← All runs

Trustify load tests · 2026-10-23 07:31 UTC

Target trustify (scale snapshot, CI) · 2026-10-23 07:31:34 UTC → 07:41:32 UTC · Users 10 · Deltas vs previous run (2026-10-23 04:14 UTC, 2026-10-23T03-24-39_38d6fa4)

Type daily · Dataset scale-20260317T023702Z · Scenario etc/scenarios/main/full-20260317T023702Z.json5 · Branch main · Commit 38d6fa40752b · Workflow run

Duration
9m 58s
Total requests
201,857 (+10,767)
Failure rate
0.0%
0 failed requests
Throughput
336.9 req/s (+17.8)
Latency 95%ile
71 ms (-1)
Latency 99%ile
200 ms (-60)
Endpoints
72
0 with failures

Over time

Throughput

Requests and failures per second

Response time

Percentiles over Locust's rolling window, ms

Users

Concurrent simulated users

Load plan

ActionStartedStoppedElapsedUsers
Increasing07:31:3407:31:380m 04s2 → 10
Maintaining07:31:3807:41:329m 54s10 → 10

Top 10 slowest endpoints (95%ile)

#MethodName95%ile (ms)Average (ms)# Requests
1GET/api/v3/advisory-labels?filter_text=type&limit=10007,2006,02492
2POST/api/v3/vulnerability/analyze3,8001,096373
3GET/api/v3/sbom/{sbom_id}/download3,3003,12697
4GET/api/v3/advisory?q=CVE-2021-&total=true1,800401547
5GET/api/v3/vulnerability?sort=base_score:desc&total=true1,700814171
6GET/api/v3/purl?q=purl:namespace=redhat&total=true1,600148180
7POST/api/v3/purl/recommend1,400898449
8GET/api/v3/purl?q=purl:ty=rpm&total=true1,100143164
9GET/api/v3/sbom?limit=10&sort=name:asc&total=true600262132
10GET/api/v3/sbom?q=published>2024-01-01&total=true600186120

Request metrics

MethodName# Requests# FailsFail %Average (ms)Min (ms)Max (ms)Avg size (B)RPSFailures/s
sbom 16
GET/api/v3/sbom/by-package?purl={purl}140 (+23)0 (0)0%108 (+4.3)17.22401,2870.23 (0)0
GET/api/v3/sbom/count-by-package95 (-22)0 (0)0%32.1 (+0.9)5.0491.130.16 (0)0
GET/api/v3/sbom/{sbom_id}104 (-2)0 (0)0%128 (-1.1)60.52862,0150.17 (0)0
GET/api/v3/sbom/{sbom_id}/all-license-ids118 (-1)0 (0)0%24.7 (+3.1)1.8880.720.20 (0)0
GET/api/v3/sbom/{sbom_id}/download97 (+3)0 (0)0%3,126 (+108.5)2,9593,359136,458,6380.16 (0)0
GET/api/v3/sbom/{sbom_id}/license-export115 (+11)0 (0)0%34.5 (-0.4)5.0982.32340.19 (0)0
GET/api/v3/sbom/{sbom_id}/packages105 (-8)0 (0)0%157 (-5.8)19.040012,6480.18 (0)0
GET/api/v3/sbom/{sbom_id}/related109 (+6)0 (0)0%138 (-4.2)22.430015,3720.18 (0)0
GET/api/v3/sbom?limit=10&sort=name:asc&total=true132 (+25)0 (0)0%262 (-16.5)39.196712,1890.22 (0)0
GET/api/v3/sbom?offset=100&limit=10&total=true229 (+48)0 (0)0%197 (-19.1)30.782711,9410.38 (+0.1)0
GET/api/v3/sbom?q=label:type=product&total=true121 (-16)0 (0)0%23.8 (-1.6)1.8183.3220.20 (0)0
GET/api/v3/sbom?q=license~GPL&sort=name:desc&total=true109 (-2)0 (0)0%27.8 (+2.3)2.6081.4220.18 (0)0
GET/api/v3/sbom?q=name~redhat&total=true110 (-16)0 (0)0%227 (-242.2)92.5580220.18 (0)0
GET/api/v3/sbom?q=published>2024-01-01&total=true120 (-6)0 (0)0%186 (+17.9)29.695929,3170.20 (0)0
GET/api/v3/sbom?sort=ingested:desc&total=true121 (+12)0 (0)0%294 (-5.4)61.01,18929,6000.20 (0)0
GET/api/v3/sbom?total=true235 (+8)0 (0)0%159 (-13.6)27.680529,3170.39 (0)0
advisory 13
GET/api/v3/advisory/urn:uuid:{advisory_id}566 (+199)0 (0)0%56.9 (-3.7)3.921522,3950.94 (+0.3)0
GET/api/v3/advisory/urn:uuid:{advisory_id}/download576 (+189)0 (0)0%29.3 (+0.9)4.59182178,4230.96 (+0.3)0
GET/api/v3/advisory?deprecated=Consider&total=true618 (+230)0 (0)0%71.6 (-26.8)7.022,85444,0031.03 (+0.4)0
GET/api/v3/advisory?limit=1&total=true120 (+17)0 (0)0%64.7 (-22.6)6.673442,3010.20 (0)0
GET/api/v3/advisory?limit=10&sort=ingested:desc&total=true598 (+230)0 (0)0%70.0 (-13.4)4.072,97420,1931.00 (+0.4)0
GET/api/v3/advisory?offset=100&limit=10&total=true556 (+180)0 (0)0%77.8 (-12.2)6.613,00919,2680.93 (+0.3)0
GET/api/v3/advisory?offset={offset}&limit=1120 (+17)0 (0)0%264 (-11.0)41.19971,9360.20 (0)0
GET/api/v3/advisory?q=CVE-2021-&total=true547 (+194)0 (0)0%401 (-43.3)10.33,68849,4990.91 (+0.3)0
GET/api/v3/advisory?q=identifier=CVE-2022-0981&total=true623 (+275)0 (0)0%58.5 (-4.9)4.641841,9711.04 (+0.5)0
GET/api/v3/advisory?q=modified>3 days ago&total=true590 (+185)0 (0)0%22.2 (-0.2)2.34101220.98 (+0.3)0
GET/api/v3/advisory?q=title~openssl&total=true539 (+153)0 (0)0%51.1 (-426.6)9.53516126,4520.90 (+0.3)0
GET/api/v3/advisory?sort=modified:desc&total=true586 (+184)0 (0)0%74.7 (-12.0)6.503,11238,1280.98 (+0.3)0
GET/api/v3/advisory?total=true554 (+171)0 (0)0%134 (+0.8)8.873,52548,6490.92 (+0.3)0
vulnerability 7
POST/api/v3/vulnerability/analyze373 (+19)0 (0)0%1,096 (-108.6)1.864,6874,700,0670.62 (0)0
GET/api/v3/vulnerability?offset=100&limit=10&total=true187 (+13)0 (0)0%35.8 (+13.9)3.538109,1790.31 (0)0
GET/api/v3/vulnerability?q=base_score>=7.0&total=true185 (+17)0 (0)0%53.8 (+5.5)3.301,48719,4160.31 (0)0
GET/api/v3/vulnerability?q=base_severity=high&total=true171 (-16)0 (0)0%57.3 (+12.7)3.341,34320,3760.29 (0)0
GET/api/v3/vulnerability?q=cwes=CWE-79&total=true191 (-1)0 (0)0%69.6 (+23.0)4.072,01422,3250.32 (0)0
GET/api/v3/vulnerability?sort=base_score:desc&total=true171 (-23)0 (0)0%814 (+144.1)2262,27626,2900.29 (0)0
GET/api/v3/vulnerability?total=true166 (-6)0 (0)0%41.4 (-2.0)3.411,19420,0330.28 (0)0
purl 15
GET/api/v3/purl/base/{purl}176 (+37)0 (0)0%83.8 (-11.2)5.7431448,8270.29 (+0.1)0
GET/api/v3/purl/base?q=namespace=redhat&total=true132 (-4)0 (0)0%76.4 (+1.7)3.909792,0800.22 (0)0
GET/api/v3/purl/base?q=type=rpm&total=true174 (+58)0 (0)0%56.1 (-6.7)3.611252,0800.29 (+0.1)0
GET/api/v3/purl/base?sort=name:asc&total=true152 (-12)0 (0)0%199 (-17.3)70.85372,9430.25 (0)0
GET/api/v3/purl/base?total=true171 (+19)0 (0)0%57.7 (-5.3)4.002122,4500.29 (0)0
POST/api/v3/purl/recommend449 (+25)0 (0)0%898 (-54.9)1391,6862,7470.75 (0)0
GET/api/v3/purl/{purl_id}147 (+19)0 (0)0%85.8 (-17.3)18.52045370.25 (0)0
GET/api/v3/purl?offset=100&limit=10&total=true172 (+24)0 (0)0%78.5 (+1.1)4.237974,4740.29 (0)0
GET/api/v3/purl?q=curl&total=true174 (+54)0 (0)0%83.8 (-29.7)5.831,63311,7140.29 (+0.1)0
GET/api/v3/purl?q=license~GPLv3+...&sort=name:desc&total=true166 (+17)0 (0)0%30.1 (-0.7)3.7486.7220.28 (0)0
GET/api/v3/purl?q=name=curl&total=true164 (+28)0 (0)0%31.2 (-9.0)1.9827612,0840.27 (0)0
GET/api/v3/purl?q=purl:namespace=redhat&total=true180 (+49)0 (0)0%148 (-56.1)1.833,51313,6170.30 (+0.1)0
GET/api/v3/purl?q=purl:ty=rpm&total=true164 (+9)0 (0)0%143 (-38.2)1.833,22113,6170.27 (0)0
GET/api/v3/purl?sort=purl:name:asc&total=true169 (+28)0 (0)0%61.3 (+4.6)1.821,18111,1010.28 (0)0
GET/api/v3/purl?total=true140 (+22)0 (0)0%33.6 (-13.7)1.921,0129,8770.23 (0)0
license 9
GET/api/v3/license/spdx/license/{license_id}1,849 (+33)0 (0)0%41.0 (-0.3)0.9170.31,1433.09 (+0.1)0
GET/api/v3/license/spdx/license?q=apache&total=true1,928 (+247)0 (0)0%2.69 (0)0.9628.01653.22 (+0.4)0
GET/api/v3/license/spdx/license?q=gpl&total=true1,915 (+56)0 (0)0%41.1 (-0.6)1.1267.81,9813.20 (+0.1)0
GET/api/v3/license/spdx/license?total=true1,859 (+39)0 (0)0%40.8 (-0.4)1.1269.71,5253.10 (+0.1)0
GET/api/v3/license?limit=10&sort=license:asc&total=true1,894 (+146)0 (0)0%33.9 (-1.7)4.471874253.16 (+0.2)0
GET/api/v3/license?q=ASL&sort=license:desc&total=true1,845 (+78)0 (0)0%29.8 (-0.5)3.1498.5223.08 (+0.1)0
GET/api/v3/license?q=license~Apache&total=true1,978 (+180)0 (0)0%25.7 (-2.4)2.3794.81203.30 (+0.3)0
GET/api/v3/license?q=license~GPL&total=true1,815 (-14)0 (0)0%25.9 (0)2.3299.0923.03 (0)0
GET/api/v3/license?total=true1,942 (+35)0 (0)0%68.4 (-4.6)8.771391,1013.24 (+0.1)0
analysis 3
GET/api/v3/analysis/component/{component}14,762 (+190)0 (0)0%13.1 (-0.3)1.331162524.64 (+0.3)0
GET/api/v3/analysis/latest/component/{cpe}14,805 (+686)0 (0)0%12.9 (-0.6)1.3398.12524.71 (+1.1)0
GET/api/v3/analysis/status14,876 (+660)0 (0)0%12.3 (-0.5)1.2010010324.83 (+1.1)0
importer 1
GET/api/v3/importer?total=true56,303 (+4,848)0 (0)0%9.87 (-1.0)1.02102293.97 (+8.0)0
group 3
GET/api/v3/group/sbom?parents=resolve&total=true14,850 (+488)0 (0)0%12.4 (-0.6)1.221013824.78 (+0.8)0
GET/api/v3/group/sbom?total=true15,194 (+662)0 (0)0%12.6 (-0.4)1.221072225.36 (+1.1)0
GET/api/v3/group/sbom?totals=true&total=true14,966 (+362)0 (0)0%12.5 (-0.2)1.241172224.98 (+0.6)0
labels 3
GET/api/v3/advisory-labels?filter_text=type&limit=100092 (-3)0 (0)0%6,024 (+131.7)4,9798,103600.15 (0)0
GET/api/v3/sbom-labels?limit=10&filter_text=&total=true114 (+3)0 (0)0%68.7 (-2.4)10.81231,0650.19 (0)0
GET/api/v3/sbom-labels?total=true116 (+16)0 (0)0%68.7 (-5.4)6.381291,0650.19 (0)0
other 2
GET/.well-known/trustify12,973 (-317)0 (0)0%42.1 (+0.6)0.891291,17021.65 (-0.5)0
POST/api/v3/ui/extract-sbom-purls12,954 (-291)0 (0)0%2.88 (+0.5)0.8782.94521.62 (-0.5)0

Response time metrics (ms)

MethodName50%ile75%ile90%ile95%ile99%ile100%ile
sbom 16
GET/api/v3/sbom/by-package?purl={purl}120 (+20)130 (0)140 (-10)170 (-10)220 (0)240 (+20)
GET/api/v3/sbom/count-by-package12 (0)61 (+1)75 (+1)78 (-1)91 (+3)91 (+2)
GET/api/v3/sbom/{sbom_id}130 (0)140 (-10)200 (-20)220 (0)240 (+10)290 (+40)
GET/api/v3/sbom/{sbom_id}/all-license-ids9 (+1)48 (+11)67 (-1)73 (+2)80 (+3)81 (-1)
GET/api/v3/sbom/{sbom_id}/download3,100 (+100)3,200 (+100)3,200 (+100)3,300 (+200)3,400 (+200)3,400 (+200)
GET/api/v3/sbom/{sbom_id}/license-export27 (-1)59 (+1)77 (+3)79 (0)82 (-1)82 (-2)
GET/api/v3/sbom/{sbom_id}/packages130 (-10)220 (-30)300 (0)310 (0)390 (-10)400 (0)
GET/api/v3/sbom/{sbom_id}/related110 (-10)190 (-10)210 (-20)280 (+20)300 (+10)300 (-150)
GET/api/v3/sbom?limit=10&sort=name:asc&total=true210 (-20)350 (+10)460 (-40)600 (+30)800 (+50)970 (+110)
GET/api/v3/sbom?offset=100&limit=10&total=true160 (-10)250 (-60)400 (-20)480 (0)620 (-280)830 (-110)
GET/api/v3/sbom?q=label:type=product&total=true8 (0)42 (-6)70 (+1)74 (+1)80 (+4)83 (+4)
GET/api/v3/sbom?q=license~GPL&sort=name:desc&total=true9 (0)57 (+8)72 (+1)75 (0)78 (-1)81 (-6)
GET/api/v3/sbom?q=name~redhat&total=true200 (+105)280 (-690)310 (-890)390 (-910)510 (-1,190)580 (-1,120)
GET/api/v3/sbom?q=published>2024-01-01&total=true110 (0)190 (0)400 (+70)600 (+120)820 (+20)960 (+150)
GET/api/v3/sbom?sort=ingested:desc&total=true190 (-90)420 (+10)520 (-40)590 (0)1,100 (+290)1,200 (+220)
GET/api/v3/sbom?total=true110 (-10)180 (-20)310 (-30)390 (-50)580 (-20)800 (0)
advisory 13
GET/api/v3/advisory/urn:uuid:{advisory_id}47 (0)72 (-12)100 (-10)110 (0)120 (0)150 (+30)
GET/api/v3/advisory/urn:uuid:{advisory_id}/download12 (-2)51 (-1)74 (+2)78 (+2)130 (+43)180 (+88)
GET/api/v3/advisory?deprecated=Consider&total=true17 (-22)67 (-7)81 (-17)90 (-40)1,900 (-400)2,900 (-800)
GET/api/v3/advisory?limit=1&total=true51 (-1)76 (-21)100 (-10)110 (-10)120 (-810)340 (-860)
GET/api/v3/advisory?limit=10&sort=ingested:desc&total=true13 (-1)64 (-2)77 (-4)83 (-10)2,400 (+200)3,000 (+600)
GET/api/v3/advisory?offset=100&limit=10&total=true70 (-6)88 (+1)98 (0)100 (0)190 (-1,710)3,000 (+500)
GET/api/v3/advisory?offset={offset}&limit=1220 (-20)360 (-20)510 (+60)540 (-20)740 (-50)1,000 (+150)
GET/api/v3/advisory?q=CVE-2021-&total=true200 (0)320 (0)1,200 (-400)1,800 (0)2,400 (+100)3,700 (-800)
GET/api/v3/advisory?q=identifier=CVE-2022-0981&total=true47 (-2)71 (-23)100 (-10)110 (0)130 (+10)180 (+50)
GET/api/v3/advisory?q=modified>3 days ago&total=true8 (0)40 (+7)66 (-1)71 (-3)82 (0)100 (+15)
GET/api/v3/advisory?q=title~openssl&total=true33 (-367)75 (-515)87 (-1,013)120 (-1,080)220 (-1,380)520 (-1,280)
GET/api/v3/advisory?sort=modified:desc&total=true16 (+1)67 (-2)80 (-6)93 (-27)2,500 (+400)3,100 (+700)
GET/api/v3/advisory?total=true100 (0)120 (0)180 (0)190 (0)1,900 (+100)3,500 (+900)
vulnerability 7
POST/api/v3/vulnerability/analyze860 (-140)1,700 (-400)3,100 (-100)3,800 (0)4,400 (-300)4,700 (-400)
GET/api/v3/vulnerability?offset=100&limit=10&total=true7 (0)11 (+1)64 (-4)76 (+5)710 (+631)810 (+100)
GET/api/v3/vulnerability?q=base_score>=7.0&total=true9 (+1)26 (+14)75 (+2)110 (-10)1,100 (+100)1,500 (+300)
GET/api/v3/vulnerability?q=base_severity=high&total=true9 (+1)52 (+39)74 (+1)270 (+187)1,200 (+490)1,300 (0)
GET/api/v3/vulnerability?q=cwes=CWE-79&total=true8 (-1)17 (-1)72 (-3)310 (+227)1,300 (+580)2,000 (+700)
GET/api/v3/vulnerability?sort=base_score:desc&total=true680 (+110)1,000 (+180)1,500 (+400)1,700 (+300)2,200 (+300)2,300 (+200)
GET/api/v3/vulnerability?total=true8 (0)12 (0)70 (+2)78 (-22)990 (+180)1,200 (+380)
purl 15
GET/api/v3/purl/base/{purl}56 (-7)150 (-20)220 (-10)260 (-10)310 (+10)310 (0)
GET/api/v3/purl/base?q=namespace=redhat&total=true45 (-2)74 (-13)99 (-1)130 (-10)890 (+290)980 (+330)
GET/api/v3/purl/base?q=type=rpm&total=true45 (-8)72 (-17)98 (-2)100 (-10)110 (0)130 (0)
GET/api/v3/purl/base?sort=name:asc&total=true200 (-20)240 (-20)290 (-20)330 (0)420 (0)540 (+40)
GET/api/v3/purl/base?total=true45 (-2)80 (-6)93 (-7)99 (-11)140 (0)210 (+70)
POST/api/v3/purl/recommend1,000 (0)1,200 (0)1,300 (-100)1,400 (0)1,600 (-100)1,700 (-100)
GET/api/v3/purl/{purl_id}80 (-15)110 (-30)170 (-10)180 (-10)200 (-10)200 (-60)
GET/api/v3/purl?offset=100&limit=10&total=true46 (-2)78 (-14)99 (-1)110 (+10)710 (+40)800 (+50)
GET/api/v3/purl?q=curl&total=true26 (-23)60 (-11)76 (-16)210 (-690)1,500 (+300)1,600 (+400)
GET/api/v3/purl?q=license~GPLv3+...&sort=name:desc&total=true15 (0)54 (+1)63 (-6)68 (-7)85 (0)87 (+2)
GET/api/v3/purl?q=name=curl&total=true10 (-4)45 (-13)65 (-6)81 (-29)270 (-30)280 (-120)
GET/api/v3/purl?q=purl:namespace=redhat&total=true7 (-2)39 (-18)64 (-5)1,600 (-900)3,100 (-100)3,500 (+200)
GET/api/v3/purl?q=purl:ty=rpm&total=true7 (-1)40 (-5)60 (-2)1,100 (-1,400)2,900 (-700)3,200 (-500)
GET/api/v3/purl?sort=purl:name:asc&total=true10 (-3)50 (-4)70 (-2)450 (+140)970 (+290)1,200 (+300)
GET/api/v3/purl?total=true8 (+1)49 (+7)62 (+1)71 (-339)400 (-280)1,000 (+300)
license 9
GET/api/v3/license/spdx/license/{license_id}42 (0)43 (0)44 (0)46 (+1)57 (+5)70 (0)
GET/api/v3/license/spdx/license?q=apache&total=true2 (0)3 (-1)5 (0)6 (+1)8 (0)28 (+2)
GET/api/v3/license/spdx/license?q=gpl&total=true43 (0)44 (0)45 (0)46 (0)54 (-1)68 (-11)
GET/api/v3/license/spdx/license?total=true42 (0)43 (0)44 (0)45 (0)53 (-1)70 (-3)
GET/api/v3/license?limit=10&sort=license:asc&total=true20 (-2)57 (-2)75 (0)81 (+1)90 (0)190 (+80)
GET/api/v3/license?q=ASL&sort=license:desc&total=true15 (-1)52 (-1)68 (0)75 (-2)84 (0)98 (-2)
GET/api/v3/license?q=license~Apache&total=true11 (-2)46 (-6)62 (-5)71 (-3)79 (-2)95 (-15)
GET/api/v3/license?q=license~GPL&total=true11 (0)47 (0)61 (-1)71 (-1)80 (0)99 (+5)
GET/api/v3/license?total=true57 (-4)93 (-5)110 (0)120 (0)130 (0)140 (-20)
analysis 3
GET/api/v3/analysis/component/{component}5 (0)7 (0)62 (-1)69 (-1)75 (-1)120 (0)
GET/api/v3/analysis/latest/component/{cpe}5 (0)7 (0)61 (-2)69 (0)75 (-1)98 (-12)
GET/api/v3/analysis/status5 (0)6 (0)60 (-2)68 (-1)75 (0)100 (+6)
importer 1
GET/api/v3/importer?total=true3 (-1)5 (0)46 (-10)65 (-2)73 (-2)100 (-70)
group 3
GET/api/v3/group/sbom?parents=resolve&total=true4 (0)6 (0)60 (-3)68 (-1)75 (0)100 (-10)
GET/api/v3/group/sbom?total=true4 (0)6 (0)61 (-2)68 (-1)75 (-1)110 (+10)
GET/api/v3/group/sbom?totals=true&total=true4 (0)6 (0)61 (-1)68 (-1)75 (-1)120 (+10)
labels 3
GET/api/v3/advisory-labels?filter_text=type&limit=10006,000 (+100)6,300 (+100)6,600 (+100)7,200 (+500)8,100 (+400)8,100 (+400)
GET/api/v3/sbom-labels?limit=10&filter_text=&total=true53 (-1)96 (-4)110 (0)120 (0)120 (0)120 (0)
GET/api/v3/sbom-labels?total=true52 (-3)97 (-13)110 (-10)120 (0)120 (-80)130 (-70)
other 2
GET/.well-known/trustify42 (0)43 (0)44 (0)46 (+1)64 (+10)130 (+51)
POST/api/v3/ui/extract-sbom-purls1 (0)3 (0)5 (0)6 (0)25 (+17)83 (+48)

Failures

No failures recorded.

Exceptions

No exceptions raised in the locustfile.