Goose Attack Report

Users: 5

Target Host: http://trustify:8080/

goose v0.18.0

Plan overview

Action Started Stopped Elapsed Users
Increasing25-07-09 03:35:1525-07-09 03:35:2000:00:050 → 5
Maintaining25-07-09 03:35:2025-07-09 03:40:2000:05:005
Decreasing25-07-09 03:40:2025-07-09 03:40:2000:00:000 ← 5

Request Metrics

Method Name # Requests # Fails Average (ms) Min (ms) Max (ms) RPS Failures/s
GET get_advisory_by_doc_id 230 (+150) 0 12.76 (-0.41) 2 (-1) 71 (+11) 0.77 (+0.50) 0.00 (+0.00)
GET get_analysis_latest_cpe 230 (+150) 0 100.82 (-18.36) 33 (-55) 290 (+111) 0.77 (+0.50) 0.00 (+0.00)
GET get_analysis_status 230 (+150) 0 5.47 (+2.38) 1 (0) 59 (+29) 0.77 (+0.50) 0.00 (+0.00)
GET get_sbom[sha256:f293eb89…6720f692ec5f3081] 230 (+150) 230 6.02 (+1.65) 1 (0) 56 (+17) 0.77 (+0.50) 0.77 (+0.50)
GET get_sbom_license_ids[0195baea-42e3-7…0e3-4c7874263954] 230 (+150) 230 1.80 (-0.42) 1 (0) 15 (+2) 0.77 (+0.50) 0.77 (+0.50)
GET list_advisory 230 (+150) 0 482.41 (-63.99) 295 (-110) 841 (-21) 0.77 (+0.50) 0.00 (+0.00)
GET list_advisory_paginated 230 (+150) 0 395.91 (-46.55) 208 (+2) 834 (+232) 0.77 (+0.50) 0.00 (+0.00)
GET list_importer 225 (+145) 0 5.00 (+3.17) 1 (0) 59 (+53) 0.75 (+0.48) 0.00 (+0.00)
GET list_organizations 230 (+150) 0 16.57 (+11.64) 1 (0) 57 (+19) 0.77 (+0.50) 0.00 (+0.00)
GET list_packages 225 (+145) 0 395.00 (-89.81) 217 (-81) 816 (-109) 0.75 (+0.48) 0.00 (+0.00)
GET list_packages_paginated 225 (+145) 0 368.73 (-33.22) 217 (+119) 603 (+10) 0.75 (+0.48) 0.00 (+0.00)
GET list_products 230 (+150) 0 10.71 (+4.60) 2 (-1) 57 (+45) 0.77 (+0.50) 0.00 (+0.00)
GET list_sboms 230 (+150) 0 693.13 (+130.06) 426 (-40) 1099 (+302) 0.77 (+0.50) 0.00 (+0.00)
GET list_sboms_paginated 230 (+150) 0 592.66 (+33.25) 406 (-119) 1093 (+422) 0.77 (+0.50) 0.00 (+0.00)
GET list_vulnerabilities 227 (+147) 0 228.78 (-66.65) 125 (-9) 376 (-20) 0.76 (+0.49) 0.00 (+0.00)
GET list_vulnerabilities_paginated 225 (+145) 0 190.37 (+21.43) 94 (-20) 373 (+173) 0.75 (+0.48) 0.00 (+0.00)
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 230 (+150) 0 40.06 (+10.98) 11 (-4) 105 (+42) 0.77 (+0.50) 0.00 (+0.00)
GET search_advisory 230 (+150) 0 945.30 (-134.22) 321 (-107) 2533 (+400) 0.77 (+0.50) 0.00 (+0.00)
GET search_exact_purl 230 (+150) 0 10.27 (+4.67) 2 (-1) 60 (+51) 0.77 (+0.50) 0.00 (+0.00)
GET search_purls 230 (+145) 0 2079.03 (-11461.28) 1505 (-6718) 8855 (-6225) 0.77 (+0.48) 0.00 (+0.00)
Aggregated 4577 (+2972) 460 329.50 (-623.43) 1 (0) 8855 (-6225) 15.26 (+9.91) 1.53 (+1.00)

Response Time Metrics

Method Name 50%ile (ms) 60%ile (ms) 70%ile (ms) 80%ile (ms) 90%ile (ms) 95%ile (ms) 99%ile (ms) 100%ile (ms)
GET get_advisory_by_doc_id 6 (0) 7 (0) 10 (+2) 12 (+1) 45 (-1) 52 (-2) 61 (+2) 71 (+11)
GET get_analysis_latest_cpe 91 (-19) 96 (-24) 100 (-30) 120 (-20) 170 (+10) 190 (+30) 240 (+61) 290 (+111)
GET get_analysis_status 2 (0) 3 (+1) 3 (+1) 4 (+1) 7 (+3) 43 (+38) 53 (+24) 59 (+29)
GET get_sbom[sha256:f293eb89…6720f692ec5f3081] 3 (0) 3 (0) 4 (0) 5 (+1) 9 (+5) 35 (+28) 53 (+14) 56 (+17)
GET get_sbom_license_ids[0195baea-42e3-7…0e3-4c7874263954] 1 (0) 1 (0) 1 (-1) 2 (0) 3 (-5) 5 (-3) 14 (+2) 15 (+2)
GET list_advisory 470 (-30) 490 (-10) 500 (-100) 500 (-100) 600 (-200) 700 (-100) 800 (0) 800 (-62)
GET list_advisory_paginated 400 (-50) 410 (-60) 420 (-70) 460 (-40) 500 (0) 500 (-100) 700 (+100) 800 (+200)
GET list_importer 2 (0) 3 (+1) 4 (+2) 5 (+3) 6 (+3) 38 (+35) 51 (+47) 59 (+53)
GET list_organizations 7 (+4) 12 (+8) 27 (+22) 38 (+31) 44 (+35) 48 (+36) 54 (+38) 57 (+19)
GET list_packages 390 (-50) 400 (-50) 410 (-90) 450 (-150) 500 (-200) 600 (-200) 800 (-100) 800 (-100)
GET list_packages_paginated 370 (-50) 390 (-30) 400 (-70) 420 (-60) 480 (-20) 490 (-10) 500 (-93) 600 (+7)
GET list_products 6 (+1) 6 (0) 8 (+1) 9 (0) 43 (+33) 52 (+40) 56 (+44) 57 (+45)
GET list_sboms 700 (+200) 700 (+200) 800 (+100) 800 (+100) 900 (+200) 900 (+103) 1,000 (+203) 1,000 (+203)
GET list_sboms_paginated 600 (0) 600 (0) 600 (0) 700 (+100) 800 (+200) 900 (+300) 1,000 (+329) 1,000 (+329)
GET list_vulnerabilities 220 (-90) 220 (-100) 250 (-90) 280 (-60) 300 (-70) 310 (-80) 360 (-30) 376 (-20)
GET list_vulnerabilities_paginated 190 (+10) 200 (+20) 200 (+10) 220 (+30) 260 (+70) 280 (+80) 310 (+110) 370 (+170)
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 27 (+1) 38 (+12) 62 (+32) 68 (+27) 76 (+22) 87 (+32) 96 (+34) 105 (+42)
GET search_advisory 800 (-100) 1,000 (0) 1,000 (-1,000) 1,000 (-1,000) 2,000 (0) 2,000 (0) 2,000 (0) 2,533 (+533)
GET search_exact_purl 5 (0) 6 (0) 6 (0) 8 (+1) 41 (+34) 54 (+47) 56 (+47) 60 (+51)
GET search_purls 2,000 (-12,000) 2,000 (-13,000) 2,000 (-13,000) 2,000 (-13,000) 2,000 (-13,000) 3,000 (-12,000) 7,000 (-8,000) 8,855 (-6,145)
Aggregated 130 (-10) 290 (-40) 400 (-60) 500 (0) 800 (+100) 2,000 (-7,000) 2,000 (-13,000) 8,855 (-6,145)

Status Code Metrics

Method Name Status Codes
GET get_advisory_by_doc_id 230 [200]
GET get_analysis_latest_cpe 230 [200]
GET get_analysis_status 230 [200]
GET get_sbom[sha256:f293eb89…6720f692ec5f3081] 230 [404]
GET get_sbom_license_ids[0195baea-42e3-7…0e3-4c7874263954] 230 [404]
GET list_advisory 230 [200]
GET list_advisory_paginated 230 [200]
GET list_importer 225 [200]
GET list_organizations 230 [200]
GET list_packages 225 [200]
GET list_packages_paginated 225 [200]
GET list_products 230 [200]
GET list_sboms 230 [200]
GET list_sboms_paginated 230 [200]
GET list_vulnerabilities 227 [200]
GET list_vulnerabilities_paginated 225 [200]
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 230 [200]
GET search_advisory 230 [200]
GET search_exact_purl 230 [200]
GET search_purls 230 [200]
Aggregated 460 [404], 4,117 [200]

Transaction Metrics

Transaction # Times Run # Fails Average (ms) Min (ms) Max (ms) RPS Failures/s
WebsiteUser
0.0 logon 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.1 website_index 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.2 website_openapi 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.3 website_sboms 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.4 website_packages 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.5 website_advisories 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.6 website_importers 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
RestAPIUser
1.0 logon 230 (+150) 0 (0) 12.32 (-0.20) 6 (0) 19 (-1) 0.77 (+0.50) 0.00 (+0.00)
1.1 list_organizations 230 (+150) 0 (0) 16.77 (+11.67) 1 (0) 59 (+21) 0.77 (+0.50) 0.00 (+0.00)
1.2 list_advisory 230 (+150) 0 (0) 482.46 (-63.99) 295 (-110) 841 (-21) 0.77 (+0.50) 0.00 (+0.00)
1.3 list_advisory_paginated 230 (+150) 0 (0) 395.99 (-46.54) 208 (+2) 834 (+232) 0.77 (+0.50) 0.00 (+0.00)
1.4 get_advisory_by_doc_id 230 (+150) 0 (0) 12.80 (-0.42) 2 (-1) 71 (+11) 0.77 (+0.50) 0.00 (+0.00)
1.5 search_advisory 230 (+150) 0 (0) 945.35 (-134.24) 321 (-107) 2533 (+400) 0.77 (+0.50) 0.00 (+0.00)
1.6 list_vulnerabilities 227 (+147) 0 (0) 228.86 (-66.59) 125 (-9) 376 (-20) 0.76 (+0.49) 0.00 (+0.00)
1.7 list_vulnerabilities_paginated 225 (+145) 0 (0) 190.42 (+21.43) 94 (-20) 373 (+173) 0.75 (+0.48) 0.00 (+0.00)
1.8 list_importer 225 (+145) 0 (0) 5.04 (+3.19) 1 (0) 59 (+53) 0.75 (+0.48) 0.00 (+0.00)
1.9 list_packages 225 (+145) 0 (0) 395.05 (-89.77) 217 (-81) 816 (-109) 0.75 (+0.48) 0.00 (+0.00)
1.10 list_packages_paginated 225 (+145) 0 (0) 368.79 (-33.24) 218 (+120) 603 (+10) 0.75 (+0.48) 0.00 (+0.00)
1.11 search_purls 230 (+145) 0 (0) 2079.13 (-11461.22) 1505 (-6718) 8855 (-6226) 0.77 (+0.48) 0.00 (+0.00)
1.12 search_exact_purl 230 (+150) 0 (0) 10.33 (+4.71) 2 (-1) 60 (+51) 0.77 (+0.50) 0.00 (+0.00)
1.13 list_products 230 (+150) 0 (0) 10.75 (+4.59) 2 (-1) 57 (+45) 0.77 (+0.50) 0.00 (+0.00)
1.14 list_sboms 230 (+150) 0 (0) 693.21 (+130.11) 426 (-41) 1099 (+302) 0.77 (+0.50) 0.00 (+0.00)
1.15 list_sboms_paginated 230 (+150) 0 (0) 592.73 (+33.27) 406 (-119) 1093 (+422) 0.77 (+0.50) 0.00 (+0.00)
1.16 get_analysis_status 230 (+150) 0 (0) 5.52 (+2.38) 1 (0) 59 (+29) 0.77 (+0.50) 0.00 (+0.00)
1.17 get_analysis_latest_cpe 230 (+150) 0 (0) 100.90 (-18.32) 33 (-55) 290 (+111) 0.77 (+0.50) 0.00 (+0.00)
1.18 get_sbom[sha256:f293eb89…6720f692ec5f3081] 230 (+150) 0 (0) 6.06 (+1.66) 1 (0) 56 (+17) 0.77 (+0.50) 0.00 (+0.00)
1.19 sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 230 (+150) 0 (0) 40.10 (+10.92) 11 (-4) 105 (+41) 0.77 (+0.50) 0.00 (+0.00)
1.20 get_sbom_license_ids[0195baea-42e3-7…0e3-4c7874263954] 230 (+150) 0 (0) 1.86 (-0.39) 1 (0) 15 (+2) 0.77 (+0.50) 0.00 (+0.00)
Aggregated 4,807 (+3,122) 0 (0) 313.73 (-593.96) 1 (0) 8855 (-6226) 16.02 (+10.41) 0.00 (+0.00)

Scenario Metrics

Scenario # Users # Times Run Average (ms) Min (ms) Max (ms) Scenarios/s Iterations
WebsiteUser 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
RestAPIUser 5 (0) 230 (+150) 6543.55 (-11465.64) 5403 (-5109) 11439 (-8993) 0.77 (+0.50) 46.00 (+30.00)
Aggregated 5 (0) 230 (+150) 6543.55 (-11465.64) 5403 (-5109) 11439 (-8993) 0.77 (+0.50) 46.00 (+30.00)

User Metrics

Errors

# Error
230 (+150) 404 Not Found: get_sbom[sha256:f293eb89…6720f692ec5f3081]
230 (+150) 404 Not Found: get_sbom_license_ids[0195baea-42e3-7…0e3-4c7874263954]