Just testing the Microsoft SBOM Tool and the CycloneDX BOM GitHub action, comparing their output
Microsoft SBOM Tool uses Component Detection to detect pip components. CycloneDX BOM GitHub action just reads the requirements.txt file.
Copied code from https://github.com/geekcomputers/Python/tree/master/stone_paper_scissor for this test