Goose Attack Report

Users: 5

Target Host: http://trustify:8080/

goose v0.18.0

Plan overview

Action Started Stopped Elapsed Users
Increasing25-10-13 02:18:1525-10-13 02:18:2000:00:050 → 5
Maintaining25-10-13 02:18:2025-10-13 02:23:2000:05:005
Decreasing25-10-13 02:23:2025-10-13 02:23:2200:00:020 ← 5

Request Metrics

Method Name # Requests # Fails Average (ms) Min (ms) Max (ms) RPS Failures/s
GET get_advisory_by_doc_id 59 (+9) 0 12.14 (+0.70) 3 (0) 67 (+9) 0.20 (+0.03) 0.00 (+0.00)
GET get_analysis_latest_cpe 60 (+5) 0 193.58 (+48.71) 82 (+50) 493 (-30) 0.20 (+0.02) 0.00 (+0.00)
GET get_analysis_status 60 (+5) 0 7.58 (+0.47) 1 (0) 57 (+3) 0.20 (+0.02) 0.00 (+0.00)
GET get_purl_details[b00df2ca-df21-5…874-304e9c54e2bd] 59 (+9) 0 696.05 (+19.91) 97 (-9) 1766 (+372) 0.20 (+0.03) 0.00 (+0.00)
GET get_sbom[sha256:720e4451…a939656247164447] 60 (+5) 0 1553.42 (+285.14) 295 (+105) 7388 (+3582) 0.20 (+0.02) 0.00 (+0.00)
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 60 (+5) 0 6584.40 (-1119.20) 3831 (-2015) 11788 (-799) 0.20 (+0.02) 0.00 (+0.00)
GET list_advisory 59 (+9) 0 527.86 (+78.34) 102 (+10) 1128 (+409) 0.20 (+0.03) 0.00 (+0.00)
GET list_advisory_paginated 59 (+9) 0 453.29 (+59.57) 96 (+9) 922 (+287) 0.20 (+0.03) 0.00 (+0.00)
GET list_importer 57 (+7) 0 5.05 (-0.97) 1 (0) 53 (+1) 0.19 (+0.02) 0.00 (+0.00)
GET list_organizations 59 (+9) 0 17.41 (+5.65) 1 (0) 56 (-2) 0.20 (+0.03) 0.00 (+0.00)
GET list_packages 57 (+7) 0 342.61 (-31.17) 66 (+7) 698 (+117) 0.19 (+0.02) 0.00 (+0.00)
GET list_packages_paginated 57 (+7) 0 314.79 (-16.27) 92 (+1) 584 (+23) 0.19 (+0.02) 0.00 (+0.00)
GET list_products 61 (+6) 0 8.80 (-5.67) 3 (-1) 58 (-37) 0.20 (+0.02) 0.00 (+0.00)
GET list_sboms 61 (+6) 0 1063.74 (-178.92) 584 (-12) 2134 (+231) 0.20 (+0.02) 0.00 (+0.00)
GET list_sboms_paginated 61 (+6) 0 2935.34 (+896.11) 435 (-70) 9842 (+5740) 0.20 (+0.02) 0.00 (+0.00)
GET list_vulnerabilities 57 (+7) 0 263.95 (+65.91) 41 (-3) 573 (+259) 0.19 (+0.02) 0.00 (+0.00)
GET list_vulnerabilities_paginated 57 (+7) 0 171.65 (+28.27) 28 (-2) 369 (+94) 0.19 (+0.02) 0.00 (+0.00)
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 60 (+5) 0 76.88 (-25.63) 14 (-1) 456 (+161) 0.20 (+0.02) 0.00 (+0.00)
GET search_advisory 59 (+9) 0 1196.36 (+143.74) 139 (+21) 3338 (+1062) 0.20 (+0.03) 0.00 (+0.00)
GET search_exact_purl 61 (+6) 0 11.20 (+4.67) 3 (-1) 56 (+44) 0.20 (+0.02) 0.00 (+0.00)
GET search_purls 62 (+7) 0 7825.34 (-3191.73) 1660 (-3975) 13493 (-350) 0.21 (+0.02) 0.00 (+0.00)
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 59 (+9) 0 768.47 (+5.97) 153 (-11) 1576 (+50) 0.20 (+0.03) 0.00 (+0.00)
Aggregated 1304 (+154) 0 1161.43 (-156.44) 1 (0) 13493 (-350) 4.35 (+0.51) 0.00 (+0.00)

Response Time Metrics

Method Name 50%ile (ms) 60%ile (ms) 70%ile (ms) 80%ile (ms) 90%ile (ms) 95%ile (ms) 99%ile (ms) 100%ile (ms)
GET get_advisory_by_doc_id 6 (+1) 7 (0) 8 (-1) 11 (-1) 31 (+7) 61 (+4) 62 (+4) 67 (+9)
GET get_analysis_latest_cpe 180 (+30) 200 (+40) 210 (+20) 280 (+80) 310 (+100) 320 (+50) 440 (+150) 490 (-10)
GET get_analysis_status 3 (0) 4 (+1) 5 (+1) 7 (+2) 8 (-1) 48 (0) 54 (+3) 57 (+3)
GET get_purl_details[b00df2ca-df21-5…874-304e9c54e2bd] 600 (-100) 700 (0) 800 (0) 900 (-100) 1,000 (0) 1,766 (+766) 1,766 (+766) 1,766 (+766)
GET get_sbom[sha256:720e4451…a939656247164447] 600 (-200) 700 (-300) 900 (-100) 1,000 (-1,000) 5,000 (+2,000) 6,000 (+3,000) 6,000 (+2,194) 7,000 (+3,194)
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 6,000 (-1,000) 7,000 (-1,000) 7,000 (-1,000) 7,000 (-1,000) 8,000 (-2,000) 10,000 (0) 11,788 (+788) 11,788 (-799)
GET list_advisory 600 (+110) 600 (+100) 600 (0) 700 (+100) 800 (+200) 800 (+100) 900 (+200) 1,000 (+300)
GET list_advisory_paginated 470 (+30) 500 (+30) 500 (+10) 600 (+100) 700 (+200) 700 (+100) 900 (+300) 900 (+300)
GET list_importer 2 (0) 3 (+1) 3 (0) 5 (+1) 8 (+1) 22 (-25) 48 (-4) 53 (+1)
GET list_organizations 3 (0) 5 (+1) 34 (+25) 43 (+27) 46 (+7) 50 (+2) 52 (-6) 56 (-2)
GET list_packages 380 (-50) 390 (-60) 410 (-60) 440 (-40) 600 (+110) 600 (+19) 698 (+117) 698 (+117)
GET list_packages_paginated 330 (-40) 400 (+10) 410 (+10) 420 (+10) 460 (+30) 470 (-30) 500 (-61) 584 (+23)
GET list_products 6 (-1) 6 (-1) 8 (0) 9 (0) 11 (0) 21 (-70) 53 (-40) 58 (-37)
GET list_sboms 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (-903) 1,000 (-903) 2,000 (+97) 2,000 (+97) 2,000 (+97)
GET list_sboms_paginated 2,000 (0) 3,000 (+1,000) 3,000 (0) 5,000 (+2,000) 6,000 (+3,000) 7,000 (+4,000) 9,000 (+5,000) 9,842 (+5,842)
GET list_vulnerabilities 260 (+40) 290 (+70) 310 (+60) 390 (+100) 470 (+180) 500 (+200) 573 (+263) 573 (+263)
GET list_vulnerabilities_paginated 200 (+50) 200 (+20) 210 (+20) 230 (+30) 280 (+70) 290 (+60) 320 (+45) 369 (+94)
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 68 (-10) 75 (-8) 81 (-39) 94 (-76) 170 (-30) 200 (-60) 230 (-40) 456 (+161)
GET search_advisory 1,000 (0) 1,000 (0) 2,000 (0) 2,000 (0) 2,000 (0) 3,000 (+1,000) 3,000 (+1,000) 3,000 (+1,000)
GET search_exact_purl 6 (0) 7 (0) 7 (0) 8 (+1) 47 (+39) 49 (+41) 52 (+42) 56 (+44)
GET search_purls 8,000 (-4,000) 8,000 (-5,000) 9,000 (-4,000) 12,000 (-1,000) 12,000 (-1,843) 12,000 (-1,843) 13,000 (-843) 13,000 (-843)
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 700 (-100) 800 (0) 900 (-100) 1,000 (0) 1,000 (0) 1,000 (0) 1,576 (+50) 1,576 (+50)
Aggregated 310 (+30) 470 (+10) 600 (0) 1,000 (0) 4,000 (+1,000) 7,000 (-1,000) 12,000 (-1,000) 13,000 (-843)

Status Code Metrics

Method Name Status Codes
GET get_advisory_by_doc_id 59 [200]
GET get_analysis_latest_cpe 60 [200]
GET get_analysis_status 60 [200]
GET get_purl_details[b00df2ca-df21-5…874-304e9c54e2bd] 59 [200]
GET get_sbom[sha256:720e4451…a939656247164447] 60 [200]
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 60 [200]
GET list_advisory 59 [200]
GET list_advisory_paginated 59 [200]
GET list_importer 57 [200]
GET list_organizations 59 [200]
GET list_packages 57 [200]
GET list_packages_paginated 57 [200]
GET list_products 61 [200]
GET list_sboms 61 [200]
GET list_sboms_paginated 61 [200]
GET list_vulnerabilities 57 [200]
GET list_vulnerabilities_paginated 57 [200]
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 60 [200]
GET search_advisory 59 [200]
GET search_exact_purl 61 [200]
GET search_purls 62 [200]
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 59 [200]
Aggregated 1,304 [200]

Transaction Metrics

Transaction # Times Run # Fails Average (ms) Min (ms) Max (ms) RPS Failures/s
WebsiteUser
0.0 logon 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.1 website_index 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.2 website_openapi 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.3 website_sboms 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.4 website_packages 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.5 website_advisories 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.6 website_importers 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
RestAPIUser
1.0 logon 59 (+9) 0 (0) 15.41 (+1.19) 6 (-2) 34 (+1) 0.20 (+0.03) 0.00 (+0.00)
1.1 list_organizations 59 (+9) 0 (0) 17.53 (+5.59) 1 (0) 56 (-2) 0.20 (+0.03) 0.00 (+0.00)
1.2 list_advisory 59 (+9) 0 (0) 527.92 (+78.32) 102 (+10) 1128 (+409) 0.20 (+0.03) 0.00 (+0.00)
1.3 list_advisory_paginated 59 (+9) 0 (0) 453.32 (+59.56) 96 (+9) 922 (+287) 0.20 (+0.03) 0.00 (+0.00)
1.4 get_advisory_by_doc_id 59 (+9) 0 (0) 12.19 (+0.73) 3 (0) 67 (+9) 0.20 (+0.03) 0.00 (+0.00)
1.5 search_advisory 59 (+9) 0 (0) 1196.44 (+143.74) 139 (+21) 3338 (+1062) 0.20 (+0.03) 0.00 (+0.00)
1.6 list_vulnerabilities 57 (+7) 0 (0) 263.98 (+65.90) 41 (-3) 573 (+258) 0.19 (+0.02) 0.00 (+0.00)
1.7 list_vulnerabilities_paginated 57 (+7) 0 (0) 171.67 (+28.11) 28 (-2) 369 (+93) 0.19 (+0.02) 0.00 (+0.00)
1.8 list_importer 57 (+7) 0 (0) 5.07 (-1.01) 1 (0) 53 (0) 0.19 (+0.02) 0.00 (+0.00)
1.9 list_packages 57 (+7) 0 (0) 342.68 (-31.20) 67 (+8) 698 (+117) 0.19 (+0.02) 0.00 (+0.00)
1.10 list_packages_paginated 57 (+7) 0 (0) 314.86 (-16.24) 92 (+1) 584 (+23) 0.19 (+0.02) 0.00 (+0.00)
1.11 search_purls 62 (+7) 0 (0) 7825.37 (-3191.72) 1660 (-3975) 13493 (-350) 0.21 (+0.02) 0.00 (+0.00)
1.12 search_exact_purl 61 (+6) 0 (0) 11.21 (+4.63) 3 (-1) 56 (+44) 0.20 (+0.02) 0.00 (+0.00)
1.13 list_products 61 (+6) 0 (0) 8.80 (-5.71) 3 (-1) 58 (-37) 0.20 (+0.02) 0.00 (+0.00)
1.14 list_sboms 61 (+6) 0 (0) 1063.82 (-178.85) 584 (-12) 2134 (+231) 0.20 (+0.02) 0.00 (+0.00)
1.15 list_sboms_paginated 61 (+6) 0 (0) 2935.41 (+896.10) 435 (-70) 9842 (+5740) 0.20 (+0.02) 0.00 (+0.00)
1.16 get_analysis_status 60 (+5) 0 (0) 7.65 (+0.50) 1 (0) 57 (+3) 0.20 (+0.02) 0.00 (+0.00)
1.17 get_analysis_latest_cpe 60 (+5) 0 (0) 193.60 (+48.67) 82 (+50) 493 (-30) 0.20 (+0.02) 0.00 (+0.00)
1.18 get_sbom[sha256:720e4451…a939656247164447] 60 (+5) 0 (0) 1553.52 (+285.24) 295 (+105) 7388 (+3582) 0.20 (+0.02) 0.00 (+0.00)
1.19 sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 60 (+5) 0 (0) 77.00 (-25.60) 14 (-1) 456 (+159) 0.20 (+0.02) 0.00 (+0.00)
1.20 get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 60 (+5) 0 (0) 6584.50 (-1119.14) 3832 (-2014) 11788 (-799) 0.20 (+0.02) 0.00 (+0.00)
1.21 post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 59 (+9) 0 (0) 768.58 (+6.02) 154 (-10) 1576 (+50) 0.20 (+0.03) 0.00 (+0.00)
1.22 get_purl_details[b00df2ca-df21-5…874-304e9c54e2bd] 59 (+9) 0 (0) 696.15 (+19.87) 97 (-9) 1766 (+372) 0.20 (+0.03) 0.00 (+0.00)
Aggregated 1,363 (+163) 0 (0) 1111.15 (-151.80) 1 (0) 13493 (-350) 4.54 (+0.54) 0.00 (+0.00)

Scenario Metrics

Scenario # Users # Times Run Average (ms) Min (ms) Max (ms) Scenarios/s Iterations
WebsiteUser 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
RestAPIUser 5 (0) 59 (+9) 25079.12 (-2518.16) 15129 (-2428) 35005 (-1066) 0.20 (+0.03) 11.80 (+1.80)
Aggregated 5 (0) 59 (+9) 25079.12 (-2518.16) 15129 (-2428) 35005 (-1066) 0.20 (+0.03) 11.80 (+1.80)

User Metrics