← All runs

Trustify load tests · 2026-10-22 10:10 UTC

Target trustify (scale snapshot, CI) · 2026-10-22 10:10:09 UTC → 10:20:07 UTC · Users 10 · Deltas vs previous run (2026-10-22 07:20 UTC, 2026-10-22T06-30-29_7f38deb)

Type daily · Dataset scale-20260317T023702Z · Scenario etc/scenarios/main/full-20260317T023702Z.json5 · Branch main · Commit 7f38deb34acb · Workflow run

Duration
9m 58s
Total requests
195,113 (+4,772)
Failure rate
0.0%
0 failed requests
Throughput
325.7 req/s (+8.0)
Latency 95%ile
72 ms (0)
Latency 99%ile
190 ms (-10)
Endpoints
72
0 with failures

Over time

Throughput

Requests and failures per second

Response time

Percentiles over Locust's rolling window, ms

Users

Concurrent simulated users

Load plan

ActionStartedStoppedElapsedUsers
Increasing10:10:0910:10:130m 04s2 → 10
Maintaining10:10:1310:20:079m 54s10 → 10

Top 10 slowest endpoints (95%ile)

#MethodName95%ile (ms)Average (ms)# Requests
1GET/api/v3/advisory-labels?filter_text=type&limit=10006,8005,86496
2POST/api/v3/vulnerability/analyze3,9001,230338
3GET/api/v3/purl?sort=purl:name:asc&total=true3,400296122
4GET/api/v3/sbom/{sbom_id}/download3,2003,08289
5GET/api/v3/purl?q=purl:namespace=redhat&total=true2,700277101
6GET/api/v3/purl?q=purl:ty=rpm&total=true2,600224125
7GET/api/v3/advisory?q=CVE-2021-&total=true1,800387584
8POST/api/v3/purl/recommend1,500968358
9GET/api/v3/sbom?q=name~redhat&total=true1,500631104
10GET/api/v3/vulnerability?sort=base_score:desc&total=true1,400754171

Request metrics

MethodName# Requests# FailsFail %Average (ms)Min (ms)Max (ms)Avg size (B)RPSFailures/s
sbom 16
GET/api/v3/sbom/by-package?purl={purl}106 (+16)0 (0)0%105 (-6.4)52.31851,2870.18 (0)0
GET/api/v3/sbom/count-by-package113 (+18)0 (0)0%36.1 (+5.2)4.7388.730.19 (0)0
GET/api/v3/sbom/{sbom_id}104 (+6)0 (0)0%129 (-10.1)32.22412,0150.17 (0)0
GET/api/v3/sbom/{sbom_id}/all-license-ids123 (+38)0 (0)0%24.8 (-1.7)2.1686.620.21 (+0.1)0
GET/api/v3/sbom/{sbom_id}/download89 (-8)0 (0)0%3,082 (-70.9)2,9043,296136,458,6380.15 (0)0
GET/api/v3/sbom/{sbom_id}/license-export118 (+10)0 (0)0%33.0 (-1.1)5.4486.22340.20 (0)0
GET/api/v3/sbom/{sbom_id}/packages118 (+32)0 (0)0%142 (-29.1)15.840112,6480.20 (+0.1)0
GET/api/v3/sbom/{sbom_id}/related102 (+15)0 (0)0%149 (-9.7)21.537515,3720.17 (0)0
GET/api/v3/sbom?limit=10&sort=name:asc&total=true123 (+27)0 (0)0%264 (-25.4)40.990312,1890.21 (0)0
GET/api/v3/sbom?offset=100&limit=10&total=true211 (+12)0 (0)0%204 (-7.0)28.489411,9410.35 (0)0
GET/api/v3/sbom?q=label:type=product&total=true101 (-1)0 (0)0%18.7 (-5.1)2.1083.4220.17 (0)0
GET/api/v3/sbom?q=license~GPL&sort=name:desc&total=true104 (+15)0 (0)0%26.6 (-3.0)3.1081.9220.17 (0)0
GET/api/v3/sbom?q=name~redhat&total=true104 (+19)0 (0)0%631 (-8.2)12.21,981220.17 (0)0
GET/api/v3/sbom?q=published>2024-01-01&total=true103 (+21)0 (0)0%186 (-17.6)30.481329,3170.17 (0)0
GET/api/v3/sbom?sort=ingested:desc&total=true101 (+15)0 (0)0%334 (-31.4)35.81,50829,6000.17 (0)0
GET/api/v3/sbom?total=true218 (+30)0 (0)0%178 (-27.1)27.01,03429,3170.36 (+0.1)0
advisory 13
GET/api/v3/advisory/urn:uuid:{advisory_id}561 (+7)0 (0)0%57.4 (-6.0)4.481462,3950.94 (0)0
GET/api/v3/advisory/urn:uuid:{advisory_id}/download589 (+13)0 (0)0%30.0 (+1.3)4.65201178,4230.98 (0)0
GET/api/v3/advisory?deprecated=Consider&total=true595 (+15)0 (0)0%75.4 (+1.7)7.632,59544,0030.99 (0)0
GET/api/v3/advisory?limit=1&total=true102 (+8)0 (0)0%86.7 (-21.2)6.451,6272,1780.17 (0)0
GET/api/v3/advisory?limit=10&sort=ingested:desc&total=true564 (+35)0 (0)0%67.7 (-8.2)5.472,89920,1930.94 (+0.1)0
GET/api/v3/advisory?offset=100&limit=10&total=true577 (0)0 (0)0%79.3 (-4.0)5.052,78819,4060.96 (0)0
GET/api/v3/advisory?offset={offset}&limit=1102 (+8)0 (0)0%246 (-23.7)10.28441,9400.17 (0)0
GET/api/v3/advisory?q=CVE-2021-&total=true584 (+23)0 (0)0%387 (-7.4)8.433,88650,0410.97 (0)0
GET/api/v3/advisory?q=identifier=CVE-2022-0981&total=true586 (+15)0 (0)0%58.9 (-4.5)4.581341,9710.98 (0)0
GET/api/v3/advisory?q=modified>3 days ago&total=true554 (-9)0 (0)0%21.4 (-3.0)2.3485.5220.92 (0)0
GET/api/v3/advisory?q=title~openssl&total=true556 (+17)0 (0)0%51.8 (-2.5)8.44898126,4520.93 (0)0
GET/api/v3/advisory?sort=modified:desc&total=true593 (+38)0 (0)0%70.6 (-9.2)6.952,88538,1280.99 (+0.1)0
GET/api/v3/advisory?total=true584 (+5)0 (0)0%122 (+8.7)10.13,09848,9120.97 (0)0
vulnerability 7
POST/api/v3/vulnerability/analyze338 (-31)0 (0)0%1,230 (+84.0)1.456,7624,812,4550.56 (-0.1)0
GET/api/v3/vulnerability?offset=100&limit=10&total=true171 (-32)0 (0)0%72.7 (+1.6)4.851,0147,5300.29 (-0.1)0
GET/api/v3/vulnerability?q=base_score>=7.0&total=true155 (-42)0 (0)0%66.6 (+20.6)3.251,20218,7810.26 (-0.1)0
GET/api/v3/vulnerability?q=base_severity=high&total=true178 (-17)0 (0)0%58.9 (+7.4)3.451,50118,7860.30 (0)0
GET/api/v3/vulnerability?q=cwes=CWE-79&total=true182 (+10)0 (0)0%62.3 (+7.9)2.701,39118,8970.30 (0)0
GET/api/v3/vulnerability?sort=base_score:desc&total=true171 (+6)0 (0)0%754 (+8.0)1502,61714,6210.29 (0)0
GET/api/v3/vulnerability?total=true169 (-28)0 (0)0%37.5 (+2.3)3.5380519,1580.28 (0)0
purl 15
GET/api/v3/purl/base/{purl}117 (-7)0 (0)0%90.2 (+7.4)9.6637648,8270.20 (0)0
GET/api/v3/purl/base?q=namespace=redhat&total=true99 (-22)0 (0)0%80.1 (-4.8)6.396272,0800.17 (0)0
GET/api/v3/purl/base?q=type=rpm&total=true136 (+25)0 (0)0%62.1 (-2.2)4.281842,0800.23 (0)0
GET/api/v3/purl/base?sort=name:asc&total=true110 (-9)0 (0)0%221 (+4.3)86.04092,9430.18 (0)0
GET/api/v3/purl/base?total=true120 (-12)0 (0)0%68.4 (+6.5)2.152412,4500.20 (0)0
POST/api/v3/purl/recommend358 (-25)0 (0)0%968 (+23.7)1281,6272,7470.60 (0)0
GET/api/v3/purl/{purl_id}116 (-6)0 (0)0%94.5 (+0.9)19.13135370.19 (0)0
GET/api/v3/purl?offset=100&limit=10&total=true124 (-1)0 (0)0%148 (-46.5)3.184,4524,6120.21 (0)0
GET/api/v3/purl?q=curl&total=true124 (-1)0 (0)0%219 (+105.0)4.243,10411,7010.21 (0)0
GET/api/v3/purl?q=license~GPLv3+...&sort=name:desc&total=true124 (+23)0 (0)0%36.4 (-3.2)6.21108220.21 (0)0
GET/api/v3/purl?q=name=curl&total=true128 (+26)0 (0)0%36.5 (-1.4)3.0527812,0840.21 (0)0
GET/api/v3/purl?q=purl:namespace=redhat&total=true101 (-17)0 (0)0%277 (+41.0)1.964,18111,2280.17 (0)0
GET/api/v3/purl?q=purl:ty=rpm&total=true125 (+5)0 (0)0%224 (+8.6)1.993,30711,2840.21 (0)0
GET/api/v3/purl?sort=purl:name:asc&total=true122 (-11)0 (0)0%296 (+13.3)2.094,59411,1010.20 (0)0
GET/api/v3/purl?total=true139 (+19)0 (0)0%236 (+36.3)1.776,26711,3640.23 (0)0
license 9
GET/api/v3/license/spdx/license/{license_id}1,799 (-64)0 (0)0%41.5 (-0.1)0.9570.31,1433.00 (-0.1)0
GET/api/v3/license/spdx/license?q=apache&total=true1,828 (+23)0 (0)0%2.86 (-0.1)0.9628.51653.05 (0)0
GET/api/v3/license/spdx/license?q=gpl&total=true1,766 (-44)0 (0)0%41.9 (-0.2)1.2071.41,9812.95 (-0.1)0
GET/api/v3/license/spdx/license?total=true1,764 (+4)0 (0)0%41.5 (-0.1)0.9570.81,5252.94 (0)0
GET/api/v3/license?limit=10&sort=license:asc&total=true1,807 (+42)0 (0)0%34.4 (-2.0)6.551454253.02 (+0.1)0
GET/api/v3/license?q=ASL&sort=license:desc&total=true1,825 (-43)0 (0)0%30.6 (-0.8)3.35103223.05 (-0.1)0
GET/api/v3/license?q=license~Apache&total=true1,819 (+15)0 (0)0%27.3 (+1.1)2.4996.01203.04 (0)0
GET/api/v3/license?q=license~GPL&total=true1,836 (-63)0 (0)0%27.2 (+1.5)2.30101923.06 (-0.1)0
GET/api/v3/license?total=true1,954 (+123)0 (0)0%71.8 (-1.0)8.121981,1013.26 (+0.2)0
analysis 3
GET/api/v3/analysis/component/{component}14,421 (+451)0 (0)0%13.3 (-0.4)1.3799.92524.07 (+0.8)0
GET/api/v3/analysis/latest/component/{cpe}14,292 (+407)0 (0)0%13.4 (-0.3)1.381072523.85 (+0.7)0
GET/api/v3/analysis/status14,409 (+515)0 (0)0%12.8 (-0.6)1.2910210324.05 (+0.9)0
importer 1
GET/api/v3/importer?total=true53,152 (+1,639)0 (0)0%10.4 (-0.3)1.03101288.71 (+2.8)0
group 3
GET/api/v3/group/sbom?parents=resolve&total=true14,536 (+371)0 (0)0%12.9 (-0.6)1.211743824.26 (+0.6)0
GET/api/v3/group/sbom?total=true14,587 (+455)0 (0)0%12.7 (-0.4)1.201692224.35 (+0.8)0
GET/api/v3/group/sbom?totals=true&total=true14,579 (+400)0 (0)0%13.1 (-0.1)1.241732224.33 (+0.7)0
labels 3
GET/api/v3/advisory-labels?filter_text=type&limit=100096 (-1)0 (0)0%5,864 (+62.4)4,6307,668600.16 (0)0
GET/api/v3/sbom-labels?limit=10&filter_text=&total=true109 (+19)0 (0)0%68.7 (+1.4)8.671351,0650.18 (0)0
GET/api/v3/sbom-labels?total=true114 (+18)0 (0)0%72.9 (+0.6)9.551441,0650.19 (0)0
other 2
GET/.well-known/trustify13,211 (+53)0 (0)0%41.7 (0)0.8773.11,17922.05 (+0.1)0
POST/api/v3/ui/extract-sbom-purls13,317 (+159)0 (0)0%2.41 (-0.1)0.9045.94522.23 (+0.3)0

Response time metrics (ms)

MethodName50%ile75%ile90%ile95%ile99%ile100%ile
sbom 16
GET/api/v3/sbom/by-package?purl={purl}120 (0)130 (0)140 (-30)140 (-70)180 (-60)190 (-50)
GET/api/v3/sbom/count-by-package19 (+6)71 (+15)78 (+3)80 (-1)88 (-4)89 (-3)
GET/api/v3/sbom/{sbom_id}130 (-10)140 (0)190 (-20)210 (-10)240 (-50)240 (-50)
GET/api/v3/sbom/{sbom_id}/all-license-ids9 (0)54 (+2)70 (-2)73 (-3)82 (-8)87 (-3)
GET/api/v3/sbom/{sbom_id}/download3,100 (0)3,100 (-100)3,200 (0)3,200 (-200)3,300 (-200)3,300 (-200)
GET/api/v3/sbom/{sbom_id}/license-export12 (-3)65 (-2)78 (+2)82 (+3)86 (+3)86 (+1)
GET/api/v3/sbom/{sbom_id}/packages100 (-80)210 (-20)300 (-10)360 (-30)380 (-100)400 (-80)
GET/api/v3/sbom/{sbom_id}/related130 (0)200 (0)260 (-10)290 (0)330 (-70)380 (-20)
GET/api/v3/sbom?limit=10&sort=name:asc&total=true210 (-30)370 (-20)470 (-20)510 (-160)840 (-260)900 (-200)
GET/api/v3/sbom?offset=100&limit=10&total=true150 (-10)260 (-20)400 (-40)530 (-10)710 (+10)890 (-210)
GET/api/v3/sbom?q=label:type=product&total=true8 (-1)13 (-30)59 (-5)71 (+1)77 (-5)83 (-2)
GET/api/v3/sbom?q=license~GPL&sort=name:desc&total=true10 (-2)51 (-7)70 (-3)74 (-3)82 (+1)82 (+1)
GET/api/v3/sbom?q=name~redhat&total=true750 (+80)1,100 (0)1,300 (0)1,500 (0)1,700 (+100)2,000 (+400)
GET/api/v3/sbom?q=published>2024-01-01&total=true120 (-20)200 (0)380 (-90)430 (-240)730 (-230)810 (-150)
GET/api/v3/sbom?sort=ingested:desc&total=true300 (-60)480 (-20)600 (-90)620 (-190)820 (-180)1,500 (+500)
GET/api/v3/sbom?total=true120 (-50)200 (-90)390 (-10)480 (+60)620 (-80)1,000 (+90)
advisory 13
GET/api/v3/advisory/urn:uuid:{advisory_id}47 (-1)69 (-21)100 (-10)110 (0)120 (0)150 (+10)
GET/api/v3/advisory/urn:uuid:{advisory_id}/download14 (0)54 (0)74 (+1)78 (+1)91 (+3)200 (+104)
GET/api/v3/advisory?deprecated=Consider&total=true18 (0)71 (+1)83 (-1)110 (-40)2,100 (+200)2,600 (-200)
GET/api/v3/advisory?limit=1&total=true50 (-2)73 (-7)110 (+10)110 (0)1,300 (-1,200)1,600 (-900)
GET/api/v3/advisory?limit=10&sort=ingested:desc&total=true14 (-1)61 (-5)74 (-4)82 (-3)2,300 (+200)2,900 (+300)
GET/api/v3/advisory?offset=100&limit=10&total=true75 (-1)87 (-1)94 (-2)100 (0)430 (-970)2,800 (+100)
GET/api/v3/advisory?offset={offset}&limit=1190 (-50)310 (-40)510 (+20)610 (+10)810 (+50)840 (+80)
GET/api/v3/advisory?q=CVE-2021-&total=true200 (0)370 (+20)1,100 (0)1,800 (0)2,400 (-200)3,900 (+100)
GET/api/v3/advisory?q=identifier=CVE-2022-0981&total=true47 (-1)70 (-24)100 (-10)110 (0)120 (0)130 (0)
GET/api/v3/advisory?q=modified>3 days ago&total=true8 (0)34 (-15)65 (-2)70 (-1)78 (-2)85 (-2)
GET/api/v3/advisory?q=title~openssl&total=true28 (-12)77 (+1)90 (-1)110 (0)350 (+60)900 (-1,000)
GET/api/v3/advisory?sort=modified:desc&total=true18 (+1)69 (-2)81 (0)96 (-14)1,900 (-400)2,900 (+200)
GET/api/v3/advisory?total=true100 (0)120 (0)180 (0)190 (0)210 (-50)3,100 (+1,000)
vulnerability 7
POST/api/v3/vulnerability/analyze1,000 (+220)2,000 (+100)3,600 (+300)3,900 (+100)5,000 (+500)6,800 (-100)
GET/api/v3/vulnerability?offset=100&limit=10&total=true46 (0)66 (+16)100 (+8)110 (0)690 (-160)1,000 (-200)
GET/api/v3/vulnerability?q=base_score>=7.0&total=true9 (0)54 (+26)72 (0)490 (+390)1,200 (+210)1,200 (0)
GET/api/v3/vulnerability?q=base_severity=high&total=true9 (0)38 (-8)69 (-1)300 (+130)1,000 (-200)1,500 (+200)
GET/api/v3/vulnerability?q=cwes=CWE-79&total=true9 (0)51 (-1)71 (0)170 (-120)1,200 (+400)1,400 (+100)
GET/api/v3/vulnerability?sort=base_score:desc&total=true600 (+10)990 (+30)1,300 (-100)1,400 (-200)2,200 (0)2,600 (+200)
GET/api/v3/vulnerability?total=true8 (0)17 (-3)69 (+4)75 (+2)690 (0)800 (-200)
purl 15
GET/api/v3/purl/base/{purl}63 (+9)140 (0)210 (0)280 (+20)300 (0)380 (-10)
GET/api/v3/purl/base?q=namespace=redhat&total=true53 (+7)89 (+2)110 (0)210 (+80)630 (+10)630 (-470)
GET/api/v3/purl/base?q=type=rpm&total=true46 (-7)92 (+7)100 (0)110 (+10)120 (0)180 (+50)
GET/api/v3/purl/base?sort=name:asc&total=true220 (+10)250 (-10)330 (+20)350 (0)400 (-20)410 (-120)
GET/api/v3/purl/base?total=true47 (+1)95 (+11)110 (+11)130 (+30)200 (+20)240 (+10)
POST/api/v3/purl/recommend1,000 (0)1,200 (0)1,400 (0)1,500 (0)1,600 (-100)1,600 (-300)
GET/api/v3/purl/{purl_id}85 (-4)120 (+10)170 (0)190 (0)270 (+60)310 (+20)
GET/api/v3/purl?offset=100&limit=10&total=true47 (+1)80 (+7)99 (+2)100 (0)4,400 (0)4,500 (-500)
GET/api/v3/purl?q=curl&total=true84 (+47)180 (+114)480 (+382)890 (-110)2,600 (+1,200)3,100 (+1,000)
GET/api/v3/purl?q=license~GPLv3+...&sort=name:desc&total=true35 (-11)60 (-3)71 (+2)76 (+4)90 (+13)110 (+33)
GET/api/v3/purl?q=name=curl&total=true18 (+3)53 (-6)69 (-2)100 (+1)250 (-20)280 (-10)
GET/api/v3/purl?q=purl:namespace=redhat&total=true26 (+16)54 (+2)100 (+33)2,700 (+200)3,400 (-400)4,200 (+300)
GET/api/v3/purl?q=purl:ty=rpm&total=true8 (-2)52 (-4)97 (+23)2,600 (0)3,300 (+300)3,300 (+100)
GET/api/v3/purl?sort=purl:name:asc&total=true12 (0)48 (-6)71 (+3)3,400 (+200)4,600 (-200)4,600 (-700)
GET/api/v3/purl?total=true32 (+22)53 (+6)72 (+11)97 (+27)4,800 (-200)6,300 (+1,100)
license 9
GET/api/v3/license/spdx/license/{license_id}42 (-1)43 (0)44 (-1)45 (0)53 (0)70 (-6)
GET/api/v3/license/spdx/license?q=apache&total=true3 (0)4 (0)5 (0)6 (0)8 (0)29 (0)
GET/api/v3/license/spdx/license?q=gpl&total=true43 (0)44 (0)45 (0)46 (0)55 (0)71 (-5)
GET/api/v3/license/spdx/license?total=true43 (0)43 (0)44 (0)45 (0)52 (0)71 (0)
GET/api/v3/license?limit=10&sort=license:asc&total=true19 (-7)58 (-1)74 (0)80 (0)88 (-4)150 (-40)
GET/api/v3/license?q=ASL&sort=license:desc&total=true16 (-1)53 (0)67 (-1)75 (0)84 (0)100 (-40)
GET/api/v3/license?q=license~Apache&total=true12 (0)50 (+3)64 (+3)72 (0)80 (0)96 (-64)
GET/api/v3/license?q=license~GPL&total=true11 (0)50 (+3)63 (+3)72 (+2)81 (-2)100 (0)
GET/api/v3/license?total=true59 (0)96 (-1)110 (0)120 (0)130 (0)200 (+40)
analysis 3
GET/api/v3/analysis/component/{component}5 (0)7 (0)62 (-1)69 (0)76 (0)100 (+1)
GET/api/v3/analysis/latest/component/{cpe}5 (0)7 (0)62 (-1)69 (0)75 (-1)110 (-60)
GET/api/v3/analysis/status5 (0)7 (0)61 (-2)68 (-1)75 (-1)100 (0)
importer 1
GET/api/v3/importer?total=true4 (0)5 (0)53 (-3)66 (0)73 (0)100 (-20)
group 3
GET/api/v3/group/sbom?parents=resolve&total=true4 (-1)6 (-1)61 (-2)69 (0)77 (-1)170 (0)
GET/api/v3/group/sbom?total=true4 (-1)6 (0)61 (-1)68 (-1)76 (-1)170 (-10)
GET/api/v3/group/sbom?totals=true&total=true4 (-1)6 (0)62 (0)69 (0)77 (0)170 (0)
labels 3
GET/api/v3/advisory-labels?filter_text=type&limit=10005,800 (+100)6,100 (0)6,500 (0)6,800 (+200)7,700 (+700)7,700 (+700)
GET/api/v3/sbom-labels?limit=10&filter_text=&total=true50 (-2)99 (+4)120 (0)120 (0)130 (0)130 (0)
GET/api/v3/sbom-labels?total=true54 (-3)100 (+8)110 (-10)120 (0)130 (0)140 (+10)
other 2
GET/.well-known/trustify42 (0)43 (0)44 (0)45 (0)55 (-1)73 (-6)
POST/api/v3/ui/extract-sbom-purls1 (-1)3 (0)5 (0)6 (0)8 (0)46 (+6)

Failures

No failures recorded.

Exceptions

No exceptions raised in the locustfile.