← All runs

Trustify load tests · 2026-10-26 07:01 UTC

Target trustify (scale snapshot, CI) · 2026-10-26 07:01:36 UTC → 07:11:34 UTC · Users 10 · Deltas vs previous run (2026-10-25 07:45 UTC, 2026-10-25T06-59-22_a71a630)

Type daily · Dataset scale-20260317T023702Z · Scenario etc/scenarios/main/full-20260317T023702Z.json5 · Branch main · Commit a71a63077b22 · Workflow run

Duration
9m 58s
Total requests
349,733 (+29,510)
Failure rate
0.0%
0 failed requests
Throughput
583.6 req/s (+48.9)
Latency 95%ile
61 ms (-3)
Latency 99%ile
100 ms (-10)
Endpoints
72
0 with failures

Over time

Throughput

Requests and failures per second

Response time

Percentiles over Locust's rolling window, ms

Users

Concurrent simulated users

Load plan

ActionStartedStoppedElapsedUsers
Increasing07:01:3607:01:400m 04s2 → 10
Maintaining07:01:4007:11:349m 54s10 → 10

Top 10 slowest endpoints (95%ile)

#MethodName95%ile (ms)Average (ms)# Requests
1GET/api/v3/advisory-labels?filter_text=type&limit=10003,6003,102176
2GET/api/v3/sbom/{sbom_id}/download2,0001,924177
3POST/api/v3/vulnerability/analyze1,900505697
4GET/api/v3/vulnerability?sort=base_score:desc&total=true1,200581346
5POST/api/v3/purl/recommend1,000707612
6GET/api/v3/advisory?q=CVE-2021-&total=true8401901,012
7GET/api/v3/sbom?sort=ingested:desc&total=true580227148
8GET/api/v3/advisory?offset={offset}&limit=1560241168
9GET/api/v3/purl?q=curl&total=true47075.9204
10GET/api/v3/sbom?limit=10&sort=name:asc&total=true390181146

Request metrics

MethodName# Requests# FailsFail %Average (ms)Min (ms)Max (ms)Avg size (B)RPSFailures/s
sbom 16
GET/api/v3/sbom/by-package?purl={purl}149 (+5)0 (0)0%74.4 (-17.9)38.22141,2870.25 (0)0
GET/api/v3/sbom/count-by-package146 (+20)0 (0)0%20.2 (-11.2)2.3976.630.24 (0)0
GET/api/v3/sbom/{sbom_id}157 (+13)0 (0)0%87.7 (-20.0)50.22342,0150.26 (0)0
GET/api/v3/sbom/{sbom_id}/all-license-ids149 (+30)0 (0)0%14.9 (-3.7)1.3178.620.25 (0)0
GET/api/v3/sbom/{sbom_id}/download177 (+59)0 (0)0%1,924 (-357.2)1,7522,166136,458,6380.30 (+0.1)0
GET/api/v3/sbom/{sbom_id}/license-export180 (+29)0 (0)0%21.2 (-3.2)1.7182.32340.30 (0)0
GET/api/v3/sbom/{sbom_id}/packages152 (+16)0 (0)0%99.6 (-30.9)8.9630112,6480.25 (0)0
GET/api/v3/sbom/{sbom_id}/related183 (+38)0 (0)0%82.5 (-29.0)12.647815,3720.31 (+0.1)0
GET/api/v3/sbom?limit=10&sort=name:asc&total=true146 (+30)0 (0)0%181 (-46.6)21.670712,1890.24 (0)0
GET/api/v3/sbom?offset=100&limit=10&total=true339 (+47)0 (0)0%130 (-8.6)18.571411,9410.57 (+0.1)0
GET/api/v3/sbom?q=label:type=product&total=true147 (+21)0 (0)0%16.7 (-0.3)1.3875.9220.25 (0)0
GET/api/v3/sbom?q=license~GPL&sort=name:desc&total=true158 (+15)0 (0)0%19.6 (-3.6)1.8678.5220.26 (0)0
GET/api/v3/sbom?q=name~redhat&total=true164 (+23)0 (0)0%101 (-438.1)26.4277220.27 (0)0
GET/api/v3/sbom?q=published>2024-01-01&total=true147 (+36)0 (0)0%110 (-20.6)18.576729,3170.25 (+0.1)0
GET/api/v3/sbom?sort=ingested:desc&total=true148 (-28)0 (0)0%227 (+7.0)18.21,50429,6000.25 (0)0
GET/api/v3/sbom?total=true353 (+85)0 (0)0%90.7 (-45.1)17.567529,3170.59 (+0.1)0
advisory 13
GET/api/v3/advisory/urn:uuid:{advisory_id}968 (+233)0 (0)0%51.5 (-1.6)2.381192,3951.62 (+0.4)0
GET/api/v3/advisory/urn:uuid:{advisory_id}/download997 (+212)0 (0)0%17.0 (-3.1)2.9589.2178,4231.66 (+0.4)0
GET/api/v3/advisory?deprecated=Consider&total=true1,021 (+204)0 (0)0%39.8 (-3.7)4.462,21644,0031.70 (+0.3)0
GET/api/v3/advisory?limit=1&total=true168 (+8)0 (0)0%65.3 (-18.7)6.247442,4500.28 (0)0
GET/api/v3/advisory?limit=10&sort=ingested:desc&total=true948 (+218)0 (0)0%34.8 (-7.7)2.602,22920,1931.58 (+0.4)0
GET/api/v3/advisory?offset=100&limit=10&total=true920 (+150)0 (0)0%52.6 (-7.1)3.362,18319,4951.54 (+0.2)0
GET/api/v3/advisory?offset={offset}&limit=1168 (+8)0 (0)0%241 (+45.9)55.89461,8810.28 (0)0
GET/api/v3/advisory?q=CVE-2021-&total=true1,012 (+217)0 (0)0%190 (-106.7)5.881,92449,6211.69 (+0.4)0
GET/api/v3/advisory?q=identifier=CVE-2022-0981&total=true1,009 (+265)0 (0)0%53.8 (+0.4)2.701281,9711.68 (+0.4)0
GET/api/v3/advisory?q=modified>3 days ago&total=true1,049 (+294)0 (0)0%13.5 (-2.8)1.5779.8221.75 (+0.5)0
GET/api/v3/advisory?q=title~openssl&total=true934 (+170)0 (0)0%27.3 (-3.4)5.23404126,4521.56 (+0.3)0
GET/api/v3/advisory?sort=modified:desc&total=true982 (+197)0 (0)0%38.9 (-3.8)2.982,18738,1281.64 (+0.3)0
GET/api/v3/advisory?total=true1,013 (+246)0 (0)0%79.8 (-27.2)4.702,41648,6851.69 (+0.4)0
vulnerability 7
POST/api/v3/vulnerability/analyze697 (+227)0 (0)0%505 (-269.0)0.943,2504,369,2711.16 (+0.4)0
GET/api/v3/vulnerability?offset=100&limit=10&total=true311 (+81)0 (0)0%23.1 (-31.7)1.316008,5720.52 (+0.1)0
GET/api/v3/vulnerability?q=base_score>=7.0&total=true324 (+85)0 (0)0%26.7 (-10.8)1.7191420,1390.54 (+0.1)0
GET/api/v3/vulnerability?q=base_severity=high&total=true312 (+78)0 (0)0%29.1 (-20.1)1.981,15420,6570.52 (+0.1)0
GET/api/v3/vulnerability?q=cwes=CWE-79&total=true302 (+71)0 (0)0%41.4 (-0.2)1.651,80521,3550.50 (+0.1)0
GET/api/v3/vulnerability?sort=base_score:desc&total=true346 (+119)0 (0)0%581 (-205.5)1051,76326,4490.58 (+0.2)0
GET/api/v3/vulnerability?total=true303 (+44)0 (0)0%13.7 (-24.1)1.6350319,7800.51 (+0.1)0
purl 15
GET/api/v3/purl/base/{purl}212 (+53)0 (0)0%79.6 (-15.1)3.3058748,8270.35 (+0.1)0
GET/api/v3/purl/base?q=namespace=redhat&total=true176 (+23)0 (0)0%71.7 (-16.6)19.86352,0800.29 (0)0
GET/api/v3/purl/base?q=type=rpm&total=true218 (+68)0 (0)0%51.6 (-9.0)2.601032,0800.36 (+0.1)0
GET/api/v3/purl/base?sort=name:asc&total=true234 (+56)0 (0)0%59.4 (-12.0)2.863162,9430.39 (+0.1)0
GET/api/v3/purl/base?total=true194 (+56)0 (0)0%55.9 (-6.4)2.892522,4500.32 (+0.1)0
POST/api/v3/purl/recommend612 (+136)0 (0)0%707 (-129.0)1111,4102,7471.02 (+0.2)0
GET/api/v3/purl/{purl_id}189 (+3)0 (0)0%55.3 (-13.5)10.71685370.32 (0)0
GET/api/v3/purl?offset=100&limit=10&total=true207 (+39)0 (0)0%54.1 (-24.4)2.224264,1800.35 (+0.1)0
GET/api/v3/purl?q=curl&total=true204 (+40)0 (0)0%75.9 (-37.0)1.561,47510,2310.34 (+0.1)0
GET/api/v3/purl?q=license~GPLv3+...&sort=name:desc&total=true204 (+49)0 (0)0%21.1 (-6.2)1.6472.4220.34 (+0.1)0
GET/api/v3/purl?q=name=curl&total=true198 (+31)0 (0)0%21.8 (-12.6)1.2519812,0840.33 (+0.1)0
GET/api/v3/purl?q=purl:namespace=redhat&total=true206 (+39)0 (0)0%103 (-85.9)1.433,26610,1940.34 (+0.1)0
GET/api/v3/purl?q=purl:ty=rpm&total=true200 (+53)0 (0)0%102 (-130.3)1.132,81610,4790.33 (+0.1)0
GET/api/v3/purl?sort=purl:name:asc&total=true200 (+47)0 (0)0%32.6 (-33.0)1.3556211,1010.33 (+0.1)0
GET/api/v3/purl?total=true180 (+26)0 (0)0%25.0 (-37.7)1.4438710,2730.30 (0)0
license 9
GET/api/v3/license/spdx/license/{license_id}2,189 (+32)0 (0)0%41.0 (0)0.6676.31,1433.65 (+0.1)0
GET/api/v3/license/spdx/license?q=apache&total=true2,285 (+158)0 (0)0%1.71 (-0.6)0.5415.71653.81 (+0.3)0
GET/api/v3/license/spdx/license?q=gpl&total=true2,235 (+167)0 (0)0%41.3 (+0.2)1.0372.91,9813.73 (+0.3)0
GET/api/v3/license/spdx/license?total=true2,150 (+69)0 (0)0%41.0 (-0.2)0.7173.31,5253.59 (+0.1)0
GET/api/v3/license?limit=10&sort=license:asc&total=true2,128 (-52)0 (0)0%24.4 (-2.8)2.9186.84253.55 (-0.1)0
GET/api/v3/license?q=ASL&sort=license:desc&total=true2,145 (+50)0 (0)0%20.4 (-2.8)1.82107223.58 (+0.1)0
GET/api/v3/license?q=license~Apache&total=true2,231 (+194)0 (0)0%18.8 (-3.0)1.491041203.72 (+0.3)0
GET/api/v3/license?q=license~GPL&total=true2,203 (+169)0 (0)0%18.3 (-1.8)1.4781.7923.68 (+0.3)0
GET/api/v3/license?total=true2,214 (+112)0 (0)0%61.6 (-0.5)4.814051,1013.69 (+0.2)0
analysis 3
GET/api/v3/analysis/component/{component}29,063 (+2,469)0 (0)0%6.71 (-0.5)0.731112548.49 (+4.1)0
GET/api/v3/analysis/latest/component/{cpe}28,911 (+2,539)0 (0)0%6.60 (-0.7)0.7799.12548.24 (+4.2)0
GET/api/v3/analysis/status28,962 (+2,303)0 (0)0%6.36 (-0.6)0.7187.310348.33 (+3.8)0
importer 1
GET/api/v3/importer?total=true108,278 (+12,507)0 (0)0%5.14 (-0.6)0.561082180.67 (+20.8)0
group 3
GET/api/v3/group/sbom?parents=resolve&total=true28,895 (+1,583)0 (0)0%6.56 (-0.3)0.681653848.21 (+2.6)0
GET/api/v3/group/sbom?total=true28,904 (+1,270)0 (0)0%6.54 (-0.2)0.691622248.23 (+2.1)0
GET/api/v3/group/sbom?totals=true&total=true28,737 (+1,346)0 (0)0%6.51 (-0.5)0.671662247.95 (+2.2)0
labels 3
GET/api/v3/advisory-labels?filter_text=type&limit=1000176 (+26)0 (0)0%3,102 (-575.2)1,6924,355600.29 (0)0
GET/api/v3/sbom-labels?limit=10&filter_text=&total=true149 (+7)0 (0)0%56.8 (-3.9)4.141161,0650.25 (0)0
GET/api/v3/sbom-labels?total=true139 (+16)0 (0)0%61.2 (+1.8)14.41231,0650.23 (0)0
other 2
GET/.well-known/trustify13,776 (+136)0 (0)0%41.1 (-0.1)0.5580.21,17022.99 (+0.2)0
POST/api/v3/ui/extract-sbom-purls13,850 (+124)0 (0)0%1.56 (-0.2)0.4653.54523.11 (+0.2)0

Response time metrics (ms)

MethodName50%ile75%ile90%ile95%ile99%ile100%ile
sbom 16
GET/api/v3/sbom/by-package?purl={purl}55 (-9)100 (-10)120 (-10)120 (-10)130 (-100)210 (-1,390)
GET/api/v3/sbom/count-by-package7 (0)38 (-2)63 (-5)70 (-4)77 (-33)77 (-1,123)
GET/api/v3/sbom/{sbom_id}83 (-37)110 (-20)130 (-10)140 (-20)210 (-20)230 (-30)
GET/api/v3/sbom/{sbom_id}/all-license-ids5 (0)16 (-19)53 (-12)59 (-13)74 (0)79 (0)
GET/api/v3/sbom/{sbom_id}/download1,900 (-400)2,000 (-300)2,000 (-400)2,000 (-400)2,100 (-400)2,200 (-300)
GET/api/v3/sbom/{sbom_id}/license-export6 (-3)39 (-9)66 (-1)72 (-1)80 (+4)82 (+5)
GET/api/v3/sbom/{sbom_id}/packages83 (-17)170 (-20)210 (-40)240 (-50)290 (-420)300 (-500)
GET/api/v3/sbom/{sbom_id}/related79 (-13)110 (-20)170 (-30)180 (-100)310 (-140)480 (-40)
GET/api/v3/sbom?limit=10&sort=name:asc&total=true150 (-50)270 (-40)370 (-50)390 (-90)590 (-50)710 (+20)
GET/api/v3/sbom?offset=100&limit=10&total=true87 (-7)200 (+10)310 (+20)390 (+20)610 (-30)710 (-280)
GET/api/v3/sbom?q=label:type=product&total=true4 (-1)31 (+8)58 (-1)67 (-2)75 (-5)76 (-6)
GET/api/v3/sbom?q=license~GPL&sort=name:desc&total=true5 (-1)39 (-8)60 (-8)67 (-4)72 (-7)78 (-3)
GET/api/v3/sbom?q=name~redhat&total=true98 (-432)110 (-830)170 (-930)190 (-1,010)230 (-3,070)280 (-5,220)
GET/api/v3/sbom?q=published>2024-01-01&total=true83 (-10)100 (-30)270 (-40)320 (-70)700 (+70)770 (+50)
GET/api/v3/sbom?sort=ingested:desc&total=true170 (+60)350 (+40)440 (-50)580 (-90)780 (-520)1,500 (+100)
GET/api/v3/sbom?total=true81 (-13)94 (-56)190 (-110)270 (-120)400 (-440)680 (-1,220)
advisory 13
GET/api/v3/advisory/urn:uuid:{advisory_id}44 (-1)47 (-3)91 (-9)100 (-10)110 (0)120 (0)
GET/api/v3/advisory/urn:uuid:{advisory_id}/download8 (-1)12 (-4)59 (-4)67 (-3)77 (-3)89 (+1)
GET/api/v3/advisory?deprecated=Consider&total=true9 (-2)39 (-12)68 (-4)75 (-3)150 (-850)2,200 (+300)
GET/api/v3/advisory?limit=1&total=true46 (-1)52 (-16)85 (-25)98 (-92)640 (-260)740 (-960)
GET/api/v3/advisory?limit=10&sort=ingested:desc&total=true7 (-1)25 (-16)62 (-5)68 (-7)630 (-470)2,200 (-600)
GET/api/v3/advisory?offset=100&limit=10&total=true25 (-14)73 (-7)84 (-6)89 (-7)150 (-250)2,200 (+100)
GET/api/v3/advisory?offset={offset}&limit=1200 (+30)320 (+90)410 (+40)560 (+100)700 (-120)950 (-20)
GET/api/v3/advisory?q=CVE-2021-&total=true100 (-30)170 (-110)510 (-380)840 (-460)1,200 (-800)1,900 (-3,300)
GET/api/v3/advisory?q=identifier=CVE-2022-0981&total=true45 (0)50 (+1)97 (-1)100 (-10)110 (0)130 (+10)
GET/api/v3/advisory?q=modified>3 days ago&total=true4 (-1)7 (-3)54 (-7)61 (-6)71 (-4)80 (-4)
GET/api/v3/advisory?q=title~openssl&total=true10 (-3)47 (-8)68 (-6)74 (-5)89 (-41)400 (-100)
GET/api/v3/advisory?sort=modified:desc&total=true9 (-1)43 (-1)65 (-6)73 (-4)1,200 (-100)2,200 (+300)
GET/api/v3/advisory?total=true84 (-6)97 (-3)110 (-20)120 (-60)170 (-1,330)2,400 (-300)
vulnerability 7
POST/api/v3/vulnerability/analyze56 (-554)750 (-350)1,600 (-600)1,900 (-900)2,600 (-1,900)3,200 (-5,100)
GET/api/v3/vulnerability?offset=100&limit=10&total=true5 (-39)15 (-32)47 (-52)63 (-47)430 (+60)600 (-40)
GET/api/v3/vulnerability?q=base_score>=7.0&total=true5 (0)9 (0)57 (0)69 (-5)580 (-310)910 (-90)
GET/api/v3/vulnerability?q=base_severity=high&total=true6 (0)11 (0)42 (-21)70 (-6)580 (-620)1,200 (-500)
GET/api/v3/vulnerability?q=cwes=CWE-79&total=true5 (-1)12 (-2)63 (+7)71 (-7)970 (+80)1,800 (+600)
GET/api/v3/vulnerability?sort=base_score:desc&total=true540 (-230)700 (-400)1,000 (-400)1,200 (-500)1,600 (-600)1,800 (-800)
GET/api/v3/vulnerability?total=true5 (0)8 (0)31 (-16)60 (-1)74 (-436)500 (-4,500)
purl 15
GET/api/v3/purl/base/{purl}53 (-8)130 (-20)180 (-40)210 (-60)400 (-150)590 (-310)
GET/api/v3/purl/base?q=namespace=redhat&total=true44 (-1)72 (-10)97 (-2)240 (+40)470 (-250)630 (-1,470)
GET/api/v3/purl/base?q=type=rpm&total=true44 (-1)51 (-27)86 (-12)95 (-5)100 (-50)100 (-280)
GET/api/v3/purl/base?sort=name:asc&total=true47 (-2)73 (-15)97 (-13)100 (-30)160 (-300)320 (-380)
GET/api/v3/purl/base?total=true44 (-1)65 (-17)95 (-5)100 (-20)150 (-50)250 (-40)
POST/api/v3/purl/recommend730 (-160)840 (-160)940 (-160)1,000 (-300)1,200 (-300)1,400 (-2,800)
GET/api/v3/purl/{purl_id}56 (-12)79 (-7)98 (-52)110 (-60)160 (-90)170 (-90)
GET/api/v3/purl?offset=100&limit=10&total=true44 (0)64 (-19)88 (-12)96 (-144)270 (-450)430 (-310)
GET/api/v3/purl?q=curl&total=true7 (-46)55 (-38)110 (+10)470 (-40)950 (-650)1,500 (-100)
GET/api/v3/purl?q=license~GPLv3+...&sort=name:desc&total=true8 (-7)40 (-9)54 (-8)60 (-8)65 (-18)72 (-48)
GET/api/v3/purl?q=name=curl&total=true8 (-6)30 (-27)59 (-6)66 (-25)200 (-20)200 (-250)
GET/api/v3/purl?q=purl:namespace=redhat&total=true4 (-41)33 (-57)57 (-43)68 (-1,732)2,200 (-500)3,300 (0)
GET/api/v3/purl?q=purl:ty=rpm&total=true4 (-41)35 (-52)59 (-41)69 (-1,731)2,300 (-800)2,800 (-5,300)
GET/api/v3/purl?sort=purl:name:asc&total=true8 (-10)35 (-23)63 (-14)190 (-220)400 (-340)560 (-1,440)
GET/api/v3/purl?total=true4 (-41)33 (-41)59 (-40)65 (-35)360 (+20)390 (-360)
license 9
GET/api/v3/license/spdx/license/{license_id}42 (0)42 (-1)43 (0)44 (0)49 (-8)76 (-20)
GET/api/v3/license/spdx/license?q=apache&total=true2 (0)2 (-1)3 (0)3 (-1)5 (-12)16 (-44)
GET/api/v3/license/spdx/license?q=gpl&total=true42 (0)43 (0)43 (-1)44 (0)47 (-11)73 (-27)
GET/api/v3/license/spdx/license?total=true42 (0)42 (-1)43 (-1)44 (0)48 (-12)73 (-27)
GET/api/v3/license?limit=10&sort=license:asc&total=true10 (-2)48 (-2)59 (-4)64 (-9)75 (-16)87 (-83)
GET/api/v3/license?q=ASL&sort=license:desc&total=true7 (-2)40 (-5)57 (-2)60 (-9)73 (-9)110 (-50)
GET/api/v3/license?q=license~Apache&total=true6 (-1)37 (-7)56 (-2)60 (-6)73 (-9)100 (-70)
GET/api/v3/license?q=license~GPL&total=true6 (-1)36 (-3)55 (-2)58 (-4)71 (-6)82 (-68)
GET/api/v3/license?total=true49 (-1)83 (+1)98 (-2)100 (-10)120 (-10)400 (+200)
analysis 3
GET/api/v3/analysis/component/{component}3 (0)4 (0)6 (0)56 (-4)69 (-3)110 (-10)
GET/api/v3/analysis/latest/component/{cpe}3 (0)4 (0)6 (0)55 (-6)69 (-2)99 (-11)
GET/api/v3/analysis/status2 (-1)3 (-1)5 (-1)55 (-5)69 (-2)87 (-13)
importer 1
GET/api/v3/importer?total=true2 (0)3 (0)4 (0)41 (-12)67 (-3)110 (-10)
group 3
GET/api/v3/group/sbom?parents=resolve&total=true2 (-1)3 (-1)5 (-1)56 (-3)70 (-1)160 (+50)
GET/api/v3/group/sbom?total=true2 (-1)3 (0)5 (-1)56 (-3)70 (-1)160 (+67)
GET/api/v3/group/sbom?totals=true&total=true2 (-1)3 (-1)5 (-1)56 (-4)70 (-1)170 (-10)
labels 3
GET/api/v3/advisory-labels?filter_text=type&limit=10003,100 (-500)3,300 (-500)3,500 (-600)3,600 (-700)3,900 (-4,700)4,400 (-6,600)
GET/api/v3/sbom-labels?limit=10&filter_text=&total=true45 (-1)67 (-6)98 (-12)100 (-10)110 (-10)120 (0)
GET/api/v3/sbom-labels?total=true46 (-1)77 (+2)110 (+12)110 (0)120 (+10)120 (0)
other 2
GET/.well-known/trustify42 (0)42 (0)43 (0)44 (0)48 (-2)80 (-60)
POST/api/v3/ui/extract-sbom-purls1 (0)2 (0)3 (0)3 (-1)5 (-1)53 (+9)

Failures

No failures recorded.

Exceptions

No exceptions raised in the locustfile.