← All runs

Trustify load tests · 2026-10-23 04:14 UTC

Target trustify (scale snapshot, CI) · 2026-10-23 04:14:22 UTC → 04:24:20 UTC · Users 10 · Deltas vs previous run (2026-10-23 01:36 UTC, 2026-10-23T00-47-09_38d6fa4)

Type daily · Dataset scale-20260317T023702Z · Scenario etc/scenarios/main/full-20260317T023702Z.json5 · Branch main · Commit 38d6fa40752b · Workflow run

Duration
9m 58s
Total requests
191,090 (+3,441)
Failure rate
0.0%
0 failed requests
Throughput
319.1 req/s (+5.8)
Latency 95%ile
72 ms (-1)
Latency 99%ile
260 ms (-20)
Endpoints
72
0 with failures

Over time

Throughput

Requests and failures per second

Response time

Percentiles over Locust's rolling window, ms

Users

Concurrent simulated users

Load plan

ActionStartedStoppedElapsedUsers
Increasing04:14:2204:14:260m 04s2 → 10
Maintaining04:14:2604:24:209m 54s10 → 10

Top 10 slowest endpoints (95%ile)

#MethodName95%ile (ms)Average (ms)# Requests
1GET/api/v3/advisory-labels?filter_text=type&limit=10006,7005,89295
2POST/api/v3/vulnerability/analyze3,8001,204354
3GET/api/v3/sbom/{sbom_id}/download3,1003,01894
4GET/api/v3/purl?q=purl:namespace=redhat&total=true2,500204131
5GET/api/v3/purl?q=purl:ty=rpm&total=true2,500181155
6GET/api/v3/advisory?q=CVE-2021-&total=true1,800444353
7POST/api/v3/purl/recommend1,400953424
8GET/api/v3/vulnerability?sort=base_score:desc&total=true1,400670194
9GET/api/v3/sbom?q=name~redhat&total=true1,300469126
10GET/api/v3/advisory?q=title~openssl&total=true1,200478386

Request metrics

MethodName# Requests# FailsFail %Average (ms)Min (ms)Max (ms)Avg size (B)RPSFailures/s
sbom 16
GET/api/v3/sbom/by-package?purl={purl}117 (+3)0 (0)0%104 (+2.0)53.02161,2870.20 (0)0
GET/api/v3/sbom/count-by-package117 (+5)0 (0)0%31.2 (+0.5)4.1989.030.20 (0)0
GET/api/v3/sbom/{sbom_id}106 (+5)0 (0)0%129 (-3.7)30.02472,0150.18 (0)0
GET/api/v3/sbom/{sbom_id}/all-license-ids119 (+4)0 (0)0%21.6 (-3.0)2.2781.720.20 (0)0
GET/api/v3/sbom/{sbom_id}/download94 (-11)0 (0)0%3,018 (+14.8)2,8693,249136,458,6380.16 (0)0
GET/api/v3/sbom/{sbom_id}/license-export104 (0)0 (0)0%34.9 (+1.1)4.6084.12340.17 (0)0
GET/api/v3/sbom/{sbom_id}/packages113 (+5)0 (0)0%163 (+2.2)15.540312,6480.19 (0)0
GET/api/v3/sbom/{sbom_id}/related103 (+1)0 (0)0%143 (-2.2)25.645315,3720.17 (0)0
GET/api/v3/sbom?limit=10&sort=name:asc&total=true107 (-4)0 (0)0%279 (+15.5)42.686312,1890.18 (0)0
GET/api/v3/sbom?offset=100&limit=10&total=true181 (-19)0 (0)0%216 (-11.0)31.294411,9410.30 (0)0
GET/api/v3/sbom?q=label:type=product&total=true137 (+19)0 (0)0%25.4 (-2.5)1.9679.4220.23 (0)0
GET/api/v3/sbom?q=license~GPL&sort=name:desc&total=true111 (-3)0 (0)0%25.5 (-3.2)2.6987.1220.19 (0)0
GET/api/v3/sbom?q=name~redhat&total=true126 (+26)0 (0)0%469 (+210.4)13.21,712220.21 (0)0
GET/api/v3/sbom?q=published>2024-01-01&total=true126 (+24)0 (0)0%169 (-27.7)27.681129,3170.21 (0)0
GET/api/v3/sbom?sort=ingested:desc&total=true109 (-10)0 (0)0%299 (-2.1)29.897829,6000.18 (0)0
GET/api/v3/sbom?total=true227 (+14)0 (0)0%172 (+8.8)27.179829,3170.38 (0)0
advisory 13
GET/api/v3/advisory/urn:uuid:{advisory_id}367 (-63)0 (0)0%60.6 (+1.5)4.431232,3950.61 (-0.1)0
GET/api/v3/advisory/urn:uuid:{advisory_id}/download387 (-2)0 (0)0%28.4 (-0.2)4.6691.7178,4230.65 (0)0
GET/api/v3/advisory?deprecated=Consider&total=true388 (-37)0 (0)0%98.4 (+11.8)6.943,72744,0030.65 (-0.1)0
GET/api/v3/advisory?limit=1&total=true103 (+10)0 (0)0%87.3 (+8.6)8.011,1512,4970.17 (0)0
GET/api/v3/advisory?limit=10&sort=ingested:desc&total=true368 (-39)0 (0)0%83.4 (+6.6)5.012,39320,1930.61 (-0.1)0
GET/api/v3/advisory?offset=100&limit=10&total=true376 (-21)0 (0)0%90.0 (+4.0)7.112,48120,2670.63 (0)0
GET/api/v3/advisory?offset={offset}&limit=1103 (+10)0 (0)0%274 (+13.0)48.28522,1080.17 (0)0
GET/api/v3/advisory?q=CVE-2021-&total=true353 (-77)0 (0)0%444 (+73.5)12.74,48749,7420.59 (-0.1)0
GET/api/v3/advisory?q=identifier=CVE-2022-0981&total=true348 (-28)0 (0)0%63.3 (+2.2)5.511281,9710.58 (0)0
GET/api/v3/advisory?q=modified>3 days ago&total=true405 (-11)0 (0)0%22.4 (-1.3)2.4885.2220.68 (0)0
GET/api/v3/advisory?q=title~openssl&total=true386 (+21)0 (0)0%478 (-5.9)17.71,78258,6680.64 (0)0
GET/api/v3/advisory?sort=modified:desc&total=true402 (-27)0 (0)0%86.7 (+1.0)7.022,43938,1280.67 (0)0
GET/api/v3/advisory?total=true383 (+12)0 (0)0%133 (-1.4)7.662,61350,0400.64 (0)0
vulnerability 7
POST/api/v3/vulnerability/analyze354 (-5)0 (0)0%1,204 (+48.2)2.165,0984,697,0560.59 (0)0
GET/api/v3/vulnerability?offset=100&limit=10&total=true174 (-14)0 (0)0%21.8 (-32.7)2.537096,5120.29 (0)0
GET/api/v3/vulnerability?q=base_score>=7.0&total=true168 (+7)0 (0)0%48.3 (-8.1)4.351,19427,1700.28 (0)0
GET/api/v3/vulnerability?q=base_severity=high&total=true187 (-11)0 (0)0%44.5 (-10.3)4.311,28728,3840.31 (0)0
GET/api/v3/vulnerability?q=cwes=CWE-79&total=true192 (+12)0 (0)0%46.6 (+10.2)3.631,31419,6410.32 (0)0
GET/api/v3/vulnerability?sort=base_score:desc&total=true194 (-6)0 (0)0%670 (-4.2)2042,11516,6740.32 (0)0
GET/api/v3/vulnerability?total=true172 (-30)0 (0)0%43.4 (+0.1)3.5882127,2410.29 (-0.1)0
purl 15
GET/api/v3/purl/base/{purl}139 (+2)0 (0)0%95.0 (-2.6)7.3831248,8270.23 (0)0
GET/api/v3/purl/base?q=namespace=redhat&total=true136 (-2)0 (0)0%74.7 (-9.0)2.996512,0800.23 (0)0
GET/api/v3/purl/base?q=type=rpm&total=true116 (-6)0 (0)0%62.7 (+0.1)3.871282,0800.19 (0)0
GET/api/v3/purl/base?sort=name:asc&total=true164 (+23)0 (0)0%217 (-6.8)71.04982,9430.27 (0)0
GET/api/v3/purl/base?total=true152 (0)0 (0)0%63.0 (+2.8)4.701432,4500.25 (0)0
POST/api/v3/purl/recommend424 (-16)0 (0)0%953 (+46.8)1621,7632,7470.71 (0)0
GET/api/v3/purl/{purl_id}128 (-19)0 (0)0%103 (+10.3)16.82615370.21 (0)0
GET/api/v3/purl?offset=100&limit=10&total=true148 (+10)0 (0)0%77.5 (+13.0)4.137494,4740.25 (0)0
GET/api/v3/purl?q=curl&total=true120 (-39)0 (0)0%113 (-11.1)6.601,23911,7140.20 (-0.1)0
GET/api/v3/purl?q=license~GPLv3+...&sort=name:desc&total=true149 (-14)0 (0)0%30.8 (-2.9)1.8385.4220.25 (0)0
GET/api/v3/purl?q=name=curl&total=true136 (+1)0 (0)0%40.2 (+3.5)2.0539712,0840.23 (0)0
GET/api/v3/purl?q=purl:namespace=redhat&total=true131 (+7)0 (0)0%204 (-28.4)2.103,31513,6170.22 (0)0
GET/api/v3/purl?q=purl:ty=rpm&total=true155 (+10)0 (0)0%181 (-5.5)2.053,68213,6170.26 (0)0
GET/api/v3/purl?sort=purl:name:asc&total=true141 (-2)0 (0)0%56.7 (+0.8)1.9389911,1010.24 (0)0
GET/api/v3/purl?total=true118 (-43)0 (0)0%47.4 (+7.7)1.737029,8770.20 (-0.1)0
license 9
GET/api/v3/license/spdx/license/{license_id}1,816 (-38)0 (0)0%41.3 (+0.3)1.0670.41,1433.03 (-0.1)0
GET/api/v3/license/spdx/license?q=apache&total=true1,681 (-200)0 (0)0%2.71 (-0.1)0.9425.71652.81 (-0.3)0
GET/api/v3/license/spdx/license?q=gpl&total=true1,859 (+104)0 (0)0%41.7 (+0.7)1.1078.61,9813.10 (+0.2)0
GET/api/v3/license/spdx/license?total=true1,820 (+51)0 (0)0%41.2 (+0.2)0.9272.61,5253.04 (+0.1)0
GET/api/v3/license?limit=10&sort=license:asc&total=true1,748 (-153)0 (0)0%35.7 (-1.3)6.301124252.92 (-0.3)0
GET/api/v3/license?q=ASL&sort=license:desc&total=true1,767 (-35)0 (0)0%30.3 (-1.9)2.96102222.95 (-0.1)0
GET/api/v3/license?q=license~Apache&total=true1,798 (-39)0 (0)0%28.1 (+0.1)2.451061203.00 (-0.1)0
GET/api/v3/license?q=license~GPL&total=true1,829 (-8)0 (0)0%25.9 (-2.4)2.4094.4923.05 (0)0
GET/api/v3/license?total=true1,907 (+134)0 (0)0%73.0 (+1.2)7.461631,1013.18 (+0.2)0
analysis 3
GET/api/v3/analysis/component/{component}14,572 (+997)0 (0)0%13.4 (-0.9)1.351162524.33 (+1.7)0
GET/api/v3/analysis/latest/component/{cpe}14,119 (+377)0 (0)0%13.5 (-0.2)1.371142523.58 (+0.6)0
GET/api/v3/analysis/status14,216 (+456)0 (0)0%12.8 (-0.7)1.2794.010323.74 (+0.8)0
importer 1
GET/api/v3/importer?total=true51,455 (+649)0 (0)0%10.8 (-0.1)1.00171285.92 (+1.1)0
group 3
GET/api/v3/group/sbom?parents=resolve&total=true14,362 (+403)0 (0)0%13.0 (-0.5)1.251063823.98 (+0.7)0
GET/api/v3/group/sbom?total=true14,532 (+517)0 (0)0%13.1 (-0.3)1.2399.92224.27 (+0.9)0
GET/api/v3/group/sbom?totals=true&total=true14,604 (+470)0 (0)0%12.8 (-0.6)1.221112224.39 (+0.8)0
labels 3
GET/api/v3/advisory-labels?filter_text=type&limit=100095 (-1)0 (0)0%5,892 (+15.9)4,4527,713600.16 (0)0
GET/api/v3/sbom-labels?limit=10&filter_text=&total=true111 (+7)0 (0)0%71.1 (+1.5)12.21211,0650.19 (0)0
GET/api/v3/sbom-labels?total=true100 (-10)0 (0)0%74.1 (+6.6)7.452031,0650.17 (0)0
other 2
GET/.well-known/trustify13,290 (-42)0 (0)0%41.6 (+0.2)0.8779.41,17022.19 (-0.1)0
POST/api/v3/ui/extract-sbom-purls13,245 (+130)0 (0)0%2.33 (0)0.9035.04522.12 (+0.2)0

Response time metrics (ms)

MethodName50%ile75%ile90%ile95%ile99%ile100%ile
sbom 16
GET/api/v3/sbom/by-package?purl={purl}100 (-10)130 (0)150 (+10)180 (+40)220 (0)220 (0)
GET/api/v3/sbom/count-by-package12 (+1)60 (+10)74 (-3)79 (+1)88 (-3)89 (-191)
GET/api/v3/sbom/{sbom_id}130 (0)150 (0)220 (+10)220 (0)230 (-90)250 (-190)
GET/api/v3/sbom/{sbom_id}/all-license-ids8 (-1)37 (-4)68 (-5)71 (-6)77 (-8)82 (-4)
GET/api/v3/sbom/{sbom_id}/download3,000 (0)3,100 (0)3,100 (0)3,100 (0)3,200 (0)3,200 (0)
GET/api/v3/sbom/{sbom_id}/license-export28 (+12)58 (-3)74 (-4)79 (-1)83 (-3)84 (-2)
GET/api/v3/sbom/{sbom_id}/packages140 (+10)250 (0)300 (0)310 (-20)400 (+30)400 (+30)
GET/api/v3/sbom/{sbom_id}/related120 (+10)200 (0)230 (-40)260 (-30)290 (-70)450 (+60)
GET/api/v3/sbom?limit=10&sort=name:asc&total=true230 (+20)340 (+30)500 (+10)570 (-220)750 (-110)860 (-40)
GET/api/v3/sbom?offset=100&limit=10&total=true170 (-10)310 (0)420 (+10)480 (-10)900 (0)940 (-460)
GET/api/v3/sbom?q=label:type=product&total=true8 (-2)48 (-3)69 (-2)73 (-2)76 (-3)79 (-18)
GET/api/v3/sbom?q=license~GPL&sort=name:desc&total=true9 (-1)49 (-9)71 (-5)75 (-5)79 (-7)87 (-8)
GET/api/v3/sbom?q=name~redhat&total=true95 (-155)970 (+680)1,200 (+810)1,300 (+820)1,700 (+1,090)1,700 (+1,090)
GET/api/v3/sbom?q=published>2024-01-01&total=true110 (-60)190 (-60)330 (0)480 (+70)800 (+210)810 (+100)
GET/api/v3/sbom?sort=ingested:desc&total=true280 (+30)410 (-10)560 (-20)590 (-110)810 (-180)980 (-220)
GET/api/v3/sbom?total=true120 (0)200 (+10)340 (+40)440 (+40)600 (-50)800 (-100)
advisory 13
GET/api/v3/advisory/urn:uuid:{advisory_id}47 (0)84 (+9)110 (0)110 (0)120 (0)120 (-20)
GET/api/v3/advisory/urn:uuid:{advisory_id}/download14 (0)52 (-1)72 (-2)76 (-3)87 (+2)92 (+4)
GET/api/v3/advisory?deprecated=Consider&total=true39 (+20)74 (+1)98 (+8)130 (+20)2,300 (+500)3,700 (+1,000)
GET/api/v3/advisory?limit=1&total=true52 (+1)97 (+25)110 (+10)120 (0)930 (-170)1,200 (+100)
GET/api/v3/advisory?limit=10&sort=ingested:desc&total=true14 (0)66 (-1)81 (+4)93 (+8)2,200 (+200)2,400 (0)
GET/api/v3/advisory?offset=100&limit=10&total=true76 (-2)87 (-3)98 (+1)100 (0)1,900 (-200)2,500 (0)
GET/api/v3/advisory?offset={offset}&limit=1240 (+20)380 (+10)450 (-40)560 (+30)790 (+80)850 (+140)
GET/api/v3/advisory?q=CVE-2021-&total=true200 (+10)320 (+20)1,600 (+400)1,800 (+100)2,300 (+200)4,500 (+2,000)
GET/api/v3/advisory?q=identifier=CVE-2022-0981&total=true49 (+1)94 (+9)110 (0)110 (0)120 (0)130 (0)
GET/api/v3/advisory?q=modified>3 days ago&total=true8 (-1)33 (-14)67 (-2)74 (+1)82 (+5)85 (-4)
GET/api/v3/advisory?q=title~openssl&total=true400 (0)590 (-10)1,100 (0)1,200 (0)1,600 (+200)1,800 (+100)
GET/api/v3/advisory?sort=modified:desc&total=true15 (-5)69 (-1)86 (+1)120 (+10)2,100 (+300)2,400 (-1,000)
GET/api/v3/advisory?total=true100 (-10)120 (-10)180 (0)190 (0)1,800 (-200)2,600 (-100)
vulnerability 7
POST/api/v3/vulnerability/analyze1,000 (-200)2,100 (+300)3,200 (+100)3,800 (+100)4,700 (+300)5,100 (-100)
GET/api/v3/vulnerability?offset=100&limit=10&total=true7 (-38)10 (-38)68 (-23)71 (-39)79 (-471)710 (-290)
GET/api/v3/vulnerability?q=base_score>=7.0&total=true8 (0)12 (-41)73 (-3)120 (-160)1,000 (+120)1,200 (-100)
GET/api/v3/vulnerability?q=base_severity=high&total=true8 (0)13 (-36)73 (+1)83 (-107)710 (-280)1,300 (-100)
GET/api/v3/vulnerability?q=cwes=CWE-79&total=true9 (+1)18 (+3)75 (+4)83 (-37)720 (+10)1,300 (+490)
GET/api/v3/vulnerability?sort=base_score:desc&total=true570 (+60)820 (-50)1,100 (-200)1,400 (-100)1,900 (+100)2,100 (-200)
GET/api/v3/vulnerability?total=true8 (0)12 (+1)68 (+2)100 (+24)810 (+100)820 (-280)
purl 15
GET/api/v3/purl/base/{purl}63 (0)170 (-10)230 (-30)270 (-20)300 (-30)310 (-60)
GET/api/v3/purl/base?q=namespace=redhat&total=true47 (0)87 (-5)100 (0)140 (+10)600 (-220)650 (-280)
GET/api/v3/purl/base?q=type=rpm&total=true53 (+5)89 (+10)100 (+3)110 (+10)110 (-10)130 (-190)
GET/api/v3/purl/base?sort=name:asc&total=true220 (0)260 (+10)310 (-10)330 (-20)420 (0)500 (+70)
GET/api/v3/purl/base?total=true47 (+2)86 (+3)100 (+1)110 (+10)140 (-10)140 (-10)
POST/api/v3/purl/recommend1,000 (0)1,200 (0)1,400 (+100)1,400 (-100)1,700 (+100)1,800 (-100)
GET/api/v3/purl/{purl_id}95 (+12)140 (+20)180 (+20)190 (+10)210 (-90)260 (-140)
GET/api/v3/purl?offset=100&limit=10&total=true48 (+2)92 (+16)100 (+1)100 (0)670 (+280)750 (+200)
GET/api/v3/purl?q=curl&total=true49 (+11)71 (-1)92 (-288)900 (+270)1,200 (-100)1,200 (-1,800)
GET/api/v3/purl?q=license~GPLv3+...&sort=name:desc&total=true15 (-13)53 (-4)69 (+1)75 (+1)85 (+3)85 (+2)
GET/api/v3/purl?q=name=curl&total=true14 (-1)58 (+4)71 (-4)110 (0)300 (+30)400 (+120)
GET/api/v3/purl?q=purl:namespace=redhat&total=true9 (+1)57 (+5)69 (+6)2,500 (-100)3,200 (-100)3,300 (-1,600)
GET/api/v3/purl?q=purl:ty=rpm&total=true8 (+1)45 (0)62 (0)2,500 (+1,000)3,600 (+200)3,700 (+200)
GET/api/v3/purl?sort=purl:name:asc&total=true13 (-10)54 (-3)72 (+2)310 (-10)680 (+70)900 (+130)
GET/api/v3/purl?total=true7 (0)42 (-4)61 (-2)410 (+340)680 (+210)700 (+160)
license 9
GET/api/v3/license/spdx/license/{license_id}42 (0)43 (0)44 (0)45 (0)52 (+1)70 (-3)
GET/api/v3/license/spdx/license?q=apache&total=true2 (-1)4 (0)5 (0)5 (0)8 (-1)26 (-4)
GET/api/v3/license/spdx/license?q=gpl&total=true43 (0)44 (0)45 (+1)46 (+1)55 (0)79 (+8)
GET/api/v3/license/spdx/license?total=true42 (0)43 (0)44 (0)45 (0)54 (-1)73 (+5)
GET/api/v3/license?limit=10&sort=license:asc&total=true22 (-2)59 (-1)75 (-3)80 (-3)90 (-2)110 (-40)
GET/api/v3/license?q=ASL&sort=license:desc&total=true16 (-2)53 (-2)68 (-3)77 (0)84 (-2)100 (-60)
GET/api/v3/license?q=license~Apache&total=true13 (0)52 (+1)67 (+2)74 (+1)81 (-1)110 (+16)
GET/api/v3/license?q=license~GPL&total=true11 (-2)47 (-3)62 (-5)72 (-2)80 (-1)94 (-216)
GET/api/v3/license?total=true61 (+1)98 (0)110 (-10)120 (0)130 (0)160 (-30)
analysis 3
GET/api/v3/analysis/component/{component}5 (0)7 (0)63 (-2)70 (0)76 (0)120 (+21)
GET/api/v3/analysis/latest/component/{cpe}5 (0)7 (0)63 (-1)69 (-1)76 (0)110 (-10)
GET/api/v3/analysis/status5 (0)6 (-1)62 (-2)69 (-1)75 (-2)94 (-16)
importer 1
GET/api/v3/importer?total=true4 (0)5 (0)56 (-1)67 (0)75 (+1)170 (+60)
group 3
GET/api/v3/group/sbom?parents=resolve&total=true4 (0)6 (0)63 (0)69 (-1)75 (-2)110 (-70)
GET/api/v3/group/sbom?total=true4 (0)6 (0)63 (-1)69 (0)76 (-1)100 (-70)
GET/api/v3/group/sbom?totals=true&total=true4 (-1)6 (0)62 (-1)69 (-1)76 (-1)110 (-20)
labels 3
GET/api/v3/advisory-labels?filter_text=type&limit=10005,900 (0)6,200 (+100)6,500 (+200)6,700 (-100)7,700 (+700)7,700 (+700)
GET/api/v3/sbom-labels?limit=10&filter_text=&total=true54 (+3)100 (+8)110 (0)120 (0)120 (-10)120 (-70)
GET/api/v3/sbom-labels?total=true55 (+4)110 (+16)120 (0)120 (-10)200 (+70)200 (+70)
other 2
GET/.well-known/trustify42 (0)43 (0)44 (0)45 (0)54 (0)79 (+6)
POST/api/v3/ui/extract-sbom-purls1 (0)3 (0)5 (0)6 (0)8 (0)35 (-4)

Failures

No failures recorded.

Exceptions

No exceptions raised in the locustfile.