← All runs

Trustify load tests · 2026-10-22 07:20 UTC

Target trustify (scale snapshot, CI) · 2026-10-22 07:20:19 UTC → 07:30:17 UTC · Users 10 · Deltas vs previous run (2026-10-22 04:12 UTC, 2026-10-22T03-22-00_7f38deb)

Type daily · Dataset scale-20260317T023702Z · Scenario etc/scenarios/main/full-20260317T023702Z.json5 · Branch main · Commit 7f38deb34acb · Workflow run

Duration
9m 58s
Total requests
190,341 (-17,897)
Failure rate
0.0%
0 failed requests
Throughput
317.6 req/s (-30.0)
Latency 95%ile
72 ms (+2)
Latency 99%ile
200 ms (+20)
Endpoints
72
0 with failures

Over time

Throughput

Requests and failures per second

Response time

Percentiles over Locust's rolling window, ms

Users

Concurrent simulated users

Load plan

ActionStartedStoppedElapsedUsers
Increasing07:20:1907:20:230m 04s2 → 10
Maintaining07:20:2307:30:179m 54s10 → 10

Top 10 slowest endpoints (95%ile)

#MethodName95%ile (ms)Average (ms)# Requests
1GET/api/v3/advisory-labels?filter_text=type&limit=10006,6005,80197
2POST/api/v3/vulnerability/analyze3,8001,146369
3GET/api/v3/sbom/{sbom_id}/download3,4003,15397
4GET/api/v3/purl?sort=purl:name:asc&total=true3,200283133
5GET/api/v3/purl?q=purl:ty=rpm&total=true2,600215120
6GET/api/v3/purl?q=purl:namespace=redhat&total=true2,500236118
7GET/api/v3/advisory?q=CVE-2021-&total=true1,800394561
8GET/api/v3/vulnerability?sort=base_score:desc&total=true1,600746165
9POST/api/v3/purl/recommend1,500945383
10GET/api/v3/sbom?q=name~redhat&total=true1,50064085

Request metrics

MethodName# Requests# FailsFail %Average (ms)Min (ms)Max (ms)Avg size (B)RPSFailures/s
sbom 16
GET/api/v3/sbom/by-package?purl={purl}90 (-3)0 (0)0%112 (+1.7)56.22421,2870.15 (0)0
GET/api/v3/sbom/count-by-package95 (+12)0 (0)0%30.9 (-7.3)5.3791.930.16 (0)0
GET/api/v3/sbom/{sbom_id}98 (-7)0 (0)0%139 (+11.7)60.32942,0150.16 (0)0
GET/api/v3/sbom/{sbom_id}/all-license-ids85 (-20)0 (0)0%26.5 (+4.5)3.7590.120.14 (0)0
GET/api/v3/sbom/{sbom_id}/download97 (+8)0 (0)0%3,153 (+33.4)2,9723,523136,458,6380.16 (0)0
GET/api/v3/sbom/{sbom_id}/license-export108 (+21)0 (0)0%34.1 (+2.7)4.2785.22340.18 (0)0
GET/api/v3/sbom/{sbom_id}/packages86 (-2)0 (0)0%171 (+15.3)18.948012,6480.14 (0)0
GET/api/v3/sbom/{sbom_id}/related87 (+5)0 (0)0%159 (+2.3)27.739915,3720.15 (0)0
GET/api/v3/sbom?limit=10&sort=name:asc&total=true96 (+5)0 (0)0%289 (-54.5)49.51,07712,1890.16 (0)0
GET/api/v3/sbom?offset=100&limit=10&total=true199 (+6)0 (0)0%211 (-62.1)28.61,09511,9410.33 (0)0
GET/api/v3/sbom?q=label:type=product&total=true102 (-6)0 (0)0%23.8 (-0.1)2.0985.0220.17 (0)0
GET/api/v3/sbom?q=license~GPL&sort=name:desc&total=true89 (-31)0 (0)0%29.6 (+3.0)4.1780.8220.15 (-0.1)0
GET/api/v3/sbom?q=name~redhat&total=true85 (+1)0 (0)0%640 (-142.4)10.81,610220.14 (0)0
GET/api/v3/sbom?q=published>2024-01-01&total=true82 (-18)0 (0)0%203 (-8.8)33.596229,3170.14 (0)0
GET/api/v3/sbom?sort=ingested:desc&total=true86 (-12)0 (0)0%366 (+1.7)37.91,00629,6000.14 (0)0
GET/api/v3/sbom?total=true188 (-15)0 (0)0%205 (+32.5)28.391529,3170.31 (0)0
advisory 13
GET/api/v3/advisory/urn:uuid:{advisory_id}554 (-66)0 (0)0%63.4 (+6.7)4.811362,3950.92 (-0.1)0
GET/api/v3/advisory/urn:uuid:{advisory_id}/download576 (-11)0 (0)0%28.7 (+2.1)4.8096.0178,4230.96 (0)0
GET/api/v3/advisory?deprecated=Consider&total=true580 (+42)0 (0)0%73.7 (-3.7)6.242,80044,0030.97 (+0.1)0
GET/api/v3/advisory?limit=1&total=true94 (-11)0 (0)0%108 (+45.6)27.02,4982,3540.16 (0)0
GET/api/v3/advisory?limit=10&sort=ingested:desc&total=true529 (-41)0 (0)0%75.9 (+3.5)4.522,60420,1930.88 (-0.1)0
GET/api/v3/advisory?offset=100&limit=10&total=true577 (+19)0 (0)0%83.3 (-0.7)6.382,73019,7110.96 (0)0
GET/api/v3/advisory?offset={offset}&limit=194 (-11)0 (0)0%270 (-39.2)50.37591,8880.16 (0)0
GET/api/v3/advisory?q=CVE-2021-&total=true561 (+4)0 (0)0%394 (+9.8)24.43,77949,7740.94 (0)0
GET/api/v3/advisory?q=identifier=CVE-2022-0981&total=true571 (-26)0 (0)0%63.5 (+5.3)4.361311,9710.95 (0)0
GET/api/v3/advisory?q=modified>3 days ago&total=true563 (+14)0 (0)0%24.3 (+1.3)2.4287.1220.94 (0)0
GET/api/v3/advisory?q=title~openssl&total=true539 (-36)0 (0)0%54.3 (+3.1)9.811,870126,4520.90 (-0.1)0
GET/api/v3/advisory?sort=modified:desc&total=true555 (+5)0 (0)0%79.8 (-2.4)7.182,70738,1280.93 (0)0
GET/api/v3/advisory?total=true579 (-7)0 (0)0%114 (-15.8)7.482,09647,9220.97 (0)0
vulnerability 7
POST/api/v3/vulnerability/analyze369 (+24)0 (0)0%1,146 (-18.4)1.876,9374,555,1010.62 (0)0
GET/api/v3/vulnerability?offset=100&limit=10&total=true203 (+36)0 (0)0%71.2 (+30.5)4.941,2357,5320.34 (+0.1)0
GET/api/v3/vulnerability?q=base_score>=7.0&total=true197 (+37)0 (0)0%46.1 (-27.4)3.311,18718,5220.33 (+0.1)0
GET/api/v3/vulnerability?q=base_severity=high&total=true195 (+17)0 (0)0%51.5 (-4.2)2.751,28818,5530.33 (0)0
GET/api/v3/vulnerability?q=cwes=CWE-79&total=true172 (0)0 (0)0%54.4 (+2.2)3.151,33118,9630.29 (0)0
GET/api/v3/vulnerability?sort=base_score:desc&total=true165 (-19)0 (0)0%746 (-70.4)1942,42314,5400.28 (0)0
GET/api/v3/vulnerability?total=true197 (+6)0 (0)0%35.2 (+2.1)2.891,01518,7800.33 (0)0
purl 15
GET/api/v3/purl/base/{purl}124 (+2)0 (0)0%82.8 (-11.5)8.2938748,8270.21 (0)0
GET/api/v3/purl/base?q=namespace=redhat&total=true121 (+24)0 (0)0%84.9 (+10.2)5.371,0692,0800.20 (0)0
GET/api/v3/purl/base?q=type=rpm&total=true111 (-12)0 (0)0%64.3 (+5.6)4.561302,0800.19 (0)0
GET/api/v3/purl/base?sort=name:asc&total=true119 (-9)0 (0)0%217 (+18.2)40.25282,9430.20 (0)0
GET/api/v3/purl/base?total=true132 (+9)0 (0)0%61.8 (-0.8)4.362312,4500.22 (0)0
POST/api/v3/purl/recommend383 (+3)0 (0)0%945 (+22.4)1401,8942,7470.64 (0)0
GET/api/v3/purl/{purl_id}122 (+4)0 (0)0%93.6 (+6.8)16.72905370.20 (0)0
GET/api/v3/purl?offset=100&limit=10&total=true125 (+2)0 (0)0%194 (-75.2)4.755,0164,4740.21 (0)0
GET/api/v3/purl?q=curl&total=true125 (+19)0 (0)0%114 (-119.8)6.272,07111,7140.21 (0)0
GET/api/v3/purl?q=license~GPLv3+...&sort=name:desc&total=true101 (+1)0 (0)0%39.6 (+5.1)6.7076.9220.17 (0)0
GET/api/v3/purl?q=name=curl&total=true102 (-1)0 (0)0%37.9 (+0.5)2.2728912,0840.17 (0)0
GET/api/v3/purl?q=purl:namespace=redhat&total=true118 (-7)0 (0)0%236 (+4.1)2.173,87913,6170.20 (0)0
GET/api/v3/purl?q=purl:ty=rpm&total=true120 (+5)0 (0)0%215 (-20.5)2.123,20413,6170.20 (0)0
GET/api/v3/purl?sort=purl:name:asc&total=true133 (+20)0 (0)0%283 (-58.4)2.225,28211,1010.22 (0)0
GET/api/v3/purl?total=true120 (-5)0 (0)0%199 (+70.8)1.975,1569,8770.20 (0)0
license 9
GET/api/v3/license/spdx/license/{license_id}1,863 (+17)0 (0)0%41.6 (+0.7)1.1875.91,1433.11 (0)0
GET/api/v3/license/spdx/license?q=apache&total=true1,805 (-100)0 (0)0%2.97 (+0.3)1.0028.51653.01 (-0.2)0
GET/api/v3/license/spdx/license?q=gpl&total=true1,810 (-104)0 (0)0%42.1 (+0.4)1.0775.51,9813.02 (-0.2)0
GET/api/v3/license/spdx/license?total=true1,760 (-126)0 (0)0%41.6 (+0.5)1.1770.81,5252.94 (-0.2)0
GET/api/v3/license?limit=10&sort=license:asc&total=true1,765 (-188)0 (0)0%36.4 (+3.4)5.441874252.95 (-0.3)0
GET/api/v3/license?q=ASL&sort=license:desc&total=true1,868 (-78)0 (0)0%31.4 (+3.0)3.12137223.12 (-0.1)0
GET/api/v3/license?q=license~Apache&total=true1,804 (-105)0 (0)0%26.3 (+0.9)2.611591203.01 (-0.2)0
GET/api/v3/license?q=license~GPL&total=true1,899 (+14)0 (0)0%25.7 (+0.6)2.39103923.17 (0)0
GET/api/v3/license?total=true1,831 (-84)0 (0)0%72.7 (+3.8)7.391631,1013.06 (-0.1)0
analysis 3
GET/api/v3/analysis/component/{component}13,970 (-1,753)0 (0)0%13.7 (+1.4)1.3698.72523.31 (-2.9)0
GET/api/v3/analysis/latest/component/{cpe}13,885 (-1,618)0 (0)0%13.8 (+1.5)1.431732523.17 (-2.7)0
GET/api/v3/analysis/status13,894 (-1,603)0 (0)0%13.4 (+1.5)1.2710210323.19 (-2.7)0
importer 1
GET/api/v3/importer?total=true51,513 (-6,288)0 (0)0%10.7 (+1.2)1.00116285.96 (-10.5)0
group 3
GET/api/v3/group/sbom?parents=resolve&total=true14,165 (-2,014)0 (0)0%13.5 (+2.0)1.271683823.64 (-3.4)0
GET/api/v3/group/sbom?total=true14,132 (-1,941)0 (0)0%13.1 (+1.4)1.271762223.58 (-3.3)0
GET/api/v3/group/sbom?totals=true&total=true14,179 (-2,086)0 (0)0%13.2 (+1.7)1.251712223.66 (-3.5)0
labels 3
GET/api/v3/advisory-labels?filter_text=type&limit=100097 (+3)0 (0)0%5,801 (-108.0)4,9217,001600.16 (0)0
GET/api/v3/sbom-labels?limit=10&filter_text=&total=true90 (0)0 (0)0%67.3 (+4.6)9.691271,0650.15 (0)0
GET/api/v3/sbom-labels?total=true96 (+6)0 (0)0%72.2 (+3.6)45.71341,0650.16 (0)0
other 2
GET/.well-known/trustify13,158 (+169)0 (0)0%41.8 (-0.3)0.8678.61,17921.96 (+0.3)0
POST/api/v3/ui/extract-sbom-purls13,158 (+7)0 (0)0%2.55 (-0.3)0.8740.44521.96 (0)0

Response time metrics (ms)

MethodName50%ile75%ile90%ile95%ile99%ile100%ile
sbom 16
GET/api/v3/sbom/by-package?purl={purl}120 (+10)130 (0)170 (+10)210 (0)240 (0)240 (0)
GET/api/v3/sbom/count-by-package13 (-23)56 (-12)75 (-2)81 (-1)92 (0)92 (0)
GET/api/v3/sbom/{sbom_id}140 (+10)140 (0)210 (+40)220 (0)290 (+50)290 (+30)
GET/api/v3/sbom/{sbom_id}/all-license-ids9 (+1)52 (+12)72 (+3)76 (+1)90 (+13)90 (+11)
GET/api/v3/sbom/{sbom_id}/download3,100 (0)3,200 (0)3,200 (0)3,400 (+100)3,500 (+100)3,500 (+100)
GET/api/v3/sbom/{sbom_id}/license-export15 (-1)67 (+16)76 (+2)79 (-2)83 (-27)85 (-25)
GET/api/v3/sbom/{sbom_id}/packages180 (+50)230 (-20)310 (+10)390 (+80)480 (+110)480 (+110)
GET/api/v3/sbom/{sbom_id}/related130 (-30)200 (0)270 (+30)290 (0)400 (-120)400 (-120)
GET/api/v3/sbom?limit=10&sort=name:asc&total=true240 (-50)390 (-80)490 (-110)670 (-190)1,100 (-300)1,100 (-300)
GET/api/v3/sbom?offset=100&limit=10&total=true160 (-30)280 (-130)440 (-130)540 (-60)700 (-400)1,100 (-100)
GET/api/v3/sbom?q=label:type=product&total=true9 (+2)43 (-3)64 (-4)70 (-3)82 (-6)85 (-3)
GET/api/v3/sbom?q=license~GPL&sort=name:desc&total=true12 (+2)58 (+4)73 (+3)77 (+4)81 (+1)81 (0)
GET/api/v3/sbom?q=name~redhat&total=true670 (-270)1,100 (-100)1,300 (-100)1,500 (0)1,600 (-100)1,600 (-100)
GET/api/v3/sbom?q=published>2024-01-01&total=true140 (+20)200 (-110)470 (-10)670 (+150)960 (+180)960 (+180)
GET/api/v3/sbom?sort=ingested:desc&total=true360 (-30)500 (-20)690 (+90)810 (+120)1,000 (-200)1,000 (-200)
GET/api/v3/sbom?total=true170 (+60)290 (+100)400 (0)420 (-80)700 (+80)910 (+200)
advisory 13
GET/api/v3/advisory/urn:uuid:{advisory_id}48 (+2)90 (+19)110 (+10)110 (0)120 (0)140 (-20)
GET/api/v3/advisory/urn:uuid:{advisory_id}/download14 (+2)54 (+10)73 (+4)77 (+3)88 (+3)96 (-4)
GET/api/v3/advisory?deprecated=Consider&total=true18 (+2)70 (+2)84 (0)150 (+30)1,900 (0)2,800 (-200)
GET/api/v3/advisory?limit=1&total=true52 (+2)80 (+5)100 (0)110 (0)2,500 (+2,370)2,500 (+2,350)
GET/api/v3/advisory?limit=10&sort=ingested:desc&total=true15 (+1)66 (+3)78 (+3)85 (+2)2,100 (-200)2,600 (-600)
GET/api/v3/advisory?offset=100&limit=10&total=true76 (+4)88 (+1)96 (+1)100 (0)1,400 (+1,110)2,700 (-800)
GET/api/v3/advisory?offset={offset}&limit=1240 (-40)350 (-90)490 (-110)600 (-100)760 (-70)760 (-90)
GET/api/v3/advisory?q=CVE-2021-&total=true200 (+10)350 (+50)1,100 (-100)1,800 (-100)2,600 (+100)3,800 (+100)
GET/api/v3/advisory?q=identifier=CVE-2022-0981&total=true48 (+1)94 (+21)110 (+10)110 (0)120 (0)130 (-90)
GET/api/v3/advisory?q=modified>3 days ago&total=true8 (0)49 (+5)67 (0)71 (-1)80 (-3)87 (-7)
GET/api/v3/advisory?q=title~openssl&total=true40 (+5)76 (0)91 (-2)110 (0)290 (0)1,900 (+1,190)
GET/api/v3/advisory?sort=modified:desc&total=true17 (+1)71 (+4)81 (0)110 (+10)2,300 (-200)2,700 (-400)
GET/api/v3/advisory?total=true100 (0)120 (0)180 (0)190 (0)260 (-130)2,100 (-900)
vulnerability 7
POST/api/v3/vulnerability/analyze780 (+715)1,900 (-200)3,300 (-100)3,800 (-200)4,500 (-200)6,900 (+900)
GET/api/v3/vulnerability?offset=100&limit=10&total=true46 (+39)50 (+37)92 (+22)110 (+36)850 (+40)1,200 (+100)
GET/api/v3/vulnerability?q=base_score>=7.0&total=true9 (0)28 (+10)72 (-4)100 (-290)990 (-510)1,200 (-600)
GET/api/v3/vulnerability?q=base_severity=high&total=true9 (0)46 (+30)70 (-3)170 (-100)1,200 (+100)1,300 (0)
GET/api/v3/vulnerability?q=cwes=CWE-79&total=true9 (+1)52 (+40)71 (+1)290 (+40)800 (-120)1,300 (-100)
GET/api/v3/vulnerability?sort=base_score:desc&total=true590 (-130)960 (-140)1,400 (+100)1,600 (+100)2,200 (+200)2,400 (-400)
GET/api/v3/vulnerability?total=true8 (0)20 (+7)65 (0)73 (+1)690 (+70)1,000 (+80)
purl 15
GET/api/v3/purl/base/{purl}54 (-3)140 (-40)210 (-40)260 (-40)300 (-70)390 (+10)
GET/api/v3/purl/base?q=namespace=redhat&total=true46 (0)87 (+7)110 (+10)130 (-10)620 (-100)1,100 (+380)
GET/api/v3/purl/base?q=type=rpm&total=true53 (+6)85 (+4)100 (0)100 (-10)120 (+10)130 (+10)
GET/api/v3/purl/base?sort=name:asc&total=true210 (+10)260 (+30)310 (+20)350 (+30)420 (+80)530 (+190)
GET/api/v3/purl/base?total=true46 (0)84 (+6)99 (-1)100 (-10)180 (-20)230 (+30)
POST/api/v3/purl/recommend1,000 (+30)1,200 (+100)1,400 (+100)1,500 (0)1,700 (+100)1,900 (0)
GET/api/v3/purl/{purl_id}89 (+2)110 (+10)170 (+20)190 (+30)210 (+30)290 (+30)
GET/api/v3/purl?offset=100&limit=10&total=true46 (0)73 (-1)97 (0)100 (-10)4,400 (-400)5,000 (-3,000)
GET/api/v3/purl?q=curl&total=true37 (-14)66 (-64)98 (-502)1,000 (-500)1,400 (-1,100)2,100 (-400)
GET/api/v3/purl?q=license~GPLv3+...&sort=name:desc&total=true46 (+29)63 (+2)69 (-2)72 (-3)77 (-33)77 (-33)
GET/api/v3/purl?q=name=curl&total=true15 (0)59 (+9)71 (-5)99 (-81)270 (+70)290 (+20)
GET/api/v3/purl?q=purl:namespace=redhat&total=true10 (+1)52 (+1)67 (+3)2,500 (-400)3,800 (+100)3,900 (+100)
GET/api/v3/purl?q=purl:ty=rpm&total=true10 (-1)56 (+6)74 (+13)2,600 (-300)3,000 (-300)3,200 (-300)
GET/api/v3/purl?sort=purl:name:asc&total=true12 (-4)54 (-1)68 (+2)3,200 (-1,100)4,800 (-400)5,300 (+100)
GET/api/v3/purl?total=true10 (+2)47 (-2)61 (0)70 (+6)5,000 (+900)5,200 (+100)
license 9
GET/api/v3/license/spdx/license/{license_id}43 (+1)43 (0)45 (+1)45 (0)53 (0)76 (-1)
GET/api/v3/license/spdx/license?q=apache&total=true3 (+1)4 (+1)5 (+1)6 (+1)8 (+1)29 (+1)
GET/api/v3/license/spdx/license?q=gpl&total=true43 (0)44 (+1)45 (+1)46 (+1)55 (-1)76 (+2)
GET/api/v3/license/spdx/license?total=true43 (+1)43 (0)44 (0)45 (0)52 (+2)71 (+2)
GET/api/v3/license?limit=10&sort=license:asc&total=true26 (+7)59 (+3)74 (+3)80 (+1)92 (+5)190 (+90)
GET/api/v3/license?q=ASL&sort=license:desc&total=true17 (+4)53 (+2)68 (+4)75 (+2)84 (+2)140 (+49)
GET/api/v3/license?q=license~Apache&total=true12 (+1)47 (0)61 (+1)72 (+1)80 (+1)160 (+67)
GET/api/v3/license?q=license~GPL&total=true11 (0)47 (+2)60 (-2)70 (-1)83 (+4)100 (+4)
GET/api/v3/license?total=true59 (+3)97 (+4)110 (0)120 (0)130 (0)160 (-20)
analysis 3
GET/api/v3/analysis/component/{component}5 (0)7 (+1)63 (+4)69 (+2)76 (+1)99 (+3)
GET/api/v3/analysis/latest/component/{cpe}5 (0)7 (+1)63 (+4)69 (+2)76 (+1)170 (+60)
GET/api/v3/analysis/status5 (+1)7 (+1)63 (+5)69 (+2)76 (+1)100 (-10)
importer 1
GET/api/v3/importer?total=true4 (+1)5 (0)56 (+23)66 (+2)73 (+1)120 (0)
group 3
GET/api/v3/group/sbom?parents=resolve&total=true5 (+1)7 (+1)63 (+6)69 (+2)78 (+4)170 (+60)
GET/api/v3/group/sbom?total=true5 (+1)6 (0)62 (+3)69 (+2)77 (+3)180 (+80)
GET/api/v3/group/sbom?totals=true&total=true5 (+1)6 (0)62 (+5)69 (+2)77 (+3)170 (+70)
labels 3
GET/api/v3/advisory-labels?filter_text=type&limit=10005,700 (-200)6,100 (0)6,500 (0)6,600 (-200)7,000 (-200)7,000 (-200)
GET/api/v3/sbom-labels?limit=10&filter_text=&total=true52 (+3)95 (+10)120 (+10)120 (+10)130 (+10)130 (+10)
GET/api/v3/sbom-labels?total=true57 (+4)92 (0)120 (+10)120 (+10)130 (0)130 (0)
other 2
GET/.well-known/trustify42 (0)43 (0)44 (0)45 (0)56 (-6)79 (-51)
POST/api/v3/ui/extract-sbom-purls2 (+1)3 (0)5 (0)6 (0)8 (-13)40 (-43)

Failures

No failures recorded.

Exceptions

No exceptions raised in the locustfile.