← All runs

Trustify load tests · 2026-10-21 13:54 UTC

Target trustify (scale snapshot, CI) · 2026-10-21 13:54:17 UTC → 14:04:16 UTC · Users 10 · Deltas vs previous run (2026-10-21 12:49 UTC, 2026-10-21T11-58-52_1cdcbcd)

Type daily · Dataset scale-20260317T023702Z · Scenario etc/scenarios/main/full-20260317T023702Z.json5 · Branch main · Commit 1cdcbcdb75a6 · Workflow run

Duration
9m 59s
Total requests
194,540 (+1,971)
Failure rate
0.0%
0 failed requests
Throughput
324.7 req/s (+3.3)
Latency 95%ile
72 ms (0)
Latency 99%ile
190 ms (-10)
Endpoints
72
0 with failures

Over time

Throughput

Requests and failures per second

Response time

Percentiles over Locust's rolling window, ms

Users

Concurrent simulated users

Load plan

ActionStartedStoppedElapsedUsers
Increasing13:54:1713:54:210m 04s2 → 10
Maintaining13:54:2114:04:169m 55s10 → 10

Top 10 slowest endpoints (95%ile)

#MethodName95%ile (ms)Average (ms)# Requests
1GET/api/v3/advisory-labels?filter_text=type&limit=10006,8005,91095
2POST/api/v3/vulnerability/analyze3,8001,104355
3GET/api/v3/sbom/{sbom_id}/download3,2003,05998
4GET/api/v3/purl?q=purl:namespace=redhat&total=true2,900223126
5GET/api/v3/purl?sort=purl:name:asc&total=true2,900273134
6GET/api/v3/purl?q=purl:ty=rpm&total=true2,000213114
7GET/api/v3/advisory?q=CVE-2021-&total=true1,800415549
8GET/api/v3/vulnerability?sort=base_score:desc&total=true1,800834189
9POST/api/v3/purl/recommend1,500980364
10GET/api/v3/sbom?q=name~redhat&total=true1,50070489

Request metrics

MethodName# Requests# FailsFail %Average (ms)Min (ms)Max (ms)Avg size (B)RPSFailures/s
sbom 16
GET/api/v3/sbom/by-package?purl={purl}84 (+5)0 (0)0%106 (-7.0)24.82151,2870.14 (0)0
GET/api/v3/sbom/count-by-package94 (+13)0 (0)0%31.7 (+3.0)5.1784.130.16 (0)0
GET/api/v3/sbom/{sbom_id}85 (+7)0 (0)0%129 (+4.0)25.43062,0150.14 (0)0
GET/api/v3/sbom/{sbom_id}/all-license-ids82 (-19)0 (0)0%25.7 (+7.3)2.6010620.14 (0)0
GET/api/v3/sbom/{sbom_id}/download98 (-6)0 (0)0%3,059 (+8.9)2,8363,395136,458,6380.16 (0)0
GET/api/v3/sbom/{sbom_id}/license-export87 (-19)0 (0)0%34.6 (-0.5)5.7287.22350.15 (0)0
GET/api/v3/sbom/{sbom_id}/packages87 (0)0 (0)0%164 (+17.1)16.740112,6480.15 (0)0
GET/api/v3/sbom/{sbom_id}/related95 (+9)0 (0)0%167 (+8.0)26.845215,3720.16 (0)0
GET/api/v3/sbom?limit=10&sort=name:asc&total=true92 (-1)0 (0)0%352 (+46.1)40.61,58812,1890.15 (0)0
GET/api/v3/sbom?offset=100&limit=10&total=true180 (+16)0 (0)0%202 (+7.4)26.11,00111,9000.30 (0)0
GET/api/v3/sbom?q=label:type=product&total=true104 (-3)0 (0)0%23.0 (-6.6)2.2977.2220.17 (0)0
GET/api/v3/sbom?q=license~GPL&sort=name:desc&total=true89 (-1)0 (0)0%32.4 (+5.6)3.1381.6220.15 (0)0
GET/api/v3/sbom?q=name~redhat&total=true89 (-7)0 (0)0%704 (+38.4)11.22,365220.15 (0)0
GET/api/v3/sbom?q=published>2024-01-01&total=true88 (-11)0 (0)0%234 (+52.8)28.71,19229,3170.15 (0)0
GET/api/v3/sbom?sort=ingested:desc&total=true71 (-19)0 (0)0%401 (+56.0)66.11,21129,6000.12 (0)0
GET/api/v3/sbom?total=true178 (-19)0 (0)0%221 (+49.9)26.62,76829,3170.30 (0)0
advisory 13
GET/api/v3/advisory/urn:uuid:{advisory_id}533 (-99)0 (0)0%58.3 (-0.9)4.301272,3950.89 (-0.2)0
GET/api/v3/advisory/urn:uuid:{advisory_id}/download557 (-48)0 (0)0%28.7 (-0.5)5.04415178,4230.93 (-0.1)0
GET/api/v3/advisory?deprecated=Consider&total=true615 (+34)0 (0)0%75.9 (+1.8)6.363,40744,0031.03 (+0.1)0
GET/api/v3/advisory?limit=1&total=true88 (-22)0 (0)0%85.6 (+11.9)7.081,5142,2060.15 (0)0
GET/api/v3/advisory?limit=10&sort=ingested:desc&total=true552 (+7)0 (0)0%70.9 (+1.7)5.203,21020,1930.92 (0)0
GET/api/v3/advisory?offset=100&limit=10&total=true568 (-42)0 (0)0%86.5 (+13.1)7.173,05619,2470.95 (-0.1)0
GET/api/v3/advisory?offset={offset}&limit=188 (-22)0 (0)0%276 (+9.6)51.98871,8970.15 (0)0
GET/api/v3/advisory?q=CVE-2021-&total=true549 (-19)0 (0)0%415 (+9.6)7.854,50149,4230.92 (0)0
GET/api/v3/advisory?q=identifier=CVE-2022-0981&total=true537 (+36)0 (0)0%57.9 (-0.6)3.371221,9710.90 (+0.1)0
GET/api/v3/advisory?q=modified>3 days ago&total=true601 (+29)0 (0)0%21.8 (+0.1)2.4182.1221.00 (0)0
GET/api/v3/advisory?q=title~openssl&total=true569 (+26)0 (0)0%50.6 (+1.3)9.35689126,4520.95 (0)0
GET/api/v3/advisory?sort=modified:desc&total=true567 (+14)0 (0)0%75.9 (-0.6)6.873,27938,1280.95 (0)0
GET/api/v3/advisory?total=true577 (-6)0 (0)0%116 (-6.0)6.972,33449,2820.96 (0)0
vulnerability 7
POST/api/v3/vulnerability/analyze355 (-15)0 (0)0%1,104 (+25.1)1.445,1924,454,7290.59 (0)0
GET/api/v3/vulnerability?offset=100&limit=10&total=true164 (-9)0 (0)0%37.1 (+6.7)3.497179,2320.27 (0)0
GET/api/v3/vulnerability?q=base_score>=7.0&total=true164 (-7)0 (0)0%63.6 (+5.4)3.642,25019,4460.27 (0)0
GET/api/v3/vulnerability?q=base_severity=high&total=true154 (-16)0 (0)0%74.3 (+10.8)4.312,40920,3290.26 (0)0
GET/api/v3/vulnerability?q=cwes=CWE-79&total=true193 (+15)0 (0)0%48.8 (-1.3)4.111,77022,4480.32 (0)0
GET/api/v3/vulnerability?sort=base_score:desc&total=true189 (+12)0 (0)0%834 (-52.7)2632,60925,8030.32 (0)0
GET/api/v3/vulnerability?total=true187 (+28)0 (0)0%36.1 (+7.6)2.6278919,6400.31 (0)0
purl 15
GET/api/v3/purl/base/{purl}121 (-16)0 (0)0%93.4 (+3.9)7.7337048,8270.20 (0)0
GET/api/v3/purl/base?q=namespace=redhat&total=true115 (-14)0 (0)0%67.5 (-8.0)5.784662,0800.19 (0)0
GET/api/v3/purl/base?q=type=rpm&total=true110 (-6)0 (0)0%62.1 (-0.5)6.581242,0800.18 (0)0
GET/api/v3/purl/base?sort=name:asc&total=true120 (+8)0 (0)0%220 (+13.7)84.96052,9430.20 (0)0
GET/api/v3/purl/base?total=true121 (-32)0 (0)0%63.3 (-0.4)5.001422,4500.20 (-0.1)0
POST/api/v3/purl/recommend364 (-12)0 (0)0%980 (+41.9)1342,1202,7470.61 (0)0
GET/api/v3/purl/{purl_id}121 (+1)0 (0)0%97.8 (+8.7)19.72095370.20 (0)0
GET/api/v3/purl?offset=100&limit=10&total=true135 (+9)0 (0)0%182 (+60.8)4.874,7084,4740.23 (0)0
GET/api/v3/purl?q=curl&total=true115 (-6)0 (0)0%119 (-87.0)6.491,36011,7140.19 (0)0
GET/api/v3/purl?q=license~GPLv3+...&sort=name:desc&total=true115 (-2)0 (0)0%33.1 (0)3.7281.7220.19 (0)0
GET/api/v3/purl?q=name=curl&total=true129 (-2)0 (0)0%33.4 (+0.9)2.1428012,0840.22 (0)0
GET/api/v3/purl?q=purl:namespace=redhat&total=true126 (+14)0 (0)0%223 (-48.5)2.113,42213,6170.21 (0)0
GET/api/v3/purl?q=purl:ty=rpm&total=true114 (-11)0 (0)0%213 (-4.3)2.043,25313,6170.19 (0)0
GET/api/v3/purl?sort=purl:name:asc&total=true134 (-5)0 (0)0%273 (+11.8)2.015,58411,1010.22 (0)0
GET/api/v3/purl?total=true136 (+11)0 (0)0%209 (-20.7)1.896,2099,8770.23 (0)0
license 9
GET/api/v3/license/spdx/license/{license_id}1,864 (+47)0 (0)0%41.7 (+0.1)0.9772.41,1433.11 (+0.1)0
GET/api/v3/license/spdx/license?q=apache&total=true1,804 (+15)0 (0)0%2.83 (0)0.9733.71653.01 (0)0
GET/api/v3/license/spdx/license?q=gpl&total=true1,771 (-93)0 (0)0%42.0 (0)1.1668.91,9812.96 (-0.2)0
GET/api/v3/license/spdx/license?total=true1,798 (-6)0 (0)0%41.4 (-0.3)0.9273.61,5253.00 (0)0
GET/api/v3/license?limit=10&sort=license:asc&total=true1,847 (+12)0 (0)0%34.0 (+0.2)5.431764253.08 (0)0
GET/api/v3/license?q=ASL&sort=license:desc&total=true1,847 (+51)0 (0)0%30.0 (-0.7)3.08115223.08 (+0.1)0
GET/api/v3/license?q=license~Apache&total=true1,856 (+40)0 (0)0%26.4 (-0.5)2.511631203.10 (+0.1)0
GET/api/v3/license?q=license~GPL&total=true1,918 (+79)0 (0)0%27.2 (+0.3)2.4699.9923.20 (+0.1)0
GET/api/v3/license?total=true1,863 (-7)0 (0)0%71.8 (-0.4)8.201791,1013.11 (0)0
analysis 3
GET/api/v3/analysis/component/{component}13,947 (-406)0 (0)0%13.6 (+0.3)1.341572523.28 (-0.7)0
GET/api/v3/analysis/latest/component/{cpe}14,005 (-245)0 (0)0%14.1 (+0.6)1.392012523.38 (-0.4)0
GET/api/v3/analysis/status14,018 (-239)0 (0)0%13.0 (-0.1)1.2317810323.40 (-0.4)0
importer 1
GET/api/v3/importer?total=true55,131 (+3,359)0 (0)0%10.1 (-0.7)1.00102292.02 (+5.6)0
group 3
GET/api/v3/group/sbom?parents=resolve&total=true14,345 (-19)0 (0)0%13.1 (+0.3)1.161873823.94 (0)0
GET/api/v3/group/sbom?total=true14,104 (-471)0 (0)0%13.2 (+0.2)1.211732223.54 (-0.8)0
GET/api/v3/group/sbom?totals=true&total=true14,270 (-156)0 (0)0%13.2 (+0.1)1.221742223.82 (-0.3)0
labels 3
GET/api/v3/advisory-labels?filter_text=type&limit=100095 (-1)0 (0)0%5,910 (+65.7)4,7987,906600.16 (0)0
GET/api/v3/sbom-labels?limit=10&filter_text=&total=true81 (-1)0 (0)0%66.4 (-2.2)26.61201,0650.14 (0)0
GET/api/v3/sbom-labels?total=true110 (+11)0 (0)0%65.9 (-5.1)30.01781,0650.18 (0)0
other 2
GET/.well-known/trustify13,180 (-22)0 (0)0%41.8 (0)0.9180.71,17022.00 (0)0
POST/api/v3/ui/extract-sbom-purls13,200 (+245)0 (0)0%2.46 (0)0.9134.34522.03 (+0.4)0

Response time metrics (ms)

MethodName50%ile75%ile90%ile95%ile99%ile100%ile
sbom 16
GET/api/v3/sbom/by-package?purl={purl}110 (-10)130 (0)140 (-10)160 (-50)210 (-30)210 (-30)
GET/api/v3/sbom/count-by-package13 (+1)59 (+9)74 (-1)77 (+2)84 (-11)84 (-11)
GET/api/v3/sbom/{sbom_id}130 (0)140 (0)180 (+20)220 (0)310 (+80)310 (+80)
GET/api/v3/sbom/{sbom_id}/all-license-ids9 (+2)45 (+23)68 (+14)72 (+7)110 (+36)110 (+23)
GET/api/v3/sbom/{sbom_id}/download3,100 (0)3,100 (0)3,200 (0)3,200 (0)3,400 (0)3,400 (0)
GET/api/v3/sbom/{sbom_id}/license-export18 (-14)61 (-2)76 (+2)78 (-1)87 (0)87 (-63)
GET/api/v3/sbom/{sbom_id}/packages180 (+50)240 (+20)300 (+20)320 (+10)400 (+20)400 (+20)
GET/api/v3/sbom/{sbom_id}/related170 (-10)210 (+10)280 (+30)300 (0)450 (+50)450 (+50)
GET/api/v3/sbom?limit=10&sort=name:asc&total=true320 (+30)490 (+100)610 (+150)820 (+250)1,600 (+500)1,600 (+500)
GET/api/v3/sbom?offset=100&limit=10&total=true150 (0)290 (0)400 (+10)500 (+30)630 (-90)1,000 (+190)
GET/api/v3/sbom?q=label:type=product&total=true8 (-2)47 (-13)66 (-5)70 (-3)74 (-2)77 (-6)
GET/api/v3/sbom?q=license~GPL&sort=name:desc&total=true28 (+18)58 (+6)72 (-1)75 (-3)82 (-1)82 (-1)
GET/api/v3/sbom?q=name~redhat&total=true770 (-30)1,200 (+100)1,400 (+200)1,500 (0)2,400 (+300)2,400 (+300)
GET/api/v3/sbom?q=published>2024-01-01&total=true170 (+50)310 (+110)500 (+110)730 (+130)1,200 (+510)1,200 (+510)
GET/api/v3/sbom?sort=ingested:desc&total=true410 (+100)510 (+30)670 (+150)910 (+110)1,200 (+200)1,200 (+200)
GET/api/v3/sbom?total=true160 (+50)280 (+90)430 (+80)520 (+60)950 (-30)2,800 (+1,700)
advisory 13
GET/api/v3/advisory/urn:uuid:{advisory_id}47 (0)73 (-2)110 (0)110 (0)110 (-10)130 (0)
GET/api/v3/advisory/urn:uuid:{advisory_id}/download13 (-1)47 (-4)71 (-2)76 (-2)87 (0)420 (+300)
GET/api/v3/advisory?deprecated=Consider&total=true17 (-2)70 (-1)82 (-5)120 (0)2,100 (+100)3,400 (+700)
GET/api/v3/advisory?limit=1&total=true51 (0)76 (-4)100 (0)120 (+10)1,500 (+1,020)1,500 (+920)
GET/api/v3/advisory?limit=10&sort=ingested:desc&total=true14 (-1)63 (-1)77 (+1)85 (+1)2,200 (+100)3,200 (+700)
GET/api/v3/advisory?offset=100&limit=10&total=true77 (+3)89 (+1)96 (+2)100 (+1)1,100 (+960)3,100 (-100)
GET/api/v3/advisory?offset={offset}&limit=1210 (-20)400 (+60)590 (+70)660 (+50)890 (+240)890 (+180)
GET/api/v3/advisory?q=CVE-2021-&total=true190 (0)360 (+30)1,500 (+100)1,800 (0)2,300 (0)4,500 (+1,400)
GET/api/v3/advisory?q=identifier=CVE-2022-0981&total=true48 (0)71 (-1)100 (-10)110 (0)120 (0)120 (-10)
GET/api/v3/advisory?q=modified>3 days ago&total=true8 (0)38 (-1)64 (-1)72 (+2)78 (-2)82 (-5)
GET/api/v3/advisory?q=title~openssl&total=true26 (-9)76 (0)87 (-3)100 (-10)390 (+200)690 (+190)
GET/api/v3/advisory?sort=modified:desc&total=true17 (+1)66 (-3)78 (-7)100 (0)2,200 (+100)3,300 (+100)
GET/api/v3/advisory?total=true100 (0)120 (0)170 (0)190 (+10)270 (-1,230)2,300 (-500)
vulnerability 7
POST/api/v3/vulnerability/analyze70 (-1,030)1,800 (+100)3,100 (+200)3,800 (+300)4,700 (+500)5,200 (-1,300)
GET/api/v3/vulnerability?offset=100&limit=10&total=true7 (0)12 (0)68 (+2)79 (+5)720 (+110)720 (0)
GET/api/v3/vulnerability?q=base_score>=7.0&total=true9 (0)62 (+27)78 (+3)210 (-70)1,000 (-100)2,300 (+1,200)
GET/api/v3/vulnerability?q=base_severity=high&total=true10 (+1)50 (-3)76 (-4)480 (+170)1,200 (+100)2,400 (+1,300)
GET/api/v3/vulnerability?q=cwes=CWE-79&total=true8 (-1)12 (-3)66 (-11)79 (-201)1,300 (+300)1,800 (+700)
GET/api/v3/vulnerability?sort=base_score:desc&total=true680 (-120)1,100 (-100)1,500 (-100)1,800 (0)2,500 (+300)2,600 (+200)
GET/api/v3/vulnerability?total=true8 (-1)15 (-2)70 (-1)77 (0)700 (+420)790 (+300)
purl 15
GET/api/v3/purl/base/{purl}65 (+10)150 (-20)220 (-10)260 (0)360 (+80)370 (+80)
GET/api/v3/purl/base?q=namespace=redhat&total=true46 (-1)84 (-4)100 (0)110 (-30)420 (-90)470 (-170)
GET/api/v3/purl/base?q=type=rpm&total=true47 (-1)85 (+1)100 (0)110 (0)120 (0)120 (0)
GET/api/v3/purl/base?sort=name:asc&total=true220 (+10)250 (+10)310 (+20)350 (+30)440 (+100)610 (+230)
GET/api/v3/purl/base?total=true48 (+1)85 (-2)99 (-1)100 (-10)130 (-70)140 (-70)
POST/api/v3/purl/recommend1,100 (+100)1,200 (0)1,300 (0)1,500 (+100)1,800 (+200)2,100 (+300)
GET/api/v3/purl/{purl_id}89 (+4)130 (+20)170 (+20)190 (+10)200 (-20)210 (-50)
GET/api/v3/purl?offset=100&limit=10&total=true47 (+1)83 (+15)98 (-1)100 (0)4,400 (+100)4,700 (+300)
GET/api/v3/purl?q=curl&total=true41 (-15)77 (-63)180 (-460)1,100 (+100)1,200 (-200)1,400 (-2,300)
GET/api/v3/purl?q=license~GPLv3+...&sort=name:desc&total=true25 (+8)57 (0)64 (-6)70 (-10)74 (-26)82 (-98)
GET/api/v3/purl?q=name=curl&total=true12 (+1)54 (-2)74 (+9)85 (-7)200 (-10)280 (+70)
GET/api/v3/purl?q=purl:namespace=redhat&total=true7 (-3)42 (-4)70 (0)2,900 (+200)3,300 (-600)3,400 (-900)
GET/api/v3/purl?q=purl:ty=rpm&total=true10 (+3)52 (+8)66 (+4)2,000 (-700)3,100 (-200)3,300 (-200)
GET/api/v3/purl?sort=purl:name:asc&total=true12 (-3)54 (0)69 (-3)2,900 (-200)5,000 (+600)5,600 (+900)
GET/api/v3/purl?total=true8 (+1)48 (-2)63 (-2)72 (-1,228)5,200 (+500)6,200 (+700)
license 9
GET/api/v3/license/spdx/license/{license_id}43 (0)43 (0)44 (0)45 (0)55 (-1)72 (-3)
GET/api/v3/license/spdx/license?q=apache&total=true3 (0)4 (0)5 (0)6 (0)8 (0)34 (+11)
GET/api/v3/license/spdx/license?q=gpl&total=true43 (0)44 (0)45 (0)45 (0)55 (+3)69 (-10)
GET/api/v3/license/spdx/license?total=true43 (0)43 (0)44 (-1)45 (-1)53 (+1)74 (+11)
GET/api/v3/license?limit=10&sort=license:asc&total=true19 (-1)57 (+1)74 (+2)81 (+2)90 (0)180 (+30)
GET/api/v3/license?q=ASL&sort=license:desc&total=true16 (0)53 (0)66 (-2)74 (-2)84 (-2)120 (-90)
GET/api/v3/license?q=license~Apache&total=true11 (-1)48 (-1)62 (0)72 (0)79 (-1)160 (-140)
GET/api/v3/license?q=license~GPL&total=true11 (0)51 (+1)63 (0)71 (-1)78 (-2)100 (+1)
GET/api/v3/license?total=true59 (-1)95 (0)110 (0)120 (0)130 (0)180 (-100)
analysis 3
GET/api/v3/analysis/component/{component}5 (0)7 (0)62 (0)69 (0)77 (+1)160 (-40)
GET/api/v3/analysis/latest/component/{cpe}5 (0)7 (0)63 (0)70 (+1)78 (+2)200 (+100)
GET/api/v3/analysis/status5 (0)7 (0)61 (-1)68 (-1)77 (+2)180 (+60)
importer 1
GET/api/v3/importer?total=true3 (-1)5 (0)49 (-6)65 (-1)73 (-1)100 (-70)
group 3
GET/api/v3/group/sbom?parents=resolve&total=true5 (0)7 (0)61 (0)69 (+1)77 (+2)190 (-10)
GET/api/v3/group/sbom?total=true5 (0)6 (-1)62 (0)69 (0)77 (+2)170 (+70)
GET/api/v3/group/sbom?totals=true&total=true5 (0)7 (0)62 (0)69 (0)77 (+1)170 (+70)
labels 3
GET/api/v3/advisory-labels?filter_text=type&limit=10005,900 (+100)6,200 (0)6,500 (+100)6,800 (+200)7,900 (+500)7,900 (+500)
GET/api/v3/sbom-labels?limit=10&filter_text=&total=true51 (0)79 (-21)110 (0)120 (0)120 (0)120 (0)
GET/api/v3/sbom-labels?total=true50 (-2)85 (-15)110 (-10)120 (0)120 (0)180 (+60)
other 2
GET/.well-known/trustify42 (0)43 (0)44 (0)45 (0)54 (-1)81 (-2)
POST/api/v3/ui/extract-sbom-purls2 (0)3 (0)5 (0)6 (0)8 (0)34 (-4)

Failures

No failures recorded.

Exceptions

No exceptions raised in the locustfile.