← All runs

Trustify load tests · 2026-10-23 01:36 UTC

Target trustify (scale snapshot, CI) · 2026-10-23 01:36:28 UTC → 01:46:26 UTC · Users 10 · Deltas vs previous run (2026-10-22 22:07 UTC, 2026-10-22T21-17-29_38d6fa4)

Type daily · Dataset scale-20260317T023702Z · Scenario etc/scenarios/main/full-20260317T023702Z.json5 · Branch main · Commit 38d6fa40752b · Workflow run

Duration
9m 58s
Total requests
187,649 (-8,602)
Failure rate
0.0%
0 failed requests
Throughput
313.3 req/s (-14.3)
Latency 95%ile
73 ms (+1)
Latency 99%ile
280 ms (+70)
Endpoints
72
0 with failures

Over time

Throughput

Requests and failures per second

Response time

Percentiles over Locust's rolling window, ms

Users

Concurrent simulated users

Load plan

ActionStartedStoppedElapsedUsers
Increasing01:36:2801:36:320m 04s2 → 10
Maintaining01:36:3201:46:269m 54s10 → 10

Top 10 slowest endpoints (95%ile)

#MethodName95%ile (ms)Average (ms)# Requests
1GET/api/v3/advisory-labels?filter_text=type&limit=10006,8005,87696
2POST/api/v3/vulnerability/analyze3,7001,156359
3GET/api/v3/sbom/{sbom_id}/download3,1003,003105
4GET/api/v3/purl?q=purl:namespace=redhat&total=true2,600233124
5GET/api/v3/advisory?q=CVE-2021-&total=true1,700371430
6POST/api/v3/purl/recommend1,500906440
7GET/api/v3/purl?q=purl:ty=rpm&total=true1,500187145
8GET/api/v3/vulnerability?sort=base_score:desc&total=true1,500674200
9GET/api/v3/advisory?q=title~openssl&total=true1,200484365
10GET/api/v3/sbom?limit=10&sort=name:asc&total=true790263111

Request metrics

MethodName# Requests# FailsFail %Average (ms)Min (ms)Max (ms)Avg size (B)RPSFailures/s
sbom 16
GET/api/v3/sbom/by-package?purl={purl}114 (+15)0 (0)0%102 (-6.5)50.52241,2870.19 (0)0
GET/api/v3/sbom/count-by-package112 (+12)0 (0)0%30.7 (+2.2)4.6728230.19 (0)0
GET/api/v3/sbom/{sbom_id}101 (-14)0 (0)0%133 (+2.9)48.04432,0150.17 (0)0
GET/api/v3/sbom/{sbom_id}/all-license-ids115 (-9)0 (0)0%24.6 (-0.3)2.6486.320.19 (0)0
GET/api/v3/sbom/{sbom_id}/download105 (-5)0 (0)0%3,003 (-58.7)2,8433,200136,458,6380.18 (0)0
GET/api/v3/sbom/{sbom_id}/license-export104 (-10)0 (0)0%33.7 (+1.2)5.0986.02350.17 (0)0
GET/api/v3/sbom/{sbom_id}/packages108 (+11)0 (0)0%161 (+3.1)20.037112,6480.18 (0)0
GET/api/v3/sbom/{sbom_id}/related102 (0)0 (0)0%145 (+3.3)20.939115,3720.17 (0)0
GET/api/v3/sbom?limit=10&sort=name:asc&total=true111 (+11)0 (0)0%263 (-29.0)31.490012,1890.19 (0)0
GET/api/v3/sbom?offset=100&limit=10&total=true200 (-27)0 (0)0%227 (+76.1)37.41,40411,9410.33 (0)0
GET/api/v3/sbom?q=label:type=product&total=true118 (+16)0 (0)0%27.9 (+5.1)2.2096.8220.20 (0)0
GET/api/v3/sbom?q=license~GPL&sort=name:desc&total=true114 (0)0 (0)0%28.7 (+3.7)2.6094.7220.19 (0)0
GET/api/v3/sbom?q=name~redhat&total=true100 (-21)0 (0)0%258 (+3.9)75.1605220.17 (0)0
GET/api/v3/sbom?q=published>2024-01-01&total=true102 (+14)0 (0)0%196 (+4.3)33.671129,3170.17 (0)0
GET/api/v3/sbom?sort=ingested:desc&total=true119 (+5)0 (0)0%301 (+32.0)30.11,21429,6000.20 (0)0
GET/api/v3/sbom?total=true213 (+10)0 (0)0%164 (-0.8)24.290429,3170.36 (0)0
advisory 13
GET/api/v3/advisory/urn:uuid:{advisory_id}430 (-129)0 (0)0%59.1 (-1.2)3.531432,3950.72 (-0.2)0
GET/api/v3/advisory/urn:uuid:{advisory_id}/download389 (-180)0 (0)0%28.6 (+0.7)4.9188.0178,4230.65 (-0.3)0
GET/api/v3/advisory?deprecated=Consider&total=true425 (-201)0 (0)0%86.6 (+19.7)7.712,71544,0030.71 (-0.3)0
GET/api/v3/advisory?limit=1&total=true93 (-5)0 (0)0%78.7 (+9.0)8.631,1472,5850.16 (0)0
GET/api/v3/advisory?limit=10&sort=ingested:desc&total=true407 (-173)0 (0)0%76.8 (+5.7)5.122,39020,1930.68 (-0.3)0
GET/api/v3/advisory?offset=100&limit=10&total=true397 (-167)0 (0)0%86.0 (+15.2)6.022,51020,3140.66 (-0.3)0
GET/api/v3/advisory?offset={offset}&limit=193 (-5)0 (0)0%262 (+3.8)47.07082,1250.16 (0)0
GET/api/v3/advisory?q=CVE-2021-&total=true430 (-144)0 (0)0%371 (-22.4)30.42,50349,0050.72 (-0.2)0
GET/api/v3/advisory?q=identifier=CVE-2022-0981&total=true376 (-171)0 (0)0%61.1 (+3.8)5.451321,9710.63 (-0.3)0
GET/api/v3/advisory?q=modified>3 days ago&total=true416 (-137)0 (0)0%23.7 (-0.6)2.2489.4220.69 (-0.2)0
GET/api/v3/advisory?q=title~openssl&total=true365 (-208)0 (0)0%484 (+435.7)26.21,69258,8610.61 (-0.3)0
GET/api/v3/advisory?sort=modified:desc&total=true429 (-164)0 (0)0%85.7 (+12.5)6.473,38638,1280.72 (-0.3)0
GET/api/v3/advisory?total=true371 (-198)0 (0)0%134 (-4.1)8.522,69050,4580.62 (-0.3)0
vulnerability 7
POST/api/v3/vulnerability/analyze359 (-26)0 (0)0%1,156 (+97.0)1.385,2015,009,2090.60 (0)0
GET/api/v3/vulnerability?offset=100&limit=10&total=true188 (+26)0 (0)0%54.5 (-5.5)2.901,0257,6030.31 (0)0
GET/api/v3/vulnerability?q=base_score>=7.0&total=true161 (-33)0 (0)0%56.4 (+12.4)2.621,27818,3540.27 (-0.1)0
GET/api/v3/vulnerability?q=base_severity=high&total=true198 (+39)0 (0)0%54.8 (-0.7)2.581,38918,5380.33 (+0.1)0
GET/api/v3/vulnerability?q=cwes=CWE-79&total=true180 (-14)0 (0)0%36.4 (-15.0)2.6881318,9800.30 (0)0
GET/api/v3/vulnerability?sort=base_score:desc&total=true200 (+5)0 (0)0%674 (-48.4)2002,27414,3680.33 (0)0
GET/api/v3/vulnerability?total=true202 (-18)0 (0)0%43.3 (-0.3)2.541,07318,7040.34 (0)0
purl 15
GET/api/v3/purl/base/{purl}137 (-2)0 (0)0%97.6 (+4.3)7.2237548,8270.23 (0)0
GET/api/v3/purl/base?q=namespace=redhat&total=true138 (-16)0 (0)0%83.8 (+4.7)6.359332,0800.23 (0)0
GET/api/v3/purl/base?q=type=rpm&total=true122 (-19)0 (0)0%62.6 (+0.9)9.643242,0800.20 (0)0
GET/api/v3/purl/base?sort=name:asc&total=true141 (-20)0 (0)0%224 (+16.7)78.74302,9430.24 (0)0
GET/api/v3/purl/base?total=true152 (+6)0 (0)0%60.1 (+0.5)3.741482,4500.25 (0)0
POST/api/v3/purl/recommend440 (+16)0 (0)0%906 (-48.1)1251,8542,7470.73 (0)0
GET/api/v3/purl/{purl_id}147 (+11)0 (0)0%92.8 (+1.8)18.73995370.25 (0)0
GET/api/v3/purl?offset=100&limit=10&total=true138 (-17)0 (0)0%64.5 (-4.8)1.975494,1130.23 (0)0
GET/api/v3/purl?q=curl&total=true159 (+24)0 (0)0%125 (+17.3)2.583,00410,3580.27 (0)0
GET/api/v3/purl?q=license~GPLv3+...&sort=name:desc&total=true163 (+2)0 (0)0%33.7 (+1.9)1.9583.1220.27 (0)0
GET/api/v3/purl?q=name=curl&total=true135 (-31)0 (0)0%36.7 (-2.5)2.1528312,0840.23 (-0.1)0
GET/api/v3/purl?q=purl:namespace=redhat&total=true124 (-40)0 (0)0%233 (+74.3)1.964,86710,3880.21 (-0.1)0
GET/api/v3/purl?q=purl:ty=rpm&total=true145 (+3)0 (0)0%187 (-0.1)1.813,45210,0990.24 (0)0
GET/api/v3/purl?sort=purl:name:asc&total=true143 (-16)0 (0)0%55.9 (+2.8)2.1677311,1010.24 (0)0
GET/api/v3/purl?total=true161 (+11)0 (0)0%39.7 (+1.2)1.7454410,1220.27 (0)0
license 9
GET/api/v3/license/spdx/license/{license_id}1,854 (+15)0 (0)0%41.0 (-0.5)0.9173.11,1433.10 (0)0
GET/api/v3/license/spdx/license?q=apache&total=true1,881 (+58)0 (0)0%2.78 (-0.7)0.9330.21653.14 (+0.1)0
GET/api/v3/license/spdx/license?q=gpl&total=true1,755 (-127)0 (0)0%41.0 (-0.6)1.0970.91,9812.93 (-0.2)0
GET/api/v3/license/spdx/license?total=true1,769 (-93)0 (0)0%41.1 (-1.0)0.9967.91,5252.95 (-0.2)0
GET/api/v3/license?limit=10&sort=license:asc&total=true1,901 (+4)0 (0)0%37.0 (+0.7)5.901524253.17 (0)0
GET/api/v3/license?q=ASL&sort=license:desc&total=true1,802 (-60)0 (0)0%32.2 (+0.4)2.99158223.01 (-0.1)0
GET/api/v3/license?q=license~Apache&total=true1,837 (+33)0 (0)0%28.0 (+0.7)2.4894.11203.07 (+0.1)0
GET/api/v3/license?q=license~GPL&total=true1,837 (+33)0 (0)0%28.3 (+1.4)2.36307923.07 (+0.1)0
GET/api/v3/license?total=true1,773 (+74)0 (0)0%71.8 (+1.2)8.201881,1012.96 (+0.1)0
analysis 3
GET/api/v3/analysis/component/{component}13,575 (-717)0 (0)0%14.3 (+0.5)1.3199.02522.66 (-1.2)0
GET/api/v3/analysis/latest/component/{cpe}13,742 (-511)0 (0)0%13.8 (+0.5)1.381172522.94 (-0.8)0
GET/api/v3/analysis/status13,760 (-597)0 (0)0%13.6 (+0.8)1.2311410322.97 (-1.0)0
importer 1
GET/api/v3/importer?total=true50,806 (-3,468)0 (0)0%10.9 (+0.7)1.02107284.82 (-5.8)0
group 3
GET/api/v3/group/sbom?parents=resolve&total=true13,959 (-660)0 (0)0%13.5 (+0.4)1.241793823.30 (-1.1)0
GET/api/v3/group/sbom?total=true14,015 (-350)0 (0)0%13.3 (+0.4)1.241712223.40 (-0.6)0
GET/api/v3/group/sbom?totals=true&total=true14,134 (-341)0 (0)0%13.4 (+0.6)1.211262223.60 (-0.6)0
labels 3
GET/api/v3/advisory-labels?filter_text=type&limit=100096 (-1)0 (0)0%5,876 (+36.7)5,0656,985600.16 (0)0
GET/api/v3/sbom-labels?limit=10&filter_text=&total=true104 (+9)0 (0)0%69.6 (+2.6)11.81891,0650.17 (0)0
GET/api/v3/sbom-labels?total=true110 (+10)0 (0)0%67.5 (+2.7)11.31281,0650.18 (0)0
other 2
GET/.well-known/trustify13,332 (+63)0 (0)0%41.4 (-0.1)0.8873.41,17022.26 (+0.1)0
POST/api/v3/ui/extract-sbom-purls13,115 (+7)0 (0)0%2.38 (-0.1)0.8939.54521.90 (0)0

Response time metrics (ms)

MethodName50%ile75%ile90%ile95%ile99%ile100%ile
sbom 16
GET/api/v3/sbom/by-package?purl={purl}110 (-10)130 (0)140 (0)140 (-20)220 (-30)220 (-30)
GET/api/v3/sbom/count-by-package11 (0)50 (-10)77 (+1)78 (-2)91 (+3)280 (+192)
GET/api/v3/sbom/{sbom_id}130 (0)150 (+10)210 (-10)220 (-10)320 (+20)440 (+50)
GET/api/v3/sbom/{sbom_id}/all-license-ids9 (0)41 (-5)73 (+4)77 (+4)85 (+7)86 (+3)
GET/api/v3/sbom/{sbom_id}/download3,000 (-100)3,100 (0)3,100 (0)3,100 (-100)3,200 (-100)3,200 (-200)
GET/api/v3/sbom/{sbom_id}/license-export16 (+2)61 (+2)78 (+1)80 (-1)86 (+1)86 (-1)
GET/api/v3/sbom/{sbom_id}/packages130 (+20)250 (+20)300 (0)330 (-50)370 (-40)370 (-40)
GET/api/v3/sbom/{sbom_id}/related110 (-10)200 (+10)270 (+50)290 (+10)360 (+50)390 (+60)
GET/api/v3/sbom?limit=10&sort=name:asc&total=true210 (-50)310 (-80)490 (-10)790 (+100)860 (-440)900 (-400)
GET/api/v3/sbom?offset=100&limit=10&total=true180 (+80)310 (+120)410 (+110)490 (+110)900 (+350)1,400 (+610)
GET/api/v3/sbom?q=label:type=product&total=true10 (+3)51 (+16)71 (+3)75 (-1)79 (0)97 (+15)
GET/api/v3/sbom?q=license~GPL&sort=name:desc&total=true10 (+1)58 (+5)76 (+7)80 (+6)86 (+9)95 (+17)
GET/api/v3/sbom?q=name~redhat&total=true250 (+30)290 (0)390 (-10)480 (+10)610 (+80)610 (+10)
GET/api/v3/sbom?q=published>2024-01-01&total=true170 (+50)250 (+40)330 (-90)410 (-90)590 (-280)710 (-160)
GET/api/v3/sbom?sort=ingested:desc&total=true250 (+50)420 (+20)580 (+20)700 (+90)990 (+300)1,200 (+410)
GET/api/v3/sbom?total=true120 (+10)190 (0)300 (-30)400 (-10)650 (-30)900 (+40)
advisory 13
GET/api/v3/advisory/urn:uuid:{advisory_id}47 (0)75 (-15)110 (0)110 (0)120 (0)140 (-70)
GET/api/v3/advisory/urn:uuid:{advisory_id}/download14 (+1)53 (+8)74 (+1)79 (+1)85 (-11)88 (-62)
GET/api/v3/advisory?deprecated=Consider&total=true19 (+1)73 (+2)90 (+8)110 (+13)1,800 (+200)2,700 (+300)
GET/api/v3/advisory?limit=1&total=true51 (+1)72 (+1)100 (-10)120 (+10)1,100 (+100)1,100 (+100)
GET/api/v3/advisory?limit=10&sort=ingested:desc&total=true14 (+1)67 (+4)77 (+3)85 (+4)2,000 (-400)2,400 (-600)
GET/api/v3/advisory?offset=100&limit=10&total=true78 (+1)90 (+1)97 (+1)100 (0)2,100 (+1,930)2,500 (+100)
GET/api/v3/advisory?offset={offset}&limit=1220 (-20)370 (+30)490 (+50)530 (+20)710 (-50)710 (-50)
GET/api/v3/advisory?q=CVE-2021-&total=true190 (-10)300 (-70)1,200 (-100)1,700 (-100)2,100 (-200)2,500 (-300)
GET/api/v3/advisory?q=identifier=CVE-2022-0981&total=true48 (+1)85 (+13)110 (+10)110 (0)120 (0)130 (-10)
GET/api/v3/advisory?q=modified>3 days ago&total=true9 (+1)47 (-2)69 (+1)73 (-1)77 (-3)89 (-8)
GET/api/v3/advisory?q=title~openssl&total=true400 (+376)600 (+525)1,100 (+1,012)1,200 (+1,105)1,400 (+1,200)1,700 (+1,080)
GET/api/v3/advisory?sort=modified:desc&total=true20 (+4)70 (+3)85 (+6)110 (+20)1,800 (-400)3,400 (+600)
GET/api/v3/advisory?total=true110 (0)130 (0)180 (0)190 (-10)2,000 (+300)2,700 (-400)
vulnerability 7
POST/api/v3/vulnerability/analyze1,200 (+200)1,800 (+200)3,100 (+200)3,700 (+200)4,400 (-300)5,200 (-200)
GET/api/v3/vulnerability?offset=100&limit=10&total=true45 (-1)48 (-2)91 (-3)110 (0)550 (+200)1,000 (0)
GET/api/v3/vulnerability?q=base_score>=7.0&total=true8 (-1)53 (+35)76 (+8)280 (0)880 (-20)1,300 (0)
GET/api/v3/vulnerability?q=base_severity=high&total=true8 (-1)49 (+37)72 (+5)190 (-100)990 (-210)1,400 (-200)
GET/api/v3/vulnerability?q=cwes=CWE-79&total=true8 (0)15 (-22)71 (-1)120 (-100)710 (-390)810 (-390)
GET/api/v3/vulnerability?sort=base_score:desc&total=true510 (-80)870 (+20)1,300 (0)1,500 (0)1,800 (-200)2,300 (+300)
GET/api/v3/vulnerability?total=true8 (0)11 (-33)66 (-5)76 (-5)710 (+10)1,100 (0)
purl 15
GET/api/v3/purl/base/{purl}63 (+3)180 (+20)260 (+30)290 (+10)330 (-30)370 (-120)
GET/api/v3/purl/base?q=namespace=redhat&total=true47 (0)92 (+9)100 (0)130 (-10)820 (+60)930 (+120)
GET/api/v3/purl/base?q=type=rpm&total=true48 (+1)79 (-8)97 (-3)100 (-10)120 (+10)320 (+200)
GET/api/v3/purl/base?sort=name:asc&total=true220 (+10)250 (+10)320 (+30)350 (+50)420 (0)430 (0)
GET/api/v3/purl/base?total=true45 (0)83 (+8)99 (0)100 (-10)150 (-40)150 (-70)
POST/api/v3/purl/recommend1,000 (0)1,200 (0)1,300 (0)1,500 (0)1,600 (-100)1,900 (+100)
GET/api/v3/purl/{purl_id}83 (-4)120 (0)160 (-10)180 (-20)300 (+30)400 (+120)
GET/api/v3/purl?offset=100&limit=10&total=true46 (0)76 (-3)99 (+1)100 (0)390 (-160)550 (-20)
GET/api/v3/purl?q=curl&total=true38 (-1)72 (+4)380 (+287)630 (-180)1,300 (-100)3,000 (+1,500)
GET/api/v3/purl?q=license~GPLv3+...&sort=name:desc&total=true28 (+11)57 (+2)68 (+1)74 (+4)82 (-5)83 (-10)
GET/api/v3/purl?q=name=curl&total=true15 (-18)54 (-2)75 (+5)110 (-10)270 (-10)280 (-30)
GET/api/v3/purl?q=purl:namespace=redhat&total=true8 (0)52 (+12)63 (0)2,600 (+1,400)3,300 (-100)4,900 (+700)
GET/api/v3/purl?q=purl:ty=rpm&total=true7 (-1)45 (-3)62 (0)1,500 (-1,000)3,400 (+600)3,500 (+400)
GET/api/v3/purl?sort=purl:name:asc&total=true23 (+10)57 (+4)70 (+6)320 (-90)610 (+80)770 (+80)
GET/api/v3/purl?total=true7 (-2)46 (+1)63 (+3)70 (-5)470 (-120)540 (-50)
license 9
GET/api/v3/license/spdx/license/{license_id}42 (-1)43 (0)44 (-1)45 (-1)51 (-15)73 (-37)
GET/api/v3/license/spdx/license?q=apache&total=true3 (0)4 (0)5 (0)5 (-1)9 (-22)30 (-53)
GET/api/v3/license/spdx/license?q=gpl&total=true43 (0)44 (0)44 (-1)45 (-1)55 (-10)71 (-49)
GET/api/v3/license/spdx/license?total=true42 (-1)43 (0)44 (-1)45 (-2)55 (-16)68 (-62)
GET/api/v3/license?limit=10&sort=license:asc&total=true24 (+2)60 (+1)78 (+1)83 (0)92 (-7)150 (-40)
GET/api/v3/license?q=ASL&sort=license:desc&total=true18 (+2)55 (+2)71 (0)77 (-1)86 (-11)160 (-50)
GET/api/v3/license?q=license~Apache&total=true13 (+1)51 (+2)65 (+2)73 (-1)82 (-1)94 (-46)
GET/api/v3/license?q=license~GPL&total=true13 (+1)50 (+2)67 (+3)74 (+1)81 (0)310 (+210)
GET/api/v3/license?total=true60 (+1)98 (+2)120 (+10)120 (0)130 (0)190 (+10)
analysis 3
GET/api/v3/analysis/component/{component}5 (0)7 (0)65 (+2)70 (+1)76 (0)99 (-1)
GET/api/v3/analysis/latest/component/{cpe}5 (0)7 (0)64 (+2)70 (+1)76 (0)120 (+25)
GET/api/v3/analysis/status5 (0)7 (0)64 (+2)70 (+2)77 (+2)110 (+12)
importer 1
GET/api/v3/importer?total=true4 (+1)5 (0)57 (+6)67 (+1)74 (+1)110 (+13)
group 3
GET/api/v3/group/sbom?parents=resolve&total=true4 (-1)6 (-1)63 (+1)70 (+1)77 (+2)180 (+82)
GET/api/v3/group/sbom?total=true4 (-1)6 (-1)64 (+2)69 (+1)77 (+2)170 (+70)
GET/api/v3/group/sbom?totals=true&total=true5 (0)6 (-1)63 (+2)70 (+2)77 (+2)130 (+33)
labels 3
GET/api/v3/advisory-labels?filter_text=type&limit=10005,900 (+100)6,100 (-100)6,300 (-200)6,800 (0)7,000 (-100)7,000 (-100)
GET/api/v3/sbom-labels?limit=10&filter_text=&total=true51 (0)92 (+6)110 (0)120 (0)130 (0)190 (+60)
GET/api/v3/sbom-labels?total=true51 (+1)94 (+7)120 (+10)130 (+10)130 (0)130 (0)
other 2
GET/.well-known/trustify42 (0)43 (0)44 (0)45 (0)54 (-1)73 (-8)
POST/api/v3/ui/extract-sbom-purls1 (0)3 (0)5 (0)6 (0)8 (0)39 (+11)

Failures

No failures recorded.

Exceptions

No exceptions raised in the locustfile.