← All runs

Trustify load tests · 2026-10-24 07:14 UTC

Target trustify (scale snapshot, CI) · 2026-10-24 07:14:04 UTC → 07:24:02 UTC · Users 10 · Deltas vs previous run (2026-10-23 10:23 UTC, 2026-10-23T09-33-25_38d6fa4)

Type daily · Dataset scale-20260317T023702Z · Scenario etc/scenarios/main/full-20260317T023702Z.json5 · Branch main · Commit 9e1444557ecc · Workflow run

Duration
9m 58s
Total requests
196,159 (-203,718)
Failure rate
0.0%
0 failed requests
Throughput
327.5 req/s (-6.1)
Latency 95%ile
72 ms (+1)
Latency 99%ile
200 ms (+10)
Endpoints
72
0 with failures

Over time

Throughput

Requests and failures per second

Response time

Percentiles over Locust's rolling window, ms

Users

Concurrent simulated users

Load plan

ActionStartedStoppedElapsedUsers
Increasing07:14:0407:14:080m 04s2 → 10
Maintaining07:14:0807:24:029m 54s10 → 10

Top 10 slowest endpoints (95%ile)

#MethodName95%ile (ms)Average (ms)# Requests
1GET/api/v3/advisory-labels?filter_text=type&limit=10007,0005,91096
2POST/api/v3/vulnerability/analyze3,7001,106360
3GET/api/v3/sbom/{sbom_id}/download3,2003,042103
4GET/api/v3/purl?q=purl:namespace=redhat&total=true3,000228135
5GET/api/v3/purl?q=purl:ty=rpm&total=true2,300187134
6GET/api/v3/advisory?q=CVE-2021-&total=true1,800376586
7POST/api/v3/purl/recommend1,500981420
8GET/api/v3/vulnerability?sort=base_score:desc&total=true1,400693209
9GET/api/v3/sbom?sort=ingested:desc&total=true700300107
10GET/api/v3/sbom?limit=10&sort=name:asc&total=true670257129

Request metrics

MethodName# Requests# FailsFail %Average (ms)Min (ms)Max (ms)Avg size (B)RPSFailures/s
sbom 16
GET/api/v3/sbom/by-package?purl={purl}90 (-108)0 (0)0%110 (+6.6)18.42241,2870.15 (0)0
GET/api/v3/sbom/count-by-package114 (-66)0 (0)0%33.6 (+2.2)5.0786.430.19 (0)0
GET/api/v3/sbom/{sbom_id}116 (-75)0 (0)0%127 (-1.9)55.52652,0150.19 (0)0
GET/api/v3/sbom/{sbom_id}/all-license-ids105 (-77)0 (0)0%25.4 (-0.7)2.0085.120.18 (0)0
GET/api/v3/sbom/{sbom_id}/download103 (-90)0 (0)0%3,042 (-7.8)2,8763,420136,458,6380.17 (0)0
GET/api/v3/sbom/{sbom_id}/license-export105 (-102)0 (0)0%31.6 (+0.4)4.8384.52350.18 (0)0
GET/api/v3/sbom/{sbom_id}/packages101 (-111)0 (0)0%149 (-14.9)14.942112,6480.17 (0)0
GET/api/v3/sbom/{sbom_id}/related134 (-42)0 (0)0%131 (-18.7)23.930915,3720.22 (+0.1)0
GET/api/v3/sbom?limit=10&sort=name:asc&total=true129 (-56)0 (0)0%257 (-33.5)33.41,09612,1890.22 (+0.1)0
GET/api/v3/sbom?offset=100&limit=10&total=true225 (-152)0 (0)0%209 (-14.6)28.078011,9410.38 (+0.1)0
GET/api/v3/sbom?q=label:type=product&total=true119 (-73)0 (0)0%25.7 (+0.5)1.9979.3220.20 (0)0
GET/api/v3/sbom?q=license~GPL&sort=name:desc&total=true114 (-92)0 (0)0%22.3 (-4.3)2.5278.0220.19 (0)0
GET/api/v3/sbom?q=name~redhat&total=true95 (-99)0 (0)0%245 (-434.3)48.8575220.16 (0)0
GET/api/v3/sbom?q=published>2024-01-01&total=true136 (-40)0 (0)0%183 (-25.0)28.71,09129,3170.23 (+0.1)0
GET/api/v3/sbom?sort=ingested:desc&total=true107 (-114)0 (0)0%300 (-20.8)35.91,17929,6000.18 (0)0
GET/api/v3/sbom?total=true218 (-167)0 (0)0%159 (-22.9)25.881329,3170.36 (0)0
advisory 13
GET/api/v3/advisory/urn:uuid:{advisory_id}615 (-560)0 (0)0%57.4 (+1.2)3.891322,3951.03 (0)0
GET/api/v3/advisory/urn:uuid:{advisory_id}/download562 (-611)0 (0)0%29.2 (+1.7)4.62108178,4230.94 (0)0
GET/api/v3/advisory?deprecated=Consider&total=true591 (-615)0 (0)0%73.1 (+4.2)6.082,82144,0030.99 (0)0
GET/api/v3/advisory?limit=1&total=true89 (-76)0 (0)0%64.0 (-13.9)7.028472,2020.15 (0)0
GET/api/v3/advisory?limit=10&sort=ingested:desc&total=true583 (-552)0 (0)0%67.7 (+4.0)5.173,28420,1930.97 (0)0
GET/api/v3/advisory?offset=100&limit=10&total=true583 (-610)0 (0)0%86.1 (+5.8)7.082,68519,1320.97 (0)0
GET/api/v3/advisory?offset={offset}&limit=189 (-76)0 (0)0%252 (-8.0)28.58201,9480.15 (0)0
GET/api/v3/advisory?q=CVE-2021-&total=true586 (-590)0 (0)0%376 (-14.7)9.673,77550,0440.98 (0)0
GET/api/v3/advisory?q=identifier=CVE-2022-0981&total=true552 (-532)0 (0)0%58.9 (-0.5)4.221301,9710.92 (0)0
GET/api/v3/advisory?q=modified>3 days ago&total=true586 (-559)0 (0)0%21.6 (-0.4)2.4787.6220.98 (0)0
GET/api/v3/advisory?q=title~openssl&total=true567 (-651)0 (0)0%51.8 (+7.5)8.33590126,4520.95 (-0.1)0
GET/api/v3/advisory?sort=modified:desc&total=true589 (-585)0 (0)0%71.6 (+0.9)6.693,65338,1280.98 (0)0
GET/api/v3/advisory?total=true597 (-570)0 (0)0%120 (-10.7)8.152,91348,6221.00 (0)0
vulnerability 7
POST/api/v3/vulnerability/analyze360 (-309)0 (0)0%1,106 (-62.2)1.525,1624,794,4830.60 (0)0
GET/api/v3/vulnerability?offset=100&limit=10&total=true199 (-138)0 (0)0%65.6 (+1.7)4.219317,5110.33 (+0.1)0
GET/api/v3/vulnerability?q=base_score>=7.0&total=true212 (-140)0 (0)0%49.4 (-4.4)2.811,21718,5770.35 (+0.1)0
GET/api/v3/vulnerability?q=base_severity=high&total=true205 (-140)0 (0)0%50.3 (-6.4)2.581,09618,5640.34 (+0.1)0
GET/api/v3/vulnerability?q=cwes=CWE-79&total=true204 (-124)0 (0)0%44.2 (-16.6)2.4794419,0530.34 (+0.1)0
GET/api/v3/vulnerability?sort=base_score:desc&total=true209 (-130)0 (0)0%693 (-240.9)1911,98914,1990.35 (+0.1)0
GET/api/v3/vulnerability?total=true198 (-187)0 (0)0%40.6 (+4.3)2.541,27718,8770.33 (0)0
purl 15
GET/api/v3/purl/base/{purl}142 (-147)0 (0)0%106 (+4.5)4.9437648,8270.24 (0)0
GET/api/v3/purl/base?q=namespace=redhat&total=true137 (-135)0 (0)0%66.5 (-17.7)3.905972,0800.23 (0)0
GET/api/v3/purl/base?q=type=rpm&total=true135 (-171)0 (0)0%61.1 (+1.9)4.291332,0800.23 (0)0
GET/api/v3/purl/base?sort=name:asc&total=true128 (-121)0 (0)0%212 (-4.2)75.54032,9430.21 (0)0
GET/api/v3/purl/base?total=true119 (-168)0 (0)0%65.0 (+3.7)3.282082,4500.20 (0)0
POST/api/v3/purl/recommend420 (-425)0 (0)0%981 (+11.1)1921,9362,7470.70 (0)0
GET/api/v3/purl/{purl_id}132 (-124)0 (0)0%91.2 (-6.1)18.82085370.22 (0)0
GET/api/v3/purl?offset=100&limit=10&total=true129 (-115)0 (0)0%83.5 (+13.6)3.477393,8490.22 (0)0
GET/api/v3/purl?q=curl&total=true122 (-135)0 (0)0%113 (+4.4)5.221,59811,7140.20 (0)0
GET/api/v3/purl?q=license~GPLv3+...&sort=name:desc&total=true129 (-142)0 (0)0%33.3 (+1.0)6.62168220.22 (0)0
GET/api/v3/purl?q=name=curl&total=true122 (-151)0 (0)0%36.8 (+3.5)2.2336212,0840.20 (0)0
GET/api/v3/purl?q=purl:namespace=redhat&total=true135 (-181)0 (0)0%228 (+38.5)1.973,8789,5540.23 (0)0
GET/api/v3/purl?q=purl:ty=rpm&total=true134 (-127)0 (0)0%187 (-29.2)1.983,2769,5540.22 (0)0
GET/api/v3/purl?sort=purl:name:asc&total=true132 (-157)0 (0)0%70.7 (+12.4)1.9870111,1010.22 (0)0
GET/api/v3/purl?total=true132 (-121)0 (0)0%38.6 (-7.9)1.845039,5540.22 (0)0
license 9
GET/api/v3/license/spdx/license/{license_id}1,854 (-1,862)0 (0)0%41.2 (-0.2)0.9770.51,1433.10 (0)0
GET/api/v3/license/spdx/license?q=apache&total=true1,784 (-1,909)0 (0)0%2.87 (-0.4)0.9531.31652.98 (-0.1)0
GET/api/v3/license/spdx/license?q=gpl&total=true1,826 (-1,894)0 (0)0%41.1 (-0.4)1.1972.61,9813.05 (-0.1)0
GET/api/v3/license/spdx/license?total=true1,795 (-1,958)0 (0)0%41.0 (-0.2)1.0371.01,5253.00 (-0.1)0
GET/api/v3/license?limit=10&sort=license:asc&total=true1,844 (-1,837)0 (0)0%36.8 (+1.5)6.231204253.08 (0)0
GET/api/v3/license?q=ASL&sort=license:desc&total=true1,937 (-1,825)0 (0)0%31.4 (+0.4)3.08102223.23 (+0.1)0
GET/api/v3/license?q=license~Apache&total=true1,770 (-1,986)0 (0)0%28.1 (+1.2)2.381081202.95 (-0.2)0
GET/api/v3/license?q=license~GPL&total=true1,824 (-1,748)0 (0)0%25.8 (-1.1)2.2890.7923.04 (+0.1)0
GET/api/v3/license?total=true1,835 (-1,835)0 (0)0%70.7 (+0.9)8.021611,1013.06 (0)0
analysis 3
GET/api/v3/analysis/component/{component}14,245 (-15,016)0 (0)0%13.4 (+0.3)1.3199.12523.78 (-0.6)0
GET/api/v3/analysis/latest/component/{cpe}14,179 (-14,881)0 (0)0%13.5 (+0.3)1.3197.52523.67 (-0.6)0
GET/api/v3/analysis/status14,235 (-15,004)0 (0)0%13.2 (+0.5)1.2810610323.76 (-0.6)0
importer 1
GET/api/v3/importer?total=true52,741 (-56,268)0 (0)0%10.5 (+0.3)0.99106288.04 (-2.9)0
group 3
GET/api/v3/group/sbom?parents=resolve&total=true15,214 (-15,653)0 (0)0%12.4 (+0.3)1.2397.73825.40 (-0.3)0
GET/api/v3/group/sbom?total=true15,080 (-15,642)0 (0)0%12.4 (+0.1)1.231052225.17 (-0.5)0
GET/api/v3/group/sbom?totals=true&total=true14,914 (-15,645)0 (0)0%12.5 (+0.3)1.2599.72224.90 (-0.6)0
labels 3
GET/api/v3/advisory-labels?filter_text=type&limit=100096 (-101)0 (0)0%5,910 (+121.1)4,5598,325600.16 (0)0
GET/api/v3/sbom-labels?limit=10&filter_text=&total=true107 (-53)0 (0)0%65.3 (-2.6)45.01231,0650.18 (0)0
GET/api/v3/sbom-labels?total=true103 (-95)0 (0)0%70.9 (+0.6)45.41211,0650.17 (0)0
other 2
GET/.well-known/trustify13,017 (-13,643)0 (0)0%41.9 (+0.3)0.871321,17021.73 (-0.5)0
POST/api/v3/ui/extract-sbom-purls13,324 (-13,224)0 (0)0%2.93 (+0.6)0.9077.04522.24 (+0.1)0

Response time metrics (ms)

MethodName50%ile75%ile90%ile95%ile99%ile100%ile
sbom 16
GET/api/v3/sbom/by-package?purl={purl}120 (+10)130 (0)140 (0)180 (+40)220 (0)220 (0)
GET/api/v3/sbom/count-by-package16 (+4)65 (+3)77 (+2)82 (+3)85 (-4)86 (-4)
GET/api/v3/sbom/{sbom_id}130 (0)140 (0)200 (0)220 (0)240 (0)260 (0)
GET/api/v3/sbom/{sbom_id}/all-license-ids8 (-1)53 (+4)69 (-1)73 (-2)77 (-7)85 (0)
GET/api/v3/sbom/{sbom_id}/download3,000 (0)3,100 (0)3,100 (0)3,200 (0)3,200 (-100)3,400 (0)
GET/api/v3/sbom/{sbom_id}/license-export12 (0)60 (+1)77 (+3)80 (-1)84 (-4)85 (-4)
GET/api/v3/sbom/{sbom_id}/packages110 (-10)220 (-50)300 (0)310 (-60)390 (-20)420 (-70)
GET/api/v3/sbom/{sbom_id}/related110 (-10)180 (-20)230 (-50)270 (-20)310 (+10)310 (-90)
GET/api/v3/sbom?limit=10&sort=name:asc&total=true190 (-80)330 (-50)480 (-20)670 (+30)1,000 (+200)1,100 (+300)
GET/api/v3/sbom?offset=100&limit=10&total=true170 (0)290 (-60)430 (-40)500 (-20)670 (0)780 (-320)
GET/api/v3/sbom?q=label:type=product&total=true8 (0)48 (+4)72 (+2)74 (-1)79 (-11)79 (-11)
GET/api/v3/sbom?q=license~GPL&sort=name:desc&total=true9 (0)36 (-17)68 (-3)70 (-5)77 (-7)78 (-14)
GET/api/v3/sbom?q=name~redhat&total=true210 (-600)290 (-810)340 (-960)450 (-1,050)570 (-1,030)570 (-1,130)
GET/api/v3/sbom?q=published>2024-01-01&total=true140 (-30)200 (-100)370 (-110)490 (-40)890 (+180)1,100 (+310)
GET/api/v3/sbom?sort=ingested:desc&total=true190 (-110)420 (-50)610 (+20)700 (0)1,200 (+100)1,200 (0)
GET/api/v3/sbom?total=true110 (-10)190 (0)310 (-80)380 (-110)500 (-220)810 (-290)
advisory 13
GET/api/v3/advisory/urn:uuid:{advisory_id}47 (+1)73 (+3)100 (0)110 (0)120 (0)130 (-40)
GET/api/v3/advisory/urn:uuid:{advisory_id}/download14 (+2)51 (+4)74 (+2)80 (+4)91 (+2)110 (-40)
GET/api/v3/advisory?deprecated=Consider&total=true20 (+4)69 (+2)80 (0)88 (-2)1,900 (0)2,800 (-200)
GET/api/v3/advisory?limit=1&total=true49 (-1)52 (-20)85 (-25)110 (0)850 (-250)850 (-250)
GET/api/v3/advisory?limit=10&sort=ingested:desc&total=true12 (0)61 (-1)75 (+1)81 (-2)2,200 (+300)3,300 (+100)
GET/api/v3/advisory?offset=100&limit=10&total=true76 (+1)89 (0)97 (0)100 (0)1,300 (+1,050)2,700 (+100)
GET/api/v3/advisory?offset={offset}&limit=1210 (-30)320 (0)430 (-50)580 (+50)820 (+100)820 (-80)
GET/api/v3/advisory?q=CVE-2021-&total=true190 (0)310 (0)1,000 (-300)1,800 (+100)2,400 (+100)3,800 (-900)
GET/api/v3/advisory?q=identifier=CVE-2022-0981&total=true47 (0)75 (-8)110 (0)110 (0)120 (0)130 (-80)
GET/api/v3/advisory?q=modified>3 days ago&total=true8 (0)36 (-2)64 (-2)72 (0)81 (0)88 (-82)
GET/api/v3/advisory?q=title~openssl&total=true38 (+17)74 (+1)87 (+2)99 (+4)460 (+260)590 (+70)
GET/api/v3/advisory?sort=modified:desc&total=true16 (0)66 (-1)80 (+1)90 (+2)2,000 (0)3,700 (+600)
GET/api/v3/advisory?total=true100 (-10)120 (-20)180 (0)190 (0)210 (-120)2,900 (-1,100)
vulnerability 7
POST/api/v3/vulnerability/analyze1,100 (+1,026)1,800 (-200)2,900 (-400)3,700 (-100)4,600 (+100)5,200 (-600)
GET/api/v3/vulnerability?offset=100&limit=10&total=true46 (0)54 (+6)99 (+15)110 (0)930 (+180)930 (+90)
GET/api/v3/vulnerability?q=base_score>=7.0&total=true8 (0)28 (-11)68 (0)87 (-43)800 (-180)1,200 (0)
GET/api/v3/vulnerability?q=base_severity=high&total=true8 (0)27 (+11)70 (+6)83 (-117)960 (-40)1,100 (-300)
GET/api/v3/vulnerability?q=cwes=CWE-79&total=true8 (0)27 (+9)71 (0)88 (-182)780 (-420)940 (-760)
GET/api/v3/vulnerability?sort=base_score:desc&total=true590 (-400)900 (-300)1,200 (-200)1,400 (-200)1,800 (0)2,000 (0)
GET/api/v3/vulnerability?total=true7 (0)12 (-1)63 (-3)76 (+4)990 (+190)1,300 (+310)
purl 15
GET/api/v3/purl/base/{purl}66 (+1)200 (+10)260 (0)280 (0)310 (-50)380 (-10)
GET/api/v3/purl/base?q=namespace=redhat&total=true46 (-2)87 (+4)100 (0)140 (-10)200 (-710)600 (-320)
GET/api/v3/purl/base?q=type=rpm&total=true47 (+1)89 (+6)100 (+2)100 (0)110 (0)130 (+10)
GET/api/v3/purl/base?sort=name:asc&total=true210 (0)240 (-10)300 (-10)320 (-10)350 (-60)400 (-120)
GET/api/v3/purl/base?total=true46 (0)87 (+2)110 (+11)130 (+30)140 (0)210 (+50)
POST/api/v3/purl/recommend1,000 (0)1,200 (0)1,400 (+100)1,500 (+100)1,700 (+200)1,900 (+100)
GET/api/v3/purl/{purl_id}87 (-6)110 (-10)170 (0)180 (-10)200 (-50)210 (-50)
GET/api/v3/purl?offset=100&limit=10&total=true46 (0)83 (+2)100 (+1)120 (+20)700 (+80)740 (-170)
GET/api/v3/purl?q=curl&total=true51 (+2)77 (+9)100 (+8)620 (-280)1,400 (0)1,600 (+100)
GET/api/v3/purl?q=license~GPLv3+...&sort=name:desc&total=true22 (+1)58 (+2)69 (+2)73 (0)87 (+6)170 (+82)
GET/api/v3/purl?q=name=curl&total=true18 (+6)53 (-1)68 (-2)88 (-7)230 (0)360 (+20)
GET/api/v3/purl?q=purl:namespace=redhat&total=true7 (-1)46 (+3)64 (0)3,000 (+300)3,600 (+200)3,900 (-200)
GET/api/v3/purl?q=purl:ty=rpm&total=true8 (-1)49 (-2)64 (-1)2,300 (-300)3,200 (+100)3,300 (-100)
GET/api/v3/purl?sort=purl:name:asc&total=true36 (+24)59 (+3)76 (+5)520 (+50)680 (+10)700 (+20)
GET/api/v3/purl?total=true11 (+2)52 (+7)65 (+4)74 (-246)450 (-110)500 (-140)
license 9
GET/api/v3/license/spdx/license/{license_id}42 (0)43 (0)44 (0)45 (-1)53 (-13)70 (-60)
GET/api/v3/license/spdx/license?q=apache&total=true3 (0)4 (0)5 (0)6 (0)9 (-20)31 (-45)
GET/api/v3/license/spdx/license?q=gpl&total=true43 (0)43 (-1)45 (0)45 (-1)51 (-17)73 (-47)
GET/api/v3/license/spdx/license?total=true42 (0)43 (0)44 (0)45 (-1)53 (-11)71 (-49)
GET/api/v3/license?limit=10&sort=license:asc&total=true27 (+6)59 (+1)76 (+1)82 (+1)91 (-3)120 (-60)
GET/api/v3/license?q=ASL&sort=license:desc&total=true16 (0)55 (+1)71 (0)78 (+1)85 (-9)100 (-70)
GET/api/v3/license?q=license~Apache&total=true13 (+2)51 (+3)65 (0)73 (0)79 (-6)110 (-60)
GET/api/v3/license?q=license~GPL&total=true11 (-1)46 (-3)62 (0)73 (+2)80 (-3)91 (-39)
GET/api/v3/license?total=true58 (0)95 (+1)110 (0)120 (0)130 (0)160 (-60)
analysis 3
GET/api/v3/analysis/component/{component}5 (0)7 (0)62 (0)69 (0)76 (0)99 (-191)
GET/api/v3/analysis/latest/component/{cpe}5 (0)7 (0)63 (+1)69 (0)76 (+1)97 (-13)
GET/api/v3/analysis/status5 (0)7 (+1)63 (+2)69 (+1)75 (0)110 (+10)
importer 1
GET/api/v3/importer?total=true4 (+1)5 (0)54 (+2)66 (0)73 (0)110 (0)
group 3
GET/api/v3/group/sbom?parents=resolve&total=true4 (0)6 (0)61 (+1)68 (0)74 (0)98 (-2)
GET/api/v3/group/sbom?total=true4 (0)6 (0)61 (0)68 (0)75 (+1)110 (0)
GET/api/v3/group/sbom?totals=true&total=true4 (0)6 (0)61 (+1)68 (0)75 (+1)100 (-10)
labels 3
GET/api/v3/advisory-labels?filter_text=type&limit=10005,800 (+100)6,300 (+200)6,700 (+400)7,000 (+300)8,300 (+1,100)8,300 (+1,100)
GET/api/v3/sbom-labels?limit=10&filter_text=&total=true50 (-1)83 (-8)110 (0)120 (0)120 (0)120 (-10)
GET/api/v3/sbom-labels?total=true53 (+1)98 (-1)110 (0)110 (-10)120 (-10)120 (-10)
other 2
GET/.well-known/trustify42 (0)43 (0)44 (0)45 (0)63 (+6)130 (+52)
POST/api/v3/ui/extract-sbom-purls1 (0)3 (0)5 (0)6 (0)27 (+19)77 (+36)

Failures

No failures recorded.

Exceptions

No exceptions raised in the locustfile.