← All runs

Trustify branch daily perf tests · 2026-10-28 05:05 UTC

Target trustify (release/0.7.z, scale snapshot) · 2026-10-28 05:05:19 UTC → 05:15:17 UTC · Users 10 · Deltas vs previous run (2026-10-27 05:01 UTC, branch_0.7.z_2026-10-27T04-11-08_9f25ba2)

Type branch-daily · Dataset scale-20260317T023702Z · Scenario etc/scenarios/main/full-20260317T023702Z.json5 · Branch release/0.7.z · Commit 595c74ba3eed · Workflow run

Duration
9m 58s
Total requests
322,239 (+122,420)
Failure rate
0.0%
0 failed requests
Throughput
537.9 req/s (+204.5)
Latency 95%ile
63 ms (-9)
Latency 99%ile
120 ms (-70)
Endpoints
72
0 with failures

Over time

Throughput

Requests and failures per second

Response time

Percentiles over Locust's rolling window, ms

Users

Concurrent simulated users

Load plan

ActionStartedStoppedElapsedUsers
Increasing05:05:1905:05:230m 04s2 → 10
Maintaining05:05:2305:15:179m 54s10 → 10

Top 10 slowest endpoints (95%ile)

#MethodName95%ile (ms)Average (ms)# Requests
1GET/api/v3/advisory-labels?filter_text=type&limit=10004,5003,900141
2POST/api/v3/vulnerability/analyze2,600615637
3GET/api/v3/sbom/{sbom_id}/download2,4002,252130
4GET/api/v3/sbom?q=name~redhat&total=true1,40054899
5GET/api/v3/vulnerability?sort=base_score:desc&total=true1,300553297
6GET/api/v3/advisory?q=CVE-2021-&total=true1,200309714
7POST/api/v3/purl/recommend1,200743533
8GET/api/v3/sbom?sort=ingested:desc&total=true880297116
9GET/api/v3/purl?q=curl&total=true680111206
10GET/api/v3/sbom?limit=10&sort=name:asc&total=true590218133

Request metrics

MethodName# Requests# FailsFail %Average (ms)Min (ms)Max (ms)Avg size (B)RPSFailures/s
sbom 16
GET/api/v3/sbom/by-package?purl={purl}101 (+7)0 (0)0%132 (+29.5)15.93,0811,2870.17 (0)0
GET/api/v3/sbom/count-by-package109 (+15)0 (0)0%25.7 (-4.7)3.6420430.18 (0)0
GET/api/v3/sbom/{sbom_id}104 (-24)0 (0)0%101 (-29.3)54.22202,0150.17 (0)0
GET/api/v3/sbom/{sbom_id}/all-license-ids133 (+32)0 (0)0%18.1 (-4.4)1.6573.620.22 (+0.1)0
GET/api/v3/sbom/{sbom_id}/download130 (+31)0 (0)0%2,252 (-817.4)2,0692,499136,458,6380.22 (+0.1)0
GET/api/v3/sbom/{sbom_id}/license-export111 (+5)0 (0)0%33.2 (-0.6)3.525162340.19 (0)0
GET/api/v3/sbom/{sbom_id}/packages133 (+35)0 (0)0%143 (-11.7)12.03,12312,6480.22 (+0.1)0
GET/api/v3/sbom/{sbom_id}/related136 (+54)0 (0)0%107 (-39.5)15.362315,3720.23 (+0.1)0
GET/api/v3/sbom?limit=10&sort=name:asc&total=true133 (+40)0 (0)0%218 (-88.3)27.61,51112,1890.22 (+0.1)0
GET/api/v3/sbom?offset=100&limit=10&total=true246 (+17)0 (0)0%179 (-22.0)22.01,21211,9410.41 (0)0
GET/api/v3/sbom?q=label:type=product&total=true109 (+2)0 (0)0%19.5 (-3.7)1.66105220.18 (0)0
GET/api/v3/sbom?q=license~GPL&sort=name:desc&total=true137 (+19)0 (0)0%22.2 (-4.6)2.1781.9220.23 (0)0
GET/api/v3/sbom?q=name~redhat&total=true99 (-6)0 (0)0%548 (+44.6)7.392,165220.17 (0)0
GET/api/v3/sbom?q=published>2024-01-01&total=true121 (+44)0 (0)0%167 (-66.5)23.71,44929,3170.20 (+0.1)0
GET/api/v3/sbom?sort=ingested:desc&total=true116 (+5)0 (0)0%297 (+11.8)23.31,73829,6000.19 (0)0
GET/api/v3/sbom?total=true217 (+7)0 (0)0%151 (-11.1)21.71,48929,3170.36 (0)0
advisory 13
GET/api/v3/advisory/urn:uuid:{advisory_id}709 (+131)0 (0)0%53.5 (-6.0)3.321392,3951.18 (+0.2)0
GET/api/v3/advisory/urn:uuid:{advisory_id}/download766 (+165)0 (0)0%20.5 (-8.8)3.54169178,4231.28 (+0.3)0
GET/api/v3/advisory?deprecated=Consider&total=true738 (+134)0 (0)0%50.5 (-22.6)5.122,58544,0031.23 (+0.2)0
GET/api/v3/advisory?limit=1&total=true156 (+62)0 (0)0%68.0 (-17.2)5.778492,6150.26 (+0.1)0
GET/api/v3/advisory?limit=10&sort=ingested:desc&total=true720 (+110)0 (0)0%48.9 (-10.6)3.223,09020,1931.20 (+0.2)0
GET/api/v3/advisory?offset=100&limit=10&total=true661 (+81)0 (0)0%73.6 (-13.8)3.792,17419,0491.10 (+0.1)0
GET/api/v3/advisory?offset={offset}&limit=1156 (+62)0 (0)0%244 (-3.3)35.69582,1550.26 (+0.1)0
GET/api/v3/advisory?q=CVE-2021-&total=true714 (+93)0 (0)0%309 (-55.5)7.064,93450,1451.19 (+0.2)0
GET/api/v3/advisory?q=identifier=CVE-2022-0981&total=true725 (+107)0 (0)0%53.2 (-4.5)2.461831,9711.21 (+0.2)0
GET/api/v3/advisory?q=modified>3 days ago&total=true655 (+45)0 (0)0%16.7 (-4.6)1.90152221.09 (+0.1)0
GET/api/v3/advisory?q=title~openssl&total=true745 (+179)0 (0)0%32.8 (-17.8)5.99526126,4521.24 (+0.3)0
GET/api/v3/advisory?sort=modified:desc&total=true738 (+122)0 (0)0%46.1 (-17.4)4.702,35338,1281.23 (+0.2)0
GET/api/v3/advisory?total=true743 (+115)0 (0)0%122 (+14.7)5.792,20248,4971.24 (+0.2)0
vulnerability 7
POST/api/v3/vulnerability/analyze637 (+264)0 (0)0%615 (-444.2)1.155,7224,241,7381.06 (+0.4)0
GET/api/v3/vulnerability?offset=100&limit=10&total=true314 (+123)0 (0)0%25.6 (-37.7)2.121,2227,1970.52 (+0.2)0
GET/api/v3/vulnerability?q=base_score>=7.0&total=true316 (+115)0 (0)0%31.4 (-6.5)2.051,42318,4800.53 (+0.2)0
GET/api/v3/vulnerability?q=base_severity=high&total=true300 (+99)0 (0)0%25.8 (-19.6)2.0988218,3980.50 (+0.2)0
GET/api/v3/vulnerability?q=cwes=CWE-79&total=true306 (+117)0 (0)0%28.7 (-20.1)1.981,40518,7360.51 (+0.2)0
GET/api/v3/vulnerability?sort=base_score:desc&total=true297 (+86)0 (0)0%553 (-180.1)1045,04113,1550.50 (+0.1)0
GET/api/v3/vulnerability?total=true338 (+139)0 (0)0%15.0 (-25.1)1.8570918,3730.56 (+0.2)0
purl 15
GET/api/v3/purl/base/{purl}219 (+58)0 (0)0%91.3 (+11.9)4.3476948,8270.37 (+0.1)0
GET/api/v3/purl/base?q=namespace=redhat&total=true228 (+89)0 (0)0%69.0 (-18.4)2.831,1552,0800.38 (+0.1)0
GET/api/v3/purl/base?q=type=rpm&total=true192 (+54)0 (0)0%50.2 (-6.6)2.561302,0800.32 (+0.1)0
GET/api/v3/purl/base?sort=name:asc&total=true189 (+37)0 (0)0%75.9 (+11.0)2.612,9692,9430.32 (+0.1)0
GET/api/v3/purl/base?total=true190 (+44)0 (0)0%60.8 (-2.4)2.307012,4500.32 (+0.1)0
POST/api/v3/purl/recommend533 (+94)0 (0)0%743 (-217.4)1171,6502,7470.89 (+0.2)0
GET/api/v3/purl/{purl_id}205 (+57)0 (0)0%62.8 (-28.6)10.83295370.34 (+0.1)0
GET/api/v3/purl?offset=100&limit=10&total=true210 (+83)0 (0)0%72.2 (-6.4)2.769414,0610.35 (+0.1)0
GET/api/v3/purl?q=curl&total=true206 (+78)0 (0)0%111 (+12.7)2.021,88810,2410.34 (+0.1)0
GET/api/v3/purl?q=license~GPLv3+...&sort=name:desc&total=true188 (+40)0 (0)0%22.0 (-9.9)1.8077.4220.31 (+0.1)0
GET/api/v3/purl?q=name=curl&total=true201 (+45)0 (0)0%26.9 (-8.7)1.5225912,0840.34 (+0.1)0
GET/api/v3/purl?q=purl:namespace=redhat&total=true207 (+53)0 (0)0%135 (-50.4)1.484,16910,3180.35 (+0.1)0
GET/api/v3/purl?q=purl:ty=rpm&total=true213 (+42)0 (0)0%129 (-52.2)1.493,78910,1790.36 (+0.1)0
GET/api/v3/purl?sort=purl:name:asc&total=true209 (+52)0 (0)0%42.5 (-19.3)1.4467911,1010.35 (+0.1)0
GET/api/v3/purl?total=true216 (+59)0 (0)0%22.4 (-20.6)1.3460210,1940.36 (+0.1)0
license 9
GET/api/v3/license/spdx/license/{license_id}2,035 (+230)0 (0)0%41.2 (-0.7)0.771191,1433.40 (+0.4)0
GET/api/v3/license/spdx/license?q=apache&total=true2,023 (+188)0 (0)0%2.46 (-0.8)0.7256.51653.38 (+0.3)0
GET/api/v3/license/spdx/license?q=gpl&total=true2,045 (+265)0 (0)0%41.5 (0)1.0299.41,9813.41 (+0.4)0
GET/api/v3/license/spdx/license?total=true2,150 (+332)0 (0)0%41.2 (-0.3)0.9894.91,5253.59 (+0.6)0
GET/api/v3/license?limit=10&sort=license:asc&total=true2,059 (+218)0 (0)0%27.3 (-10.3)4.293194253.44 (+0.4)0
GET/api/v3/license?q=ASL&sort=license:desc&total=true2,085 (+229)0 (0)0%22.4 (-8.4)2.42166223.48 (+0.4)0
GET/api/v3/license?q=license~Apache&total=true2,086 (+290)0 (0)0%20.8 (-7.1)1.831531203.48 (+0.5)0
GET/api/v3/license?q=license~GPL&total=true2,140 (+301)0 (0)0%20.2 (-6.6)1.78153923.57 (+0.5)0
GET/api/v3/license?total=true2,118 (+317)0 (0)0%64.0 (-7.7)5.892131,1013.54 (+0.5)0
analysis 3
GET/api/v3/analysis/component/{component}26,818 (+12,284)0 (0)0%7.09 (-6.2)0.981102544.76 (+20.5)0
GET/api/v3/analysis/latest/component/{cpe}26,604 (+12,021)0 (0)0%7.38 (-5.7)1.0296.72544.41 (+20.1)0
GET/api/v3/analysis/status26,825 (+12,170)0 (0)0%6.75 (-6.0)0.9217910344.78 (+20.3)0
importer 1
GET/api/v3/importer?total=true97,793 (+43,508)0 (0)0%5.64 (-4.6)0.7393.32163.24 (+72.7)0
group 3
GET/api/v3/group/sbom?parents=resolve&total=true26,974 (+11,550)0 (0)0%6.95 (-5.4)0.8894.43845.02 (+19.3)0
GET/api/v3/group/sbom?total=true27,202 (+11,863)0 (0)0%6.70 (-5.9)0.891842245.41 (+19.8)0
GET/api/v3/group/sbom?totals=true&total=true27,518 (+12,409)0 (0)0%6.93 (-5.1)0.8897.72245.93 (+20.7)0
labels 3
GET/api/v3/advisory-labels?filter_text=type&limit=1000141 (+42)0 (0)0%3,900 (-1,806.5)2,8039,975600.24 (+0.1)0
GET/api/v3/sbom-labels?limit=10&filter_text=&total=true145 (+42)0 (0)0%63.8 (-5.4)43.81321,0650.24 (+0.1)0
GET/api/v3/sbom-labels?total=true120 (+32)0 (0)0%65.0 (-3.2)10.11561,0650.20 (+0.1)0
other 2
GET/.well-known/trustify13,628 (+304)0 (0)0%41.3 (-0.3)0.661061,16922.75 (+0.5)0
POST/api/v3/ui/extract-sbom-purls13,455 (+308)0 (0)0%1.82 (-0.6)0.6534.64522.46 (+0.5)0

Response time metrics (ms)

MethodName50%ile75%ile90%ile95%ile99%ile100%ile
sbom 16
GET/api/v3/sbom/by-package?purl={purl}98 (-2)120 (-10)140 (0)220 (+10)390 (+170)3,100 (+2,880)
GET/api/v3/sbom/count-by-package9 (-5)47 (-5)68 (-9)74 (-5)100 (+7)200 (+107)
GET/api/v3/sbom/{sbom_id}110 (-20)130 (-10)140 (-60)150 (-80)180 (-100)220 (-70)
GET/api/v3/sbom/{sbom_id}/all-license-ids5 (-3)33 (-4)59 (-7)67 (-5)73 (-4)74 (-9)
GET/api/v3/sbom/{sbom_id}/download2,200 (-900)2,300 (-800)2,400 (-800)2,400 (-800)2,500 (-900)2,500 (-900)
GET/api/v3/sbom/{sbom_id}/license-export10 (-6)55 (-8)75 (-2)78 (-4)100 (+13)520 (+423)
GET/api/v3/sbom/{sbom_id}/packages77 (-73)180 (-30)270 (-20)390 (+70)1,400 (+820)3,100 (+2,520)
GET/api/v3/sbom/{sbom_id}/related91 (-49)120 (-70)200 (-40)270 (-10)470 (+160)620 (+310)
GET/api/v3/sbom?limit=10&sort=name:asc&total=true140 (-120)280 (-120)430 (-160)590 (-170)1,200 (+300)1,500 (+600)
GET/api/v3/sbom?offset=100&limit=10&total=true100 (-50)200 (-80)420 (+10)550 (+70)900 (+290)1,200 (+430)
GET/api/v3/sbom?q=label:type=product&total=true5 (-3)35 (-13)65 (-3)72 (-3)75 (-3)110 (+28)
GET/api/v3/sbom?q=license~GPL&sort=name:desc&total=true7 (-3)42 (-12)62 (-7)68 (-4)80 (0)82 (-9)
GET/api/v3/sbom?q=name~redhat&total=true330 (+232)1,100 (+100)1,300 (+100)1,400 (+100)2,200 (+900)2,200 (+800)
GET/api/v3/sbom?q=published>2024-01-01&total=true97 (-53)150 (-150)410 (-90)580 (-60)1,000 (-200)1,400 (+200)
GET/api/v3/sbom?sort=ingested:desc&total=true210 (-10)420 (+30)640 (+110)880 (+230)1,600 (+750)1,700 (+400)
GET/api/v3/sbom?total=true96 (-34)160 (-30)360 (+60)470 (+90)970 (+400)1,500 (+790)
advisory 13
GET/api/v3/advisory/urn:uuid:{advisory_id}45 (-2)54 (-27)97 (-13)100 (-10)120 (0)140 (-70)
GET/api/v3/advisory/urn:uuid:{advisory_id}/download9 (-4)19 (-35)64 (-10)71 (-8)86 (-9)170 (+50)
GET/api/v3/advisory?deprecated=Consider&total=true11 (-6)55 (-16)74 (-8)83 (-12)1,400 (-700)2,600 (-400)
GET/api/v3/advisory?limit=1&total=true48 (-2)72 (-10)99 (-1)110 (-10)640 (-460)850 (-250)
GET/api/v3/advisory?limit=10&sort=ingested:desc&total=true8 (-5)48 (-13)70 (-5)78 (-5)1,300 (-200)3,100 (+800)
GET/api/v3/advisory?offset=100&limit=10&total=true57 (-14)85 (-3)100 (+2)150 (+40)390 (-1,410)2,200 (-400)
GET/api/v3/advisory?offset={offset}&limit=1210 (0)310 (0)480 (0)580 (+30)900 (+90)960 (+150)
GET/api/v3/advisory?q=CVE-2021-&total=true180 (-10)290 (-20)820 (-90)1,200 (-500)1,800 (-400)4,900 (+1,400)
GET/api/v3/advisory?q=identifier=CVE-2022-0981&total=true45 (-2)50 (-21)99 (-11)110 (0)120 (0)180 (-30)
GET/api/v3/advisory?q=modified>3 days ago&total=true5 (-3)15 (-20)60 (-5)66 (-5)74 (-10)150 (+52)
GET/api/v3/advisory?q=title~openssl&total=true13 (-18)54 (-21)75 (-12)84 (-15)140 (-230)530 (-60)
GET/api/v3/advisory?sort=modified:desc&total=true10 (-6)50 (-18)72 (-6)82 (-7)1,200 (-500)2,400 (0)
GET/api/v3/advisory?total=true97 (-3)120 (+10)190 (+10)260 (+70)580 (+350)2,200 (-900)
vulnerability 7
POST/api/v3/vulnerability/analyze43 (-887)950 (-750)1,800 (-1,000)2,600 (-800)3,800 (-600)5,700 (+300)
GET/api/v3/vulnerability?offset=100&limit=10&total=true5 (-41)8 (-41)55 (-45)67 (-43)710 (-100)1,200 (+200)
GET/api/v3/vulnerability?q=base_score>=7.0&total=true5 (-3)8 (-9)39 (-26)75 (0)730 (+30)1,400 (+680)
GET/api/v3/vulnerability?q=base_severity=high&total=true5 (-3)8 (-7)51 (-11)69 (-9)730 (-160)880 (-220)
GET/api/v3/vulnerability?q=cwes=CWE-79&total=true6 (-2)8 (-10)58 (-11)73 (-87)630 (-340)1,400 (+300)
GET/api/v3/vulnerability?sort=base_score:desc&total=true400 (-200)690 (-240)1,100 (-100)1,300 (-300)2,000 (+100)5,000 (+3,100)
GET/api/v3/vulnerability?total=true5 (-3)6 (-22)13 (-57)60 (-18)480 (-410)710 (-280)
purl 15
GET/api/v3/purl/base/{purl}50 (-3)130 (+20)250 (+30)320 (+50)570 (+220)770 (+390)
GET/api/v3/purl/base?q=namespace=redhat&total=true44 (-3)72 (-17)97 (-13)100 (-110)570 (-100)1,200 (+460)
GET/api/v3/purl/base?q=type=rpm&total=true44 (-2)47 (-24)85 (-15)95 (-5)110 (-10)130 (+10)
GET/api/v3/purl/base?sort=name:asc&total=true47 (-4)76 (-12)100 (0)120 (0)230 (+70)3,000 (+2,790)
GET/api/v3/purl/base?total=true44 (-4)76 (-9)97 (-1)100 (-10)200 (+50)700 (+470)
POST/api/v3/purl/recommend800 (-200)950 (-250)1,100 (-300)1,200 (-300)1,400 (-200)1,600 (-300)
GET/api/v3/purl/{purl_id}62 (-24)83 (-27)110 (-60)150 (-40)230 (-20)330 (+60)
GET/api/v3/purl?offset=100&limit=10&total=true45 (-1)82 (0)99 (-1)110 (0)510 (-230)940 (+30)
GET/api/v3/purl?q=curl&total=true11 (-27)57 (-10)280 (+187)680 (-220)1,500 (+400)1,900 (+700)
GET/api/v3/purl?q=license~GPLv3+...&sort=name:desc&total=true9 (-9)40 (-15)61 (-8)63 (-11)77 (-11)77 (-23)
GET/api/v3/purl?q=name=curl&total=true7 (-5)46 (-5)63 (-1)77 (-73)200 (-90)260 (-220)
GET/api/v3/purl?q=purl:namespace=redhat&total=true4 (-5)28 (-19)58 (-6)68 (-2,132)2,900 (-400)4,200 (+600)
GET/api/v3/purl?q=purl:ty=rpm&total=true5 (-4)42 (-12)59 (-8)71 (-2,229)2,900 (-100)3,800 (+500)
GET/api/v3/purl?sort=purl:name:asc&total=true7 (-5)49 (-1)68 (-2)190 (-280)500 (-350)680 (-210)
GET/api/v3/purl?total=true5 (-4)28 (-25)53 (-8)60 (-7)350 (-300)600 (-100)
license 9
GET/api/v3/license/spdx/license/{license_id}42 (0)43 (0)44 (-1)45 (-1)62 (-5)120 (-10)
GET/api/v3/license/spdx/license?q=apache&total=true2 (-1)3 (-1)4 (-1)4 (-2)20 (-5)56 (-15)
GET/api/v3/license/spdx/license?q=gpl&total=true42 (-1)43 (-1)44 (-1)45 (-1)67 (+2)99 (-11)
GET/api/v3/license/spdx/license?total=true42 (0)43 (0)44 (0)45 (-1)64 (+4)95 (-15)
GET/api/v3/license?limit=10&sort=license:asc&total=true12 (-14)50 (-11)64 (-14)74 (-11)90 (-10)320 (+140)
GET/api/v3/license?q=ASL&sort=license:desc&total=true8 (-7)42 (-12)58 (-11)66 (-11)82 (-10)170 (+20)
GET/api/v3/license?q=license~Apache&total=true7 (-6)40 (-10)57 (-9)65 (-9)81 (-7)150 (0)
GET/api/v3/license?q=license~GPL&total=true7 (-5)40 (-9)57 (-9)64 (-10)79 (-8)150 (-20)
GET/api/v3/license?total=true51 (-9)87 (-10)100 (-10)110 (-10)130 (0)210 (0)
analysis 3
GET/api/v3/analysis/component/{component}3 (-2)4 (-3)6 (-56)59 (-10)71 (-5)110 (+10)
GET/api/v3/analysis/latest/component/{cpe}3 (-2)4 (-3)6 (-56)60 (-9)72 (-4)97 (-3)
GET/api/v3/analysis/status3 (-1)4 (-2)6 (-56)57 (-12)71 (-4)180 (+70)
importer 1
GET/api/v3/importer?total=true2 (-1)3 (-2)4 (-48)47 (-19)69 (-5)93 (-27)
group 3
GET/api/v3/group/sbom?parents=resolve&total=true3 (-1)4 (-2)6 (-55)59 (-9)72 (-3)94 (-26)
GET/api/v3/group/sbom?total=true3 (-1)4 (-2)6 (-56)57 (-11)71 (-4)180 (+70)
GET/api/v3/group/sbom?totals=true&total=true3 (-1)4 (-2)6 (-54)58 (-10)71 (-4)98 (-292)
labels 3
GET/api/v3/advisory-labels?filter_text=type&limit=10003,800 (-1,900)4,000 (-2,000)4,300 (-2,000)4,500 (-2,000)9,100 (+900)10,000 (+1,800)
GET/api/v3/sbom-labels?limit=10&filter_text=&total=true48 (-4)86 (-13)110 (0)110 (-10)120 (-10)130 (0)
GET/api/v3/sbom-labels?total=true48 (-3)88 (-4)110 (-10)110 (-10)120 (-10)160 (+30)
other 2
GET/.well-known/trustify42 (0)43 (0)43 (-1)44 (-1)49 (-7)110 (+17)
POST/api/v3/ui/extract-sbom-purls1 (0)2 (-1)3 (-2)4 (-2)6 (-2)35 (-3)

Failures

No failures recorded.

Exceptions

No exceptions raised in the locustfile.