← All runs

Trustify load tests · 2026-10-22 04:12 UTC

Target trustify (scale snapshot, CI) · 2026-10-22 04:12:02 UTC → 04:22:00 UTC · Users 10 · Deltas vs previous run (2026-10-22 01:35 UTC, 2026-10-22T00-45-42_7f38deb)

Type daily · Dataset scale-20260317T023702Z · Scenario etc/scenarios/main/full-20260317T023702Z.json5 · Branch main · Commit 7f38deb34acb · Workflow run

Duration
9m 58s
Total requests
208,238 (+8,153)
Failure rate
0.0%
0 failed requests
Throughput
347.7 req/s (+13.7)
Latency 95%ile
70 ms (-1)
Latency 99%ile
180 ms (-10)
Endpoints
72
0 with failures

Over time

Throughput

Requests and failures per second

Response time

Percentiles over Locust's rolling window, ms

Users

Concurrent simulated users

Load plan

ActionStartedStoppedElapsedUsers
Increasing04:12:0204:12:060m 04s2 → 10
Maintaining04:12:0604:22:009m 54s10 → 10

Top 10 slowest endpoints (95%ile)

#MethodName95%ile (ms)Average (ms)# Requests
1GET/api/v3/advisory-labels?filter_text=type&limit=10006,8005,90994
2GET/api/v3/purl?sort=purl:name:asc&total=true4,300341113
3POST/api/v3/vulnerability/analyze4,0001,164345
4GET/api/v3/sbom/{sbom_id}/download3,3003,11989
5GET/api/v3/purl?q=purl:namespace=redhat&total=true2,900231125
6GET/api/v3/purl?q=purl:ty=rpm&total=true2,900236115
7GET/api/v3/advisory?q=CVE-2021-&total=true1,900385557
8POST/api/v3/purl/recommend1,500922380
9GET/api/v3/purl?q=curl&total=true1,500234106
10GET/api/v3/sbom?q=name~redhat&total=true1,50078284

Request metrics

MethodName# Requests# FailsFail %Average (ms)Min (ms)Max (ms)Avg size (B)RPSFailures/s
sbom 16
GET/api/v3/sbom/by-package?purl={purl}93 (+4)0 (0)0%110 (+0.3)25.02431,2870.16 (0)0
GET/api/v3/sbom/count-by-package83 (-4)0 (0)0%38.2 (+6.6)3.0091.530.14 (0)0
GET/api/v3/sbom/{sbom_id}105 (+6)0 (0)0%127 (-7.3)57.52612,0150.18 (0)0
GET/api/v3/sbom/{sbom_id}/all-license-ids105 (+15)0 (0)0%22.0 (-1.1)2.1078.620.18 (0)0
GET/api/v3/sbom/{sbom_id}/download89 (-11)0 (0)0%3,119 (+37.8)2,9663,427136,458,6380.15 (0)0
GET/api/v3/sbom/{sbom_id}/license-export87 (-12)0 (0)0%31.4 (-5.0)4.601122340.15 (0)0
GET/api/v3/sbom/{sbom_id}/packages88 (+12)0 (0)0%156 (-22.6)16.237512,6480.15 (0)0
GET/api/v3/sbom/{sbom_id}/related82 (-22)0 (0)0%157 (+9.5)27.751615,3720.14 (0)0
GET/api/v3/sbom?limit=10&sort=name:asc&total=true91 (-4)0 (0)0%344 (+57.5)33.21,37912,1890.15 (0)0
GET/api/v3/sbom?offset=100&limit=10&total=true193 (-8)0 (0)0%273 (+68.9)23.91,17211,9410.32 (0)0
GET/api/v3/sbom?q=label:type=product&total=true108 (+33)0 (0)0%23.9 (-0.7)2.0988.4220.18 (+0.1)0
GET/api/v3/sbom?q=license~GPL&sort=name:desc&total=true120 (+36)0 (0)0%26.6 (+4.9)2.5980.9220.20 (+0.1)0
GET/api/v3/sbom?q=name~redhat&total=true84 (-3)0 (0)0%782 (+168.6)11.01,676220.14 (0)0
GET/api/v3/sbom?q=published>2024-01-01&total=true100 (+14)0 (0)0%212 (-4.1)34.478429,3170.17 (0)0
GET/api/v3/sbom?sort=ingested:desc&total=true98 (+4)0 (0)0%364 (+11.9)29.81,24429,6000.16 (0)0
GET/api/v3/sbom?total=true203 (-6)0 (0)0%173 (-14.7)27.471129,3170.34 (0)0
advisory 13
GET/api/v3/advisory/urn:uuid:{advisory_id}620 (+69)0 (0)0%56.6 (-1.4)3.821572,3951.04 (+0.1)0
GET/api/v3/advisory/urn:uuid:{advisory_id}/download587 (+48)0 (0)0%26.6 (-2.1)4.7199.7178,4230.98 (+0.1)0
GET/api/v3/advisory?deprecated=Consider&total=true538 (-2)0 (0)0%77.5 (-0.3)7.443,02644,0030.90 (0)0
GET/api/v3/advisory?limit=1&total=true105 (+11)0 (0)0%62.2 (-7.6)6.951532,3230.18 (0)0
GET/api/v3/advisory?limit=10&sort=ingested:desc&total=true570 (+11)0 (0)0%72.4 (+8.3)3.993,22320,1930.95 (0)0
GET/api/v3/advisory?offset=100&limit=10&total=true558 (+13)0 (0)0%84.0 (+10.0)6.623,47419,4810.93 (0)0
GET/api/v3/advisory?offset={offset}&limit=1105 (+11)0 (0)0%309 (+31.8)15.28481,9240.18 (0)0
GET/api/v3/advisory?q=CVE-2021-&total=true557 (-36)0 (0)0%385 (-15.8)25.73,74949,3930.93 (-0.1)0
GET/api/v3/advisory?q=identifier=CVE-2022-0981&total=true597 (+49)0 (0)0%58.2 (+0.5)4.152171,9711.00 (+0.1)0
GET/api/v3/advisory?q=modified>3 days ago&total=true549 (+42)0 (0)0%23.0 (-0.2)2.2494.2220.92 (+0.1)0
GET/api/v3/advisory?q=title~openssl&total=true575 (+21)0 (0)0%51.2 (-1.6)9.38710126,4520.96 (0)0
GET/api/v3/advisory?sort=modified:desc&total=true550 (+51)0 (0)0%82.3 (+8.7)4.933,12438,1280.92 (+0.1)0
GET/api/v3/advisory?total=true586 (+27)0 (0)0%129 (-12.4)9.352,95948,7460.98 (0)0
vulnerability 7
POST/api/v3/vulnerability/analyze345 (-26)0 (0)0%1,164 (+106.4)2.016,0294,243,3420.58 (0)0
GET/api/v3/vulnerability?offset=100&limit=10&total=true167 (-22)0 (0)0%40.7 (-24.6)2.801,0759,1900.28 (0)0
GET/api/v3/vulnerability?q=base_score>=7.0&total=true160 (-63)0 (0)0%73.5 (+19.9)3.081,80819,1640.27 (-0.1)0
GET/api/v3/vulnerability?q=base_severity=high&total=true178 (-19)0 (0)0%55.7 (+5.7)2.621,28020,3290.30 (0)0
GET/api/v3/vulnerability?q=cwes=CWE-79&total=true172 (0)0 (0)0%52.2 (+1.4)4.121,36722,4100.29 (0)0
GET/api/v3/vulnerability?sort=base_score:desc&total=true184 (-13)0 (0)0%817 (+44.8)1782,77925,3070.31 (0)0
GET/api/v3/vulnerability?total=true191 (-5)0 (0)0%33.2 (-4.8)2.9091919,5280.32 (0)0
purl 15
GET/api/v3/purl/base/{purl}122 (-28)0 (0)0%94.3 (+6.7)7.1838448,8270.20 (0)0
GET/api/v3/purl/base?q=namespace=redhat&total=true97 (-54)0 (0)0%74.7 (+9.7)4.467232,0800.16 (-0.1)0
GET/api/v3/purl/base?q=type=rpm&total=true123 (-5)0 (0)0%58.7 (-2.5)2.431242,0800.21 (0)0
GET/api/v3/purl/base?sort=name:asc&total=true128 (-8)0 (0)0%199 (-13.7)77.73412,9430.21 (0)0
GET/api/v3/purl/base?total=true123 (+10)0 (0)0%62.6 (-0.8)3.612042,4500.21 (0)0
POST/api/v3/purl/recommend380 (-4)0 (0)0%922 (+15.1)1741,9222,7470.63 (0)0
GET/api/v3/purl/{purl_id}118 (-16)0 (0)0%86.8 (-11.4)21.82595370.20 (0)0
GET/api/v3/purl?offset=100&limit=10&total=true123 (-26)0 (0)0%270 (-12.2)2.118,0274,1570.21 (0)0
GET/api/v3/purl?q=curl&total=true106 (-18)0 (0)0%234 (+125.2)2.422,50410,6570.18 (0)0
GET/api/v3/purl?q=license~GPLv3+...&sort=name:desc&total=true100 (-19)0 (0)0%34.5 (+2.4)5.70113220.17 (0)0
GET/api/v3/purl?q=name=curl&total=true103 (-37)0 (0)0%37.4 (+2.6)2.2626912,0840.17 (-0.1)0
GET/api/v3/purl?q=purl:namespace=redhat&total=true125 (+4)0 (0)0%231 (+11.2)2.323,82910,8510.21 (0)0
GET/api/v3/purl?q=purl:ty=rpm&total=true115 (-12)0 (0)0%236 (-1.2)1.973,49310,8320.19 (0)0
GET/api/v3/purl?sort=purl:name:asc&total=true113 (-9)0 (0)0%341 (+70.1)2.055,16011,1010.19 (0)0
GET/api/v3/purl?total=true125 (-18)0 (0)0%129 (+47.7)1.785,14410,7660.21 (0)0
license 9
GET/api/v3/license/spdx/license/{license_id}1,846 (+2)0 (0)0%41.0 (-0.7)1.0777.01,1433.08 (0)0
GET/api/v3/license/spdx/license?q=apache&total=true1,905 (+108)0 (0)0%2.65 (-0.7)0.9527.81653.18 (+0.2)0
GET/api/v3/license/spdx/license?q=gpl&total=true1,914 (+93)0 (0)0%41.7 (+0.5)1.0974.11,9813.20 (+0.2)0
GET/api/v3/license/spdx/license?total=true1,886 (+77)0 (0)0%41.0 (-0.6)1.0369.01,5253.15 (+0.1)0
GET/api/v3/license?limit=10&sort=license:asc&total=true1,953 (+107)0 (0)0%33.0 (-2.8)5.071044253.26 (+0.2)0
GET/api/v3/license?q=ASL&sort=license:desc&total=true1,946 (+24)0 (0)0%28.4 (-2.3)3.2391.3223.25 (0)0
GET/api/v3/license?q=license~Apache&total=true1,909 (+163)0 (0)0%25.3 (-1.5)2.4692.91203.19 (+0.3)0
GET/api/v3/license?q=license~GPL&total=true1,885 (+28)0 (0)0%25.1 (-1.6)2.3396.3923.15 (0)0
GET/api/v3/license?total=true1,915 (+55)0 (0)0%69.0 (-1.3)5.911841,1013.20 (+0.1)0
analysis 3
GET/api/v3/analysis/component/{component}15,723 (+1,130)0 (0)0%12.3 (-0.8)1.2896.22526.25 (+1.9)0
GET/api/v3/analysis/latest/component/{cpe}15,503 (+711)0 (0)0%12.3 (-0.9)1.341072525.88 (+1.2)0
GET/api/v3/analysis/status15,497 (+653)0 (0)0%11.9 (-0.4)1.2611210325.87 (+1.1)0
importer 1
GET/api/v3/importer?total=true57,801 (+1,853)0 (0)0%9.56 (-0.4)1.00118296.50 (+3.1)0
group 3
GET/api/v3/group/sbom?parents=resolve&total=true16,179 (+1,317)0 (0)0%11.5 (-0.9)1.221073827.01 (+2.2)0
GET/api/v3/group/sbom?total=true16,073 (+914)0 (0)0%11.7 (-0.7)1.2099.52226.83 (+1.5)0
GET/api/v3/group/sbom?totals=true&total=true16,265 (+1,217)0 (0)0%11.5 (-1.0)1.231042227.16 (+2.0)0
labels 3
GET/api/v3/advisory-labels?filter_text=type&limit=100094 (-4)0 (0)0%5,909 (+138.4)5,0577,246600.16 (0)0
GET/api/v3/sbom-labels?limit=10&filter_text=&total=true90 (+10)0 (0)0%62.8 (-1.7)9.431191,0650.15 (0)0
GET/api/v3/sbom-labels?total=true90 (+10)0 (0)0%68.6 (-4.0)12.31281,0650.15 (0)0
other 2
GET/.well-known/trustify12,989 (-240)0 (0)0%42.1 (+0.4)0.871301,17021.69 (-0.4)0
POST/api/v3/ui/extract-sbom-purls13,151 (-56)0 (0)0%2.85 (+0.4)0.9083.14521.96 (-0.1)0

Response time metrics (ms)

MethodName50%ile75%ile90%ile95%ile99%ile100%ile
sbom 16
GET/api/v3/sbom/by-package?purl={purl}110 (-10)130 (0)160 (+20)210 (+40)240 (0)240 (0)
GET/api/v3/sbom/count-by-package36 (+23)68 (-1)77 (0)82 (+2)92 (+1)92 (+1)
GET/api/v3/sbom/{sbom_id}130 (0)140 (0)170 (-40)220 (-10)240 (-80)260 (-60)
GET/api/v3/sbom/{sbom_id}/all-license-ids8 (0)40 (+4)69 (-2)75 (+3)77 (-1)79 (+1)
GET/api/v3/sbom/{sbom_id}/download3,100 (0)3,200 (+100)3,200 (0)3,300 (+100)3,400 (+100)3,400 (+100)
GET/api/v3/sbom/{sbom_id}/license-export16 (-4)51 (-11)74 (-1)81 (-1)110 (-170)110 (-170)
GET/api/v3/sbom/{sbom_id}/packages130 (-60)250 (-30)300 (-10)310 (-70)370 (-130)370 (-130)
GET/api/v3/sbom/{sbom_id}/related160 (+40)200 (0)240 (-30)290 (0)520 (+210)520 (+140)
GET/api/v3/sbom?limit=10&sort=name:asc&total=true290 (+50)470 (+70)600 (+90)860 (+170)1,400 (+400)1,400 (+400)
GET/api/v3/sbom?offset=100&limit=10&total=true190 (+50)410 (+120)570 (+170)600 (+140)1,100 (+220)1,200 (-200)
GET/api/v3/sbom?q=label:type=product&total=true7 (-3)46 (-5)68 (+4)73 (+2)88 (+12)88 (+12)
GET/api/v3/sbom?q=license~GPL&sort=name:desc&total=true10 (+2)54 (+15)70 (+7)73 (+1)80 (-2)81 (-1)
GET/api/v3/sbom?q=name~redhat&total=true940 (+150)1,200 (+100)1,400 (+100)1,500 (+100)1,700 (+100)1,700 (+100)
GET/api/v3/sbom?q=published>2024-01-01&total=true120 (-30)310 (+80)480 (+10)520 (-70)780 (-320)780 (-320)
GET/api/v3/sbom?sort=ingested:desc&total=true390 (+110)520 (+30)600 (-80)690 (-120)1,200 (-100)1,200 (-100)
GET/api/v3/sbom?total=true110 (-20)190 (-30)400 (0)500 (0)620 (+20)710 (-100)
advisory 13
GET/api/v3/advisory/urn:uuid:{advisory_id}46 (-1)71 (-3)100 (0)110 (0)120 (0)160 (0)
GET/api/v3/advisory/urn:uuid:{advisory_id}/download12 (0)44 (-8)69 (-3)74 (-5)85 (-13)100 (-30)
GET/api/v3/advisory?deprecated=Consider&total=true16 (-2)68 (-1)84 (+1)120 (+10)1,900 (-100)3,000 (-300)
GET/api/v3/advisory?limit=1&total=true50 (+1)75 (+6)100 (+4)110 (0)130 (-1,070)150 (-1,050)
GET/api/v3/advisory?limit=10&sort=ingested:desc&total=true14 (+1)63 (0)75 (-1)83 (0)2,300 (+600)3,200 (+400)
GET/api/v3/advisory?offset=100&limit=10&total=true72 (-3)87 (-2)95 (-5)100 (-10)290 (+110)3,500 (+900)
GET/api/v3/advisory?offset={offset}&limit=1280 (+20)440 (+110)600 (+20)700 (-20)830 (+20)850 (+40)
GET/api/v3/advisory?q=CVE-2021-&total=true190 (0)300 (-20)1,200 (-100)1,900 (0)2,500 (+100)3,700 (0)
GET/api/v3/advisory?q=identifier=CVE-2022-0981&total=true47 (0)73 (0)100 (0)110 (0)120 (-10)220 (+20)
GET/api/v3/advisory?q=modified>3 days ago&total=true8 (0)44 (0)67 (+2)72 (+1)83 (+3)94 (-76)
GET/api/v3/advisory?q=title~openssl&total=true35 (-2)76 (-1)93 (0)110 (0)290 (+10)710 (-20)
GET/api/v3/advisory?sort=modified:desc&total=true16 (-1)67 (-3)81 (-3)100 (-10)2,500 (+700)3,100 (+800)
GET/api/v3/advisory?total=true100 (0)120 (-10)180 (0)190 (0)390 (-1,710)3,000 (-500)
vulnerability 7
POST/api/v3/vulnerability/analyze65 (-7)2,100 (+500)3,400 (+100)4,000 (+200)4,700 (+100)6,000 (+1,200)
GET/api/v3/vulnerability?offset=100&limit=10&total=true7 (-39)13 (-37)70 (-30)74 (-36)810 (+130)1,100 (+220)
GET/api/v3/vulnerability?q=base_score>=7.0&total=true9 (+1)18 (-13)76 (+7)390 (+304)1,500 (+300)1,800 (+100)
GET/api/v3/vulnerability?q=base_severity=high&total=true9 (0)16 (-29)73 (+9)270 (+196)1,100 (-100)1,300 (-100)
GET/api/v3/vulnerability?q=cwes=CWE-79&total=true8 (0)12 (-24)70 (-5)250 (+120)920 (-480)1,400 (-100)
GET/api/v3/vulnerability?sort=base_score:desc&total=true720 (+200)1,100 (+120)1,300 (-300)1,500 (-300)2,000 (-100)2,800 (0)
GET/api/v3/vulnerability?total=true8 (0)13 (-16)65 (-3)72 (-4)620 (-90)920 (-40)
purl 15
GET/api/v3/purl/base/{purl}57 (-3)180 (+30)250 (+40)300 (+20)370 (0)380 (-10)
GET/api/v3/purl/base?q=namespace=redhat&total=true46 (0)80 (-2)100 (0)140 (+30)720 (+490)720 (+200)
GET/api/v3/purl/base?q=type=rpm&total=true47 (+1)81 (-11)100 (0)110 (0)110 (0)120 (0)
GET/api/v3/purl/base?sort=name:asc&total=true200 (-10)230 (-10)290 (-10)320 (-10)340 (-80)340 (-150)
GET/api/v3/purl/base?total=true46 (0)78 (-13)100 (0)110 (-10)200 (-10)200 (-40)
POST/api/v3/purl/recommend970 (-20)1,100 (0)1,300 (0)1,500 (+100)1,600 (+100)1,900 (+100)
GET/api/v3/purl/{purl_id}87 (-5)100 (-10)150 (-20)160 (-40)180 (-70)260 (-40)
GET/api/v3/purl?offset=100&limit=10&total=true46 (-1)74 (-14)97 (-3)110 (0)4,800 (-600)8,000 (+2,300)
GET/api/v3/purl?q=curl&total=true51 (+11)130 (+63)600 (+430)1,500 (+820)2,500 (+1,100)2,500 (+900)
GET/api/v3/purl?q=license~GPLv3+...&sort=name:desc&total=true17 (-4)61 (+6)71 (+5)75 (+4)110 (+32)110 (+27)
GET/api/v3/purl?q=name=curl&total=true15 (+3)50 (-3)76 (+7)180 (+50)200 (-10)270 (-30)
GET/api/v3/purl?q=purl:namespace=redhat&total=true9 (0)51 (+7)64 (-9)2,900 (+600)3,700 (+500)3,800 (+600)
GET/api/v3/purl?q=purl:ty=rpm&total=true11 (-2)50 (-4)61 (-4)2,900 (+100)3,300 (-100)3,500 (0)
GET/api/v3/purl?sort=purl:name:asc&total=true16 (0)55 (-6)66 (-10)4,300 (+1,700)5,200 (+600)5,200 (+200)
GET/api/v3/purl?total=true8 (+1)49 (-1)61 (-4)64 (-7)4,100 (+100)5,100 (+700)
license 9
GET/api/v3/license/spdx/license/{license_id}42 (0)43 (0)44 (0)45 (-1)53 (-8)77 (-43)
GET/api/v3/license/spdx/license?q=apache&total=true2 (-1)3 (-1)4 (-1)5 (-1)7 (-23)28 (-69)
GET/api/v3/license/spdx/license?q=gpl&total=true43 (0)43 (-1)44 (-1)45 (-1)56 (-5)74 (-36)
GET/api/v3/license/spdx/license?total=true42 (-1)43 (0)44 (-1)45 (-1)50 (-22)69 (-61)
GET/api/v3/license?limit=10&sort=license:asc&total=true19 (-4)56 (-2)71 (-5)79 (-4)87 (-6)100 (-70)
GET/api/v3/license?q=ASL&sort=license:desc&total=true13 (-2)51 (-2)64 (-6)73 (-4)82 (-7)91 (-79)
GET/api/v3/license?q=license~Apache&total=true11 (-1)47 (-2)60 (-4)71 (-1)79 (-4)93 (-27)
GET/api/v3/license?q=license~GPL&total=true11 (0)45 (-3)62 (+1)71 (0)79 (-4)96 (-74)
GET/api/v3/license?total=true56 (-2)93 (-2)110 (0)120 (0)130 (-10)180 (-30)
analysis 3
GET/api/v3/analysis/component/{component}5 (0)6 (-1)59 (-3)67 (-1)75 (0)96 (-2)
GET/api/v3/analysis/latest/component/{cpe}5 (0)6 (-1)59 (-3)67 (-2)75 (0)110 (0)
GET/api/v3/analysis/status4 (0)6 (0)58 (-2)67 (-1)75 (0)110 (+10)
importer 1
GET/api/v3/importer?total=true3 (0)5 (0)33 (-16)64 (-1)72 (-1)120 (+20)
group 3
GET/api/v3/group/sbom?parents=resolve&total=true4 (0)6 (0)57 (-3)67 (-1)74 (-1)110 (0)
GET/api/v3/group/sbom?total=true4 (0)6 (0)59 (-1)67 (-1)74 (-1)100 (+1)
GET/api/v3/group/sbom?totals=true&total=true4 (0)6 (0)57 (-4)67 (-1)74 (-1)100 (0)
labels 3
GET/api/v3/advisory-labels?filter_text=type&limit=10005,900 (+200)6,100 (+100)6,500 (+200)6,800 (+100)7,200 (-800)7,200 (-800)
GET/api/v3/sbom-labels?limit=10&filter_text=&total=true49 (-2)85 (+1)110 (0)110 (0)120 (0)120 (0)
GET/api/v3/sbom-labels?total=true53 (-1)92 (-8)110 (0)110 (-10)130 (+10)130 (+10)
other 2
GET/.well-known/trustify42 (0)43 (0)44 (0)45 (0)62 (+9)130 (+50)
POST/api/v3/ui/extract-sbom-purls1 (-1)3 (0)5 (0)6 (0)21 (+13)83 (+36)

Failures

No failures recorded.

Exceptions

No exceptions raised in the locustfile.