← All runs

Trustify load tests · 2026-10-21 16:09 UTC

Target trustify (scale snapshot, CI) · 2026-10-21 16:09:19 UTC → 16:19:17 UTC · Users 10 · Deltas vs previous run (2026-10-21 13:54 UTC, 2026-10-21T13-03-53_1cdcbcd)

Type daily · Dataset scale-20260317T023702Z · Scenario etc/scenarios/main/full-20260317T023702Z.json5 · Branch main · Commit 7f38deb34acb · Workflow run

Duration
9m 58s
Total requests
196,557 (+2,017)
Failure rate
0.0%
0 failed requests
Throughput
328.0 req/s (+3.3)
Latency 95%ile
72 ms (0)
Latency 99%ile
200 ms (+10)
Endpoints
72
0 with failures

Over time

Throughput

Requests and failures per second

Response time

Percentiles over Locust's rolling window, ms

Users

Concurrent simulated users

Load plan

ActionStartedStoppedElapsedUsers
Increasing16:09:1916:09:230m 04s2 → 10
Maintaining16:09:2316:19:179m 54s10 → 10

Top 10 slowest endpoints (95%ile)

#MethodName95%ile (ms)Average (ms)# Requests
1GET/api/v3/advisory-labels?filter_text=type&limit=10006,6005,67797
2POST/api/v3/vulnerability/analyze3,7001,015394
3GET/api/v3/purl?sort=purl:name:asc&total=true3,600322111
4GET/api/v3/sbom/{sbom_id}/download3,2003,06198
5GET/api/v3/purl?q=purl:ty=rpm&total=true2,400210125
6GET/api/v3/advisory?q=CVE-2021-&total=true1,800393578
7GET/api/v3/purl?q=purl:namespace=redhat&total=true1,800213144
8POST/api/v3/purl/recommend1,500978350
9GET/api/v3/vulnerability?sort=base_score:desc&total=true1,400732214
10GET/api/v3/sbom?q=name~redhat&total=true1,30064984

Request metrics

MethodName# Requests# FailsFail %Average (ms)Min (ms)Max (ms)Avg size (B)RPSFailures/s
sbom 16
GET/api/v3/sbom/by-package?purl={purl}88 (+4)0 (0)0%109 (+2.3)54.62451,2870.15 (0)0
GET/api/v3/sbom/count-by-package96 (+2)0 (0)0%31.7 (0)3.0091.430.16 (0)0
GET/api/v3/sbom/{sbom_id}107 (+22)0 (0)0%148 (+18.2)61.34512,0150.18 (0)0
GET/api/v3/sbom/{sbom_id}/all-license-ids118 (+36)0 (0)0%24.8 (-0.9)1.9784.220.20 (+0.1)0
GET/api/v3/sbom/{sbom_id}/download98 (0)0 (0)0%3,061 (+1.8)2,8663,462136,458,6380.16 (0)0
GET/api/v3/sbom/{sbom_id}/license-export110 (+23)0 (0)0%30.9 (-3.7)4.7789.92340.18 (0)0
GET/api/v3/sbom/{sbom_id}/packages91 (+4)0 (0)0%173 (+8.8)15.448812,6480.15 (0)0
GET/api/v3/sbom/{sbom_id}/related113 (+18)0 (0)0%147 (-19.8)25.844015,3720.19 (0)0
GET/api/v3/sbom?limit=10&sort=name:asc&total=true97 (+5)0 (0)0%307 (-44.8)37.21,22012,1890.16 (0)0
GET/api/v3/sbom?offset=100&limit=10&total=true189 (+9)0 (0)0%198 (-4.1)24.076311,9000.32 (0)0
GET/api/v3/sbom?q=label:type=product&total=true115 (+11)0 (0)0%23.4 (+0.4)2.0295.6220.19 (0)0
GET/api/v3/sbom?q=license~GPL&sort=name:desc&total=true87 (-2)0 (0)0%26.9 (-5.5)3.1179.6220.15 (0)0
GET/api/v3/sbom?q=name~redhat&total=true84 (-5)0 (0)0%649 (-54.9)11.44,837220.14 (0)0
GET/api/v3/sbom?q=published>2024-01-01&total=true98 (+10)0 (0)0%226 (-8.4)25.51,10229,3170.16 (0)0
GET/api/v3/sbom?sort=ingested:desc&total=true93 (+22)0 (0)0%332 (-68.3)30.11,15029,6000.16 (0)0
GET/api/v3/sbom?total=true167 (-11)0 (0)0%206 (-15.3)25.774929,3170.28 (0)0
advisory 13
GET/api/v3/advisory/urn:uuid:{advisory_id}537 (+4)0 (0)0%57.2 (-1.1)4.221412,3950.90 (0)0
GET/api/v3/advisory/urn:uuid:{advisory_id}/download527 (-30)0 (0)0%26.8 (-1.9)4.74177178,4230.88 (-0.1)0
GET/api/v3/advisory?deprecated=Consider&total=true546 (-69)0 (0)0%82.5 (+6.6)6.693,10544,0030.91 (-0.1)0
GET/api/v3/advisory?limit=1&total=true118 (+30)0 (0)0%113 (+27.1)7.382,9952,2930.20 (+0.1)0
GET/api/v3/advisory?limit=10&sort=ingested:desc&total=true558 (+6)0 (0)0%77.1 (+6.3)4.633,40220,1930.93 (0)0
GET/api/v3/advisory?offset=100&limit=10&total=true558 (-10)0 (0)0%81.5 (-5.0)5.913,10020,0070.93 (0)0
GET/api/v3/advisory?offset={offset}&limit=1118 (+30)0 (0)0%264 (-12.2)27.69021,9240.20 (+0.1)0
GET/api/v3/advisory?q=CVE-2021-&total=true578 (+29)0 (0)0%393 (-21.9)11.62,70649,3460.96 (0)0
GET/api/v3/advisory?q=identifier=CVE-2022-0981&total=true550 (+13)0 (0)0%60.9 (+3.0)4.861941,9710.92 (0)0
GET/api/v3/advisory?q=modified>3 days ago&total=true548 (-53)0 (0)0%27.1 (+5.2)2.45162220.91 (-0.1)0
GET/api/v3/advisory?q=title~openssl&total=true564 (-5)0 (0)0%48.9 (-1.7)9.89906126,4520.94 (0)0
GET/api/v3/advisory?sort=modified:desc&total=true558 (-9)0 (0)0%76.7 (+0.8)6.662,51238,1280.93 (0)0
GET/api/v3/advisory?total=true528 (-49)0 (0)0%131 (+14.2)8.993,31050,1500.88 (-0.1)0
vulnerability 7
POST/api/v3/vulnerability/analyze394 (+39)0 (0)0%1,015 (-88.5)1.646,9044,220,2070.66 (+0.1)0
GET/api/v3/vulnerability?offset=100&limit=10&total=true198 (+34)0 (0)0%34.6 (-2.5)3.346827,2160.33 (+0.1)0
GET/api/v3/vulnerability?q=base_score>=7.0&total=true197 (+33)0 (0)0%42.5 (-21.1)3.5586918,4120.33 (+0.1)0
GET/api/v3/vulnerability?q=base_severity=high&total=true185 (+31)0 (0)0%47.3 (-27.0)2.981,17918,4300.31 (+0.1)0
GET/api/v3/vulnerability?q=cwes=CWE-79&total=true206 (+13)0 (0)0%45.0 (-3.8)4.021,32018,7880.34 (0)0
GET/api/v3/vulnerability?sort=base_score:desc&total=true214 (+25)0 (0)0%732 (-101.8)1872,52413,1490.36 (0)0
GET/api/v3/vulnerability?total=true212 (+25)0 (0)0%27.5 (-8.6)2.6293618,3950.35 (0)0
purl 15
GET/api/v3/purl/base/{purl}126 (+5)0 (0)0%98.4 (+5.0)8.2536548,8270.21 (0)0
GET/api/v3/purl/base?q=namespace=redhat&total=true137 (+22)0 (0)0%71.2 (+3.7)4.648282,0800.23 (0)0
GET/api/v3/purl/base?q=type=rpm&total=true131 (+21)0 (0)0%62.0 (-0.1)4.631252,0800.22 (0)0
GET/api/v3/purl/base?sort=name:asc&total=true161 (+41)0 (0)0%214 (-6.2)75.44142,9430.27 (+0.1)0
GET/api/v3/purl/base?total=true115 (-6)0 (0)0%61.9 (-1.4)3.421842,4500.19 (0)0
POST/api/v3/purl/recommend350 (-14)0 (0)0%978 (-2.2)1922,4442,7470.58 (0)0
GET/api/v3/purl/{purl_id}107 (-14)0 (0)0%100.0 (+2.2)18.02645370.18 (0)0
GET/api/v3/purl?offset=100&limit=10&total=true135 (0)0 (0)0%189 (+6.6)2.935,8594,2890.23 (0)0
GET/api/v3/purl?q=curl&total=true133 (+18)0 (0)0%163 (+43.5)4.062,21610,4700.22 (0)0
GET/api/v3/purl?q=license~GPLv3+...&sort=name:desc&total=true140 (+25)0 (0)0%31.9 (-1.2)1.6886.8220.23 (0)0
GET/api/v3/purl?q=name=curl&total=true125 (-4)0 (0)0%35.7 (+2.3)2.1820612,0840.21 (0)0
GET/api/v3/purl?q=purl:namespace=redhat&total=true144 (+18)0 (0)0%213 (-9.9)1.885,65110,5790.24 (0)0
GET/api/v3/purl?q=purl:ty=rpm&total=true125 (+11)0 (0)0%210 (-2.8)1.823,40210,8340.21 (0)0
GET/api/v3/purl?sort=purl:name:asc&total=true111 (-23)0 (0)0%322 (+49.6)2.454,91211,1010.19 (0)0
GET/api/v3/purl?total=true127 (-9)0 (0)0%183 (-26.7)2.014,63410,5000.21 (0)0
license 9
GET/api/v3/license/spdx/license/{license_id}1,793 (-71)0 (0)0%41.8 (0)1.131151,1432.99 (-0.1)0
GET/api/v3/license/spdx/license?q=apache&total=true1,765 (-39)0 (0)0%3.28 (+0.4)0.9879.11652.94 (-0.1)0
GET/api/v3/license/spdx/license?q=gpl&total=true1,839 (+68)0 (0)0%42.0 (0)1.101151,9813.07 (+0.1)0
GET/api/v3/license/spdx/license?total=true1,811 (+13)0 (0)0%41.8 (+0.4)0.921111,5253.02 (0)0
GET/api/v3/license?limit=10&sort=license:asc&total=true1,847 (0)0 (0)0%35.9 (+1.9)5.031764253.08 (0)0
GET/api/v3/license?q=ASL&sort=license:desc&total=true1,882 (+35)0 (0)0%31.0 (+1.0)3.17167223.14 (+0.1)0
GET/api/v3/license?q=license~Apache&total=true1,801 (-55)0 (0)0%27.2 (+0.8)2.481561203.01 (-0.1)0
GET/api/v3/license?q=license~GPL&total=true1,797 (-121)0 (0)0%27.0 (-0.2)2.57171923.00 (-0.2)0
GET/api/v3/license?total=true1,828 (-35)0 (0)0%70.9 (-0.9)8.132161,1013.05 (-0.1)0
analysis 3
GET/api/v3/analysis/component/{component}14,221 (+274)0 (0)0%13.3 (-0.3)1.354342523.73 (+0.4)0
GET/api/v3/analysis/latest/component/{cpe}14,305 (+300)0 (0)0%13.6 (-0.5)1.392822523.87 (+0.5)0
GET/api/v3/analysis/status14,370 (+352)0 (0)0%12.9 (-0.1)1.2418410323.98 (+0.6)0
importer 1
GET/api/v3/importer?total=true54,828 (-303)0 (0)0%10.1 (+0.1)1.02101291.48 (-0.5)0
group 3
GET/api/v3/group/sbom?parents=resolve&total=true14,775 (+430)0 (0)0%13.1 (0)1.211003824.65 (+0.7)0
GET/api/v3/group/sbom?total=true14,497 (+393)0 (0)0%12.5 (-0.7)1.1995.42224.19 (+0.6)0
GET/api/v3/group/sbom?totals=true&total=true14,687 (+417)0 (0)0%12.8 (-0.3)1.241032224.51 (+0.7)0
labels 3
GET/api/v3/advisory-labels?filter_text=type&limit=100097 (+2)0 (0)0%5,677 (-232.7)4,5126,720600.16 (0)0
GET/api/v3/sbom-labels?limit=10&filter_text=&total=true107 (+26)0 (0)0%68.8 (+2.4)44.71351,0650.18 (0)0
GET/api/v3/sbom-labels?total=true95 (-15)0 (0)0%71.7 (+5.8)45.51331,0650.16 (0)0
other 2
GET/.well-known/trustify13,228 (+48)0 (0)0%41.7 (-0.1)0.8775.51,17022.07 (+0.1)0
POST/api/v3/ui/extract-sbom-purls13,172 (-28)0 (0)0%2.46 (0)0.9032.44521.98 (-0.1)0

Response time metrics (ms)

MethodName50%ile75%ile90%ile95%ile99%ile100%ile
sbom 16
GET/api/v3/sbom/by-package?purl={purl}120 (+10)130 (0)150 (+10)210 (+50)240 (+30)240 (+30)
GET/api/v3/sbom/count-by-package14 (+1)60 (+1)74 (0)79 (+2)91 (+7)91 (+7)
GET/api/v3/sbom/{sbom_id}130 (0)170 (+30)230 (+50)290 (+70)320 (+10)450 (+140)
GET/api/v3/sbom/{sbom_id}/all-license-ids9 (0)42 (-3)74 (+6)77 (+5)82 (-28)84 (-26)
GET/api/v3/sbom/{sbom_id}/download3,100 (0)3,100 (0)3,200 (0)3,200 (0)3,500 (+100)3,500 (+100)
GET/api/v3/sbom/{sbom_id}/license-export12 (-6)58 (-3)77 (+1)80 (+2)86 (-1)90 (+3)
GET/api/v3/sbom/{sbom_id}/packages170 (-10)280 (+40)310 (+10)320 (0)490 (+90)490 (+90)
GET/api/v3/sbom/{sbom_id}/related110 (-60)200 (-10)280 (0)300 (0)390 (-60)440 (-10)
GET/api/v3/sbom?limit=10&sort=name:asc&total=true270 (-50)390 (-100)510 (-100)780 (-40)1,200 (-400)1,200 (-400)
GET/api/v3/sbom?offset=100&limit=10&total=true140 (-10)290 (0)410 (+10)490 (-10)690 (+60)760 (-240)
GET/api/v3/sbom?q=label:type=product&total=true7 (-1)47 (0)70 (+4)77 (+7)81 (+7)96 (+19)
GET/api/v3/sbom?q=license~GPL&sort=name:desc&total=true9 (-19)56 (-2)67 (-5)76 (+1)80 (-2)80 (-2)
GET/api/v3/sbom?q=name~redhat&total=true680 (-90)1,100 (-100)1,200 (-200)1,300 (-200)4,800 (+2,400)4,800 (+2,400)
GET/api/v3/sbom?q=published>2024-01-01&total=true160 (-10)310 (0)550 (+50)600 (-130)1,100 (-100)1,100 (-100)
GET/api/v3/sbom?sort=ingested:desc&total=true290 (-120)480 (-30)710 (+40)790 (-120)1,100 (-100)1,100 (-100)
GET/api/v3/sbom?total=true160 (0)290 (+10)440 (+10)500 (-20)700 (-250)750 (-2,050)
advisory 13
GET/api/v3/advisory/urn:uuid:{advisory_id}47 (0)72 (-1)100 (-10)110 (0)120 (+10)140 (+10)
GET/api/v3/advisory/urn:uuid:{advisory_id}/download12 (-1)42 (-5)70 (-1)77 (+1)88 (+1)180 (-240)
GET/api/v3/advisory?deprecated=Consider&total=true20 (+3)72 (+2)87 (+5)110 (-10)2,300 (+200)3,100 (-300)
GET/api/v3/advisory?limit=1&total=true51 (0)79 (+3)110 (+10)120 (0)1,200 (-300)3,000 (+1,500)
GET/api/v3/advisory?limit=10&sort=ingested:desc&total=true13 (-1)65 (+2)79 (+2)92 (+7)2,300 (+100)3,400 (+200)
GET/api/v3/advisory?offset=100&limit=10&total=true76 (-1)89 (0)98 (+2)110 (+10)200 (-900)3,100 (0)
GET/api/v3/advisory?offset={offset}&limit=1230 (+20)350 (-50)510 (-80)590 (-70)820 (-70)900 (+10)
GET/api/v3/advisory?q=CVE-2021-&total=true200 (+10)380 (+20)1,200 (-300)1,800 (0)2,300 (0)2,700 (-1,800)
GET/api/v3/advisory?q=identifier=CVE-2022-0981&total=true48 (0)82 (+11)110 (+10)110 (0)120 (0)190 (+70)
GET/api/v3/advisory?q=modified>3 days ago&total=true9 (+1)57 (+19)69 (+5)74 (+2)91 (+13)160 (+78)
GET/api/v3/advisory?q=title~openssl&total=true24 (-2)76 (0)90 (+3)100 (0)210 (-180)910 (+220)
GET/api/v3/advisory?sort=modified:desc&total=true17 (0)69 (+3)86 (+8)110 (+10)2,200 (0)2,500 (-800)
GET/api/v3/advisory?total=true110 (+10)140 (+20)180 (+10)190 (0)600 (+330)3,300 (+1,000)
vulnerability 7
POST/api/v3/vulnerability/analyze60 (-10)1,600 (-200)3,100 (0)3,700 (-100)4,500 (-200)6,900 (+1,700)
GET/api/v3/vulnerability?offset=100&limit=10&total=true8 (+1)11 (-1)69 (+1)76 (-3)600 (-120)680 (-40)
GET/api/v3/vulnerability?q=base_score>=7.0&total=true8 (-1)15 (-47)71 (-7)85 (-125)780 (-220)870 (-1,430)
GET/api/v3/vulnerability?q=base_severity=high&total=true8 (-2)44 (-6)71 (-5)82 (-398)910 (-290)1,200 (-1,200)
GET/api/v3/vulnerability?q=cwes=CWE-79&total=true9 (+1)18 (+6)71 (+5)80 (+1)790 (-510)1,300 (-500)
GET/api/v3/vulnerability?sort=base_score:desc&total=true590 (-90)960 (-140)1,300 (-200)1,400 (-400)2,000 (-500)2,500 (-100)
GET/api/v3/vulnerability?total=true7 (-1)11 (-4)65 (-5)72 (-5)500 (-200)940 (+150)
purl 15
GET/api/v3/purl/base/{purl}62 (-3)170 (+20)260 (+40)270 (+10)310 (-50)360 (-10)
GET/api/v3/purl/base?q=namespace=redhat&total=true45 (-1)82 (-2)100 (0)130 (+20)580 (+160)830 (+360)
GET/api/v3/purl/base?q=type=rpm&total=true46 (-1)84 (-1)97 (-3)100 (-10)120 (0)120 (0)
GET/api/v3/purl/base?sort=name:asc&total=true210 (-10)250 (0)310 (0)330 (-20)380 (-60)410 (-200)
GET/api/v3/purl/base?total=true47 (-1)76 (-9)100 (+1)120 (+20)170 (+40)180 (+40)
POST/api/v3/purl/recommend1,100 (0)1,200 (0)1,400 (+100)1,500 (0)1,800 (0)2,400 (+300)
GET/api/v3/purl/{purl_id}92 (+3)130 (0)170 (0)180 (-10)260 (+60)260 (+50)
GET/api/v3/purl?offset=100&limit=10&total=true46 (-1)65 (-18)94 (-4)100 (0)5,200 (+800)5,900 (+1,200)
GET/api/v3/purl?q=curl&total=true38 (-3)83 (+6)590 (+410)920 (-180)1,500 (+300)2,200 (+800)
GET/api/v3/purl?q=license~GPLv3+...&sort=name:desc&total=true19 (-6)60 (+3)68 (+4)74 (+4)84 (+10)87 (+5)
GET/api/v3/purl?q=name=curl&total=true18 (+6)56 (+2)72 (-2)110 (+25)210 (+10)210 (-70)
GET/api/v3/purl?q=purl:namespace=redhat&total=true8 (+1)50 (+8)66 (-4)1,800 (-1,100)4,100 (+800)5,700 (+2,300)
GET/api/v3/purl?q=purl:ty=rpm&total=true9 (-1)49 (-3)65 (-1)2,400 (+400)3,400 (+300)3,400 (+100)
GET/api/v3/purl?sort=purl:name:asc&total=true14 (+2)58 (+4)76 (+7)3,600 (+700)4,700 (-300)4,900 (-700)
GET/api/v3/purl?total=true9 (+1)46 (-2)64 (+1)73 (+1)4,400 (-800)4,600 (-1,600)
license 9
GET/api/v3/license/spdx/license/{license_id}43 (0)43 (0)45 (+1)46 (+1)69 (+14)120 (+48)
GET/api/v3/license/spdx/license?q=apache&total=true3 (0)4 (0)5 (0)6 (0)22 (+14)79 (+45)
GET/api/v3/license/spdx/license?q=gpl&total=true43 (0)44 (0)45 (0)46 (+1)65 (+10)110 (+41)
GET/api/v3/license/spdx/license?total=true43 (0)44 (+1)45 (+1)46 (+1)62 (+9)110 (+36)
GET/api/v3/license?limit=10&sort=license:asc&total=true21 (+2)58 (+1)77 (+3)83 (+2)99 (+9)180 (0)
GET/api/v3/license?q=ASL&sort=license:desc&total=true16 (0)53 (0)70 (+4)77 (+3)92 (+8)170 (+50)
GET/api/v3/license?q=license~Apache&total=true11 (0)50 (+2)65 (+3)73 (+1)89 (+10)160 (0)
GET/api/v3/license?q=license~GPL&total=true12 (+1)48 (-3)65 (+2)74 (+3)86 (+8)170 (+70)
GET/api/v3/license?total=true59 (0)96 (+1)110 (0)120 (0)140 (+10)220 (+40)
analysis 3
GET/api/v3/analysis/component/{component}5 (0)7 (0)62 (0)69 (0)76 (-1)430 (+270)
GET/api/v3/analysis/latest/component/{cpe}5 (0)7 (0)62 (-1)69 (-1)76 (-2)280 (+80)
GET/api/v3/analysis/status5 (0)7 (0)61 (0)69 (+1)76 (-1)180 (0)
importer 1
GET/api/v3/importer?total=true3 (0)5 (0)49 (0)65 (0)73 (0)100 (0)
group 3
GET/api/v3/group/sbom?parents=resolve&total=true5 (0)7 (0)62 (+1)69 (0)76 (-1)100 (-90)
GET/api/v3/group/sbom?total=true5 (0)6 (0)60 (-2)68 (-1)75 (-2)95 (-75)
GET/api/v3/group/sbom?totals=true&total=true5 (0)7 (0)61 (-1)69 (0)76 (-1)100 (-70)
labels 3
GET/api/v3/advisory-labels?filter_text=type&limit=10005,700 (-200)6,000 (-200)6,300 (-200)6,600 (-200)6,700 (-1,200)6,700 (-1,200)
GET/api/v3/sbom-labels?limit=10&filter_text=&total=true52 (+1)95 (+16)110 (0)120 (0)120 (0)140 (+20)
GET/api/v3/sbom-labels?total=true57 (+7)100 (+15)110 (0)120 (0)130 (+10)130 (-50)
other 2
GET/.well-known/trustify42 (0)43 (0)44 (0)45 (0)55 (+1)76 (-5)
POST/api/v3/ui/extract-sbom-purls2 (0)3 (0)5 (0)6 (0)8 (0)32 (-2)

Failures

No failures recorded.

Exceptions

No exceptions raised in the locustfile.