Trivy did not find any dependencies with requirements.txt

[aydinnyunus]

Description

Hi Team,

We are using trivy for sbom extraction but tool did not find any dependencies with requirements.txt file.

Desired Behavior

We expect sbom extraction

Actual Behavior

0 dependencies found

Reproduction Steps

requirements.txt

# Core dependencies
streamlit>=1.28.0
fastapi>=0.104.0
uvicorn>=0.24.0
sqlalchemy>=2.0.0
psycopg2-binary>=2.9.0
pydantic>=2.0.0

# HTTP and networking
requests>=2.31.0
aiohttp>=3.8.0

# Data processing
pandas>=2.0.0
numpy>=1.24.0
plotly>=5.17.0

# Configuration and utilities
python-dotenv>=1.0.0
pyyaml>=6.0
jinja2>=3.1.0

# Dependency injection
dependency-injector>=4.41.0

# Logging and monitoring
structlog>=23.0.0
prometheus-client>=0.17.0

# Testing
pytest>=7.4.0
pytest-asyncio>=0.21.0
pytest-mock>=3.11.0

We created a repository and using this requirements file.

Command:
trivy fs . --format json

Output file :

{
  "SchemaVersion": 2,
  "CreatedAt": "2025-10-06T11:15:19.693161+03:00",
  "ArtifactName": ".",
  "ArtifactType": "filesystem"
}

### Target

Filesystem

### Scanner

None

### Output Format

JSON

### Mode

Standalone

### Debug Output

```bash
Command:
`trivy fs . --format json`

Output file :


{
  "SchemaVersion": 2,
  "CreatedAt": "2025-10-06T11:15:19.693161+03:00",
  "ArtifactName": ".",
  "ArtifactType": "filesystem"
}

### Operating System

macOS

### Version

```bash
0.67.0

Checklist

• Run trivy clean --all
• Read the troubleshooting

[aydinnyunus]

Problem is >= part when we use "==" it is fixed. You can use minimum version for scan.

[DmitriyLewen]

https://trivy.dev/latest/docs/coverage/language/python/#dependency-detection

[aydinnyunus]

Thank you @DmitriyLewen