← All runs

Trustify load tests · 2026-10-25 07:45 UTC

Target trustify (scale snapshot, CI) · 2026-10-25 07:45:47 UTC → 07:55:45 UTC · Users 10 · Deltas vs previous run (2026-10-25 04:39 UTC, 2026-10-25T03-52-01_a71a630)

Type daily · Dataset scale-20260317T023702Z · Scenario etc/scenarios/main/full-20260317T023702Z.json5 · Branch main · Commit a71a63077b22 · Workflow run

Duration
9m 58s
Total requests
320,223 (+22,280)
Failure rate
0.0%
0 failed requests
Throughput
534.6 req/s (+37.1)
Latency 95%ile
64 ms (-1)
Latency 99%ile
110 ms (-20)
Endpoints
72
0 with failures

Over time

Throughput

Requests and failures per second

Response time

Percentiles over Locust's rolling window, ms

Users

Concurrent simulated users

Load plan

ActionStartedStoppedElapsedUsers
Increasing07:45:4707:45:510m 04s2 → 10
Maintaining07:45:5107:55:459m 54s10 → 10

Top 10 slowest endpoints (95%ile)

#MethodName95%ile (ms)Average (ms)# Requests
1GET/api/v3/advisory-labels?filter_text=type&limit=10004,3003,677150
2POST/api/v3/vulnerability/analyze2,800774470
3GET/api/v3/sbom/{sbom_id}/download2,4002,282118
4GET/api/v3/purl?q=purl:namespace=redhat&total=true1,800189167
5GET/api/v3/purl?q=purl:ty=rpm&total=true1,800232147
6GET/api/v3/vulnerability?sort=base_score:desc&total=true1,700786227
7GET/api/v3/advisory?q=CVE-2021-&total=true1,300296795
8POST/api/v3/purl/recommend1,300836476
9GET/api/v3/sbom?q=name~redhat&total=true1,200539141
10GET/api/v3/sbom?sort=ingested:desc&total=true670219176

Request metrics

MethodName# Requests# FailsFail %Average (ms)Min (ms)Max (ms)Avg size (B)RPSFailures/s
sbom 16
GET/api/v3/sbom/by-package?purl={purl}144 (+25)0 (0)0%92.3 (+7.4)34.81,5651,2870.24 (0)0
GET/api/v3/sbom/count-by-package126 (-18)0 (0)0%31.4 (+7.9)2.861,23330.21 (0)0
GET/api/v3/sbom/{sbom_id}144 (-1)0 (0)0%108 (+4.9)54.12632,0150.24 (0)0
GET/api/v3/sbom/{sbom_id}/all-license-ids119 (-37)0 (0)0%18.6 (+2.7)1.5879.420.20 (-0.1)0
GET/api/v3/sbom/{sbom_id}/download118 (-8)0 (0)0%2,282 (+36.0)2,1442,506136,458,6380.20 (0)0
GET/api/v3/sbom/{sbom_id}/license-export151 (+20)0 (0)0%24.4 (-0.5)3.4077.02350.25 (0)0
GET/api/v3/sbom/{sbom_id}/packages136 (-8)0 (0)0%130 (+22.6)11.180412,6480.23 (0)0
GET/api/v3/sbom/{sbom_id}/related145 (+4)0 (0)0%112 (+11.7)13.552415,3720.24 (0)0
GET/api/v3/sbom?limit=10&sort=name:asc&total=true116 (-18)0 (0)0%228 (+7.4)28.168812,1890.19 (0)0
GET/api/v3/sbom?offset=100&limit=10&total=true292 (+42)0 (0)0%139 (-43.8)18.298811,9000.49 (+0.1)0
GET/api/v3/sbom?q=label:type=product&total=true126 (+13)0 (0)0%17.0 (+2.1)1.9881.6220.21 (0)0
GET/api/v3/sbom?q=license~GPL&sort=name:desc&total=true143 (+12)0 (0)0%23.2 (+3.4)2.0180.8220.24 (0)0
GET/api/v3/sbom?q=name~redhat&total=true141 (+4)0 (0)0%539 (+80.4)7.545,505220.24 (0)0
GET/api/v3/sbom?q=published>2024-01-01&total=true111 (-6)0 (0)0%130 (-12.3)20.872429,3170.19 (0)0
GET/api/v3/sbom?sort=ingested:desc&total=true176 (+41)0 (0)0%219 (-35.4)22.41,40329,6000.29 (+0.1)0
GET/api/v3/sbom?total=true268 (-17)0 (0)0%136 (+3.7)20.01,87229,3170.45 (0)0
advisory 13
GET/api/v3/advisory/urn:uuid:{advisory_id}735 (+16)0 (0)0%53.2 (-1.0)2.931182,3951.23 (0)0
GET/api/v3/advisory/urn:uuid:{advisory_id}/download785 (+28)0 (0)0%20.1 (-0.3)3.5187.7178,4231.31 (0)0
GET/api/v3/advisory?deprecated=Consider&total=true817 (+60)0 (0)0%43.4 (-8.8)3.901,88244,0031.36 (+0.1)0
GET/api/v3/advisory?limit=1&total=true160 (+12)0 (0)0%84.1 (+2.9)6.531,7272,2290.27 (0)0
GET/api/v3/advisory?limit=10&sort=ingested:desc&total=true730 (+26)0 (0)0%42.4 (-3.9)3.012,77120,1931.22 (0)0
GET/api/v3/advisory?offset=100&limit=10&total=true770 (+3)0 (0)0%59.7 (-5.3)3.082,07919,4961.29 (0)0
GET/api/v3/advisory?offset={offset}&limit=1160 (+12)0 (0)0%195 (-33.2)47.19661,8740.27 (0)0
GET/api/v3/advisory?q=CVE-2021-&total=true795 (+61)0 (0)0%296 (-2.4)6.045,18849,6041.33 (+0.1)0
GET/api/v3/advisory?q=identifier=CVE-2022-0981&total=true744 (-17)0 (0)0%53.5 (-1.7)2.821211,9711.24 (0)0
GET/api/v3/advisory?q=modified>3 days ago&total=true755 (+1)0 (0)0%16.3 (-1.3)1.7884.5221.26 (0)0
GET/api/v3/advisory?q=title~openssl&total=true764 (+16)0 (0)0%30.6 (-7.0)6.01504126,4521.28 (0)0
GET/api/v3/advisory?sort=modified:desc&total=true785 (+55)0 (0)0%42.7 (-9.0)3.551,89638,1281.31 (+0.1)0
GET/api/v3/advisory?total=true767 (+71)0 (0)0%107 (-3.4)4.962,68448,8851.28 (+0.1)0
vulnerability 7
POST/api/v3/vulnerability/analyze470 (-92)0 (0)0%774 (+82.5)1.088,3274,710,6340.78 (-0.2)0
GET/api/v3/vulnerability?offset=100&limit=10&total=true230 (-41)0 (0)0%54.8 (+35.8)2.126447,5060.38 (-0.1)0
GET/api/v3/vulnerability?q=base_score>=7.0&total=true239 (-29)0 (0)0%37.4 (+5.4)2.031,02118,2460.40 (0)0
GET/api/v3/vulnerability?q=base_severity=high&total=true234 (-51)0 (0)0%49.2 (+18.7)2.241,70518,7010.39 (-0.1)0
GET/api/v3/vulnerability?q=cwes=CWE-79&total=true231 (-29)0 (0)0%41.6 (+4.2)2.531,19518,8510.39 (0)0
GET/api/v3/vulnerability?sort=base_score:desc&total=true227 (-49)0 (0)0%786 (+178.1)74.52,57314,3310.38 (-0.1)0
GET/api/v3/vulnerability?total=true259 (+7)0 (0)0%37.8 (+13.1)1.945,02118,7950.43 (0)0
purl 15
GET/api/v3/purl/base/{purl}159 (-20)0 (0)0%94.8 (+4.6)4.3889648,8270.27 (0)0
GET/api/v3/purl/base?q=namespace=redhat&total=true153 (-30)0 (0)0%88.3 (+16.6)2.772,0582,0800.26 (-0.1)0
GET/api/v3/purl/base?q=type=rpm&total=true150 (-35)0 (0)0%60.6 (+5.7)2.663762,0800.25 (-0.1)0
GET/api/v3/purl/base?sort=name:asc&total=true178 (+8)0 (0)0%71.5 (+5.9)5.056962,9430.30 (0)0
GET/api/v3/purl/base?total=true138 (-16)0 (0)0%62.3 (+5.7)2.722892,4500.23 (0)0
POST/api/v3/purl/recommend476 (-69)0 (0)0%836 (+53.6)1164,1612,7470.79 (-0.1)0
GET/api/v3/purl/{purl_id}186 (+1)0 (0)0%68.9 (+4.7)12.12605370.31 (0)0
GET/api/v3/purl?offset=100&limit=10&total=true168 (+15)0 (0)0%78.6 (+14.2)2.627453,9850.28 (0)0
GET/api/v3/purl?q=curl&total=true164 (+1)0 (0)0%113 (+15.6)5.831,6179,4820.27 (0)0
GET/api/v3/purl?q=license~GPLv3+...&sort=name:desc&total=true155 (-21)0 (0)0%27.3 (+3.0)4.18118220.26 (0)0
GET/api/v3/purl?q=name=curl&total=true167 (-12)0 (0)0%34.4 (+1.7)1.6345212,0840.28 (0)0
GET/api/v3/purl?q=purl:namespace=redhat&total=true167 (-21)0 (0)0%189 (+45.1)1.893,2649,6130.28 (0)0
GET/api/v3/purl?q=purl:ty=rpm&total=true147 (-7)0 (0)0%232 (+81.1)1.948,0789,4620.25 (0)0
GET/api/v3/purl?sort=purl:name:asc&total=true153 (-27)0 (0)0%65.6 (+26.1)1.581,98611,1010.26 (0)0
GET/api/v3/purl?total=true154 (+1)0 (0)0%62.7 (+33.2)1.517539,6440.26 (0)0
license 9
GET/api/v3/license/spdx/license/{license_id}2,157 (+153)0 (0)0%41.1 (-0.2)0.7996.01,1433.60 (+0.3)0
GET/api/v3/license/spdx/license?q=apache&total=true2,127 (+50)0 (0)0%2.26 (-0.2)0.7060.21653.55 (+0.1)0
GET/api/v3/license/spdx/license?q=gpl&total=true2,068 (+12)0 (0)0%41.1 (-0.1)0.921011,9813.45 (0)0
GET/api/v3/license/spdx/license?total=true2,081 (+18)0 (0)0%41.2 (+0.1)0.751041,5253.47 (0)0
GET/api/v3/license?limit=10&sort=license:asc&total=true2,180 (+179)0 (0)0%27.2 (-0.6)3.871684253.64 (+0.3)0
GET/api/v3/license?q=ASL&sort=license:desc&total=true2,095 (+20)0 (0)0%23.2 (0)2.33156223.50 (0)0
GET/api/v3/license?q=license~Apache&total=true2,037 (-26)0 (0)0%21.8 (-0.2)1.921701203.40 (0)0
GET/api/v3/license?q=license~GPL&total=true2,034 (+15)0 (0)0%20.1 (-1.8)1.76149923.40 (0)0
GET/api/v3/license?total=true2,102 (0)0 (0)0%62.1 (-3.0)5.482041,1013.51 (0)0
analysis 3
GET/api/v3/analysis/component/{component}26,594 (+2,468)0 (0)0%7.18 (-0.7)0.981182544.40 (+4.1)0
GET/api/v3/analysis/latest/component/{cpe}26,372 (+2,302)0 (0)0%7.31 (-0.8)0.991082544.03 (+3.8)0
GET/api/v3/analysis/status26,659 (+2,733)0 (0)0%6.95 (-0.8)0.8910110344.51 (+4.6)0
importer 1
GET/api/v3/importer?total=true95,771 (+5,857)0 (0)0%5.79 (-0.4)0.711182159.89 (+9.7)0
group 3
GET/api/v3/group/sbom?parents=resolve&total=true27,312 (+2,718)0 (0)0%6.83 (-0.8)0.871113845.60 (+4.5)0
GET/api/v3/group/sbom?total=true27,634 (+3,114)0 (0)0%6.71 (-0.9)0.8993.52246.14 (+5.2)0
GET/api/v3/group/sbom?totals=true&total=true27,391 (+2,853)0 (0)0%6.98 (-0.8)0.901762245.73 (+4.8)0
labels 3
GET/api/v3/advisory-labels?filter_text=type&limit=1000150 (+3)0 (0)0%3,677 (-63.1)2,69710,523600.25 (0)0
GET/api/v3/sbom-labels?limit=10&filter_text=&total=true142 (+12)0 (0)0%60.7 (-3.3)5.831231,0650.24 (0)0
GET/api/v3/sbom-labels?total=true123 (-2)0 (0)0%59.4 (-2.8)4.951231,0650.21 (0)0
other 2
GET/.well-known/trustify13,640 (-19)0 (0)0%41.3 (+0.1)0.681351,17022.77 (0)0
POST/api/v3/ui/extract-sbom-purls13,726 (-56)0 (0)0%1.75 (0)0.6444.04522.92 (-0.1)0

Response time metrics (ms)

MethodName50%ile75%ile90%ile95%ile99%ile100%ile
sbom 16
GET/api/v3/sbom/by-package?purl={purl}64 (-11)110 (-10)130 (0)130 (0)230 (+80)1,600 (+1,450)
GET/api/v3/sbom/count-by-package7 (-1)40 (-4)68 (+3)74 (+3)110 (+35)1,200 (+1,122)
GET/api/v3/sbom/{sbom_id}120 (+20)130 (0)140 (0)160 (+10)230 (-70)260 (-50)
GET/api/v3/sbom/{sbom_id}/all-license-ids5 (0)35 (+24)65 (+4)72 (+1)74 (0)79 (+4)
GET/api/v3/sbom/{sbom_id}/download2,300 (+100)2,300 (0)2,400 (+100)2,400 (+100)2,500 (0)2,500 (-100)
GET/api/v3/sbom/{sbom_id}/license-export9 (+1)48 (-3)67 (-3)73 (-1)76 (-4)77 (-10)
GET/api/v3/sbom/{sbom_id}/packages100 (+19)190 (+20)250 (+40)290 (+30)710 (+370)800 (+270)
GET/api/v3/sbom/{sbom_id}/related92 (-2)130 (+10)200 (+20)280 (+70)450 (+150)520 (+200)
GET/api/v3/sbom?limit=10&sort=name:asc&total=true200 (+10)310 (+10)420 (+20)480 (-30)640 (-210)690 (-170)
GET/api/v3/sbom?offset=100&limit=10&total=true94 (-6)190 (-90)290 (-110)370 (-160)640 (-70)990 (+90)
GET/api/v3/sbom?q=label:type=product&total=true5 (+1)23 (+15)59 (-1)69 (+1)80 (+4)82 (+4)
GET/api/v3/sbom?q=license~GPL&sort=name:desc&total=true6 (0)47 (+12)68 (+4)71 (+1)79 (+2)81 (-1)
GET/api/v3/sbom?q=name~redhat&total=true530 (+220)940 (+40)1,100 (+100)1,200 (-100)3,300 (+1,900)5,500 (+4,100)
GET/api/v3/sbom?q=published>2024-01-01&total=true93 (-6)130 (-20)310 (0)390 (-20)630 (-10)720 (+60)
GET/api/v3/sbom?sort=ingested:desc&total=true110 (-110)310 (-70)490 (-10)670 (+70)1,300 (+430)1,400 (+420)
GET/api/v3/sbom?total=true94 (0)150 (+30)300 (-10)390 (-20)840 (+150)1,900 (+1,120)
advisory 13
GET/api/v3/advisory/urn:uuid:{advisory_id}45 (0)50 (-2)100 (0)110 (0)110 (-10)120 (-70)
GET/api/v3/advisory/urn:uuid:{advisory_id}/download9 (+1)16 (-6)63 (-1)70 (-3)80 (-13)88 (-72)
GET/api/v3/advisory?deprecated=Consider&total=true11 (-1)51 (-9)72 (-4)78 (-10)1,000 (-500)1,900 (-600)
GET/api/v3/advisory?limit=1&total=true47 (-1)68 (-5)110 (0)190 (+80)900 (+70)1,700 (+810)
GET/api/v3/advisory?limit=10&sort=ingested:desc&total=true8 (-1)41 (-9)67 (-3)75 (-1)1,100 (-100)2,800 (+400)
GET/api/v3/advisory?offset=100&limit=10&total=true39 (-13)80 (-3)90 (-6)96 (-34)400 (+110)2,100 (0)
GET/api/v3/advisory?offset={offset}&limit=1170 (-40)230 (-70)370 (-40)460 (-60)820 (+100)970 (+20)
GET/api/v3/advisory?q=CVE-2021-&total=true130 (-40)280 (0)890 (+20)1,300 (+100)2,000 (+400)5,200 (+2,400)
GET/api/v3/advisory?q=identifier=CVE-2022-0981&total=true45 (0)49 (-7)98 (-2)110 (0)110 (-10)120 (-40)
GET/api/v3/advisory?q=modified>3 days ago&total=true5 (0)10 (-14)61 (-1)67 (-1)75 (-3)84 (-15)
GET/api/v3/advisory?q=title~openssl&total=true13 (-1)55 (-6)74 (-2)79 (-10)130 (-260)500 (-200)
GET/api/v3/advisory?sort=modified:desc&total=true10 (0)44 (-10)71 (-2)77 (-6)1,300 (+200)1,900 (-400)
GET/api/v3/advisory?total=true90 (-6)100 (-10)130 (-50)180 (-20)1,500 (+1,020)2,700 (+800)
vulnerability 7
POST/api/v3/vulnerability/analyze610 (+100)1,100 (+120)2,200 (+100)2,800 (+200)4,500 (+900)8,300 (+4,300)
GET/api/v3/vulnerability?offset=100&limit=10&total=true44 (+39)47 (+39)99 (+54)110 (+44)370 (+200)640 (-140)
GET/api/v3/vulnerability?q=base_score>=7.0&total=true5 (-1)9 (0)57 (+35)74 (+2)890 (+170)1,000 (-500)
GET/api/v3/vulnerability?q=base_severity=high&total=true6 (0)11 (+3)63 (+34)76 (+7)1,200 (+390)1,700 (+400)
GET/api/v3/vulnerability?q=cwes=CWE-79&total=true6 (0)14 (+6)56 (-10)78 (+3)890 (0)1,200 (-500)
GET/api/v3/vulnerability?sort=base_score:desc&total=true770 (+270)1,100 (+240)1,400 (+400)1,700 (+500)2,200 (+400)2,600 (+500)
GET/api/v3/vulnerability?total=true5 (0)8 (+1)47 (+14)61 (-7)510 (+10)5,000 (+4,080)
purl 15
GET/api/v3/purl/base/{purl}61 (+10)150 (-10)220 (-20)270 (-20)550 (-40)900 (+260)
GET/api/v3/purl/base?q=namespace=redhat&total=true45 (0)82 (-3)99 (-1)200 (+80)720 (+260)2,100 (+1,620)
GET/api/v3/purl/base?q=type=rpm&total=true45 (+1)78 (+2)98 (+2)100 (0)150 (+40)380 (+270)
GET/api/v3/purl/base?sort=name:asc&total=true49 (+1)88 (0)110 (0)130 (+10)460 (+230)700 (+470)
GET/api/v3/purl/base?total=true45 (+1)82 (+11)100 (+5)120 (+10)200 (+60)290 (+140)
POST/api/v3/purl/recommend890 (+50)1,000 (+30)1,100 (0)1,300 (+200)1,500 (+200)4,200 (+2,700)
GET/api/v3/purl/{purl_id}68 (+10)86 (-2)150 (+30)170 (+10)250 (-10)260 (-40)
GET/api/v3/purl?offset=100&limit=10&total=true44 (-1)83 (+3)100 (0)240 (+140)720 (+300)740 (+120)
GET/api/v3/purl?q=curl&total=true53 (+45)93 (+31)100 (-180)510 (-170)1,600 (+600)1,600 (+100)
GET/api/v3/purl?q=license~GPLv3+...&sort=name:desc&total=true15 (+5)49 (+6)62 (+1)68 (+2)83 (+8)120 (+42)
GET/api/v3/purl?q=name=curl&total=true14 (+5)57 (+5)65 (-2)91 (-49)220 (-170)450 (+30)
GET/api/v3/purl?q=purl:namespace=redhat&total=true45 (+40)90 (+53)100 (+39)1,800 (+500)2,700 (-200)3,300 (+300)
GET/api/v3/purl?q=purl:ty=rpm&total=true45 (+40)87 (+48)100 (+39)1,800 (0)3,100 (+500)8,100 (+4,900)
GET/api/v3/purl?sort=purl:name:asc&total=true18 (+11)58 (+10)77 (+10)410 (+160)740 (+310)2,000 (+1,280)
GET/api/v3/purl?total=true45 (+40)74 (+48)99 (+42)100 (+28)340 (-240)750 (+30)
license 9
GET/api/v3/license/spdx/license/{license_id}42 (0)43 (0)43 (-1)44 (0)57 (-8)96 (-14)
GET/api/v3/license/spdx/license?q=apache&total=true2 (0)3 (0)3 (0)4 (0)17 (-7)60 (+2)
GET/api/v3/license/spdx/license?q=gpl&total=true42 (0)43 (0)44 (0)44 (0)58 (-3)100 (0)
GET/api/v3/license/spdx/license?total=true42 (0)43 (0)44 (0)44 (0)60 (-3)100 (0)
GET/api/v3/license?limit=10&sort=license:asc&total=true12 (-1)50 (-1)63 (-1)73 (-1)91 (+2)170 (0)
GET/api/v3/license?q=ASL&sort=license:desc&total=true9 (0)45 (+1)59 (0)69 (+3)82 (+4)160 (-40)
GET/api/v3/license?q=license~Apache&total=true7 (-1)44 (+1)58 (+1)66 (+1)82 (+4)170 (+20)
GET/api/v3/license?q=license~GPL&total=true7 (0)39 (-4)57 (-1)62 (-3)77 (-4)150 (0)
GET/api/v3/license?total=true50 (-1)82 (-8)100 (0)110 (0)130 (0)200 (-10)
analysis 3
GET/api/v3/analysis/component/{component}3 (0)4 (0)6 (-1)60 (-2)72 (0)120 (+10)
GET/api/v3/analysis/latest/component/{cpe}3 (0)4 (0)6 (-1)61 (-2)71 (-1)110 (+18)
GET/api/v3/analysis/status3 (0)4 (0)6 (-1)60 (-2)71 (-1)100 (+9)
importer 1
GET/api/v3/importer?total=true2 (0)3 (0)4 (-1)53 (-4)70 (0)120 (+20)
group 3
GET/api/v3/group/sbom?parents=resolve&total=true3 (0)4 (0)6 (-1)59 (-3)71 (0)110 (+14)
GET/api/v3/group/sbom?total=true3 (0)3 (-1)6 (0)59 (-2)71 (0)93 (-5)
GET/api/v3/group/sbom?totals=true&total=true3 (0)4 (0)6 (-1)60 (-2)71 (0)180 (+80)
labels 3
GET/api/v3/advisory-labels?filter_text=type&limit=10003,600 (-100)3,800 (-200)4,100 (0)4,300 (0)8,600 (+4,100)11,000 (+6,300)
GET/api/v3/sbom-labels?limit=10&filter_text=&total=true46 (-2)73 (-14)110 (+10)110 (0)120 (0)120 (0)
GET/api/v3/sbom-labels?total=true47 (-1)75 (-6)98 (-12)110 (0)110 (0)120 (-90)
other 2
GET/.well-known/trustify42 (0)42 (0)43 (0)44 (0)50 (0)140 (+67)
POST/api/v3/ui/extract-sbom-purls1 (0)2 (0)3 (0)4 (0)6 (0)44 (+13)

Failures

No failures recorded.

Exceptions

No exceptions raised in the locustfile.