How do I run a software bill of materials scan on the custom python scripts we use for our family budgeting spreadsheet to make sure there are no vulnerable open source libraries hidden inside
Download run
Fan-out diagram
The searches the AI actually ran for this prompt.
SEED QUERY
How do I run a software bill of materials scan on the custom python scripts we use for our family budgeting spreadsheet to make sure there are no vulnerable open source libraries hidden inside
1 real search · 1 real-search pass
official Syft documentation generate CycloneDX SBOM directory Grype scan SBOM pip-audit documentation Python requirementsGoogle ↗
OBSERVEDInstruction
Badge and edge weight = share of passes that produced the query. Hover a query for its intent and routing format.
Query classes
Google's semantic query class for every sub-query: what kind of answer each search is after, simulated vs real.
ChatGPT real searches (1)
Classes come from the query-classifier (a local Laya model).
Searches and sources
ChatGPT1 real searches · gpt-6
official Syft documentation generate CycloneDX SBOM directory Grype scan SBOM pip-audit documentation Python requirements Google ↗
- Official Syft project · github.com
- Official Grype project · github.com
- official Grype scanning documentation · oss.anchore.com
- CycloneDX Tool Center · cyclonedx.org
- Official pip-audit project · github.com
- official project · github.com