← All runs

Trustify load tests · 2026-10-21 12:49 UTC

Target trustify (scale snapshot, CI) · 2026-10-21 12:49:09 UTC → 12:59:07 UTC · Users 10 · Deltas vs previous run (2026-10-21 11:36 UTC, 2026-10-21T11-24-39_1cdcbcd)

Type daily · Dataset scale-20260317T023702Z · Scenario etc/scenarios/main/full-20260317T023702Z.json5 · Branch main · Commit 1cdcbcdb75a6 · Workflow run

Duration
9m 58s
Total requests
192,569 (-452,092)
Failure rate
0.0%
0 failed requests
Throughput
321.4 req/s (-753.6)
Latency 95%ile
72 ms (+27)
Latency 99%ile
200 ms (+151)
Endpoints
72
0 with failures

Over time

Throughput

Requests and failures per second

Response time

Percentiles over Locust's rolling window, ms

Users

Concurrent simulated users

Load plan

ActionStartedStoppedElapsedUsers
Increasing12:49:0912:49:130m 04s2 → 10
Maintaining12:49:1312:59:079m 54s10 → 10

Top 10 slowest endpoints (95%ile)

#MethodName95%ile (ms)Average (ms)# Requests
1GET/api/v3/advisory-labels?filter_text=type&limit=10006,6005,84496
2POST/api/v3/vulnerability/analyze3,5001,078370
3GET/api/v3/sbom/{sbom_id}/download3,2003,050104
4GET/api/v3/purl?sort=purl:name:asc&total=true3,100261139
5GET/api/v3/purl?q=purl:namespace=redhat&total=true2,700271112
6GET/api/v3/purl?q=purl:ty=rpm&total=true2,700217125
7GET/api/v3/advisory?q=CVE-2021-&total=true1,800405568
8GET/api/v3/vulnerability?sort=base_score:desc&total=true1,800887177
9GET/api/v3/sbom?q=name~redhat&total=true1,50066596
10POST/api/v3/purl/recommend1,400938376

Request metrics

MethodName# Requests# FailsFail %Average (ms)Min (ms)Max (ms)Avg size (B)RPSFailures/s
sbom 16
GET/api/v3/sbom/by-package?purl={purl}79 0 0%113 54.22441,2870.13 0
GET/api/v3/sbom/count-by-package81 0 0%28.7 4.2295.330.14 0
GET/api/v3/sbom/{sbom_id}78 0 0%125 61.32322,0150.13 0
GET/api/v3/sbom/{sbom_id}/all-license-ids101 0 0%18.4 2.3486.620.17 0
GET/api/v3/sbom/{sbom_id}/download104 0 0%3,050 2,8653,414136,458,6380.17 0
GET/api/v3/sbom/{sbom_id}/license-export106 0 0%35.1 4.181462350.18 0
GET/api/v3/sbom/{sbom_id}/packages87 0 0%147 19.038012,6480.15 0
GET/api/v3/sbom/{sbom_id}/related86 0 0%159 24.639915,3720.14 0
GET/api/v3/sbom?limit=10&sort=name:asc&total=true93 (-6,109)0 (0)0%306 (+296.6)35.61,14212,1890.16 (-10.2)0
GET/api/v3/sbom?offset=100&limit=10&total=true164 (-11,933)0 (0)0%195 (+189.2)27.681411,9000.27 (-19.9)0
GET/api/v3/sbom?q=label:type=product&total=true107 (-5,941)0 (0)0%29.5 (+25.0)2.2182.7220.18 (-9.9)0
GET/api/v3/sbom?q=license~GPL&sort=name:desc&total=true90 (-5,884)0 (0)0%26.8 (+16.0)3.1583.3220.15 (-9.8)0
GET/api/v3/sbom?q=name~redhat&total=true96 (-6,039)0 (0)0%665 (+660.7)10.22,101220.16 (-10.1)0
GET/api/v3/sbom?q=published>2024-01-01&total=true99 (-6,038)0 (0)0%182 (+177.0)28.769229,3170.17 (-10.1)0
GET/api/v3/sbom?sort=ingested:desc&total=true90 (-6,007)0 (0)0%345 (+335.6)66.11,00529,6000.15 (-10.0)0
GET/api/v3/sbom?total=true197 (-11,903)0 (0)0%171 (+162.3)27.81,06129,3170.33 (-19.8)0
advisory 13
GET/api/v3/advisory/urn:uuid:{advisory_id}632 0 0%59.2 3.771352,3951.05 0
GET/api/v3/advisory/urn:uuid:{advisory_id}/download605 0 0%29.2 4.81116178,4231.01 0
GET/api/v3/advisory?deprecated=Consider&total=true581 (-8,634)0 (0)0%74.0 (+66.0)5.442,67244,0030.97 (-14.4)0
GET/api/v3/advisory?limit=1&total=true110 (-5,824)0 (0)0%73.7 (+26.6)7.155832,2390.18 (-9.7)0
GET/api/v3/advisory?limit=10&sort=ingested:desc&total=true545 (-8,451)0 (0)0%69.2 (+62.2)5.392,50720,1930.91 (-14.1)0
GET/api/v3/advisory?offset=100&limit=10&total=true610 (-8,654)0 (0)0%73.4 (+69.0)6.033,21718,9551.02 (-14.4)0
GET/api/v3/advisory?offset={offset}&limit=1110 (-5,824)0 (0)0%266 (+220.5)57.77062,0420.18 (-9.7)0
GET/api/v3/advisory?q=CVE-2021-&total=true568 (-8,694)0 (0)0%405 (+400.5)18.43,08050,1470.95 (-14.5)0
GET/api/v3/advisory?q=identifier=CVE-2022-0981&total=true501 (-8,578)0 (0)0%58.5 (+54.1)4.291321,9710.84 (-14.3)0
GET/api/v3/advisory?q=modified>3 days ago&total=true572 (-8,506)0 (0)0%21.7 (+16.7)2.2387.5220.95 (-14.2)0
GET/api/v3/advisory?q=title~openssl&total=true543 (-8,719)0 (0)0%49.3 (+44.6)9.22500126,4520.91 (-14.5)0
GET/api/v3/advisory?sort=modified:desc&total=true553 (-8,714)0 (0)0%76.6 (+68.6)6.063,18538,1280.92 (-14.5)0
GET/api/v3/advisory?total=true583 (-8,418)0 (0)0%122 (+114.5)8.142,80948,5120.97 (-14.0)0
vulnerability 7
POST/api/v3/vulnerability/analyze370 (-12,492)0 (0)0%1,078 (+1,073.5)2.136,5034,835,8670.62 (-20.8)0
GET/api/v3/vulnerability?offset=100&limit=10&total=true173 (-12,720)0 (0)0%30.4 (+26.0)2.207169,1940.29 (-21.2)0
GET/api/v3/vulnerability?q=base_score>=7.0&total=true171 (-12,745)0 (0)0%58.2 (+53.0)4.141,12819,4850.29 (-21.3)0
GET/api/v3/vulnerability?q=base_severity=high&total=true170 (-12,797)0 (0)0%63.5 (+58.3)3.151,08120,2080.28 (-21.3)0
GET/api/v3/vulnerability?q=cwes=CWE-79&total=true178 (-12,751)0 (0)0%50.1 (+45.6)2.711,07422,3120.30 (-21.3)0
GET/api/v3/vulnerability?sort=base_score:desc&total=true177 (-12,879)0 (0)0%887 (+880.1)2422,39926,4070.30 (-21.5)0
GET/api/v3/vulnerability?total=true159 (-12,701)0 (0)0%28.5 (+21.9)3.0249020,1510.27 (-21.2)0
purl 15
GET/api/v3/purl/base/{purl}137 0 0%89.5 6.8729048,8270.23 0
GET/api/v3/purl/base?q=namespace=redhat&total=true129 (-1,410)0 (0)0%75.5 (+29.3)7.316432,0800.22 (-2.4)0
GET/api/v3/purl/base?q=type=rpm&total=true116 (-1,340)0 (0)0%62.6 (+16.7)3.831202,0800.19 (-2.2)0
GET/api/v3/purl/base?sort=name:asc&total=true112 (-1,433)0 (0)0%206 (+158.9)76.93852,9430.19 (-2.4)0
GET/api/v3/purl/base?total=true153 (-1,429)0 (0)0%63.7 (+17.4)5.412062,4500.26 (-2.4)0
POST/api/v3/purl/recommend376 0 0%938 1281,8212,7470.63 0
GET/api/v3/purl/{purl_id}120 0 0%89.0 20.92655370.20 0
GET/api/v3/purl?offset=100&limit=10&total=true126 (-1,399)0 (0)0%122 (+75.4)1.654,3594,3430.21 (-2.3)0
GET/api/v3/purl?q=curl&total=true121 (-1,362)0 (0)0%206 (+160.6)2.513,65910,7780.20 (-2.3)0
GET/api/v3/purl?q=license~GPLv3+...&sort=name:desc&total=true117 (-1,439)0 (0)0%33.1 (+7.3)3.86175220.20 (-2.4)0
GET/api/v3/purl?q=name=curl&total=true131 (-1,426)0 (0)0%32.5 (-13.7)1.8921012,0840.22 (-2.4)0
GET/api/v3/purl?q=purl:namespace=redhat&total=true112 (-1,535)0 (0)0%271 (+265.1)1.914,28911,0160.19 (-2.6)0
GET/api/v3/purl?q=purl:ty=rpm&total=true125 (-1,358)0 (0)0%217 (+211.2)1.883,53210,7330.21 (-2.3)0
GET/api/v3/purl?sort=purl:name:asc&total=true139 (-1,436)0 (0)0%261 (+255.3)1.764,65711,1010.23 (-2.4)0
GET/api/v3/purl?total=true125 (-1,415)0 (0)0%230 (+224.7)1.705,49810,5980.21 (-2.4)0
license 9
GET/api/v3/license/spdx/license/{license_id}1,817 0 0%41.6 0.9874.71,1433.03 0
GET/api/v3/license/spdx/license?q=apache&total=true1,789 (-815)0 (0)0%2.85 (-1.9)0.9722.61652.99 (-1.4)0
GET/api/v3/license/spdx/license?q=gpl&total=true1,864 (-769)0 (0)0%42.0 (-3.6)1.2079.21,9813.11 (-1.3)0
GET/api/v3/license/spdx/license?total=true1,804 (-800)0 (0)0%41.8 (-3.8)1.1963.41,5253.01 (-1.3)0
GET/api/v3/license?limit=10&sort=license:asc&total=true1,835 (-764)0 (0)0%33.8 (+24.5)6.501504253.06 (-1.3)0
GET/api/v3/license?q=ASL&sort=license:desc&total=true1,796 (-806)0 (0)0%30.7 (+22.1)3.13207223.00 (-1.3)0
GET/api/v3/license?q=license~Apache&total=true1,816 (-882)0 (0)0%26.8 (+19.2)2.502971203.03 (-1.5)0
GET/api/v3/license?q=license~GPL&total=true1,839 (-666)0 (0)0%26.9 (-21.3)2.4598.6923.07 (-1.1)0
GET/api/v3/license?total=true1,870 (-680)0 (0)0%72.2 (+22.3)9.172831,1013.12 (-1.1)0
analysis 3
GET/api/v3/analysis/component/{component}14,353 0 0%13.3 1.331962523.95 0
GET/api/v3/analysis/latest/component/{cpe}14,250 (-37,792)0 (0)0%13.5 (+9.0)1.351052523.78 (-63.0)0
GET/api/v3/analysis/status14,257 (-37,826)0 (0)0%13.0 (+8.8)1.2012410323.79 (-63.1)0
importer 1
GET/api/v3/importer?total=true51,772 (-57,611)0 (0)0%10.7 (+6.8)1.00169286.40 (-96.0)0
group 3
GET/api/v3/group/sbom?parents=resolve&total=true14,364 (-20,982)0 (0)0%12.8 (+8.5)1.231953823.97 (-35.0)0
GET/api/v3/group/sbom?total=true14,575 (-20,602)0 (0)0%13.1 (+8.8)1.221002224.32 (-34.3)0
GET/api/v3/group/sbom?totals=true&total=true14,426 (-20,589)0 (0)0%13.0 (+8.8)1.231022224.08 (-34.3)0
labels 3
GET/api/v3/advisory-labels?filter_text=type&limit=100096 (-5,937)0 (0)0%5,844 (+5,839.1)4,8537,363600.16 (-9.9)0
GET/api/v3/sbom-labels?limit=10&filter_text=&total=true82 (-5,984)0 (0)0%68.6 (+64.1)8.841231,0650.14 (-10.0)0
GET/api/v3/sbom-labels?total=true99 (-6,055)0 (0)0%71.0 (+66.5)19.61221,0650.17 (-10.1)0
other 2
GET/.well-known/trustify13,202 (+1,953)0 (0)0%41.8 (-3.5)0.8883.11,17022.03 (+3.3)0
POST/api/v3/ui/extract-sbom-purls12,955 (+1,690)0 (0)0%2.44 (-2.5)0.8838.34521.62 (+2.8)0

Response time metrics (ms)

MethodName50%ile75%ile90%ile95%ile99%ile100%ile
sbom 16
GET/api/v3/sbom/by-package?purl={purl}120 130 150 210 240 240
GET/api/v3/sbom/count-by-package12 50 75 75 95 95
GET/api/v3/sbom/{sbom_id}130 140 160 220 230 230
GET/api/v3/sbom/{sbom_id}/all-license-ids7 22 54 65 74 87
GET/api/v3/sbom/{sbom_id}/download3,100 3,100 3,200 3,200 3,400 3,400
GET/api/v3/sbom/{sbom_id}/license-export32 63 74 79 87 150
GET/api/v3/sbom/{sbom_id}/packages130 220 280 310 380 380
GET/api/v3/sbom/{sbom_id}/related180 200 250 300 400 400
GET/api/v3/sbom?limit=10&sort=name:asc&total=true290 (+281)390 (+380)460 (+449)570 (+558)1,100 (+1,086)1,100 (+1,060)
GET/api/v3/sbom?offset=100&limit=10&total=true150 (+145)290 (+284)390 (+383)470 (+462)720 (+710)810 (+782)
GET/api/v3/sbom?q=label:type=product&total=true10 (+6)60 (+55)71 (+65)73 (+66)76 (+67)83 (+54)
GET/api/v3/sbom?q=license~GPL&sort=name:desc&total=true10 (-1)52 (+40)73 (+60)78 (+64)83 (+67)83 (+48)
GET/api/v3/sbom?q=name~redhat&total=true800 (+796)1,100 (+1,095)1,200 (+1,194)1,500 (+1,493)2,100 (+2,091)2,100 (+2,061)
GET/api/v3/sbom?q=published>2024-01-01&total=true120 (+116)200 (+195)390 (+384)600 (+593)690 (+681)690 (+665)
GET/api/v3/sbom?sort=ingested:desc&total=true310 (+301)480 (+470)520 (+509)800 (+788)1,000 (+986)1,000 (+973)
GET/api/v3/sbom?total=true110 (+101)190 (+180)350 (+339)460 (+448)980 (+966)1,100 (+1,069)
advisory 13
GET/api/v3/advisory/urn:uuid:{advisory_id}47 75 110 110 120 130
GET/api/v3/advisory/urn:uuid:{advisory_id}/download14 51 73 78 87 120
GET/api/v3/advisory?deprecated=Consider&total=true19 (+11)71 (+62)87 (+77)120 (+110)2,000 (+1,987)2,700 (+2,665)
GET/api/v3/advisory?limit=1&total=true51 (+4)80 (+32)100 (+51)110 (+60)480 (+428)580 (+513)
GET/api/v3/advisory?limit=10&sort=ingested:desc&total=true15 (+8)64 (+56)76 (+67)84 (+75)2,100 (+2,089)2,500 (+2,471)
GET/api/v3/advisory?offset=100&limit=10&total=true74 (+70)88 (+83)94 (+88)99 (+93)140 (+132)3,200 (+3,174)
GET/api/v3/advisory?offset={offset}&limit=1230 (+182)340 (+291)520 (+470)610 (+559)650 (+597)710 (+637)
GET/api/v3/advisory?q=CVE-2021-&total=true190 (+185)330 (+324)1,400 (+1,393)1,800 (+1,793)2,300 (+2,291)3,100 (+3,062)
GET/api/v3/advisory?q=identifier=CVE-2022-0981&total=true48 (+44)72 (+67)110 (+104)110 (+104)120 (+112)130 (+105)
GET/api/v3/advisory?q=modified>3 days ago&total=true8 (+3)39 (+33)65 (+58)70 (+63)80 (+70)87 (+60)
GET/api/v3/advisory?q=title~openssl&total=true35 (+31)76 (+71)90 (+84)110 (+103)190 (+182)500 (+473)
GET/api/v3/advisory?sort=modified:desc&total=true16 (+8)69 (+60)85 (+76)100 (+90)2,100 (+2,087)3,200 (+3,164)
GET/api/v3/advisory?total=true100 (+92)120 (+111)170 (+160)180 (+170)1,500 (+1,487)2,800 (+2,772)
vulnerability 7
POST/api/v3/vulnerability/analyze1,100 (+1,095)1,700 (+1,694)2,900 (+2,893)3,500 (+3,493)4,200 (+4,191)6,500 (+6,472)
GET/api/v3/vulnerability?offset=100&limit=10&total=true7 (+3)12 (+7)66 (+60)74 (+68)610 (+602)720 (+693)
GET/api/v3/vulnerability?q=base_score>=7.0&total=true9 (+4)35 (+29)75 (+68)280 (+273)1,100 (+1,090)1,100 (+1,064)
GET/api/v3/vulnerability?q=base_severity=high&total=true9 (+4)53 (+47)80 (+73)310 (+303)1,100 (+1,090)1,100 (+1,061)
GET/api/v3/vulnerability?q=cwes=CWE-79&total=true9 (+5)15 (+10)77 (+71)280 (+274)1,000 (+992)1,100 (+1,074)
GET/api/v3/vulnerability?sort=base_score:desc&total=true800 (+794)1,200 (+1,193)1,600 (+1,592)1,800 (+1,791)2,200 (+2,189)2,400 (+2,367)
GET/api/v3/vulnerability?total=true9 (+3)17 (+10)71 (+63)77 (+68)280 (+269)490 (+462)
purl 15
GET/api/v3/purl/base/{purl}55 170 230 260 280 290
GET/api/v3/purl/base?q=namespace=redhat&total=true47 (+1)88 (+41)100 (+52)140 (+91)510 (+459)640 (+571)
GET/api/v3/purl/base?q=type=rpm&total=true48 (+2)84 (+37)100 (+52)110 (+61)120 (+69)120 (+65)
GET/api/v3/purl/base?sort=name:asc&total=true210 (+163)240 (+192)290 (+241)320 (+270)340 (+288)380 (+321)
GET/api/v3/purl/base?total=true47 (+1)87 (+40)100 (+52)110 (+61)200 (+148)210 (+144)
POST/api/v3/purl/recommend1,000 1,200 1,300 1,400 1,600 1,800
GET/api/v3/purl/{purl_id}85 110 150 180 220 260
GET/api/v3/purl?offset=100&limit=10&total=true46 (0)68 (+21)99 (+51)100 (+51)4,300 (+4,248)4,400 (+4,343)
GET/api/v3/purl?q=curl&total=true56 (+5)140 (+87)640 (+580)1,000 (+929)1,400 (+1,319)3,700 (+3,590)
GET/api/v3/purl?q=license~GPLv3+...&sort=name:desc&total=true17 (-7)57 (+30)70 (+36)80 (+44)100 (+59)180 (+115)
GET/api/v3/purl?q=name=curl&total=true11 (-35)56 (+9)65 (+17)92 (+43)210 (+159)210 (+146)
GET/api/v3/purl?q=purl:namespace=redhat&total=true10 (+4)46 (+39)70 (+62)2,700 (+2,691)3,900 (+3,889)4,300 (+4,286)
GET/api/v3/purl?q=purl:ty=rpm&total=true7 (+1)44 (+37)62 (+54)2,700 (+2,691)3,300 (+3,288)3,500 (+3,465)
GET/api/v3/purl?sort=purl:name:asc&total=true15 (+10)54 (+47)72 (+64)3,100 (+3,092)4,400 (+4,390)4,700 (+4,683)
GET/api/v3/purl?total=true7 (+2)50 (+44)65 (+58)1,300 (+1,292)4,700 (+4,690)5,500 (+5,486)
license 9
GET/api/v3/license/spdx/license/{license_id}43 43 44 45 56 75
GET/api/v3/license/spdx/license?q=apache&total=true3 (-2)4 (-1)5 (-1)6 (0)8 (-1)23 (-1)
GET/api/v3/license/spdx/license?q=gpl&total=true43 (-3)44 (-3)45 (-2)45 (-3)52 (+1)79 (+6)
GET/api/v3/license/spdx/license?total=true43 (-2)43 (-3)45 (-2)46 (-2)52 (+1)63 (+4)
GET/api/v3/license?limit=10&sort=license:asc&total=true20 (+11)56 (+46)72 (+61)79 (+67)90 (+75)150 (+124)
GET/api/v3/license?q=ASL&sort=license:desc&total=true16 (+8)53 (+44)68 (+57)76 (+65)86 (+72)210 (+184)
GET/api/v3/license?q=license~Apache&total=true12 (+4)49 (+41)62 (+53)72 (+62)80 (+67)300 (+279)
GET/api/v3/license?q=license~GPL&total=true11 (-37)50 (+1)63 (+13)72 (+21)80 (+26)99 (+33)
GET/api/v3/license?total=true60 (+10)95 (+44)110 (+58)120 (+67)130 (+75)280 (+218)
analysis 3
GET/api/v3/analysis/component/{component}5 7 62 69 76 200
GET/api/v3/analysis/latest/component/{cpe}5 (+1)7 (+2)63 (+57)69 (+62)76 (+67)100 (+71)
GET/api/v3/analysis/status5 (+1)7 (+2)62 (+56)69 (+63)75 (+67)120 (+83)
importer 1
GET/api/v3/importer?total=true4 (0)5 (+1)55 (+50)66 (+60)74 (+67)170 (+132)
group 3
GET/api/v3/group/sbom?parents=resolve&total=true5 (+1)7 (+2)61 (+55)68 (+62)75 (+67)200 (+172)
GET/api/v3/group/sbom?total=true5 (+1)7 (+2)62 (+56)69 (+63)75 (+67)100 (+63)
GET/api/v3/group/sbom?totals=true&total=true5 (+1)7 (+2)62 (+56)69 (+63)76 (+68)100 (+62)
labels 3
GET/api/v3/advisory-labels?filter_text=type&limit=10005,800 (+5,795)6,200 (+6,194)6,400 (+6,393)6,600 (+6,592)7,400 (+7,391)7,400 (+7,374)
GET/api/v3/sbom-labels?limit=10&filter_text=&total=true51 (+47)100 (+95)110 (+104)120 (+113)120 (+111)120 (+95)
GET/api/v3/sbom-labels?total=true52 (+48)100 (+95)120 (+114)120 (+114)120 (+112)120 (+94)
other 2
GET/.well-known/trustify42 (-3)43 (-3)44 (-3)45 (-3)55 (+5)83 (+10)
POST/api/v3/ui/extract-sbom-purls2 (-3)3 (-2)5 (-1)6 (-1)8 (-1)38 (0)

Failures

No failures recorded.

Exceptions

No exceptions raised in the locustfile.