Goose Attack Report

Users: 5

Target Host: http://trustify:8080/

goose v0.18.0

Plan overview

Action Started Stopped Elapsed Users
Increasing25-06-16 03:35:2025-06-16 03:35:2500:00:050 → 5
Maintaining25-06-16 03:35:2525-06-16 03:40:2500:05:005
Decreasing25-06-16 03:40:2525-06-16 03:40:2600:00:010 ← 5

Request Metrics

Method Name # Requests # Fails Average (ms) Min (ms) Max (ms) RPS Failures/s
GET get_advisory_by_doc_id 99 (-28) 0 12.88 (-0.80) 3 (0) 73 (-2) 0.33 (-0.09) 0.00 (+0.00)
GET get_sbom[sha256:f293eb89…6720f692ec5f3081] 100 (-25) 100 5.57 (-1.05) 1 (0) 59 (+9) 0.33 (-0.08) 0.33 (-0.08)
GET get_sbom_license_ids[0195baea-42e3-7…0e3-4c7874263954] 100 (-25) 100 2.18 (+0.04) 1 (0) 11 (-3) 0.33 (-0.08) 0.33 (-0.08)
GET list_advisory 102 (-25) 0 2985.50 (+151.27) 2229 (+122) 3655 (-699) 0.34 (-0.08) 0.00 (+0.00)
GET list_advisory_paginated 101 (-27) 0 3022.99 (+47.07) 1912 (+132) 4302 (+103) 0.34 (-0.09) 0.00 (+0.00)
GET list_importer 99 (-26) 0 3.27 (-1.84) 1 (0) 48 (-4) 0.33 (-0.09) 0.00 (+0.00)
GET list_organizations 100 (-25) 0 11.10 (+1.22) 1 (0) 52 (+3) 0.33 (-0.08) 0.00 (+0.00)
GET list_packages 99 (-26) 0 409.72 (+70.96) 57 (-12) 955 (+359) 0.33 (-0.09) 0.00 (+0.00)
GET list_packages_paginated 99 (-26) 0 354.87 (+38.32) 92 (-7) 524 (+16) 0.33 (-0.09) 0.00 (+0.00)
GET list_products 100 (-25) 0 10.97 (+1.44) 3 (+1) 71 (+5) 0.33 (-0.08) 0.00 (+0.00)
GET list_sboms 100 (-25) 0 668.41 (+19.33) 480 (+29) 922 (-115) 0.33 (-0.08) 0.00 (+0.00)
GET list_sboms_paginated 100 (-25) 0 575.51 (+29.86) 406 (-3) 829 (+19) 0.33 (-0.08) 0.00 (+0.00)
GET list_vulnerabilities 98 (-27) 0 260.03 (+16.98) 45 (-1) 674 (+181) 0.33 (-0.09) 0.00 (+0.00)
GET list_vulnerabilities_paginated 99 (-26) 0 178.37 (-7.14) 28 (-1) 355 (+48) 0.33 (-0.09) 0.00 (+0.00)
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 100 (-25) 0 38.12 (+0.04) 12 (0) 81 (-2) 0.33 (-0.08) 0.00 (+0.00)
GET search_advisory 99 (-28) 0 1875.13 (+20.34) 766 (+63) 2662 (-234) 0.33 (-0.09) 0.00 (+0.00)
GET search_exact_purl 100 (-25) 0 9.20 (+1.79) 2 (0) 57 (+4) 0.33 (-0.08) 0.00 (+0.00)
GET search_purls 100 (-25) 0 4598.51 (+2733.05) 1584 (+1075) 22222 (+12511) 0.33 (-0.08) 0.00 (+0.00)
Aggregated 1795 (-464) 200 840.04 (+173.37) 1 (0) 22222 (+12511) 5.98 (-1.55) 0.67 (-0.17)

Response Time Metrics

Method Name 50%ile (ms) 60%ile (ms) 70%ile (ms) 80%ile (ms) 90%ile (ms) 95%ile (ms) 99%ile (ms) 100%ile (ms)
GET get_advisory_by_doc_id 7 (0) 7 (0) 10 (+1) 12 (+1) 46 (-7) 53 (-3) 59 (-11) 73 (-2)
GET get_sbom[sha256:f293eb89…6720f692ec5f3081] 3 (+1) 3 (0) 4 (0) 5 (0) 7 (-3) 15 (-32) 49 (0) 59 (+9)
GET get_sbom_license_ids[0195baea-42e3-7…0e3-4c7874263954] 1 (0) 2 (+1) 2 (+1) 3 (0) 4 (-4) 8 (0) 11 (-1) 11 (-3)
GET list_advisory 3,000 (0) 3,000 (0) 3,000 (0) 3,000 (0) 3,000 (0) 3,000 (0) 3,655 (-345) 3,655 (-345)
GET list_advisory_paginated 3,000 (0) 3,000 (0) 3,000 (0) 3,000 (0) 4,000 (0) 4,000 (0) 4,000 (0) 4,000 (0)
GET list_importer 2 (0) 2 (0) 3 (0) 4 (0) 4 (-2) 6 (-37) 46 (-4) 48 (-4)
GET list_organizations 4 (0) 5 (0) 7 (-1) 22 (+11) 40 (+5) 44 (0) 50 (+3) 52 (+3)
GET list_packages 390 (+30) 420 (+40) 450 (+60) 470 (+60) 600 (+130) 700 (+210) 900 (+304) 955 (+359)
GET list_packages_paginated 380 (+60) 400 (+60) 400 (+20) 410 (+10) 460 (+40) 490 (+30) 500 (0) 500 (0)
GET list_products 7 (+1) 8 (+2) 8 (+2) 11 (+3) 15 (+1) 53 (+1) 57 (0) 71 (+5)
GET list_sboms 700 (+100) 700 (0) 700 (-100) 800 (0) 800 (-100) 800 (-200) 900 (-100) 900 (-100)
GET list_sboms_paginated 600 (+100) 600 (0) 600 (0) 700 (+100) 700 (0) 800 (+100) 800 (0) 800 (0)
GET list_vulnerabilities 270 (+30) 280 (+10) 300 (+20) 310 (+20) 330 (+20) 350 (-10) 500 (+10) 674 (+184)
GET list_vulnerabilities_paginated 180 (-20) 190 (-10) 200 (-10) 200 (-20) 220 (-40) 220 (-60) 300 (-7) 355 (+48)
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 26 (0) 40 (+7) 59 (0) 65 (0) 68 (-1) 72 (0) 81 (+6) 81 (-2)
GET search_advisory 2,000 (0) 2,000 (0) 2,000 (0) 2,000 (0) 2,000 (0) 2,000 (0) 2,000 (-896) 2,662 (-234)
GET search_exact_purl 5 (+1) 6 (+1) 7 (+2) 8 (+2) 12 (+1) 50 (+7) 55 (+2) 57 (+4)
GET search_purls 3,000 (+2,000) 4,000 (+2,000) 4,000 (+2,000) 5,000 (+2,000) 7,000 (+4,000) 15,000 (+10,000) 20,000 (+12,000) 22,000 (+12,289)
Aggregated 200 (0) 370 (+50) 600 (+100) 2,000 (+1,000) 3,000 (0) 3,000 (0) 6,000 (+2,000) 22,000 (+12,289)

Status Code Metrics

Method Name Status Codes
GET get_advisory_by_doc_id 99 [200]
GET get_sbom[sha256:f293eb89…6720f692ec5f3081] 100 [404]
GET get_sbom_license_ids[0195baea-42e3-7…0e3-4c7874263954] 100 [404]
GET list_advisory 102 [200]
GET list_advisory_paginated 101 [200]
GET list_importer 99 [200]
GET list_organizations 100 [200]
GET list_packages 99 [200]
GET list_packages_paginated 99 [200]
GET list_products 100 [200]
GET list_sboms 100 [200]
GET list_sboms_paginated 100 [200]
GET list_vulnerabilities 98 [200]
GET list_vulnerabilities_paginated 99 [200]
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 100 [200]
GET search_advisory 99 [200]
GET search_exact_purl 100 [200]
GET search_purls 100 [200]
Aggregated 200 [404], 1,595 [200]

Transaction Metrics

Transaction # Times Run # Fails Average (ms) Min (ms) Max (ms) RPS Failures/s
WebsiteUser
0.0 logon 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.1 website_index 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.2 website_openapi 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.3 website_sboms 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.4 website_packages 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.5 website_advisories 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.6 website_importers 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
RestAPIUser
1.0 logon 100 (-25) 0 (0) 12.39 (+0.09) 6 (0) 24 (+3) 0.33 (-0.08) 0.00 (+0.00)
1.1 list_organizations 100 (-25) 0 (0) 11.31 (+1.33) 1 (0) 54 (+5) 0.33 (-0.08) 0.00 (+0.00)
1.2 list_advisory 102 (-25) 0 (0) 2985.67 (+151.39) 2229 (+122) 3655 (-699) 0.34 (-0.08) 0.00 (+0.00)
1.3 list_advisory_paginated 101 (-27) 0 (0) 3023.07 (+47.05) 1912 (+132) 4302 (+103) 0.34 (-0.09) 0.00 (+0.00)
1.4 get_advisory_by_doc_id 99 (-28) 0 (0) 12.97 (-0.77) 3 (0) 73 (-2) 0.33 (-0.09) 0.00 (+0.00)
1.5 search_advisory 99 (-28) 0 (0) 1875.15 (+20.29) 766 (+63) 2662 (-234) 0.33 (-0.09) 0.00 (+0.00)
1.6 list_vulnerabilities 98 (-27) 0 (0) 260.11 (+17.00) 45 (-1) 674 (+181) 0.33 (-0.09) 0.00 (+0.00)
1.7 list_vulnerabilities_paginated 99 (-26) 0 (0) 178.42 (-7.10) 28 (-1) 355 (+48) 0.33 (-0.09) 0.00 (+0.00)
1.8 list_importer 99 (-26) 0 (0) 3.29 (-1.88) 1 (0) 48 (-4) 0.33 (-0.09) 0.00 (+0.00)
1.9 list_packages 99 (-26) 0 (0) 409.74 (+70.94) 57 (-12) 955 (+359) 0.33 (-0.09) 0.00 (+0.00)
1.10 list_packages_paginated 99 (-26) 0 (0) 354.89 (+38.27) 92 (-8) 524 (+16) 0.33 (-0.09) 0.00 (+0.00)
1.11 search_purls 100 (-25) 0 (0) 4598.53 (+2733.03) 1584 (+1075) 22222 (+12511) 0.33 (-0.08) 0.00 (+0.00)
1.12 search_exact_purl 100 (-25) 0 (0) 9.29 (+1.86) 2 (0) 57 (+4) 0.33 (-0.08) 0.00 (+0.00)
1.13 list_products 100 (-25) 0 (0) 10.98 (+1.43) 3 (+1) 71 (+5) 0.33 (-0.08) 0.00 (+0.00)
1.14 list_sboms 100 (-25) 0 (0) 668.46 (+19.32) 480 (+29) 922 (-115) 0.33 (-0.08) 0.00 (+0.00)
1.15 list_sboms_paginated 100 (-25) 0 (0) 575.64 (+29.94) 406 (-3) 829 (+19) 0.33 (-0.08) 0.00 (+0.00)
1.16 get_sbom[sha256:f293eb89…6720f692ec5f3081] 100 (-25) 0 (0) 5.65 (-1.04) 1 (0) 59 (+9) 0.33 (-0.08) 0.00 (+0.00)
1.17 sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 100 (-25) 0 (0) 38.12 (-0.01) 12 (0) 81 (-2) 0.33 (-0.08) 0.00 (+0.00)
1.18 get_sbom_license_ids[0195baea-42e3-7…0e3-4c7874263954] 100 (-25) 0 (0) 2.25 (+0.08) 1 (0) 11 (-3) 0.33 (-0.08) 0.00 (+0.00)
Aggregated 1,895 (-489) 0 (0) 795.71 (+163.99) 1 (0) 22222 (+12511) 6.32 (-1.63) 0.00 (+0.00)

Scenario Metrics

Scenario # Users # Times Run Average (ms) Min (ms) Max (ms) Scenarios/s Iterations
WebsiteUser 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
RestAPIUser 5 (0) 100 (-25) 14972.80 (+3114.03) 11709 (+1491) 27308 (+11811) 0.33 (-0.08) 20.00 (-5.00)
Aggregated 5 (0) 100 (-25) 14972.80 (+3114.03) 11709 (+1491) 27308 (+11811) 0.33 (-0.08) 20.00 (-5.00)

User Metrics

Errors

# Error
100 (-25) 404 Not Found: get_sbom[sha256:f293eb89…6720f692ec5f3081]
100 (-25) 404 Not Found: get_sbom_license_ids[0195baea-42e3-7…0e3-4c7874263954]