← All runs

Trustify load tests · 2026-10-22 22:07 UTC

Target trustify (scale snapshot, CI) · 2026-10-22 22:07:20 UTC → 22:17:18 UTC · Users 10 · Deltas vs previous run (2026-10-22 19:12 UTC, 2026-10-22T18-22-03_38d6fa4)

Type daily · Dataset scale-20260317T023702Z · Scenario etc/scenarios/main/full-20260317T023702Z.json5 · Branch main · Commit 38d6fa40752b · Workflow run

Duration
9m 58s
Total requests
196,251 (+731)
Failure rate
0.0%
0 failed requests
Throughput
327.6 req/s (+1.2)
Latency 95%ile
72 ms (0)
Latency 99%ile
210 ms (+10)
Endpoints
72
0 with failures

Over time

Throughput

Requests and failures per second

Response time

Percentiles over Locust's rolling window, ms

Users

Concurrent simulated users

Load plan

ActionStartedStoppedElapsedUsers
Increasing22:07:2022:07:240m 04s2 → 10
Maintaining22:07:2422:17:189m 54s10 → 10

Top 10 slowest endpoints (95%ile)

#MethodName95%ile (ms)Average (ms)# Requests
1GET/api/v3/advisory-labels?filter_text=type&limit=10006,8005,84097
2POST/api/v3/vulnerability/analyze3,5001,059385
3GET/api/v3/sbom/{sbom_id}/download3,2003,061110
4GET/api/v3/purl?q=purl:ty=rpm&total=true2,500187142
5GET/api/v3/advisory?q=CVE-2021-&total=true1,800393574
6POST/api/v3/purl/recommend1,500954424
7GET/api/v3/vulnerability?sort=base_score:desc&total=true1,500722195
8GET/api/v3/purl?q=purl:namespace=redhat&total=true1,200158164
9GET/api/v3/purl?q=curl&total=true810107135
10GET/api/v3/sbom?limit=10&sort=name:asc&total=true690292100

Request metrics

MethodName# Requests# FailsFail %Average (ms)Min (ms)Max (ms)Avg size (B)RPSFailures/s
sbom 16
GET/api/v3/sbom/by-package?purl={purl}99 (-6)0 (0)0%108 (-0.6)17.02521,2870.17 (0)0
GET/api/v3/sbom/count-by-package100 (+11)0 (0)0%28.6 (-7.6)4.5388.230.17 (0)0
GET/api/v3/sbom/{sbom_id}115 (+2)0 (0)0%130 (-2.8)54.43872,0150.19 (0)0
GET/api/v3/sbom/{sbom_id}/all-license-ids124 (+28)0 (0)0%24.8 (-0.9)2.0682.820.21 (0)0
GET/api/v3/sbom/{sbom_id}/download110 (+20)0 (0)0%3,061 (-41.0)2,8903,359136,458,6380.18 (0)0
GET/api/v3/sbom/{sbom_id}/license-export114 (+15)0 (0)0%32.5 (-4.1)5.4787.02340.19 (0)0
GET/api/v3/sbom/{sbom_id}/packages97 (-14)0 (0)0%158 (-11.1)15.441112,6480.16 (0)0
GET/api/v3/sbom/{sbom_id}/related102 (+8)0 (0)0%141 (-24.4)21.832615,3720.17 (0)0
GET/api/v3/sbom?limit=10&sort=name:asc&total=true100 (+3)0 (0)0%292 (+10.5)35.51,30212,1890.17 (0)0
GET/api/v3/sbom?offset=100&limit=10&total=true227 (+31)0 (0)0%151 (-73.4)20.778911,8920.38 (+0.1)0
GET/api/v3/sbom?q=label:type=product&total=true102 (+3)0 (0)0%22.9 (-2.0)1.8481.6220.17 (0)0
GET/api/v3/sbom?q=license~GPL&sort=name:desc&total=true114 (+11)0 (0)0%25.0 (-4.8)3.9977.5220.19 (0)0
GET/api/v3/sbom?q=name~redhat&total=true121 (-2)0 (0)0%255 (-302.1)75.2605220.20 (0)0
GET/api/v3/sbom?q=published>2024-01-01&total=true88 (-14)0 (0)0%192 (-0.5)29.087229,3170.15 (0)0
GET/api/v3/sbom?sort=ingested:desc&total=true114 (+21)0 (0)0%269 (-60.5)28.379429,6000.19 (0)0
GET/api/v3/sbom?total=true203 (+7)0 (0)0%164 (-18.4)24.685729,3170.34 (0)0
advisory 13
GET/api/v3/advisory/urn:uuid:{advisory_id}559 (-21)0 (0)0%60.3 (+2.2)3.632092,3950.93 (0)0
GET/api/v3/advisory/urn:uuid:{advisory_id}/download569 (+10)0 (0)0%27.9 (-2.9)5.33149178,4230.95 (0)0
GET/api/v3/advisory?deprecated=Consider&total=true626 (+64)0 (0)0%66.9 (-7.3)4.962,42144,0031.04 (+0.1)0
GET/api/v3/advisory?limit=1&total=true98 (-4)0 (0)0%69.7 (-4.7)9.979962,3510.16 (0)0
GET/api/v3/advisory?limit=10&sort=ingested:desc&total=true580 (+24)0 (0)0%71.1 (+1.6)5.653,04120,1930.97 (0)0
GET/api/v3/advisory?offset=100&limit=10&total=true564 (+6)0 (0)0%70.8 (-5.2)6.142,37818,9890.94 (0)0
GET/api/v3/advisory?offset={offset}&limit=198 (-4)0 (0)0%258 (+11.9)40.37631,8740.16 (0)0
GET/api/v3/advisory?q=CVE-2021-&total=true574 (+27)0 (0)0%393 (-16.4)11.22,77849,5680.96 (0)0
GET/api/v3/advisory?q=identifier=CVE-2022-0981&total=true547 (-15)0 (0)0%57.3 (-4.2)4.311361,9710.91 (0)0
GET/api/v3/advisory?q=modified>3 days ago&total=true553 (+14)0 (0)0%24.3 (-0.9)2.3297.3220.92 (0)0
GET/api/v3/advisory?q=title~openssl&total=true573 (+11)0 (0)0%47.9 (-2.1)9.34622126,4520.96 (0)0
GET/api/v3/advisory?sort=modified:desc&total=true593 (+63)0 (0)0%73.2 (-11.0)6.472,80938,1280.99 (+0.1)0
GET/api/v3/advisory?total=true569 (+37)0 (0)0%139 (-1.5)7.893,08347,8160.95 (+0.1)0
vulnerability 7
POST/api/v3/vulnerability/analyze385 (+1)0 (0)0%1,059 (+82.3)2.005,3994,764,8180.64 (0)0
GET/api/v3/vulnerability?offset=100&limit=10&total=true162 (-17)0 (0)0%60.1 (-10.9)4.271,0307,4590.27 (0)0
GET/api/v3/vulnerability?q=base_score>=7.0&total=true194 (-10)0 (0)0%44.1 (-9.8)2.851,29618,3890.32 (0)0
GET/api/v3/vulnerability?q=base_severity=high&total=true159 (-24)0 (0)0%55.5 (-15.6)2.511,57918,5720.27 (0)0
GET/api/v3/vulnerability?q=cwes=CWE-79&total=true194 (+15)0 (0)0%51.4 (-12.3)3.071,24518,8640.32 (0)0
GET/api/v3/vulnerability?sort=base_score:desc&total=true195 (+26)0 (0)0%722 (-249.4)1792,00213,9750.33 (0)0
GET/api/v3/vulnerability?total=true220 (+26)0 (0)0%43.6 (+8.0)2.651,11818,9810.37 (0)0
purl 15
GET/api/v3/purl/base/{purl}139 (+7)0 (0)0%93.3 (+0.9)7.3949048,8270.23 (0)0
GET/api/v3/purl/base?q=namespace=redhat&total=true154 (+5)0 (0)0%79.1 (+12.5)4.828142,0800.26 (0)0
GET/api/v3/purl/base?q=type=rpm&total=true141 (+1)0 (0)0%61.7 (+3.9)8.291252,0800.24 (0)0
GET/api/v3/purl/base?sort=name:asc&total=true161 (+15)0 (0)0%207 (-15.5)61.94342,9430.27 (0)0
GET/api/v3/purl/base?total=true146 (+6)0 (0)0%59.6 (+0.5)4.332172,4500.24 (0)0
POST/api/v3/purl/recommend424 (-3)0 (0)0%954 (-2.0)1541,8392,7470.71 (0)0
GET/api/v3/purl/{purl_id}136 (-2)0 (0)0%91.0 (-3.1)17.52845370.23 (0)0
GET/api/v3/purl?offset=100&limit=10&total=true155 (+24)0 (0)0%69.3 (+0.6)4.025684,4740.26 (0)0
GET/api/v3/purl?q=curl&total=true135 (+5)0 (0)0%107 (+12.7)5.721,48811,7140.23 (0)0
GET/api/v3/purl?q=license~GPLv3+...&sort=name:desc&total=true161 (+21)0 (0)0%31.9 (+2.3)3.8893.4220.27 (0)0
GET/api/v3/purl?q=name=curl&total=true166 (+26)0 (0)0%39.2 (-1.7)2.3330812,0840.28 (0)0
GET/api/v3/purl?q=purl:namespace=redhat&total=true164 (+20)0 (0)0%158 (-29.9)1.944,17913,6170.27 (0)0
GET/api/v3/purl?q=purl:ty=rpm&total=true142 (-8)0 (0)0%187 (-17.7)2.103,07813,6170.24 (0)0
GET/api/v3/purl?sort=purl:name:asc&total=true159 (+13)0 (0)0%53.1 (-6.0)1.8868811,1010.27 (0)0
GET/api/v3/purl?total=true150 (+9)0 (0)0%38.5 (-5.6)1.955959,8770.25 (0)0
license 9
GET/api/v3/license/spdx/license/{license_id}1,839 (+25)0 (0)0%41.5 (+0.3)0.941111,1433.07 (0)0
GET/api/v3/license/spdx/license?q=apache&total=true1,823 (+4)0 (0)0%3.50 (+0.9)0.9683.21653.04 (0)0
GET/api/v3/license/spdx/license?q=gpl&total=true1,882 (+58)0 (0)0%41.6 (+0.1)1.291171,9813.14 (+0.1)0
GET/api/v3/license/spdx/license?total=true1,862 (-72)0 (0)0%42.0 (+1.0)0.911311,5253.11 (-0.1)0
GET/api/v3/license?limit=10&sort=license:asc&total=true1,897 (+96)0 (0)0%36.3 (-1.4)4.991924253.17 (+0.2)0
GET/api/v3/license?q=ASL&sort=license:desc&total=true1,862 (+63)0 (0)0%31.8 (+1.9)3.01207223.11 (+0.1)0
GET/api/v3/license?q=license~Apache&total=true1,804 (-28)0 (0)0%27.2 (-0.1)2.521421203.01 (0)0
GET/api/v3/license?q=license~GPL&total=true1,804 (-62)0 (0)0%26.9 (+0.6)2.35102923.01 (-0.1)0
GET/api/v3/license?total=true1,699 (-162)0 (0)0%70.6 (+0.7)8.101841,1012.84 (-0.3)0
analysis 3
GET/api/v3/analysis/component/{component}14,292 (-167)0 (0)0%13.7 (+0.5)1.3499.72523.86 (-0.3)0
GET/api/v3/analysis/latest/component/{cpe}14,253 (-9)0 (0)0%13.3 (-0.4)1.3394.72523.79 (0)0
GET/api/v3/analysis/status14,357 (+73)0 (0)0%12.8 (0)1.2698.310323.96 (+0.1)0
importer 1
GET/api/v3/importer?total=true54,274 (+343)0 (0)0%10.2 (-0.1)1.0296.8290.59 (+0.6)0
group 3
GET/api/v3/group/sbom?parents=resolve&total=true14,619 (+232)0 (0)0%13.0 (0)1.2098.43824.40 (+0.4)0
GET/api/v3/group/sbom?total=true14,365 (-124)0 (0)0%13.0 (+0.1)1.221042223.98 (-0.2)0
GET/api/v3/group/sbom?totals=true&total=true14,475 (-155)0 (0)0%12.9 (-0.1)1.2597.22224.16 (-0.3)0
labels 3
GET/api/v3/advisory-labels?filter_text=type&limit=100097 (-3)0 (0)0%5,840 (+207.9)4,8377,083600.16 (0)0
GET/api/v3/sbom-labels?limit=10&filter_text=&total=true95 (-15)0 (0)0%67.0 (-1.0)15.81261,0650.16 (0)0
GET/api/v3/sbom-labels?total=true100 (+1)0 (0)0%64.8 (-5.8)7.771281,0650.17 (0)0
other 2
GET/.well-known/trustify13,269 (+269)0 (0)0%41.6 (-0.5)0.8980.71,17022.15 (+0.4)0
POST/api/v3/ui/extract-sbom-purls13,108 (-128)0 (0)0%2.45 (-0.4)0.8828.34521.88 (-0.2)0

Response time metrics (ms)

MethodName50%ile75%ile90%ile95%ile99%ile100%ile
sbom 16
GET/api/v3/sbom/by-package?purl={purl}120 (0)130 (0)140 (-30)160 (-40)250 (+30)250 (+20)
GET/api/v3/sbom/count-by-package11 (-3)60 (-7)76 (-4)80 (-3)88 (-3)88 (-3)
GET/api/v3/sbom/{sbom_id}130 (0)140 (-10)220 (+20)230 (+10)300 (+60)390 (+130)
GET/api/v3/sbom/{sbom_id}/all-license-ids9 (0)46 (-4)69 (-2)73 (0)78 (-5)83 (0)
GET/api/v3/sbom/{sbom_id}/download3,100 (0)3,100 (0)3,100 (-100)3,200 (-100)3,300 (-100)3,400 (0)
GET/api/v3/sbom/{sbom_id}/license-export14 (-1)59 (-12)77 (-1)81 (-1)85 (-14)87 (-12)
GET/api/v3/sbom/{sbom_id}/packages110 (0)230 (-50)300 (-10)380 (0)410 (+20)410 (-380)
GET/api/v3/sbom/{sbom_id}/related120 (-50)190 (-10)220 (-60)280 (-10)310 (-170)330 (-150)
GET/api/v3/sbom?limit=10&sort=name:asc&total=true260 (+50)390 (+20)500 (-20)690 (-80)1,300 (+320)1,300 (+320)
GET/api/v3/sbom?offset=100&limit=10&total=true100 (-70)190 (-120)300 (-190)380 (-170)550 (-250)790 (-50)
GET/api/v3/sbom?q=label:type=product&total=true7 (-1)35 (-14)68 (0)76 (0)79 (-4)82 (-1)
GET/api/v3/sbom?q=license~GPL&sort=name:desc&total=true9 (-1)53 (-4)69 (-5)74 (-2)77 (-3)78 (-18)
GET/api/v3/sbom?q=name~redhat&total=true220 (+50)290 (-810)400 (-900)470 (-930)530 (-1,170)600 (-1,100)
GET/api/v3/sbom?q=published>2024-01-01&total=true120 (0)210 (+10)420 (+30)500 (0)870 (+160)870 (-230)
GET/api/v3/sbom?sort=ingested:desc&total=true200 (-80)400 (-80)560 (0)610 (0)690 (-710)790 (-610)
GET/api/v3/sbom?total=true110 (-30)190 (-10)330 (-20)410 (-30)680 (-280)860 (-140)
advisory 13
GET/api/v3/advisory/urn:uuid:{advisory_id}47 (0)90 (+13)110 (0)110 (0)120 (0)210 (+10)
GET/api/v3/advisory/urn:uuid:{advisory_id}/download13 (0)45 (-13)73 (-2)78 (-2)96 (-4)150 (-30)
GET/api/v3/advisory?deprecated=Consider&total=true18 (-2)71 (-2)82 (-2)97 (-3)1,600 (-100)2,400 (-400)
GET/api/v3/advisory?limit=1&total=true50 (0)71 (-5)110 (0)110 (0)1,000 (+420)1,000 (+370)
GET/api/v3/advisory?limit=10&sort=ingested:desc&total=true13 (0)63 (-2)74 (-2)81 (-5)2,400 (+400)3,000 (-200)
GET/api/v3/advisory?offset=100&limit=10&total=true77 (-2)89 (-2)96 (-4)100 (-10)170 (-10)2,400 (+200)
GET/api/v3/advisory?offset={offset}&limit=1240 (+40)340 (+20)440 (+30)510 (+10)760 (+110)760 (-110)
GET/api/v3/advisory?q=CVE-2021-&total=true200 (0)370 (+10)1,300 (+100)1,800 (0)2,300 (0)2,800 (-200)
GET/api/v3/advisory?q=identifier=CVE-2022-0981&total=true47 (-1)72 (-17)100 (-10)110 (0)120 (0)140 (-50)
GET/api/v3/advisory?q=modified>3 days ago&total=true8 (0)49 (-2)68 (+1)74 (+1)80 (+1)97 (-23)
GET/api/v3/advisory?q=title~openssl&total=true24 (+1)75 (-2)88 (+1)95 (-5)200 (-200)620 (-60)
GET/api/v3/advisory?sort=modified:desc&total=true16 (-2)67 (-3)79 (-3)90 (-20)2,200 (+100)2,800 (-800)
GET/api/v3/advisory?total=true110 (0)130 (-30)180 (-10)200 (0)1,700 (+300)3,100 (+500)
vulnerability 7
POST/api/v3/vulnerability/analyze1,000 (+934)1,600 (0)2,900 (0)3,500 (+100)4,700 (+200)5,400 (+200)
GET/api/v3/vulnerability?offset=100&limit=10&total=true46 (0)50 (+1)94 (-6)110 (0)350 (-460)1,000 (+80)
GET/api/v3/vulnerability?q=base_score>=7.0&total=true9 (+1)18 (-2)68 (0)280 (+201)900 (-400)1,300 (-100)
GET/api/v3/vulnerability?q=base_severity=high&total=true9 (+1)12 (-14)67 (-5)290 (+150)1,200 (-600)1,600 (-300)
GET/api/v3/vulnerability?q=cwes=CWE-79&total=true8 (0)37 (-10)72 (+2)220 (+120)1,100 (-100)1,200 (-300)
GET/api/v3/vulnerability?sort=base_score:desc&total=true590 (-180)850 (-550)1,300 (-400)1,500 (-300)2,000 (-400)2,000 (-700)
GET/api/v3/vulnerability?total=true8 (0)44 (+11)71 (+2)81 (+8)700 (0)1,100 (+110)
purl 15
GET/api/v3/purl/base/{purl}60 (+3)160 (0)230 (-20)280 (-20)360 (0)490 (+120)
GET/api/v3/purl/base?q=namespace=redhat&total=true47 (+2)83 (+4)100 (0)140 (+30)760 (+150)810 (+180)
GET/api/v3/purl/base?q=type=rpm&total=true47 (+1)87 (+8)100 (+4)110 (+10)110 (0)120 (0)
GET/api/v3/purl/base?sort=name:asc&total=true210 (-10)240 (-10)290 (-20)300 (-20)420 (+10)430 (-70)
GET/api/v3/purl/base?total=true45 (-1)75 (-9)99 (-1)110 (0)190 (+50)220 (+70)
POST/api/v3/purl/recommend1,000 (-100)1,200 (0)1,300 (-100)1,500 (+100)1,700 (0)1,800 (0)
GET/api/v3/purl/{purl_id}87 (-8)120 (+10)170 (+20)200 (+10)270 (+70)280 (+70)
GET/api/v3/purl?offset=100&limit=10&total=true46 (0)79 (+8)98 (0)100 (-10)550 (-20)570 (-40)
GET/api/v3/purl?q=curl&total=true39 (-7)68 (-3)93 (+6)810 (+270)1,400 (+200)1,500 (+300)
GET/api/v3/purl?q=license~GPLv3+...&sort=name:desc&total=true17 (+1)55 (+3)67 (+2)70 (+1)87 (-5)93 (-5)
GET/api/v3/purl?q=name=curl&total=true33 (+15)56 (-1)70 (+2)120 (-20)280 (-100)310 (-80)
GET/api/v3/purl?q=purl:namespace=redhat&total=true8 (0)40 (-13)63 (-2)1,200 (-1,300)3,400 (+200)4,200 (+900)
GET/api/v3/purl?q=purl:ty=rpm&total=true8 (0)48 (+2)62 (-1)2,500 (-100)2,800 (-800)3,100 (-1,200)
GET/api/v3/purl?sort=purl:name:asc&total=true13 (-3)53 (-3)64 (-5)410 (+60)530 (-240)690 (-130)
GET/api/v3/purl?total=true9 (+1)45 (0)60 (0)75 (+8)590 (-170)590 (-410)
license 9
GET/api/v3/license/spdx/license/{license_id}43 (+1)43 (0)45 (+1)46 (+1)66 (+13)110 (+40)
GET/api/v3/license/spdx/license?q=apache&total=true3 (+1)4 (+1)5 (0)6 (+1)31 (+24)83 (+44)
GET/api/v3/license/spdx/license?q=gpl&total=true43 (0)44 (+1)45 (0)46 (0)65 (+13)120 (+50)
GET/api/v3/license/spdx/license?total=true43 (+1)43 (0)45 (+1)47 (+2)71 (+18)130 (+53)
GET/api/v3/license?limit=10&sort=license:asc&total=true22 (-7)59 (-2)77 (0)83 (0)99 (+7)190 (+30)
GET/api/v3/license?q=ASL&sort=license:desc&total=true16 (+1)53 (+1)71 (+3)78 (+2)97 (+12)210 (+111)
GET/api/v3/license?q=license~Apache&total=true12 (0)49 (0)63 (-4)74 (+1)83 (+3)140 (+40)
GET/api/v3/license?q=license~GPL&total=true12 (0)48 (+1)64 (0)73 (0)81 (-1)100 (+1)
GET/api/v3/license?total=true59 (+1)96 (0)110 (0)120 (0)130 (0)180 (-40)
analysis 3
GET/api/v3/analysis/component/{component}5 (0)7 (0)63 (0)69 (-1)76 (0)100 (0)
GET/api/v3/analysis/latest/component/{cpe}5 (0)7 (0)62 (-2)69 (-1)76 (0)95 (-4)
GET/api/v3/analysis/status5 (+1)7 (+1)62 (-1)68 (-1)75 (0)98 (-2)
importer 1
GET/api/v3/importer?total=true3 (0)5 (0)51 (-3)66 (0)73 (0)97 (-3)
group 3
GET/api/v3/group/sbom?parents=resolve&total=true5 (0)7 (+1)62 (-1)69 (0)75 (-1)98 (-2)
GET/api/v3/group/sbom?total=true5 (+1)7 (+1)62 (-1)68 (-1)75 (0)100 (-10)
GET/api/v3/group/sbom?totals=true&total=true5 (+1)7 (+1)61 (-2)68 (-1)75 (0)97 (-13)
labels 3
GET/api/v3/advisory-labels?filter_text=type&limit=10005,800 (+200)6,200 (+200)6,500 (+300)6,800 (+400)7,100 (+300)7,100 (+300)
GET/api/v3/sbom-labels?limit=10&filter_text=&total=true51 (0)86 (-9)110 (0)120 (0)130 (0)130 (0)
GET/api/v3/sbom-labels?total=true50 (-1)87 (-13)110 (-10)120 (0)130 (0)130 (0)
other 2
GET/.well-known/trustify42 (0)43 (0)44 (0)45 (0)55 (-9)81 (-49)
POST/api/v3/ui/extract-sbom-purls1 (0)3 (0)5 (0)6 (0)8 (-15)28 (-49)

Failures

No failures recorded.

Exceptions

No exceptions raised in the locustfile.