Goose Attack Report

Users: 5

Target Host: http://trustify:8080/

goose v0.18.0

Plan overview

Action Started Stopped Elapsed Users
Increasing25-07-26 03:34:1425-07-26 03:34:1900:00:050 → 5
Maintaining25-07-26 03:34:1925-07-26 03:39:2000:05:015
Decreasing25-07-26 03:39:2025-07-26 03:39:2000:00:000 ← 5

Request Metrics

Method Name # Requests # Fails Average (ms) Min (ms) Max (ms) RPS Failures/s
GET get_advisory_by_doc_id 108 (+8) 0 10.81 (-2.88) 3 (0) 71 (-8) 0.36 (+0.03) 0.00 (+0.00)
GET get_analysis_latest_cpe 110 (+10) 0 123.85 (+8.66) 35 (+4) 308 (+39) 0.37 (+0.03) 0.00 (+0.00)
GET get_analysis_status 110 (+10) 0 6.29 (+1.93) 1 (0) 56 (+3) 0.37 (+0.03) 0.00 (+0.00)
GET get_sbom[sha256:720e4451…a939656247164447] 110 (+10) 0 706.41 (+105.88) 146 (-57) 1906 (+295) 0.37 (+0.03) 0.00 (+0.00)
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 109 (+9) 0 892.36 (+47.61) 389 (-107) 1169 (+52) 0.36 (+0.03) 0.00 (+0.00)
GET list_advisory 108 (+8) 0 458.32 (-23.04) 228 (-66) 913 (+16) 0.36 (+0.03) 0.00 (+0.00)
GET list_advisory_paginated 108 (+8) 0 387.50 (-3.61) 129 (-47) 593 (+29) 0.36 (+0.03) 0.00 (+0.00)
GET list_importer 105 (+7) 0 3.48 (-1.26) 1 (0) 49 (-9) 0.35 (+0.02) 0.00 (+0.00)
GET list_organizations 108 (+8) 0 9.88 (+2.02) 1 (0) 51 (+5) 0.36 (+0.03) 0.00 (+0.00)
GET list_packages 105 (+7) 0 402.91 (-29.60) 101 (+16) 852 (-133) 0.35 (+0.02) 0.00 (+0.00)
GET list_packages_paginated 105 (+7) 0 365.62 (-22.97) 108 (+3) 618 (-88) 0.35 (+0.02) 0.00 (+0.00)
GET list_products 110 (+10) 0 10.92 (+3.85) 3 (0) 66 (+34) 0.37 (+0.03) 0.00 (+0.00)
GET list_sboms 110 (+10) 0 1255.67 (+344.76) 576 (+1) 1954 (+500) 0.37 (+0.03) 0.00 (+0.00)
GET list_sboms_paginated 110 (+10) 0 1445.69 (+244.78) 419 (-48) 3111 (+718) 0.37 (+0.03) 0.00 (+0.00)
GET list_vulnerabilities 105 (+7) 0 226.44 (-16.58) 56 (0) 323 (-78) 0.35 (+0.02) 0.00 (+0.00)
GET list_vulnerabilities_paginated 105 (+7) 0 180.13 (-6.38) 42 (+1) 304 (-12) 0.35 (+0.02) 0.00 (+0.00)
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 109 (+9) 0 61.23 (+12.79) 11 (+1) 199 (+23) 0.36 (+0.03) 0.00 (+0.00)
GET search_advisory 108 (+8) 0 887.82 (-99.25) 178 (+7) 2098 (-414) 0.36 (+0.03) 0.00 (+0.00)
GET search_exact_purl 110 (+10) 0 7.32 (+0.39) 2 (0) 54 (0) 0.37 (+0.03) 0.00 (+0.00)
GET search_purls 110 (+7) 0 5773.39 (-1771.25) 1825 (-86) 10571 (-1049) 0.37 (+0.02) 0.00 (+0.00)
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 108 (+8) 0 627.98 (+96.69) 279 (+42) 1124 (+125) 0.36 (+0.03) 0.00 (+0.00)
Aggregated 2271 (+178) 0 665.45 (-58.52) 1 (0) 10571 (-1049) 7.57 (+0.59) 0.00 (+0.00)

Response Time Metrics

Method Name 50%ile (ms) 60%ile (ms) 70%ile (ms) 80%ile (ms) 90%ile (ms) 95%ile (ms) 99%ile (ms) 100%ile (ms)
GET get_advisory_by_doc_id 6 (0) 7 (0) 8 (-2) 10 (-3) 22 (-29) 46 (-8) 68 (0) 71 (-8)
GET get_analysis_latest_cpe 110 (+10) 120 (+10) 150 (+20) 170 (0) 190 (+10) 220 (+30) 300 (+40) 308 (+39)
GET get_analysis_status 2 (0) 3 (0) 4 (+1) 5 (+1) 6 (0) 49 (+41) 54 (+6) 56 (+3)
GET get_sbom[sha256:720e4451…a939656247164447] 430 (-30) 600 (+100) 800 (+200) 1,000 (+200) 1,000 (0) 1,906 (+906) 1,906 (+295) 1,906 (+295)
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 900 (0) 900 (0) 1,000 (+100) 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (0)
GET list_advisory 450 (0) 460 (-10) 480 (-20) 500 (-100) 600 (-100) 700 (0) 900 (+100) 900 (+3)
GET list_advisory_paginated 390 (-10) 400 (-10) 410 (-20) 430 (-30) 480 (-10) 500 (+10) 593 (+93) 593 (+29)
GET list_importer 2 (0) 3 (+1) 3 (0) 4 (0) 5 (-1) 6 (-3) 45 (-3) 49 (-9)
GET list_organizations 3 (0) 5 (+2) 6 (+1) 12 (+3) 36 (+7) 42 (+5) 51 (+6) 51 (+5)
GET list_packages 400 (-20) 410 (-20) 430 (-30) 470 (-20) 500 (0) 600 (-100) 800 (-100) 852 (-133)
GET list_packages_paginated 390 (-10) 400 (-20) 400 (-40) 420 (-60) 490 (-10) 490 (-110) 600 (0) 600 (-100)
GET list_products 6 (+1) 8 (+2) 9 (+2) 10 (+2) 14 (+4) 58 (+43) 65 (+34) 66 (+34)
GET list_sboms 1,000 (+100) 1,000 (0) 1,000 (0) 1,000 (0) 1,954 (+954) 1,954 (+954) 1,954 (+954) 1,954 (+954)
GET list_sboms_paginated 1,000 (0) 2,000 (+1,000) 2,000 (+1,000) 2,000 (0) 2,000 (0) 2,000 (0) 3,000 (+1,000) 3,000 (+1,000)
GET list_vulnerabilities 230 (-10) 240 (-20) 250 (-30) 270 (-20) 290 (-10) 290 (-20) 300 (-60) 320 (-80)
GET list_vulnerabilities_paginated 190 (+10) 200 (+10) 200 (0) 210 (0) 240 (0) 250 (-30) 280 (-10) 300 (-16)
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 35 (+9) 64 (+7) 75 (+10) 100 (+27) 150 (+54) 170 (+50) 180 (+10) 199 (+23)
GET search_advisory 800 (-100) 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (-1,000) 2,000 (0) 2,000 (0) 2,000 (-512)
GET search_exact_purl 6 (+1) 6 (0) 7 (+1) 7 (0) 8 (0) 11 (+2) 53 (0) 54 (0)
GET search_purls 6,000 (-1,000) 6,000 (-2,000) 7,000 (-3,000) 10,000 (-1,000) 10,000 (-1,000) 10,571 (-1,049) 10,571 (-1,049) 10,571 (-1,049)
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 600 (+100) 600 (0) 700 (+100) 700 (+100) 800 (+100) 1,000 (+200) 1,000 (+100) 1,000 (+1)
Aggregated 300 (0) 400 (-10) 500 (0) 900 (+100) 1,000 (0) 2,000 (0) 10,000 (-1,000) 10,571 (-1,049)

Status Code Metrics

Method Name Status Codes
GET get_advisory_by_doc_id 108 [200]
GET get_analysis_latest_cpe 110 [200]
GET get_analysis_status 110 [200]
GET get_sbom[sha256:720e4451…a939656247164447] 110 [200]
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 109 [200]
GET list_advisory 108 [200]
GET list_advisory_paginated 108 [200]
GET list_importer 105 [200]
GET list_organizations 108 [200]
GET list_packages 105 [200]
GET list_packages_paginated 105 [200]
GET list_products 110 [200]
GET list_sboms 110 [200]
GET list_sboms_paginated 110 [200]
GET list_vulnerabilities 105 [200]
GET list_vulnerabilities_paginated 105 [200]
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 109 [200]
GET search_advisory 108 [200]
GET search_exact_purl 110 [200]
GET search_purls 110 [200]
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 108 [200]
Aggregated 2,271 [200]

Transaction Metrics

Transaction # Times Run # Fails Average (ms) Min (ms) Max (ms) RPS Failures/s
WebsiteUser
0.0 logon 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.1 website_index 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.2 website_openapi 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.3 website_sboms 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.4 website_packages 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.5 website_advisories 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.6 website_importers 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
RestAPIUser
1.0 logon 108 (+8) 0 (0) 13.43 (-1.23) 6 (-2) 22 (0) 0.36 (+0.03) 0.00 (+0.00)
1.1 list_organizations 108 (+8) 0 (0) 10.02 (+1.99) 1 (0) 51 (+5) 0.36 (+0.03) 0.00 (+0.00)
1.2 list_advisory 108 (+8) 0 (0) 458.41 (-23.00) 228 (-66) 913 (+15) 0.36 (+0.03) 0.00 (+0.00)
1.3 list_advisory_paginated 108 (+8) 0 (0) 387.53 (-3.67) 129 (-47) 593 (+29) 0.36 (+0.03) 0.00 (+0.00)
1.4 get_advisory_by_doc_id 108 (+8) 0 (0) 10.88 (-2.89) 3 (0) 71 (-8) 0.36 (+0.03) 0.00 (+0.00)
1.5 search_advisory 108 (+8) 0 (0) 887.88 (-99.24) 178 (+7) 2098 (-414) 0.36 (+0.03) 0.00 (+0.00)
1.6 list_vulnerabilities 105 (+7) 0 (0) 226.46 (-16.64) 56 (0) 323 (-78) 0.35 (+0.02) 0.00 (+0.00)
1.7 list_vulnerabilities_paginated 105 (+7) 0 (0) 180.20 (-6.35) 42 (+1) 305 (-11) 0.35 (+0.02) 0.00 (+0.00)
1.8 list_importer 105 (+7) 0 (0) 3.52 (-1.27) 1 (0) 52 (-6) 0.35 (+0.02) 0.00 (+0.00)
1.9 list_packages 105 (+7) 0 (0) 402.95 (-29.59) 101 (+16) 852 (-133) 0.35 (+0.02) 0.00 (+0.00)
1.10 list_packages_paginated 105 (+7) 0 (0) 365.68 (-22.99) 108 (+3) 618 (-88) 0.35 (+0.02) 0.00 (+0.00)
1.11 search_purls 110 (+7) 0 (0) 5773.47 (-1771.23) 1825 (-86) 10571 (-1049) 0.37 (+0.02) 0.00 (+0.00)
1.12 search_exact_purl 110 (+10) 0 (0) 7.35 (+0.38) 2 (0) 54 (0) 0.37 (+0.03) 0.00 (+0.00)
1.13 list_products 110 (+10) 0 (0) 10.95 (+3.82) 3 (0) 66 (+34) 0.37 (+0.03) 0.00 (+0.00)
1.14 list_sboms 110 (+10) 0 (0) 1255.70 (+344.73) 576 (0) 1954 (+500) 0.37 (+0.03) 0.00 (+0.00)
1.15 list_sboms_paginated 110 (+10) 0 (0) 1445.75 (+244.76) 419 (-48) 3112 (+718) 0.37 (+0.03) 0.00 (+0.00)
1.16 get_analysis_status 110 (+10) 0 (0) 6.35 (+1.94) 1 (0) 56 (+3) 0.37 (+0.03) 0.00 (+0.00)
1.17 get_analysis_latest_cpe 110 (+10) 0 (0) 123.88 (+8.66) 35 (+4) 308 (+39) 0.37 (+0.03) 0.00 (+0.00)
1.18 get_sbom[sha256:720e4451…a939656247164447] 110 (+10) 0 (0) 706.47 (+105.90) 146 (-57) 1906 (+295) 0.37 (+0.03) 0.00 (+0.00)
1.19 sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 109 (+9) 0 (0) 61.31 (+12.84) 11 (+1) 199 (+23) 0.36 (+0.03) 0.00 (+0.00)
1.20 get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 109 (+9) 0 (0) 892.52 (+47.70) 389 (-107) 1169 (+52) 0.36 (+0.03) 0.00 (+0.00)
1.21 post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 108 (+8) 0 (0) 628.07 (+96.74) 279 (+42) 1125 (+126) 0.36 (+0.03) 0.00 (+0.00)
Aggregated 2,379 (+186) 0 (0) 635.24 (-55.72) 1 (0) 10571 (-1049) 7.93 (+0.62) 0.00 (+0.00)

Scenario Metrics

Scenario # Users # Times Run Average (ms) Min (ms) Max (ms) Scenarios/s Iterations
WebsiteUser 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
RestAPIUser 5 (0) 108 (+8) 13840.91 (-1177.30) 8581 (-108) 21006 (+872) 0.36 (+0.03) 21.60 (+1.60)
Aggregated 5 (0) 108 (+8) 13840.91 (-1177.30) 8581 (-108) 21006 (+872) 0.36 (+0.03) 21.60 (+1.60)

User Metrics