← All runs

Trustify load tests · 2026-10-23 10:23 UTC

Target trustify (scale snapshot, CI) · 2026-10-23 10:23:28 UTC → 10:43:25 UTC · Users 10 · Deltas vs previous run (2026-10-23 07:31 UTC, 2026-10-23T06-42-12_38d6fa4)

Type daily · Dataset scale-20260317T023702Z · Scenario etc/scenarios/main/full-20260317T023702Z.json5 · Branch main · Commit 38d6fa40752b · Workflow run

Duration
19m 57s
Total requests
399,877 (+198,020)
Failure rate
0.0%
0 failed requests
Throughput
333.6 req/s (-3.3)
Latency 95%ile
71 ms (0)
Latency 99%ile
190 ms (-10)
Endpoints
72
0 with failures

Over time

Throughput

Requests and failures per second

Response time

Percentiles over Locust's rolling window, ms

Users

Concurrent simulated users

Load plan

ActionStartedStoppedElapsedUsers
Increasing10:23:2810:23:310m 03s4 → 10
Maintaining10:23:3110:43:2519m 54s10 → 10

Top 10 slowest endpoints (95%ile)

#MethodName95%ile (ms)Average (ms)# Requests
1GET/api/v3/advisory-labels?filter_text=type&limit=10006,7005,789197
2POST/api/v3/vulnerability/analyze3,8001,169669
3GET/api/v3/sbom/{sbom_id}/download3,2003,050193
4GET/api/v3/purl?q=purl:namespace=redhat&total=true2,700189316
5GET/api/v3/purl?q=purl:ty=rpm&total=true2,600217261
6GET/api/v3/advisory?q=CVE-2021-&total=true1,7003911,176
7GET/api/v3/vulnerability?sort=base_score:desc&total=true1,600934339
8GET/api/v3/sbom?q=name~redhat&total=true1,500679194
9POST/api/v3/purl/recommend1,400970845
10GET/api/v3/purl?q=curl&total=true900109257

Request metrics

MethodName# Requests# FailsFail %Average (ms)Min (ms)Max (ms)Avg size (B)RPSFailures/s
sbom 16
GET/api/v3/sbom/by-package?purl={purl}198 (+58)0 (0)0%103 (-4.9)16.42201,2870.17 (-0.1)0
GET/api/v3/sbom/count-by-package180 (+85)0 (0)0%31.4 (-0.6)3.1989.830.15 (0)0
GET/api/v3/sbom/{sbom_id}191 (+87)0 (0)0%129 (+1.0)26.02632,0150.16 (0)0
GET/api/v3/sbom/{sbom_id}/all-license-ids182 (+64)0 (0)0%26.1 (+1.4)2.0984.620.15 (0)0
GET/api/v3/sbom/{sbom_id}/download193 (+96)0 (0)0%3,050 (-76.1)2,8733,390136,458,6380.16 (0)0
GET/api/v3/sbom/{sbom_id}/license-export207 (+92)0 (0)0%31.2 (-3.3)4.8589.22340.17 (0)0
GET/api/v3/sbom/{sbom_id}/packages212 (+107)0 (0)0%164 (+6.5)14.749112,6480.18 (0)0
GET/api/v3/sbom/{sbom_id}/related176 (+67)0 (0)0%150 (+11.3)24.740015,3720.15 (0)0
GET/api/v3/sbom?limit=10&sort=name:asc&total=true185 (+53)0 (0)0%290 (+28.0)34.280312,1890.15 (-0.1)0
GET/api/v3/sbom?offset=100&limit=10&total=true377 (+148)0 (0)0%224 (+26.3)27.51,11411,9410.31 (-0.1)0
GET/api/v3/sbom?q=label:type=product&total=true192 (+71)0 (0)0%25.3 (+1.5)2.2790.4220.16 (0)0
GET/api/v3/sbom?q=license~GPL&sort=name:desc&total=true206 (+97)0 (0)0%26.6 (-1.2)3.0691.9220.17 (0)0
GET/api/v3/sbom?q=name~redhat&total=true194 (+84)0 (0)0%679 (+452.3)10.31,670220.16 (0)0
GET/api/v3/sbom?q=published>2024-01-01&total=true176 (+56)0 (0)0%208 (+21.4)26.379429,3170.15 (-0.1)0
GET/api/v3/sbom?sort=ingested:desc&total=true221 (+100)0 (0)0%321 (+26.9)27.21,19929,6000.18 (0)0
GET/api/v3/sbom?total=true385 (+150)0 (0)0%181 (+22.7)28.51,09929,3170.32 (-0.1)0
advisory 13
GET/api/v3/advisory/urn:uuid:{advisory_id}1,175 (+609)0 (0)0%56.2 (-0.7)3.931752,3950.98 (0)0
GET/api/v3/advisory/urn:uuid:{advisory_id}/download1,173 (+597)0 (0)0%27.5 (-1.9)4.66153178,4230.98 (0)0
GET/api/v3/advisory?deprecated=Consider&total=true1,206 (+588)0 (0)0%68.9 (-2.7)6.812,96844,0031.01 (0)0
GET/api/v3/advisory?limit=1&total=true165 (+45)0 (0)0%77.9 (+13.3)8.961,0802,1380.14 (-0.1)0
GET/api/v3/advisory?limit=10&sort=ingested:desc&total=true1,135 (+537)0 (0)0%63.7 (-6.3)5.543,20920,1930.95 (-0.1)0
GET/api/v3/advisory?offset=100&limit=10&total=true1,193 (+637)0 (0)0%80.3 (+2.6)6.432,58719,4131.00 (+0.1)0
GET/api/v3/advisory?offset={offset}&limit=1165 (+45)0 (0)0%260 (-3.4)30.59001,8970.14 (-0.1)0
GET/api/v3/advisory?q=CVE-2021-&total=true1,176 (+629)0 (0)0%391 (-10.6)7.334,69649,6640.98 (+0.1)0
GET/api/v3/advisory?q=identifier=CVE-2022-0981&total=true1,084 (+461)0 (0)0%59.3 (+0.9)3.502141,9710.90 (-0.1)0
GET/api/v3/advisory?q=modified>3 days ago&total=true1,145 (+555)0 (0)0%21.9 (-0.3)2.02172220.96 (0)0
GET/api/v3/advisory?q=title~openssl&total=true1,218 (+679)0 (0)0%44.3 (-6.8)6.96523126,4521.02 (+0.1)0
GET/api/v3/advisory?sort=modified:desc&total=true1,174 (+588)0 (0)0%70.6 (-4.0)6.463,10638,1280.98 (0)0
GET/api/v3/advisory?total=true1,167 (+613)0 (0)0%130 (-3.4)7.273,98048,1210.97 (0)0
vulnerability 7
POST/api/v3/vulnerability/analyze669 (+296)0 (0)0%1,169 (+72.8)1.475,8114,484,5980.56 (-0.1)0
GET/api/v3/vulnerability?offset=100&limit=10&total=true337 (+150)0 (0)0%63.9 (+28.2)2.228437,5270.28 (0)0
GET/api/v3/vulnerability?q=base_score>=7.0&total=true352 (+167)0 (0)0%53.9 (+0.1)2.891,18218,4630.29 (0)0
GET/api/v3/vulnerability?q=base_severity=high&total=true345 (+174)0 (0)0%56.7 (-0.5)2.661,41718,5590.29 (0)0
GET/api/v3/vulnerability?q=cwes=CWE-79&total=true328 (+137)0 (0)0%60.8 (-8.8)2.611,69019,0090.27 (0)0
GET/api/v3/vulnerability?sort=base_score:desc&total=true339 (+168)0 (0)0%934 (+119.6)2212,01013,9280.28 (0)0
GET/api/v3/vulnerability?total=true385 (+219)0 (0)0%36.3 (-5.1)2.4999018,9390.32 (0)0
purl 15
GET/api/v3/purl/base/{purl}289 (+113)0 (0)0%101 (+17.6)7.3439448,8270.24 (-0.1)0
GET/api/v3/purl/base?q=namespace=redhat&total=true272 (+140)0 (0)0%84.1 (+7.7)4.499192,0800.23 (0)0
GET/api/v3/purl/base?q=type=rpm&total=true306 (+132)0 (0)0%59.3 (+3.2)3.761162,0800.26 (0)0
GET/api/v3/purl/base?sort=name:asc&total=true249 (+97)0 (0)0%216 (+17.0)80.65222,9430.21 (0)0
GET/api/v3/purl/base?total=true287 (+116)0 (0)0%61.3 (+3.6)3.941582,4500.24 (0)0
POST/api/v3/purl/recommend845 (+396)0 (0)0%970 (+72.1)1261,8482,7470.70 (0)0
GET/api/v3/purl/{purl_id}256 (+109)0 (0)0%97.3 (+11.5)17.42645370.21 (0)0
GET/api/v3/purl?offset=100&limit=10&total=true244 (+72)0 (0)0%69.9 (-8.7)3.589094,4740.20 (-0.1)0
GET/api/v3/purl?q=curl&total=true257 (+83)0 (0)0%109 (+24.9)6.151,46511,7140.21 (-0.1)0
GET/api/v3/purl?q=license~GPLv3+...&sort=name:desc&total=true271 (+105)0 (0)0%32.4 (+2.3)3.4088.2220.23 (-0.1)0
GET/api/v3/purl?q=name=curl&total=true273 (+109)0 (0)0%33.4 (+2.2)1.7634112,0840.23 (0)0
GET/api/v3/purl?q=purl:namespace=redhat&total=true316 (+136)0 (0)0%189 (+41.3)1.974,12213,6170.26 (0)0
GET/api/v3/purl?q=purl:ty=rpm&total=true261 (+97)0 (0)0%217 (+73.6)2.093,38113,6170.22 (-0.1)0
GET/api/v3/purl?sort=purl:name:asc&total=true289 (+120)0 (0)0%58.3 (-3.0)1.7968011,1010.24 (0)0
GET/api/v3/purl?total=true253 (+113)0 (0)0%46.5 (+12.8)1.636389,8770.21 (0)0
license 9
GET/api/v3/license/spdx/license/{license_id}3,716 (+1,867)0 (0)0%41.4 (+0.4)1.001341,1433.10 (0)0
GET/api/v3/license/spdx/license?q=apache&total=true3,693 (+1,765)0 (0)0%3.24 (+0.5)0.9776.11653.08 (-0.1)0
GET/api/v3/license/spdx/license?q=gpl&total=true3,720 (+1,805)0 (0)0%41.5 (+0.4)1.061161,9813.10 (-0.1)0
GET/api/v3/license/spdx/license?total=true3,753 (+1,894)0 (0)0%41.2 (+0.4)1.091161,5253.13 (0)0
GET/api/v3/license?limit=10&sort=license:asc&total=true3,681 (+1,787)0 (0)0%35.3 (+1.4)6.231824253.07 (-0.1)0
GET/api/v3/license?q=ASL&sort=license:desc&total=true3,762 (+1,917)0 (0)0%31.0 (+1.3)3.18173223.14 (+0.1)0
GET/api/v3/license?q=license~Apache&total=true3,756 (+1,778)0 (0)0%26.9 (+1.2)2.381731203.13 (-0.2)0
GET/api/v3/license?q=license~GPL&total=true3,572 (+1,757)0 (0)0%26.9 (+1.0)2.38132922.98 (0)0
GET/api/v3/license?total=true3,670 (+1,728)0 (0)0%69.8 (+1.5)6.752191,1013.06 (-0.2)0
analysis 3
GET/api/v3/analysis/component/{component}29,261 (+14,499)0 (0)0%13.1 (0)1.302902524.41 (-0.2)0
GET/api/v3/analysis/latest/component/{cpe}29,060 (+14,255)0 (0)0%13.2 (+0.3)1.351082524.24 (-0.5)0
GET/api/v3/analysis/status29,239 (+14,363)0 (0)0%12.6 (+0.3)1.2210410324.39 (-0.4)0
importer 1
GET/api/v3/importer?total=true109,009 (+52,706)0 (0)0%10.2 (+0.3)1.01111290.93 (-3.0)0
group 3
GET/api/v3/group/sbom?parents=resolve&total=true30,867 (+16,017)0 (0)0%12.1 (-0.2)1.211043825.75 (+1.0)0
GET/api/v3/group/sbom?total=true30,722 (+15,528)0 (0)0%12.3 (-0.3)1.211062225.63 (+0.3)0
GET/api/v3/group/sbom?totals=true&total=true30,559 (+15,593)0 (0)0%12.3 (-0.3)1.211052225.49 (+0.5)0
labels 3
GET/api/v3/advisory-labels?filter_text=type&limit=1000197 (+105)0 (0)0%5,789 (-234.5)4,9317,209600.16 (0)0
GET/api/v3/sbom-labels?limit=10&filter_text=&total=true160 (+46)0 (0)0%67.9 (-0.9)8.661261,0650.13 (-0.1)0
GET/api/v3/sbom-labels?total=true198 (+82)0 (0)0%70.3 (+1.6)7.911271,0650.17 (0)0
other 2
GET/.well-known/trustify26,660 (+13,687)0 (0)0%41.6 (-0.5)0.8378.01,17022.24 (+0.6)0
POST/api/v3/ui/extract-sbom-purls26,548 (+13,594)0 (0)0%2.38 (-0.5)0.8941.44522.14 (+0.5)0

Response time metrics (ms)

MethodName50%ile75%ile90%ile95%ile99%ile100%ile
sbom 16
GET/api/v3/sbom/by-package?purl={purl}110 (-10)130 (0)140 (0)140 (-30)220 (0)220 (-20)
GET/api/v3/sbom/count-by-package12 (0)62 (+1)75 (0)79 (+1)89 (-2)90 (-1)
GET/api/v3/sbom/{sbom_id}130 (0)140 (0)200 (0)220 (0)240 (0)260 (-30)
GET/api/v3/sbom/{sbom_id}/all-license-ids9 (0)49 (+1)70 (+3)75 (+2)84 (+4)85 (+4)
GET/api/v3/sbom/{sbom_id}/download3,000 (-100)3,100 (-100)3,100 (-100)3,200 (-100)3,300 (-100)3,400 (0)
GET/api/v3/sbom/{sbom_id}/license-export12 (-15)59 (0)74 (-3)81 (+2)88 (+6)89 (+7)
GET/api/v3/sbom/{sbom_id}/packages120 (-10)270 (+50)300 (0)370 (+60)410 (+20)490 (+90)
GET/api/v3/sbom/{sbom_id}/related120 (+10)200 (+10)280 (+70)290 (+10)300 (0)400 (+100)
GET/api/v3/sbom?limit=10&sort=name:asc&total=true270 (+60)380 (+30)500 (+40)640 (+40)800 (0)800 (-170)
GET/api/v3/sbom?offset=100&limit=10&total=true170 (+10)350 (+100)470 (+70)520 (+40)670 (+50)1,100 (+270)
GET/api/v3/sbom?q=label:type=product&total=true8 (0)44 (+2)70 (0)75 (+1)90 (+10)90 (+7)
GET/api/v3/sbom?q=license~GPL&sort=name:desc&total=true9 (0)53 (-4)71 (-1)75 (0)84 (+6)92 (+11)
GET/api/v3/sbom?q=name~redhat&total=true810 (+610)1,100 (+820)1,300 (+990)1,500 (+1,110)1,600 (+1,090)1,700 (+1,120)
GET/api/v3/sbom?q=published>2024-01-01&total=true170 (+60)300 (+110)480 (+80)530 (-70)710 (-110)790 (-170)
GET/api/v3/sbom?sort=ingested:desc&total=true300 (+110)470 (+50)590 (+70)700 (+110)1,100 (0)1,200 (0)
GET/api/v3/sbom?total=true120 (+10)190 (+10)390 (+80)490 (+100)720 (+140)1,100 (+300)
advisory 13
GET/api/v3/advisory/urn:uuid:{advisory_id}46 (-1)70 (-2)100 (0)110 (0)120 (0)170 (+20)
GET/api/v3/advisory/urn:uuid:{advisory_id}/download12 (0)47 (-4)72 (-2)76 (-2)89 (-41)150 (-30)
GET/api/v3/advisory?deprecated=Consider&total=true16 (-1)67 (0)80 (-1)90 (0)1,900 (0)3,000 (+100)
GET/api/v3/advisory?limit=1&total=true50 (-1)72 (-4)110 (+10)110 (0)1,100 (+980)1,100 (+760)
GET/api/v3/advisory?limit=10&sort=ingested:desc&total=true12 (-1)62 (-2)74 (-3)83 (0)1,900 (-500)3,200 (+200)
GET/api/v3/advisory?offset=100&limit=10&total=true75 (+5)89 (+1)97 (-1)100 (0)250 (+60)2,600 (-400)
GET/api/v3/advisory?offset={offset}&limit=1240 (+20)320 (-40)480 (-30)530 (-10)720 (-20)900 (-100)
GET/api/v3/advisory?q=CVE-2021-&total=true190 (-10)310 (-10)1,300 (+100)1,700 (-100)2,300 (-100)4,700 (+1,000)
GET/api/v3/advisory?q=identifier=CVE-2022-0981&total=true47 (0)83 (+12)110 (+10)110 (0)120 (-10)210 (+30)
GET/api/v3/advisory?q=modified>3 days ago&total=true8 (0)38 (-2)66 (0)72 (+1)81 (-1)170 (+70)
GET/api/v3/advisory?q=title~openssl&total=true21 (-12)73 (-2)85 (-2)95 (-25)200 (-20)520 (0)
GET/api/v3/advisory?sort=modified:desc&total=true16 (0)67 (0)79 (-1)88 (-5)2,000 (-500)3,100 (0)
GET/api/v3/advisory?total=true110 (+10)140 (+20)180 (0)190 (0)330 (-1,570)4,000 (+500)
vulnerability 7
POST/api/v3/vulnerability/analyze74 (-786)2,000 (+300)3,300 (+200)3,800 (0)4,500 (+100)5,800 (+1,100)
GET/api/v3/vulnerability?offset=100&limit=10&total=true46 (+39)48 (+37)84 (+20)110 (+34)750 (+40)840 (+30)
GET/api/v3/vulnerability?q=base_score>=7.0&total=true8 (-1)39 (+13)68 (-7)130 (+20)980 (-120)1,200 (-300)
GET/api/v3/vulnerability?q=base_severity=high&total=true8 (-1)16 (-36)64 (-10)200 (-70)1,000 (-200)1,400 (+100)
GET/api/v3/vulnerability?q=cwes=CWE-79&total=true8 (0)18 (+1)71 (-1)270 (-40)1,200 (-100)1,700 (-300)
GET/api/v3/vulnerability?sort=base_score:desc&total=true990 (+310)1,200 (+200)1,400 (-100)1,600 (-100)1,800 (-400)2,000 (-300)
GET/api/v3/vulnerability?total=true7 (-1)13 (+1)66 (-4)72 (-6)800 (-190)990 (-210)
purl 15
GET/api/v3/purl/base/{purl}65 (+9)190 (+40)260 (+40)280 (+20)360 (+50)390 (+80)
GET/api/v3/purl/base?q=namespace=redhat&total=true48 (+3)83 (+9)100 (+1)150 (+20)910 (+20)920 (-60)
GET/api/v3/purl/base?q=type=rpm&total=true46 (+1)83 (+11)98 (0)100 (0)110 (0)120 (-10)
GET/api/v3/purl/base?sort=name:asc&total=true210 (+10)250 (+10)310 (+20)330 (0)410 (-10)520 (-20)
GET/api/v3/purl/base?total=true46 (+1)85 (+5)99 (+6)100 (+1)140 (0)160 (-50)
POST/api/v3/purl/recommend1,000 (0)1,200 (0)1,300 (0)1,400 (0)1,500 (-100)1,800 (+100)
GET/api/v3/purl/{purl_id}93 (+13)120 (+10)170 (0)190 (+10)250 (+50)260 (+60)
GET/api/v3/purl?offset=100&limit=10&total=true46 (0)81 (+3)99 (0)100 (-10)620 (-90)910 (+110)
GET/api/v3/purl?q=curl&total=true49 (+23)68 (+8)92 (+16)900 (+690)1,400 (-100)1,500 (-100)
GET/api/v3/purl?q=license~GPLv3+...&sort=name:desc&total=true21 (+6)56 (+2)67 (+4)73 (+5)81 (-4)88 (+1)
GET/api/v3/purl?q=name=curl&total=true12 (+2)54 (+9)70 (+5)95 (+14)230 (-40)340 (+60)
GET/api/v3/purl?q=purl:namespace=redhat&total=true8 (+1)43 (+4)64 (0)2,700 (+1,100)3,400 (+300)4,100 (+600)
GET/api/v3/purl?q=purl:ty=rpm&total=true9 (+2)51 (+11)65 (+5)2,600 (+1,500)3,100 (+200)3,400 (+200)
GET/api/v3/purl?sort=purl:name:asc&total=true12 (+2)56 (+6)71 (+1)470 (+20)670 (-300)680 (-520)
GET/api/v3/purl?total=true9 (+1)45 (-4)61 (-1)320 (+249)560 (+160)640 (-360)
license 9
GET/api/v3/license/spdx/license/{license_id}42 (0)43 (0)44 (0)46 (0)66 (+9)130 (+60)
GET/api/v3/license/spdx/license?q=apache&total=true3 (+1)4 (+1)5 (0)6 (0)29 (+21)76 (+48)
GET/api/v3/license/spdx/license?q=gpl&total=true43 (0)44 (0)45 (0)46 (0)68 (+14)120 (+52)
GET/api/v3/license/spdx/license?total=true42 (0)43 (0)44 (0)46 (+1)64 (+11)120 (+50)
GET/api/v3/license?limit=10&sort=license:asc&total=true21 (+1)58 (+1)75 (0)81 (0)94 (+4)180 (-10)
GET/api/v3/license?q=ASL&sort=license:desc&total=true16 (+1)54 (+2)71 (+3)77 (+2)94 (+10)170 (+72)
GET/api/v3/license?q=license~Apache&total=true11 (0)48 (+2)65 (+3)73 (+2)85 (+6)170 (+75)
GET/api/v3/license?q=license~GPL&total=true12 (+1)49 (+2)62 (+1)71 (0)83 (+3)130 (+31)
GET/api/v3/license?total=true58 (+1)94 (+1)110 (0)120 (0)130 (0)220 (+80)
analysis 3
GET/api/v3/analysis/component/{component}5 (0)7 (0)62 (0)69 (0)76 (+1)290 (+170)
GET/api/v3/analysis/latest/component/{cpe}5 (0)7 (0)62 (+1)69 (0)75 (0)110 (+12)
GET/api/v3/analysis/status5 (0)6 (0)61 (+1)68 (0)75 (0)100 (0)
importer 1
GET/api/v3/importer?total=true3 (0)5 (0)52 (+6)66 (+1)73 (0)110 (+10)
group 3
GET/api/v3/group/sbom?parents=resolve&total=true4 (0)6 (0)60 (0)68 (0)74 (-1)100 (0)
GET/api/v3/group/sbom?total=true4 (0)6 (0)61 (0)68 (0)74 (-1)110 (0)
GET/api/v3/group/sbom?totals=true&total=true4 (0)6 (0)60 (-1)68 (0)74 (-1)110 (-10)
labels 3
GET/api/v3/advisory-labels?filter_text=type&limit=10005,700 (-300)6,100 (-200)6,300 (-300)6,700 (-500)7,200 (-900)7,200 (-900)
GET/api/v3/sbom-labels?limit=10&filter_text=&total=true51 (-2)91 (-5)110 (0)120 (0)120 (0)130 (+10)
GET/api/v3/sbom-labels?total=true52 (0)99 (+2)110 (0)120 (0)130 (+10)130 (0)
other 2
GET/.well-known/trustify42 (0)43 (0)44 (0)45 (-1)57 (-7)78 (-52)
POST/api/v3/ui/extract-sbom-purls1 (0)3 (0)5 (0)6 (0)8 (-17)41 (-42)

Failures

No failures recorded.

Exceptions

No exceptions raised in the locustfile.