← All runs

Trustify load tests · 2026-10-22 19:12 UTC

Target trustify (scale snapshot, CI) · 2026-10-22 19:12:54 UTC → 19:22:52 UTC · Users 10 · Deltas vs previous run (2026-10-22 13:44 UTC, 2026-10-22T12-52-49_7f38deb)

Type daily · Dataset scale-20260317T023702Z · Scenario etc/scenarios/main/full-20260317T023702Z.json5 · Branch main · Commit 38d6fa40752b · Workflow run

Duration
9m 58s
Total requests
195,520 (+3,648)
Failure rate
0.0%
0 failed requests
Throughput
326.3 req/s (+6.0)
Latency 95%ile
72 ms (0)
Latency 99%ile
200 ms (0)
Endpoints
72
0 with failures

Over time

Throughput

Requests and failures per second

Response time

Percentiles over Locust's rolling window, ms

Users

Concurrent simulated users

Load plan

ActionStartedStoppedElapsedUsers
Increasing19:12:5419:12:580m 04s2 → 10
Maintaining19:12:5819:22:529m 54s10 → 10

Top 10 slowest endpoints (95%ile)

#MethodName95%ile (ms)Average (ms)# Requests
1GET/api/v3/advisory-labels?filter_text=type&limit=10006,4005,632100
2POST/api/v3/vulnerability/analyze3,400977384
3GET/api/v3/sbom/{sbom_id}/download3,3003,10390
4GET/api/v3/purl?q=purl:ty=rpm&total=true2,600205150
5GET/api/v3/purl?q=purl:namespace=redhat&total=true2,500188144
6GET/api/v3/advisory?q=CVE-2021-&total=true1,800410547
7GET/api/v3/vulnerability?sort=base_score:desc&total=true1,800972169
8POST/api/v3/purl/recommend1,400956427
9GET/api/v3/sbom?q=name~redhat&total=true1,400557123
10GET/api/v3/sbom?limit=10&sort=name:asc&total=true77028297

Request metrics

MethodName# Requests# FailsFail %Average (ms)Min (ms)Max (ms)Avg size (B)RPSFailures/s
sbom 16
GET/api/v3/sbom/by-package?purl={purl}105 (+4)0 (0)0%109 (+4.0)27.12311,2870.18 (0)0
GET/api/v3/sbom/count-by-package89 (-3)0 (0)0%36.2 (+4.9)4.5390.630.15 (0)0
GET/api/v3/sbom/{sbom_id}113 (+20)0 (0)0%133 (+1.4)56.92572,0150.19 (0)0
GET/api/v3/sbom/{sbom_id}/all-license-ids96 (-7)0 (0)0%25.7 (+0.5)2.6283.320.16 (0)0
GET/api/v3/sbom/{sbom_id}/download90 (-5)0 (0)0%3,103 (-6.2)2,9453,361136,458,6380.15 (0)0
GET/api/v3/sbom/{sbom_id}/license-export99 (+26)0 (0)0%36.6 (+1.9)4.7199.52340.17 (0)0
GET/api/v3/sbom/{sbom_id}/packages111 (+15)0 (0)0%169 (+17.8)18.079212,6480.19 (0)0
GET/api/v3/sbom/{sbom_id}/related94 (+7)0 (0)0%166 (+16.5)33.947715,3720.16 (0)0
GET/api/v3/sbom?limit=10&sort=name:asc&total=true97 (+3)0 (0)0%282 (-23.7)36.697712,1890.16 (0)0
GET/api/v3/sbom?offset=100&limit=10&total=true196 (-11)0 (0)0%225 (+30.2)29.784111,9410.33 (0)0
GET/api/v3/sbom?q=label:type=product&total=true99 (+9)0 (0)0%24.8 (+1.3)2.2282.8220.17 (0)0
GET/api/v3/sbom?q=license~GPL&sort=name:desc&total=true103 (+8)0 (0)0%29.8 (-3.2)2.8496.3220.17 (0)0
GET/api/v3/sbom?q=name~redhat&total=true123 (+17)0 (0)0%557 (-104.7)10.91,712220.21 (0)0
GET/api/v3/sbom?q=published>2024-01-01&total=true102 (+8)0 (0)0%192 (-11.0)28.61,11129,3170.17 (0)0
GET/api/v3/sbom?sort=ingested:desc&total=true93 (+2)0 (0)0%330 (-9.5)28.91,38429,6000.16 (0)0
GET/api/v3/sbom?total=true196 (-3)0 (0)0%183 (+21.9)27.51,01029,3170.33 (0)0
advisory 13
GET/api/v3/advisory/urn:uuid:{advisory_id}580 (-32)0 (0)0%58.1 (-2.3)4.171992,3950.97 (-0.1)0
GET/api/v3/advisory/urn:uuid:{advisory_id}/download559 (+34)0 (0)0%30.8 (+0.5)5.05178178,4230.93 (+0.1)0
GET/api/v3/advisory?deprecated=Consider&total=true562 (-41)0 (0)0%74.2 (+2.6)6.862,78044,0030.94 (-0.1)0
GET/api/v3/advisory?limit=1&total=true102 (-6)0 (0)0%74.4 (-2.3)7.326312,4140.17 (0)0
GET/api/v3/advisory?limit=10&sort=ingested:desc&total=true556 (-22)0 (0)0%69.5 (+1.6)5.093,16220,1930.93 (0)0
GET/api/v3/advisory?offset=100&limit=10&total=true558 (-5)0 (0)0%76.0 (+0.9)6.802,23019,7000.93 (0)0
GET/api/v3/advisory?offset={offset}&limit=1102 (-6)0 (0)0%246 (-2.5)50.98731,9910.17 (0)0
GET/api/v3/advisory?q=CVE-2021-&total=true547 (-39)0 (0)0%410 (+26.8)8.202,97049,8530.91 (-0.1)0
GET/api/v3/advisory?q=identifier=CVE-2022-0981&total=true562 (+35)0 (0)0%61.6 (+0.5)4.101861,9710.94 (+0.1)0
GET/api/v3/advisory?q=modified>3 days ago&total=true539 (-4)0 (0)0%25.3 (+2.5)2.92118220.90 (0)0
GET/api/v3/advisory?q=title~openssl&total=true562 (-33)0 (0)0%49.9 (+2.3)8.35684126,4520.94 (-0.1)0
GET/api/v3/advisory?sort=modified:desc&total=true530 (-36)0 (0)0%84.2 (+7.9)6.883,62038,1280.88 (-0.1)0
GET/api/v3/advisory?total=true532 (-51)0 (0)0%140 (+11.7)9.482,58350,4520.89 (-0.1)0
vulnerability 7
POST/api/v3/vulnerability/analyze384 (+32)0 (0)0%977 (-134.4)1.665,1564,330,1060.64 (+0.1)0
GET/api/v3/vulnerability?offset=100&limit=10&total=true179 (+8)0 (0)0%71.0 (+32.9)3.909227,6200.30 (0)0
GET/api/v3/vulnerability?q=base_score>=7.0&total=true204 (+15)0 (0)0%53.9 (-1.5)2.681,40318,3860.34 (0)0
GET/api/v3/vulnerability?q=base_severity=high&total=true183 (+11)0 (0)0%71.1 (+15.8)2.941,86618,6200.31 (0)0
GET/api/v3/vulnerability?q=cwes=CWE-79&total=true179 (+11)0 (0)0%63.7 (-10.3)3.191,51018,8730.30 (0)0
GET/api/v3/vulnerability?sort=base_score:desc&total=true169 (+9)0 (0)0%972 (-17.8)2132,70114,1680.28 (0)0
GET/api/v3/vulnerability?total=true194 (+33)0 (0)0%35.6 (-3.2)2.7799519,2210.32 (+0.1)0
purl 15
GET/api/v3/purl/base/{purl}132 (-3)0 (0)0%92.4 (-9.7)7.4636748,8270.22 (0)0
GET/api/v3/purl/base?q=namespace=redhat&total=true149 (+10)0 (0)0%66.5 (-16.7)4.236272,0800.25 (0)0
GET/api/v3/purl/base?q=type=rpm&total=true140 (+4)0 (0)0%57.8 (-3.8)3.071242,0800.23 (0)0
GET/api/v3/purl/base?sort=name:asc&total=true146 (+14)0 (0)0%222 (+6.2)86.95012,9430.24 (0)0
GET/api/v3/purl/base?total=true140 (-1)0 (0)0%59.2 (-0.8)4.021542,4500.23 (0)0
POST/api/v3/purl/recommend427 (+12)0 (0)0%956 (+6.7)1301,8142,7470.71 (0)0
GET/api/v3/purl/{purl_id}138 (+18)0 (0)0%94.1 (-4.1)19.72095370.23 (0)0
GET/api/v3/purl?offset=100&limit=10&total=true131 (-5)0 (0)0%68.8 (-13.7)3.186094,4740.22 (0)0
GET/api/v3/purl?q=curl&total=true130 (-9)0 (0)0%94.5 (-71.2)5.721,20211,7140.22 (0)0
GET/api/v3/purl?q=license~GPLv3+...&sort=name:desc&total=true140 (+5)0 (0)0%29.6 (-4.7)3.4897.5220.23 (0)0
GET/api/v3/purl?q=name=curl&total=true140 (-21)0 (0)0%40.9 (+4.2)1.7638812,0840.23 (0)0
GET/api/v3/purl?q=purl:namespace=redhat&total=true144 (-1)0 (0)0%188 (-37.5)1.833,34613,6170.24 (0)0
GET/api/v3/purl?q=purl:ty=rpm&total=true150 (-6)0 (0)0%205 (+22.9)2.064,25613,6170.25 (0)0
GET/api/v3/purl?sort=purl:name:asc&total=true146 (+11)0 (0)0%59.1 (+0.7)1.9681611,1010.24 (0)0
GET/api/v3/purl?total=true141 (-9)0 (0)0%44.2 (+10.4)1.691,0079,8770.24 (0)0
license 9
GET/api/v3/license/spdx/license/{license_id}1,814 (+38)0 (0)0%41.2 (-0.4)1.0569.91,1433.03 (+0.1)0
GET/api/v3/license/spdx/license?q=apache&total=true1,819 (-28)0 (0)0%2.58 (-0.3)0.9738.61653.04 (0)0
GET/api/v3/license/spdx/license?q=gpl&total=true1,824 (+64)0 (0)0%41.5 (-0.4)1.0669.91,9813.04 (+0.1)0
GET/api/v3/license/spdx/license?total=true1,934 (+66)0 (0)0%41.1 (-0.5)1.1277.31,5253.23 (+0.1)0
GET/api/v3/license?limit=10&sort=license:asc&total=true1,801 (-79)0 (0)0%37.7 (+2.5)4.321654253.01 (-0.1)0
GET/api/v3/license?q=ASL&sort=license:desc&total=true1,799 (-98)0 (0)0%29.9 (+0.4)3.1698.6223.00 (-0.2)0
GET/api/v3/license?q=license~Apache&total=true1,832 (+29)0 (0)0%27.3 (0)2.431021203.06 (0)0
GET/api/v3/license?q=license~GPL&total=true1,866 (+9)0 (0)0%26.3 (+0.2)2.3698.9923.11 (0)0
GET/api/v3/license?total=true1,861 (+25)0 (0)0%70.0 (-3.1)7.742211,1013.11 (0)0
analysis 3
GET/api/v3/analysis/component/{component}14,459 (+834)0 (0)0%13.3 (-0.7)1.321032524.13 (+1.4)0
GET/api/v3/analysis/latest/component/{cpe}14,262 (+563)0 (0)0%13.6 (-0.4)1.3799.42523.80 (+0.9)0
GET/api/v3/analysis/status14,284 (+587)0 (0)0%12.8 (-0.7)1.2310210323.84 (+1.0)0
importer 1
GET/api/v3/importer?total=true53,931 (-192)0 (0)0%10.3 (+0.1)0.99103290.02 (-0.3)0
group 3
GET/api/v3/group/sbom?parents=resolve&total=true14,387 (+577)0 (0)0%13.0 (-0.4)1.251023824.01 (+1.0)0
GET/api/v3/group/sbom?total=true14,489 (+507)0 (0)0%12.9 (-0.7)1.211132224.18 (+0.8)0
GET/api/v3/group/sbom?totals=true&total=true14,630 (+833)0 (0)0%12.9 (-0.7)1.231102224.42 (+1.4)0
labels 3
GET/api/v3/advisory-labels?filter_text=type&limit=1000100 (+3)0 (0)0%5,632 (-130.3)4,7046,821600.17 (0)0
GET/api/v3/sbom-labels?limit=10&filter_text=&total=true110 (+3)0 (0)0%68.0 (-0.9)8.941271,0650.18 (0)0
GET/api/v3/sbom-labels?total=true99 (-4)0 (0)0%70.5 (-2.6)8.741261,0650.17 (0)0
other 2
GET/.well-known/trustify13,000 (-219)0 (0)0%42.1 (+0.4)0.891281,17021.70 (-0.4)0
POST/api/v3/ui/extract-sbom-purls13,236 (+108)0 (0)0%2.82 (+0.3)0.9177.34522.09 (+0.2)0

Response time metrics (ms)

MethodName50%ile75%ile90%ile95%ile99%ile100%ile
sbom 16
GET/api/v3/sbom/by-package?purl={purl}120 (+10)130 (0)170 (+30)200 (+50)220 (+40)230 (+40)
GET/api/v3/sbom/count-by-package14 (0)67 (+6)80 (+4)83 (+3)91 (-19)91 (-19)
GET/api/v3/sbom/{sbom_id}130 (-10)150 (0)200 (+10)220 (+10)240 (+10)260 (+30)
GET/api/v3/sbom/{sbom_id}/all-license-ids9 (0)50 (+10)71 (+2)73 (0)83 (+6)83 (+6)
GET/api/v3/sbom/{sbom_id}/download3,100 (0)3,100 (-100)3,200 (0)3,300 (+100)3,400 (+100)3,400 (+100)
GET/api/v3/sbom/{sbom_id}/license-export15 (+2)71 (+7)78 (+2)82 (+1)99 (+11)99 (+11)
GET/api/v3/sbom/{sbom_id}/packages110 (0)280 (+10)310 (+20)380 (+80)390 (-80)790 (+320)
GET/api/v3/sbom/{sbom_id}/related170 (+50)200 (0)280 (+10)290 (0)480 (-10)480 (-10)
GET/api/v3/sbom?limit=10&sort=name:asc&total=true210 (-20)370 (-30)520 (-70)770 (-20)980 (-220)980 (-220)
GET/api/v3/sbom?offset=100&limit=10&total=true170 (+40)310 (+30)490 (+100)550 (+90)800 (+80)840 (-160)
GET/api/v3/sbom?q=label:type=product&total=true8 (0)49 (+3)68 (-2)76 (+3)83 (+5)83 (+5)
GET/api/v3/sbom?q=license~GPL&sort=name:desc&total=true10 (-3)57 (-7)74 (-1)76 (-3)80 (-9)96 (+7)
GET/api/v3/sbom?q=name~redhat&total=true170 (-730)1,100 (-100)1,300 (-100)1,400 (-100)1,700 (+100)1,700 (0)
GET/api/v3/sbom?q=published>2024-01-01&total=true120 (0)200 (-10)390 (-100)500 (-90)710 (-190)1,100 (+200)
GET/api/v3/sbom?sort=ingested:desc&total=true280 (-30)480 (-20)560 (-130)610 (-120)1,400 (+400)1,400 (+400)
GET/api/v3/sbom?total=true140 (+30)200 (+10)350 (+40)440 (+10)960 (+430)1,000 (+320)
advisory 13
GET/api/v3/advisory/urn:uuid:{advisory_id}47 (0)77 (-4)110 (0)110 (0)120 (0)200 (+70)
GET/api/v3/advisory/urn:uuid:{advisory_id}/download13 (-1)58 (+3)75 (-1)80 (+1)100 (+14)180 (+70)
GET/api/v3/advisory?deprecated=Consider&total=true20 (+4)73 (+4)84 (+5)100 (+15)1,700 (-100)2,800 (-200)
GET/api/v3/advisory?limit=1&total=true50 (0)76 (0)110 (+10)110 (0)580 (-20)630 (-670)
GET/api/v3/advisory?limit=10&sort=ingested:desc&total=true13 (0)65 (+4)76 (+2)86 (+5)2,000 (-100)3,200 (0)
GET/api/v3/advisory?offset=100&limit=10&total=true79 (+3)91 (+2)100 (+4)110 (+11)180 (+70)2,200 (-300)
GET/api/v3/advisory?offset={offset}&limit=1200 (-20)320 (-20)410 (-30)500 (-20)650 (-40)870 (+80)
GET/api/v3/advisory?q=CVE-2021-&total=true200 (0)360 (+40)1,200 (0)1,800 (+100)2,300 (+100)3,000 (-300)
GET/api/v3/advisory?q=identifier=CVE-2022-0981&total=true48 (0)89 (+8)110 (0)110 (0)120 (0)190 (+60)
GET/api/v3/advisory?q=modified>3 days ago&total=true8 (0)51 (+5)67 (+1)73 (+2)79 (-1)120 (+32)
GET/api/v3/advisory?q=title~openssl&total=true23 (-18)77 (0)87 (+1)100 (+6)400 (+280)680 (+200)
GET/api/v3/advisory?sort=modified:desc&total=true18 (+2)70 (+2)82 (+2)110 (+21)2,100 (-100)3,600 (0)
GET/api/v3/advisory?total=true110 (+10)160 (+40)190 (+20)200 (+10)1,400 (+470)2,600 (-200)
vulnerability 7
POST/api/v3/vulnerability/analyze66 (-604)1,600 (-400)2,900 (-200)3,400 (-200)4,500 (+100)5,200 (+300)
GET/api/v3/vulnerability?offset=100&limit=10&total=true46 (+38)49 (-3)100 (+27)110 (+33)810 (+140)920 (+120)
GET/api/v3/vulnerability?q=base_score>=7.0&total=true8 (-1)20 (-1)68 (-1)79 (-18)1,300 (+100)1,400 (+200)
GET/api/v3/vulnerability?q=base_severity=high&total=true8 (-1)26 (-32)72 (-6)140 (-240)1,800 (+1,000)1,900 (+600)
GET/api/v3/vulnerability?q=cwes=CWE-79&total=true8 (-1)47 (+33)70 (-4)100 (-200)1,200 (-400)1,500 (-500)
GET/api/v3/vulnerability?sort=base_score:desc&total=true770 (-170)1,400 (0)1,700 (-100)1,800 (-200)2,400 (0)2,700 (-800)
GET/api/v3/vulnerability?total=true8 (-1)33 (+20)69 (+2)73 (+2)700 (-90)990 (+90)
purl 15
GET/api/v3/purl/base/{purl}57 (-6)160 (-30)250 (-10)300 (-60)360 (-30)370 (-100)
GET/api/v3/purl/base?q=namespace=redhat&total=true45 (-1)79 (+1)100 (0)110 (-130)610 (-140)630 (-190)
GET/api/v3/purl/base?q=type=rpm&total=true46 (-1)79 (-5)96 (-4)100 (0)110 (0)120 (-10)
GET/api/v3/purl/base?sort=name:asc&total=true220 (+10)250 (0)310 (0)320 (-20)410 (-130)500 (-80)
GET/api/v3/purl/base?total=true46 (+1)84 (+5)100 (+1)110 (+10)140 (0)150 (-90)
POST/api/v3/purl/recommend1,100 (+100)1,200 (0)1,400 (+100)1,400 (-100)1,700 (+100)1,800 (-300)
GET/api/v3/purl/{purl_id}95 (+3)110 (-10)150 (-10)190 (+10)200 (0)210 (-30)
GET/api/v3/purl?offset=100&limit=10&total=true46 (0)71 (-10)98 (-2)110 (-50)570 (-230)610 (-220)
GET/api/v3/purl?q=curl&total=true46 (+1)71 (-20)87 (-523)540 (-370)1,200 (-100)1,200 (-1,500)
GET/api/v3/purl?q=license~GPLv3+...&sort=name:desc&total=true16 (-8)52 (-9)65 (-3)69 (-12)92 (-1)98 (-1)
GET/api/v3/purl?q=name=curl&total=true18 (+3)57 (+2)68 (+1)140 (+68)380 (+90)390 (+100)
GET/api/v3/purl?q=purl:namespace=redhat&total=true8 (-1)53 (+3)65 (-4)2,500 (-500)3,200 (-300)3,300 (-1,000)
GET/api/v3/purl?q=purl:ty=rpm&total=true8 (+1)46 (+9)63 (+2)2,600 (+100)3,600 (+200)4,300 (+900)
GET/api/v3/purl?sort=purl:name:asc&total=true16 (-3)56 (0)69 (+5)350 (+10)770 (+150)820 (+70)
GET/api/v3/purl?total=true8 (-1)45 (-6)60 (-2)67 (-2)760 (+270)1,000 (+240)
license 9
GET/api/v3/license/spdx/license/{license_id}42 (-1)43 (0)44 (0)45 (0)53 (-1)70 (0)
GET/api/v3/license/spdx/license?q=apache&total=true2 (-1)3 (-1)5 (0)5 (-1)7 (-1)39 (+9)
GET/api/v3/license/spdx/license?q=gpl&total=true43 (0)43 (-1)45 (0)46 (0)52 (-2)70 (-3)
GET/api/v3/license/spdx/license?total=true42 (-1)43 (0)44 (0)45 (0)53 (+2)77 (+11)
GET/api/v3/license?limit=10&sort=license:asc&total=true29 (+7)61 (+3)77 (+3)83 (+4)92 (+3)160 (+10)
GET/api/v3/license?q=ASL&sort=license:desc&total=true15 (+1)52 (0)68 (+1)76 (+1)85 (+2)99 (+3)
GET/api/v3/license?q=license~Apache&total=true12 (-1)49 (-1)67 (+5)73 (+2)80 (+1)100 (+9)
GET/api/v3/license?q=license~GPL&total=true12 (+1)47 (-1)64 (+1)73 (+1)82 (+3)99 (+4)
GET/api/v3/license?total=true58 (-3)96 (-1)110 (0)120 (0)130 (0)220 (+30)
analysis 3
GET/api/v3/analysis/component/{component}5 (0)7 (0)63 (-1)70 (0)76 (-2)100 (-70)
GET/api/v3/analysis/latest/component/{cpe}5 (0)7 (0)64 (0)70 (0)76 (-1)99 (-81)
GET/api/v3/analysis/status4 (-1)6 (-1)63 (0)69 (0)75 (-2)100 (-70)
importer 1
GET/api/v3/importer?total=true3 (-1)5 (0)54 (+2)66 (0)73 (0)100 (0)
group 3
GET/api/v3/group/sbom?parents=resolve&total=true5 (0)6 (-1)63 (0)69 (0)76 (0)100 (-80)
GET/api/v3/group/sbom?total=true4 (-1)6 (-1)63 (0)69 (0)75 (-1)110 (-60)
GET/api/v3/group/sbom?totals=true&total=true4 (-1)6 (-1)63 (0)69 (0)75 (-2)110 (-60)
labels 3
GET/api/v3/advisory-labels?filter_text=type&limit=10005,600 (-200)6,000 (-100)6,200 (-200)6,400 (-100)6,800 (+100)6,800 (+100)
GET/api/v3/sbom-labels?limit=10&filter_text=&total=true51 (-2)95 (-1)110 (0)120 (0)130 (+10)130 (0)
GET/api/v3/sbom-labels?total=true51 (-15)100 (0)120 (+10)120 (0)130 (+10)130 (0)
other 2
GET/.well-known/trustify42 (0)43 (0)44 (0)45 (0)64 (+10)130 (+51)
POST/api/v3/ui/extract-sbom-purls1 (-1)3 (0)5 (0)6 (0)23 (+15)77 (+37)

Failures

No failures recorded.

Exceptions

No exceptions raised in the locustfile.