Trustify PR perf tests

Target trustify (scale snapshot) · Latest run 2026-10-24 16:02 UTC

Test runs
5
2026-10-07 → 2026-10-24
Latest avg response
20.3 ms (-9.9)
Latest 95%ile
65 ms (-8)
Latest throughput
480.0 req/s (+158.1)
Latest failure rate
0.0%
0 of 287,449 requests
Endpoints tested
72
72 across all runs

Trends

Response time

Per run, ms · click a point to open that run

Throughput

Requests per second, per run

Failure rate

Failed requests, % of all requests

Latest run vs previous

Comparing pr_2791_2026-10-24T15-15-01_8ecf3d8 with pr_2791_2026-10-24T14-10-19_24a70e7. Flagged when 95%ile up or down by at least 10% and 5 ms.

Regressions 3

EndpointPrev 95%ileLatest 95%ileΔ msΔ %Prev avgLatest avgFails
GET /api/v3/purl/base/{purl}230270(+40)+17%82.578.70 → 0
GET /api/v3/advisory?total=true180200(+20)+11%1081080 → 0
GET /api/v3/advisory?offset=100&limit=10&total=true100110(+10)+10%81.356.10 → 0

Improvements 32

EndpointPrev 95%ileLatest 95%ileΔ msΔ %Prev avgLatest avgFails
GET /api/v3/purl?q=purl:namespace=redhat&total=true1,60064(-1,536)-96%1691180 → 0
GET /api/v3/vulnerability?q=base_severity=high&total=true28068(-212)-76%48.727.00 → 0
GET /api/v3/vulnerability?q=cwes=CWE-79&total=true28068(-212)-76%49.028.00 → 0
GET /api/v3/purl?q=purl:ty=rpm&total=true1,800580(-1,220)-68%1651330 → 0
GET /api/v3/purl/base?sort=name:asc&total=true330110(-220)-67%20361.20 → 0
GET /api/v3/purl?sort=purl:name:asc&total=true410160(-250)-61%55.440.50 → 0
GET /api/v3/purl?q=curl&total=true760400(-360)-47%84.387.30 → 0
GET /api/v3/advisory?q=CVE-2021-&total=true1,8001,200(-600)-33%3922820 → 0
GET /api/v3/sbom/by-package?purl={purl}210140(-70)-33%10286.40 → 0
GET /api/v3/advisory-labels?filter_text=type&limit=10006,6004,600(-2,000)-30%5,8233,9320 → 0
GET /api/v3/sbom?q=published>2024-01-01&total=true600420(-180)-30%2051550 → 0
POST /api/v3/purl/recommend1,5001,100(-400)-27%8857240 → 0
GET /api/v3/sbom/{sbom_id}/download3,1002,400(-700)-23%3,0232,2810 → 0
GET /api/v3/purl?total=true7258(-14)-19%40.819.60 → 0
POST /api/v3/vulnerability/analyze3,2002,600(-600)-19%9366440 → 0
GET /api/v3/sbom?offset=100&limit=10&total=true510420(-90)-18%2061710 → 0
GET /api/v3/sbom?total=true490410(-80)-16%1791380 → 0
GET /api/v3/vulnerability?sort=base_score:desc&total=true1,3001,100(-200)-15%6004900 → 0
GET /api/v3/vulnerability?total=true7362(-11)-15%32.216.30 → 0
GET /api/v3/importer?total=true6758(-9)-13%11.16.710 → 0
GET /api/v3/advisory?deprecated=Consider&total=true9078(-12)-13%70.750.20 → 0
GET /api/v3/license?q=ASL&sort=license:desc&total=true7666(-10)-13%30.823.40 → 0
GET /api/v3/sbom/{sbom_id}/all-license-ids7868(-10)-13%23.816.00 → 0
GET /api/v3/license?q=license~GPL&total=true7162(-9)-13%26.320.40 → 0
GET /api/v3/license?q=license~Apache&total=true7364(-9)-12%27.520.90 → 0
GET /api/v3/analysis/component/{component}7062(-8)-11%14.08.090 → 0
GET /api/v3/analysis/status7062(-8)-11%13.48.070 → 0
GET /api/v3/analysis/latest/component/{cpe}7163(-8)-11%14.58.170 → 0
GET /api/v3/license?limit=10&sort=license:asc&total=true8273(-9)-11%36.227.40 → 0
GET /api/v3/advisory?q=title~openssl&total=true9282(-10)-11%44.633.60 → 0
GET /api/v3/advisory?sort=modified:desc&total=true8677(-9)-10%70.047.10 → 0
GET /api/v3/group/sbom?parents=resolve&total=true6861(-7)-10%12.47.730 → 0

Top 10 slowest endpoints (latest run)

#MethodName95%ile (ms)Average (ms)# Requests
1GET/api/v3/advisory-labels?filter_text=type&limit=10004,6003,932142
2POST/api/v3/vulnerability/analyze2,600644586
3GET/api/v3/sbom/{sbom_id}/download2,4002,281134
4GET/api/v3/sbom?q=name~redhat&total=true1,300569112
5GET/api/v3/advisory?q=CVE-2021-&total=true1,200282754
6POST/api/v3/purl/recommend1,100724577
7GET/api/v3/vulnerability?sort=base_score:desc&total=true1,100490337
8GET/api/v3/sbom?sort=ingested:desc&total=true630226136
9GET/api/v3/advisory?offset={offset}&limit=1580245125
10GET/api/v3/purl?q=purl:ty=rpm&total=true580133175

All endpoints

GroupEndpointRunsLatest 95%ileMedian 95%ileBestWorstLatest avgLatest fail %95%ile, last 30 runs
sbomGET /api/v3/sbom/by-package?purl={purl}514019014021086.40%
sbomGET /api/v3/sbom/count-by-package57477617825.60%
sbomGET /api/v3/sbom/{sbom_id}52102202102301080%
sbomGET /api/v3/sbom/{sbom_id}/all-license-ids56872397816.00%
sbomGET /api/v3/sbom/{sbom_id}/download52,4003,2002,4005,6002,2810%
sbomGET /api/v3/sbom/{sbom_id}/license-export58279598229.00%
sbomGET /api/v3/sbom/{sbom_id}/packages52903102603901200%
sbomGET /api/v3/sbom/{sbom_id}/related52702902703001200%
sbomGET /api/v3/sbom?limit=10&sort=name:asc&total=true55105704908302490%
sbomGET /api/v3/sbom?offset=100&limit=10&total=true54205104205501710%
sbomGET /api/v3/sbom?q=label:type=product&total=true56470407517.40%
sbomGET /api/v3/sbom?q=license~GPL&sort=name:desc&total=true57075487720.20%
sbomGET /api/v3/sbom?q=name~redhat&total=true51,3001,3009401,4005690%
sbomGET /api/v3/sbom?q=published>2024-01-01&total=true54205004206001550%
sbomGET /api/v3/sbom?sort=ingested:desc&total=true56306305308802260%
sbomGET /api/v3/sbom?total=true54104103904901380%
advisoryGET /api/v3/advisory/urn:uuid:{advisory_id}51001107411052.80%
advisoryGET /api/v3/advisory/urn:uuid:{advisory_id}/download57275537820.90%
advisoryGET /api/v3/advisory?deprecated=Consider&total=true578907810050.20%
advisoryGET /api/v3/advisory?limit=1&total=true51101107511074.70%
advisoryGET /api/v3/advisory?limit=10&sort=ingested:desc&total=true57679688350.00%
advisoryGET /api/v3/advisory?offset=100&limit=10&total=true51101009911056.10%
advisoryGET /api/v3/advisory?offset={offset}&limit=155806005006102450%
advisoryGET /api/v3/advisory?q=CVE-2021-&total=true51,2001,8001,2002,2002820%
advisoryGET /api/v3/advisory?q=identifier=CVE-2022-0981&total=true51101107311055.50%
advisoryGET /api/v3/advisory?q=modified>3 days ago&total=true56871407117.50%
advisoryGET /api/v3/advisory?q=title~openssl&total=true582928212033.60%
advisoryGET /api/v3/advisory?sort=modified:desc&total=true57786779147.10%
advisoryGET /api/v3/advisory?total=true52001801702001080%
vulnerabilityGET /api/v3/vulnerability?offset=100&limit=10&total=true51001007211060.70%
vulnerabilityGET /api/v3/vulnerability?q=base_score>=7.0&total=true570787012032.30%
vulnerabilityGET /api/v3/vulnerability?q=base_severity=high&total=true568916828027.00%
vulnerabilityGET /api/v3/vulnerability?q=cwes=CWE-79&total=true568866828028.00%
vulnerabilityGET /api/v3/vulnerability?sort=base_score:desc&total=true51,1001,1001,0001,4004900%
vulnerabilityGET /api/v3/vulnerability?total=true56269337316.30%
vulnerabilityPOST /api/v3/vulnerability/analyze52,6003,1002,6003,4006440%
purlGET /api/v3/purl/base/{purl}52702708230078.70%
purlGET /api/v3/purl/base?q=namespace=redhat&total=true51001007613067.50%
purlGET /api/v3/purl/base?q=type=rpm&total=true51001007411054.10%
purlGET /api/v3/purl/base?sort=name:asc&total=true511032011038061.20%
purlGET /api/v3/purl/base?total=true51001007311054.90%
purlGET /api/v3/purl/{purl_id}517017017021068.80%
purlGET /api/v3/purl?offset=100&limit=10&total=true51001107012062.90%
purlGET /api/v3/purl?q=curl&total=true54006908489087.30%
purlGET /api/v3/purl?q=license~GPLv3+...&sort=name:desc&total=true57271637524.80%
purlGET /api/v3/purl?q=name=curl&total=true580803514024.50%
purlGET /api/v3/purl?q=purl:namespace=redhat&total=true5641,600522,0001180%
purlGET /api/v3/purl?q=purl:ty=rpm&total=true55801,800382,5001330%
purlGET /api/v3/purl?sort=purl:name:asc&total=true51601603741040.50%
purlGET /api/v3/purl?total=true55863357219.60%
purlPOST /api/v3/purl/recommend51,1001,4004601,5007240%
licenseGET /api/v3/license/spdx/license/{license_id}54445445741.60%
licenseGET /api/v3/license/spdx/license?q=apache&total=true5464102.070%
licenseGET /api/v3/license/spdx/license?q=gpl&total=true54446445641.40%
licenseGET /api/v3/license/spdx/license?total=true54445445441.20%
licenseGET /api/v3/license?limit=10&sort=license:asc&total=true57381738227.40%
licenseGET /api/v3/license?q=ASL&sort=license:desc&total=true56676587723.40%
licenseGET /api/v3/license?q=license~Apache&total=true56471437320.90%
licenseGET /api/v3/license?q=license~GPL&total=true56271427320.40%
licenseGET /api/v3/license?total=true511012011012065.20%
analysisGET /api/v3/analysis/component/{component}5626826708.090%
analysisGET /api/v3/analysis/latest/component/{cpe}5636826718.170%
analysisGET /api/v3/analysis/status5626826708.070%
importerGET /api/v3/importer?total=true5586516676.710%
groupGET /api/v3/group/sbom?parents=resolve&total=true5616825687.730%
groupGET /api/v3/group/sbom?total=true5626826687.930%
groupGET /api/v3/group/sbom?totals=true&total=true5626825687.970%
labelsGET /api/v3/advisory-labels?filter_text=type&limit=100054,6006,7004,6008,6003,9320%
labelsGET /api/v3/sbom-labels?limit=10&filter_text=&total=true511011010012061.40%
labelsGET /api/v3/sbom-labels?total=true51101208912063.50%
otherGET /.well-known/trustify5444564541.30%
otherPOST /api/v3/ui/extract-sbom-purls546481.830%

Runs

Started (UTC)RunSourceDurationUsers# RequestsFail %RPSAverage (ms)95%ile99%ile
2026-10-24 16:02pr_2791_2026-10-24T15-15-01_8ecf3d8PR #27919m 58s10287,4490.0%480.0 (+158.1)20.3 (-9.9)65 (-8)130 (-80)
2026-10-24 15:00pr_2791_2026-10-24T14-10-19_24a70e7PR #27919m 58s10192,9160.0%321.9 (-0.9)30.2 (+0.1)73 (+1)210 (+10)
2026-10-23 20:57pr_2791_2026-10-23T20-07-36_949b76dPR #27919m 58s10193,3710.0%322.8 (-12.0)30.1 (+1.1)72 (+1)200 (0)
2026-10-23 18:29pr_2791_2026-10-23T17-39-02_42725ddPR #27919m 59s10200,6400.0%334.8 (-270.0)29.1 (+13.7)71 (+33)200 (+80)
2026-10-07 16:17pr_2745_2026-10-07T15-05-31_0db05dcPR #27459m 59s10362,6810.0%604.8 15.4 38 120