← All runs

Trustify PR perf tests · 2026-10-24 15:00 UTC

Target trustify (scale snapshot) · 2026-10-24 15:00:21 UTC → 15:10:19 UTC · Users 10 · Deltas vs previous run (2026-10-23 20:57 UTC, pr_2791_2026-10-23T20-07-36_949b76d)

Type pull-request · Dataset scale-20260317T023702Z · Scenario etc/scenarios/main/full-20260317T023702Z.json5 · Branch tc-7105 · Commit 24a70e78048c · PR #2791 · Workflow run

Duration
9m 58s
Total requests
192,916 (-455)
Failure rate
0.0%
0 failed requests
Throughput
321.9 req/s (-0.9)
Latency 95%ile
73 ms (+1)
Latency 99%ile
210 ms (+10)
Endpoints
72
0 with failures

Over time

Throughput

Requests and failures per second

Response time

Percentiles over Locust's rolling window, ms

Users

Concurrent simulated users

Load plan

ActionStartedStoppedElapsedUsers
Increasing15:00:2115:00:250m 04s2 → 10
Maintaining15:00:2515:10:199m 54s10 → 10

Top 10 slowest endpoints (95%ile)

#MethodName95%ile (ms)Average (ms)# Requests
1GET/api/v3/advisory-labels?filter_text=type&limit=10006,6005,82395
2POST/api/v3/vulnerability/analyze3,200936440
3GET/api/v3/sbom/{sbom_id}/download3,1003,023107
4GET/api/v3/advisory?q=CVE-2021-&total=true1,800392588
5GET/api/v3/purl?q=purl:ty=rpm&total=true1,800165151
6GET/api/v3/purl?q=purl:namespace=redhat&total=true1,600169151
7POST/api/v3/purl/recommend1,500885459
8GET/api/v3/sbom?q=name~redhat&total=true1,30052696
9GET/api/v3/vulnerability?sort=base_score:desc&total=true1,300600226
10GET/api/v3/purl?q=curl&total=true76084.3156

Request metrics

MethodName# Requests# FailsFail %Average (ms)Min (ms)Max (ms)Avg size (B)RPSFailures/s
sbom 16
GET/api/v3/sbom/by-package?purl={purl}96 (+11)0 (0)0%102 (-8.7)23.42311,2870.16 (0)0
GET/api/v3/sbom/count-by-package102 (+16)0 (0)0%33.2 (-1.9)3.5892.130.17 (0)0
GET/api/v3/sbom/{sbom_id}89 (+10)0 (0)0%134 (+2.3)59.42302,0150.15 (0)0
GET/api/v3/sbom/{sbom_id}/all-license-ids92 (+8)0 (0)0%23.8 (-0.2)2.5787.620.15 (0)0
GET/api/v3/sbom/{sbom_id}/download107 (-2)0 (0)0%3,023 (-29.3)2,8153,362136,458,6380.18 (0)0
GET/api/v3/sbom/{sbom_id}/license-export88 (-2)0 (0)0%32.7 (+1.6)6.421032340.15 (0)0
GET/api/v3/sbom/{sbom_id}/packages96 (+17)0 (0)0%153 (-39.1)15.840112,6480.16 (0)0
GET/api/v3/sbom/{sbom_id}/related84 (-1)0 (0)0%144 (-7.4)19.330815,3720.14 (0)0
GET/api/v3/sbom?limit=10&sort=name:asc&total=true110 (+33)0 (0)0%245 (-73.7)34.990912,1890.18 (+0.1)0
GET/api/v3/sbom?offset=100&limit=10&total=true212 (+62)0 (0)0%206 (-29.2)28.580011,9410.35 (+0.1)0
GET/api/v3/sbom?q=label:type=product&total=true67 (-10)0 (0)0%26.0 (+0.8)2.5079.1220.11 (0)0
GET/api/v3/sbom?q=license~GPL&sort=name:desc&total=true82 (+10)0 (0)0%31.0 (+8.4)2.6583.7220.14 (0)0
GET/api/v3/sbom?q=name~redhat&total=true96 (+5)0 (0)0%526 (-86.5)9.421,486220.16 (0)0
GET/api/v3/sbom?q=published>2024-01-01&total=true76 (-13)0 (0)0%205 (+0.7)30.189429,3170.13 (0)0
GET/api/v3/sbom?sort=ingested:desc&total=true108 (+33)0 (0)0%278 (-100.8)34.21,17729,6000.18 (+0.1)0
GET/api/v3/sbom?total=true177 (+18)0 (0)0%179 (-7.4)27.181229,3170.30 (0)0
advisory 13
GET/api/v3/advisory/urn:uuid:{advisory_id}589 (-3)0 (0)0%59.8 (-0.3)4.091262,3950.98 (0)0
GET/api/v3/advisory/urn:uuid:{advisory_id}/download621 (+49)0 (0)0%27.8 (-0.4)4.65105178,4231.04 (+0.1)0
GET/api/v3/advisory?deprecated=Consider&total=true600 (+5)0 (0)0%70.7 (-8.4)6.012,70744,0031.00 (0)0
GET/api/v3/advisory?limit=1&total=true130 (+52)0 (0)0%74.8 (-13.4)8.249452,2710.22 (+0.1)0
GET/api/v3/advisory?limit=10&sort=ingested:desc&total=true567 (+10)0 (0)0%63.3 (-4.2)4.152,65420,1930.95 (0)0
GET/api/v3/advisory?offset=100&limit=10&total=true632 (+53)0 (0)0%81.3 (-1.5)6.032,66819,9031.05 (+0.1)0
GET/api/v3/advisory?offset={offset}&limit=1130 (+52)0 (0)0%251 (-39.6)50.61,0031,8910.22 (+0.1)0
GET/api/v3/advisory?q=CVE-2021-&total=true588 (+35)0 (0)0%392 (-16.6)16.33,21349,8750.98 (+0.1)0
GET/api/v3/advisory?q=identifier=CVE-2022-0981&total=true586 (+8)0 (0)0%60.1 (-0.7)4.051381,9710.98 (0)0
GET/api/v3/advisory?q=modified>3 days ago&total=true588 (+11)0 (0)0%21.7 (-0.2)2.2585.9220.98 (0)0
GET/api/v3/advisory?q=title~openssl&total=true611 (+49)0 (0)0%44.6 (+0.4)7.05306126,4521.02 (+0.1)0
GET/api/v3/advisory?sort=modified:desc&total=true583 (-36)0 (0)0%70.0 (+1.6)6.402,69338,1280.97 (-0.1)0
GET/api/v3/advisory?total=true600 (+42)0 (0)0%108 (-14.3)7.392,32548,0791.00 (+0.1)0
vulnerability 7
POST/api/v3/vulnerability/analyze440 (+43)0 (0)0%936 (-107.9)1.375,1934,436,2170.73 (+0.1)0
GET/api/v3/vulnerability?offset=100&limit=10&total=true226 (+20)0 (0)0%62.8 (+5.0)3.087657,5160.38 (0)0
GET/api/v3/vulnerability?q=base_score>=7.0&total=true220 (+39)0 (0)0%35.4 (-8.4)2.6177418,4470.37 (+0.1)0
GET/api/v3/vulnerability?q=base_severity=high&total=true199 (+1)0 (0)0%48.7 (-2.2)2.491,37818,4670.33 (0)0
GET/api/v3/vulnerability?q=cwes=CWE-79&total=true199 (-8)0 (0)0%49.0 (+5.4)2.321,08018,8810.33 (0)0
GET/api/v3/vulnerability?sort=base_score:desc&total=true226 (+39)0 (0)0%600 (-111.4)1952,26114,0010.38 (+0.1)0
GET/api/v3/vulnerability?total=true212 (+17)0 (0)0%32.2 (-4.3)2.5290418,6700.35 (0)0
purl 15
GET/api/v3/purl/base/{purl}167 (+21)0 (0)0%82.5 (+6.4)4.3439548,8270.28 (0)0
GET/api/v3/purl/base?q=namespace=redhat&total=true161 (+25)0 (0)0%70.7 (-3.8)3.429202,0800.27 (0)0
GET/api/v3/purl/base?q=type=rpm&total=true164 (0)0 (0)0%57.4 (-1.1)3.701332,0800.27 (0)0
GET/api/v3/purl/base?sort=name:asc&total=true149 (-15)0 (0)0%203 (+6.7)63.84282,9430.25 (0)0
GET/api/v3/purl/base?total=true149 (+13)0 (0)0%63.2 (+3.5)5.481992,4500.25 (0)0
POST/api/v3/purl/recommend459 (-9)0 (0)0%885 (+4.3)1301,8892,7470.77 (0)0
GET/api/v3/purl/{purl_id}164 (+20)0 (0)0%85.2 (+2.0)18.42585370.27 (0)0
GET/api/v3/purl?offset=100&limit=10&total=true177 (+53)0 (0)0%71.6 (-7.2)3.976454,4740.30 (+0.1)0
GET/api/v3/purl?q=curl&total=true156 (+22)0 (0)0%84.3 (+1.5)5.851,27211,7140.26 (0)0
GET/api/v3/purl?q=license~GPLv3+...&sort=name:desc&total=true167 (+12)0 (0)0%32.2 (+1.2)5.6082.5220.28 (0)0
GET/api/v3/purl?q=name=curl&total=true151 (-8)0 (0)0%30.5 (-2.3)2.0121112,0840.25 (0)0
GET/api/v3/purl?q=purl:namespace=redhat&total=true151 (+7)0 (0)0%169 (-14.8)2.203,52413,6170.25 (0)0
GET/api/v3/purl?q=purl:ty=rpm&total=true151 (+5)0 (0)0%165 (-36.8)1.833,04513,6170.25 (0)0
GET/api/v3/purl?sort=purl:name:asc&total=true154 (+2)0 (0)0%55.4 (+8.3)1.8967111,1010.26 (0)0
GET/api/v3/purl?total=true167 (+1)0 (0)0%40.8 (+1.9)1.717979,8770.28 (0)0
license 9
GET/api/v3/license/spdx/license/{license_id}1,835 (+43)0 (0)0%41.4 (-0.2)1.0268.41,1433.06 (+0.1)0
GET/api/v3/license/spdx/license?q=apache&total=true1,745 (-128)0 (0)0%2.87 (+0.1)0.9540.71652.91 (-0.2)0
GET/api/v3/license/spdx/license?q=gpl&total=true1,845 (+28)0 (0)0%41.8 (-0.2)1.1769.61,9813.08 (0)0
GET/api/v3/license/spdx/license?total=true1,898 (+53)0 (0)0%41.8 (+0.3)0.9171.51,5253.17 (+0.1)0
GET/api/v3/license?limit=10&sort=license:asc&total=true1,827 (-19)0 (0)0%36.2 (-0.3)6.031174253.05 (0)0
GET/api/v3/license?q=ASL&sort=license:desc&total=true1,809 (+13)0 (0)0%30.8 (-0.1)3.10103223.02 (0)0
GET/api/v3/license?q=license~Apache&total=true1,798 (-33)0 (0)0%27.5 (+1.5)2.3399.31203.00 (-0.1)0
GET/api/v3/license?q=license~GPL&total=true1,837 (-11)0 (0)0%26.3 (0)2.2899.1923.07 (0)0
GET/api/v3/license?total=true1,770 (-61)0 (0)0%72.4 (-0.3)7.792451,1012.95 (-0.1)0
analysis 3
GET/api/v3/analysis/component/{component}13,612 (-284)0 (0)0%14.0 (-0.2)1.321812522.71 (-0.5)0
GET/api/v3/analysis/latest/component/{cpe}13,590 (+170)0 (0)0%14.5 (+0.4)1.371712522.68 (+0.3)0
GET/api/v3/analysis/status13,535 (-208)0 (0)0%13.4 (+0.1)1.1917510322.59 (-0.4)0
importer 1
GET/api/v3/importer?total=true50,094 (-458)0 (0)0%11.1 (+0.1)1.01180283.59 (-0.8)0
group 3
GET/api/v3/group/sbom?parents=resolve&total=true15,205 (-73)0 (0)0%12.4 (+0.3)1.231093825.37 (-0.1)0
GET/api/v3/group/sbom?total=true15,334 (-62)0 (0)0%12.3 (+0.1)1.2095.82225.59 (-0.1)0
GET/api/v3/group/sbom?totals=true&total=true15,371 (-220)0 (0)0%12.1 (0)1.2499.42225.65 (-0.4)0
labels 3
GET/api/v3/advisory-labels?filter_text=type&limit=100095 (0)0 (0)0%5,823 (-144.5)5,0616,739600.16 (0)0
GET/api/v3/sbom-labels?limit=10&filter_text=&total=true94 (+9)0 (0)0%69.0 (+2.3)6.051231,0650.16 (0)0
GET/api/v3/sbom-labels?total=true90 (+22)0 (0)0%67.2 (-1.2)10.01241,0650.15 (0)0
other 2
GET/.well-known/trustify13,268 (-57)0 (0)0%41.6 (+0.2)0.8572.41,17322.14 (-0.1)0
POST/api/v3/ui/extract-sbom-purls13,348 (-1)0 (0)0%2.40 (0)0.8841.54522.27 (0)0

Response time metrics (ms)

MethodName50%ile75%ile90%ile95%ile99%ile100%ile
sbom 16
GET/api/v3/sbom/by-package?purl={purl}110 (-10)130 (0)140 (-10)210 (+20)230 (-70)230 (-70)
GET/api/v3/sbom/count-by-package13 (-24)59 (+2)77 (+5)78 (+1)90 (+8)92 (+10)
GET/api/v3/sbom/{sbom_id}130 (-10)150 (0)210 (0)220 (0)230 (0)230 (0)
GET/api/v3/sbom/{sbom_id}/all-license-ids8 (0)47 (+1)66 (-4)78 (+2)88 (+9)88 (+9)
GET/api/v3/sbom/{sbom_id}/download3,000 (0)3,100 (0)3,100 (0)3,100 (-100)3,200 (0)3,400 (-100)
GET/api/v3/sbom/{sbom_id}/license-export14 (0)66 (+10)80 (+4)82 (+3)100 (+2)100 (+2)
GET/api/v3/sbom/{sbom_id}/packages110 (-90)260 (-20)300 (-40)310 (-80)400 (-240)400 (-240)
GET/api/v3/sbom/{sbom_id}/related120 (-10)200 (0)270 (+30)290 (0)310 (-340)310 (-340)
GET/api/v3/sbom?limit=10&sort=name:asc&total=true200 (-50)320 (-90)430 (-160)490 (-340)890 (-210)910 (-190)
GET/api/v3/sbom?offset=100&limit=10&total=true170 (0)260 (-60)420 (-70)510 (-40)620 (-190)800 (-300)
GET/api/v3/sbom?q=label:type=product&total=true9 (0)52 (+4)68 (-2)70 (-5)79 (-16)79 (-16)
GET/api/v3/sbom?q=license~GPL&sort=name:desc&total=true10 (+1)65 (+24)75 (+7)77 (0)84 (+7)84 (+7)
GET/api/v3/sbom?q=name~redhat&total=true160 (-490)1,100 (0)1,200 (0)1,300 (-100)1,500 (0)1,500 (0)
GET/api/v3/sbom?q=published>2024-01-01&total=true160 (+10)270 (+50)390 (-60)600 (0)890 (-10)890 (-10)
GET/api/v3/sbom?sort=ingested:desc&total=true200 (-160)400 (-120)520 (-200)680 (-200)850 (-140)1,200 (+210)
GET/api/v3/sbom?total=true130 (-20)200 (-20)340 (-40)490 (+80)800 (+300)810 (-80)
advisory 13
GET/api/v3/advisory/urn:uuid:{advisory_id}47 (0)76 (-5)110 (0)110 (0)120 (0)130 (-10)
GET/api/v3/advisory/urn:uuid:{advisory_id}/download14 (0)46 (-1)72 (-1)78 (0)86 (-3)100 (-30)
GET/api/v3/advisory?deprecated=Consider&total=true17 (+1)69 (+1)80 (+1)90 (+2)2,200 (-200)2,700 (-1,100)
GET/api/v3/advisory?limit=1&total=true49 (-2)79 (-1)100 (0)110 (0)400 (-900)940 (-360)
GET/api/v3/advisory?limit=10&sort=ingested:desc&total=true12 (0)59 (-2)77 (+2)83 (+1)1,900 (-200)2,700 (0)
GET/api/v3/advisory?offset=100&limit=10&total=true69 (-1)87 (0)95 (+1)100 (+1)290 (-1,610)2,700 (-100)
GET/api/v3/advisory?offset={offset}&limit=1210 (-20)320 (-90)490 (-30)600 (-10)800 (-110)1,000 (+90)
GET/api/v3/advisory?q=CVE-2021-&total=true190 (0)350 (+30)1,300 (-200)1,800 (-100)2,300 (-100)3,200 (+400)
GET/api/v3/advisory?q=identifier=CVE-2022-0981&total=true47 (-1)78 (0)110 (0)110 (0)120 (0)140 (+10)
GET/api/v3/advisory?q=modified>3 days ago&total=true8 (0)39 (-1)66 (+2)71 (0)79 (+2)86 (-13)
GET/api/v3/advisory?q=title~openssl&total=true25 (+3)73 (+1)84 (+2)92 (+2)180 (0)310 (-190)
GET/api/v3/advisory?sort=modified:desc&total=true15 (-1)65 (0)78 (+1)86 (-1)2,100 (+100)2,700 (-300)
GET/api/v3/advisory?total=true99 (-1)110 (-10)170 (0)180 (0)200 (-260)2,300 (-500)
vulnerability 7
POST/api/v3/vulnerability/analyze67 (-1,033)1,500 (-100)2,600 (0)3,200 (-200)4,000 (-200)5,200 (+600)
GET/api/v3/vulnerability?offset=100&limit=10&total=true46 (0)50 (-1)95 (-2)110 (+10)530 (+80)770 (+40)
GET/api/v3/vulnerability?q=base_score>=7.0&total=true8 (0)15 (-18)62 (-5)76 (-6)590 (-300)770 (-430)
GET/api/v3/vulnerability?q=base_severity=high&total=true8 (0)40 (-10)69 (-2)280 (+189)1,200 (-100)1,400 (-200)
GET/api/v3/vulnerability?q=cwes=CWE-79&total=true9 (+1)45 (+10)75 (+8)280 (+194)870 (-10)1,100 (+180)
GET/api/v3/vulnerability?sort=base_score:desc&total=true500 (-70)690 (-200)990 (-310)1,300 (-100)1,900 (-300)2,300 (0)
GET/api/v3/vulnerability?total=true7 (-1)14 (+1)66 (+2)73 (+4)480 (-330)900 (0)
purl 15
GET/api/v3/purl/base/{purl}58 (+20)150 (+57)210 (-10)230 (-70)390 (+30)390 (+10)
GET/api/v3/purl/base?q=namespace=redhat&total=true46 (0)78 (-7)99 (0)100 (-20)860 (+310)920 (+80)
GET/api/v3/purl/base?q=type=rpm&total=true46 (-1)75 (-5)96 (-2)100 (0)120 (0)130 (+10)
GET/api/v3/purl/base?sort=name:asc&total=true200 (+10)230 (-10)310 (+20)330 (+10)420 (-10)430 (-80)
GET/api/v3/purl/base?total=true46 (0)87 (+5)100 (0)110 (0)190 (+60)200 (-90)
POST/api/v3/purl/recommend960 (-20)1,200 (+100)1,300 (0)1,500 (+100)1,700 (+100)1,900 (0)
GET/api/v3/purl/{purl_id}84 (+3)100 (+3)160 (+10)170 (0)210 (-10)260 (-40)
GET/api/v3/purl?offset=100&limit=10&total=true46 (0)81 (+3)100 (+1)110 (0)630 (-100)650 (-140)
GET/api/v3/purl?q=curl&total=true31 (+4)63 (-1)79 (-7)760 (+70)1,100 (+100)1,300 (+300)
GET/api/v3/purl?q=license~GPLv3+...&sort=name:desc&total=true22 (+2)55 (+3)68 (+4)75 (+6)82 (-6)82 (-18)
GET/api/v3/purl?q=name=curl&total=true11 (-3)51 (+3)66 (+4)83 (+3)200 (-80)210 (-80)
GET/api/v3/purl?q=purl:namespace=redhat&total=true8 (0)48 (+4)61 (-7)1,600 (-100)3,100 (-400)3,500 (-100)
GET/api/v3/purl?q=purl:ty=rpm&total=true15 (+4)47 (-2)66 (-2)1,800 (-700)3,000 (-500)3,000 (-1,100)
GET/api/v3/purl?sort=purl:name:asc&total=true13 (+1)57 (+9)70 (+3)410 (+140)580 (0)670 (+90)
GET/api/v3/purl?total=true7 (-3)42 (-11)60 (-3)72 (+3)770 (+270)800 (+270)
license 9
GET/api/v3/license/spdx/license/{license_id}42 (-1)43 (0)44 (0)45 (0)54 (-2)68 (-1)
GET/api/v3/license/spdx/license?q=apache&total=true3 (+1)4 (0)5 (0)6 (0)8 (-1)41 (+12)
GET/api/v3/license/spdx/license?q=gpl&total=true43 (0)44 (0)45 (0)46 (0)54 (-1)70 (-12)
GET/api/v3/license/spdx/license?total=true43 (0)43 (0)44 (0)45 (0)55 (+2)71 (-1)
GET/api/v3/license?limit=10&sort=license:asc&total=true25 (-3)59 (0)76 (+1)82 (+1)90 (-2)120 (+10)
GET/api/v3/license?q=ASL&sort=license:desc&total=true16 (0)53 (-1)68 (-2)76 (0)87 (+4)100 (-50)
GET/api/v3/license?q=license~Apache&total=true12 (+1)49 (+1)64 (+2)73 (+2)81 (+3)99 (+2)
GET/api/v3/license?q=license~GPL&total=true12 (+1)48 (-1)62 (+1)71 (0)79 (0)99 (-1)
GET/api/v3/license?total=true60 (-1)95 (-1)110 (0)120 (0)130 (0)250 (+50)
analysis 3
GET/api/v3/analysis/component/{component}5 (0)7 (0)64 (0)70 (0)78 (0)180 (+10)
GET/api/v3/analysis/latest/component/{cpe}5 (0)7 (0)65 (+1)71 (+1)78 (0)170 (0)
GET/api/v3/analysis/status5 (0)7 (0)63 (+1)70 (+1)78 (0)170 (0)
importer 1
GET/api/v3/importer?total=true4 (0)5 (0)57 (0)67 (0)75 (0)180 (0)
group 3
GET/api/v3/group/sbom?parents=resolve&total=true4 (0)6 (0)61 (+1)68 (0)75 (0)110 (0)
GET/api/v3/group/sbom?total=true4 (0)6 (0)61 (+1)68 (0)75 (0)96 (-4)
GET/api/v3/group/sbom?totals=true&total=true4 (0)6 (0)60 (0)68 (0)75 (0)99 (-1)
labels 3
GET/api/v3/advisory-labels?filter_text=type&limit=10005,800 (-200)6,100 (-100)6,400 (-300)6,600 (-200)6,700 (-500)6,700 (-500)
GET/api/v3/sbom-labels?limit=10&filter_text=&total=true52 (0)97 (+9)120 (+10)120 (0)120 (-10)120 (-10)
GET/api/v3/sbom-labels?total=true52 (0)87 (-5)110 (-10)120 (0)120 (-10)120 (-10)
other 2
GET/.well-known/trustify42 (0)43 (0)44 (0)45 (0)56 (+1)72 (-7)
POST/api/v3/ui/extract-sbom-purls1 (0)3 (0)5 (0)6 (0)8 (0)41 (-19)

Failures

No failures recorded.

Exceptions

No exceptions raised in the locustfile.