Skip to content

Commit bb5f0a0

Browse files
github-actions[bot]web-flow
authored and
inosmeet
committed
chore: update SBOM for Python 3.9 (intel#3691)
Co-authored-by: GitHub <[email protected]>
1 parent e23e995 commit bb5f0a0

File tree

2 files changed

+55
-62
lines changed

2 files changed

+55
-62
lines changed

‎sbom/cve-bin-tool-py3.9.json

Lines changed: 30 additions & 36 deletions
Original file line numberDiff line numberDiff line change
@@ -2,15 +2,15 @@
22
"$schema": "http://cyclonedx.org/schema/bom-1.5.schema.json",
33
"bomFormat": "CycloneDX",
44
"specVersion": "1.5",
5-
"serialNumber": "urn:uuid:90dd997d-aca1-428d-8ef9-39962e37a532",
5+
"serialNumber": "urn:uuid:6553fae0-504e-42c5-826d-dd969a8e3e77",
66
"version": 1,
77
"metadata": {
8-
"timestamp": "2023-12-25T00:30:12Z",
8+
"timestamp": "2024-01-04T20:03:01Z",
99
"tools": {
1010
"components": [
1111
{
1212
"name": "sbom4python",
13-
"version": "0.10.2",
13+
"version": "0.10.3",
1414
"type": "application"
1515
}
1616
]
@@ -248,7 +248,7 @@
248248
"type": "library",
249249
"bom-ref": "6-attrs",
250250
"name": "attrs",
251-
"version": "23.1.0",
251+
"version": "23.2.0",
252252
"supplier": {
253253
"name": "Hynek Schlawack",
254254
"contact": [
@@ -257,22 +257,16 @@
257257
}
258258
]
259259
},
260-
"cpe": "cpe:2.3:a:hynek_schlawack:attrs:23.1.0:*:*:*:*:*:*:*",
260+
"cpe": "cpe:2.3:a:hynek_schlawack:attrs:23.2.0:*:*:*:*:*:*:*",
261261
"description": "Classes Without Boilerplate",
262-
"hashes": [
263-
{
264-
"alg": "SHA-1",
265-
"content": "1e2f6f9cac5cc60f0adab051c14adf09ffe39155"
266-
}
267-
],
268262
"externalReferences": [
269263
{
270-
"url": "https://pypi.org/project/attrs/23.1.0",
264+
"url": "https://pypi.org/project/attrs/23.2.0",
271265
"type": "distribution",
272266
"comment": "Download location for component"
273267
}
274268
],
275-
"purl": "pkg:pypi/attrs@23.1.0",
269+
"purl": "pkg:pypi/attrs@23.2.0",
276270
"properties": [
277271
{
278272
"name": "language",
@@ -1354,6 +1348,12 @@
13541348
},
13551349
"cpe": "cpe:2.3:a:the_pyopenssl_developers:pyopenssl:23.3.0:*:*:*:*:*:*:*",
13561350
"description": "Python wrapper module around the OpenSSL library",
1351+
"hashes": [
1352+
{
1353+
"alg": "SHA-1",
1354+
"content": "5ba8ce10ed7c318e57516a7ec8447cbb5626d3f9"
1355+
}
1356+
],
13571357
"licenses": [
13581358
{
13591359
"license": {
@@ -1628,7 +1628,7 @@
16281628
"type": "library",
16291629
"bom-ref": "36-google-auth",
16301630
"name": "google-auth",
1631-
"version": "2.25.2",
1631+
"version": "2.26.1",
16321632
"supplier": {
16331633
"name": "Google Cloud Platform",
16341634
"contact": [
@@ -1637,7 +1637,7 @@
16371637
}
16381638
]
16391639
},
1640-
"cpe": "cpe:2.3:a:google_cloud_platform:google-auth:2.25.2:*:*:*:*:*:*:*",
1640+
"cpe": "cpe:2.3:a:google_cloud_platform:google-auth:2.26.1:*:*:*:*:*:*:*",
16411641
"description": "Google Authentication Library",
16421642
"licenses": [
16431643
{
@@ -1649,12 +1649,12 @@
16491649
],
16501650
"externalReferences": [
16511651
{
1652-
"url": "https://pypi.org/project/google-auth/2.25.2",
1652+
"url": "https://pypi.org/project/google-auth/2.26.1",
16531653
"type": "distribution",
16541654
"comment": "Download location for component"
16551655
}
16561656
],
1657-
"purl": "pkg:pypi/google-auth@2.25.2",
1657+
"purl": "pkg:pypi/google-auth@2.26.1",
16581658
"properties": [
16591659
{
16601660
"name": "language",
@@ -1978,16 +1978,16 @@
19781978
"type": "library",
19791979
"bom-ref": "44-jsonschema-specifications",
19801980
"name": "jsonschema-specifications",
1981-
"version": "2023.11.2",
1981+
"version": "2023.12.1",
19821982
"supplier": {
19831983
"name": "Julian Berman"
19841984
},
1985-
"cpe": "cpe:2.3:a:julian_berman:jsonschema-specifications:2023.11.2:*:*:*:*:*:*:*",
1985+
"cpe": "cpe:2.3:a:julian_berman:jsonschema-specifications:2023.12.1:*:*:*:*:*:*:*",
19861986
"description": "The JSON Schema meta-schemas and vocabularies, exposed as a Registry",
19871987
"hashes": [
19881988
{
19891989
"alg": "SHA-1",
1990-
"content": "a2fec386cdb2ed38041ccbfff0fc3e8a566997a3"
1990+
"content": "544e0ff86850af1c6d9e533c4b58b76c59542a76"
19911991
}
19921992
],
19931993
"licenses": [
@@ -2000,12 +2000,12 @@
20002000
],
20012001
"externalReferences": [
20022002
{
2003-
"url": "https://pypi.org/project/jsonschema-specifications/2023.11.2",
2003+
"url": "https://pypi.org/project/jsonschema-specifications/2023.12.1",
20042004
"type": "distribution",
20052005
"comment": "Download location for component"
20062006
}
20072007
],
2008-
"purl": "pkg:pypi/jsonschema-specifications@2023.11.2",
2008+
"purl": "pkg:pypi/jsonschema-specifications@2023.12.1",
20092009
"properties": [
20102010
{
20112011
"name": "language",
@@ -2064,11 +2064,11 @@
20642064
"type": "library",
20652065
"bom-ref": "46-rpds-py",
20662066
"name": "rpds-py",
2067-
"version": "0.15.2",
2067+
"version": "0.16.2",
20682068
"supplier": {
20692069
"name": "Julian Berman"
20702070
},
2071-
"cpe": "cpe:2.3:a:julian_berman:rpds-py:0.15.2:*:*:*:*:*:*:*",
2071+
"cpe": "cpe:2.3:a:julian_berman:rpds-py:0.16.2:*:*:*:*:*:*:*",
20722072
"description": "Python bindings to Rust's persistent data structures (rpds)",
20732073
"licenses": [
20742074
{
@@ -2080,12 +2080,12 @@
20802080
],
20812081
"externalReferences": [
20822082
{
2083-
"url": "https://pypi.org/project/rpds-py/0.15.2",
2083+
"url": "https://pypi.org/project/rpds-py/0.16.2",
20842084
"type": "distribution",
20852085
"comment": "Download location for component"
20862086
}
20872087
],
2088-
"purl": "pkg:pypi/rpds-py@0.15.2",
2088+
"purl": "pkg:pypi/rpds-py@0.16.2",
20892089
"properties": [
20902090
{
20912091
"name": "language",
@@ -2101,7 +2101,7 @@
21012101
"type": "library",
21022102
"bom-ref": "47-lib4sbom",
21032103
"name": "lib4sbom",
2104-
"version": "0.5.4",
2104+
"version": "0.6.1",
21052105
"supplier": {
21062106
"name": "Anthony Harrison",
21072107
"contact": [
@@ -2110,14 +2110,8 @@
21102110
}
21112111
]
21122112
},
2113-
"cpe": "cpe:2.3:a:anthony_harrison:lib4sbom:0.5.4:*:*:*:*:*:*:*",
2113+
"cpe": "cpe:2.3:a:anthony_harrison:lib4sbom:0.6.1:*:*:*:*:*:*:*",
21142114
"description": "Software Bill of Material (SBOM) generator and consumer library",
2115-
"hashes": [
2116-
{
2117-
"alg": "SHA-1",
2118-
"content": "3de23e3f3b32c08f9bf8231e2765a06ebb82dc80"
2119-
}
2120-
],
21212115
"licenses": [
21222116
{
21232117
"license": {
@@ -2128,12 +2122,12 @@
21282122
],
21292123
"externalReferences": [
21302124
{
2131-
"url": "https://pypi.org/project/lib4sbom/0.5.4",
2125+
"url": "https://pypi.org/project/lib4sbom/0.6.1",
21322126
"type": "distribution",
21332127
"comment": "Download location for component"
21342128
}
21352129
],
2136-
"purl": "pkg:pypi/lib4sbom@0.5.4",
2130+
"purl": "pkg:pypi/lib4sbom@0.6.1",
21372131
"properties": [
21382132
{
21392133
"name": "language",

‎sbom/cve-bin-tool-py3.9.spdx

Lines changed: 25 additions & 26 deletions
Original file line numberDiff line numberDiff line change
@@ -2,10 +2,10 @@ SPDXVersion: SPDX-2.3
22
DataLicense: CC0-1.0
33
SPDXID: SPDXRef-DOCUMENT
44
DocumentName: Python-cve-bin-tool
5-
DocumentNamespace: http://spdx.org/spdxdocs/Python-cve-bin-tool-7bfe4ec0-78d6-4778-aaa1-1a6ed11aac0d
5+
DocumentNamespace: http://spdx.org/spdxdocs/Python-cve-bin-tool-e11e4bca-29cf-4352-8278-5f74b9ab1ee2
66
LicenseListVersion: 3.22
7-
Creator: Tool: sbom4python-0.10.2
8-
Created: 2023-12-25T00:28:32Z
7+
Creator: Tool: sbom4python-0.10.3
8+
Created: 2024-01-04T20:01:00Z
99
CreatorComment: <text>This document has been automatically generated.</text>
1010
#####
1111

@@ -90,18 +90,17 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:andrew_svetlov:async-timeout:4.0.3:*:*
9090

9191
PackageName: attrs
9292
SPDXID: SPDXRef-Package-6-attrs
93-
PackageVersion: 23.1.0
93+
PackageVersion: 23.2.0
9494
PrimaryPackagePurpose: LIBRARY
9595
PackageSupplier: Person: Hynek Schlawack ([email protected])
96-
PackageDownloadLocation: https://pypi.org/project/attrs/23.1.0
96+
PackageDownloadLocation: https://pypi.org/project/attrs/23.2.0
9797
FilesAnalyzed: false
98-
PackageChecksum: SHA1: 1e2f6f9cac5cc60f0adab051c14adf09ffe39155
9998
PackageLicenseDeclared: NOASSERTION
10099
PackageLicenseConcluded: NOASSERTION
101100
PackageCopyrightText: NOASSERTION
102101
PackageSummary: <text>Classes Without Boilerplate</text>
103-
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/attrs@23.1.0
104-
ExternalRef: SECURITY cpe23Type cpe:2.3:a:hynek_schlawack:attrs:23.1.0:*:*:*:*:*:*:*
102+
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/attrs@23.2.0
103+
ExternalRef: SECURITY cpe23Type cpe:2.3:a:hynek_schlawack:attrs:23.2.0:*:*:*:*:*:*:*
105104
#####
106105

107106
PackageName: multidict
@@ -481,6 +480,7 @@ PrimaryPackagePurpose: LIBRARY
481480
PackageSupplier: Organization: The pyOpenSSL developers ([email protected])
482481
PackageDownloadLocation: https://pypi.org/project/pyOpenSSL/23.3.0
483482
FilesAnalyzed: false
483+
PackageChecksum: SHA1: 5ba8ce10ed7c318e57516a7ec8447cbb5626d3f9
484484
PackageLicenseDeclared: NOASSERTION
485485
PackageLicenseConcluded: Apache-2.0
486486
PackageLicenseComments: <text>pyOpenSSL declares Apache License, Version 2.0 which is not currently a valid SPDX License identifier or expression.</text>
@@ -573,18 +573,18 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:craig_citro:google-apitools:0.5.32:*:*
573573

574574
PackageName: google-auth
575575
SPDXID: SPDXRef-Package-36-google-auth
576-
PackageVersion: 2.25.2
576+
PackageVersion: 2.26.1
577577
PrimaryPackagePurpose: LIBRARY
578578
PackageSupplier: Organization: Google Cloud Platform ([email protected])
579-
PackageDownloadLocation: https://pypi.org/project/google-auth/2.25.2
579+
PackageDownloadLocation: https://pypi.org/project/google-auth/2.26.1
580580
FilesAnalyzed: false
581581
PackageLicenseDeclared: NOASSERTION
582582
PackageLicenseConcluded: Apache-2.0
583583
PackageLicenseComments: <text>google-auth declares Apache 2.0 which is not currently a valid SPDX License identifier or expression.</text>
584584
PackageCopyrightText: NOASSERTION
585585
PackageSummary: <text>Google Authentication Library</text>
586-
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/google-auth@2.25.2
587-
ExternalRef: SECURITY cpe23Type cpe:2.3:a:google_cloud_platform:google-auth:2.25.2:*:*:*:*:*:*:*
586+
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/google-auth@2.26.1
587+
ExternalRef: SECURITY cpe23Type cpe:2.3:a:google_cloud_platform:google-auth:2.26.1:*:*:*:*:*:*:*
588588
#####
589589

590590
PackageName: cachetools
@@ -700,18 +700,18 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:julian_berman:jsonschema:4.20.0:*:*:*:
700700

701701
PackageName: jsonschema-specifications
702702
SPDXID: SPDXRef-Package-44-jsonschema-specifications
703-
PackageVersion: 2023.11.2
703+
PackageVersion: 2023.12.1
704704
PrimaryPackagePurpose: LIBRARY
705705
PackageSupplier: Person: Julian Berman
706-
PackageDownloadLocation: https://pypi.org/project/jsonschema-specifications/2023.11.2
706+
PackageDownloadLocation: https://pypi.org/project/jsonschema-specifications/2023.12.1
707707
FilesAnalyzed: false
708-
PackageChecksum: SHA1: a2fec386cdb2ed38041ccbfff0fc3e8a566997a3
708+
PackageChecksum: SHA1: 544e0ff86850af1c6d9e533c4b58b76c59542a76
709709
PackageLicenseDeclared: MIT
710710
PackageLicenseConcluded: MIT
711711
PackageCopyrightText: NOASSERTION
712712
PackageSummary: <text>The JSON Schema meta-schemas and vocabularies, exposed as a Registry</text>
713-
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/jsonschema-specifications@2023.11.2
714-
ExternalRef: SECURITY cpe23Type cpe:2.3:a:julian_berman:jsonschema-specifications:2023.11.2:*:*:*:*:*:*:*
713+
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/jsonschema-specifications@2023.12.1
714+
ExternalRef: SECURITY cpe23Type cpe:2.3:a:julian_berman:jsonschema-specifications:2023.12.1:*:*:*:*:*:*:*
715715
#####
716716

717717
PackageName: referencing
@@ -732,33 +732,32 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:julian_berman:referencing:0.32.0:*:*:*
732732

733733
PackageName: rpds-py
734734
SPDXID: SPDXRef-Package-46-rpds-py
735-
PackageVersion: 0.15.2
735+
PackageVersion: 0.16.2
736736
PrimaryPackagePurpose: LIBRARY
737737
PackageSupplier: Person: Julian Berman
738-
PackageDownloadLocation: https://pypi.org/project/rpds-py/0.15.2
738+
PackageDownloadLocation: https://pypi.org/project/rpds-py/0.16.2
739739
FilesAnalyzed: false
740740
PackageLicenseDeclared: MIT
741741
PackageLicenseConcluded: MIT
742742
PackageCopyrightText: NOASSERTION
743743
PackageSummary: <text>Python bindings to Rust's persistent data structures (rpds)</text>
744-
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/rpds-py@0.15.2
745-
ExternalRef: SECURITY cpe23Type cpe:2.3:a:julian_berman:rpds-py:0.15.2:*:*:*:*:*:*:*
744+
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/rpds-py@0.16.2
745+
ExternalRef: SECURITY cpe23Type cpe:2.3:a:julian_berman:rpds-py:0.16.2:*:*:*:*:*:*:*
746746
#####
747747

748748
PackageName: lib4sbom
749749
SPDXID: SPDXRef-Package-47-lib4sbom
750-
PackageVersion: 0.5.4
750+
PackageVersion: 0.6.1
751751
PrimaryPackagePurpose: LIBRARY
752752
PackageSupplier: Person: Anthony Harrison ([email protected])
753-
PackageDownloadLocation: https://pypi.org/project/lib4sbom/0.5.4
753+
PackageDownloadLocation: https://pypi.org/project/lib4sbom/0.6.1
754754
FilesAnalyzed: false
755-
PackageChecksum: SHA1: 3de23e3f3b32c08f9bf8231e2765a06ebb82dc80
756755
PackageLicenseDeclared: Apache-2.0
757756
PackageLicenseConcluded: Apache-2.0
758757
PackageCopyrightText: NOASSERTION
759758
PackageSummary: <text>Software Bill of Material (SBOM) generator and consumer library</text>
760-
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/lib4sbom@0.5.4
761-
ExternalRef: SECURITY cpe23Type cpe:2.3:a:anthony_harrison:lib4sbom:0.5.4:*:*:*:*:*:*:*
759+
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/lib4sbom@0.6.1
760+
ExternalRef: SECURITY cpe23Type cpe:2.3:a:anthony_harrison:lib4sbom:0.6.1:*:*:*:*:*:*:*
762761
#####
763762

764763
PackageName: pyyaml

0 commit comments

Comments
 (0)