← All runs

Trustify load tests · 2026-10-21 22:07 UTC

Target trustify (scale snapshot, CI) · 2026-10-21 22:07:06 UTC → 22:17:04 UTC · Users 10 · Deltas vs previous run (2026-10-21 19:13 UTC, 2026-10-21T18-22-42_7f38deb)

Type daily · Dataset scale-20260317T023702Z · Scenario etc/scenarios/main/full-20260317T023702Z.json5 · Branch main · Commit 7f38deb34acb · Workflow run

Duration
9m 58s
Total requests
191,719 (+937)
Failure rate
0.0%
0 failed requests
Throughput
320.0 req/s (+1.5)
Latency 95%ile
72 ms (0)
Latency 99%ile
200 ms (0)
Endpoints
72
0 with failures

Over time

Throughput

Requests and failures per second

Response time

Percentiles over Locust's rolling window, ms

Users

Concurrent simulated users

Load plan

ActionStartedStoppedElapsedUsers
Increasing22:07:0622:07:100m 04s2 → 10
Maintaining22:07:1022:17:049m 54s10 → 10

Top 10 slowest endpoints (95%ile)

#MethodName95%ile (ms)Average (ms)# Requests
1GET/api/v3/advisory-labels?filter_text=type&limit=10007,0005,87697
2GET/api/v3/purl?sort=purl:name:asc&total=true4,30040197
3POST/api/v3/vulnerability/analyze3,8001,092389
4GET/api/v3/purl?offset=100&limit=10&total=true3,600302116
5GET/api/v3/purl?q=purl:ty=rpm&total=true3,200275115
6GET/api/v3/sbom/{sbom_id}/download3,2003,10193
7GET/api/v3/purl?q=purl:namespace=redhat&total=true2,900230132
8GET/api/v3/advisory?q=CVE-2021-&total=true2,000414562
9POST/api/v3/purl/recommend1,500980357
10GET/api/v3/sbom?q=name~redhat&total=true1,30069597

Request metrics

MethodName# Requests# FailsFail %Average (ms)Min (ms)Max (ms)Avg size (B)RPSFailures/s
sbom 16
GET/api/v3/sbom/by-package?purl={purl}100 (+1)0 (0)0%109 (-1.7)52.93331,2870.17 (0)0
GET/api/v3/sbom/count-by-package91 (-18)0 (0)0%36.6 (+8.6)3.0290.730.15 (0)0
GET/api/v3/sbom/{sbom_id}101 (-1)0 (0)0%131 (+1.8)59.93122,0150.17 (0)0
GET/api/v3/sbom/{sbom_id}/all-license-ids100 (+18)0 (0)0%18.7 (-7.8)3.1176.420.17 (0)0
GET/api/v3/sbom/{sbom_id}/download93 (+4)0 (0)0%3,101 (+45.2)2,9653,437136,458,6380.16 (0)0
GET/api/v3/sbom/{sbom_id}/license-export89 (-33)0 (0)0%31.8 (-0.3)3.0287.32350.15 (-0.1)0
GET/api/v3/sbom/{sbom_id}/packages108 (-14)0 (0)0%177 (+24.9)19.248412,6480.18 (0)0
GET/api/v3/sbom/{sbom_id}/related103 (+7)0 (0)0%158 (-2.1)23.660315,3720.17 (0)0
GET/api/v3/sbom?limit=10&sort=name:asc&total=true116 (-4)0 (0)0%258 (-6.5)40.91,08312,1890.19 (0)0
GET/api/v3/sbom?offset=100&limit=10&total=true183 (-44)0 (0)0%196 (+17.8)21.381611,9000.31 (-0.1)0
GET/api/v3/sbom?q=label:type=product&total=true108 (+3)0 (0)0%19.7 (-6.9)2.1978.9220.18 (0)0
GET/api/v3/sbom?q=license~GPL&sort=name:desc&total=true106 (-2)0 (0)0%26.6 (-3.9)4.4483.4220.18 (0)0
GET/api/v3/sbom?q=name~redhat&total=true97 (-27)0 (0)0%695 (+180.3)8.971,684220.16 (0)0
GET/api/v3/sbom?q=published>2024-01-01&total=true98 (-30)0 (0)0%211 (+20.7)33.781629,3170.16 (-0.1)0
GET/api/v3/sbom?sort=ingested:desc&total=true104 (-10)0 (0)0%321 (+20.8)32.61,60129,6000.17 (0)0
GET/api/v3/sbom?total=true189 (-20)0 (0)0%183 (+2.4)30.459929,3170.32 (0)0
advisory 13
GET/api/v3/advisory/urn:uuid:{advisory_id}555 (-13)0 (0)0%62.5 (+2.8)3.932182,3950.93 (0)0
GET/api/v3/advisory/urn:uuid:{advisory_id}/download581 (+35)0 (0)0%28.4 (-0.4)4.8499.8178,4230.97 (+0.1)0
GET/api/v3/advisory?deprecated=Consider&total=true522 (-19)0 (0)0%74.6 (-4.3)7.042,49544,0030.87 (0)0
GET/api/v3/advisory?limit=1&total=true80 (+9)0 (0)0%64.6 (+5.6)12.02242,3600.13 (0)0
GET/api/v3/advisory?limit=10&sort=ingested:desc&total=true514 (+20)0 (0)0%71.4 (-1.5)3.792,98520,1930.86 (0)0
GET/api/v3/advisory?offset=100&limit=10&total=true568 (+21)0 (0)0%91.5 (+6.2)6.632,97119,2890.95 (0)0
GET/api/v3/advisory?offset={offset}&limit=180 (+9)0 (0)0%286 (+9.0)49.37341,9510.13 (0)0
GET/api/v3/advisory?q=CVE-2021-&total=true562 (+12)0 (0)0%414 (-17.3)13.14,20549,6640.94 (0)0
GET/api/v3/advisory?q=identifier=CVE-2022-0981&total=true531 (+14)0 (0)0%63.1 (+0.5)5.411251,9710.89 (0)0
GET/api/v3/advisory?q=modified>3 days ago&total=true500 (-42)0 (0)0%23.7 (-1.1)2.1487.1220.83 (-0.1)0
GET/api/v3/advisory?q=title~openssl&total=true523 (-9)0 (0)0%51.9 (+0.7)9.33799126,4520.87 (0)0
GET/api/v3/advisory?sort=modified:desc&total=true558 (+36)0 (0)0%76.8 (-0.8)6.453,75538,1280.93 (+0.1)0
GET/api/v3/advisory?total=true563 (+8)0 (0)0%118 (-3.8)8.522,19749,2230.94 (0)0
vulnerability 7
POST/api/v3/vulnerability/analyze389 (+19)0 (0)0%1,092 (+60.9)1.745,2594,483,5220.65 (0)0
GET/api/v3/vulnerability?offset=100&limit=10&total=true204 (+19)0 (0)0%19.9 (-17.2)2.256877,3940.34 (0)0
GET/api/v3/vulnerability?q=base_score>=7.0&total=true202 (-14)0 (0)0%43.6 (-0.5)2.581,20418,7440.34 (0)0
GET/api/v3/vulnerability?q=base_severity=high&total=true205 (+47)0 (0)0%42.6 (-25.5)4.121,11918,9420.34 (+0.1)0
GET/api/v3/vulnerability?q=cwes=CWE-79&total=true201 (+13)0 (0)0%35.2 (-16.2)4.5588318,9260.34 (0)0
GET/api/v3/vulnerability?sort=base_score:desc&total=true223 (+23)0 (0)0%595 (-261.9)2181,59313,1890.37 (0)0
GET/api/v3/vulnerability?total=true213 (+26)0 (0)0%40.2 (+10.8)2.7090418,8890.36 (0)0
purl 15
GET/api/v3/purl/base/{purl}120 (-6)0 (0)0%85.5 (-5.4)7.4531648,8270.20 (0)0
GET/api/v3/purl/base?q=namespace=redhat&total=true122 (+2)0 (0)0%88.6 (-4.5)4.708312,0800.20 (0)0
GET/api/v3/purl/base?q=type=rpm&total=true118 (+6)0 (0)0%61.2 (-1.5)4.821252,0800.20 (0)0
GET/api/v3/purl/base?sort=name:asc&total=true109 (-11)0 (0)0%219 (+2.7)69.75292,9430.18 (0)0
GET/api/v3/purl/base?total=true131 (+27)0 (0)0%65.0 (-4.5)4.913492,4500.22 (0)0
POST/api/v3/purl/recommend357 (-3)0 (0)0%980 (+16.2)2211,8362,7470.60 (0)0
GET/api/v3/purl/{purl_id}142 (+35)0 (0)0%87.0 (-13.1)18.92675370.24 (+0.1)0
GET/api/v3/purl?offset=100&limit=10&total=true116 (-1)0 (0)0%302 (+135.0)1.694,8324,3150.19 (0)0
GET/api/v3/purl?q=curl&total=true109 (-4)0 (0)0%192 (+69.5)3.972,16210,6250.18 (0)0
GET/api/v3/purl?q=license~GPLv3+...&sort=name:desc&total=true114 (+6)0 (0)0%34.6 (+0.9)5.4281.5220.19 (0)0
GET/api/v3/purl?q=name=curl&total=true119 (+10)0 (0)0%35.6 (-3.9)2.1425612,0840.20 (0)0
GET/api/v3/purl?q=purl:namespace=redhat&total=true132 (-6)0 (0)0%230 (+5.9)1.753,59010,7220.22 (0)0
GET/api/v3/purl?q=purl:ty=rpm&total=true115 (-10)0 (0)0%275 (-3.3)2.733,95211,1490.19 (0)0
GET/api/v3/purl?sort=purl:name:asc&total=true97 (-17)0 (0)0%401 (+29.5)2.285,75411,1010.16 (0)0
GET/api/v3/purl?total=true119 (-2)0 (0)0%76.3 (-147.2)1.744,66910,9150.20 (0)0
license 9
GET/api/v3/license/spdx/license/{license_id}1,836 (+14)0 (0)0%41.5 (+0.1)1.0763.41,1433.06 (0)0
GET/api/v3/license/spdx/license?q=apache&total=true1,818 (-92)0 (0)0%2.94 (+0.1)0.9640.71653.03 (-0.2)0
GET/api/v3/license/spdx/license?q=gpl&total=true1,764 (-80)0 (0)0%41.6 (-0.2)1.1365.21,9812.94 (-0.1)0
GET/api/v3/license/spdx/license?total=true1,855 (+39)0 (0)0%41.3 (-0.3)1.0172.51,5253.10 (+0.1)0
GET/api/v3/license?limit=10&sort=license:asc&total=true1,847 (-40)0 (0)0%36.4 (-0.4)5.541764253.08 (-0.1)0
GET/api/v3/license?q=ASL&sort=license:desc&total=true1,816 (+36)0 (0)0%31.3 (+0.6)3.11182223.03 (+0.1)0
GET/api/v3/license?q=license~Apache&total=true1,812 (-36)0 (0)0%27.1 (-0.7)2.4995.81203.02 (-0.1)0
GET/api/v3/license?q=license~GPL&total=true1,834 (+65)0 (0)0%26.9 (+0.7)2.4395.9923.06 (+0.1)0
GET/api/v3/license?total=true1,798 (+1)0 (0)0%72.8 (+0.8)7.531881,1013.00 (0)0
analysis 3
GET/api/v3/analysis/component/{component}14,150 (+169)0 (0)0%13.3 (-0.5)1.401042523.62 (+0.3)0
GET/api/v3/analysis/latest/component/{cpe}14,061 (+149)0 (0)0%13.8 (-0.1)1.411012523.47 (+0.2)0
GET/api/v3/analysis/status13,990 (+281)0 (0)0%13.3 (0)1.2510210323.35 (+0.5)0
importer 1
GET/api/v3/importer?total=true52,211 (+729)0 (0)0%10.6 (-0.1)1.03102287.15 (+1.2)0
group 3
GET/api/v3/group/sbom?parents=resolve&total=true14,103 (-193)0 (0)0%13.1 (-0.2)1.251733823.54 (-0.3)0
GET/api/v3/group/sbom?total=true14,292 (+88)0 (0)0%13.3 (+0.2)1.231712223.86 (+0.1)0
GET/api/v3/group/sbom?totals=true&total=true14,137 (+130)0 (0)0%13.4 (0)1.221692223.60 (+0.2)0
labels 3
GET/api/v3/advisory-labels?filter_text=type&limit=100097 (-1)0 (0)0%5,876 (+41.0)4,7417,585600.16 (0)0
GET/api/v3/sbom-labels?limit=10&filter_text=&total=true97 (-27)0 (0)0%67.9 (+1.7)7.741251,0650.16 (0)0
GET/api/v3/sbom-labels?total=true89 (-11)0 (0)0%70.2 (-5.5)12.21351,0650.15 (0)0
other 2
GET/.well-known/trustify13,240 (-40)0 (0)0%41.7 (+0.2)0.861031,17022.10 (-0.1)0
POST/api/v3/ui/extract-sbom-purls13,292 (-314)0 (0)0%2.41 (0)0.8938.84522.19 (-0.5)0

Response time metrics (ms)

MethodName50%ile75%ile90%ile95%ile99%ile100%ile
sbom 16
GET/api/v3/sbom/by-package?purl={purl}110 (-10)130 (0)150 (+10)220 (+70)330 (+120)330 (+120)
GET/api/v3/sbom/count-by-package22 (+11)64 (+16)82 (+6)83 (+3)91 (-6)91 (-19)
GET/api/v3/sbom/{sbom_id}130 (0)150 (+10)200 (0)220 (+10)250 (+20)310 (+80)
GET/api/v3/sbom/{sbom_id}/all-license-ids7 (-2)33 (-20)57 (-13)65 (-12)76 (-4)76 (-4)
GET/api/v3/sbom/{sbom_id}/download3,100 (0)3,200 (+100)3,200 (+100)3,200 (0)3,400 (+100)3,400 (+100)
GET/api/v3/sbom/{sbom_id}/license-export13 (-4)60 (+1)81 (+7)83 (+4)87 (+2)87 (+2)
GET/api/v3/sbom/{sbom_id}/packages190 (+90)280 (+60)300 (0)320 (-50)470 (+70)480 (0)
GET/api/v3/sbom/{sbom_id}/related130 (-20)210 (0)270 (-10)300 (+10)390 (+30)600 (+240)
GET/api/v3/sbom?limit=10&sort=name:asc&total=true200 (-10)300 (-80)510 (+10)590 (-10)790 (-200)1,100 (0)
GET/api/v3/sbom?offset=100&limit=10&total=true150 (+40)290 (+50)390 (+20)470 (0)760 (+90)820 (0)
GET/api/v3/sbom?q=label:type=product&total=true7 (-1)23 (-33)66 (-7)73 (-3)77 (-11)79 (-9)
GET/api/v3/sbom?q=license~GPL&sort=name:desc&total=true11 (0)52 (-10)73 (0)76 (-1)83 (+2)83 (+2)
GET/api/v3/sbom?q=name~redhat&total=true900 (+800)1,100 (0)1,300 (0)1,300 (-100)1,700 (+100)1,700 (-200)
GET/api/v3/sbom?q=published>2024-01-01&total=true150 (+30)280 (+70)470 (+70)600 (+110)820 (+140)820 (-90)
GET/api/v3/sbom?sort=ingested:desc&total=true210 (+20)500 (+10)700 (+100)790 (+90)1,100 (+230)1,600 (+630)
GET/api/v3/sbom?total=true160 (+40)210 (+20)370 (-30)490 (0)570 (-40)600 (-800)
advisory 13
GET/api/v3/advisory/urn:uuid:{advisory_id}47 (0)91 (+10)110 (0)110 (0)120 (0)220 (+80)
GET/api/v3/advisory/urn:uuid:{advisory_id}/download14 (0)46 (-6)74 (-1)79 (0)90 (+5)100 (+7)
GET/api/v3/advisory?deprecated=Consider&total=true19 (0)70 (-2)84 (-1)110 (-10)1,700 (-300)2,500 (-200)
GET/api/v3/advisory?limit=1&total=true50 (+1)78 (+8)100 (+5)120 (+10)220 (+100)220 (+100)
GET/api/v3/advisory?limit=10&sort=ingested:desc&total=true15 (+2)65 (+1)77 (-2)86 (-3)1,900 (-200)3,000 (+200)
GET/api/v3/advisory?offset=100&limit=10&total=true76 (-1)88 (-1)95 (-2)100 (0)2,100 (+400)3,000 (+800)
GET/api/v3/advisory?offset={offset}&limit=1240 (0)400 (+60)530 (+50)610 (+10)730 (-200)730 (-200)
GET/api/v3/advisory?q=CVE-2021-&total=true190 (-10)310 (-60)1,500 (+100)2,000 (+100)2,500 (-300)4,200 (-100)
GET/api/v3/advisory?q=identifier=CVE-2022-0981&total=true48 (0)96 (+5)110 (0)110 (0)120 (0)130 (0)
GET/api/v3/advisory?q=modified>3 days ago&total=true8 (0)48 (-4)68 (+1)72 (0)80 (-3)87 (-13)
GET/api/v3/advisory?q=title~openssl&total=true34 (-9)74 (-4)88 (-3)110 (0)260 (+60)800 (+260)
GET/api/v3/advisory?sort=modified:desc&total=true16 (-1)69 (0)83 (0)110 (0)2,100 (+300)3,800 (+900)
GET/api/v3/advisory?total=true100 (0)120 (0)180 (0)190 (0)200 (-50)2,200 (-100)
vulnerability 7
POST/api/v3/vulnerability/analyze75 (+13)1,800 (0)3,100 (-100)3,800 (+300)4,700 (+300)5,300 (+100)
GET/api/v3/vulnerability?offset=100&limit=10&total=true7 (-1)9 (-2)66 (-1)71 (-13)120 (-560)690 (-510)
GET/api/v3/vulnerability?q=base_score>=7.0&total=true8 (-1)10 (-49)64 (-7)73 (-16)970 (+260)1,200 (+100)
GET/api/v3/vulnerability?q=base_severity=high&total=true8 (0)18 (+7)73 (-1)98 (-202)580 (-920)1,100 (-700)
GET/api/v3/vulnerability?q=cwes=CWE-79&total=true8 (0)14 (-3)73 (+1)110 (-80)410 (-580)880 (-220)
GET/api/v3/vulnerability?sort=base_score:desc&total=true510 (-190)700 (-600)980 (-520)1,100 (-600)1,400 (-500)1,600 (-600)
GET/api/v3/vulnerability?total=true8 (+1)12 (+2)68 (+3)84 (+10)810 (+120)900 (-20)
purl 15
GET/api/v3/purl/base/{purl}56 (+3)130 (-50)220 (-10)250 (-20)290 (-40)320 (-70)
GET/api/v3/purl/base?q=namespace=redhat&total=true47 (-5)92 (-1)100 (-10)180 (-30)740 (0)830 (-100)
GET/api/v3/purl/base?q=type=rpm&total=true46 (-2)88 (-1)99 (-1)110 (0)120 (0)130 (0)
GET/api/v3/purl/base?sort=name:asc&total=true210 (+10)250 (0)320 (0)370 (+20)470 (+70)530 (+120)
GET/api/v3/purl/base?total=true46 (-4)83 (-6)100 (-10)110 (-10)210 (+50)350 (-170)
POST/api/v3/purl/recommend1,000 (0)1,200 (0)1,400 (0)1,500 (0)1,700 (-100)1,800 (-100)
GET/api/v3/purl/{purl_id}82 (-9)110 (-10)160 (-10)180 (0)250 (+40)270 (0)
GET/api/v3/purl?offset=100&limit=10&total=true47 (+1)83 (+8)100 (+7)3,600 (+3,500)4,700 (+200)4,800 (-100)
GET/api/v3/purl?q=curl&total=true48 (+16)180 (+102)590 (+470)1,000 (+10)1,300 (0)2,200 (+500)
GET/api/v3/purl?q=license~GPLv3+...&sort=name:desc&total=true31 (+5)62 (+6)68 (0)72 (-4)79 (-2)81 (-17)
GET/api/v3/purl?q=name=curl&total=true27 (-9)60 (+2)70 (-3)81 (+2)210 (-20)260 (-30)
GET/api/v3/purl?q=purl:namespace=redhat&total=true10 (+1)52 (+7)63 (-5)2,900 (0)3,300 (-100)3,600 (0)
GET/api/v3/purl?q=purl:ty=rpm&total=true7 (-9)53 (-2)71 (-8)3,200 (+200)3,700 (+100)4,000 (0)
GET/api/v3/purl?sort=purl:name:asc&total=true15 (+3)62 (+8)88 (+14)4,300 (-200)5,800 (+500)5,800 (0)
GET/api/v3/purl?total=true8 (-1)53 (+10)63 (0)67 (-11)1,600 (-3,500)4,700 (-500)
license 9
GET/api/v3/license/spdx/license/{license_id}43 (0)43 (0)44 (0)45 (0)52 (+1)63 (-10)
GET/api/v3/license/spdx/license?q=apache&total=true3 (+1)4 (0)5 (0)6 (0)8 (+1)41 (+10)
GET/api/v3/license/spdx/license?q=gpl&total=true43 (0)44 (0)45 (0)46 (+1)54 (0)65 (-7)
GET/api/v3/license/spdx/license?total=true43 (0)43 (0)44 (0)45 (0)53 (+1)73 (0)
GET/api/v3/license?limit=10&sort=license:asc&total=true24 (-4)59 (0)76 (0)83 (+1)93 (+3)180 (-10)
GET/api/v3/license?q=ASL&sort=license:desc&total=true17 (+2)54 (+1)68 (0)76 (0)86 (+1)180 (-30)
GET/api/v3/license?q=license~Apache&total=true12 (0)50 (0)64 (0)72 (0)81 (0)96 (-14)
GET/api/v3/license?q=license~GPL&total=true11 (0)50 (+2)64 (+3)71 (0)79 (-1)96 (0)
GET/api/v3/license?total=true60 (+2)96 (0)110 (0)120 (0)130 (0)190 (+40)
analysis 3
GET/api/v3/analysis/component/{component}5 (0)7 (0)62 (-2)69 (0)76 (-1)100 (-10)
GET/api/v3/analysis/latest/component/{cpe}5 (0)7 (0)63 (0)70 (0)76 (-1)100 (-10)
GET/api/v3/analysis/status5 (0)7 (0)62 (0)69 (0)75 (-1)100 (0)
importer 1
GET/api/v3/importer?total=true4 (0)5 (0)55 (-2)66 (-1)74 (0)100 (-10)
group 3
GET/api/v3/group/sbom?parents=resolve&total=true5 (0)6 (0)62 (-1)69 (0)77 (0)170 (0)
GET/api/v3/group/sbom?total=true4 (-1)6 (0)62 (0)69 (0)77 (+1)170 (0)
GET/api/v3/group/sbom?totals=true&total=true5 (0)6 (0)63 (0)69 (0)77 (0)170 (+10)
labels 3
GET/api/v3/advisory-labels?filter_text=type&limit=10005,800 (0)6,200 (+100)6,700 (+200)7,000 (+300)7,600 (+200)7,600 (+200)
GET/api/v3/sbom-labels?limit=10&filter_text=&total=true52 (0)97 (+11)120 (+10)120 (0)120 (0)120 (-10)
GET/api/v3/sbom-labels?total=true52 (-24)95 (-15)110 (0)120 (0)130 (-20)130 (-20)
other 2
GET/.well-known/trustify42 (0)43 (0)44 (0)45 (0)54 (0)100 (+18)
POST/api/v3/ui/extract-sbom-purls1 (0)3 (0)5 (0)6 (0)8 (0)39 (-3)

Failures

No failures recorded.

Exceptions

No exceptions raised in the locustfile.