A small Flask REST API used as an example project for SBOM generation.
It declares 14 direct dependencies in requirements.txt — Flask, Pandas,
NumPy, Requests, SQLAlchemy, and common tooling — and intentionally ships
no lockfile. A real install resolves the full transitive dependency tree,
so an SBOM built from this project surfaces far more components than the 14
pinned lines suggest.
Using BomLens — point it straight at this repository, no local checkout required:
docker run --rm \
-v /var/run/docker.sock:/var/run/docker.sock \
-v "$PWD:/out" \
ghcr.io/sktelecom/bomlens:latest \
--git https://github.com/sktelecom/bomlens-example-python \
--project bomlens-example-python --version 1.0.0 -o /outOr open the BomLens desktop app / web UI, choose Git URL, and paste the repository address.
pip install -r requirements.txt
python app.pyApache-2.0.