Skip to content

Commit 92b0d4e

Browse files
github-actions[bot]web-flow
authored and
inosmeet
committed
chore: update SBOM for Python 3.11 (intel#3730)
Co-authored-by: GitHub <[email protected]>
1 parent cb218ee commit 92b0d4e

File tree

2 files changed

+56
-52
lines changed

2 files changed

+56
-52
lines changed

‎sbom/cve-bin-tool-py3.11.json

Lines changed: 35 additions & 32 deletions
Original file line numberDiff line numberDiff line change
@@ -2,10 +2,10 @@
22
"$schema": "http://cyclonedx.org/schema/bom-1.5.schema.json",
33
"bomFormat": "CycloneDX",
44
"specVersion": "1.5",
5-
"serialNumber": "urn:uuid:da3496f1-ecc5-440c-bf10-33aa223352e4",
5+
"serialNumber": "urn:uuid:9e619634-d181-4e5f-974d-af3607c58aa6",
66
"version": 1,
77
"metadata": {
8-
"timestamp": "2024-01-09T17:40:39Z",
8+
"timestamp": "2024-01-15T00:28:58Z",
99
"tools": {
1010
"components": [
1111
{
@@ -1348,6 +1348,12 @@
13481348
},
13491349
"cpe": "cpe:2.3:a:the_python_cryptographic_authority_and_individual_contributors:cryptography:41.0.7:*:*:*:*:*:*:*",
13501350
"description": "cryptography is a package which provides cryptographic recipes and primitives to Python developers.",
1351+
"hashes": [
1352+
{
1353+
"alg": "SHA-1",
1354+
"content": "4054596afc6f2b6cfcc54f56c35c34e0e429cb66"
1355+
}
1356+
],
13511357
"licenses": [
13521358
{
13531359
"expression": "Apache-2.0 OR BSD-3-Clause"
@@ -1576,7 +1582,7 @@
15761582
"type": "library",
15771583
"bom-ref": "35-google-auth",
15781584
"name": "google-auth",
1579-
"version": "2.26.1",
1585+
"version": "2.26.2",
15801586
"supplier": {
15811587
"name": "Google Cloud Platform",
15821588
"contact": [
@@ -1585,7 +1591,7 @@
15851591
}
15861592
]
15871593
},
1588-
"cpe": "cpe:2.3:a:google_cloud_platform:google-auth:2.26.1:*:*:*:*:*:*:*",
1594+
"cpe": "cpe:2.3:a:google_cloud_platform:google-auth:2.26.2:*:*:*:*:*:*:*",
15891595
"description": "Google Authentication Library",
15901596
"licenses": [
15911597
{
@@ -1597,12 +1603,12 @@
15971603
],
15981604
"externalReferences": [
15991605
{
1600-
"url": "https://pypi.org/project/google-auth/2.26.1",
1606+
"url": "https://pypi.org/project/google-auth/2.26.2",
16011607
"type": "distribution",
16021608
"comment": "Download location for component"
16031609
}
16041610
],
1605-
"purl": "pkg:pypi/[email protected].1",
1611+
"purl": "pkg:pypi/[email protected].2",
16061612
"properties": [
16071613
{
16081614
"name": "language",
@@ -1722,23 +1728,8 @@
17221728
"type": "library",
17231729
"bom-ref": "38-jinja2",
17241730
"name": "jinja2",
1725-
"version": "3.1.2",
1726-
"supplier": {
1727-
"name": "Armin Ronacher",
1728-
"contact": [
1729-
{
1730-
"email": "[email protected]"
1731-
}
1732-
]
1733-
},
1734-
"cpe": "cpe:2.3:a:armin_ronacher:jinja2:3.1.2:*:*:*:*:*:*:*",
1731+
"version": "3.1.3",
17351732
"description": "A very fast and expressive template engine.",
1736-
"hashes": [
1737-
{
1738-
"alg": "SHA-1",
1739-
"content": "b08cd4bc64bb980df86ed2876978ae5735572280"
1740-
}
1741-
],
17421733
"licenses": [
17431734
{
17441735
"license": {
@@ -1749,12 +1740,12 @@
17491740
],
17501741
"externalReferences": [
17511742
{
1752-
"url": "https://pypi.org/project/Jinja2/3.1.2",
1743+
"url": "https://pypi.org/project/Jinja2/3.1.3",
17531744
"type": "distribution",
17541745
"comment": "Download location for component"
17551746
}
17561747
],
1757-
"purl": "pkg:pypi/[email protected].2",
1748+
"purl": "pkg:pypi/[email protected].3",
17581749
"properties": [
17591750
{
17601751
"name": "language",
@@ -1932,11 +1923,11 @@
19321923
"type": "library",
19331924
"bom-ref": "43-rpds-py",
19341925
"name": "rpds-py",
1935-
"version": "0.16.2",
1926+
"version": "0.17.1",
19361927
"supplier": {
19371928
"name": "Julian Berman"
19381929
},
1939-
"cpe": "cpe:2.3:a:julian_berman:rpds-py:0.16.2:*:*:*:*:*:*:*",
1930+
"cpe": "cpe:2.3:a:julian_berman:rpds-py:0.17.1:*:*:*:*:*:*:*",
19401931
"description": "Python bindings to Rust's persistent data structures (rpds)",
19411932
"licenses": [
19421933
{
@@ -1948,12 +1939,12 @@
19481939
],
19491940
"externalReferences": [
19501941
{
1951-
"url": "https://pypi.org/project/rpds-py/0.16.2",
1942+
"url": "https://pypi.org/project/rpds-py/0.17.1",
19521943
"type": "distribution",
19531944
"comment": "Download location for component"
19541945
}
19551946
],
1956-
"purl": "pkg:pypi/rpds-py@0.16.2",
1947+
"purl": "pkg:pypi/rpds-py@0.17.1",
19571948
"properties": [
19581949
{
19591950
"name": "language",
@@ -2117,6 +2108,12 @@
21172108
},
21182109
"cpe": "cpe:2.3:a:the_purl_authors:packageurl-python:0.13.4:*:*:*:*:*:*:*",
21192110
"description": "A purl aka. Package URL parser and builder",
2111+
"hashes": [
2112+
{
2113+
"alg": "SHA-1",
2114+
"content": "f7f41b89a941278e8f76c0aad3a9409c6583eda8"
2115+
}
2116+
],
21202117
"licenses": [
21212118
{
21222119
"license": {
@@ -2649,6 +2646,12 @@
26492646
},
26502647
"cpe": "cpe:2.3:a:georg_brandl:pygments:2.17.2:*:*:*:*:*:*:*",
26512648
"description": "Pygments is a syntax highlighting package written in Python.",
2649+
"hashes": [
2650+
{
2651+
"alg": "SHA-1",
2652+
"content": "ee30ce132ae252bd72f3a74c86d9314a2214d0b4"
2653+
}
2654+
],
26522655
"licenses": [
26532656
{
26542657
"license": {
@@ -2770,7 +2773,7 @@
27702773
"type": "library",
27712774
"bom-ref": "62-xmlschema",
27722775
"name": "xmlschema",
2773-
"version": "3.0.0",
2776+
"version": "3.0.1",
27742777
"supplier": {
27752778
"name": "Davide Brunato",
27762779
"contact": [
@@ -2779,7 +2782,7 @@
27792782
}
27802783
]
27812784
},
2782-
"cpe": "cpe:2.3:a:davide_brunato:xmlschema:3.0.0:*:*:*:*:*:*:*",
2785+
"cpe": "cpe:2.3:a:davide_brunato:xmlschema:3.0.1:*:*:*:*:*:*:*",
27832786
"description": "An XML Schema validator and decoder",
27842787
"licenses": [
27852788
{
@@ -2791,12 +2794,12 @@
27912794
],
27922795
"externalReferences": [
27932796
{
2794-
"url": "https://pypi.org/project/xmlschema/3.0.0",
2797+
"url": "https://pypi.org/project/xmlschema/3.0.1",
27952798
"type": "distribution",
27962799
"comment": "Download location for component"
27972800
}
27982801
],
2799-
"purl": "pkg:pypi/[email protected].0",
2802+
"purl": "pkg:pypi/[email protected].1",
28002803
"properties": [
28012804
{
28022805
"name": "language",

‎sbom/cve-bin-tool-py3.11.spdx

Lines changed: 21 additions & 20 deletions
Original file line numberDiff line numberDiff line change
@@ -2,10 +2,10 @@ SPDXVersion: SPDX-2.3
22
DataLicense: CC0-1.0
33
SPDXID: SPDXRef-DOCUMENT
44
DocumentName: Python-cve-bin-tool
5-
DocumentNamespace: http://spdx.org/spdxdocs/Python-cve-bin-tool-c1dd1a4f-c1c2-4e9c-b209-3e7b2c62d8f6
5+
DocumentNamespace: http://spdx.org/spdxdocs/Python-cve-bin-tool-8e29b9cc-59f9-452e-96a3-1f339c90fab0
66
LicenseListVersion: 3.22
77
Creator: Tool: sbom4python-0.10.3
8-
Created: 2024-01-09T17:39:03Z
8+
Created: 2024-01-15T00:27:23Z
99
CreatorComment: <text>This document has been automatically generated.</text>
1010
#####
1111

@@ -480,6 +480,7 @@ PrimaryPackagePurpose: LIBRARY
480480
PackageSupplier: Organization: The Python Cryptographic Authority and individual contributors ([email protected])
481481
PackageDownloadLocation: https://pypi.org/project/cryptography/41.0.7
482482
FilesAnalyzed: false
483+
PackageChecksum: SHA1: 4054596afc6f2b6cfcc54f56c35c34e0e429cb66
483484
PackageLicenseDeclared: Apache-2.0 OR BSD-3-Clause
484485
PackageLicenseConcluded: Apache-2.0 OR BSD-3-Clause
485486
PackageCopyrightText: NOASSERTION
@@ -556,18 +557,18 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:craig_citro:google-apitools:0.5.32:*:*
556557

557558
PackageName: google-auth
558559
SPDXID: SPDXRef-Package-35-google-auth
559-
PackageVersion: 2.26.1
560+
PackageVersion: 2.26.2
560561
PrimaryPackagePurpose: LIBRARY
561562
PackageSupplier: Organization: Google Cloud Platform ([email protected])
562-
PackageDownloadLocation: https://pypi.org/project/google-auth/2.26.1
563+
PackageDownloadLocation: https://pypi.org/project/google-auth/2.26.2
563564
FilesAnalyzed: false
564565
PackageLicenseDeclared: NOASSERTION
565566
PackageLicenseConcluded: Apache-2.0
566567
PackageLicenseComments: <text>google-auth declares Apache 2.0 which is not currently a valid SPDX License identifier or expression.</text>
567568
PackageCopyrightText: NOASSERTION
568569
PackageSummary: <text>Google Authentication Library</text>
569-
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/[email protected].1
570-
ExternalRef: SECURITY cpe23Type cpe:2.3:a:google_cloud_platform:google-auth:2.26.1:*:*:*:*:*:*:*
570+
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/[email protected].2
571+
ExternalRef: SECURITY cpe23Type cpe:2.3:a:google_cloud_platform:google-auth:2.26.2:*:*:*:*:*:*:*
571572
#####
572573

573574
PackageName: cachetools
@@ -605,18 +606,16 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:ori_livneh:monotonic:1.6:*:*:*:*:*:*:*
605606

606607
PackageName: jinja2
607608
SPDXID: SPDXRef-Package-38-jinja2
608-
PackageVersion: 3.1.2
609+
PackageVersion: 3.1.3
609610
PrimaryPackagePurpose: LIBRARY
610-
PackageSupplier: Person: Armin Ronacher ([email protected])
611-
PackageDownloadLocation: https://pypi.org/project/Jinja2/3.1.2
611+
PackageSupplier: NOASSERTION
612+
PackageDownloadLocation: https://pypi.org/project/Jinja2/3.1.3
612613
FilesAnalyzed: false
613-
PackageChecksum: SHA1: b08cd4bc64bb980df86ed2876978ae5735572280
614614
PackageLicenseDeclared: BSD-3-Clause
615615
PackageLicenseConcluded: BSD-3-Clause
616616
PackageCopyrightText: NOASSERTION
617617
PackageSummary: <text>A very fast and expressive template engine.</text>
618-
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/[email protected]
619-
ExternalRef: SECURITY cpe23Type cpe:2.3:a:armin_ronacher:jinja2:3.1.2:*:*:*:*:*:*:*
618+
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/[email protected]
620619
#####
621620

622621
PackageName: markupsafe
@@ -683,17 +682,17 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:julian_berman:referencing:0.32.1:*:*:*
683682

684683
PackageName: rpds-py
685684
SPDXID: SPDXRef-Package-43-rpds-py
686-
PackageVersion: 0.16.2
685+
PackageVersion: 0.17.1
687686
PrimaryPackagePurpose: LIBRARY
688687
PackageSupplier: Person: Julian Berman
689-
PackageDownloadLocation: https://pypi.org/project/rpds-py/0.16.2
688+
PackageDownloadLocation: https://pypi.org/project/rpds-py/0.17.1
690689
FilesAnalyzed: false
691690
PackageLicenseDeclared: MIT
692691
PackageLicenseConcluded: MIT
693692
PackageCopyrightText: NOASSERTION
694693
PackageSummary: <text>Python bindings to Rust's persistent data structures (rpds)</text>
695-
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/rpds-py@0.16.2
696-
ExternalRef: SECURITY cpe23Type cpe:2.3:a:julian_berman:rpds-py:0.16.2:*:*:*:*:*:*:*
694+
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/rpds-py@0.17.1
695+
ExternalRef: SECURITY cpe23Type cpe:2.3:a:julian_berman:rpds-py:0.17.1:*:*:*:*:*:*:*
697696
#####
698697

699698
PackageName: lib4sbom
@@ -751,6 +750,7 @@ PrimaryPackagePurpose: LIBRARY
751750
PackageSupplier: Person: the purl authors
752751
PackageDownloadLocation: https://pypi.org/project/packageurl-python/0.13.4
753752
FilesAnalyzed: false
753+
PackageChecksum: SHA1: f7f41b89a941278e8f76c0aad3a9409c6583eda8
754754
PackageLicenseDeclared: MIT
755755
PackageLicenseConcluded: MIT
756756
PackageCopyrightText: NOASSERTION
@@ -942,6 +942,7 @@ PrimaryPackagePurpose: LIBRARY
942942
PackageSupplier: Person: Georg Brandl ([email protected])
943943
PackageDownloadLocation: https://pypi.org/project/Pygments/2.17.2
944944
FilesAnalyzed: false
945+
PackageChecksum: SHA1: ee30ce132ae252bd72f3a74c86d9314a2214d0b4
945946
PackageLicenseDeclared: BSD-2-Clause
946947
PackageLicenseConcluded: BSD-2-Clause
947948
PackageCopyrightText: NOASSERTION
@@ -983,17 +984,17 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:william_pearson:toml:0.10.2:*:*:*:*:*:
983984

984985
PackageName: xmlschema
985986
SPDXID: SPDXRef-Package-62-xmlschema
986-
PackageVersion: 3.0.0
987+
PackageVersion: 3.0.1
987988
PrimaryPackagePurpose: LIBRARY
988989
PackageSupplier: Person: Davide Brunato ([email protected])
989-
PackageDownloadLocation: https://pypi.org/project/xmlschema/3.0.0
990+
PackageDownloadLocation: https://pypi.org/project/xmlschema/3.0.1
990991
FilesAnalyzed: false
991992
PackageLicenseDeclared: MIT
992993
PackageLicenseConcluded: MIT
993994
PackageCopyrightText: NOASSERTION
994995
PackageSummary: <text>An XML Schema validator and decoder</text>
995-
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/[email protected].0
996-
ExternalRef: SECURITY cpe23Type cpe:2.3:a:davide_brunato:xmlschema:3.0.0:*:*:*:*:*:*:*
996+
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/[email protected].1
997+
ExternalRef: SECURITY cpe23Type cpe:2.3:a:davide_brunato:xmlschema:3.0.1:*:*:*:*:*:*:*
997998
#####
998999

9991000
PackageName: elementpath

0 commit comments

Comments
 (0)