- trivy, sbom not install packages from project if use poetry, pipenv by take advantage of lockfile
mentioned in commit be7fd568