← All runs

Trustify load tests · 2026-10-21 19:13 UTC

Target trustify (scale snapshot, CI) · 2026-10-21 19:13:22 UTC → 19:23:20 UTC · Users 10 · Deltas vs previous run (2026-10-21 17:30 UTC, 2026-10-21T16-39-32_7f38deb)

Type daily · Dataset scale-20260317T023702Z · Scenario etc/scenarios/main/full-20260317T023702Z.json5 · Branch main · Commit 7f38deb34acb · Workflow run

Duration
9m 58s
Total requests
190,782 (-8,947)
Failure rate
0.0%
0 failed requests
Throughput
318.5 req/s (-14.8)
Latency 95%ile
72 ms (0)
Latency 99%ile
200 ms (0)
Endpoints
72
0 with failures

Over time

Throughput

Requests and failures per second

Response time

Percentiles over Locust's rolling window, ms

Users

Concurrent simulated users

Load plan

ActionStartedStoppedElapsedUsers
Increasing19:13:2219:13:260m 04s2 → 10
Maintaining19:13:2619:23:209m 54s10 → 10

Top 10 slowest endpoints (95%ile)

#MethodName95%ile (ms)Average (ms)# Requests
1GET/api/v3/advisory-labels?filter_text=type&limit=10006,7005,83598
2GET/api/v3/purl?sort=purl:name:asc&total=true4,500371114
3POST/api/v3/vulnerability/analyze3,5001,032370
4GET/api/v3/sbom/{sbom_id}/download3,2003,05689
5GET/api/v3/purl?q=purl:ty=rpm&total=true3,000278125
6GET/api/v3/purl?q=purl:namespace=redhat&total=true2,900224138
7GET/api/v3/advisory?q=CVE-2021-&total=true1,900431550
8GET/api/v3/vulnerability?sort=base_score:desc&total=true1,700857200
9POST/api/v3/purl/recommend1,500964360
10GET/api/v3/sbom?q=name~redhat&total=true1,400514124

Request metrics

MethodName# Requests# FailsFail %Average (ms)Min (ms)Max (ms)Avg size (B)RPSFailures/s
sbom 16
GET/api/v3/sbom/by-package?purl={purl}99 (-8)0 (0)0%111 (+10.4)54.22071,2870.17 (0)0
GET/api/v3/sbom/count-by-package109 (-17)0 (0)0%28.1 (-8.8)4.6810730.18 (0)0
GET/api/v3/sbom/{sbom_id}102 (0)0 (0)0%129 (-5.0)61.62292,0150.17 (0)0
GET/api/v3/sbom/{sbom_id}/all-license-ids82 (-23)0 (0)0%26.4 (+1.0)3.2279.820.14 (0)0
GET/api/v3/sbom/{sbom_id}/download89 (-6)0 (0)0%3,056 (-61.8)2,9053,253136,458,6380.15 (0)0
GET/api/v3/sbom/{sbom_id}/license-export122 (+19)0 (0)0%32.1 (+0.1)4.3085.42340.20 (0)0
GET/api/v3/sbom/{sbom_id}/packages122 (+2)0 (0)0%152 (+1.5)15.047712,6480.20 (0)0
GET/api/v3/sbom/{sbom_id}/related96 (-9)0 (0)0%160 (+25.6)21.936015,3720.16 (0)0
GET/api/v3/sbom?limit=10&sort=name:asc&total=true120 (+31)0 (0)0%264 (-53.8)28.91,07212,1890.20 (+0.1)0
GET/api/v3/sbom?offset=100&limit=10&total=true227 (+7)0 (0)0%178 (-68.1)21.281911,8920.38 (0)0
GET/api/v3/sbom?q=label:type=product&total=true105 (-9)0 (0)0%26.6 (+0.5)2.3387.9220.18 (0)0
GET/api/v3/sbom?q=license~GPL&sort=name:desc&total=true108 (+2)0 (0)0%30.5 (+2.6)4.1680.8220.18 (0)0
GET/api/v3/sbom?q=name~redhat&total=true124 (+7)0 (0)0%514 (+266.7)10.11,863220.21 (0)0
GET/api/v3/sbom?q=published>2024-01-01&total=true128 (+21)0 (0)0%190 (+11.4)30.090829,3170.21 (0)0
GET/api/v3/sbom?sort=ingested:desc&total=true114 (+5)0 (0)0%300 (-34.5)32.396729,6000.19 (0)0
GET/api/v3/sbom?total=true209 (-27)0 (0)0%180 (+4.7)23.91,36529,3170.35 (0)0
advisory 13
GET/api/v3/advisory/urn:uuid:{advisory_id}568 (+27)0 (0)0%59.7 (+0.1)4.211382,3950.95 (0)0
GET/api/v3/advisory/urn:uuid:{advisory_id}/download546 (-39)0 (0)0%28.8 (+0.7)4.6693.2178,4230.91 (-0.1)0
GET/api/v3/advisory?deprecated=Consider&total=true541 (-19)0 (0)0%78.9 (-3.1)5.202,68544,0030.90 (0)0
GET/api/v3/advisory?limit=1&total=true71 (-31)0 (0)0%59.0 (-12.3)11.31202,1730.12 (-0.1)0
GET/api/v3/advisory?limit=10&sort=ingested:desc&total=true494 (-91)0 (0)0%72.9 (+5.3)6.242,75020,1930.82 (-0.2)0
GET/api/v3/advisory?offset=100&limit=10&total=true547 (-63)0 (0)0%85.3 (+5.6)6.162,15619,5440.91 (-0.1)0
GET/api/v3/advisory?offset={offset}&limit=171 (-30)0 (0)0%277 (-3.7)53.19262,0450.12 (-0.1)0
GET/api/v3/advisory?q=CVE-2021-&total=true550 (+11)0 (0)0%431 (+39.6)16.34,31649,6290.92 (0)0
GET/api/v3/advisory?q=identifier=CVE-2022-0981&total=true517 (-71)0 (0)0%62.7 (+4.4)4.741271,9710.86 (-0.1)0
GET/api/v3/advisory?q=modified>3 days ago&total=true542 (-83)0 (0)0%24.9 (-0.1)2.34101220.90 (-0.1)0
GET/api/v3/advisory?q=title~openssl&total=true532 (-54)0 (0)0%51.2 (+0.3)9.89538126,4520.89 (-0.1)0
GET/api/v3/advisory?sort=modified:desc&total=true522 (-50)0 (0)0%77.6 (-0.7)6.622,90838,1280.87 (-0.1)0
GET/api/v3/advisory?total=true555 (-11)0 (0)0%122 (-8.6)8.502,32349,4860.93 (0)0
vulnerability 7
POST/api/v3/vulnerability/analyze370 (-11)0 (0)0%1,032 (-27.9)1.535,2304,176,4440.62 (0)0
GET/api/v3/vulnerability?offset=100&limit=10&total=true185 (-16)0 (0)0%37.1 (-18.8)2.301,1697,1720.31 (0)0
GET/api/v3/vulnerability?q=base_score>=7.0&total=true216 (+12)0 (0)0%44.1 (+6.0)3.711,08818,4290.36 (0)0
GET/api/v3/vulnerability?q=base_severity=high&total=true158 (-53)0 (0)0%68.1 (+25.7)2.461,79518,3900.26 (-0.1)0
GET/api/v3/vulnerability?q=cwes=CWE-79&total=true188 (+15)0 (0)0%51.4 (+6.5)3.731,10818,8040.31 (0)0
GET/api/v3/vulnerability?sort=base_score:desc&total=true200 (-21)0 (0)0%857 (+185.4)2512,19513,1700.33 (0)0
GET/api/v3/vulnerability?total=true187 (-30)0 (0)0%29.4 (-5.6)3.0892318,2810.31 (0)0
purl 15
GET/api/v3/purl/base/{purl}126 (-15)0 (0)0%90.9 (-4.4)6.8539148,8270.21 (0)0
GET/api/v3/purl/base?q=namespace=redhat&total=true120 (-4)0 (0)0%93.1 (+8.3)7.089252,0800.20 (0)0
GET/api/v3/purl/base?q=type=rpm&total=true112 (+2)0 (0)0%62.7 (+4.8)4.161332,0800.19 (0)0
GET/api/v3/purl/base?sort=name:asc&total=true120 (-5)0 (0)0%216 (-3.4)88.74152,9430.20 (0)0
GET/api/v3/purl/base?total=true104 (-39)0 (0)0%69.5 (+10.1)3.075202,4500.17 (-0.1)0
POST/api/v3/purl/recommend360 (-6)0 (0)0%964 (+20.1)1271,9192,7470.60 (0)0
GET/api/v3/purl/{purl_id}107 (-15)0 (0)0%100 (-4.2)16.42675370.18 (0)0
GET/api/v3/purl?offset=100&limit=10&total=true117 (-7)0 (0)0%167 (+54.6)4.394,9364,4740.20 (0)0
GET/api/v3/purl?q=curl&total=true113 (-6)0 (0)0%122 (-82.2)5.791,66511,7140.19 (0)0
GET/api/v3/purl?q=license~GPLv3+...&sort=name:desc&total=true108 (-6)0 (0)0%33.7 (-1.0)6.8498.3220.18 (0)0
GET/api/v3/purl?q=name=curl&total=true109 (-13)0 (0)0%39.6 (+7.5)2.0828812,0840.18 (0)0
GET/api/v3/purl?q=purl:namespace=redhat&total=true138 (+6)0 (0)0%224 (+23.5)2.023,63913,6170.23 (0)0
GET/api/v3/purl?q=purl:ty=rpm&total=true125 (0)0 (0)0%278 (+35.2)2.243,98213,6170.21 (0)0
GET/api/v3/purl?sort=purl:name:asc&total=true114 (+2)0 (0)0%371 (-9.4)1.935,82011,1010.19 (0)0
GET/api/v3/purl?total=true121 (-15)0 (0)0%223 (+25.8)1.955,1749,8770.20 (0)0
license 9
GET/api/v3/license/spdx/license/{license_id}1,822 (+50)0 (0)0%41.4 (+0.2)1.0073.21,1433.04 (+0.1)0
GET/api/v3/license/spdx/license?q=apache&total=true1,910 (+15)0 (0)0%2.82 (+0.1)0.9631.31653.19 (0)0
GET/api/v3/license/spdx/license?q=gpl&total=true1,844 (-12)0 (0)0%41.9 (+0.4)1.1771.51,9813.08 (0)0
GET/api/v3/license/spdx/license?total=true1,816 (-7)0 (0)0%41.5 (+0.3)0.9973.31,5253.03 (0)0
GET/api/v3/license?limit=10&sort=license:asc&total=true1,887 (-14)0 (0)0%36.9 (+2.8)4.441894253.15 (0)0
GET/api/v3/license?q=ASL&sort=license:desc&total=true1,780 (-103)0 (0)0%30.7 (-0.4)3.12212222.97 (-0.2)0
GET/api/v3/license?q=license~Apache&total=true1,848 (-28)0 (0)0%27.9 (+1.5)2.491101203.09 (0)0
GET/api/v3/license?q=license~GPL&total=true1,769 (-109)0 (0)0%26.2 (-1.3)2.2996.4922.95 (-0.2)0
GET/api/v3/license?total=true1,797 (-66)0 (0)0%72.0 (+1.8)8.631481,1013.00 (-0.1)0
analysis 3
GET/api/v3/analysis/component/{component}13,981 (-693)0 (0)0%13.8 (+1.0)1.301112523.34 (-1.1)0
GET/api/v3/analysis/latest/component/{cpe}13,912 (-799)0 (0)0%13.9 (+0.7)1.401092523.23 (-1.3)0
GET/api/v3/analysis/status13,709 (-971)0 (0)0%13.2 (+0.5)1.2010310322.89 (-1.6)0
importer 1
GET/api/v3/importer?total=true51,482 (-3,218)0 (0)0%10.8 (+0.6)1.02109285.95 (-5.3)0
group 3
GET/api/v3/group/sbom?parents=resolve&total=true14,296 (-1,171)0 (0)0%13.3 (+0.8)1.261653823.87 (-1.9)0
GET/api/v3/group/sbom?total=true14,204 (-866)0 (0)0%13.1 (+1.0)1.221742223.71 (-1.4)0
GET/api/v3/group/sbom?totals=true&total=true14,007 (-1,237)0 (0)0%13.4 (+1.0)1.261632223.38 (-2.1)0
labels 3
GET/api/v3/advisory-labels?filter_text=type&limit=100098 (+4)0 (0)0%5,835 (-154.2)5,0507,392600.16 (0)0
GET/api/v3/sbom-labels?limit=10&filter_text=&total=true124 (-1)0 (0)0%66.2 (-5.8)9.611271,0650.21 (0)0
GET/api/v3/sbom-labels?total=true100 (-14)0 (0)0%75.6 (+4.4)10.21491,0650.17 (0)0
other 2
GET/.well-known/trustify13,280 (+302)0 (0)0%41.5 (-0.6)0.8681.91,17022.17 (+0.5)0
POST/api/v3/ui/extract-sbom-purls13,606 (+725)0 (0)0%2.39 (-0.5)0.8942.34522.71 (+1.2)0

Response time metrics (ms)

MethodName50%ile75%ile90%ile95%ile99%ile100%ile
sbom 16
GET/api/v3/sbom/by-package?purl={purl}120 (+20)130 (+10)140 (0)150 (0)210 (-10)210 (-80)
GET/api/v3/sbom/count-by-package11 (-14)48 (-21)76 (+1)80 (+2)97 (+12)110 (+17)
GET/api/v3/sbom/{sbom_id}130 (0)140 (-10)200 (0)210 (-10)230 (0)230 (-10)
GET/api/v3/sbom/{sbom_id}/all-license-ids9 (+1)53 (+7)70 (-2)77 (+1)80 (-4)80 (-20)
GET/api/v3/sbom/{sbom_id}/download3,100 (0)3,100 (-100)3,100 (-100)3,200 (-100)3,300 (-300)3,300 (-300)
GET/api/v3/sbom/{sbom_id}/license-export17 (+4)59 (-4)74 (-2)79 (0)85 (-5)85 (-8)
GET/api/v3/sbom/{sbom_id}/packages100 (-10)220 (-10)300 (0)370 (+50)400 (+10)480 (+80)
GET/api/v3/sbom/{sbom_id}/related150 (+40)210 (+30)280 (+80)290 (+30)360 (+70)360 (0)
GET/api/v3/sbom?limit=10&sort=name:asc&total=true210 (-80)380 (0)500 (-120)600 (-110)990 (-110)1,100 (0)
GET/api/v3/sbom?offset=100&limit=10&total=true110 (-60)240 (-80)370 (-170)470 (-140)670 (-530)820 (-780)
GET/api/v3/sbom?q=label:type=product&total=true8 (0)56 (+3)73 (+2)76 (+1)88 (+7)88 (+5)
GET/api/v3/sbom?q=license~GPL&sort=name:desc&total=true11 (+1)62 (+2)73 (+3)77 (+2)81 (-3)81 (-9)
GET/api/v3/sbom?q=name~redhat&total=true100 (-110)1,100 (+810)1,300 (+910)1,400 (+920)1,600 (+1,080)1,900 (+1,310)
GET/api/v3/sbom?q=published>2024-01-01&total=true120 (+10)210 (+30)400 (-10)490 (-110)680 (-100)910 (+90)
GET/api/v3/sbom?sort=ingested:desc&total=true190 (-120)490 (+10)600 (-10)700 (+10)870 (-30)970 (+60)
GET/api/v3/sbom?total=true120 (0)190 (0)400 (+10)490 (+10)610 (+10)1,400 (+500)
advisory 13
GET/api/v3/advisory/urn:uuid:{advisory_id}47 (0)81 (+4)110 (+10)110 (0)120 (-10)140 (-10)
GET/api/v3/advisory/urn:uuid:{advisory_id}/download14 (+1)52 (+2)75 (+4)79 (+2)85 (-12)93 (-47)
GET/api/v3/advisory?deprecated=Consider&total=true19 (+2)72 (0)85 (-3)120 (-10)2,000 (-400)2,700 (-200)
GET/api/v3/advisory?limit=1&total=true49 (-1)70 (-8)95 (0)110 (0)120 (-500)120 (-550)
GET/api/v3/advisory?limit=10&sort=ingested:desc&total=true13 (0)64 (0)79 (0)89 (+1)2,100 (+100)2,800 (-800)
GET/api/v3/advisory?offset=100&limit=10&total=true77 (+6)89 (+2)97 (+1)100 (0)1,700 (+1,500)2,200 (-800)
GET/api/v3/advisory?offset={offset}&limit=1240 (+20)340 (-50)480 (-130)600 (-70)930 (+110)930 (+90)
GET/api/v3/advisory?q=CVE-2021-&total=true200 (0)370 (0)1,400 (+300)1,900 (+100)2,800 (+600)4,300 (+100)
GET/api/v3/advisory?q=identifier=CVE-2022-0981&total=true48 (+1)91 (+19)110 (+10)110 (0)120 (0)130 (-10)
GET/api/v3/advisory?q=modified>3 days ago&total=true8 (0)52 (0)67 (0)72 (0)83 (0)100 (-40)
GET/api/v3/advisory?q=title~openssl&total=true43 (+11)78 (+1)91 (0)110 (+10)200 (-60)540 (-20)
GET/api/v3/advisory?sort=modified:desc&total=true17 (0)69 (0)83 (+1)110 (+10)1,800 (-300)2,900 (-1,100)
GET/api/v3/advisory?total=true100 (-10)120 (-30)180 (-10)190 (-10)250 (-50)2,300 (-900)
vulnerability 7
POST/api/v3/vulnerability/analyze62 (-9)1,800 (+100)3,200 (0)3,500 (-300)4,400 (+100)5,200 (-900)
GET/api/v3/vulnerability?offset=100&limit=10&total=true8 (-38)11 (-44)67 (-31)84 (-26)680 (+550)1,200 (+600)
GET/api/v3/vulnerability?q=base_score>=7.0&total=true9 (+1)59 (+47)71 (+6)89 (+12)710 (+40)1,100 (-100)
GET/api/v3/vulnerability?q=base_severity=high&total=true8 (0)11 (-4)74 (+8)300 (+223)1,500 (+700)1,800 (+600)
GET/api/v3/vulnerability?q=cwes=CWE-79&total=true8 (0)17 (+2)72 (+5)190 (-20)990 (+220)1,100 (+100)
GET/api/v3/vulnerability?sort=base_score:desc&total=true700 (+190)1,300 (+590)1,500 (+200)1,700 (+200)1,900 (0)2,200 (-200)
GET/api/v3/vulnerability?total=true7 (-1)10 (-4)65 (+3)74 (-1)690 (-10)920 (+130)
purl 15
GET/api/v3/purl/base/{purl}53 (-11)180 (+20)230 (-30)270 (0)330 (-40)390 (+20)
GET/api/v3/purl/base?q=namespace=redhat&total=true52 (+5)93 (+13)110 (+10)210 (+80)740 (0)930 (+130)
GET/api/v3/purl/base?q=type=rpm&total=true48 (+2)89 (+11)100 (0)110 (0)120 (0)130 (0)
GET/api/v3/purl/base?sort=name:asc&total=true200 (-10)250 (0)320 (+10)350 (+10)400 (-120)410 (-230)
GET/api/v3/purl/base?total=true50 (+4)89 (+10)110 (+10)120 (+10)160 (+20)520 (+360)
POST/api/v3/purl/recommend1,000 (0)1,200 (0)1,400 (0)1,500 (0)1,800 (+100)1,900 (-100)
GET/api/v3/purl/{purl_id}91 (-8)120 (-30)170 (-10)180 (-20)210 (0)270 (0)
GET/api/v3/purl?offset=100&limit=10&total=true46 (0)75 (-13)93 (-6)100 (-10)4,500 (+1,800)4,900 (+400)
GET/api/v3/purl?q=curl&total=true32 (-20)78 (-112)120 (-580)990 (-210)1,300 (-100)1,700 (-1,400)
GET/api/v3/purl?q=license~GPLv3+...&sort=name:desc&total=true26 (-10)56 (+3)68 (0)76 (+2)81 (-4)98 (+3)
GET/api/v3/purl?q=name=curl&total=true36 (+25)58 (+5)73 (+3)79 (-6)230 (+30)290 (+10)
GET/api/v3/purl?q=purl:namespace=redhat&total=true9 (+1)45 (-4)68 (+2)2,900 (+700)3,400 (+100)3,600 (0)
GET/api/v3/purl?q=purl:ty=rpm&total=true16 (+7)55 (+6)79 (+13)3,000 (+100)3,600 (+100)4,000 (-300)
GET/api/v3/purl?sort=purl:name:asc&total=true12 (+1)54 (0)74 (-1)4,500 (0)5,300 (-200)5,800 (0)
GET/api/v3/purl?total=true9 (+2)43 (+1)63 (+5)78 (-832)5,100 (+700)5,200 (0)
license 9
GET/api/v3/license/spdx/license/{license_id}43 (+1)43 (0)44 (0)45 (0)51 (-1)73 (+3)
GET/api/v3/license/spdx/license?q=apache&total=true2 (0)4 (0)5 (0)6 (+1)7 (-1)31 (+1)
GET/api/v3/license/spdx/license?q=gpl&total=true43 (0)44 (0)45 (0)45 (-1)54 (-1)72 (-2)
GET/api/v3/license/spdx/license?total=true43 (+1)43 (0)44 (0)45 (-1)52 (-2)73 (+2)
GET/api/v3/license?limit=10&sort=license:asc&total=true28 (+9)59 (+3)76 (+2)82 (+2)90 (+1)190 (-120)
GET/api/v3/license?q=ASL&sort=license:desc&total=true15 (-1)53 (-1)68 (-1)76 (-1)85 (-2)210 (+110)
GET/api/v3/license?q=license~Apache&total=true12 (0)50 (+1)64 (+2)72 (+1)81 (0)110 (-10)
GET/api/v3/license?q=license~GPL&total=true11 (-2)48 (-1)61 (-3)71 (-1)80 (-1)96 (+1)
GET/api/v3/license?total=true58 (0)96 (+1)110 (0)120 (0)130 (0)150 (+10)
analysis 3
GET/api/v3/analysis/component/{component}5 (0)7 (0)64 (+3)69 (0)77 (+2)110 (+10)
GET/api/v3/analysis/latest/component/{cpe}5 (0)7 (0)63 (+1)70 (+1)77 (+1)110 (+10)
GET/api/v3/analysis/status5 (0)7 (+1)62 (+1)69 (0)76 (+1)100 (0)
importer 1
GET/api/v3/importer?total=true4 (+1)5 (0)57 (+7)67 (+1)74 (+1)110 (0)
group 3
GET/api/v3/group/sbom?parents=resolve&total=true5 (+1)6 (0)63 (+2)69 (+1)77 (+2)170 (+60)
GET/api/v3/group/sbom?total=true5 (+1)6 (0)62 (+3)69 (+1)76 (+1)170 (+70)
GET/api/v3/group/sbom?totals=true&total=true5 (+1)6 (0)63 (+3)69 (+1)77 (+2)160 (+60)
labels 3
GET/api/v3/advisory-labels?filter_text=type&limit=10005,800 (-200)6,100 (-100)6,500 (0)6,700 (-100)7,400 (+100)7,400 (+100)
GET/api/v3/sbom-labels?limit=10&filter_text=&total=true52 (-1)86 (-14)110 (-10)120 (0)120 (-10)130 (0)
GET/api/v3/sbom-labels?total=true76 (+23)110 (+10)110 (0)120 (0)150 (+20)150 (+20)
other 2
GET/.well-known/trustify42 (0)43 (0)44 (0)45 (-1)54 (-11)82 (-58)
POST/api/v3/ui/extract-sbom-purls1 (-1)3 (0)5 (0)6 (0)8 (-15)42 (-35)

Failures

No failures recorded.

Exceptions

No exceptions raised in the locustfile.