Trustify load tests · 2026-10-21 11:36 UTC

Target trustify (scale snapshot, CI) · 2026-10-21 11:36:24 UTC → 11:46:22 UTC · Users 10 · Deltas vs previous run (2026-10-21 04:52 UTC, 2026-10-21T04-03-31_1bc76b8)

Type daily · Dataset ds3.zip · Branch main · Commit 1cdcbcdb75a6 · Workflow run

Duration

9m 58s

Total requests

644,661 (+448,510)

Failure rate

0.0%

0 failed requests

Throughput

1,075.0 req/s (+747.8)

Latency 95%ile

45 ms (-27)

Latency 99%ile

49 ms (-181)

Endpoints

0 with failures

Over time

Endpoint

Throughput

Requests and failures per second

Response time

Percentiles over Locust's rolling window, ms

Users

Concurrent simulated users

Load plan

Action	Started	Stopped	Elapsed	Users
Increasing	11:36:24	11:36:28	0m 04s	2 → 10
Maintaining	11:36:28	11:46:22	9m 54s	10 → 10

Top 10 slowest endpoints (95%ile)

#	Method	Name	95%ile (ms)	Average (ms)	# Requests
1	GET	/api/v3/purl?q=curl&total=true	71	45.7	1,483
2	GET	/api/v3/license?total=true	53	49.9	2,550
3	GET	/api/v3/advisory?offset={offset}&limit=1	51	45.6	5,934
4	GET	/api/v3/license?q=license~GPL&total=true	51	48.3	2,505
5	GET	/api/v3/advisory?limit=1&total=true	50	47.1	5,934
6	GET	/api/v3/purl/base?sort=name:asc&total=true	50	47.2	1,545
7	GET	/api/v3/purl/base?q=namespace=redhat&total=true	49	46.3	1,539
8	GET	/api/v3/purl/base?q=type=rpm&total=true	49	45.9	1,456
9	GET	/api/v3/purl/base?total=true	49	46.3	1,582
10	GET	/api/v3/purl?offset=100&limit=10&total=true	49	46.2	1,525

Request metrics

Filter

Method	Name	# Requests	# Fails	Fail %	Average (ms)	Min (ms)	Max (ms)	Avg size (B)	RPS	Failures/s
sbom 8
GET	/api/v3/sbom?limit=10&sort=name:asc&total=true	6,202 (+6,077)	0 (0)	0%	9.11 (-239.3)	4.71	40.4	6,186	10.34 (+10.1)	0
GET	/api/v3/sbom?offset=100&limit=10&total=true	12,097 (+11,868)	0 (0)	0%	5.54 (-159.1)	2.59	27.6	22	20.17 (+19.8)	0
GET	/api/v3/sbom?q=label:type=product&total=true	6,048 (+5,941)	0 (0)	0%	4.57 (-21.9)	2.32	28.7	22	10.09 (+9.9)	0
GET	/api/v3/sbom?q=license~GPL&sort=name:desc&total=true	5,974 (+5,854)	0 (0)	0%	10.8 (-13.9)	6.68	34.8	6,186	9.96 (+9.8)	0
GET	/api/v3/sbom?q=name~redhat&total=true	6,135 (+6,020)	0 (0)	0%	4.67 (-400.7)	2.37	39.0	22	10.23 (+10.0)	0
GET	/api/v3/sbom?q=published>2024-01-01&total=true	6,137 (+6,035)	0 (0)	0%	4.59 (-162.4)	2.28	24.7	22	10.23 (+10.1)	0
GET	/api/v3/sbom?sort=ingested:desc&total=true	6,097 (+5,984)	0 (0)	0%	9.06 (-275.9)	4.92	27.5	6,186	10.17 (+10.0)	0
GET	/api/v3/sbom?total=true	12,100 (+11,887)	0 (0)	0%	9.05 (-155.1)	3.97	31.3	6,186	20.18 (+19.8)	0
advisory 11
GET	/api/v3/advisory?deprecated=Consider&total=true	9,215 (+8,807)	0 (0)	0%	8.02 (-83.6)	4.82	35.1	49,153	15.37 (+14.7)	0
GET	/api/v3/advisory?limit=1&total=true	5,934 (+5,825)	0 (0)	0%	47.1 (-26.9)	4.84	66.5	1,899	9.90 (+9.7)	0
GET	/api/v3/advisory?limit=10&sort=ingested:desc&total=true	8,996 (+8,589)	0 (0)	0%	7.05 (-71.2)	3.75	29.1	20,510	15.00 (+14.3)	0
GET	/api/v3/advisory?offset=100&limit=10&total=true	9,264 (+8,898)	0 (0)	0%	4.44 (-77.4)	1.81	26.0	23	15.45 (+14.8)	0
GET	/api/v3/advisory?offset={offset}&limit=1	5,934 (+5,825)	0 (0)	0%	45.6 (-184.3)	4.02	73.4	2,018	9.90 (+9.7)	0
GET	/api/v3/advisory?q=CVE-2021-&total=true	9,262 (+8,852)	0 (0)	0%	4.89 (-367.7)	2.14	37.6	22	15.44 (+14.8)	0
GET	/api/v3/advisory?q=identifier=CVE-2022-0981&total=true	9,079 (+8,671)	0 (0)	0%	4.46 (-55.5)	1.82	24.5	22	15.14 (+14.5)	0
GET	/api/v3/advisory?q=modified>3 days ago&total=true	9,078 (+8,665)	0 (0)	0%	5.00 (-17.6)	2.57	26.7	22	15.14 (+14.4)	0
GET	/api/v3/advisory?q=title~openssl&total=true	9,262 (+8,836)	0 (0)	0%	4.66 (-439.0)	1.99	26.8	22	15.44 (+14.7)	0
GET	/api/v3/advisory?sort=modified:desc&total=true	9,267 (+8,847)	0 (0)	0%	7.95 (-78.8)	4.60	36.1	50,057	15.45 (+14.8)	0
GET	/api/v3/advisory?total=true	9,001 (+8,549)	0 (0)	0%	8.00 (-97.0)	4.68	28.0	49,153	15.01 (+14.3)	0
vulnerability 7
POST	/api/v3/vulnerability/analyze	12,862 (+12,441)	0 (0)	0%	4.91 (-976.0)	1.59	27.8	2	21.45 (+20.7)	0
GET	/api/v3/vulnerability?offset=100&limit=10&total=true	12,893 (+12,703)	0 (0)	0%	4.40 (-61.3)	1.98	27.0	23	21.50 (+21.2)	0
GET	/api/v3/vulnerability?q=base_score>=7.0&total=true	12,916 (+12,720)	0 (0)	0%	5.17 (-39.0)	1.83	35.6	6,443	21.54 (+21.2)	0
GET	/api/v3/vulnerability?q=base_severity=high&total=true	12,967 (+12,754)	0 (0)	0%	5.18 (-40.2)	2.61	38.8	6,443	21.62 (+21.3)	0
GET	/api/v3/vulnerability?q=cwes=CWE-79&total=true	12,929 (+12,755)	0 (0)	0%	4.45 (-43.3)	2.05	25.5	22	21.56 (+21.3)	0
GET	/api/v3/vulnerability?sort=base_score:desc&total=true	13,056 (+12,852)	0 (0)	0%	6.58 (-671.5)	3.40	32.6	22,643	21.77 (+21.4)	0
GET	/api/v3/vulnerability?total=true	12,860 (+12,684)	0 (0)	0%	6.58 (-25.4)	3.42	28.4	24,632	21.44 (+21.2)	0
purl 12
GET	/api/v3/purl/base?q=namespace=redhat&total=true	1,539 (+1,430)	0 (0)	0%	46.3 (-37.9)	3.71	68.7	2,068	2.57 (+2.4)	0
GET	/api/v3/purl/base?q=type=rpm&total=true	1,456 (+1,333)	0 (0)	0%	45.9 (-19.3)	3.48	55.3	2,068	2.43 (+2.2)	0
GET	/api/v3/purl/base?sort=name:asc&total=true	1,545 (+1,422)	0 (0)	0%	47.2 (-165.0)	6.39	58.9	2,278	2.58 (+2.4)	0
GET	/api/v3/purl/base?total=true	1,582 (+1,459)	0 (0)	0%	46.3 (-15.3)	4.06	65.9	2,673	2.64 (+2.4)	0
GET	/api/v3/purl?offset=100&limit=10&total=true	1,525 (+1,406)	0 (0)	0%	46.2 (-179.6)	3.73	56.9	5,569	2.54 (+2.3)	0
GET	/api/v3/purl?q=curl&total=true	1,483 (+1,374)	0 (0)	0%	45.7 (-176.2)	4.06	107	9,576	2.47 (+2.3)	0
GET	/api/v3/purl?q=license~GPLv3+...&sort=name:desc&total=true	1,556 (+1,433)	0 (0)	0%	25.7 (-6.8)	19.2	65.1	15,244	2.59 (+2.4)	0
GET	/api/v3/purl?q=name=curl&total=true	1,557 (+1,443)	0 (0)	0%	46.2 (+12.3)	3.58	63.8	1,451	2.60 (+2.4)	0
GET	/api/v3/purl?q=purl:namespace=redhat&total=true	1,647 (+1,524)	0 (0)	0%	6.03 (-180.3)	3.37	14.3	8,956	2.75 (+2.5)	0
GET	/api/v3/purl?q=purl:ty=rpm&total=true	1,483 (+1,371)	0 (0)	0%	6.10 (-204.9)	3.06	35.2	8,956	2.47 (+2.3)	0
GET	/api/v3/purl?sort=purl:name:asc&total=true	1,575 (+1,465)	0 (0)	0%	5.66 (-267.6)	2.97	17.2	16,326	2.63 (+2.4)	0
GET	/api/v3/purl?total=true	1,540 (+1,416)	0 (0)	0%	5.42 (-105.7)	2.61	14.0	13,057	2.57 (+2.4)	0
license 8
GET	/api/v3/license/spdx/license?q=apache&total=true	2,604 (+745)	0 (0)	0%	4.79 (+2.3)	2.09	23.8	165	4.34 (+1.2)	0
GET	/api/v3/license/spdx/license?q=gpl&total=true	2,633 (+767)	0 (0)	0%	45.6 (+4.5)	3.76	73.0	1,981	4.39 (+1.3)	0
GET	/api/v3/license/spdx/license?total=true	2,604 (+718)	0 (0)	0%	45.5 (+5.0)	2.36	58.6	1,525	4.34 (+1.2)	0
GET	/api/v3/license?limit=10&sort=license:asc&total=true	2,599 (+715)	0 (0)	0%	9.36 (-26.0)	5.49	25.5	914	4.33 (+1.2)	0
GET	/api/v3/license?q=ASL&sort=license:desc&total=true	2,602 (+701)	0 (0)	0%	8.59 (-21.4)	5.24	26.0	217	4.34 (+1.2)	0
GET	/api/v3/license?q=license~Apache&total=true	2,698 (+895)	0 (0)	0%	7.68 (-18.7)	4.44	21.4	653	4.50 (+1.5)	0
GET	/api/v3/license?q=license~GPL&total=true	2,505 (+597)	0 (0)	0%	48.3 (+22.6)	5.72	66.1	1,593	4.18 (+1.0)	0
GET	/api/v3/license?total=true	2,550 (+714)	0 (0)	0%	49.9 (-21.2)	7.64	62.0	1,700	4.25 (+1.2)	0
analysis 2
GET	/api/v3/analysis/latest/component/{cpe}	52,042 (+37,820)	0 (0)	0%	4.46 (-9.3)	1.35	29.4	25	86.78 (+63.1)	0
GET	/api/v3/analysis/status	52,083 (+37,923)	0 (0)	0%	4.18 (-8.8)	1.21	36.9	101	86.85 (+63.2)	0
importer 1
GET	/api/v3/importer?total=true	109,383 (+57,250)	0 (0)	0%	3.92 (-6.8)	1.24	38.0	2	182.40 (+95.4)	0
group 3
GET	/api/v3/group/sbom?parents=resolve&total=true	35,346 (+19,666)	0 (0)	0%	4.26 (-8.1)	1.77	28.1	38	58.94 (+32.8)	0
GET	/api/v3/group/sbom?total=true	35,177 (+19,451)	0 (0)	0%	4.26 (-7.5)	1.66	36.7	22	58.66 (+32.4)	0
GET	/api/v3/group/sbom?totals=true&total=true	35,015 (+19,221)	0 (0)	0%	4.28 (-7.5)	1.81	37.6	22	58.39 (+32.0)	0
labels 3
GET	/api/v3/advisory-labels?filter_text=type&limit=1000	6,033 (+5,925)	0 (0)	0%	5.35 (-5,195.8)	2.25	25.9	89	10.06 (+9.9)	0
GET	/api/v3/sbom-labels?limit=10&filter_text=&total=true	6,066 (+5,932)	0 (0)	0%	4.50 (-62.9)	1.97	25.0	459	10.12 (+9.9)	0
GET	/api/v3/sbom-labels?total=true	6,154 (+6,032)	0 (0)	0%	4.46 (-62.9)	2.38	25.8	459	10.26 (+10.1)	0
other 2
GET	/.well-known/trustify	11,249 (-2,187)	0 (0)	0%	45.3 (+4.0)	2.41	73.0	1,170	18.76 (-3.7)	0
POST	/api/v3/ui/extract-sbom-purls	11,265 (-2,079)	0 (0)	0%	4.91 (+2.7)	1.00	38.4	45	18.79 (-3.5)	0

Response time metrics (ms)

Method	Name	50%ile	75%ile	90%ile	95%ile	99%ile	100%ile
sbom 8
GET	/api/v3/sbom?limit=10&sort=name:asc&total=true	9 (-201)	10 (-300)	11 (-419)	12 (-508)	14 (-766)	40 (-840)
GET	/api/v3/sbom?offset=100&limit=10&total=true	5 (-105)	6 (-194)	7 (-313)	8 (-392)	10 (-570)	28 (-592)
GET	/api/v3/sbom?q=label:type=product&total=true	4 (-4)	5 (-45)	6 (-67)	7 (-68)	9 (-72)	29 (-63)
GET	/api/v3/sbom?q=license~GPL&sort=name:desc&total=true	11 (+3)	12 (-39)	13 (-61)	14 (-64)	16 (-66)	35 (-47)
GET	/api/v3/sbom?q=name~redhat&total=true	4 (-196)	5 (-815)	6 (-994)	7 (-1,093)	9 (-1,091)	39 (-1,061)
GET	/api/v3/sbom?q=published>2024-01-01&total=true	4 (-116)	5 (-195)	6 (-294)	7 (-383)	9 (-481)	25 (-755)
GET	/api/v3/sbom?sort=ingested:desc&total=true	9 (-251)	10 (-390)	11 (-489)	12 (-578)	14 (-826)	27 (-1,273)
GET	/api/v3/sbom?total=true	9 (-101)	10 (-180)	11 (-289)	12 (-368)	14 (-586)	31 (-839)
advisory 11
GET	/api/v3/advisory?deprecated=Consider&total=true	8 (-13)	9 (-64)	10 (-90)	10 (-150)	13 (-1,987)	35 (-2,365)
GET	/api/v3/advisory?limit=1&total=true	47 (-2)	48 (-24)	49 (-50)	50 (-60)	52 (-778)	67 (-933)
GET	/api/v3/advisory?limit=10&sort=ingested:desc&total=true	7 (-10)	8 (-59)	9 (-70)	9 (-77)	11 (-1,789)	29 (-2,371)
GET	/api/v3/advisory?offset=100&limit=10&total=true	4 (-59)	5 (-79)	6 (-86)	6 (-92)	8 (-1,592)	26 (-2,374)
GET	/api/v3/advisory?offset={offset}&limit=1	48 (-162)	49 (-251)	50 (-350)	51 (-439)	53 (-487)	73 (-467)
GET	/api/v3/advisory?q=CVE-2021-&total=true	5 (-175)	6 (-294)	7 (-1,193)	7 (-1,793)	9 (-2,291)	38 (-3,362)
GET	/api/v3/advisory?q=identifier=CVE-2022-0981&total=true	4 (-44)	5 (-79)	6 (-104)	6 (-104)	8 (-112)	25 (-105)
GET	/api/v3/advisory?q=modified>3 days ago&total=true	5 (-2)	6 (-36)	7 (-62)	7 (-65)	10 (-68)	27 (-61)
GET	/api/v3/advisory?q=title~openssl&total=true	4 (-356)	5 (-585)	6 (-994)	7 (-1,093)	8 (-1,292)	27 (-1,473)
GET	/api/v3/advisory?sort=modified:desc&total=true	8 (-12)	9 (-66)	9 (-89)	10 (-100)	13 (-1,887)	36 (-2,464)
GET	/api/v3/advisory?total=true	8 (-88)	9 (-91)	10 (-130)	10 (-170)	13 (-187)	28 (-2,172)
vulnerability 7
POST	/api/v3/vulnerability/analyze	5 (-60)	6 (-1,694)	7 (-2,893)	7 (-3,393)	9 (-3,991)	28 (-5,072)
GET	/api/v3/vulnerability?offset=100&limit=10&total=true	4 (-42)	5 (-48)	6 (-93)	6 (-104)	8 (-552)	27 (-603)
GET	/api/v3/vulnerability?q=base_score>=7.0&total=true	5 (-3)	6 (-19)	7 (-65)	7 (-173)	10 (-870)	36 (-964)
GET	/api/v3/vulnerability?q=base_severity=high&total=true	5 (-3)	6 (-22)	7 (-63)	7 (-72)	10 (-1,090)	39 (-1,061)
GET	/api/v3/vulnerability?q=cwes=CWE-79&total=true	4 (-4)	5 (-10)	6 (-62)	6 (-204)	8 (-912)	26 (-1,174)
GET	/api/v3/vulnerability?sort=base_score:desc&total=true	6 (-564)	7 (-883)	8 (-1,092)	9 (-1,291)	11 (-1,789)	33 (-1,967)
GET	/api/v3/vulnerability?total=true	6 (-1)	7 (-9)	8 (-60)	9 (-66)	11 (-589)	28 (-582)
purl 12
GET	/api/v3/purl/base?q=namespace=redhat&total=true	46 (-7)	47 (-50)	48 (-62)	49 (-151)	51 (-489)	69 (-471)
GET	/api/v3/purl/base?q=type=rpm&total=true	46 (-5)	47 (-41)	48 (-52)	49 (-51)	51 (-69)	55 (-75)
GET	/api/v3/purl/base?sort=name:asc&total=true	47 (-153)	48 (-192)	49 (-251)	50 (-290)	52 (-358)	59 (-461)
GET	/api/v3/purl/base?total=true	46 (+1)	47 (-38)	48 (-52)	49 (-61)	52 (-148)	66 (-154)
GET	/api/v3/purl?offset=100&limit=10&total=true	46 (0)	47 (-33)	48 (-52)	49 (-2,051)	52 (-4,148)	57 (-4,343)
GET	/api/v3/purl?q=curl&total=true	51 (-8)	53 (-157)	60 (-520)	71 (-1,129)	81 (-1,919)	110 (-2,190)
GET	/api/v3/purl?q=license~GPLv3+...&sort=name:desc&total=true	24 (+4)	27 (-28)	34 (-33)	36 (-39)	41 (-42)	65 (-27)
GET	/api/v3/purl?q=name=curl&total=true	46 (+28)	47 (-7)	48 (-17)	49 (-31)	51 (-149)	64 (-146)
GET	/api/v3/purl?q=purl:namespace=redhat&total=true	6 (-3)	7 (-44)	8 (-78)	9 (-1,691)	11 (-2,889)	14 (-3,586)
GET	/api/v3/purl?q=purl:ty=rpm&total=true	6 (-1)	7 (-45)	8 (-67)	9 (-2,291)	12 (-2,588)	35 (-2,665)
GET	/api/v3/purl?sort=purl:name:asc&total=true	5 (-11)	7 (-48)	8 (-68)	8 (-2,592)	10 (-4,190)	17 (-4,583)
GET	/api/v3/purl?total=true	5 (-2)	6 (-38)	7 (-57)	8 (-82)	10 (-3,190)	14 (-3,286)
license 8
GET	/api/v3/license/spdx/license?q=apache&total=true	5 (+3)	5 (+2)	6 (+2)	6 (+1)	9 (+2)	24 (-5)
GET	/api/v3/license/spdx/license?q=gpl&total=true	46 (+3)	47 (+4)	47 (+3)	48 (+3)	51 (-5)	73 (0)
GET	/api/v3/license/spdx/license?total=true	45 (+3)	46 (+3)	47 (+3)	48 (+3)	51 (0)	59 (-3)
GET	/api/v3/license?limit=10&sort=license:asc&total=true	9 (-12)	10 (-48)	11 (-65)	12 (-70)	15 (-80)	26 (-144)
GET	/api/v3/license?q=ASL&sort=license:desc&total=true	8 (-6)	9 (-44)	11 (-58)	11 (-65)	14 (-70)	26 (-74)
GET	/api/v3/license?q=license~Apache&total=true	8 (-3)	8 (-40)	9 (-53)	10 (-63)	13 (-67)	21 (-66)
GET	/api/v3/license?q=license~GPL&total=true	48 (+37)	49 (+2)	50 (-12)	51 (-22)	54 (-27)	66 (-34)
GET	/api/v3/license?total=true	50 (-8)	51 (-45)	52 (-58)	53 (-67)	55 (-75)	62 (-168)
analysis 2
GET	/api/v3/analysis/latest/component/{cpe}	4 (-1)	5 (-2)	6 (-59)	7 (-63)	9 (-69)	29 (-151)
GET	/api/v3/analysis/status	4 (0)	5 (-1)	6 (-57)	6 (-63)	8 (-69)	37 (-133)
importer 1
GET	/api/v3/importer?total=true	4 (+1)	4 (-1)	5 (-52)	6 (-61)	7 (-68)	38 (-132)
group 3
GET	/api/v3/group/sbom?parents=resolve&total=true	4 (0)	5 (-1)	6 (-56)	6 (-63)	8 (-67)	28 (-82)
GET	/api/v3/group/sbom?total=true	4 (0)	5 (-1)	6 (-55)	6 (-63)	8 (-67)	37 (-63)
GET	/api/v3/group/sbom?totals=true&total=true	4 (0)	5 (-1)	6 (-54)	6 (-62)	8 (-67)	38 (-62)
labels 3
GET	/api/v3/advisory-labels?filter_text=type&limit=1000	5 (-5,195)	6 (-5,394)	7 (-5,893)	8 (-5,992)	9 (-6,291)	26 (-6,474)
GET	/api/v3/sbom-labels?limit=10&filter_text=&total=true	4 (-46)	5 (-86)	6 (-104)	7 (-113)	9 (-111)	25 (-105)
GET	/api/v3/sbom-labels?total=true	4 (-47)	5 (-83)	6 (-104)	6 (-114)	8 (-122)	26 (-104)
other 2
GET	/.well-known/trustify	45 (+3)	46 (+3)	47 (+3)	48 (+3)	50 (-3)	73 (-1)
POST	/api/v3/ui/extract-sbom-purls	5 (+4)	5 (+2)	6 (+2)	7 (+2)	9 (+2)	38 (-2)

Failures

No failures recorded.

Exceptions

No exceptions raised in the locustfile.

Generated 2026-10-24 07:25 UTC from results_*.csv by locust_report.py