
GET/api/v3/group/sbom?parents=resolve&total=true4 (+2)6 (+3)61 (+56)68 (+13)75 (+5)120 (-40)
GET/api/v3/group/sbom?total=true4 (+2)6 (+3)62 (+57)68 (+12)75 (+5)110 (-50)
GET/api/v3/group/sbom?totals=true&total=true4 (+2)6 (+3)60 (+55)68 (+13)75 (+5)390 (+220)
labels 3
GET/api/v3/advisory-labels?filter_text=type&limit=10005,700 (+2,800)6,000 (+2,900)6,300 (+3,000)6,500 (+3,100)8,200 (+4,600)8,200 (+4,500)
GET/api/v3/sbom-labels?limit=10&filter_text=&total=true52 (+7)99 (+27)110 (+12)120 (+20)130 (+10)130 (+10)
GET/api/v3/sbom-labels?total=true51 (+6)92 (+43)120 (+22)120 (+20)130 (+10)130 (+10)
other 2
GET/.well-known/trustify42 (0)43 (+1)44 (+1)45 (+1)56 (+8)93 (+11)
POST/api/v3/ui/extract-sbom-purls1 (0)3 (+1)5 (+2)6 (+3)8 (+3)38 (-9)

Failures

No failures recorded.

Exceptions

No exceptions raised in the locustfile.