← All runs

Trustify load tests · 2026-10-24 17:47 UTC

Target trustify (scale snapshot, CI) · 2026-10-24 17:47:56 UTC → 17:57:54 UTC · Users 10 · Deltas vs previous run (2026-10-24 07:14 UTC, 2026-10-24T06-24-07_9e14445)

Type daily · Dataset scale-20260317T023702Z · Scenario etc/scenarios/main/full-20260317T023702Z.json5 · Branch main · Commit a71a63077b22 · Workflow run

Duration
9m 58s
Total requests
274,084 (+77,925)
Failure rate
0.0%
0 failed requests
Throughput
457.6 req/s (+130.1)
Latency 95%ile
67 ms (-5)
Latency 99%ile
150 ms (-50)
Endpoints
72
0 with failures

Over time

Throughput

Requests and failures per second

Response time

Percentiles over Locust's rolling window, ms

Users

Concurrent simulated users

Load plan

ActionStartedStoppedElapsedUsers
Increasing17:47:5617:48:000m 04s2 → 10
Maintaining17:48:0017:57:549m 54s10 → 10

Top 10 slowest endpoints (95%ile)

#MethodName95%ile (ms)Average (ms)# Requests
1GET/api/v3/advisory-labels?filter_text=type&limit=10004,6003,980137
2GET/api/v3/sbom/{sbom_id}/download2,4002,291135
3POST/api/v3/vulnerability/analyze2,200614631
4GET/api/v3/purl?q=purl:namespace=redhat&total=true1,500130175
5GET/api/v3/advisory?q=CVE-2021-&total=true1,200247804
6POST/api/v3/purl/recommend1,200797543
7GET/api/v3/purl?q=purl:ty=rpm&total=true1,100131183
8GET/api/v3/vulnerability?sort=base_score:desc&total=true1,000468343
9GET/api/v3/sbom?limit=10&sort=name:asc&total=true580227143
10GET/api/v3/sbom?sort=ingested:desc&total=true570229140

Request metrics

MethodName# Requests# FailsFail %Average (ms)Min (ms)Max (ms)Avg size (B)RPSFailures/s
sbom 16
GET/api/v3/sbom/by-package?purl={purl}143 (+53)0 (0)0%86.9 (-22.9)48.72441,2870.24 (+0.1)0
GET/api/v3/sbom/count-by-package165 (+51)0 (0)0%23.8 (-9.8)2.3681.030.28 (+0.1)0
GET/api/v3/sbom/{sbom_id}177 (+61)0 (0)0%102 (-25.8)20.02602,0150.30 (+0.1)0
GET/api/v3/sbom/{sbom_id}/all-license-ids133 (+28)0 (0)0%19.5 (-5.9)1.7277.720.22 (0)0
GET/api/v3/sbom/{sbom_id}/download135 (+32)0 (0)0%2,291 (-750.8)2,1172,562136,458,6380.23 (+0.1)0
GET/api/v3/sbom/{sbom_id}/license-export144 (+39)0 (0)0%33.2 (+1.6)3.5187.22340.24 (+0.1)0
GET/api/v3/sbom/{sbom_id}/packages145 (+44)0 (0)0%114 (-35.1)11.135612,6480.24 (+0.1)0
GET/api/v3/sbom/{sbom_id}/related142 (+8)0 (0)0%94.3 (-36.7)15.229015,3720.24 (0)0
GET/api/v3/sbom?limit=10&sort=name:asc&total=true143 (+14)0 (0)0%227 (-29.9)27.597112,1890.24 (0)0
GET/api/v3/sbom?offset=100&limit=10&total=true289 (+64)0 (0)0%167 (-41.8)21.61,11911,9410.48 (+0.1)0
GET/api/v3/sbom?q=label:type=product&total=true145 (+26)0 (0)0%17.4 (-8.3)1.8078.0220.24 (0)0
GET/api/v3/sbom?q=license~GPL&sort=name:desc&total=true163 (+49)0 (0)0%18.8 (-3.4)2.0180.8220.27 (+0.1)0
GET/api/v3/sbom?q=name~redhat&total=true155 (+60)0 (0)0%148 (-96.6)36.7501220.26 (+0.1)0
GET/api/v3/sbom?q=published>2024-01-01&total=true170 (+34)0 (0)0%113 (-69.7)21.572629,3170.28 (+0.1)0
GET/api/v3/sbom?sort=ingested:desc&total=true140 (+33)0 (0)0%229 (-70.4)20.487929,6000.23 (+0.1)0
GET/api/v3/sbom?total=true311 (+93)0 (0)0%111 (-47.7)20.663129,3170.52 (+0.2)0
advisory 13
GET/api/v3/advisory/urn:uuid:{advisory_id}838 (+223)0 (0)0%55.0 (-2.5)1.701272,3951.40 (+0.4)0
GET/api/v3/advisory/urn:uuid:{advisory_id}/download845 (+283)0 (0)0%22.1 (-7.1)3.5789.2178,4231.41 (+0.5)0
GET/api/v3/advisory?deprecated=Consider&total=true807 (+216)0 (0)0%49.8 (-23.3)4.902,68144,0031.35 (+0.4)0
GET/api/v3/advisory?limit=1&total=true148 (+59)0 (0)0%72.6 (+8.5)8.479914,4470.25 (+0.1)0
GET/api/v3/advisory?limit=10&sort=ingested:desc&total=true801 (+218)0 (0)0%47.6 (-20.1)2.772,50320,1931.34 (+0.4)0
GET/api/v3/advisory?offset=100&limit=10&total=true807 (+224)0 (0)0%50.6 (-35.5)4.232,73819,4971.35 (+0.4)0
GET/api/v3/advisory?offset={offset}&limit=1148 (+59)0 (0)0%273 (+21.1)27.26142,0300.25 (+0.1)0
GET/api/v3/advisory?q=CVE-2021-&total=true804 (+218)0 (0)0%247 (-128.5)6.112,41349,7301.34 (+0.4)0
GET/api/v3/advisory?q=identifier=CVE-2022-0981&total=true826 (+274)0 (0)0%55.4 (-3.4)2.711371,9711.38 (+0.5)0
GET/api/v3/advisory?q=modified>3 days ago&total=true790 (+204)0 (0)0%17.4 (-4.2)1.8793.6221.32 (+0.3)0
GET/api/v3/advisory?q=title~openssl&total=true817 (+250)0 (0)0%33.9 (-17.8)6.32609126,4521.36 (+0.4)0
GET/api/v3/advisory?sort=modified:desc&total=true838 (+249)0 (0)0%48.5 (-23.1)5.052,31738,1281.40 (+0.4)0
GET/api/v3/advisory?total=true805 (+208)0 (0)0%103 (-17.1)5.602,69549,7811.34 (+0.3)0
vulnerability 7
POST/api/v3/vulnerability/analyze631 (+271)0 (0)0%614 (-492.1)1.064,6904,282,0711.05 (+0.5)0
GET/api/v3/vulnerability?offset=100&limit=10&total=true328 (+129)0 (0)0%51.6 (-14.0)2.864837,5020.55 (+0.2)0
GET/api/v3/vulnerability?q=base_score>=7.0&total=true325 (+113)0 (0)0%23.0 (-26.4)1.921,09618,3880.54 (+0.2)0
GET/api/v3/vulnerability?q=base_severity=high&total=true305 (+100)0 (0)0%23.5 (-26.8)2.1173218,6310.51 (+0.2)0
GET/api/v3/vulnerability?q=cwes=CWE-79&total=true351 (+147)0 (0)0%23.2 (-21.0)1.8586218,8080.59 (+0.2)0
GET/api/v3/vulnerability?sort=base_score:desc&total=true343 (+134)0 (0)0%468 (-224.6)89.11,81814,0560.57 (+0.2)0
GET/api/v3/vulnerability?total=true334 (+136)0 (0)0%22.5 (-18.1)1.7450618,9220.56 (+0.2)0
purl 15
GET/api/v3/purl/base/{purl}196 (+54)0 (0)0%74.2 (-31.7)4.8335648,8270.33 (+0.1)0
GET/api/v3/purl/base?q=namespace=redhat&total=true187 (+50)0 (0)0%74.8 (+8.3)3.747052,0800.31 (+0.1)0
GET/api/v3/purl/base?q=type=rpm&total=true194 (+59)0 (0)0%54.5 (-6.6)3.711102,0800.32 (+0.1)0
GET/api/v3/purl/base?sort=name:asc&total=true184 (+56)0 (0)0%60.2 (-152.0)3.591352,9430.31 (+0.1)0
GET/api/v3/purl/base?total=true182 (+63)0 (0)0%55.3 (-9.7)1.911802,4500.30 (+0.1)0
POST/api/v3/purl/recommend543 (+123)0 (0)0%797 (-183.9)1161,4542,7470.91 (+0.2)0
GET/api/v3/purl/{purl_id}190 (+58)0 (0)0%61.8 (-29.4)12.32565370.32 (+0.1)0
GET/api/v3/purl?offset=100&limit=10&total=true151 (+22)0 (0)0%75.8 (-7.6)2.106564,1420.25 (0)0
GET/api/v3/purl?q=curl&total=true173 (+51)0 (0)0%85.8 (-27.4)2.391,74810,3110.29 (+0.1)0
GET/api/v3/purl?q=license~GPLv3+...&sort=name:desc&total=true182 (+53)0 (0)0%24.8 (-8.6)1.7575.6220.30 (+0.1)0
GET/api/v3/purl?q=name=curl&total=true191 (+69)0 (0)0%22.9 (-13.9)1.6919812,0840.32 (+0.1)0
GET/api/v3/purl?q=purl:namespace=redhat&total=true175 (+40)0 (0)0%130 (-97.7)1.473,00210,4320.29 (+0.1)0
GET/api/v3/purl?q=purl:ty=rpm&total=true183 (+49)0 (0)0%131 (-56.0)1.452,61010,1940.31 (+0.1)0
GET/api/v3/purl?sort=purl:name:asc&total=true159 (+27)0 (0)0%37.3 (-33.4)1.5154711,1010.27 (0)0
GET/api/v3/purl?total=true171 (+39)0 (0)0%21.3 (-17.3)1.4125610,4090.29 (+0.1)0
license 9
GET/api/v3/license/spdx/license/{license_id}2,032 (+178)0 (0)0%41.5 (+0.3)0.8163.11,1433.39 (+0.3)0
GET/api/v3/license/spdx/license?q=apache&total=true2,029 (+245)0 (0)0%2.09 (-0.8)0.7023.01653.39 (+0.4)0
GET/api/v3/license/spdx/license?q=gpl&total=true2,085 (+259)0 (0)0%41.5 (+0.4)0.8169.71,9813.48 (+0.4)0
GET/api/v3/license/spdx/license?total=true2,032 (+237)0 (0)0%41.3 (+0.3)0.8264.01,5253.39 (+0.4)0
GET/api/v3/license?limit=10&sort=license:asc&total=true2,070 (+226)0 (0)0%28.1 (-8.7)4.911024253.46 (+0.4)0
GET/api/v3/license?q=ASL&sort=license:desc&total=true1,977 (+40)0 (0)0%23.8 (-7.6)2.60147223.30 (+0.1)0
GET/api/v3/license?q=license~Apache&total=true2,086 (+316)0 (0)0%21.3 (-6.8)1.8481.31203.48 (+0.5)0
GET/api/v3/license?q=license~GPL&total=true2,103 (+279)0 (0)0%20.8 (-5.0)1.7681.5923.51 (+0.5)0
GET/api/v3/license?total=true2,060 (+225)0 (0)0%65.4 (-5.2)6.001961,1013.44 (+0.4)0
analysis 3
GET/api/v3/analysis/component/{component}21,568 (+7,323)0 (0)0%8.85 (-4.5)0.9797.12536.01 (+12.2)0
GET/api/v3/analysis/latest/component/{cpe}21,738 (+7,559)0 (0)0%8.91 (-4.6)1.0387.32536.29 (+12.6)0
GET/api/v3/analysis/status21,534 (+7,299)0 (0)0%8.61 (-4.5)0.9010610335.95 (+12.2)0
importer 1
GET/api/v3/importer?total=true80,570 (+27,829)0 (0)0%6.90 (-3.6)0.7496.52134.51 (+46.5)0
group 3
GET/api/v3/group/sbom?parents=resolve&total=true21,679 (+6,465)0 (0)0%8.61 (-3.8)0.891703836.19 (+10.8)0
GET/api/v3/group/sbom?total=true21,433 (+6,353)0 (0)0%8.87 (-3.5)0.911702235.78 (+10.6)0
GET/api/v3/group/sbom?totals=true&total=true21,745 (+6,831)0 (0)0%8.67 (-3.9)0.891742236.30 (+11.4)0
labels 3
GET/api/v3/advisory-labels?filter_text=type&limit=1000137 (+41)0 (0)0%3,980 (-1,930.9)2,9675,123600.23 (+0.1)0
GET/api/v3/sbom-labels?limit=10&filter_text=&total=true151 (+44)0 (0)0%62.9 (-2.4)8.171411,0650.25 (+0.1)0
GET/api/v3/sbom-labels?total=true167 (+64)0 (0)0%59.2 (-11.7)7.771181,0650.28 (+0.1)0
other 2
GET/.well-known/trustify13,576 (+559)0 (0)0%41.3 (-0.6)0.6691.61,17022.67 (+0.9)0
POST/api/v3/ui/extract-sbom-purls13,660 (+336)0 (0)0%1.88 (-1.1)0.6543.94522.81 (+0.6)0

Response time metrics (ms)

MethodName50%ile75%ile90%ile95%ile99%ile100%ile
sbom 16
GET/api/v3/sbom/by-package?purl={purl}71 (-49)120 (-10)130 (-10)140 (-40)210 (-10)240 (+20)
GET/api/v3/sbom/count-by-package8 (-8)43 (-22)70 (-7)73 (-9)80 (-5)81 (-5)
GET/api/v3/sbom/{sbom_id}110 (-20)130 (-10)140 (-60)140 (-80)220 (-20)260 (0)
GET/api/v3/sbom/{sbom_id}/all-license-ids5 (-3)38 (-15)62 (-7)71 (-2)77 (0)78 (-7)
GET/api/v3/sbom/{sbom_id}/download2,300 (-700)2,300 (-800)2,400 (-700)2,400 (-800)2,600 (-600)2,600 (-800)
GET/api/v3/sbom/{sbom_id}/license-export12 (0)64 (+4)73 (-4)75 (-5)84 (0)87 (+2)
GET/api/v3/sbom/{sbom_id}/packages95 (-15)190 (-30)220 (-80)270 (-40)340 (-50)360 (-60)
GET/api/v3/sbom/{sbom_id}/related87 (-23)120 (-60)180 (-50)210 (-60)290 (-20)290 (-20)
GET/api/v3/sbom?limit=10&sort=name:asc&total=true200 (+10)290 (-40)410 (-70)580 (-90)830 (-170)970 (-130)
GET/api/v3/sbom?offset=100&limit=10&total=true100 (-70)220 (-70)390 (-40)440 (-60)910 (+240)1,100 (+320)
GET/api/v3/sbom?q=label:type=product&total=true5 (-3)25 (-23)58 (-14)68 (-6)77 (-2)78 (-1)
GET/api/v3/sbom?q=license~GPL&sort=name:desc&total=true6 (-3)33 (-3)61 (-7)68 (-2)76 (-1)81 (+3)
GET/api/v3/sbom?q=name~redhat&total=true130 (-80)190 (-100)210 (-130)270 (-180)320 (-250)500 (-70)
GET/api/v3/sbom?q=published>2024-01-01&total=true91 (-49)110 (-90)210 (-160)350 (-140)680 (-210)730 (-370)
GET/api/v3/sbom?sort=ingested:desc&total=true170 (-20)370 (-50)480 (-130)570 (-130)750 (-450)880 (-320)
GET/api/v3/sbom?total=true90 (-20)110 (-80)190 (-120)310 (-70)490 (-10)630 (-180)
advisory 13
GET/api/v3/advisory/urn:uuid:{advisory_id}45 (-2)59 (-14)99 (-1)100 (-10)110 (-10)130 (0)
GET/api/v3/advisory/urn:uuid:{advisory_id}/download10 (-4)24 (-27)67 (-7)73 (-7)81 (-10)89 (-21)
GET/api/v3/advisory?deprecated=Consider&total=true11 (-9)50 (-19)72 (-8)80 (-8)1,300 (-600)2,700 (-100)
GET/api/v3/advisory?limit=1&total=true48 (-1)71 (+19)100 (+15)110 (0)770 (-80)990 (+140)
GET/api/v3/advisory?limit=10&sort=ingested:desc&total=true9 (-3)46 (-15)69 (-6)75 (-6)1,600 (-600)2,500 (-800)
GET/api/v3/advisory?offset=100&limit=10&total=true35 (-41)78 (-11)88 (-9)93 (-7)110 (-1,190)2,700 (0)
GET/api/v3/advisory?offset={offset}&limit=1220 (+10)400 (+80)520 (+90)550 (-30)610 (-210)610 (-210)
GET/api/v3/advisory?q=CVE-2021-&total=true120 (-70)210 (-100)610 (-390)1,200 (-600)1,600 (-800)2,400 (-1,400)
GET/api/v3/advisory?q=identifier=CVE-2022-0981&total=true46 (-1)59 (-16)100 (-10)110 (0)120 (0)140 (+10)
GET/api/v3/advisory?q=modified>3 days ago&total=true6 (-2)15 (-21)60 (-4)68 (-4)75 (-6)94 (+6)
GET/api/v3/advisory?q=title~openssl&total=true13 (-25)58 (-16)75 (-12)81 (-18)180 (-280)610 (+20)
GET/api/v3/advisory?sort=modified:desc&total=true11 (-5)53 (-13)72 (-8)79 (-11)1,600 (-400)2,300 (-1,400)
GET/api/v3/advisory?total=true91 (-9)100 (-20)120 (-60)170 (-20)790 (+580)2,700 (-200)
vulnerability 7
POST/api/v3/vulnerability/analyze55 (-1,045)990 (-810)1,800 (-1,100)2,200 (-1,500)3,000 (-1,600)4,700 (-500)
GET/api/v3/vulnerability?offset=100&limit=10&total=true44 (-2)48 (-6)89 (-10)100 (-10)110 (-820)480 (-450)
GET/api/v3/vulnerability?q=base_score>=7.0&total=true6 (-2)9 (-19)55 (-13)67 (-20)320 (-480)1,100 (-100)
GET/api/v3/vulnerability?q=base_severity=high&total=true6 (-2)11 (-16)58 (-12)68 (-15)310 (-650)730 (-370)
GET/api/v3/vulnerability?q=cwes=CWE-79&total=true5 (-3)9 (-18)51 (-20)66 (-22)410 (-370)860 (-80)
GET/api/v3/vulnerability?sort=base_score:desc&total=true390 (-200)520 (-380)800 (-400)1,000 (-400)1,600 (-200)1,800 (-200)
GET/api/v3/vulnerability?total=true6 (-1)8 (-4)53 (-10)68 (-8)430 (-560)510 (-790)
purl 15
GET/api/v3/purl/base/{purl}45 (-21)130 (-70)190 (-70)230 (-50)340 (+30)360 (-20)
GET/api/v3/purl/base?q=namespace=redhat&total=true45 (-1)81 (-6)99 (-1)110 (-30)520 (+320)700 (+100)
GET/api/v3/purl/base?q=type=rpm&total=true44 (-3)59 (-30)91 (-9)95 (-5)110 (0)110 (-20)
GET/api/v3/purl/base?sort=name:asc&total=true47 (-163)83 (-157)100 (-200)110 (-210)130 (-220)140 (-260)
GET/api/v3/purl/base?total=true44 (-2)71 (-16)95 (-15)100 (-30)150 (+10)180 (-30)
POST/api/v3/purl/recommend830 (-170)980 (-220)1,100 (-300)1,200 (-300)1,400 (-300)1,500 (-400)
GET/api/v3/purl/{purl_id}63 (-24)84 (-26)100 (-70)120 (-60)190 (-10)260 (+50)
GET/api/v3/purl?offset=100&limit=10&total=true45 (-1)80 (-3)96 (-4)110 (-10)590 (-110)660 (-80)
GET/api/v3/purl?q=curl&total=true19 (-32)61 (-16)220 (+120)440 (-180)910 (-490)1,700 (+100)
GET/api/v3/purl?q=license~GPLv3+...&sort=name:desc&total=true10 (-12)46 (-12)61 (-8)65 (-8)69 (-18)76 (-94)
GET/api/v3/purl?q=name=curl&total=true9 (-9)38 (-15)59 (-9)63 (-25)170 (-60)200 (-160)
GET/api/v3/purl?q=purl:namespace=redhat&total=true5 (-2)43 (-3)59 (-5)1,500 (-1,500)2,600 (-1,000)3,000 (-900)
GET/api/v3/purl?q=purl:ty=rpm&total=true5 (-3)38 (-11)59 (-5)1,100 (-1,200)2,500 (-700)2,600 (-700)
GET/api/v3/purl?sort=purl:name:asc&total=true7 (-29)38 (-21)61 (-15)260 (-260)500 (-180)550 (-150)
GET/api/v3/purl?total=true5 (-6)38 (-14)59 (-6)63 (-11)180 (-270)260 (-240)
license 9
GET/api/v3/license/spdx/license/{license_id}42 (0)43 (0)44 (0)44 (-1)52 (-1)63 (-7)
GET/api/v3/license/spdx/license?q=apache&total=true2 (-1)3 (-1)3 (-2)4 (-2)6 (-3)23 (-8)
GET/api/v3/license/spdx/license?q=gpl&total=true42 (-1)43 (0)44 (-1)44 (-1)51 (0)70 (-3)
GET/api/v3/license/spdx/license?total=true42 (0)43 (0)43 (-1)44 (-1)52 (-1)64 (-7)
GET/api/v3/license?limit=10&sort=license:asc&total=true14 (-13)52 (-7)64 (-12)73 (-9)82 (-9)100 (-20)
GET/api/v3/license?q=ASL&sort=license:desc&total=true10 (-6)45 (-10)59 (-12)67 (-11)79 (-6)150 (+50)
GET/api/v3/license?q=license~Apache&total=true7 (-6)42 (-9)57 (-8)64 (-9)76 (-3)81 (-29)
GET/api/v3/license?q=license~GPL&total=true7 (-4)42 (-4)56 (-6)61 (-12)75 (-5)81 (-10)
GET/api/v3/license?total=true52 (-6)89 (-6)100 (-10)110 (-10)120 (-10)200 (+40)
analysis 3
GET/api/v3/analysis/component/{component}3 (-2)4 (-3)9 (-53)64 (-5)73 (-3)97 (-2)
GET/api/v3/analysis/latest/component/{cpe}3 (-2)5 (-2)9 (-54)63 (-6)73 (-3)87 (-10)
GET/api/v3/analysis/status3 (-2)4 (-3)8 (-55)63 (-6)73 (-2)110 (0)
importer 1
GET/api/v3/importer?total=true2 (-2)3 (-2)5 (-49)59 (-7)71 (-2)96 (-14)
group 3
GET/api/v3/group/sbom?parents=resolve&total=true3 (-1)4 (-2)9 (-52)63 (-5)73 (-1)170 (+72)
GET/api/v3/group/sbom?total=true3 (-1)4 (-2)11 (-50)64 (-4)74 (-1)170 (+60)
GET/api/v3/group/sbom?totals=true&total=true3 (-1)4 (-2)9 (-52)63 (-5)73 (-2)170 (+70)
labels 3
GET/api/v3/advisory-labels?filter_text=type&limit=10004,000 (-1,800)4,100 (-2,200)4,300 (-2,400)4,600 (-2,400)4,800 (-3,500)5,100 (-3,200)
GET/api/v3/sbom-labels?limit=10&filter_text=&total=true47 (-3)83 (0)100 (-10)110 (-10)120 (0)140 (+20)
GET/api/v3/sbom-labels?total=true47 (-6)72 (-26)100 (-10)110 (0)120 (0)120 (0)
other 2
GET/.well-known/trustify42 (0)43 (0)43 (-1)44 (-1)50 (-13)92 (-38)
POST/api/v3/ui/extract-sbom-purls1 (0)2 (-1)3 (-2)4 (-2)6 (-21)44 (-33)

Failures

No failures recorded.

Exceptions

No exceptions raised in the locustfile.