Skip to content

Commit 8acad91

Browse files
github-actions[bot]web-flow
authored and
inosmeet
committed
chore: update SBOM for Python 3.10 (intel#3689)
Co-authored-by: GitHub <[email protected]>
1 parent 68afe03 commit 8acad91

File tree

2 files changed

+55
-62
lines changed

2 files changed

+55
-62
lines changed

‎sbom/cve-bin-tool-py3.10.json

Lines changed: 30 additions & 36 deletions
Original file line numberDiff line numberDiff line change
@@ -2,15 +2,15 @@
22
"$schema": "http://cyclonedx.org/schema/bom-1.5.schema.json",
33
"bomFormat": "CycloneDX",
44
"specVersion": "1.5",
5-
"serialNumber": "urn:uuid:0116dc8c-63e8-4694-9738-1189d4351612",
5+
"serialNumber": "urn:uuid:9b458f18-7b9d-433e-be17-35e4c3704d73",
66
"version": 1,
77
"metadata": {
8-
"timestamp": "2023-12-25T00:30:08Z",
8+
"timestamp": "2024-01-04T20:02:20Z",
99
"tools": {
1010
"components": [
1111
{
1212
"name": "sbom4python",
13-
"version": "0.10.2",
13+
"version": "0.10.3",
1414
"type": "application"
1515
}
1616
]
@@ -248,7 +248,7 @@
248248
"type": "library",
249249
"bom-ref": "6-attrs",
250250
"name": "attrs",
251-
"version": "23.1.0",
251+
"version": "23.2.0",
252252
"supplier": {
253253
"name": "Hynek Schlawack",
254254
"contact": [
@@ -257,22 +257,16 @@
257257
}
258258
]
259259
},
260-
"cpe": "cpe:2.3:a:hynek_schlawack:attrs:23.1.0:*:*:*:*:*:*:*",
260+
"cpe": "cpe:2.3:a:hynek_schlawack:attrs:23.2.0:*:*:*:*:*:*:*",
261261
"description": "Classes Without Boilerplate",
262-
"hashes": [
263-
{
264-
"alg": "SHA-1",
265-
"content": "1e2f6f9cac5cc60f0adab051c14adf09ffe39155"
266-
}
267-
],
268262
"externalReferences": [
269263
{
270-
"url": "https://pypi.org/project/attrs/23.1.0",
264+
"url": "https://pypi.org/project/attrs/23.2.0",
271265
"type": "distribution",
272266
"comment": "Download location for component"
273267
}
274268
],
275-
"purl": "pkg:pypi/attrs@23.1.0",
269+
"purl": "pkg:pypi/attrs@23.2.0",
276270
"properties": [
277271
{
278272
"name": "language",
@@ -1354,6 +1348,12 @@
13541348
},
13551349
"cpe": "cpe:2.3:a:the_pyopenssl_developers:pyopenssl:23.3.0:*:*:*:*:*:*:*",
13561350
"description": "Python wrapper module around the OpenSSL library",
1351+
"hashes": [
1352+
{
1353+
"alg": "SHA-1",
1354+
"content": "5ba8ce10ed7c318e57516a7ec8447cbb5626d3f9"
1355+
}
1356+
],
13571357
"licenses": [
13581358
{
13591359
"license": {
@@ -1628,7 +1628,7 @@
16281628
"type": "library",
16291629
"bom-ref": "36-google-auth",
16301630
"name": "google-auth",
1631-
"version": "2.25.2",
1631+
"version": "2.26.1",
16321632
"supplier": {
16331633
"name": "Google Cloud Platform",
16341634
"contact": [
@@ -1637,7 +1637,7 @@
16371637
}
16381638
]
16391639
},
1640-
"cpe": "cpe:2.3:a:google_cloud_platform:google-auth:2.25.2:*:*:*:*:*:*:*",
1640+
"cpe": "cpe:2.3:a:google_cloud_platform:google-auth:2.26.1:*:*:*:*:*:*:*",
16411641
"description": "Google Authentication Library",
16421642
"licenses": [
16431643
{
@@ -1649,12 +1649,12 @@
16491649
],
16501650
"externalReferences": [
16511651
{
1652-
"url": "https://pypi.org/project/google-auth/2.25.2",
1652+
"url": "https://pypi.org/project/google-auth/2.26.1",
16531653
"type": "distribution",
16541654
"comment": "Download location for component"
16551655
}
16561656
],
1657-
"purl": "pkg:pypi/google-auth@2.25.2",
1657+
"purl": "pkg:pypi/google-auth@2.26.1",
16581658
"properties": [
16591659
{
16601660
"name": "language",
@@ -1904,16 +1904,16 @@
19041904
"type": "library",
19051905
"bom-ref": "42-jsonschema-specifications",
19061906
"name": "jsonschema-specifications",
1907-
"version": "2023.11.2",
1907+
"version": "2023.12.1",
19081908
"supplier": {
19091909
"name": "Julian Berman"
19101910
},
1911-
"cpe": "cpe:2.3:a:julian_berman:jsonschema-specifications:2023.11.2:*:*:*:*:*:*:*",
1911+
"cpe": "cpe:2.3:a:julian_berman:jsonschema-specifications:2023.12.1:*:*:*:*:*:*:*",
19121912
"description": "The JSON Schema meta-schemas and vocabularies, exposed as a Registry",
19131913
"hashes": [
19141914
{
19151915
"alg": "SHA-1",
1916-
"content": "a2fec386cdb2ed38041ccbfff0fc3e8a566997a3"
1916+
"content": "544e0ff86850af1c6d9e533c4b58b76c59542a76"
19171917
}
19181918
],
19191919
"licenses": [
@@ -1926,12 +1926,12 @@
19261926
],
19271927
"externalReferences": [
19281928
{
1929-
"url": "https://pypi.org/project/jsonschema-specifications/2023.11.2",
1929+
"url": "https://pypi.org/project/jsonschema-specifications/2023.12.1",
19301930
"type": "distribution",
19311931
"comment": "Download location for component"
19321932
}
19331933
],
1934-
"purl": "pkg:pypi/jsonschema-specifications@2023.11.2",
1934+
"purl": "pkg:pypi/jsonschema-specifications@2023.12.1",
19351935
"properties": [
19361936
{
19371937
"name": "language",
@@ -1990,11 +1990,11 @@
19901990
"type": "library",
19911991
"bom-ref": "44-rpds-py",
19921992
"name": "rpds-py",
1993-
"version": "0.15.2",
1993+
"version": "0.16.2",
19941994
"supplier": {
19951995
"name": "Julian Berman"
19961996
},
1997-
"cpe": "cpe:2.3:a:julian_berman:rpds-py:0.15.2:*:*:*:*:*:*:*",
1997+
"cpe": "cpe:2.3:a:julian_berman:rpds-py:0.16.2:*:*:*:*:*:*:*",
19981998
"description": "Python bindings to Rust's persistent data structures (rpds)",
19991999
"licenses": [
20002000
{
@@ -2006,12 +2006,12 @@
20062006
],
20072007
"externalReferences": [
20082008
{
2009-
"url": "https://pypi.org/project/rpds-py/0.15.2",
2009+
"url": "https://pypi.org/project/rpds-py/0.16.2",
20102010
"type": "distribution",
20112011
"comment": "Download location for component"
20122012
}
20132013
],
2014-
"purl": "pkg:pypi/rpds-py@0.15.2",
2014+
"purl": "pkg:pypi/rpds-py@0.16.2",
20152015
"properties": [
20162016
{
20172017
"name": "language",
@@ -2027,7 +2027,7 @@
20272027
"type": "library",
20282028
"bom-ref": "45-lib4sbom",
20292029
"name": "lib4sbom",
2030-
"version": "0.5.4",
2030+
"version": "0.6.1",
20312031
"supplier": {
20322032
"name": "Anthony Harrison",
20332033
"contact": [
@@ -2036,14 +2036,8 @@
20362036
}
20372037
]
20382038
},
2039-
"cpe": "cpe:2.3:a:anthony_harrison:lib4sbom:0.5.4:*:*:*:*:*:*:*",
2039+
"cpe": "cpe:2.3:a:anthony_harrison:lib4sbom:0.6.1:*:*:*:*:*:*:*",
20402040
"description": "Software Bill of Material (SBOM) generator and consumer library",
2041-
"hashes": [
2042-
{
2043-
"alg": "SHA-1",
2044-
"content": "3de23e3f3b32c08f9bf8231e2765a06ebb82dc80"
2045-
}
2046-
],
20472041
"licenses": [
20482042
{
20492043
"license": {
@@ -2054,12 +2048,12 @@
20542048
],
20552049
"externalReferences": [
20562050
{
2057-
"url": "https://pypi.org/project/lib4sbom/0.5.4",
2051+
"url": "https://pypi.org/project/lib4sbom/0.6.1",
20582052
"type": "distribution",
20592053
"comment": "Download location for component"
20602054
}
20612055
],
2062-
"purl": "pkg:pypi/lib4sbom@0.5.4",
2056+
"purl": "pkg:pypi/lib4sbom@0.6.1",
20632057
"properties": [
20642058
{
20652059
"name": "language",

‎sbom/cve-bin-tool-py3.10.spdx

Lines changed: 25 additions & 26 deletions
Original file line numberDiff line numberDiff line change
@@ -2,10 +2,10 @@ SPDXVersion: SPDX-2.3
22
DataLicense: CC0-1.0
33
SPDXID: SPDXRef-DOCUMENT
44
DocumentName: Python-cve-bin-tool
5-
DocumentNamespace: http://spdx.org/spdxdocs/Python-cve-bin-tool-6912316d-25bf-43e5-913b-e60bc928f512
5+
DocumentNamespace: http://spdx.org/spdxdocs/Python-cve-bin-tool-8eaa059d-aaab-41a7-a30c-0faccf910a0f
66
LicenseListVersion: 3.22
7-
Creator: Tool: sbom4python-0.10.2
8-
Created: 2023-12-25T00:28:35Z
7+
Creator: Tool: sbom4python-0.10.3
8+
Created: 2024-01-04T20:00:36Z
99
CreatorComment: <text>This document has been automatically generated.</text>
1010
#####
1111

@@ -90,18 +90,17 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:andrew_svetlov:async-timeout:4.0.3:*:*
9090

9191
PackageName: attrs
9292
SPDXID: SPDXRef-Package-6-attrs
93-
PackageVersion: 23.1.0
93+
PackageVersion: 23.2.0
9494
PrimaryPackagePurpose: LIBRARY
9595
PackageSupplier: Person: Hynek Schlawack ([email protected])
96-
PackageDownloadLocation: https://pypi.org/project/attrs/23.1.0
96+
PackageDownloadLocation: https://pypi.org/project/attrs/23.2.0
9797
FilesAnalyzed: false
98-
PackageChecksum: SHA1: 1e2f6f9cac5cc60f0adab051c14adf09ffe39155
9998
PackageLicenseDeclared: NOASSERTION
10099
PackageLicenseConcluded: NOASSERTION
101100
PackageCopyrightText: NOASSERTION
102101
PackageSummary: <text>Classes Without Boilerplate</text>
103-
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/attrs@23.1.0
104-
ExternalRef: SECURITY cpe23Type cpe:2.3:a:hynek_schlawack:attrs:23.1.0:*:*:*:*:*:*:*
102+
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/attrs@23.2.0
103+
ExternalRef: SECURITY cpe23Type cpe:2.3:a:hynek_schlawack:attrs:23.2.0:*:*:*:*:*:*:*
105104
#####
106105

107106
PackageName: multidict
@@ -481,6 +480,7 @@ PrimaryPackagePurpose: LIBRARY
481480
PackageSupplier: Organization: The pyOpenSSL developers ([email protected])
482481
PackageDownloadLocation: https://pypi.org/project/pyOpenSSL/23.3.0
483482
FilesAnalyzed: false
483+
PackageChecksum: SHA1: 5ba8ce10ed7c318e57516a7ec8447cbb5626d3f9
484484
PackageLicenseDeclared: NOASSERTION
485485
PackageLicenseConcluded: Apache-2.0
486486
PackageLicenseComments: <text>pyOpenSSL declares Apache License, Version 2.0 which is not currently a valid SPDX License identifier or expression.</text>
@@ -573,18 +573,18 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:craig_citro:google-apitools:0.5.32:*:*
573573

574574
PackageName: google-auth
575575
SPDXID: SPDXRef-Package-36-google-auth
576-
PackageVersion: 2.25.2
576+
PackageVersion: 2.26.1
577577
PrimaryPackagePurpose: LIBRARY
578578
PackageSupplier: Organization: Google Cloud Platform ([email protected])
579-
PackageDownloadLocation: https://pypi.org/project/google-auth/2.25.2
579+
PackageDownloadLocation: https://pypi.org/project/google-auth/2.26.1
580580
FilesAnalyzed: false
581581
PackageLicenseDeclared: NOASSERTION
582582
PackageLicenseConcluded: Apache-2.0
583583
PackageLicenseComments: <text>google-auth declares Apache 2.0 which is not currently a valid SPDX License identifier or expression.</text>
584584
PackageCopyrightText: NOASSERTION
585585
PackageSummary: <text>Google Authentication Library</text>
586-
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/google-auth@2.25.2
587-
ExternalRef: SECURITY cpe23Type cpe:2.3:a:google_cloud_platform:google-auth:2.25.2:*:*:*:*:*:*:*
586+
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/google-auth@2.26.1
587+
ExternalRef: SECURITY cpe23Type cpe:2.3:a:google_cloud_platform:google-auth:2.26.1:*:*:*:*:*:*:*
588588
#####
589589

590590
PackageName: cachetools
@@ -669,18 +669,18 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:julian_berman:jsonschema:4.20.0:*:*:*:
669669

670670
PackageName: jsonschema-specifications
671671
SPDXID: SPDXRef-Package-42-jsonschema-specifications
672-
PackageVersion: 2023.11.2
672+
PackageVersion: 2023.12.1
673673
PrimaryPackagePurpose: LIBRARY
674674
PackageSupplier: Person: Julian Berman
675-
PackageDownloadLocation: https://pypi.org/project/jsonschema-specifications/2023.11.2
675+
PackageDownloadLocation: https://pypi.org/project/jsonschema-specifications/2023.12.1
676676
FilesAnalyzed: false
677-
PackageChecksum: SHA1: a2fec386cdb2ed38041ccbfff0fc3e8a566997a3
677+
PackageChecksum: SHA1: 544e0ff86850af1c6d9e533c4b58b76c59542a76
678678
PackageLicenseDeclared: MIT
679679
PackageLicenseConcluded: MIT
680680
PackageCopyrightText: NOASSERTION
681681
PackageSummary: <text>The JSON Schema meta-schemas and vocabularies, exposed as a Registry</text>
682-
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/jsonschema-specifications@2023.11.2
683-
ExternalRef: SECURITY cpe23Type cpe:2.3:a:julian_berman:jsonschema-specifications:2023.11.2:*:*:*:*:*:*:*
682+
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/jsonschema-specifications@2023.12.1
683+
ExternalRef: SECURITY cpe23Type cpe:2.3:a:julian_berman:jsonschema-specifications:2023.12.1:*:*:*:*:*:*:*
684684
#####
685685

686686
PackageName: referencing
@@ -701,33 +701,32 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:julian_berman:referencing:0.32.0:*:*:*
701701

702702
PackageName: rpds-py
703703
SPDXID: SPDXRef-Package-44-rpds-py
704-
PackageVersion: 0.15.2
704+
PackageVersion: 0.16.2
705705
PrimaryPackagePurpose: LIBRARY
706706
PackageSupplier: Person: Julian Berman
707-
PackageDownloadLocation: https://pypi.org/project/rpds-py/0.15.2
707+
PackageDownloadLocation: https://pypi.org/project/rpds-py/0.16.2
708708
FilesAnalyzed: false
709709
PackageLicenseDeclared: MIT
710710
PackageLicenseConcluded: MIT
711711
PackageCopyrightText: NOASSERTION
712712
PackageSummary: <text>Python bindings to Rust's persistent data structures (rpds)</text>
713-
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/rpds-py@0.15.2
714-
ExternalRef: SECURITY cpe23Type cpe:2.3:a:julian_berman:rpds-py:0.15.2:*:*:*:*:*:*:*
713+
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/rpds-py@0.16.2
714+
ExternalRef: SECURITY cpe23Type cpe:2.3:a:julian_berman:rpds-py:0.16.2:*:*:*:*:*:*:*
715715
#####
716716

717717
PackageName: lib4sbom
718718
SPDXID: SPDXRef-Package-45-lib4sbom
719-
PackageVersion: 0.5.4
719+
PackageVersion: 0.6.1
720720
PrimaryPackagePurpose: LIBRARY
721721
PackageSupplier: Person: Anthony Harrison ([email protected])
722-
PackageDownloadLocation: https://pypi.org/project/lib4sbom/0.5.4
722+
PackageDownloadLocation: https://pypi.org/project/lib4sbom/0.6.1
723723
FilesAnalyzed: false
724-
PackageChecksum: SHA1: 3de23e3f3b32c08f9bf8231e2765a06ebb82dc80
725724
PackageLicenseDeclared: Apache-2.0
726725
PackageLicenseConcluded: Apache-2.0
727726
PackageCopyrightText: NOASSERTION
728727
PackageSummary: <text>Software Bill of Material (SBOM) generator and consumer library</text>
729-
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/lib4sbom@0.5.4
730-
ExternalRef: SECURITY cpe23Type cpe:2.3:a:anthony_harrison:lib4sbom:0.5.4:*:*:*:*:*:*:*
728+
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/lib4sbom@0.6.1
729+
ExternalRef: SECURITY cpe23Type cpe:2.3:a:anthony_harrison:lib4sbom:0.6.1:*:*:*:*:*:*:*
731730
#####
732731

733732
PackageName: pyyaml

0 commit comments

Comments
 (0)