Goose Attack Report

Users: 5

Target Host: http://trustify:8080/

goose v0.18.0

Plan overview

Action Started Stopped Elapsed Users
Increasing25-09-05 03:05:2525-09-05 03:05:3000:00:050 → 5
Maintaining25-09-05 03:05:3025-09-05 03:10:3000:05:005
Decreasing25-09-05 03:10:3025-09-05 03:10:3300:00:030 ← 5

Request Metrics

Method Name # Requests # Fails Average (ms) Min (ms) Max (ms) RPS Failures/s
GET get_advisory_by_doc_id 120 (+55) 0 9.93 (-0.95) 3 (0) 51 (-11) 0.40 (+0.18) 0.00 (+0.00)
GET get_analysis_latest_cpe 120 (+55) 0 137.00 (-0.29) 32 (+2) 291 (-14) 0.40 (+0.18) 0.00 (+0.00)
GET get_analysis_status 120 (+55) 0 7.62 (+3.03) 1 (0) 54 (+3) 0.40 (+0.18) 0.00 (+0.00)
GET get_sbom[sha256:720e4451…a939656247164447] 120 (+55) 0 1051.44 (+396.96) 270 (+72) 2196 (+443) 0.40 (+0.18) 0.00 (+0.00)
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 120 (+55) 0 770.17 (-16.48) 394 (+34) 1023 (-109) 0.40 (+0.18) 0.00 (+0.00)
GET list_advisory 120 (+55) 0 461.55 (-20.90) 138 (+13) 767 (-47) 0.40 (+0.18) 0.00 (+0.00)
GET list_advisory_paginated 120 (+55) 0 421.17 (-19.34) 130 (+17) 783 (+114) 0.40 (+0.18) 0.00 (+0.00)
GET list_importer 120 (+55) 0 5.02 (-1.23) 1 (0) 55 (-3) 0.40 (+0.18) 0.00 (+0.00)
GET list_organizations 120 (+55) 0 9.96 (+1.93) 1 (0) 52 (-5) 0.40 (+0.18) 0.00 (+0.00)
GET list_packages 120 (+55) 0 408.62 (-54.43) 87 (-13) 902 (+6) 0.40 (+0.18) 0.00 (+0.00)
GET list_packages_paginated 120 (+55) 0 343.35 (-7.40) 56 (-38) 601 (-27) 0.40 (+0.18) 0.00 (+0.00)
GET list_products 120 (+55) 0 8.11 (+0.43) 2 (-2) 63 (+50) 0.40 (+0.18) 0.00 (+0.00)
GET list_sboms 120 (+55) 0 1167.24 (+164.93) 540 (-39) 1712 (+287) 0.40 (+0.18) 0.00 (+0.00)
GET list_sboms_paginated 120 (+55) 0 1631.53 (+473.39) 521 (+49) 3160 (+100) 0.40 (+0.18) 0.00 (+0.00)
GET list_vulnerabilities 120 (+55) 0 226.66 (+12.98) 50 (-2) 375 (+3) 0.40 (+0.18) 0.00 (+0.00)
GET list_vulnerabilities_paginated 120 (+55) 0 171.21 (-19.07) 39 (-17) 285 (-8) 0.40 (+0.18) 0.00 (+0.00)
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 120 (+55) 0 59.03 (+7.15) 11 (+2) 175 (-10) 0.40 (+0.18) 0.00 (+0.00)
GET search_advisory 120 (+55) 0 960.31 (+30.72) 150 (+12) 2214 (-140) 0.40 (+0.18) 0.00 (+0.00)
GET search_exact_purl 120 (+55) 0 6.42 (-52.78) 2 (-4) 56 (-13) 0.40 (+0.18) 0.00 (+0.00)
GET search_purls 125 (+55) 0 4034.30 (-10597.50) 1632 (-7386) 5247 (-11876) 0.42 (+0.18) 0.00 (+0.00)
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 120 (+55) 0 605.39 (+59.31) 263 (+9) 1111 (+110) 0.40 (+0.18) 0.00 (+0.00)
Aggregated 2525 (+1155) 0 601.86 (-501.77) 1 (0) 5247 (-11876) 8.42 (+3.85) 0.00 (+0.00)

Response Time Metrics

Method Name 50%ile (ms) 60%ile (ms) 70%ile (ms) 80%ile (ms) 90%ile (ms) 95%ile (ms) 99%ile (ms) 100%ile (ms)
GET get_advisory_by_doc_id 6 (-1) 7 (0) 8 (-1) 11 (0) 15 (-13) 44 (-1) 50 (-5) 51 (-11)
GET get_analysis_latest_cpe 120 (-20) 150 (-10) 180 (+10) 200 (+20) 210 (+10) 220 (-50) 290 (+10) 290 (-15)
GET get_analysis_status 2 (0) 3 (0) 3 (0) 5 (+2) 38 (+32) 47 (+33) 51 (+4) 54 (+3)
GET get_sbom[sha256:720e4451…a939656247164447] 900 (+400) 1,000 (+400) 1,000 (+300) 2,000 (+1,200) 2,000 (+1,000) 2,000 (+247) 2,000 (+247) 2,000 (+247)
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 800 (0) 800 (0) 800 (-100) 900 (0) 900 (-100) 900 (-100) 1,000 (0) 1,000 (0)
GET list_advisory 450 (-20) 470 (-30) 490 (-10) 500 (-100) 600 (0) 600 (0) 767 (+67) 767 (-33)
GET list_advisory_paginated 410 (-30) 440 (-20) 470 (-10) 490 (-10) 500 (0) 600 (0) 783 (+114) 783 (+114)
GET list_importer 2 (-1) 2 (-2) 3 (-2) 5 (-1) 6 (-2) 14 (-30) 52 (-4) 55 (-3)
GET list_organizations 3 (-1) 5 (0) 7 (+1) 13 (+6) 32 (+19) 42 (-4) 51 (+4) 52 (-5)
GET list_packages 400 (-10) 420 (-40) 460 (-30) 480 (-120) 500 (-200) 700 (-100) 900 (+100) 900 (+4)
GET list_packages_paginated 380 (0) 400 (0) 410 (0) 420 (-40) 470 (-20) 480 (-20) 600 (+100) 600 (0)
GET list_products 5 (-2) 6 (-2) 7 (-2) 9 (-2) 10 (-1) 14 (+2) 61 (+49) 63 (+50)
GET list_sboms 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (0) 1,000 (0) 1,712 (+712) 1,712 (+712)
GET list_sboms_paginated 2,000 (+1,000) 2,000 (+1,000) 2,000 (+1,000) 2,000 (0) 3,000 (+1,000) 3,000 (+1,000) 3,000 (+1,000) 3,000 (0)
GET list_vulnerabilities 230 (+20) 260 (+40) 270 (+40) 290 (+40) 300 (+30) 300 (0) 370 (+40) 375 (+5)
GET list_vulnerabilities_paginated 180 (-10) 190 (-10) 190 (-20) 200 (-10) 230 (-30) 260 (-10) 280 (-10) 285 (-5)
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 61 (+26) 66 (+23) 76 (+8) 88 (+14) 110 (-10) 150 (+10) 170 (-10) 175 (-10)
GET search_advisory 800 (0) 1,000 (+100) 1,000 (0) 1,000 (0) 2,000 (0) 2,000 (0) 2,000 (0) 2,000 (0)
GET search_exact_purl 4 (-59) 5 (-61) 5 (-62) 6 (-61) 9 (-59) 21 (-47) 52 (-17) 56 (-13)
GET search_purls 4,000 (-11,000) 4,000 (-11,000) 4,000 (-12,000) 5,000 (-11,000) 5,000 (-11,000) 5,000 (-11,000) 5,000 (-11,000) 5,000 (-12,000)
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 600 (+100) 600 (0) 700 (0) 700 (0) 900 (+100) 1,000 (+200) 1,000 (+100) 1,000 (0)
Aggregated 300 (+10) 430 (+10) 600 (+100) 900 (+100) 2,000 (+1,000) 3,000 (-7,000) 5,000 (-11,000) 5,000 (-12,000)

Status Code Metrics

Method Name Status Codes
GET get_advisory_by_doc_id 120 [200]
GET get_analysis_latest_cpe 120 [200]
GET get_analysis_status 120 [200]
GET get_sbom[sha256:720e4451…a939656247164447] 120 [200]
GET get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 120 [200]
GET list_advisory 120 [200]
GET list_advisory_paginated 120 [200]
GET list_importer 120 [200]
GET list_organizations 120 [200]
GET list_packages 120 [200]
GET list_packages_paginated 120 [200]
GET list_products 120 [200]
GET list_sboms 120 [200]
GET list_sboms_paginated 120 [200]
GET list_vulnerabilities 120 [200]
GET list_vulnerabilities_paginated 120 [200]
GET sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 120 [200]
GET search_advisory 120 [200]
GET search_exact_purl 120 [200]
GET search_purls 125 [200]
POST post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 120 [200]
Aggregated 2,525 [200]

Transaction Metrics

Transaction # Times Run # Fails Average (ms) Min (ms) Max (ms) RPS Failures/s
WebsiteUser
0.0 logon 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.1 website_index 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.2 website_openapi 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.3 website_sboms 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.4 website_packages 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.5 website_advisories 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
0.6 website_importers 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
RestAPIUser
1.0 logon 120 (+55) 0 (0) 14.16 (-0.03) 7 (-1) 22 (+3) 0.40 (+0.18) 0.00 (+0.00)
1.1 list_organizations 120 (+55) 0 (0) 10.10 (+1.98) 1 (0) 52 (-5) 0.40 (+0.18) 0.00 (+0.00)
1.2 list_advisory 120 (+55) 0 (0) 461.62 (-20.91) 138 (+13) 767 (-47) 0.40 (+0.18) 0.00 (+0.00)
1.3 list_advisory_paginated 120 (+55) 0 (0) 421.23 (-19.34) 130 (+17) 783 (+114) 0.40 (+0.18) 0.00 (+0.00)
1.4 get_advisory_by_doc_id 120 (+55) 0 (0) 9.98 (-0.91) 3 (0) 51 (-11) 0.40 (+0.18) 0.00 (+0.00)
1.5 search_advisory 120 (+55) 0 (0) 960.37 (+30.77) 150 (+12) 2214 (-140) 0.40 (+0.18) 0.00 (+0.00)
1.6 list_vulnerabilities 120 (+55) 0 (0) 226.72 (+12.96) 50 (-2) 375 (+3) 0.40 (+0.18) 0.00 (+0.00)
1.7 list_vulnerabilities_paginated 120 (+55) 0 (0) 171.24 (-19.11) 39 (-17) 285 (-8) 0.40 (+0.18) 0.00 (+0.00)
1.8 list_importer 120 (+55) 0 (0) 5.07 (-1.22) 1 (0) 55 (-3) 0.40 (+0.18) 0.00 (+0.00)
1.9 list_packages 120 (+55) 0 (0) 408.67 (-54.46) 87 (-13) 902 (+6) 0.40 (+0.18) 0.00 (+0.00)
1.10 list_packages_paginated 120 (+55) 0 (0) 343.42 (-7.43) 56 (-38) 601 (-27) 0.40 (+0.18) 0.00 (+0.00)
1.11 search_purls 125 (+55) 0 (0) 4034.36 (-10597.45) 1632 (-7386) 5247 (-11876) 0.42 (+0.18) 0.00 (+0.00)
1.12 search_exact_purl 120 (+55) 0 (0) 6.43 (-52.83) 2 (-4) 56 (-13) 0.40 (+0.18) 0.00 (+0.00)
1.13 list_products 120 (+55) 0 (0) 8.13 (+0.44) 2 (-2) 63 (+50) 0.40 (+0.18) 0.00 (+0.00)
1.14 list_sboms 120 (+55) 0 (0) 1167.32 (+164.96) 541 (-38) 1712 (+287) 0.40 (+0.18) 0.00 (+0.00)
1.15 list_sboms_paginated 120 (+55) 0 (0) 1631.56 (+473.34) 521 (+49) 3160 (+100) 0.40 (+0.18) 0.00 (+0.00)
1.16 get_analysis_status 120 (+55) 0 (0) 7.62 (+2.96) 1 (0) 54 (+3) 0.40 (+0.18) 0.00 (+0.00)
1.17 get_analysis_latest_cpe 120 (+55) 0 (0) 137.06 (-0.25) 32 (+2) 292 (-13) 0.40 (+0.18) 0.00 (+0.00)
1.18 get_sbom[sha256:720e4451…a939656247164447] 120 (+55) 0 (0) 1051.50 (+397.01) 270 (+72) 2197 (+444) 0.40 (+0.18) 0.00 (+0.00)
1.19 sbom_by_package[pkg:maven/io.qu…dhat.com%2fga%2f] 120 (+55) 0 (0) 59.11 (+7.12) 11 (+2) 175 (-10) 0.40 (+0.18) 0.00 (+0.00)
1.20 get_sbom_license_ids[urn:uuid:019731…104-331632a21144] 120 (+55) 0 (0) 770.22 (-16.48) 394 (+34) 1023 (-109) 0.40 (+0.18) 0.00 (+0.00)
1.21 post_vulnerability_analyze[pkg:rpm/redhat/…h=noarch&epoch=1] 120 (+55) 0 (0) 605.53 (+59.42) 263 (+9) 1111 (+110) 0.40 (+0.18) 0.00 (+0.00)
Aggregated 2,645 (+1,210) 0 (0) 574.55 (-479.08) 1 (0) 5247 (-11876) 8.82 (+4.03) 0.00 (+0.00)

Scenario Metrics

Scenario # Users # Times Run Average (ms) Min (ms) Max (ms) Scenarios/s Iterations
WebsiteUser 0 (0) 0 (0) 0.00 (+0.00) 0 (0) 0 (0) 0.00 (+0.00) 0.00 (+0.00)
RestAPIUser 5 (0) 120 (+55) 12409.41 (-9665.45) 5550 (-7152) 14763 (-11081) 0.40 (+0.18) 24.00 (+11.00)
Aggregated 5 (0) 120 (+55) 12409.41 (-9665.45) 5550 (-7152) 14763 (-11081) 0.40 (+0.18) 24.00 (+11.00)

User Metrics