← All runs

Trustify PR perf tests · 2026-10-23 20:57 UTC

Target trustify (scale snapshot) · 2026-10-23 20:57:47 UTC → 21:07:45 UTC · Users 10 · Deltas vs previous run (2026-10-23 18:29 UTC, pr_2791_2026-10-23T17-39-02_42725dd)

Type pull-request · Dataset scale-20260317T023702Z · Scenario etc/scenarios/main/full-20260317T023702Z.json5 · Branch tc-7105 · Commit 949b76d22394 · PR #2791 · Workflow run

Duration
9m 58s
Total requests
193,371 (-7,269)
Failure rate
0.0%
0 failed requests
Throughput
322.8 req/s (-12.0)
Latency 95%ile
72 ms (+1)
Latency 99%ile
200 ms (0)
Endpoints
72
0 with failures

Over time

Throughput

Requests and failures per second

Response time

Percentiles over Locust's rolling window, ms

Users

Concurrent simulated users

Load plan

ActionStartedStoppedElapsedUsers
Increasing20:57:4720:57:510m 04s2 → 10
Maintaining20:57:5121:07:459m 54s10 → 10

Top 10 slowest endpoints (95%ile)

#MethodName95%ile (ms)Average (ms)# Requests
1GET/api/v3/advisory-labels?filter_text=type&limit=10006,8005,96895
2POST/api/v3/vulnerability/analyze3,4001,044397
3GET/api/v3/sbom/{sbom_id}/download3,2003,052109
4GET/api/v3/purl?q=purl:ty=rpm&total=true2,500202146
5GET/api/v3/advisory?q=CVE-2021-&total=true1,900408553
6GET/api/v3/purl?q=purl:namespace=redhat&total=true1,700184144
7POST/api/v3/purl/recommend1,400881468
8GET/api/v3/sbom?q=name~redhat&total=true1,40061391
9GET/api/v3/vulnerability?sort=base_score:desc&total=true1,400711187
10GET/api/v3/sbom?sort=ingested:desc&total=true88037975

Request metrics

MethodName# Requests# FailsFail %Average (ms)Min (ms)Max (ms)Avg size (B)RPSFailures/s
sbom 16
GET/api/v3/sbom/by-package?purl={purl}85 (-15)0 (0)0%111 (+1.3)51.82991,2870.14 (0)0
GET/api/v3/sbom/count-by-package86 (-25)0 (0)0%35.1 (+1.7)4.1382.530.14 (0)0
GET/api/v3/sbom/{sbom_id}79 (-18)0 (0)0%131 (+3.4)52.32272,0150.13 (0)0
GET/api/v3/sbom/{sbom_id}/all-license-ids84 (-16)0 (0)0%24.1 (-3.5)2.0379.420.14 (0)0
GET/api/v3/sbom/{sbom_id}/download109 (+3)0 (0)0%3,052 (-27.5)2,8833,548136,458,6380.18 (0)0
GET/api/v3/sbom/{sbom_id}/license-export90 (+6)0 (0)0%31.1 (-4.5)4.5198.42340.15 (0)0
GET/api/v3/sbom/{sbom_id}/packages79 (-13)0 (0)0%192 (+33.0)19.864212,6480.13 (0)0
GET/api/v3/sbom/{sbom_id}/related85 (-8)0 (0)0%152 (+14.8)17.865115,3720.14 (0)0
GET/api/v3/sbom?limit=10&sort=name:asc&total=true77 (-11)0 (0)0%319 (+47.8)48.11,09512,1890.13 (0)0
GET/api/v3/sbom?offset=100&limit=10&total=true150 (-30)0 (0)0%235 (+7.0)26.21,09011,9410.25 (0)0
GET/api/v3/sbom?q=label:type=product&total=true77 (-3)0 (0)0%25.2 (+2.1)2.0395.0220.13 (0)0
GET/api/v3/sbom?q=license~GPL&sort=name:desc&total=true72 (-21)0 (0)0%22.5 (-4.6)2.9076.8220.12 (0)0
GET/api/v3/sbom?q=name~redhat&total=true91 (-6)0 (0)0%613 (+139.8)10.71,481220.15 (0)0
GET/api/v3/sbom?q=published>2024-01-01&total=true89 (+7)0 (0)0%204 (+4.1)33.289929,3170.15 (0)0
GET/api/v3/sbom?sort=ingested:desc&total=true75 (-31)0 (0)0%379 (+94.8)30.898729,6000.13 (-0.1)0
GET/api/v3/sbom?total=true159 (-25)0 (0)0%186 (+16.5)31.488929,3170.27 (0)0
advisory 13
GET/api/v3/advisory/urn:uuid:{advisory_id}592 (-56)0 (0)0%60.0 (+1.1)3.331362,3950.99 (-0.1)0
GET/api/v3/advisory/urn:uuid:{advisory_id}/download572 (-53)0 (0)0%28.2 (+0.8)4.89134178,4230.95 (-0.1)0
GET/api/v3/advisory?deprecated=Consider&total=true595 (+15)0 (0)0%79.1 (+7.7)7.503,79944,0030.99 (0)0
GET/api/v3/advisory?limit=1&total=true78 (-11)0 (0)0%88.1 (+17.2)44.71,2632,2140.13 (0)0
GET/api/v3/advisory?limit=10&sort=ingested:desc&total=true557 (+2)0 (0)0%67.6 (+31.7)4.782,66320,1930.93 (0)0
GET/api/v3/advisory?offset=100&limit=10&total=true579 (-41)0 (0)0%82.9 (+15.0)5.252,82219,2890.97 (-0.1)0
GET/api/v3/advisory?offset={offset}&limit=178 (-11)0 (0)0%290 (+19.7)63.69132,2020.13 (0)0
GET/api/v3/advisory?q=CVE-2021-&total=true553 (-100)0 (0)0%408 (+18.9)19.22,77650,1300.92 (-0.2)0
GET/api/v3/advisory?q=identifier=CVE-2022-0981&total=true578 (-30)0 (0)0%60.8 (+2.7)4.291341,9710.96 (0)0
GET/api/v3/advisory?q=modified>3 days ago&total=true577 (-13)0 (0)0%21.9 (-1.3)2.2498.7220.96 (0)0
GET/api/v3/advisory?q=title~openssl&total=true562 (-72)0 (0)0%44.2 (-5.1)9.19503126,4520.94 (-0.1)0
GET/api/v3/advisory?sort=modified:desc&total=true619 (+22)0 (0)0%68.4 (+20.9)5.773,03338,1281.03 (0)0
GET/api/v3/advisory?total=true558 (-83)0 (0)0%122 (+10.1)7.572,77047,3190.93 (-0.1)0
vulnerability 7
POST/api/v3/vulnerability/analyze397 (-24)0 (0)0%1,044 (+72.6)1.524,5954,984,9890.66 (0)0
GET/api/v3/vulnerability?offset=100&limit=10&total=true206 (-12)0 (0)0%57.8 (-0.4)3.367307,6160.34 (0)0
GET/api/v3/vulnerability?q=base_score>=7.0&total=true181 (-32)0 (0)0%43.8 (+5.2)2.891,22418,7090.30 (-0.1)0
GET/api/v3/vulnerability?q=base_severity=high&total=true198 (-24)0 (0)0%51.0 (+9.9)2.591,61818,5790.33 (0)0
GET/api/v3/vulnerability?q=cwes=CWE-79&total=true207 (-29)0 (0)0%43.6 (+7.8)2.3692319,0020.35 (0)0
GET/api/v3/vulnerability?sort=base_score:desc&total=true187 (-54)0 (0)0%711 (+114.6)1972,28114,7360.31 (-0.1)0
GET/api/v3/vulnerability?total=true195 (-30)0 (0)0%36.4 (+17.4)3.1489718,8170.33 (0)0
purl 15
GET/api/v3/purl/base/{purl}146 (-4)0 (0)0%76.1 (-23.3)5.2937948,8270.24 (0)0
GET/api/v3/purl/base?q=namespace=redhat&total=true136 (+11)0 (0)0%74.4 (-7.3)4.328422,0800.23 (0)0
GET/api/v3/purl/base?q=type=rpm&total=true164 (+2)0 (0)0%58.5 (+0.9)2.451202,0800.27 (0)0
GET/api/v3/purl/base?sort=name:asc&total=true164 (+19)0 (0)0%196 (-15.5)37.85072,9430.27 (0)0
GET/api/v3/purl/base?total=true136 (+5)0 (0)0%59.7 (-1.4)3.772952,4500.23 (0)0
POST/api/v3/purl/recommend468 (+30)0 (0)0%881 (-65.7)1441,8932,7470.78 (+0.1)0
GET/api/v3/purl/{purl_id}144 (+3)0 (0)0%83.3 (-8.3)17.32965370.24 (0)0
GET/api/v3/purl?offset=100&limit=10&total=true124 (-8)0 (0)0%78.8 (+4.7)4.557874,4740.21 (0)0
GET/api/v3/purl?q=curl&total=true134 (-26)0 (0)0%82.8 (-10.4)5.821,04411,7140.22 (0)0
GET/api/v3/purl?q=license~GPLv3+...&sort=name:desc&total=true155 (+18)0 (0)0%30.9 (-2.7)4.2499.9220.26 (0)0
GET/api/v3/purl?q=name=curl&total=true159 (+15)0 (0)0%32.8 (-1.0)2.1828812,0840.27 (0)0
GET/api/v3/purl?q=purl:namespace=redhat&total=true144 (+9)0 (0)0%184 (+6.2)2.113,58913,6170.24 (0)0
GET/api/v3/purl?q=purl:ty=rpm&total=true146 (+20)0 (0)0%202 (-7.7)1.884,08213,6170.24 (0)0
GET/api/v3/purl?sort=purl:name:asc&total=true152 (+23)0 (0)0%47.1 (-4.0)2.0358211,1010.25 (0)0
GET/api/v3/purl?total=true166 (+26)0 (0)0%38.9 (+10.2)1.635359,8770.28 (0)0
license 9
GET/api/v3/license/spdx/license/{license_id}1,792 (-53)0 (0)0%41.6 (+0.3)1.0569.31,1432.99 (-0.1)0
GET/api/v3/license/spdx/license?q=apache&total=true1,873 (+30)0 (0)0%2.79 (-0.5)0.9529.01653.13 (+0.1)0
GET/api/v3/license/spdx/license?q=gpl&total=true1,817 (-47)0 (0)0%42.0 (-0.1)1.2082.01,9813.03 (-0.1)0
GET/api/v3/license/spdx/license?total=true1,845 (+36)0 (0)0%41.5 (-0.4)0.9772.11,5253.08 (+0.1)0
GET/api/v3/license?limit=10&sort=license:asc&total=true1,846 (+34)0 (0)0%36.6 (+0.9)5.971144253.08 (+0.1)0
GET/api/v3/license?q=ASL&sort=license:desc&total=true1,796 (-33)0 (0)0%30.9 (-0.8)3.08149223.00 (-0.1)0
GET/api/v3/license?q=license~Apache&total=true1,831 (-28)0 (0)0%26.0 (-1.4)2.4497.01203.06 (0)0
GET/api/v3/license?q=license~GPL&total=true1,848 (+20)0 (0)0%26.3 (-1.0)2.28104923.09 (0)0
GET/api/v3/license?total=true1,831 (+45)0 (0)0%72.7 (+2.4)8.412041,1013.06 (+0.1)0
analysis 3
GET/api/v3/analysis/component/{component}13,896 (-1,036)0 (0)0%14.2 (+1.6)1.301752523.20 (-1.7)0
GET/api/v3/analysis/latest/component/{cpe}13,420 (-1,332)0 (0)0%14.1 (+0.8)1.351692522.40 (-2.2)0
GET/api/v3/analysis/status13,743 (-858)0 (0)0%13.3 (+0.6)1.2516810322.94 (-1.4)0
importer 1
GET/api/v3/importer?total=true50,552 (-4,368)0 (0)0%11.0 (+0.9)1.02183284.40 (-7.2)0
group 3
GET/api/v3/group/sbom?parents=resolve&total=true15,278 (+322)0 (0)0%12.1 (-0.4)1.191073825.51 (+0.6)0
GET/api/v3/group/sbom?total=true15,396 (+190)0 (0)0%12.2 (-0.1)1.201052225.70 (+0.3)0
GET/api/v3/group/sbom?totals=true&total=true15,591 (+218)0 (0)0%12.2 (-0.1)1.231002226.03 (+0.4)0
labels 3
GET/api/v3/advisory-labels?filter_text=type&limit=100095 (-1)0 (0)0%5,968 (+89.2)5,0327,164600.16 (0)0
GET/api/v3/sbom-labels?limit=10&filter_text=&total=true85 (-13)0 (0)0%66.7 (-0.3)7.861271,0650.14 (0)0
GET/api/v3/sbom-labels?total=true68 (-33)0 (0)0%68.4 (-1.7)6.941261,0650.11 (-0.1)0
other 2
GET/.well-known/trustify13,325 (+84)0 (0)0%41.4 (-0.3)0.8479.21,17322.25 (+0.2)0
POST/api/v3/ui/extract-sbom-purls13,349 (+253)0 (0)0%2.37 (-0.1)0.8959.74522.29 (+0.4)0

Response time metrics (ms)

MethodName50%ile75%ile90%ile95%ile99%ile100%ile
sbom 16
GET/api/v3/sbom/by-package?purl={purl}120 (0)130 (0)150 (+10)190 (0)300 (+70)300 (+70)
GET/api/v3/sbom/count-by-package37 (+19)57 (-8)72 (-5)77 (-1)82 (+1)82 (+1)
GET/api/v3/sbom/{sbom_id}140 (+10)150 (+10)210 (+20)220 (0)230 (-100)230 (-100)
GET/api/v3/sbom/{sbom_id}/all-license-ids8 (-1)46 (-7)70 (+1)76 (+4)79 (-6)79 (-6)
GET/api/v3/sbom/{sbom_id}/download3,000 (-100)3,100 (0)3,100 (-100)3,200 (0)3,200 (-100)3,500 (0)
GET/api/v3/sbom/{sbom_id}/license-export14 (-6)56 (-8)76 (0)79 (0)98 (+8)98 (+8)
GET/api/v3/sbom/{sbom_id}/packages200 (+70)280 (+50)340 (+40)390 (+30)640 (+190)640 (+190)
GET/api/v3/sbom/{sbom_id}/related130 (+20)200 (+10)240 (-10)290 (0)650 (+340)650 (+340)
GET/api/v3/sbom?limit=10&sort=name:asc&total=true250 (+20)410 (+30)590 (+120)830 (+260)1,100 (+380)1,100 (+380)
GET/api/v3/sbom?offset=100&limit=10&total=true170 (-10)320 (0)490 (+40)550 (+10)810 (-170)1,100 (+100)
GET/api/v3/sbom?q=label:type=product&total=true9 (+1)48 (+6)70 (+4)75 (+1)95 (+17)95 (+17)
GET/api/v3/sbom?q=license~GPL&sort=name:desc&total=true9 (-1)41 (-10)68 (-1)77 (+2)77 (-5)77 (-5)
GET/api/v3/sbom?q=name~redhat&total=true650 (+561)1,100 (0)1,200 (-100)1,400 (0)1,500 (0)1,500 (0)
GET/api/v3/sbom?q=published>2024-01-01&total=true150 (-10)220 (-70)450 (+40)600 (+100)900 (+60)900 (+60)
GET/api/v3/sbom?sort=ingested:desc&total=true360 (+130)520 (+100)720 (+210)880 (+340)990 (+360)990 (-10)
GET/api/v3/sbom?total=true150 (+30)220 (+30)380 (+30)410 (0)500 (-80)890 (+120)
advisory 13
GET/api/v3/advisory/urn:uuid:{advisory_id}47 (0)81 (+4)110 (0)110 (0)120 (0)140 (+10)
GET/api/v3/advisory/urn:uuid:{advisory_id}/download14 (+1)47 (0)73 (+3)78 (+3)89 (+7)130 (+32)
GET/api/v3/advisory?deprecated=Consider&total=true16 (-1)68 (+1)79 (0)88 (-2)2,400 (+400)3,800 (+800)
GET/api/v3/advisory?limit=1&total=true51 (+1)80 (+18)100 (+12)110 (0)1,300 (+100)1,300 (+100)
GET/api/v3/advisory?limit=10&sort=ingested:desc&total=true12 (-1)61 (-2)75 (+1)82 (+3)2,100 (+2,008)2,700 (+500)
GET/api/v3/advisory?offset=100&limit=10&total=true70 (-2)87 (0)94 (0)99 (-1)1,900 (+1,790)2,800 (-100)
GET/api/v3/advisory?offset={offset}&limit=1230 (0)410 (+70)520 (+40)610 (+10)910 (+180)910 (+180)
GET/api/v3/advisory?q=CVE-2021-&total=true190 (0)320 (+10)1,500 (+200)1,900 (+200)2,400 (+200)2,800 (-600)
GET/api/v3/advisory?q=identifier=CVE-2022-0981&total=true48 (+1)78 (+4)110 (0)110 (0)120 (0)130 (0)
GET/api/v3/advisory?q=modified>3 days ago&total=true8 (0)40 (-7)64 (-3)71 (0)77 (+1)99 (+4)
GET/api/v3/advisory?q=title~openssl&total=true22 (0)72 (-2)82 (-2)90 (-4)180 (-240)500 (-260)
GET/api/v3/advisory?sort=modified:desc&total=true16 (0)65 (+1)77 (0)87 (+4)2,000 (+1,820)3,000 (+200)
GET/api/v3/advisory?total=true100 (+1)120 (+10)170 (0)180 (0)460 (+250)2,800 (-400)
vulnerability 7
POST/api/v3/vulnerability/analyze1,100 (0)1,600 (+100)2,600 (+100)3,400 (+300)4,200 (+300)4,600 (-800)
GET/api/v3/vulnerability?offset=100&limit=10&total=true46 (+1)51 (+4)97 (+3)100 (-10)450 (-160)730 (-200)
GET/api/v3/vulnerability?q=base_score>=7.0&total=true8 (0)33 (+19)67 (-1)82 (+4)890 (+370)1,200 (+100)
GET/api/v3/vulnerability?q=base_severity=high&total=true8 (0)50 (+25)71 (+4)91 (+12)1,300 (+730)1,600 (+300)
GET/api/v3/vulnerability?q=cwes=CWE-79&total=true8 (0)35 (+23)67 (+4)86 (+12)880 (+120)920 (-380)
GET/api/v3/vulnerability?sort=base_score:desc&total=true570 (+50)890 (+220)1,300 (+430)1,400 (+300)2,200 (+300)2,300 (0)
GET/api/v3/vulnerability?total=true8 (+1)13 (+3)64 (+3)69 (-1)810 (+735)900 (+190)
purl 15
GET/api/v3/purl/base/{purl}38 (-25)93 (-87)220 (-50)300 (+20)360 (-10)380 (-50)
GET/api/v3/purl/base?q=namespace=redhat&total=true46 (-1)85 (-9)99 (-1)120 (-10)550 (-100)840 (+40)
GET/api/v3/purl/base?q=type=rpm&total=true47 (+1)80 (0)98 (0)100 (-10)120 (-20)120 (-20)
GET/api/v3/purl/base?sort=name:asc&total=true190 (-20)240 (0)290 (-20)320 (0)430 (+80)510 (+110)
GET/api/v3/purl/base?total=true46 (0)82 (-5)100 (0)110 (+10)130 (-20)290 (+80)
POST/api/v3/purl/recommend980 (-20)1,100 (-100)1,300 (0)1,400 (0)1,600 (0)1,900 (0)
GET/api/v3/purl/{purl_id}81 (-6)97 (-13)150 (-10)170 (-10)220 (+10)300 (+20)
GET/api/v3/purl?offset=100&limit=10&total=true46 (-1)78 (-11)99 (-1)110 (-10)730 (+170)790 (+50)
GET/api/v3/purl?q=curl&total=true27 (-9)64 (-1)86 (-6)690 (-200)1,000 (-100)1,000 (-400)
GET/api/v3/purl?q=license~GPLv3+...&sort=name:desc&total=true20 (-1)52 (-3)64 (-3)69 (-2)88 (-12)100 (-60)
GET/api/v3/purl?q=name=curl&total=true14 (+4)48 (-2)62 (-15)80 (-60)280 (+10)290 (0)
GET/api/v3/purl?q=purl:namespace=redhat&total=true8 (-1)44 (-11)68 (-2)1,700 (-300)3,500 (+700)3,600 (+100)
GET/api/v3/purl?q=purl:ty=rpm&total=true11 (+1)49 (-2)68 (+4)2,500 (+100)3,500 (+600)4,100 (+600)
GET/api/v3/purl?sort=purl:name:asc&total=true12 (-19)48 (-11)67 (-5)270 (+189)580 (-160)580 (-270)
GET/api/v3/purl?total=true10 (+2)53 (+8)63 (+3)69 (+6)500 (+70)530 (-120)
license 9
GET/api/v3/license/spdx/license/{license_id}43 (0)43 (0)44 (-1)45 (-1)56 (-13)69 (-41)
GET/api/v3/license/spdx/license?q=apache&total=true2 (0)4 (0)5 (0)6 (0)9 (-18)29 (-46)
GET/api/v3/license/spdx/license?q=gpl&total=true43 (0)44 (0)45 (0)46 (0)55 (-22)82 (-38)
GET/api/v3/license/spdx/license?total=true43 (0)43 (0)44 (-1)45 (-2)53 (-21)72 (-48)
GET/api/v3/license?limit=10&sort=license:asc&total=true28 (+6)59 (0)75 (0)81 (0)92 (-3)110 (-60)
GET/api/v3/license?q=ASL&sort=license:desc&total=true16 (-1)54 (0)70 (0)76 (-1)83 (-5)150 (-40)
GET/api/v3/license?q=license~Apache&total=true11 (-1)48 (-1)62 (-3)71 (-2)78 (-10)97 (-73)
GET/api/v3/license?q=license~GPL&total=true11 (-1)49 (0)61 (-4)71 (-2)79 (-10)100 (-70)
GET/api/v3/license?total=true61 (+4)96 (+2)110 (0)120 (0)130 (-10)200 (0)
analysis 3
GET/api/v3/analysis/component/{component}5 (0)7 (+1)64 (+3)70 (+2)78 (+3)170 (+70)
GET/api/v3/analysis/latest/component/{cpe}5 (0)7 (0)64 (+2)70 (+2)78 (+3)170 (+70)
GET/api/v3/analysis/status5 (+1)7 (+1)62 (+1)69 (+1)78 (+3)170 (+70)
importer 1
GET/api/v3/importer?total=true4 (+1)5 (0)57 (+7)67 (+2)75 (+2)180 (+70)
group 3
GET/api/v3/group/sbom?parents=resolve&total=true4 (0)6 (0)60 (-1)68 (0)75 (+1)110 (+10)
GET/api/v3/group/sbom?total=true4 (0)6 (0)60 (0)68 (0)75 (0)100 (0)
GET/api/v3/group/sbom?totals=true&total=true4 (0)6 (0)60 (0)68 (0)75 (+1)100 (-20)
labels 3
GET/api/v3/advisory-labels?filter_text=type&limit=10006,000 (+100)6,200 (0)6,700 (+300)6,800 (+100)7,200 (+200)7,200 (+200)
GET/api/v3/sbom-labels?limit=10&filter_text=&total=true52 (+1)88 (-4)110 (0)120 (+10)130 (+10)130 (+10)
GET/api/v3/sbom-labels?total=true52 (0)92 (+3)120 (0)120 (0)130 (+10)130 (-70)
other 2
GET/.well-known/trustify42 (0)43 (0)44 (0)45 (0)55 (+2)79 (+5)
POST/api/v3/ui/extract-sbom-purls1 (0)3 (0)5 (0)6 (0)8 (0)60 (+17)

Failures

No failures recorded.

Exceptions

No exceptions raised in the locustfile.