← All runs

Trustify load tests · 2026-10-25 04:39 UTC

Target trustify (scale snapshot, CI) · 2026-10-25 04:39:47 UTC → 04:49:44 UTC · Users 10 · Deltas vs previous run (2026-10-24 17:47 UTC, 2026-10-24T17-00-53_a71a630)

Type daily · Dataset scale-20260317T023702Z · Scenario etc/scenarios/main/full-20260317T023702Z.json5 · Branch main · Commit a71a63077b22 · Workflow run

Duration
9m 57s
Total requests
297,943 (+23,859)
Failure rate
0.0%
0 failed requests
Throughput
497.5 req/s (+39.9)
Latency 95%ile
65 ms (-2)
Latency 99%ile
130 ms (-20)
Endpoints
72
0 with failures

Over time

Throughput

Requests and failures per second

Response time

Percentiles over Locust's rolling window, ms

Users

Concurrent simulated users

Load plan

ActionStartedStoppedElapsedUsers
Increasing04:39:4704:39:510m 04s2 → 10
Maintaining04:39:5104:49:449m 53s10 → 10

Top 10 slowest endpoints (95%ile)

#MethodName95%ile (ms)Average (ms)# Requests
1GET/api/v3/advisory-labels?filter_text=type&limit=10004,3003,740147
2POST/api/v3/vulnerability/analyze2,600691562
3GET/api/v3/sbom/{sbom_id}/download2,3002,245126
4GET/api/v3/purl?q=purl:ty=rpm&total=true1,800151154
5GET/api/v3/purl?q=purl:namespace=redhat&total=true1,300144188
6GET/api/v3/sbom?q=name~redhat&total=true1,300459137
7GET/api/v3/advisory?q=CVE-2021-&total=true1,200299734
8GET/api/v3/vulnerability?sort=base_score:desc&total=true1,200608276
9POST/api/v3/purl/recommend1,100783545
10GET/api/v3/purl?q=curl&total=true68097.3163

Request metrics

MethodName# Requests# FailsFail %Average (ms)Min (ms)Max (ms)Avg size (B)RPSFailures/s
sbom 16
GET/api/v3/sbom/by-package?purl={purl}119 (-24)0 (0)0%84.8 (-2.1)50.11481,2870.20 (0)0
GET/api/v3/sbom/count-by-package144 (-21)0 (0)0%23.5 (-0.4)2.2178.030.24 (0)0
GET/api/v3/sbom/{sbom_id}145 (-32)0 (0)0%103 (+1.2)23.83102,0150.24 (-0.1)0
GET/api/v3/sbom/{sbom_id}/all-license-ids156 (+23)0 (0)0%15.9 (-3.6)1.9875.420.26 (0)0
GET/api/v3/sbom/{sbom_id}/download126 (-9)0 (0)0%2,245 (-45.8)2,0872,583136,458,6380.21 (0)0
GET/api/v3/sbom/{sbom_id}/license-export131 (-13)0 (0)0%24.8 (-8.4)3.2887.42340.22 (0)0
GET/api/v3/sbom/{sbom_id}/packages144 (-1)0 (0)0%108 (-6.0)10.653312,6480.24 (0)0
GET/api/v3/sbom/{sbom_id}/related141 (-1)0 (0)0%99.8 (+5.5)13.132115,3720.24 (0)0
GET/api/v3/sbom?limit=10&sort=name:asc&total=true134 (-9)0 (0)0%220 (-6.7)22.886412,1890.22 (0)0
GET/api/v3/sbom?offset=100&limit=10&total=true250 (-39)0 (0)0%183 (+15.7)19.989511,9410.42 (-0.1)0
GET/api/v3/sbom?q=label:type=product&total=true113 (-32)0 (0)0%14.9 (-2.5)1.9878.5220.19 (-0.1)0
GET/api/v3/sbom?q=license~GPL&sort=name:desc&total=true131 (-32)0 (0)0%19.8 (+1.0)2.0781.8220.22 (-0.1)0
GET/api/v3/sbom?q=name~redhat&total=true137 (-18)0 (0)0%459 (+310.5)7.591,423220.23 (0)0
GET/api/v3/sbom?q=published>2024-01-01&total=true117 (-53)0 (0)0%143 (+29.5)22.966129,3170.20 (-0.1)0
GET/api/v3/sbom?sort=ingested:desc&total=true135 (-5)0 (0)0%255 (+25.6)19.498229,6000.23 (0)0
GET/api/v3/sbom?total=true285 (-26)0 (0)0%132 (+21.1)19.177829,3170.48 (0)0
advisory 13
GET/api/v3/advisory/urn:uuid:{advisory_id}719 (-119)0 (0)0%54.2 (-0.8)2.831952,3951.20 (-0.2)0
GET/api/v3/advisory/urn:uuid:{advisory_id}/download757 (-88)0 (0)0%20.4 (-1.7)3.38157178,4231.26 (-0.1)0
GET/api/v3/advisory?deprecated=Consider&total=true757 (-50)0 (0)0%52.2 (+2.4)4.952,47244,0031.26 (-0.1)0
GET/api/v3/advisory?limit=1&total=true148 (0)0 (0)0%81.2 (+8.6)5.868863,2430.25 (0)0
GET/api/v3/advisory?limit=10&sort=ingested:desc&total=true704 (-97)0 (0)0%46.3 (-1.3)3.202,38820,1931.18 (-0.2)0
GET/api/v3/advisory?offset=100&limit=10&total=true767 (-40)0 (0)0%64.9 (+14.3)3.942,09319,2861.28 (-0.1)0
GET/api/v3/advisory?offset={offset}&limit=1148 (0)0 (0)0%228 (-45.3)46.89471,9590.25 (0)0
GET/api/v3/advisory?q=CVE-2021-&total=true734 (-70)0 (0)0%299 (+51.4)8.222,76549,7041.23 (-0.1)0
GET/api/v3/advisory?q=identifier=CVE-2022-0981&total=true761 (-65)0 (0)0%55.2 (-0.3)3.571651,9711.27 (-0.1)0
GET/api/v3/advisory?q=modified>3 days ago&total=true754 (-36)0 (0)0%17.6 (+0.2)1.5998.8221.26 (-0.1)0
GET/api/v3/advisory?q=title~openssl&total=true748 (-69)0 (0)0%37.6 (+3.7)6.29700126,4521.25 (-0.1)0
GET/api/v3/advisory?sort=modified:desc&total=true730 (-108)0 (0)0%51.6 (+3.2)4.072,29738,1281.22 (-0.2)0
GET/api/v3/advisory?total=true696 (-109)0 (0)0%110 (+7.6)4.951,92649,6911.16 (-0.2)0
vulnerability 7
POST/api/v3/vulnerability/analyze562 (-69)0 (0)0%691 (+77.1)1.054,0464,598,7630.94 (-0.1)0
GET/api/v3/vulnerability?offset=100&limit=10&total=true271 (-57)0 (0)0%19.0 (-32.6)1.407837,5740.45 (-0.1)0
GET/api/v3/vulnerability?q=base_score>=7.0&total=true268 (-57)0 (0)0%32.1 (+9.0)1.821,48218,8770.45 (-0.1)0
GET/api/v3/vulnerability?q=base_severity=high&total=true285 (-20)0 (0)0%30.6 (+7.0)2.111,28619,1920.48 (0)0
GET/api/v3/vulnerability?q=cwes=CWE-79&total=true260 (-91)0 (0)0%37.4 (+14.2)2.041,69619,2300.43 (-0.2)0
GET/api/v3/vulnerability?sort=base_score:desc&total=true276 (-67)0 (0)0%608 (+140.1)1232,07513,0320.46 (-0.1)0
GET/api/v3/vulnerability?total=true252 (-82)0 (0)0%24.8 (+2.2)2.4491618,7150.42 (-0.1)0
purl 15
GET/api/v3/purl/base/{purl}179 (-17)0 (0)0%90.1 (+16.0)4.2363748,8270.30 (0)0
GET/api/v3/purl/base?q=namespace=redhat&total=true183 (-4)0 (0)0%71.7 (-3.1)2.884852,0800.31 (0)0
GET/api/v3/purl/base?q=type=rpm&total=true185 (-9)0 (0)0%54.9 (+0.4)2.631092,0800.31 (0)0
GET/api/v3/purl/base?sort=name:asc&total=true170 (-14)0 (0)0%65.6 (+5.4)4.282322,9430.28 (0)0
GET/api/v3/purl/base?total=true154 (-28)0 (0)0%56.6 (+1.3)2.361532,4500.26 (0)0
POST/api/v3/purl/recommend545 (+2)0 (0)0%783 (-14.5)1201,5382,7470.91 (0)0
GET/api/v3/purl/{purl_id}185 (-5)0 (0)0%64.1 (+2.3)11.33025370.31 (0)0
GET/api/v3/purl?offset=100&limit=10&total=true153 (+2)0 (0)0%64.3 (-11.5)2.036174,2340.26 (0)0
GET/api/v3/purl?q=curl&total=true163 (-10)0 (0)0%97.3 (+11.5)2.151,48110,3430.27 (0)0
GET/api/v3/purl?q=license~GPLv3+...&sort=name:desc&total=true176 (-6)0 (0)0%24.3 (-0.4)4.2077.7220.29 (0)0
GET/api/v3/purl?q=name=curl&total=true179 (-12)0 (0)0%32.7 (+9.7)1.6242512,0840.30 (0)0
GET/api/v3/purl?q=purl:namespace=redhat&total=true188 (+13)0 (0)0%144 (+14.0)1.372,96510,4220.31 (0)0
GET/api/v3/purl?q=purl:ty=rpm&total=true154 (-29)0 (0)0%151 (+19.7)1.273,18710,4450.26 (0)0
GET/api/v3/purl?sort=purl:name:asc&total=true180 (+21)0 (0)0%39.5 (+2.2)1.7172011,1010.30 (0)0
GET/api/v3/purl?total=true153 (-18)0 (0)0%29.5 (+8.2)1.3271510,0800.26 (0)0
license 9
GET/api/v3/license/spdx/license/{license_id}2,004 (-28)0 (0)0%41.3 (-0.2)1.001101,1433.35 (0)0
GET/api/v3/license/spdx/license?q=apache&total=true2,077 (+48)0 (0)0%2.48 (+0.4)0.7157.51653.47 (+0.1)0
GET/api/v3/license/spdx/license?q=gpl&total=true2,056 (-29)0 (0)0%41.2 (-0.3)0.861051,9813.43 (0)0
GET/api/v3/license/spdx/license?total=true2,063 (+31)0 (0)0%41.1 (-0.2)0.9999.61,5253.44 (+0.1)0
GET/api/v3/license?limit=10&sort=license:asc&total=true2,001 (-69)0 (0)0%27.8 (-0.4)4.051674253.34 (-0.1)0
GET/api/v3/license?q=ASL&sort=license:desc&total=true2,075 (+98)0 (0)0%23.1 (-0.7)2.45199223.47 (+0.2)0
GET/api/v3/license?q=license~Apache&total=true2,063 (-23)0 (0)0%22.1 (+0.8)1.901451203.44 (0)0
GET/api/v3/license?q=license~GPL&total=true2,019 (-84)0 (0)0%21.9 (+1.1)1.91147923.37 (-0.1)0
GET/api/v3/license?total=true2,102 (+42)0 (0)0%65.0 (-0.4)6.092091,1013.51 (+0.1)0
analysis 3
GET/api/v3/analysis/component/{component}24,126 (+2,558)0 (0)0%7.91 (-0.9)0.961062540.29 (+4.3)0
GET/api/v3/analysis/latest/component/{cpe}24,070 (+2,332)0 (0)0%8.07 (-0.8)0.9991.62540.19 (+3.9)0
GET/api/v3/analysis/status23,926 (+2,392)0 (0)0%7.71 (-0.9)0.9291.310339.95 (+4.0)0
importer 1
GET/api/v3/importer?total=true89,914 (+9,344)0 (0)0%6.17 (-0.7)0.731022150.15 (+15.6)0
group 3
GET/api/v3/group/sbom?parents=resolve&total=true24,594 (+2,915)0 (0)0%7.61 (-1.0)0.8795.83841.07 (+4.9)0
GET/api/v3/group/sbom?total=true24,520 (+3,087)0 (0)0%7.58 (-1.3)0.8697.62240.95 (+5.2)0
GET/api/v3/group/sbom?totals=true&total=true24,538 (+2,793)0 (0)0%7.74 (-0.9)0.881022240.98 (+4.7)0
labels 3
GET/api/v3/advisory-labels?filter_text=type&limit=1000147 (+10)0 (0)0%3,740 (-239.5)2,5034,685600.25 (0)0
GET/api/v3/sbom-labels?limit=10&filter_text=&total=true130 (-21)0 (0)0%63.9 (+1.1)9.401161,0650.22 (0)0
GET/api/v3/sbom-labels?total=true125 (-42)0 (0)0%62.2 (+3.0)5.222101,0650.21 (-0.1)0
other 2
GET/.well-known/trustify13,659 (+83)0 (0)0%41.2 (-0.2)0.6373.41,17022.81 (+0.1)0
POST/api/v3/ui/extract-sbom-purls13,782 (+122)0 (0)0%1.78 (-0.1)0.6531.34523.01 (+0.2)0

Response time metrics (ms)

MethodName50%ile75%ile90%ile95%ile99%ile100%ile
sbom 16
GET/api/v3/sbom/by-package?purl={purl}75 (+4)120 (0)130 (0)130 (-10)150 (-60)150 (-90)
GET/api/v3/sbom/count-by-package8 (0)44 (+1)65 (-5)71 (-2)75 (-5)78 (-3)
GET/api/v3/sbom/{sbom_id}100 (-10)130 (0)140 (0)150 (+10)300 (+80)310 (+50)
GET/api/v3/sbom/{sbom_id}/all-license-ids5 (0)11 (-27)61 (-1)71 (0)74 (-3)75 (-3)
GET/api/v3/sbom/{sbom_id}/download2,200 (-100)2,300 (0)2,300 (-100)2,300 (-100)2,500 (-100)2,600 (0)
GET/api/v3/sbom/{sbom_id}/license-export8 (-4)51 (-13)70 (-3)74 (-1)80 (-4)87 (0)
GET/api/v3/sbom/{sbom_id}/packages81 (-14)170 (-20)210 (-10)260 (-10)340 (0)530 (+170)
GET/api/v3/sbom/{sbom_id}/related94 (+7)120 (0)180 (0)210 (0)300 (+10)320 (+30)
GET/api/v3/sbom?limit=10&sort=name:asc&total=true190 (-10)300 (+10)400 (-10)510 (-70)850 (+20)860 (-110)
GET/api/v3/sbom?offset=100&limit=10&total=true100 (0)280 (+60)400 (+10)530 (+90)710 (-200)900 (-200)
GET/api/v3/sbom?q=label:type=product&total=true4 (-1)8 (-17)60 (+2)68 (0)76 (-1)78 (0)
GET/api/v3/sbom?q=license~GPL&sort=name:desc&total=true6 (0)35 (+2)64 (+3)70 (+2)77 (+1)82 (+1)
GET/api/v3/sbom?q=name~redhat&total=true310 (+180)900 (+710)1,000 (+790)1,300 (+1,030)1,400 (+1,080)1,400 (+900)
GET/api/v3/sbom?q=published>2024-01-01&total=true99 (+8)150 (+40)310 (+100)410 (+60)640 (-40)660 (-70)
GET/api/v3/sbom?sort=ingested:desc&total=true220 (+50)380 (+10)500 (+20)600 (+30)870 (+120)980 (+100)
GET/api/v3/sbom?total=true94 (+4)120 (+10)310 (+120)410 (+100)690 (+200)780 (+150)
advisory 13
GET/api/v3/advisory/urn:uuid:{advisory_id}45 (0)52 (-7)100 (+1)110 (+10)120 (+10)190 (+60)
GET/api/v3/advisory/urn:uuid:{advisory_id}/download8 (-2)22 (-2)64 (-3)73 (0)93 (+12)160 (+71)
GET/api/v3/advisory?deprecated=Consider&total=true12 (+1)60 (+10)76 (+4)88 (+8)1,500 (+200)2,500 (-200)
GET/api/v3/advisory?limit=1&total=true48 (0)73 (+2)110 (+10)110 (0)830 (+60)890 (-100)
GET/api/v3/advisory?limit=10&sort=ingested:desc&total=true9 (0)50 (+4)70 (+1)76 (+1)1,200 (-400)2,400 (-100)
GET/api/v3/advisory?offset=100&limit=10&total=true52 (+17)83 (+5)96 (+8)130 (+37)290 (+180)2,100 (-600)
GET/api/v3/advisory?offset={offset}&limit=1210 (-10)300 (-100)410 (-110)520 (-30)720 (+110)950 (+340)
GET/api/v3/advisory?q=CVE-2021-&total=true170 (+50)280 (+70)870 (+260)1,200 (0)1,600 (0)2,800 (+400)
GET/api/v3/advisory?q=identifier=CVE-2022-0981&total=true45 (-1)56 (-3)100 (0)110 (0)120 (0)160 (+20)
GET/api/v3/advisory?q=modified>3 days ago&total=true5 (-1)24 (+9)62 (+2)68 (0)78 (+3)99 (+5)
GET/api/v3/advisory?q=title~openssl&total=true14 (+1)61 (+3)76 (+1)89 (+8)390 (+210)700 (+90)
GET/api/v3/advisory?sort=modified:desc&total=true10 (-1)54 (+1)73 (+1)83 (+4)1,100 (-500)2,300 (0)
GET/api/v3/advisory?total=true96 (+5)110 (+10)180 (+60)200 (+30)480 (-310)1,900 (-800)
vulnerability 7
POST/api/v3/vulnerability/analyze510 (+455)980 (-10)2,100 (+300)2,600 (+400)3,600 (+600)4,000 (-700)
GET/api/v3/vulnerability?offset=100&limit=10&total=true5 (-39)8 (-40)45 (-44)66 (-34)170 (+60)780 (+300)
GET/api/v3/vulnerability?q=base_score>=7.0&total=true6 (0)9 (0)22 (-33)72 (+5)720 (+400)1,500 (+400)
GET/api/v3/vulnerability?q=base_severity=high&total=true6 (0)8 (-3)29 (-29)69 (+1)810 (+500)1,300 (+570)
GET/api/v3/vulnerability?q=cwes=CWE-79&total=true6 (+1)8 (-1)66 (+15)75 (+9)890 (+480)1,700 (+840)
GET/api/v3/vulnerability?sort=base_score:desc&total=true500 (+110)860 (+340)1,000 (+200)1,200 (+200)1,800 (+200)2,100 (+300)
GET/api/v3/vulnerability?total=true5 (-1)7 (-1)33 (-20)68 (0)500 (+70)920 (+410)
purl 15
GET/api/v3/purl/base/{purl}51 (+6)160 (+30)240 (+50)290 (+60)590 (+250)640 (+280)
GET/api/v3/purl/base?q=namespace=redhat&total=true45 (0)85 (+4)100 (+1)120 (+10)460 (-60)480 (-220)
GET/api/v3/purl/base?q=type=rpm&total=true44 (0)76 (+17)96 (+5)100 (+5)110 (0)110 (0)
GET/api/v3/purl/base?sort=name:asc&total=true48 (+1)88 (+5)110 (+10)120 (+10)230 (+100)230 (+90)
GET/api/v3/purl/base?total=true44 (0)71 (0)95 (0)110 (+10)140 (-10)150 (-30)
POST/api/v3/purl/recommend840 (+10)970 (-10)1,100 (0)1,100 (-100)1,300 (-100)1,500 (0)
GET/api/v3/purl/{purl_id}58 (-5)88 (+4)120 (+20)160 (+40)260 (+70)300 (+40)
GET/api/v3/purl?offset=100&limit=10&total=true45 (0)80 (0)100 (+4)100 (-10)420 (-170)620 (-40)
GET/api/v3/purl?q=curl&total=true8 (-11)62 (+1)280 (+60)680 (+240)1,000 (+90)1,500 (-200)
GET/api/v3/purl?q=license~GPLv3+...&sort=name:desc&total=true10 (0)43 (-3)61 (0)66 (+1)75 (+6)78 (+2)
GET/api/v3/purl?q=name=curl&total=true9 (0)52 (+14)67 (+8)140 (+77)390 (+220)420 (+220)
GET/api/v3/purl?q=purl:namespace=redhat&total=true5 (0)37 (-6)61 (+2)1,300 (-200)2,900 (+300)3,000 (0)
GET/api/v3/purl?q=purl:ty=rpm&total=true5 (0)39 (+1)61 (+2)1,800 (+700)2,600 (+100)3,200 (+600)
GET/api/v3/purl?sort=purl:name:asc&total=true7 (0)48 (+10)67 (+6)250 (-10)430 (-70)720 (+170)
GET/api/v3/purl?total=true5 (0)26 (-12)57 (-2)72 (+9)580 (+400)720 (+460)
license 9
GET/api/v3/license/spdx/license/{license_id}42 (0)43 (0)44 (0)44 (0)65 (+13)110 (+47)
GET/api/v3/license/spdx/license?q=apache&total=true2 (0)3 (0)3 (0)4 (0)24 (+18)58 (+35)
GET/api/v3/license/spdx/license?q=gpl&total=true42 (0)43 (0)44 (0)44 (0)61 (+10)100 (+30)
GET/api/v3/license/spdx/license?total=true42 (0)43 (0)44 (+1)44 (0)63 (+11)100 (+36)
GET/api/v3/license?limit=10&sort=license:asc&total=true13 (-1)51 (-1)64 (0)74 (+1)89 (+7)170 (+70)
GET/api/v3/license?q=ASL&sort=license:desc&total=true9 (-1)44 (-1)59 (0)66 (-1)78 (-1)200 (+50)
GET/api/v3/license?q=license~Apache&total=true8 (+1)43 (+1)57 (0)65 (+1)78 (+2)150 (+69)
GET/api/v3/license?q=license~GPL&total=true7 (0)43 (+1)58 (+2)65 (+4)81 (+6)150 (+69)
GET/api/v3/license?total=true51 (-1)90 (+1)100 (0)110 (0)130 (+10)210 (+10)
analysis 3
GET/api/v3/analysis/component/{component}3 (0)4 (0)7 (-2)62 (-2)72 (-1)110 (+13)
GET/api/v3/analysis/latest/component/{cpe}3 (0)4 (-1)7 (-2)63 (0)72 (-1)92 (+5)
GET/api/v3/analysis/status3 (0)4 (0)7 (-1)62 (-1)72 (-1)91 (-19)
importer 1
GET/api/v3/importer?total=true2 (0)3 (0)5 (0)57 (-2)70 (-1)100 (+4)
group 3
GET/api/v3/group/sbom?parents=resolve&total=true3 (0)4 (0)7 (-2)62 (-1)71 (-2)96 (-74)
GET/api/v3/group/sbom?total=true3 (0)4 (0)6 (-5)61 (-3)71 (-3)98 (-72)
GET/api/v3/group/sbom?totals=true&total=true3 (0)4 (0)7 (-2)62 (-1)71 (-2)100 (-70)
labels 3
GET/api/v3/advisory-labels?filter_text=type&limit=10003,700 (-300)4,000 (-100)4,100 (-200)4,300 (-300)4,500 (-300)4,700 (-400)
GET/api/v3/sbom-labels?limit=10&filter_text=&total=true48 (+1)87 (+4)100 (0)110 (0)120 (0)120 (-20)
GET/api/v3/sbom-labels?total=true48 (+1)81 (+9)110 (+10)110 (0)110 (-10)210 (+90)
other 2
GET/.well-known/trustify42 (0)42 (-1)43 (0)44 (0)50 (0)73 (-19)
POST/api/v3/ui/extract-sbom-purls1 (0)2 (0)3 (0)4 (0)6 (0)31 (-13)

Failures

No failures recorded.

Exceptions

No exceptions raised in the locustfile.