Add benchmark for how common SBOM generators perform with Python environments

psf / sboms-for-python-packages

Software Bill-of-Materials documents for Python packages

24 stars 1 forks source link

Closed sethmlarson closed 2 weeks ago

sethmlarson commented 2 weeks ago

Tested the following open source SBOM generators:

Currently looks like both cdxgen and Trivy don't pick-up Python virtual environments correctly. I'll report these issues upstream.