← All runs

Trustify load tests · 2026-10-22 01:35 UTC

Target trustify (scale snapshot, CI) · 2026-10-22 01:35:56 UTC → 01:45:54 UTC · Users 10 · Deltas vs previous run (2026-10-21 22:07 UTC, 2026-10-21T21-16-40_7f38deb)

Type daily · Dataset scale-20260317T023702Z · Scenario etc/scenarios/main/full-20260317T023702Z.json5 · Branch main · Commit 7f38deb34acb · Workflow run

Duration
9m 58s
Total requests
200,085 (+8,366)
Failure rate
0.0%
0 failed requests
Throughput
334.0 req/s (+13.9)
Latency 95%ile
71 ms (-1)
Latency 99%ile
190 ms (-10)
Endpoints
72
0 with failures

Over time

Throughput

Requests and failures per second

Response time

Percentiles over Locust's rolling window, ms

Users

Concurrent simulated users

Load plan

ActionStartedStoppedElapsedUsers
Increasing01:35:5601:36:000m 04s2 → 10
Maintaining01:36:0001:45:549m 54s10 → 10

Top 10 slowest endpoints (95%ile)

#MethodName95%ile (ms)Average (ms)# Requests
1GET/api/v3/advisory-labels?filter_text=type&limit=10006,7005,77198
2POST/api/v3/vulnerability/analyze3,8001,058371
3GET/api/v3/sbom/{sbom_id}/download3,2003,082100
4GET/api/v3/purl?q=purl:ty=rpm&total=true2,800237127
5GET/api/v3/purl?sort=purl:name:asc&total=true2,600271122
6GET/api/v3/purl?q=purl:namespace=redhat&total=true2,300220121
7GET/api/v3/advisory?q=CVE-2021-&total=true1,900400593
8GET/api/v3/vulnerability?sort=base_score:desc&total=true1,800772197
9POST/api/v3/purl/recommend1,400907384
10GET/api/v3/sbom?q=name~redhat&total=true1,40061387

Request metrics

MethodName# Requests# FailsFail %Average (ms)Min (ms)Max (ms)Avg size (B)RPSFailures/s
sbom 16
GET/api/v3/sbom/by-package?purl={purl}89 (-11)0 (0)0%110 (+0.8)53.22391,2870.15 (0)0
GET/api/v3/sbom/count-by-package87 (-4)0 (0)0%31.6 (-5.0)4.4390.830.15 (0)0
GET/api/v3/sbom/{sbom_id}99 (-2)0 (0)0%135 (+3.3)61.83152,0150.17 (0)0
GET/api/v3/sbom/{sbom_id}/all-license-ids90 (-10)0 (0)0%23.0 (+4.4)1.9177.620.15 (0)0
GET/api/v3/sbom/{sbom_id}/download100 (+7)0 (0)0%3,082 (-19.2)2,8753,349136,458,6380.17 (0)0
GET/api/v3/sbom/{sbom_id}/license-export99 (+10)0 (0)0%36.5 (+4.7)5.122832340.17 (0)0
GET/api/v3/sbom/{sbom_id}/packages76 (-32)0 (0)0%179 (+1.9)18.650012,6480.13 (-0.1)0
GET/api/v3/sbom/{sbom_id}/related104 (+1)0 (0)0%147 (-10.6)25.137515,3720.17 (0)0
GET/api/v3/sbom?limit=10&sort=name:asc&total=true95 (-21)0 (0)0%286 (+28.3)33.91,04812,1890.16 (0)0
GET/api/v3/sbom?offset=100&limit=10&total=true201 (+18)0 (0)0%204 (+7.4)24.01,37911,9000.34 (0)0
GET/api/v3/sbom?q=label:type=product&total=true75 (-33)0 (0)0%24.6 (+4.9)2.9376.1220.13 (-0.1)0
GET/api/v3/sbom?q=license~GPL&sort=name:desc&total=true84 (-22)0 (0)0%21.6 (-4.9)2.5982.1220.14 (0)0
GET/api/v3/sbom?q=name~redhat&total=true87 (-10)0 (0)0%613 (-81.3)11.41,582220.15 (0)0
GET/api/v3/sbom?q=published>2024-01-01&total=true86 (-12)0 (0)0%216 (+5.3)27.91,10629,3170.14 (0)0
GET/api/v3/sbom?sort=ingested:desc&total=true94 (-10)0 (0)0%352 (+30.9)39.31,32629,6000.16 (0)0
GET/api/v3/sbom?total=true209 (+20)0 (0)0%187 (+4.7)24.780829,3170.35 (0)0
advisory 13
GET/api/v3/advisory/urn:uuid:{advisory_id}551 (-4)0 (0)0%58.1 (-4.4)4.361582,3950.92 (0)0
GET/api/v3/advisory/urn:uuid:{advisory_id}/download539 (-42)0 (0)0%28.7 (+0.3)4.55125178,4230.90 (-0.1)0
GET/api/v3/advisory?deprecated=Consider&total=true540 (+18)0 (0)0%77.8 (+3.2)7.153,29944,0030.90 (0)0
GET/api/v3/advisory?limit=1&total=true94 (+14)0 (0)0%69.8 (+5.1)8.091,1692,3040.16 (0)0
GET/api/v3/advisory?limit=10&sort=ingested:desc&total=true559 (+45)0 (0)0%64.2 (-7.2)5.942,76820,1930.93 (+0.1)0
GET/api/v3/advisory?offset=100&limit=10&total=true545 (-23)0 (0)0%73.9 (-17.6)6.422,63519,6450.91 (0)0
GET/api/v3/advisory?offset={offset}&limit=194 (+14)0 (0)0%277 (-8.9)51.38132,3570.16 (0)0
GET/api/v3/advisory?q=CVE-2021-&total=true593 (+31)0 (0)0%400 (-13.1)6.833,65149,7710.99 (+0.1)0
GET/api/v3/advisory?q=identifier=CVE-2022-0981&total=true548 (+17)0 (0)0%57.7 (-5.5)4.522031,9710.91 (0)0
GET/api/v3/advisory?q=modified>3 days ago&total=true507 (+7)0 (0)0%23.2 (-0.5)2.37167220.85 (0)0
GET/api/v3/advisory?q=title~openssl&total=true554 (+31)0 (0)0%52.8 (+0.9)9.31730126,4520.92 (+0.1)0
GET/api/v3/advisory?sort=modified:desc&total=true499 (-59)0 (0)0%73.5 (-3.3)6.222,30538,1280.83 (-0.1)0
GET/api/v3/advisory?total=true559 (-4)0 (0)0%142 (+23.5)8.833,49848,0460.93 (0)0
vulnerability 7
POST/api/v3/vulnerability/analyze371 (-18)0 (0)0%1,058 (-34.9)1.574,8334,384,4020.62 (0)0
GET/api/v3/vulnerability?offset=100&limit=10&total=true189 (-15)0 (0)0%65.3 (+45.3)4.858857,4520.32 (0)0
GET/api/v3/vulnerability?q=base_score>=7.0&total=true223 (+21)0 (0)0%53.5 (+10.0)2.831,71718,4410.37 (0)0
GET/api/v3/vulnerability?q=base_severity=high&total=true197 (-8)0 (0)0%50.1 (+7.5)2.881,36318,5580.33 (0)0
GET/api/v3/vulnerability?q=cwes=CWE-79&total=true172 (-29)0 (0)0%50.8 (+15.6)2.711,46818,9790.29 (0)0
GET/api/v3/vulnerability?sort=base_score:desc&total=true197 (-26)0 (0)0%772 (+176.9)2012,78114,5920.33 (0)0
GET/api/v3/vulnerability?total=true196 (-17)0 (0)0%38.0 (-2.2)2.6096218,9110.33 (0)0
purl 15
GET/api/v3/purl/base/{purl}150 (+30)0 (0)0%87.6 (+2.1)4.5539148,8270.25 (+0.1)0
GET/api/v3/purl/base?q=namespace=redhat&total=true151 (+29)0 (0)0%65.0 (-23.6)3.305232,0800.25 (0)0
GET/api/v3/purl/base?q=type=rpm&total=true128 (+10)0 (0)0%61.2 (-0.1)2.911162,0800.21 (0)0
GET/api/v3/purl/base?sort=name:asc&total=true136 (+27)0 (0)0%212 (-6.4)70.54932,9430.23 (0)0
GET/api/v3/purl/base?total=true113 (-18)0 (0)0%63.4 (-1.6)4.502452,4500.19 (0)0
POST/api/v3/purl/recommend384 (+27)0 (0)0%907 (-72.6)1351,8332,7470.64 (0)0
GET/api/v3/purl/{purl_id}134 (-8)0 (0)0%98.2 (+11.2)19.13035370.22 (0)0
GET/api/v3/purl?offset=100&limit=10&total=true149 (+33)0 (0)0%282 (-19.9)5.445,6894,4740.25 (+0.1)0
GET/api/v3/purl?q=curl&total=true124 (+15)0 (0)0%109 (-82.7)6.251,59011,7140.21 (0)0
GET/api/v3/purl?q=license~GPLv3+...&sort=name:desc&total=true119 (+5)0 (0)0%32.1 (-2.5)3.1183.3220.20 (0)0
GET/api/v3/purl?q=name=curl&total=true140 (+21)0 (0)0%34.8 (-0.8)2.0829812,0840.23 (0)0
GET/api/v3/purl?q=purl:namespace=redhat&total=true121 (-11)0 (0)0%220 (-9.6)1.923,19413,6170.20 (0)0
GET/api/v3/purl?q=purl:ty=rpm&total=true127 (+12)0 (0)0%237 (-37.7)2.323,52113,6170.21 (0)0
GET/api/v3/purl?sort=purl:name:asc&total=true122 (+25)0 (0)0%271 (-129.7)2.294,99611,1010.20 (0)0
GET/api/v3/purl?total=true143 (+24)0 (0)0%81.0 (+4.7)1.864,3989,8770.24 (0)0
license 9
GET/api/v3/license/spdx/license/{license_id}1,844 (+8)0 (0)0%41.6 (+0.2)1.041221,1433.08 (0)0
GET/api/v3/license/spdx/license?q=apache&total=true1,797 (-21)0 (0)0%3.36 (+0.4)0.9397.51653.00 (0)0
GET/api/v3/license/spdx/license?q=gpl&total=true1,821 (+57)0 (0)0%41.2 (-0.4)1.251121,9813.04 (+0.1)0
GET/api/v3/license/spdx/license?total=true1,809 (-46)0 (0)0%41.7 (+0.4)0.961331,5253.02 (-0.1)0
GET/api/v3/license?limit=10&sort=license:asc&total=true1,846 (-1)0 (0)0%35.8 (-0.6)5.971724253.08 (0)0
GET/api/v3/license?q=ASL&sort=license:desc&total=true1,922 (+106)0 (0)0%30.7 (-0.6)3.08170223.21 (+0.2)0
GET/api/v3/license?q=license~Apache&total=true1,746 (-66)0 (0)0%26.9 (-0.3)2.521181202.91 (-0.1)0
GET/api/v3/license?q=license~GPL&total=true1,857 (+23)0 (0)0%26.7 (-0.2)2.33167923.10 (0)0
GET/api/v3/license?total=true1,860 (+62)0 (0)0%70.3 (-2.5)7.212101,1013.10 (+0.1)0
analysis 3
GET/api/v3/analysis/component/{component}14,593 (+443)0 (0)0%13.0 (-0.3)1.3497.92524.36 (+0.7)0
GET/api/v3/analysis/latest/component/{cpe}14,792 (+731)0 (0)0%13.2 (-0.6)1.381092524.69 (+1.2)0
GET/api/v3/analysis/status14,844 (+854)0 (0)0%12.3 (-1.0)1.2810410324.78 (+1.4)0
importer 1
GET/api/v3/importer?total=true55,948 (+3,737)0 (0)0%9.92 (-0.7)1.01104293.39 (+6.2)0
group 3
GET/api/v3/group/sbom?parents=resolve&total=true14,862 (+759)0 (0)0%12.5 (-0.6)1.231073824.81 (+1.3)0
GET/api/v3/group/sbom?total=true15,159 (+867)0 (0)0%12.4 (-0.9)1.2099.22225.30 (+1.4)0
GET/api/v3/group/sbom?totals=true&total=true15,048 (+911)0 (0)0%12.6 (-0.8)1.221042225.12 (+1.5)0
labels 3
GET/api/v3/advisory-labels?filter_text=type&limit=100098 (+1)0 (0)0%5,771 (-105.3)4,6848,032600.16 (0)0
GET/api/v3/sbom-labels?limit=10&filter_text=&total=true80 (-17)0 (0)0%64.5 (-3.4)8.921191,0650.13 (0)0
GET/api/v3/sbom-labels?total=true80 (-9)0 (0)0%72.6 (+2.4)44.41231,0650.13 (0)0
other 2
GET/.well-known/trustify13,229 (-11)0 (0)0%41.7 (0)0.8880.41,17022.08 (0)0
POST/api/v3/ui/extract-sbom-purls13,207 (-85)0 (0)0%2.46 (0)0.9047.04522.04 (-0.1)0

Response time metrics (ms)

MethodName50%ile75%ile90%ile95%ile99%ile100%ile
sbom 16
GET/api/v3/sbom/by-package?purl={purl}120 (+10)130 (0)140 (-10)170 (-50)240 (-90)240 (-90)
GET/api/v3/sbom/count-by-package13 (-9)69 (+5)77 (-5)80 (-3)91 (0)91 (0)
GET/api/v3/sbom/{sbom_id}130 (0)140 (-10)210 (+10)230 (+10)320 (+70)320 (+10)
GET/api/v3/sbom/{sbom_id}/all-license-ids8 (+1)36 (+3)71 (+14)72 (+7)78 (+2)78 (+2)
GET/api/v3/sbom/{sbom_id}/download3,100 (0)3,100 (-100)3,200 (0)3,200 (0)3,300 (-100)3,300 (-100)
GET/api/v3/sbom/{sbom_id}/license-export20 (+7)62 (+2)75 (-6)82 (-1)280 (+193)280 (+193)
GET/api/v3/sbom/{sbom_id}/packages190 (0)280 (0)310 (+10)380 (+60)500 (+30)500 (+20)
GET/api/v3/sbom/{sbom_id}/related120 (-10)200 (-10)270 (0)290 (-10)310 (-80)380 (-220)
GET/api/v3/sbom?limit=10&sort=name:asc&total=true240 (+40)400 (+100)510 (0)690 (+100)1,000 (+210)1,000 (-100)
GET/api/v3/sbom?offset=100&limit=10&total=true140 (-10)290 (0)400 (+10)460 (-10)880 (+120)1,400 (+580)
GET/api/v3/sbom?q=label:type=product&total=true10 (+3)51 (+28)64 (-2)71 (-2)76 (-1)76 (-3)
GET/api/v3/sbom?q=license~GPL&sort=name:desc&total=true8 (-3)39 (-13)63 (-10)72 (-4)82 (-1)82 (-1)
GET/api/v3/sbom?q=name~redhat&total=true790 (-110)1,100 (0)1,300 (0)1,400 (+100)1,600 (-100)1,600 (-100)
GET/api/v3/sbom?q=published>2024-01-01&total=true150 (0)230 (-50)470 (0)590 (-10)1,100 (+280)1,100 (+280)
GET/api/v3/sbom?sort=ingested:desc&total=true280 (+70)490 (-10)680 (-20)810 (+20)1,300 (+200)1,300 (-300)
GET/api/v3/sbom?total=true130 (-30)220 (+10)400 (+30)500 (+10)600 (+30)810 (+210)
advisory 13
GET/api/v3/advisory/urn:uuid:{advisory_id}47 (0)74 (-17)100 (-10)110 (0)120 (0)160 (-60)
GET/api/v3/advisory/urn:uuid:{advisory_id}/download12 (-2)52 (+6)72 (-2)79 (0)98 (+8)130 (+30)
GET/api/v3/advisory?deprecated=Consider&total=true18 (-1)69 (-1)83 (-1)110 (0)2,000 (+300)3,300 (+800)
GET/api/v3/advisory?limit=1&total=true49 (-1)69 (-9)96 (-4)110 (-10)1,200 (+980)1,200 (+980)
GET/api/v3/advisory?limit=10&sort=ingested:desc&total=true13 (-2)63 (-2)76 (-1)83 (-3)1,700 (-200)2,800 (-200)
GET/api/v3/advisory?offset=100&limit=10&total=true75 (-1)89 (+1)100 (+5)110 (+10)180 (-1,920)2,600 (-400)
GET/api/v3/advisory?offset={offset}&limit=1260 (+20)330 (-70)580 (+50)720 (+110)810 (+80)810 (+80)
GET/api/v3/advisory?q=CVE-2021-&total=true190 (0)320 (+10)1,300 (-200)1,900 (-100)2,400 (-100)3,700 (-500)
GET/api/v3/advisory?q=identifier=CVE-2022-0981&total=true47 (-1)73 (-23)100 (-10)110 (0)130 (+10)200 (+70)
GET/api/v3/advisory?q=modified>3 days ago&total=true8 (0)44 (-4)65 (-3)71 (-1)80 (0)170 (+83)
GET/api/v3/advisory?q=title~openssl&total=true37 (+3)77 (+3)93 (+5)110 (0)280 (+20)730 (-70)
GET/api/v3/advisory?sort=modified:desc&total=true17 (+1)70 (+1)84 (+1)110 (0)1,800 (-300)2,300 (-1,500)
GET/api/v3/advisory?total=true100 (0)130 (+10)180 (0)190 (0)2,100 (+1,900)3,500 (+1,300)
vulnerability 7
POST/api/v3/vulnerability/analyze72 (-3)1,600 (-200)3,300 (+200)3,800 (0)4,600 (-100)4,800 (-500)
GET/api/v3/vulnerability?offset=100&limit=10&total=true46 (+39)50 (+41)100 (+34)110 (+39)680 (+560)880 (+190)
GET/api/v3/vulnerability?q=base_score>=7.0&total=true8 (0)31 (+21)69 (+5)86 (+13)1,200 (+230)1,700 (+500)
GET/api/v3/vulnerability?q=base_severity=high&total=true9 (+1)45 (+27)64 (-9)74 (-24)1,200 (+620)1,400 (+300)
GET/api/v3/vulnerability?q=cwes=CWE-79&total=true8 (0)36 (+22)75 (+2)130 (+20)1,400 (+990)1,500 (+620)
GET/api/v3/vulnerability?sort=base_score:desc&total=true520 (+10)980 (+280)1,600 (+620)1,800 (+700)2,100 (+700)2,800 (+1,200)
GET/api/v3/vulnerability?total=true8 (0)29 (+17)68 (0)76 (-8)710 (-100)960 (+60)
purl 15
GET/api/v3/purl/base/{purl}60 (+4)150 (+20)210 (-10)280 (+30)370 (+80)390 (+70)
GET/api/v3/purl/base?q=namespace=redhat&total=true46 (-1)82 (-10)100 (0)110 (-70)230 (-510)520 (-310)
GET/api/v3/purl/base?q=type=rpm&total=true46 (0)92 (+4)100 (+1)110 (0)110 (-10)120 (-10)
GET/api/v3/purl/base?sort=name:asc&total=true210 (0)240 (-10)300 (-20)330 (-40)420 (-50)490 (-40)
GET/api/v3/purl/base?total=true46 (0)91 (+8)100 (0)120 (+10)210 (0)240 (-110)
POST/api/v3/purl/recommend990 (-10)1,100 (-100)1,300 (-100)1,400 (-100)1,500 (-200)1,800 (0)
GET/api/v3/purl/{purl_id}92 (+10)110 (0)170 (+10)200 (+20)250 (0)300 (+30)
GET/api/v3/purl?offset=100&limit=10&total=true47 (0)88 (+5)100 (0)110 (-3,490)5,400 (+700)5,700 (+900)
GET/api/v3/purl?q=curl&total=true40 (-8)67 (-113)170 (-420)680 (-320)1,400 (+100)1,600 (-600)
GET/api/v3/purl?q=license~GPLv3+...&sort=name:desc&total=true21 (-10)55 (-7)66 (-2)71 (-1)78 (-1)83 (+2)
GET/api/v3/purl?q=name=curl&total=true12 (-15)53 (-7)69 (-1)130 (+49)210 (0)300 (+40)
GET/api/v3/purl?q=purl:namespace=redhat&total=true9 (-1)44 (-8)73 (+10)2,300 (-600)3,200 (-100)3,200 (-400)
GET/api/v3/purl?q=purl:ty=rpm&total=true13 (+6)54 (+1)65 (-6)2,800 (-400)3,400 (-300)3,500 (-500)
GET/api/v3/purl?sort=purl:name:asc&total=true16 (+1)61 (-1)76 (-12)2,600 (-1,700)4,600 (-1,200)5,000 (-800)
GET/api/v3/purl?total=true7 (-1)50 (-3)65 (+2)71 (+4)4,000 (+2,400)4,400 (-300)
license 9
GET/api/v3/license/spdx/license/{license_id}42 (-1)43 (0)44 (0)46 (+1)61 (+9)120 (+57)
GET/api/v3/license/spdx/license?q=apache&total=true3 (0)4 (0)5 (0)6 (0)30 (+22)97 (+56)
GET/api/v3/license/spdx/license?q=gpl&total=true43 (0)44 (0)45 (0)46 (0)61 (+7)110 (+45)
GET/api/v3/license/spdx/license?total=true43 (0)43 (0)45 (+1)46 (+1)72 (+19)130 (+57)
GET/api/v3/license?limit=10&sort=license:asc&total=true23 (-1)58 (-1)76 (0)83 (0)93 (0)170 (-10)
GET/api/v3/license?q=ASL&sort=license:desc&total=true15 (-2)53 (-1)70 (+2)77 (+1)89 (+3)170 (-10)
GET/api/v3/license?q=license~Apache&total=true12 (0)49 (-1)64 (0)72 (0)83 (+2)120 (+24)
GET/api/v3/license?q=license~GPL&total=true11 (0)48 (-2)61 (-3)71 (0)83 (+4)170 (+74)
GET/api/v3/license?total=true58 (-2)95 (-1)110 (0)120 (0)140 (+10)210 (+20)
analysis 3
GET/api/v3/analysis/component/{component}5 (0)7 (0)62 (0)68 (-1)75 (-1)98 (-2)
GET/api/v3/analysis/latest/component/{cpe}5 (0)7 (0)62 (-1)69 (-1)75 (-1)110 (+10)
GET/api/v3/analysis/status4 (-1)6 (-1)60 (-2)68 (-1)75 (0)100 (0)
importer 1
GET/api/v3/importer?total=true3 (-1)5 (0)49 (-6)65 (-1)73 (-1)100 (0)
group 3
GET/api/v3/group/sbom?parents=resolve&total=true4 (-1)6 (0)60 (-2)68 (-1)75 (-2)110 (-60)
GET/api/v3/group/sbom?total=true4 (0)6 (0)60 (-2)68 (-1)75 (-2)99 (-71)
GET/api/v3/group/sbom?totals=true&total=true4 (-1)6 (0)61 (-2)68 (-1)75 (-2)100 (-70)
labels 3
GET/api/v3/advisory-labels?filter_text=type&limit=10005,700 (-100)6,000 (-200)6,300 (-400)6,700 (-300)8,000 (+400)8,000 (+400)
GET/api/v3/sbom-labels?limit=10&filter_text=&total=true51 (-1)84 (-13)110 (-10)110 (-10)120 (0)120 (0)
GET/api/v3/sbom-labels?total=true54 (+2)100 (+5)110 (0)120 (0)120 (-10)120 (-10)
other 2
GET/.well-known/trustify42 (0)43 (0)44 (0)45 (0)53 (-1)80 (-20)
POST/api/v3/ui/extract-sbom-purls2 (+1)3 (0)5 (0)6 (0)8 (0)47 (+8)

Failures

No failures recorded.

Exceptions

No exceptions raised in the locustfile.