← All runs

Trustify load tests · 2026-10-21 17:30 UTC

Target trustify (scale snapshot, CI) · 2026-10-21 17:30:23 UTC → 17:40:21 UTC · Users 10 · Deltas vs previous run (2026-10-21 16:09 UTC, 2026-10-21T15-18-38_7f38deb)

Type daily · Dataset scale-20260317T023702Z · Scenario etc/scenarios/main/full-20260317T023702Z.json5 · Branch main · Commit 7f38deb34acb · Workflow run

Duration
9m 58s
Total requests
199,729 (+3,172)
Failure rate
0.0%
0 failed requests
Throughput
333.3 req/s (+5.4)
Latency 95%ile
72 ms (0)
Latency 99%ile
200 ms (0)
Endpoints
72
0 with failures

Over time

Throughput

Requests and failures per second

Response time

Percentiles over Locust's rolling window, ms

Users

Concurrent simulated users

Load plan

ActionStartedStoppedElapsedUsers
Increasing17:30:2317:30:270m 04s2 → 10
Maintaining17:30:2717:40:219m 54s10 → 10

Top 10 slowest endpoints (95%ile)

#MethodName95%ile (ms)Average (ms)# Requests
1GET/api/v3/advisory-labels?filter_text=type&limit=10006,8005,98994
2GET/api/v3/purl?sort=purl:name:asc&total=true4,500381112
3POST/api/v3/vulnerability/analyze3,8001,059381
4GET/api/v3/sbom/{sbom_id}/download3,3003,11795
5GET/api/v3/purl?q=purl:ty=rpm&total=true2,900243125
6GET/api/v3/purl?q=purl:namespace=redhat&total=true2,200200132
7GET/api/v3/advisory?q=CVE-2021-&total=true1,800391539
8POST/api/v3/purl/recommend1,500944366
9GET/api/v3/vulnerability?sort=base_score:desc&total=true1,500672221
10GET/api/v3/purl?q=curl&total=true1,200204119

Request metrics

MethodName# Requests# FailsFail %Average (ms)Min (ms)Max (ms)Avg size (B)RPSFailures/s
sbom 16
GET/api/v3/sbom/by-package?purl={purl}107 (+19)0 (0)0%100 (-8.3)54.32951,2870.18 (0)0
GET/api/v3/sbom/count-by-package126 (+30)0 (0)0%36.8 (+5.1)3.3592.630.21 (+0.1)0
GET/api/v3/sbom/{sbom_id}102 (-5)0 (0)0%134 (-13.1)59.92402,0150.17 (0)0
GET/api/v3/sbom/{sbom_id}/all-license-ids105 (-13)0 (0)0%25.4 (+0.6)2.4210020.18 (0)0
GET/api/v3/sbom/{sbom_id}/download95 (-3)0 (0)0%3,117 (+56.7)2,9563,568136,458,6380.16 (0)0
GET/api/v3/sbom/{sbom_id}/license-export103 (-7)0 (0)0%32.0 (+1.1)4.0693.32340.17 (0)0
GET/api/v3/sbom/{sbom_id}/packages120 (+29)0 (0)0%151 (-22.4)16.739712,6480.20 (0)0
GET/api/v3/sbom/{sbom_id}/related105 (-8)0 (0)0%134 (-12.9)26.235915,3720.18 (0)0
GET/api/v3/sbom?limit=10&sort=name:asc&total=true89 (-8)0 (0)0%318 (+11.0)86.81,06912,1890.15 (0)0
GET/api/v3/sbom?offset=100&limit=10&total=true220 (+31)0 (0)0%246 (+48.4)26.51,55311,9410.37 (+0.1)0
GET/api/v3/sbom?q=label:type=product&total=true114 (-1)0 (0)0%26.1 (+2.8)1.7482.7220.19 (0)0
GET/api/v3/sbom?q=license~GPL&sort=name:desc&total=true106 (+19)0 (0)0%27.9 (+1.0)3.0489.7220.18 (0)0
GET/api/v3/sbom?q=name~redhat&total=true117 (+33)0 (0)0%248 (-401.1)52.3587220.20 (+0.1)0
GET/api/v3/sbom?q=published>2024-01-01&total=true107 (+9)0 (0)0%179 (-47.0)26.482129,3170.18 (0)0
GET/api/v3/sbom?sort=ingested:desc&total=true109 (+16)0 (0)0%335 (+2.5)32.191429,6000.18 (0)0
GET/api/v3/sbom?total=true236 (+69)0 (0)0%176 (-30.4)27.790129,3170.39 (+0.1)0
advisory 13
GET/api/v3/advisory/urn:uuid:{advisory_id}541 (+4)0 (0)0%59.6 (+2.4)4.251512,3950.90 (0)0
GET/api/v3/advisory/urn:uuid:{advisory_id}/download585 (+58)0 (0)0%28.1 (+1.3)5.03140178,4230.98 (+0.1)0
GET/api/v3/advisory?deprecated=Consider&total=true560 (+14)0 (0)0%82.0 (-0.5)7.992,91944,0030.93 (0)0
GET/api/v3/advisory?limit=1&total=true102 (-16)0 (0)0%71.3 (-41.3)6.186732,1880.17 (0)0
GET/api/v3/advisory?limit=10&sort=ingested:desc&total=true585 (+27)0 (0)0%67.5 (-9.6)3.853,59520,1930.98 (0)0
GET/api/v3/advisory?offset=100&limit=10&total=true610 (+52)0 (0)0%79.7 (-1.8)6.582,98019,0641.02 (+0.1)0
GET/api/v3/advisory?offset={offset}&limit=1101 (-17)0 (0)0%281 (+17.2)33.18381,9060.17 (0)0
GET/api/v3/advisory?q=CVE-2021-&total=true539 (-39)0 (0)0%391 (-1.9)19.54,19550,0480.90 (-0.1)0
GET/api/v3/advisory?q=identifier=CVE-2022-0981&total=true588 (+38)0 (0)0%58.3 (-2.7)3.691391,9710.98 (+0.1)0
GET/api/v3/advisory?q=modified>3 days ago&total=true625 (+77)0 (0)0%25.0 (-2.1)2.50140221.04 (+0.1)0
GET/api/v3/advisory?q=title~openssl&total=true586 (+22)0 (0)0%50.9 (+2.0)9.08557126,4520.98 (0)0
GET/api/v3/advisory?sort=modified:desc&total=true572 (+14)0 (0)0%78.3 (+1.6)6.373,99538,1280.95 (0)0
GET/api/v3/advisory?total=true566 (+38)0 (0)0%131 (-0.1)9.173,19248,2950.94 (+0.1)0
vulnerability 7
POST/api/v3/vulnerability/analyze381 (-13)0 (0)0%1,059 (+44.4)1.506,1294,387,9180.64 (0)0
GET/api/v3/vulnerability?offset=100&limit=10&total=true201 (+3)0 (0)0%55.9 (+21.4)4.296027,4900.34 (0)0
GET/api/v3/vulnerability?q=base_score>=7.0&total=true204 (+7)0 (0)0%38.1 (-4.5)2.761,17418,3290.34 (0)0
GET/api/v3/vulnerability?q=base_severity=high&total=true211 (+26)0 (0)0%42.3 (-4.9)2.711,18918,4840.35 (0)0
GET/api/v3/vulnerability?q=cwes=CWE-79&total=true173 (-33)0 (0)0%44.9 (-0.1)3.631,01719,0950.29 (-0.1)0
GET/api/v3/vulnerability?sort=base_score:desc&total=true221 (+7)0 (0)0%672 (-60.5)1892,40814,1120.37 (0)0
GET/api/v3/vulnerability?total=true217 (+5)0 (0)0%35.0 (+7.5)2.3879418,5120.36 (0)0
purl 15
GET/api/v3/purl/base/{purl}141 (+15)0 (0)0%95.3 (-3.1)4.7336848,8270.24 (0)0
GET/api/v3/purl/base?q=namespace=redhat&total=true124 (-13)0 (0)0%84.8 (+13.6)2.758032,0800.21 (0)0
GET/api/v3/purl/base?q=type=rpm&total=true110 (-21)0 (0)0%57.9 (-4.0)4.681262,0800.18 (0)0
GET/api/v3/purl/base?sort=name:asc&total=true125 (-36)0 (0)0%220 (+6.0)81.76392,9430.21 (-0.1)0
GET/api/v3/purl/base?total=true143 (+28)0 (0)0%59.4 (-2.5)3.721552,4500.24 (0)0
POST/api/v3/purl/recommend366 (+16)0 (0)0%944 (-34.2)1371,9522,7470.61 (0)0
GET/api/v3/purl/{purl_id}122 (+15)0 (0)0%104 (+4.3)18.92685370.20 (0)0
GET/api/v3/purl?offset=100&limit=10&total=true124 (-11)0 (0)0%112 (-77.0)3.644,4964,3970.21 (0)0
GET/api/v3/purl?q=curl&total=true119 (-14)0 (0)0%204 (+41.6)2.703,12310,6940.20 (0)0
GET/api/v3/purl?q=license~GPLv3+...&sort=name:desc&total=true114 (-26)0 (0)0%34.7 (+2.8)7.1094.7220.19 (0)0
GET/api/v3/purl?q=name=curl&total=true122 (-3)0 (0)0%32.0 (-3.6)1.9028512,0840.20 (0)0
GET/api/v3/purl?q=purl:namespace=redhat&total=true132 (-12)0 (0)0%200 (-12.4)2.043,60711,0470.22 (0)0
GET/api/v3/purl?q=purl:ty=rpm&total=true125 (0)0 (0)0%243 (+32.3)2.224,30510,9010.21 (0)0
GET/api/v3/purl?sort=purl:name:asc&total=true112 (+1)0 (0)0%381 (+58.2)2.175,79411,1010.19 (0)0
GET/api/v3/purl?total=true136 (+9)0 (0)0%198 (+14.9)1.755,17010,9460.23 (0)0
license 9
GET/api/v3/license/spdx/license/{license_id}1,772 (-21)0 (0)0%41.2 (-0.6)1.1569.81,1432.96 (0)0
GET/api/v3/license/spdx/license?q=apache&total=true1,895 (+130)0 (0)0%2.73 (-0.6)0.9330.31653.16 (+0.2)0
GET/api/v3/license/spdx/license?q=gpl&total=true1,856 (+17)0 (0)0%41.4 (-0.6)1.1374.21,9813.10 (0)0
GET/api/v3/license/spdx/license?total=true1,823 (+12)0 (0)0%41.2 (-0.6)1.2170.61,5253.04 (0)0
GET/api/v3/license?limit=10&sort=license:asc&total=true1,901 (+54)0 (0)0%34.1 (-1.8)6.423104253.17 (+0.1)0
GET/api/v3/license?q=ASL&sort=license:desc&total=true1,883 (+1)0 (0)0%31.1 (+0.1)3.1299.8223.14 (0)0
GET/api/v3/license?q=license~Apache&total=true1,876 (+75)0 (0)0%26.4 (-0.8)2.441171203.13 (+0.1)0
GET/api/v3/license?q=license~GPL&total=true1,878 (+81)0 (0)0%27.5 (+0.5)2.3694.8923.13 (+0.1)0
GET/api/v3/license?total=true1,863 (+35)0 (0)0%70.2 (-0.7)6.611451,1013.11 (+0.1)0
analysis 3
GET/api/v3/analysis/component/{component}14,674 (+453)0 (0)0%12.9 (-0.5)1.3099.52524.49 (+0.8)0
GET/api/v3/analysis/latest/component/{cpe}14,711 (+406)0 (0)0%13.2 (-0.4)1.351022524.55 (+0.7)0
GET/api/v3/analysis/status14,680 (+310)0 (0)0%12.7 (-0.2)1.2310310324.50 (+0.5)0
importer 1
GET/api/v3/importer?total=true54,700 (-128)0 (0)0%10.1 (0)1.00105291.29 (-0.2)0
group 3
GET/api/v3/group/sbom?parents=resolve&total=true15,467 (+692)0 (0)0%12.4 (-0.6)1.211053825.81 (+1.2)0
GET/api/v3/group/sbom?total=true15,070 (+573)0 (0)0%12.2 (-0.4)1.221022225.15 (+1.0)0
GET/api/v3/group/sbom?totals=true&total=true15,244 (+557)0 (0)0%12.4 (-0.4)1.181002225.44 (+0.9)0
labels 3
GET/api/v3/advisory-labels?filter_text=type&limit=100094 (-3)0 (0)0%5,989 (+311.9)4,9587,298600.16 (0)0
GET/api/v3/sbom-labels?limit=10&filter_text=&total=true125 (+18)0 (0)0%72.0 (+3.2)10.21301,0650.21 (0)0
GET/api/v3/sbom-labels?total=true114 (+19)0 (0)0%71.2 (-0.5)9.581341,0650.19 (0)0
other 2
GET/.well-known/trustify12,978 (-250)0 (0)0%42.1 (+0.4)0.881351,17021.66 (-0.4)0
POST/api/v3/ui/extract-sbom-purls12,881 (-291)0 (0)0%2.92 (+0.5)0.9077.24521.50 (-0.5)0

Response time metrics (ms)

MethodName50%ile75%ile90%ile95%ile99%ile100%ile
sbom 16
GET/api/v3/sbom/by-package?purl={purl}100 (-20)120 (-10)140 (-10)150 (-60)220 (-20)290 (+50)
GET/api/v3/sbom/count-by-package25 (+11)69 (+9)75 (+1)78 (-1)85 (-6)93 (+2)
GET/api/v3/sbom/{sbom_id}130 (0)150 (-20)200 (-30)220 (-70)230 (-90)240 (-210)
GET/api/v3/sbom/{sbom_id}/all-license-ids8 (-1)46 (+4)72 (-2)76 (-1)84 (+2)100 (+16)
GET/api/v3/sbom/{sbom_id}/download3,100 (0)3,200 (+100)3,200 (0)3,300 (+100)3,600 (+100)3,600 (+100)
GET/api/v3/sbom/{sbom_id}/license-export13 (+1)63 (+5)76 (-1)79 (-1)90 (+4)93 (+3)
GET/api/v3/sbom/{sbom_id}/packages110 (-60)230 (-50)300 (-10)320 (0)390 (-100)400 (-90)
GET/api/v3/sbom/{sbom_id}/related110 (0)180 (-20)200 (-80)260 (-40)290 (-100)360 (-80)
GET/api/v3/sbom?limit=10&sort=name:asc&total=true290 (+20)380 (-10)620 (+110)710 (-70)1,100 (-100)1,100 (-100)
GET/api/v3/sbom?offset=100&limit=10&total=true170 (+30)320 (+30)540 (+130)610 (+120)1,200 (+510)1,600 (+840)
GET/api/v3/sbom?q=label:type=product&total=true8 (+1)53 (+6)71 (+1)75 (-2)81 (0)83 (-13)
GET/api/v3/sbom?q=license~GPL&sort=name:desc&total=true10 (+1)60 (+4)70 (+3)75 (-1)84 (+4)90 (+10)
GET/api/v3/sbom?q=name~redhat&total=true210 (-470)290 (-810)390 (-810)480 (-820)520 (-4,280)590 (-4,210)
GET/api/v3/sbom?q=published>2024-01-01&total=true110 (-50)180 (-130)410 (-140)600 (0)780 (-320)820 (-280)
GET/api/v3/sbom?sort=ingested:desc&total=true310 (+20)480 (0)610 (-100)690 (-100)900 (-200)910 (-190)
GET/api/v3/sbom?total=true120 (-40)190 (-100)390 (-50)480 (-20)600 (-100)900 (+150)
advisory 13
GET/api/v3/advisory/urn:uuid:{advisory_id}47 (0)77 (+5)100 (0)110 (0)130 (+10)150 (+10)
GET/api/v3/advisory/urn:uuid:{advisory_id}/download13 (+1)50 (+8)71 (+1)77 (0)97 (+9)140 (-40)
GET/api/v3/advisory?deprecated=Consider&total=true17 (-3)72 (0)88 (+1)130 (+20)2,400 (+100)2,900 (-200)
GET/api/v3/advisory?limit=1&total=true50 (-1)78 (-1)95 (-15)110 (-10)620 (-580)670 (-2,330)
GET/api/v3/advisory?limit=10&sort=ingested:desc&total=true13 (0)64 (-1)79 (0)88 (-4)2,000 (-300)3,600 (+200)
GET/api/v3/advisory?offset=100&limit=10&total=true71 (-5)87 (-2)96 (-2)100 (-10)200 (0)3,000 (-100)
GET/api/v3/advisory?offset={offset}&limit=1220 (-10)390 (+40)610 (+100)670 (+80)820 (0)840 (-60)
GET/api/v3/advisory?q=CVE-2021-&total=true200 (0)370 (-10)1,100 (-100)1,800 (0)2,200 (-100)4,200 (+1,500)
GET/api/v3/advisory?q=identifier=CVE-2022-0981&total=true47 (-1)72 (-10)100 (-10)110 (0)120 (0)140 (-50)
GET/api/v3/advisory?q=modified>3 days ago&total=true8 (-1)52 (-5)67 (-2)72 (-2)83 (-8)140 (-20)
GET/api/v3/advisory?q=title~openssl&total=true32 (+8)77 (+1)91 (+1)100 (0)260 (+50)560 (-350)
GET/api/v3/advisory?sort=modified:desc&total=true17 (0)69 (0)82 (-4)100 (-10)2,100 (-100)4,000 (+1,500)
GET/api/v3/advisory?total=true110 (0)150 (+10)190 (+10)200 (+10)300 (-300)3,200 (-100)
vulnerability 7
POST/api/v3/vulnerability/analyze71 (+11)1,700 (+100)3,200 (+100)3,800 (+100)4,300 (-200)6,100 (-800)
GET/api/v3/vulnerability?offset=100&limit=10&total=true46 (+38)55 (+44)98 (+29)110 (+34)130 (-470)600 (-80)
GET/api/v3/vulnerability?q=base_score>=7.0&total=true8 (0)12 (-3)65 (-6)77 (-8)670 (-110)1,200 (+330)
GET/api/v3/vulnerability?q=base_severity=high&total=true8 (0)15 (-29)66 (-5)77 (-5)800 (-110)1,200 (0)
GET/api/v3/vulnerability?q=cwes=CWE-79&total=true8 (-1)15 (-3)67 (-4)210 (+130)770 (-20)1,000 (-300)
GET/api/v3/vulnerability?sort=base_score:desc&total=true510 (-80)710 (-250)1,300 (0)1,500 (+100)1,900 (-100)2,400 (-100)
GET/api/v3/vulnerability?total=true8 (+1)14 (+3)62 (-3)75 (+3)700 (+200)790 (-150)
purl 15
GET/api/v3/purl/base/{purl}64 (+2)160 (-10)260 (0)270 (0)370 (+60)370 (+10)
GET/api/v3/purl/base?q=namespace=redhat&total=true47 (+2)80 (-2)100 (0)130 (0)740 (+160)800 (-30)
GET/api/v3/purl/base?q=type=rpm&total=true46 (0)78 (-6)100 (+3)110 (+10)120 (0)130 (+10)
GET/api/v3/purl/base?sort=name:asc&total=true210 (0)250 (0)310 (0)340 (+10)520 (+140)640 (+230)
GET/api/v3/purl/base?total=true46 (-1)79 (+3)100 (0)110 (-10)140 (-30)160 (-20)
POST/api/v3/purl/recommend1,000 (-100)1,200 (0)1,400 (0)1,500 (0)1,700 (-100)2,000 (-400)
GET/api/v3/purl/{purl_id}99 (+7)150 (+20)180 (+10)200 (+20)210 (-50)270 (+10)
GET/api/v3/purl?offset=100&limit=10&total=true46 (0)88 (+23)99 (+5)110 (+10)2,700 (-2,500)4,500 (-1,400)
GET/api/v3/purl?q=curl&total=true52 (+14)190 (+107)700 (+110)1,200 (+280)1,400 (-100)3,100 (+900)
GET/api/v3/purl?q=license~GPLv3+...&sort=name:desc&total=true36 (+17)53 (-7)68 (0)74 (0)85 (+1)95 (+8)
GET/api/v3/purl?q=name=curl&total=true11 (-7)53 (-3)70 (-2)85 (-25)200 (-10)280 (+70)
GET/api/v3/purl?q=purl:namespace=redhat&total=true8 (0)49 (-1)66 (0)2,200 (+400)3,300 (-800)3,600 (-2,100)
GET/api/v3/purl?q=purl:ty=rpm&total=true9 (0)49 (0)66 (+1)2,900 (+500)3,500 (+100)4,300 (+900)
GET/api/v3/purl?sort=purl:name:asc&total=true11 (-3)54 (-4)75 (-1)4,500 (+900)5,500 (+800)5,800 (+900)
GET/api/v3/purl?total=true7 (-2)42 (-4)58 (-6)910 (+837)4,400 (0)5,200 (+600)
license 9
GET/api/v3/license/spdx/license/{license_id}42 (-1)43 (0)44 (-1)45 (-1)52 (-17)70 (-50)
GET/api/v3/license/spdx/license?q=apache&total=true2 (-1)4 (0)5 (0)5 (-1)8 (-14)30 (-49)
GET/api/v3/license/spdx/license?q=gpl&total=true43 (0)44 (0)45 (0)46 (0)55 (-10)74 (-36)
GET/api/v3/license/spdx/license?total=true42 (-1)43 (-1)44 (-1)46 (0)54 (-8)71 (-39)
GET/api/v3/license?limit=10&sort=license:asc&total=true19 (-2)56 (-2)74 (-3)80 (-3)89 (-10)310 (+130)
GET/api/v3/license?q=ASL&sort=license:desc&total=true16 (0)54 (+1)69 (-1)77 (0)87 (-5)100 (-70)
GET/api/v3/license?q=license~Apache&total=true12 (+1)49 (-1)62 (-3)71 (-2)81 (-8)120 (-40)
GET/api/v3/license?q=license~GPL&total=true13 (+1)49 (+1)64 (-1)72 (-2)81 (-5)95 (-75)
GET/api/v3/license?total=true58 (-1)95 (-1)110 (0)120 (0)130 (-10)140 (-80)
analysis 3
GET/api/v3/analysis/component/{component}5 (0)7 (0)61 (-1)69 (0)75 (-1)100 (-330)
GET/api/v3/analysis/latest/component/{cpe}5 (0)7 (0)62 (0)69 (0)76 (0)100 (-180)
GET/api/v3/analysis/status5 (0)6 (-1)61 (0)69 (0)75 (-1)100 (-80)
importer 1
GET/api/v3/importer?total=true3 (0)5 (0)50 (+1)66 (+1)73 (0)110 (+10)
group 3
GET/api/v3/group/sbom?parents=resolve&total=true4 (-1)6 (-1)61 (-1)68 (-1)75 (-1)110 (+10)
GET/api/v3/group/sbom?total=true4 (-1)6 (0)59 (-1)68 (0)75 (0)100 (+5)
GET/api/v3/group/sbom?totals=true&total=true4 (-1)6 (-1)60 (-1)68 (-1)75 (-1)100 (0)
labels 3
GET/api/v3/advisory-labels?filter_text=type&limit=10006,000 (+300)6,200 (+200)6,500 (+200)6,800 (+200)7,300 (+600)7,300 (+600)
GET/api/v3/sbom-labels?limit=10&filter_text=&total=true53 (+1)100 (+5)120 (+10)120 (0)130 (+10)130 (-10)
GET/api/v3/sbom-labels?total=true53 (-4)100 (0)110 (0)120 (0)130 (0)130 (0)
other 2
GET/.well-known/trustify42 (0)43 (0)44 (0)46 (+1)65 (+10)140 (+64)
POST/api/v3/ui/extract-sbom-purls2 (0)3 (0)5 (0)6 (0)23 (+15)77 (+45)

Failures

No failures recorded.

Exceptions

No exceptions raised in the locustfile.