← All runs

Trustify PR perf tests · 2026-10-23 18:29 UTC

Target trustify (scale snapshot) · 2026-10-23 18:29:50 UTC → 18:39:49 UTC · Users 10 · Deltas vs previous run (2026-10-07 16:17 UTC, pr_2745_2026-10-07T15-05-31_0db05dc)

Type pull-request · Dataset scale-20260317T023702Z · Scenario etc/scenarios/main/full-20260317T023702Z.json5 · Branch tc-7105 · Commit 42725dddebd3 · PR #2791 · Workflow run

Duration
9m 59s
Total requests
200,640 (-162,041)
Failure rate
0.0%
0 failed requests
Throughput
334.8 req/s (-270.0)
Latency 95%ile
71 ms (+33)
Latency 99%ile
200 ms (+80)
Endpoints
72
0 with failures

Over time

Throughput

Requests and failures per second

Response time

Percentiles over Locust's rolling window, ms

Users

Concurrent simulated users

Load plan

ActionStartedStoppedElapsedUsers
Increasing18:29:5018:29:540m 04s2 → 10
Maintaining18:29:5418:39:499m 55s10 → 10

Top 10 slowest endpoints (95%ile)

#MethodName95%ile (ms)Average (ms)# Requests
1GET/api/v3/advisory-labels?filter_text=type&limit=10006,7005,87996
2GET/api/v3/sbom/{sbom_id}/download3,2003,079106
3POST/api/v3/vulnerability/analyze3,100971421
4GET/api/v3/purl?q=purl:ty=rpm&total=true2,400210126
5GET/api/v3/purl?q=purl:namespace=redhat&total=true2,000177135
6GET/api/v3/advisory?q=CVE-2021-&total=true1,700390653
7POST/api/v3/purl/recommend1,400947438
8GET/api/v3/sbom?q=name~redhat&total=true1,40047397
9GET/api/v3/vulnerability?sort=base_score:desc&total=true1,100597241
10GET/api/v3/purl?q=curl&total=true89093.2160

Request metrics

MethodName# Requests# FailsFail %Average (ms)Min (ms)Max (ms)Avg size (B)RPSFailures/s
sbom 16
GET/api/v3/sbom/by-package?purl={purl}100 (+8)0 (0)0%110 (-4.4)22.52271,2870.17 (0)0
GET/api/v3/sbom/count-by-package111 (+19)0 (0)0%33.3 (+7.5)2.8480.930.19 (0)0
GET/api/v3/sbom/{sbom_id}97 (0)0 (0)0%128 (-14.6)60.53292,0150.16 (0)0
GET/api/v3/sbom/{sbom_id}/all-license-ids100 (+12)0 (0)0%27.6 (+11.8)1.8985.320.17 (0)0
GET/api/v3/sbom/{sbom_id}/download106 (+33)0 (0)0%3,079 (-1,907.6)2,8583,471136,458,6380.18 (+0.1)0
GET/api/v3/sbom/{sbom_id}/license-export84 (-10)0 (0)0%35.6 (+8.7)5.7490.42350.14 (0)0
GET/api/v3/sbom/{sbom_id}/packages92 (-4)0 (0)0%159 (+40.4)16.545412,6480.15 (0)0
GET/api/v3/sbom/{sbom_id}/related93 (+21)0 (0)0%137 (-21.7)22.531215,3720.16 (0)0
GET/api/v3/sbom?limit=10&sort=name:asc&total=true88 (+5)0 (0)0%271 (+0.8)35.472212,1890.15 (0)0
GET/api/v3/sbom?offset=100&limit=10&total=true180 (+21)0 (0)0%228 (-20.3)27.31,02211,9410.30 (0)0
GET/api/v3/sbom?q=label:type=product&total=true80 (-15)0 (0)0%23.1 (+7.4)2.1578.4220.13 (0)0
GET/api/v3/sbom?q=license~GPL&sort=name:desc&total=true93 (-7)0 (0)0%27.1 (+6.8)1.8882.2220.16 (0)0
GET/api/v3/sbom?q=name~redhat&total=true97 (0)0 (0)0%473 (+270.6)11.41,475220.16 (0)0
GET/api/v3/sbom?q=published>2024-01-01&total=true82 (-10)0 (0)0%200 (-27.9)28.284529,3170.14 (0)0
GET/api/v3/sbom?sort=ingested:desc&total=true106 (+22)0 (0)0%284 (+53.2)28.31,01629,6000.18 (0)0
GET/api/v3/sbom?total=true184 (+1)0 (0)0%170 (-41.6)26.177229,3170.31 (0)0
advisory 13
GET/api/v3/advisory/urn:uuid:{advisory_id}648 (+76)0 (0)0%58.9 (+14.5)3.741342,3951.08 (+0.1)0
GET/api/v3/advisory/urn:uuid:{advisory_id}/download625 (+14)0 (0)0%27.4 (+4.7)4.4498.4178,4231.04 (0)0
GET/api/v3/advisory?deprecated=Consider&total=true580 (+4)0 (0)0%71.3 (-4.4)6.173,02344,0030.97 (0)0
GET/api/v3/advisory?limit=1&total=true89 (-12)0 (0)0%70.9 (+6.1)14.21,2472,3630.15 (0)0
GET/api/v3/advisory?limit=10&sort=ingested:desc&total=true555 (-10)0 (0)0%35.8 (-26.3)5.312,21420,1930.93 (0)0
GET/api/v3/advisory?offset=100&limit=10&total=true620 (+2)0 (0)0%67.9 (+4.1)6.822,90619,3361.03 (0)0
GET/api/v3/advisory?offset={offset}&limit=189 (-12)0 (0)0%270 (+36.0)62.17301,9400.15 (0)0
GET/api/v3/advisory?q=CVE-2021-&total=true653 (+86)0 (0)0%390 (-73.6)18.83,40949,6971.09 (+0.1)0
GET/api/v3/advisory?q=identifier=CVE-2022-0981&total=true608 (+31)0 (0)0%58.1 (+12.8)4.171301,9711.01 (+0.1)0
GET/api/v3/advisory?q=modified>3 days ago&total=true590 (-4)0 (0)0%23.2 (+6.1)2.2195.1220.98 (0)0
GET/api/v3/advisory?q=title~openssl&total=true634 (+47)0 (0)0%49.2 (-0.6)8.53764126,4521.06 (+0.1)0
GET/api/v3/advisory?sort=modified:desc&total=true597 (+4)0 (0)0%47.5 (-19.3)7.142,82538,1281.00 (0)0
GET/api/v3/advisory?total=true641 (+22)0 (0)0%112 (+10.1)8.513,20249,5891.07 (0)0
vulnerability 7
POST/api/v3/vulnerability/analyze421 (+39)0 (0)0%971 (-144.2)1.515,3934,808,1370.70 (+0.1)0
GET/api/v3/vulnerability?offset=100&limit=10&total=true218 (-16)0 (0)0%58.2 (+9.1)3.929317,4620.36 (0)0
GET/api/v3/vulnerability?q=base_score>=7.0&total=true213 (+7)0 (0)0%38.6 (+5.8)2.411,12418,3170.36 (0)0
GET/api/v3/vulnerability?q=base_severity=high&total=true222 (+10)0 (0)0%41.1 (+3.7)2.511,27618,3620.37 (0)0
GET/api/v3/vulnerability?q=cwes=CWE-79&total=true236 (+25)0 (0)0%35.7 (+2.6)2.511,27618,9870.39 (0)0
GET/api/v3/vulnerability?sort=base_score:desc&total=true241 (+45)0 (0)0%597 (-60.9)1732,28913,9740.40 (+0.1)0
GET/api/v3/vulnerability?total=true225 (+20)0 (0)0%19.1 (-6.2)2.5971118,6750.38 (0)0
purl 15
GET/api/v3/purl/base/{purl}150 (-120)0 (0)0%99.4 (+65.2)5.7143448,8270.25 (-0.2)0
GET/api/v3/purl/base?q=namespace=redhat&total=true125 (-159)0 (0)0%81.8 (+35.6)3.828042,0800.21 (-0.3)0
GET/api/v3/purl/base?q=type=rpm&total=true162 (-151)0 (0)0%57.6 (+16.7)3.351382,0800.27 (-0.3)0
GET/api/v3/purl/base?sort=name:asc&total=true145 (-153)0 (0)0%212 (-24.8)68.43972,9430.24 (-0.3)0
GET/api/v3/purl/base?total=true131 (-177)0 (0)0%61.1 (+17.2)4.382062,4500.22 (-0.3)0
POST/api/v3/purl/recommend438 (-488)0 (0)0%947 (+655.9)1411,9272,7470.73 (-0.8)0
GET/api/v3/purl/{purl_id}141 (-154)0 (0)0%91.5 (-19.0)18.62855370.24 (-0.3)0
GET/api/v3/purl?offset=100&limit=10&total=true132 (-142)0 (0)0%74.2 (-8.5)4.957404,4740.22 (-0.2)0
GET/api/v3/purl?q=curl&total=true160 (-117)0 (0)0%93.2 (+37.4)6.071,36011,7140.27 (-0.2)0
GET/api/v3/purl?q=license~GPLv3+...&sort=name:desc&total=true137 (-154)0 (0)0%33.6 (+4.6)6.18156220.23 (-0.3)0
GET/api/v3/purl?q=name=curl&total=true144 (-170)0 (0)0%33.7 (+19.7)2.3129412,0840.24 (-0.3)0
GET/api/v3/purl?q=purl:namespace=redhat&total=true135 (-169)0 (0)0%177 (+69.8)2.173,51513,6170.23 (-0.3)0
GET/api/v3/purl?q=purl:ty=rpm&total=true126 (-185)0 (0)0%210 (+118.8)2.533,49813,6170.21 (-0.3)0
GET/api/v3/purl?sort=purl:name:asc&total=true129 (-195)0 (0)0%51.1 (-49.5)1.9484611,1010.22 (-0.3)0
GET/api/v3/purl?total=true140 (-182)0 (0)0%28.7 (-46.0)2.136529,8770.23 (-0.3)0
license 9
GET/api/v3/license/spdx/license/{license_id}1,845 (-53)0 (0)0%41.3 (+0.1)0.911061,1433.08 (-0.1)0
GET/api/v3/license/spdx/license?q=apache&total=true1,843 (+8)0 (0)0%3.31 (-2.6)0.9474.91653.08 (0)0
GET/api/v3/license/spdx/license?q=gpl&total=true1,864 (-24)0 (0)0%42.1 (+0.6)1.121161,9813.11 (0)0
GET/api/v3/license/spdx/license?total=true1,809 (-89)0 (0)0%41.9 (+1.6)1.031241,5253.02 (-0.1)0
GET/api/v3/license?limit=10&sort=license:asc&total=true1,812 (-24)0 (0)0%35.7 (-4.9)4.901724253.02 (0)0
GET/api/v3/license?q=ASL&sort=license:desc&total=true1,829 (+45)0 (0)0%31.7 (+2.8)3.46186223.05 (+0.1)0
GET/api/v3/license?q=license~Apache&total=true1,859 (-59)0 (0)0%27.4 (+6.8)2.501741203.10 (-0.1)0
GET/api/v3/license?q=license~GPL&total=true1,828 (+54)0 (0)0%27.3 (+7.6)2.41173923.05 (+0.1)0
GET/api/v3/license?total=true1,786 (-112)0 (0)0%70.3 (+3.8)8.201981,1012.98 (-0.2)0
analysis 3
GET/api/v3/analysis/component/{component}14,932 (-2,920)0 (0)0%12.6 (+2.7)1.2999.52524.92 (-4.9)0
GET/api/v3/analysis/latest/component/{cpe}14,752 (-2,991)0 (0)0%13.2 (+3.2)1.371022524.62 (-5.0)0
GET/api/v3/analysis/status14,601 (-3,112)0 (0)0%12.7 (+3.0)1.2710110324.36 (-5.2)0
importer 1
GET/api/v3/importer?total=true54,920 (-19,301)0 (0)0%10.1 (+3.5)1.02115291.64 (-32.1)0
group 3
GET/api/v3/group/sbom?parents=resolve&total=true14,956 (-3,010)0 (0)0%12.6 (+3.0)1.231053824.96 (-5.0)0
GET/api/v3/group/sbom?total=true15,206 (-2,831)0 (0)0%12.3 (+2.7)1.221012225.37 (-4.7)0
GET/api/v3/group/sbom?totals=true&total=true15,373 (-2,585)0 (0)0%12.3 (+2.7)1.231212225.65 (-4.3)0
labels 3
GET/api/v3/advisory-labels?filter_text=type&limit=100096 (+18)0 (0)0%5,879 (-1,391.0)4,9586,960600.16 (0)0
GET/api/v3/sbom-labels?limit=10&filter_text=&total=true98 (+8)0 (0)0%67.0 (+4.4)10.21191,0650.16 (0)0
GET/api/v3/sbom-labels?total=true101 (+13)0 (0)0%70.1 (+10.2)9.932001,0650.17 (0)0
other 2
GET/.well-known/trustify13,241 (-61,320)0 (0)0%41.7 (+38.7)0.8773.91,17322.09 (-102.2)0
POST/api/v3/ui/extract-sbom-purls13,096 (-61,514)0 (0)0%2.44 (-1.3)0.9142.84521.85 (-102.6)0

Response time metrics (ms)

MethodName50%ile75%ile90%ile95%ile99%ile100%ile
sbom 16
GET/api/v3/sbom/by-package?purl={purl}120 (+10)130 (-10)140 (-20)190 (+10)230 (0)230 (0)
GET/api/v3/sbom/count-by-package18 (0)65 (+26)77 (+25)78 (+17)81 (-16)81 (-16)
GET/api/v3/sbom/{sbom_id}130 (-10)140 (-30)190 (-20)220 (-10)330 (+60)330 (+60)
GET/api/v3/sbom/{sbom_id}/all-license-ids9 (-3)53 (+35)69 (+33)72 (+33)85 (+33)85 (+33)
GET/api/v3/sbom/{sbom_id}/download3,100 (-1,900)3,100 (-2,200)3,200 (-2,300)3,200 (-2,400)3,300 (-2,800)3,500 (-2,600)
GET/api/v3/sbom/{sbom_id}/license-export20 (-2)64 (+27)76 (+25)79 (+20)90 (+18)90 (+18)
GET/api/v3/sbom/{sbom_id}/packages130 (+36)230 (+80)300 (+70)360 (+100)450 (+50)450 (+50)
GET/api/v3/sbom/{sbom_id}/related110 (-40)190 (-10)250 (-10)290 (-10)310 (-50)310 (-50)
GET/api/v3/sbom?limit=10&sort=name:asc&total=true230 (+10)380 (+90)470 (-30)570 (0)720 (-480)720 (-480)
GET/api/v3/sbom?offset=100&limit=10&total=true180 (-50)320 (+10)450 (+30)540 (+50)980 (+340)1,000 (+170)
GET/api/v3/sbom?q=label:type=product&total=true8 (-3)42 (+23)66 (+31)74 (+34)78 (+9)78 (+9)
GET/api/v3/sbom?q=license~GPL&sort=name:desc&total=true10 (-7)51 (+22)69 (+32)75 (+27)82 (+10)82 (+10)
GET/api/v3/sbom?q=name~redhat&total=true89 (+8)1,100 (+980)1,300 (+420)1,400 (+460)1,500 (-700)1,500 (-700)
GET/api/v3/sbom?q=published>2024-01-01&total=true160 (-40)290 (0)410 (-30)500 (0)840 (-50)840 (-50)
GET/api/v3/sbom?sort=ingested:desc&total=true230 (+40)420 (+100)510 (+120)540 (+10)630 (-170)1,000 (+200)
GET/api/v3/sbom?total=true120 (-80)190 (-60)350 (+10)410 (+20)580 (+80)770 (+220)
advisory 13
GET/api/v3/advisory/urn:uuid:{advisory_id}47 (-3)77 (+21)110 (+45)110 (+36)120 (-10)130 (-90)
GET/api/v3/advisory/urn:uuid:{advisory_id}/download13 (-5)47 (+23)70 (+31)75 (+22)82 (-28)98 (-42)
GET/api/v3/advisory?deprecated=Consider&total=true17 (-11)67 (+26)79 (+13)90 (-10)2,000 (-400)3,000 (-300)
GET/api/v3/advisory?limit=1&total=true50 (-4)62 (+2)88 (+19)110 (+35)1,200 (+530)1,200 (+400)
GET/api/v3/advisory?limit=10&sort=ingested:desc&total=true13 (-7)63 (+31)74 (+28)79 (+11)92 (-1,808)2,200 (-1,300)
GET/api/v3/advisory?offset=100&limit=10&total=true72 (+30)87 (+30)94 (+11)100 (-10)110 (-150)2,900 (+200)
GET/api/v3/advisory?offset={offset}&limit=1230 (+10)340 (+40)480 (+20)600 (+100)730 (+100)730 (+90)
GET/api/v3/advisory?q=CVE-2021-&total=true190 (+10)310 (-80)1,300 (-200)1,700 (-500)2,200 (-1,100)3,400 (-600)
GET/api/v3/advisory?q=identifier=CVE-2022-0981&total=true47 (-4)74 (+18)110 (+44)110 (+37)120 (+10)130 (-50)
GET/api/v3/advisory?q=modified>3 days ago&total=true8 (-5)47 (+28)67 (+38)71 (+31)76 (-24)95 (-85)
GET/api/v3/advisory?q=title~openssl&total=true22 (-17)74 (+19)84 (+6)94 (-26)420 (+170)760 (+460)
GET/api/v3/advisory?sort=modified:desc&total=true16 (-10)64 (+26)77 (+14)83 (-8)180 (-1,820)2,800 (+100)
GET/api/v3/advisory?total=true99 (+23)110 (+12)170 (+50)180 (+10)210 (-70)3,200 (+600)
vulnerability 7
POST/api/v3/vulnerability/analyze1,100 (-200)1,500 (-600)2,500 (-200)3,100 (+100)3,900 (+100)5,400 (-200)
GET/api/v3/vulnerability?offset=100&limit=10&total=true45 (-4)47 (-6)94 (+33)110 (+38)610 (+130)930 (+280)
GET/api/v3/vulnerability?q=base_score>=7.0&total=true8 (-5)14 (-5)68 (+32)78 (-42)520 (+70)1,100 (+600)
GET/api/v3/vulnerability?q=base_severity=high&total=true8 (-6)25 (+4)67 (+32)79 (-21)570 (+120)1,300 (-200)
GET/api/v3/vulnerability?q=cwes=CWE-79&total=true8 (-5)12 (-8)63 (+29)74 (-46)760 (+360)1,300 (+380)
GET/api/v3/vulnerability?sort=base_score:desc&total=true520 (-120)670 (-40)870 (+50)1,100 (+100)1,900 (+400)2,300 (+600)
GET/api/v3/vulnerability?total=true7 (-5)10 (-7)61 (+40)70 (+37)75 (-305)710 (-250)
purl 15
GET/api/v3/purl/base/{purl}63 (+38)180 (+141)270 (+208)280 (+198)370 (+170)430 (+200)
GET/api/v3/purl/base?q=namespace=redhat&total=true47 (-1)94 (+42)100 (+36)130 (+54)650 (+420)800 (+540)
GET/api/v3/purl/base?q=type=rpm&total=true46 (-1)80 (+28)98 (+34)110 (+36)140 (+49)140 (0)
GET/api/v3/purl/base?sort=name:asc&total=true210 (-20)240 (-40)310 (-20)320 (-60)350 (-100)400 (-70)
GET/api/v3/purl/base?total=true46 (-2)87 (+34)100 (+37)100 (+27)150 (+30)210 (0)
POST/api/v3/purl/recommend1,000 (+720)1,200 (+850)1,300 (+890)1,400 (+940)1,600 (+1,070)1,900 (+1,270)
GET/api/v3/purl/{purl_id}87 (-12)110 (-20)160 (-10)180 (-30)210 (-170)280 (-150)
GET/api/v3/purl?offset=100&limit=10&total=true47 (0)89 (+37)100 (+41)120 (+50)560 (-1,940)740 (-3,760)
GET/api/v3/purl?q=curl&total=true36 (+9)65 (+26)92 (+35)890 (+806)1,100 (+170)1,400 (+200)
GET/api/v3/purl?q=license~GPLv3+...&sort=name:desc&total=true21 (-3)55 (+18)67 (+15)71 (+8)100 (-10)160 (-30)
GET/api/v3/purl?q=name=curl&total=true10 (0)50 (+36)77 (+51)140 (+105)270 (+184)290 (+180)
GET/api/v3/purl?q=purl:namespace=redhat&total=true9 (-1)55 (+40)70 (+37)2,000 (+1,948)2,800 (-200)3,500 (-500)
GET/api/v3/purl?q=purl:ty=rpm&total=true10 (-1)51 (+37)64 (+41)2,400 (+2,362)2,900 (0)3,500 (+300)
GET/api/v3/purl?sort=purl:name:asc&total=true31 (+20)59 (+45)72 (+48)81 (+44)740 (-2,460)850 (-4,150)
GET/api/v3/purl?total=true8 (-2)45 (+31)60 (+37)63 (+28)430 (-2,570)650 (-3,250)
license 9
GET/api/v3/license/spdx/license/{license_id}43 (-2)43 (-4)45 (-5)46 (-11)69 (-17)110 (-60)
GET/api/v3/license/spdx/license?q=apache&total=true2 (-2)4 (-2)5 (-3)6 (-4)27 (-25)75 (-175)
GET/api/v3/license/spdx/license?q=gpl&total=true43 (-2)44 (-3)45 (-5)46 (-10)77 (-53)120 (-100)
GET/api/v3/license/spdx/license?total=true43 (-2)43 (-3)45 (-4)47 (-7)74 (-10)120 (-40)
GET/api/v3/license?limit=10&sort=license:asc&total=true22 (-13)59 (+11)75 (+12)81 (+1)95 (-55)170 (-350)
GET/api/v3/license?q=ASL&sort=license:desc&total=true17 (-7)54 (+20)70 (+23)77 (+19)88 (-32)190 (-170)
GET/api/v3/license?q=license~Apache&total=true12 (-4)49 (+25)65 (+30)73 (+30)88 (-4)170 (-50)
GET/api/v3/license?q=license~GPL&total=true12 (-4)49 (+26)65 (+32)73 (+31)89 (+1)170 (-20)
GET/api/v3/license?total=true57 (-9)94 (+12)110 (+11)120 (+10)140 (-40)200 (-190)
analysis 3
GET/api/v3/analysis/component/{component}5 (-3)6 (-5)61 (+45)68 (+42)75 (+32)100 (-100)
GET/api/v3/analysis/latest/component/{cpe}5 (-3)7 (-4)62 (+46)68 (+42)75 (+32)100 (-30)
GET/api/v3/analysis/status4 (-3)6 (-4)61 (+45)68 (+42)75 (+33)100 (-60)
importer 1
GET/api/v3/importer?total=true3 (-2)5 (-2)50 (+40)65 (+49)73 (+36)110 (-120)
group 3
GET/api/v3/group/sbom?parents=resolve&total=true4 (-3)6 (-4)61 (+45)68 (+43)74 (+31)100 (-60)
GET/api/v3/group/sbom?total=true4 (-3)6 (-4)60 (+44)68 (+42)75 (+33)100 (-50)
GET/api/v3/group/sbom?totals=true&total=true4 (-3)6 (-4)60 (+44)68 (+43)74 (+32)120 (-100)
labels 3
GET/api/v3/advisory-labels?filter_text=type&limit=10005,900 (-1,300)6,200 (-1,400)6,400 (-1,900)6,700 (-1,900)7,000 (-2,800)7,000 (-2,800)
GET/api/v3/sbom-labels?limit=10&filter_text=&total=true51 (-9)92 (+16)110 (+13)110 (+10)120 (-10)120 (-10)
GET/api/v3/sbom-labels?total=true52 (-7)89 (+17)120 (+36)120 (+31)120 (-10)200 (+70)
other 2
GET/.well-known/trustify42 (+39)43 (+39)44 (+39)45 (+39)53 (+42)74 (-36)
POST/api/v3/ui/extract-sbom-purls1 (-2)3 (-2)5 (-2)6 (-2)8 (-6)43 (-67)

Failures

No failures recorded.

Exceptions

No exceptions raised in the locustfile.