← All runs

Trustify load tests · 2026-10-22 13:44 UTC

Target trustify (scale snapshot, CI) · 2026-10-22 13:44:18 UTC → 13:54:16 UTC · Users 10 · Deltas vs previous run (2026-10-22 10:10 UTC, 2026-10-22T09-20-25_7f38deb)

Type daily · Dataset scale-20260317T023702Z · Scenario etc/scenarios/main/full-20260317T023702Z.json5 · Branch main · Commit 7f38deb34acb · Workflow run

Duration
9m 58s
Total requests
191,872 (-3,241)
Failure rate
0.0%
0 failed requests
Throughput
320.4 req/s (-5.3)
Latency 95%ile
72 ms (0)
Latency 99%ile
200 ms (+10)
Endpoints
72
0 with failures

Over time

Throughput

Requests and failures per second

Response time

Percentiles over Locust's rolling window, ms

Users

Concurrent simulated users

Load plan

ActionStartedStoppedElapsedUsers
Increasing13:44:1813:44:220m 04s2 → 10
Maintaining13:44:2213:54:169m 54s10 → 10

Top 10 slowest endpoints (95%ile)

#MethodName95%ile (ms)Average (ms)# Requests
1GET/api/v3/advisory-labels?filter_text=type&limit=10006,5005,76297
2POST/api/v3/vulnerability/analyze3,6001,111352
3GET/api/v3/sbom/{sbom_id}/download3,2003,10995
4GET/api/v3/purl?q=purl:namespace=redhat&total=true3,000226145
5GET/api/v3/purl?q=purl:ty=rpm&total=true2,500182156
6GET/api/v3/vulnerability?sort=base_score:desc&total=true2,000990160
7GET/api/v3/advisory?q=CVE-2021-&total=true1,700383586
8POST/api/v3/purl/recommend1,500949415
9GET/api/v3/sbom?q=name~redhat&total=true1,500661106
10GET/api/v3/purl?q=curl&total=true910166139

Request metrics

MethodName# Requests# FailsFail %Average (ms)Min (ms)Max (ms)Avg size (B)RPSFailures/s
sbom 16
GET/api/v3/sbom/by-package?purl={purl}101 (-5)0 (0)0%105 (-0.6)29.31951,2870.17 (0)0
GET/api/v3/sbom/count-by-package92 (-21)0 (0)0%31.2 (-4.8)5.5010630.15 (0)0
GET/api/v3/sbom/{sbom_id}93 (-11)0 (0)0%132 (+2.9)60.52262,0150.16 (0)0
GET/api/v3/sbom/{sbom_id}/all-license-ids103 (-20)0 (0)0%25.2 (+0.4)2.1077.120.17 (0)0
GET/api/v3/sbom/{sbom_id}/download95 (+6)0 (0)0%3,109 (+26.7)2,8993,281136,458,6380.16 (0)0
GET/api/v3/sbom/{sbom_id}/license-export73 (-45)0 (0)0%34.8 (+1.7)4.9487.62340.12 (-0.1)0
GET/api/v3/sbom/{sbom_id}/packages96 (-22)0 (0)0%151 (+8.8)15.747312,6480.16 (0)0
GET/api/v3/sbom/{sbom_id}/related87 (-15)0 (0)0%149 (-0.2)27.348715,3720.15 (0)0
GET/api/v3/sbom?limit=10&sort=name:asc&total=true94 (-29)0 (0)0%306 (+42.0)74.91,15912,1890.16 (0)0
GET/api/v3/sbom?offset=100&limit=10&total=true207 (-4)0 (0)0%195 (-9.0)23.61,04011,9000.35 (0)0
GET/api/v3/sbom?q=label:type=product&total=true90 (-11)0 (0)0%23.5 (+4.8)2.1777.6220.15 (0)0
GET/api/v3/sbom?q=license~GPL&sort=name:desc&total=true95 (-9)0 (0)0%33.1 (+6.5)2.7488.7220.16 (0)0
GET/api/v3/sbom?q=name~redhat&total=true106 (+2)0 (0)0%661 (+30.0)11.21,708220.18 (0)0
GET/api/v3/sbom?q=published>2024-01-01&total=true94 (-9)0 (0)0%203 (+17.6)28.989629,3170.16 (0)0
GET/api/v3/sbom?sort=ingested:desc&total=true91 (-10)0 (0)0%339 (+4.9)32.499829,6000.15 (0)0
GET/api/v3/sbom?total=true199 (-19)0 (0)0%161 (-17.2)27.667529,3170.33 (0)0
advisory 13
GET/api/v3/advisory/urn:uuid:{advisory_id}612 (+51)0 (0)0%60.4 (+3.0)4.511312,3951.02 (+0.1)0
GET/api/v3/advisory/urn:uuid:{advisory_id}/download525 (-64)0 (0)0%30.3 (+0.3)4.84110178,4230.88 (-0.1)0
GET/api/v3/advisory?deprecated=Consider&total=true603 (+8)0 (0)0%71.6 (-3.8)7.322,95644,0031.01 (0)0
GET/api/v3/advisory?limit=1&total=true108 (+6)0 (0)0%76.7 (-10.0)6.571,3442,5040.18 (0)0
GET/api/v3/advisory?limit=10&sort=ingested:desc&total=true578 (+14)0 (0)0%67.9 (+0.1)4.063,20620,1930.97 (0)0
GET/api/v3/advisory?offset=100&limit=10&total=true563 (-14)0 (0)0%75.1 (-4.2)6.352,50219,1760.94 (0)0
GET/api/v3/advisory?offset={offset}&limit=1108 (+6)0 (0)0%248 (+2.5)50.97911,8990.18 (0)0
GET/api/v3/advisory?q=CVE-2021-&total=true586 (+2)0 (0)0%383 (-4.0)20.33,31649,5280.98 (0)0
GET/api/v3/advisory?q=identifier=CVE-2022-0981&total=true527 (-59)0 (0)0%61.1 (+2.1)3.311291,9710.88 (-0.1)0
GET/api/v3/advisory?q=modified>3 days ago&total=true543 (-11)0 (0)0%22.8 (+1.4)2.2788.1220.91 (0)0
GET/api/v3/advisory?q=title~openssl&total=true595 (+39)0 (0)0%47.7 (-4.1)8.91484126,4520.99 (+0.1)0
GET/api/v3/advisory?sort=modified:desc&total=true566 (-27)0 (0)0%76.3 (+5.6)6.533,62538,1280.95 (0)0
GET/api/v3/advisory?total=true583 (-1)0 (0)0%128 (+6.0)8.992,80349,4340.97 (0)0
vulnerability 7
POST/api/v3/vulnerability/analyze352 (+14)0 (0)0%1,111 (-118.4)1.634,8984,544,0390.59 (0)0
GET/api/v3/vulnerability?offset=100&limit=10&total=true171 (0)0 (0)0%38.0 (-34.7)2.547989,2340.29 (0)0
GET/api/v3/vulnerability?q=base_score>=7.0&total=true189 (+34)0 (0)0%55.4 (-11.2)4.291,19819,1190.32 (+0.1)0
GET/api/v3/vulnerability?q=base_severity=high&total=true172 (-6)0 (0)0%55.3 (-3.7)2.921,32420,1920.29 (0)0
GET/api/v3/vulnerability?q=cwes=CWE-79&total=true168 (-14)0 (0)0%74.0 (+11.7)2.741,97222,3280.28 (0)0
GET/api/v3/vulnerability?sort=base_score:desc&total=true160 (-11)0 (0)0%990 (+235.1)1653,50826,2940.27 (0)0
GET/api/v3/vulnerability?total=true161 (-8)0 (0)0%38.8 (+1.3)3.7789919,5910.27 (0)0
purl 15
GET/api/v3/purl/base/{purl}135 (+18)0 (0)0%102 (+11.9)7.2846548,8270.23 (0)0
GET/api/v3/purl/base?q=namespace=redhat&total=true139 (+40)0 (0)0%83.2 (+3.1)4.598172,0800.23 (+0.1)0
GET/api/v3/purl/base?q=type=rpm&total=true136 (0)0 (0)0%61.6 (-0.5)3.651292,0800.23 (0)0
GET/api/v3/purl/base?sort=name:asc&total=true132 (+22)0 (0)0%216 (-5.3)71.85842,9430.22 (0)0
GET/api/v3/purl/base?total=true141 (+21)0 (0)0%60.0 (-8.4)3.962362,4500.24 (0)0
POST/api/v3/purl/recommend415 (+57)0 (0)0%949 (-19.1)1642,0822,7470.69 (+0.1)0
GET/api/v3/purl/{purl_id}120 (+4)0 (0)0%98.2 (+3.7)20.02425370.20 (0)0
GET/api/v3/purl?offset=100&limit=10&total=true136 (+12)0 (0)0%82.4 (-65.3)2.878314,2100.23 (0)0
GET/api/v3/purl?q=curl&total=true139 (+15)0 (0)0%166 (-53.5)3.052,70510,4400.23 (0)0
GET/api/v3/purl?q=license~GPLv3+...&sort=name:desc&total=true135 (+11)0 (0)0%34.3 (-2.0)6.3198.6220.23 (0)0
GET/api/v3/purl?q=name=curl&total=true161 (+33)0 (0)0%36.7 (+0.2)2.1528912,0840.27 (+0.1)0
GET/api/v3/purl?q=purl:namespace=redhat&total=true145 (+44)0 (0)0%226 (-50.9)1.964,26010,6620.24 (+0.1)0
GET/api/v3/purl?q=purl:ty=rpm&total=true156 (+31)0 (0)0%182 (-42.1)1.923,35310,4620.26 (+0.1)0
GET/api/v3/purl?sort=purl:name:asc&total=true135 (+13)0 (0)0%58.4 (-237.6)2.1874811,1010.23 (0)0
GET/api/v3/purl?total=true150 (+11)0 (0)0%33.8 (-201.9)1.7776410,4290.25 (0)0
license 9
GET/api/v3/license/spdx/license/{license_id}1,776 (-23)0 (0)0%41.6 (+0.1)0.9569.51,1432.97 (0)0
GET/api/v3/license/spdx/license?q=apache&total=true1,847 (+19)0 (0)0%2.87 (0)0.9530.41653.08 (0)0
GET/api/v3/license/spdx/license?q=gpl&total=true1,760 (-6)0 (0)0%42.0 (0)1.1172.81,9812.94 (0)0
GET/api/v3/license/spdx/license?total=true1,868 (+104)0 (0)0%41.6 (+0.1)1.0066.11,5253.12 (+0.2)0
GET/api/v3/license?limit=10&sort=license:asc&total=true1,880 (+73)0 (0)0%35.1 (+0.8)5.781524253.14 (+0.1)0
GET/api/v3/license?q=ASL&sort=license:desc&total=true1,897 (+72)0 (0)0%29.4 (-1.1)3.6195.8223.17 (+0.1)0
GET/api/v3/license?q=license~Apache&total=true1,803 (-16)0 (0)0%27.3 (0)2.3990.51203.01 (0)0
GET/api/v3/license?q=license~GPL&total=true1,857 (+21)0 (0)0%26.1 (-1.1)2.3394.7923.10 (0)0
GET/api/v3/license?total=true1,836 (-118)0 (0)0%73.0 (+1.3)8.141931,1013.07 (-0.2)0
analysis 3
GET/api/v3/analysis/component/{component}13,625 (-796)0 (0)0%14.0 (+0.7)1.351702522.75 (-1.3)0
GET/api/v3/analysis/latest/component/{cpe}13,699 (-593)0 (0)0%14.0 (+0.6)1.351762522.87 (-1.0)0
GET/api/v3/analysis/status13,697 (-712)0 (0)0%13.6 (+0.8)1.2217410322.87 (-1.2)0
importer 1
GET/api/v3/importer?total=true54,123 (+971)0 (0)0%10.2 (-0.2)0.9999.9290.36 (+1.7)0
group 3
GET/api/v3/group/sbom?parents=resolve&total=true13,810 (-726)0 (0)0%13.4 (+0.5)1.201763823.06 (-1.2)0
GET/api/v3/group/sbom?total=true13,982 (-605)0 (0)0%13.6 (+0.9)1.221732223.34 (-1.0)0
GET/api/v3/group/sbom?totals=true&total=true13,797 (-782)0 (0)0%13.6 (+0.5)1.211662223.04 (-1.3)0
labels 3
GET/api/v3/advisory-labels?filter_text=type&limit=100097 (+1)0 (0)0%5,762 (-101.7)4,9176,665600.16 (0)0
GET/api/v3/sbom-labels?limit=10&filter_text=&total=true107 (-2)0 (0)0%68.9 (+0.2)9.871351,0650.18 (0)0
GET/api/v3/sbom-labels?total=true103 (-11)0 (0)0%73.2 (+0.3)6.941271,0650.17 (0)0
other 2
GET/.well-known/trustify13,219 (+8)0 (0)0%41.7 (-0.1)0.8578.51,17922.07 (0)0
POST/api/v3/ui/extract-sbom-purls13,128 (-189)0 (0)0%2.47 (+0.1)0.8839.54521.92 (-0.3)0

Response time metrics (ms)

MethodName50%ile75%ile90%ile95%ile99%ile100%ile
sbom 16
GET/api/v3/sbom/by-package?purl={purl}110 (-10)130 (0)140 (0)150 (+10)180 (0)190 (0)
GET/api/v3/sbom/count-by-package14 (-5)61 (-10)76 (-2)80 (0)110 (+22)110 (+21)
GET/api/v3/sbom/{sbom_id}140 (+10)150 (+10)190 (0)210 (0)230 (-10)230 (-10)
GET/api/v3/sbom/{sbom_id}/all-license-ids9 (0)40 (-14)69 (-1)73 (0)77 (-5)77 (-10)
GET/api/v3/sbom/{sbom_id}/download3,100 (0)3,200 (+100)3,200 (0)3,200 (0)3,300 (0)3,300 (0)
GET/api/v3/sbom/{sbom_id}/license-export13 (+1)64 (-1)76 (-2)81 (-1)88 (+2)88 (+2)
GET/api/v3/sbom/{sbom_id}/packages110 (+10)270 (+60)290 (-10)300 (-60)470 (+90)470 (+70)
GET/api/v3/sbom/{sbom_id}/related120 (-10)200 (0)270 (+10)290 (0)490 (+160)490 (+110)
GET/api/v3/sbom?limit=10&sort=name:asc&total=true230 (+20)400 (+30)590 (+120)790 (+280)1,200 (+360)1,200 (+300)
GET/api/v3/sbom?offset=100&limit=10&total=true130 (-20)280 (+20)390 (-10)460 (-70)720 (+10)1,000 (+110)
GET/api/v3/sbom?q=label:type=product&total=true8 (0)46 (+33)70 (+11)73 (+2)78 (+1)78 (-5)
GET/api/v3/sbom?q=license~GPL&sort=name:desc&total=true13 (+3)64 (+13)75 (+5)79 (+5)89 (+7)89 (+7)
GET/api/v3/sbom?q=name~redhat&total=true900 (+150)1,200 (+100)1,400 (+100)1,500 (0)1,600 (-100)1,700 (-300)
GET/api/v3/sbom?q=published>2024-01-01&total=true120 (0)210 (+10)490 (+110)590 (+160)900 (+170)900 (+90)
GET/api/v3/sbom?sort=ingested:desc&total=true310 (+10)500 (+20)690 (+90)730 (+110)1,000 (+180)1,000 (-500)
GET/api/v3/sbom?total=true110 (-10)190 (-10)310 (-80)430 (-50)530 (-90)680 (-320)
advisory 13
GET/api/v3/advisory/urn:uuid:{advisory_id}47 (0)81 (+12)110 (+10)110 (0)120 (0)130 (-20)
GET/api/v3/advisory/urn:uuid:{advisory_id}/download14 (0)55 (+1)76 (+2)79 (+1)86 (-5)110 (-90)
GET/api/v3/advisory?deprecated=Consider&total=true16 (-2)69 (-2)79 (-4)85 (-25)1,800 (-300)3,000 (+400)
GET/api/v3/advisory?limit=1&total=true50 (0)76 (+3)100 (-10)110 (0)600 (-700)1,300 (-300)
GET/api/v3/advisory?limit=10&sort=ingested:desc&total=true13 (-1)61 (0)74 (0)81 (-1)2,100 (-200)3,200 (+300)
GET/api/v3/advisory?offset=100&limit=10&total=true76 (+1)89 (+2)96 (+2)99 (-1)110 (-320)2,500 (-300)
GET/api/v3/advisory?offset={offset}&limit=1220 (+30)340 (+30)440 (-70)520 (-90)690 (-120)790 (-50)
GET/api/v3/advisory?q=CVE-2021-&total=true200 (0)320 (-50)1,200 (+100)1,700 (-100)2,200 (-200)3,300 (-600)
GET/api/v3/advisory?q=identifier=CVE-2022-0981&total=true48 (+1)81 (+11)110 (+10)110 (0)120 (0)130 (0)
GET/api/v3/advisory?q=modified>3 days ago&total=true8 (0)46 (+12)66 (+1)71 (+1)80 (+2)88 (+3)
GET/api/v3/advisory?q=title~openssl&total=true41 (+13)77 (0)86 (-4)94 (-16)120 (-230)480 (-420)
GET/api/v3/advisory?sort=modified:desc&total=true16 (-2)68 (-1)80 (-1)89 (-7)2,200 (+300)3,600 (+700)
GET/api/v3/advisory?total=true100 (0)120 (0)170 (-10)190 (0)930 (+720)2,800 (-300)
vulnerability 7
POST/api/v3/vulnerability/analyze670 (-330)2,000 (0)3,100 (-500)3,600 (-300)4,400 (-600)4,900 (-1,900)
GET/api/v3/vulnerability?offset=100&limit=10&total=true8 (-38)52 (-14)73 (-27)77 (-33)670 (-20)800 (-200)
GET/api/v3/vulnerability?q=base_score>=7.0&total=true9 (0)21 (-33)69 (-3)97 (-393)1,200 (0)1,200 (0)
GET/api/v3/vulnerability?q=base_severity=high&total=true9 (0)58 (+20)78 (+9)380 (+80)800 (-200)1,300 (-200)
GET/api/v3/vulnerability?q=cwes=CWE-79&total=true9 (0)14 (-37)74 (+3)300 (+130)1,600 (+400)2,000 (+600)
GET/api/v3/vulnerability?sort=base_score:desc&total=true940 (+340)1,400 (+410)1,800 (+500)2,000 (+600)2,400 (+200)3,500 (+900)
GET/api/v3/vulnerability?total=true9 (+1)13 (-4)67 (-2)71 (-4)790 (+100)900 (+100)
purl 15
GET/api/v3/purl/base/{purl}63 (0)190 (+50)260 (+50)360 (+80)390 (+90)470 (+90)
GET/api/v3/purl/base?q=namespace=redhat&total=true46 (-7)78 (-11)100 (-10)240 (+30)750 (+120)820 (+190)
GET/api/v3/purl/base?q=type=rpm&total=true47 (+1)84 (-8)100 (0)100 (-10)110 (-10)130 (-50)
GET/api/v3/purl/base?sort=name:asc&total=true210 (-10)250 (0)310 (-20)340 (-10)540 (+140)580 (+170)
GET/api/v3/purl/base?total=true45 (-2)79 (-16)99 (-11)100 (-30)140 (-60)240 (0)
POST/api/v3/purl/recommend1,000 (0)1,200 (0)1,300 (-100)1,500 (0)1,600 (0)2,100 (+500)
GET/api/v3/purl/{purl_id}92 (+7)120 (0)160 (-10)180 (-10)200 (-70)240 (-70)
GET/api/v3/purl?offset=100&limit=10&total=true46 (-1)81 (+1)100 (+1)160 (+60)800 (-3,600)830 (-3,670)
GET/api/v3/purl?q=curl&total=true45 (-39)91 (-89)610 (+130)910 (+20)1,300 (-1,300)2,700 (-400)
GET/api/v3/purl?q=license~GPLv3+...&sort=name:desc&total=true24 (-11)61 (+1)68 (-3)81 (+5)93 (+3)99 (-11)
GET/api/v3/purl?q=name=curl&total=true15 (-3)55 (+2)67 (-2)72 (-28)290 (+40)290 (+10)
GET/api/v3/purl?q=purl:namespace=redhat&total=true9 (-17)50 (-4)69 (-31)3,000 (+300)3,500 (+100)4,300 (+100)
GET/api/v3/purl?q=purl:ty=rpm&total=true7 (-1)37 (-15)61 (-36)2,500 (-100)3,400 (+100)3,400 (+100)
GET/api/v3/purl?sort=purl:name:asc&total=true19 (+7)56 (+8)64 (-7)340 (-3,060)620 (-3,980)750 (-3,850)
GET/api/v3/purl?total=true9 (-23)51 (-2)62 (-10)69 (-28)490 (-4,310)760 (-5,540)
license 9
GET/api/v3/license/spdx/license/{license_id}43 (+1)43 (0)44 (0)45 (0)54 (+1)70 (0)
GET/api/v3/license/spdx/license?q=apache&total=true3 (0)4 (0)5 (0)6 (0)8 (0)30 (+1)
GET/api/v3/license/spdx/license?q=gpl&total=true43 (0)44 (0)45 (0)46 (0)54 (-1)73 (+2)
GET/api/v3/license/spdx/license?total=true43 (0)43 (0)44 (0)45 (0)51 (-1)66 (-5)
GET/api/v3/license?limit=10&sort=license:asc&total=true22 (+3)58 (0)74 (0)79 (-1)89 (+1)150 (0)
GET/api/v3/license?q=ASL&sort=license:desc&total=true14 (-2)52 (-1)67 (0)75 (0)83 (-1)96 (-4)
GET/api/v3/license?q=license~Apache&total=true13 (+1)50 (0)62 (-2)71 (-1)79 (-1)91 (-5)
GET/api/v3/license?q=license~GPL&total=true11 (0)48 (-2)63 (0)72 (0)79 (-2)95 (-5)
GET/api/v3/license?total=true61 (+2)97 (+1)110 (0)120 (0)130 (0)190 (-10)
analysis 3
GET/api/v3/analysis/component/{component}5 (0)7 (0)64 (+2)70 (+1)78 (+2)170 (+70)
GET/api/v3/analysis/latest/component/{cpe}5 (0)7 (0)64 (+2)70 (+1)77 (+2)180 (+70)
GET/api/v3/analysis/status5 (0)7 (0)63 (+2)69 (+1)77 (+2)170 (+70)
importer 1
GET/api/v3/importer?total=true4 (0)5 (0)52 (-1)66 (0)73 (0)100 (0)
group 3
GET/api/v3/group/sbom?parents=resolve&total=true5 (+1)7 (+1)63 (+2)69 (0)76 (-1)180 (+10)
GET/api/v3/group/sbom?total=true5 (+1)7 (+1)63 (+2)69 (+1)76 (0)170 (0)
GET/api/v3/group/sbom?totals=true&total=true5 (+1)7 (+1)63 (+1)69 (0)77 (0)170 (0)
labels 3
GET/api/v3/advisory-labels?filter_text=type&limit=10005,800 (0)6,100 (0)6,400 (-100)6,500 (-300)6,700 (-1,000)6,700 (-1,000)
GET/api/v3/sbom-labels?limit=10&filter_text=&total=true53 (+3)96 (-3)110 (-10)120 (0)120 (-10)130 (0)
GET/api/v3/sbom-labels?total=true66 (+12)100 (0)110 (0)120 (0)120 (-10)130 (-10)
other 2
GET/.well-known/trustify42 (0)43 (0)44 (0)45 (0)54 (-1)79 (+6)
POST/api/v3/ui/extract-sbom-purls2 (+1)3 (0)5 (0)6 (0)8 (0)40 (-6)

Failures

No failures recorded.

Exceptions

No exceptions raised in the locustfile.