1from apify_client import ApifyClient
2
3
4
5client = ApifyClient("<YOUR_API_TOKEN>")
6
7
8run_input = {
9 "items": [{
10 "id": "synthetic-supplier-pass",
11 "sbom": {
12 "bomFormat": "CycloneDX",
13 "specVersion": "1.6",
14 "serialNumber": "urn:uuid:11111111-2222-4333-8444-555555555555",
15 "version": 1,
16 "metadata": {
17 "timestamp": "2026-09-17T12:00:00Z",
18 "tools": [{
19 "vendor": "Example Invalid Labs",
20 "name": "Synthetic SBOM Builder",
21 "version": "1.0.0",
22 }],
23 "component": {
24 "type": "application",
25 "bom-ref": "pkg:generic/example.invalid/supplier-app@1.0.0",
26 "name": "supplier-app",
27 "version": "1.0.0",
28 "purl": "pkg:generic/example.invalid/supplier-app@1.0.0",
29 },
30 },
31 "components": [{
32 "type": "library",
33 "bom-ref": "pkg:generic/example.invalid/clear-widget@2.1.0",
34 "name": "clear-widget",
35 "version": "2.1.0",
36 "purl": "pkg:generic/example.invalid/clear-widget@2.1.0",
37 "licenses": [{ "license": { "id": "MIT" } }],
38 }],
39 "dependencies": [
40 {
41 "ref": "pkg:generic/example.invalid/supplier-app@1.0.0",
42 "dependsOn": ["pkg:generic/example.invalid/clear-widget@2.1.0"],
43 },
44 {
45 "ref": "pkg:generic/example.invalid/clear-widget@2.1.0",
46 "dependsOn": [],
47 },
48 ],
49 },
50 }],
51 "policy": {
52 "name": "synthetic-supplier-intake",
53 "version": "1.0.0",
54 "requireDocumentProvenance": True,
55 "requiredComponentFields": [
56 "name",
57 "version",
58 ],
59 "deniedLicenses": ["GPL-3.0-only"],
60 "allowedLicenses": [],
61 "unknownLicenseBehavior": "DENY",
62 "deniedPurls": [],
63 "requireRelationshipIntegrity": True,
64 },
65}
66
67
68run = client.actor("ceddl/sbom-policy-evidence-gate").call(run_input=run_input)
69
70
71print(f"💾 Check your data here: https://console.apify.com/storage/datasets/{run.default_dataset_id}")
72for item in client.dataset(run.default_dataset_id).iterate_items():
73 print(item)
74
75