Skip to content

Commit 12ad905

Browse files
web-flowweb-flow
authored
chore: update SBOM for Python 3.10
1 parent cb3826d commit 12ad905

File tree

2 files changed

+44
-44
lines changed

2 files changed

+44
-44
lines changed

‎sbom/cve-bin-tool-py3.10.json

Lines changed: 22 additions & 22 deletions
Original file line numberDiff line numberDiff line change
@@ -2,10 +2,10 @@
22
"$schema": "http://cyclonedx.org/schema/bom-1.5.schema.json",
33
"bomFormat": "CycloneDX",
44
"specVersion": "1.5",
5-
"serialNumber": "urn:uuid:6baa9a42-0ae2-43de-ae54-80a7c7975217",
5+
"serialNumber": "urn:uuid:9d4b0c1e-1f41-466b-9562-6dfb28a23baa",
66
"version": 1,
77
"metadata": {
8-
"timestamp": "2023-12-04T00:26:42Z",
8+
"timestamp": "2023-12-11T00:27:30Z",
99
"tools": {
1010
"components": [
1111
{
@@ -288,7 +288,7 @@
288288
"type": "library",
289289
"bom-ref": "8-yarl",
290290
"name": "yarl",
291-
"version": "1.9.3",
291+
"version": "1.9.4",
292292
"supplier": {
293293
"name": "Andrew Svetlov",
294294
"contact": [
@@ -297,7 +297,7 @@
297297
}
298298
]
299299
},
300-
"cpe": "cpe:2.3:a:andrew_svetlov:yarl:1.9.3:*:*:*:*:*:*:*",
300+
"cpe": "cpe:2.3:a:andrew_svetlov:yarl:1.9.4:*:*:*:*:*:*:*",
301301
"description": "Yet another URL library",
302302
"licenses": [
303303
{
@@ -309,12 +309,12 @@
309309
],
310310
"externalReferences": [
311311
{
312-
"url": "https://pypi.org/project/yarl/1.9.3",
312+
"url": "https://pypi.org/project/yarl/1.9.4",
313313
"type": "distribution",
314314
"comment": "Download location for component"
315315
}
316316
],
317-
"purl": "pkg:pypi/[email protected].3",
317+
"purl": "pkg:pypi/[email protected].4",
318318
"properties": [
319319
{
320320
"name": "language",
@@ -584,7 +584,7 @@
584584
"type": "library",
585585
"bom-ref": "16-argcomplete",
586586
"name": "argcomplete",
587-
"version": "3.1.6",
587+
"version": "3.2.1",
588588
"supplier": {
589589
"name": "Andrey Kislyuk",
590590
"contact": [
@@ -593,7 +593,7 @@
593593
}
594594
]
595595
},
596-
"cpe": "cpe:2.3:a:andrey_kislyuk:argcomplete:3.1.6:*:*:*:*:*:*:*",
596+
"cpe": "cpe:2.3:a:andrey_kislyuk:argcomplete:3.2.1:*:*:*:*:*:*:*",
597597
"description": "Bash tab completion for argparse",
598598
"licenses": [
599599
{
@@ -605,12 +605,12 @@
605605
],
606606
"externalReferences": [
607607
{
608-
"url": "https://pypi.org/project/argcomplete/3.1.6",
608+
"url": "https://pypi.org/project/argcomplete/3.2.1",
609609
"type": "distribution",
610610
"comment": "Download location for component"
611611
}
612612
],
613-
"purl": "pkg:pypi/argcomplete@3.1.6",
613+
"purl": "pkg:pypi/argcomplete@3.2.1",
614614
"properties": [
615615
{
616616
"name": "language",
@@ -1368,7 +1368,7 @@
13681368
"type": "library",
13691369
"bom-ref": "36-google-auth",
13701370
"name": "google-auth",
1371-
"version": "2.24.0",
1371+
"version": "2.25.2",
13721372
"supplier": {
13731373
"name": "Google Cloud Platform",
13741374
"contact": [
@@ -1377,7 +1377,7 @@
13771377
}
13781378
]
13791379
},
1380-
"cpe": "cpe:2.3:a:google_cloud_platform:google-auth:2.24.0:*:*:*:*:*:*:*",
1380+
"cpe": "cpe:2.3:a:google_cloud_platform:google-auth:2.25.2:*:*:*:*:*:*:*",
13811381
"description": "Google Authentication Library",
13821382
"licenses": [
13831383
{
@@ -1389,12 +1389,12 @@
13891389
],
13901390
"externalReferences": [
13911391
{
1392-
"url": "https://pypi.org/project/google-auth/2.24.0",
1392+
"url": "https://pypi.org/project/google-auth/2.25.2",
13931393
"type": "distribution",
13941394
"comment": "Download location for component"
13951395
}
13961396
],
1397-
"purl": "pkg:pypi/google-auth@2.24.0",
1397+
"purl": "pkg:pypi/google-auth@2.25.2",
13981398
"properties": [
13991399
{
14001400
"name": "language",
@@ -1627,11 +1627,11 @@
16271627
"type": "library",
16281628
"bom-ref": "43-referencing",
16291629
"name": "referencing",
1630-
"version": "0.31.1",
1630+
"version": "0.32.0",
16311631
"supplier": {
16321632
"name": "Julian Berman"
16331633
},
1634-
"cpe": "cpe:2.3:a:julian_berman:referencing:0.31.1:*:*:*:*:*:*:*",
1634+
"cpe": "cpe:2.3:a:julian_berman:referencing:0.32.0:*:*:*:*:*:*:*",
16351635
"description": "JSON Referencing + Python",
16361636
"licenses": [
16371637
{
@@ -1643,12 +1643,12 @@
16431643
],
16441644
"externalReferences": [
16451645
{
1646-
"url": "https://pypi.org/project/referencing/0.31.1",
1646+
"url": "https://pypi.org/project/referencing/0.32.0",
16471647
"type": "distribution",
16481648
"comment": "Download location for component"
16491649
}
16501650
],
1651-
"purl": "pkg:pypi/referencing@0.31.1",
1651+
"purl": "pkg:pypi/referencing@0.32.0",
16521652
"properties": [
16531653
{
16541654
"name": "language",
@@ -1811,11 +1811,11 @@
18111811
"type": "library",
18121812
"bom-ref": "48-packageurl-python",
18131813
"name": "packageurl-python",
1814-
"version": "0.11.2",
1814+
"version": "0.12.0",
18151815
"supplier": {
18161816
"name": "the purl authors"
18171817
},
1818-
"cpe": "cpe:2.3:a:the_purl_authors:packageurl-python:0.11.2:*:*:*:*:*:*:*",
1818+
"cpe": "cpe:2.3:a:the_purl_authors:packageurl-python:0.12.0:*:*:*:*:*:*:*",
18191819
"description": "A purl aka. Package URL parser and builder",
18201820
"licenses": [
18211821
{
@@ -1827,12 +1827,12 @@
18271827
],
18281828
"externalReferences": [
18291829
{
1830-
"url": "https://pypi.org/project/packageurl-python/0.11.2",
1830+
"url": "https://pypi.org/project/packageurl-python/0.12.0",
18311831
"type": "distribution",
18321832
"comment": "Download location for component"
18331833
}
18341834
],
1835-
"purl": "pkg:pypi/packageurl-python@0.11.2",
1835+
"purl": "pkg:pypi/packageurl-python@0.12.0",
18361836
"properties": [
18371837
{
18381838
"name": "language",

‎sbom/cve-bin-tool-py3.10.spdx

Lines changed: 22 additions & 22 deletions
Original file line numberDiff line numberDiff line change
@@ -2,10 +2,10 @@ SPDXVersion: SPDX-2.3
22
DataLicense: CC0-1.0
33
SPDXID: SPDXRef-DOCUMENT
44
DocumentName: Python-cve-bin-tool
5-
DocumentNamespace: http://spdx.org/spdxdocs/Python-cve-bin-tool-0628dc5c-a9ba-4bef-85a5-0bff8ab02543
5+
DocumentNamespace: http://spdx.org/spdxdocs/Python-cve-bin-tool-4992f648-3aa3-4c7e-9862-6074ba2c3ba2
66
LicenseListVersion: 3.22
77
Creator: Tool: sbom4python-0.10.1
8-
Created: 2023-12-04T00:25:42Z
8+
Created: 2023-12-11T00:26:28Z
99
CreatorComment: <text>This document has been automatically generated.</text>
1010
#####
1111

@@ -117,17 +117,17 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:andrew_svetlov:multidict:6.0.4:*:*:*:*
117117

118118
PackageName: yarl
119119
SPDXID: SPDXRef-Package-8-yarl
120-
PackageVersion: 1.9.3
120+
PackageVersion: 1.9.4
121121
PrimaryPackagePurpose: LIBRARY
122122
PackageSupplier: Person: Andrew Svetlov ([email protected])
123-
PackageDownloadLocation: https://pypi.org/project/yarl/1.9.3
123+
PackageDownloadLocation: https://pypi.org/project/yarl/1.9.4
124124
FilesAnalyzed: false
125125
PackageLicenseDeclared: Apache-2.0
126126
PackageLicenseConcluded: Apache-2.0
127127
PackageCopyrightText: NOASSERTION
128128
PackageSummary: <text>Yet another URL library</text>
129-
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/[email protected].3
130-
ExternalRef: SECURITY cpe23Type cpe:2.3:a:andrew_svetlov:yarl:1.9.3:*:*:*:*:*:*:*
129+
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/[email protected].4
130+
ExternalRef: SECURITY cpe23Type cpe:2.3:a:andrew_svetlov:yarl:1.9.4:*:*:*:*:*:*:*
131131
#####
132132

133133
PackageName: idna
@@ -241,18 +241,18 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:google_inc.:gsutil:5.27:*:*:*:*:*:*:*
241241

242242
PackageName: argcomplete
243243
SPDXID: SPDXRef-Package-16-argcomplete
244-
PackageVersion: 3.1.6
244+
PackageVersion: 3.2.1
245245
PrimaryPackagePurpose: LIBRARY
246246
PackageSupplier: Person: Andrey Kislyuk ([email protected])
247-
PackageDownloadLocation: https://pypi.org/project/argcomplete/3.1.6
247+
PackageDownloadLocation: https://pypi.org/project/argcomplete/3.2.1
248248
FilesAnalyzed: false
249249
PackageLicenseDeclared: NOASSERTION
250250
PackageLicenseConcluded: Apache-2.0
251251
PackageLicenseComments: <text>argcomplete declares Apache Software License which is not currently a valid SPDX License identifier or expression.</text>
252252
PackageCopyrightText: NOASSERTION
253253
PackageSummary: <text>Bash tab completion for argparse</text>
254-
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/argcomplete@3.1.6
255-
ExternalRef: SECURITY cpe23Type cpe:2.3:a:andrey_kislyuk:argcomplete:3.1.6:*:*:*:*:*:*:*
254+
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/argcomplete@3.2.1
255+
ExternalRef: SECURITY cpe23Type cpe:2.3:a:andrey_kislyuk:argcomplete:3.2.1:*:*:*:*:*:*:*
256256
#####
257257

258258
PackageName: crcmod
@@ -551,18 +551,18 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:craig_citro:google-apitools:0.5.32:*:*
551551

552552
PackageName: google-auth
553553
SPDXID: SPDXRef-Package-36-google-auth
554-
PackageVersion: 2.24.0
554+
PackageVersion: 2.25.2
555555
PrimaryPackagePurpose: LIBRARY
556556
PackageSupplier: Organization: Google Cloud Platform ([email protected])
557-
PackageDownloadLocation: https://pypi.org/project/google-auth/2.24.0
557+
PackageDownloadLocation: https://pypi.org/project/google-auth/2.25.2
558558
FilesAnalyzed: false
559559
PackageLicenseDeclared: NOASSERTION
560560
PackageLicenseConcluded: Apache-2.0
561561
PackageLicenseComments: <text>google-auth declares Apache 2.0 which is not currently a valid SPDX License identifier or expression.</text>
562562
PackageCopyrightText: NOASSERTION
563563
PackageSummary: <text>Google Authentication Library</text>
564-
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/google-auth@2.24.0
565-
ExternalRef: SECURITY cpe23Type cpe:2.3:a:google_cloud_platform:google-auth:2.24.0:*:*:*:*:*:*:*
564+
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/google-auth@2.25.2
565+
ExternalRef: SECURITY cpe23Type cpe:2.3:a:google_cloud_platform:google-auth:2.25.2:*:*:*:*:*:*:*
566566
#####
567567

568568
PackageName: cachetools
@@ -657,17 +657,17 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:julian_berman:jsonschema-specification
657657

658658
PackageName: referencing
659659
SPDXID: SPDXRef-Package-43-referencing
660-
PackageVersion: 0.31.1
660+
PackageVersion: 0.32.0
661661
PrimaryPackagePurpose: LIBRARY
662662
PackageSupplier: Person: Julian Berman
663-
PackageDownloadLocation: https://pypi.org/project/referencing/0.31.1
663+
PackageDownloadLocation: https://pypi.org/project/referencing/0.32.0
664664
FilesAnalyzed: false
665665
PackageLicenseDeclared: MIT
666666
PackageLicenseConcluded: MIT
667667
PackageCopyrightText: NOASSERTION
668668
PackageSummary: <text>JSON Referencing + Python</text>
669-
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/referencing@0.31.1
670-
ExternalRef: SECURITY cpe23Type cpe:2.3:a:julian_berman:referencing:0.31.1:*:*:*:*:*:*:*
669+
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/referencing@0.32.0
670+
ExternalRef: SECURITY cpe23Type cpe:2.3:a:julian_berman:referencing:0.32.0:*:*:*:*:*:*:*
671671
#####
672672

673673
PackageName: rpds-py
@@ -733,17 +733,17 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:raphael_barrois:semantic-version:2.10.
733733

734734
PackageName: packageurl-python
735735
SPDXID: SPDXRef-Package-48-packageurl-python
736-
PackageVersion: 0.11.2
736+
PackageVersion: 0.12.0
737737
PrimaryPackagePurpose: LIBRARY
738738
PackageSupplier: Person: the purl authors
739-
PackageDownloadLocation: https://pypi.org/project/packageurl-python/0.11.2
739+
PackageDownloadLocation: https://pypi.org/project/packageurl-python/0.12.0
740740
FilesAnalyzed: false
741741
PackageLicenseDeclared: MIT
742742
PackageLicenseConcluded: MIT
743743
PackageCopyrightText: NOASSERTION
744744
PackageSummary: <text>A purl aka. Package URL parser and builder</text>
745-
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/packageurl-python@0.11.2
746-
ExternalRef: SECURITY cpe23Type cpe:2.3:a:the_purl_authors:packageurl-python:0.11.2:*:*:*:*:*:*:*
745+
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/packageurl-python@0.12.0
746+
ExternalRef: SECURITY cpe23Type cpe:2.3:a:the_purl_authors:packageurl-python:0.12.0:*:*:*:*:*:*:*
747747
#####
748748

749749
PackageName: packaging

0 commit comments

Comments
 (0)