adriandiglio / Demo-for-Microsoft-SBOM-Tool

This is a comparison of Microsoft's SBOM Tool against a CycloneDX BOM Generator to show how Microsoft's tool detects transient dependencies

General

Just testing the Microsoft SBOM Tool and the CycloneDX BOM GitHub action, comparing their output

Microsoft SBOM Tool uses Component Detection to detect pip components. CycloneDX BOM GitHub action just reads the requirements.txt file.

Copied code from https://github.com/geekcomputers/Python/tree/master/stone_paper_scissor for this test