Uploaded February 2026 | Updated September 2026, 7 minutes ago

---

Aubrey shows how to create and analyze an SBOM for an AI app running in a container using Trivy and OWASP Dependency-Track. You’ll spin up an Ollama container, generate a CycloneDX JSON SBOM with vulnerability data, and run the bundled Dependency-Track to ingest and visualize results.

You’ll create a project and API key, upload the SBOM via a simple Python script, and review components in the UI. The demo uses an F5 UDF lab, but the steps work on any Linux host—giving you fast, practical visibility into what’s inside your AI applications.

Notes:
- Contributed by: Aubrey King
- Related Article: None
- Project Files: None

⬇️⬇️ JOIN THE COMMUNITY! ⬇️⬇️⬇️


DevCentral is an online community of technical peers dedicated to learning, exchanging ideas, and solving problems—together.

Find all our platform links ⬇️ and follow our Community Evangelists! 👋

➡️ DEVCENTRAL: community.f5.com
➡️ YOUTUBE: youtube.com/devcentral
➡️ LINKEDIN: linkedin.com/showcase/f5-devcentral
➡️ X: https://x.com/devcentral

Your Community Evangelists:
👋 Jason Rahm: linkedin.com/in/jrahm | https://x.com/jasonrahm
👋 Buu Lam: linkedin.com/in/buulam | https://x.com/buulam
👋 Aubrey King: linkedin.com/in/aubreyking | https://x.com/aubreykingf5
👋 Chase Abbott: linkedin.com/in/chaseabbott1