Skip to content

Commit 1834f63

Browse files
github-actions[bot]web-flow
github-actions[bot]
and
web-flow
authored
chore: update SBOM for Python 3.8 (#4409)
Co-authored-by: GitHub <[email protected]>
1 parent c99bbdd commit 1834f63

File tree

2 files changed

+90
-90
lines changed

2 files changed

+90
-90
lines changed

‎sbom/cve-bin-tool-py3.8.json

Lines changed: 50 additions & 50 deletions
Original file line numberDiff line numberDiff line change
@@ -2,10 +2,10 @@
22
"$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
33
"bomFormat": "CycloneDX",
44
"specVersion": "1.6",
5-
"serialNumber": "urn:uuid:78249e2c-ba6b-44f6-bf53-f4428b5dd43d",
5+
"serialNumber": "urn:uuid:d87a674a-b387-4583-a4d4-bfed4fdfb862",
66
"version": 1,
77
"metadata": {
8-
"timestamp": "2024-08-26T00:35:34Z",
8+
"timestamp": "2024-09-02T00:36:17Z",
99
"lifecycles": [
1010
{
1111
"phase": "build"
@@ -31,7 +31,7 @@
3131
"type": "application",
3232
"bom-ref": "1-cve-bin-tool",
3333
"name": "cve-bin-tool",
34-
"version": "3.4rc0",
34+
"version": "3.4rc1",
3535
"supplier": {
3636
"name": "Terri Oda",
3737
"contact": [
@@ -40,7 +40,7 @@
4040
}
4141
]
4242
},
43-
"cpe": "cpe:2.3:a:terri_oda:cve-bin-tool:3.4rc0:*:*:*:*:*:*:*",
43+
"cpe": "cpe:2.3:a:terri_oda:cve-bin-tool:3.4rc1:*:*:*:*:*:*:*",
4444
"description": "CVE Binary Checker Tool",
4545
"licenses": [
4646
{
@@ -53,12 +53,12 @@
5353
],
5454
"externalReferences": [
5555
{
56-
"url": "https://pypi.org/project/cve-bin-tool/3.4rc0",
56+
"url": "https://pypi.org/project/cve-bin-tool/3.4rc1",
5757
"type": "distribution",
5858
"comment": "Download location for component"
5959
}
6060
],
61-
"purl": "pkg:pypi/cve-bin-tool@3.4rc0",
61+
"purl": "pkg:pypi/cve-bin-tool@3.4rc1",
6262
"properties": [
6363
{
6464
"name": "language",
@@ -119,6 +119,12 @@
119119
},
120120
"cpe": "cpe:2.3:a:j._nick_koston:aiohappyeyeballs:2.4.0:*:*:*:*:*:*:*",
121121
"description": "Happy Eyeballs for asyncio",
122+
"hashes": [
123+
{
124+
"alg": "SHA-1",
125+
"content": "c31b127a69bdcd7895d1a521985d918061955348"
126+
}
127+
],
122128
"licenses": [
123129
{
124130
"license": {
@@ -356,7 +362,7 @@
356362
"type": "library",
357363
"bom-ref": "9-yarl",
358364
"name": "yarl",
359-
"version": "1.9.4",
365+
"version": "1.9.7",
360366
"supplier": {
361367
"name": "Andrew Svetlov",
362368
"contact": [
@@ -365,14 +371,8 @@
365371
}
366372
]
367373
},
368-
"cpe": "cpe:2.3:a:andrew_svetlov:yarl:1.9.4:*:*:*:*:*:*:*",
374+
"cpe": "cpe:2.3:a:andrew_svetlov:yarl:1.9.7:*:*:*:*:*:*:*",
369375
"description": "Yet another URL library",
370-
"hashes": [
371-
{
372-
"alg": "SHA-1",
373-
"content": "6362ff155ba02964a5e773927412f7cf4ca23cd1"
374-
}
375-
],
376376
"licenses": [
377377
{
378378
"license": {
@@ -384,12 +384,12 @@
384384
],
385385
"externalReferences": [
386386
{
387-
"url": "https://pypi.org/project/yarl/1.9.4",
387+
"url": "https://pypi.org/project/yarl/1.9.7",
388388
"type": "distribution",
389389
"comment": "Download location for component"
390390
}
391391
],
392-
"purl": "pkg:pypi/[email protected].4",
392+
"purl": "pkg:pypi/[email protected].7",
393393
"properties": [
394394
{
395395
"name": "language",
@@ -416,6 +416,12 @@
416416
},
417417
"cpe": "cpe:2.3:a:kim_davies:idna:3.8:*:*:*:*:*:*:*",
418418
"description": "Internationalized Domain Names in Applications (IDNA)",
419+
"hashes": [
420+
{
421+
"alg": "SHA-1",
422+
"content": "784c6f45c162db9709588124f2f1def5b70615ff"
423+
}
424+
],
419425
"externalReferences": [
420426
{
421427
"url": "https://pypi.org/project/idna/3.8",
@@ -1886,7 +1892,7 @@
18861892
"type": "library",
18871893
"bom-ref": "43-zipp",
18881894
"name": "zipp",
1889-
"version": "3.20.0",
1895+
"version": "3.20.1",
18901896
"supplier": {
18911897
"name": "Jason R .",
18921898
"contact": [
@@ -1895,16 +1901,16 @@
18951901
}
18961902
]
18971903
},
1898-
"cpe": "cpe:2.3:a:jason_r.:zipp:3.20.0:*:*:*:*:*:*:*",
1904+
"cpe": "cpe:2.3:a:jason_r.:zipp:3.20.1:*:*:*:*:*:*:*",
18991905
"description": "Backport of pathlib-compatible object wrapper for zip files",
19001906
"externalReferences": [
19011907
{
1902-
"url": "https://pypi.org/project/zipp/3.20.0",
1908+
"url": "https://pypi.org/project/zipp/3.20.1",
19031909
"type": "distribution",
19041910
"comment": "Download location for component"
19051911
}
19061912
],
1907-
"purl": "pkg:pypi/[email protected].0",
1913+
"purl": "pkg:pypi/[email protected].1",
19081914
"properties": [
19091915
{
19101916
"name": "language",
@@ -2208,7 +2214,7 @@
22082214
"type": "library",
22092215
"bom-ref": "52-lib4sbom",
22102216
"name": "lib4sbom",
2211-
"version": "0.7.3",
2217+
"version": "0.7.4",
22122218
"supplier": {
22132219
"name": "Anthony Harrison",
22142220
"contact": [
@@ -2217,7 +2223,7 @@
22172223
}
22182224
]
22192225
},
2220-
"cpe": "cpe:2.3:a:anthony_harrison:lib4sbom:0.7.3:*:*:*:*:*:*:*",
2226+
"cpe": "cpe:2.3:a:anthony_harrison:lib4sbom:0.7.4:*:*:*:*:*:*:*",
22212227
"description": "Software Bill of Material (SBOM) generator and consumer library",
22222228
"licenses": [
22232229
{
@@ -2230,12 +2236,12 @@
22302236
],
22312237
"externalReferences": [
22322238
{
2233-
"url": "https://pypi.org/project/lib4sbom/0.7.3",
2239+
"url": "https://pypi.org/project/lib4sbom/0.7.4",
22342240
"type": "distribution",
22352241
"comment": "Download location for component"
22362242
}
22372243
],
2238-
"purl": "pkg:pypi/[email protected].3",
2244+
"purl": "pkg:pypi/[email protected].4",
22392245
"properties": [
22402246
{
22412247
"name": "language",
@@ -2343,7 +2349,7 @@
23432349
"type": "library",
23442350
"bom-ref": "55-lib4vex",
23452351
"name": "lib4vex",
2346-
"version": "0.1.0",
2352+
"version": "0.2.0",
23472353
"supplier": {
23482354
"name": "Anthony Harrison",
23492355
"contact": [
@@ -2352,14 +2358,8 @@
23522358
}
23532359
]
23542360
},
2355-
"cpe": "cpe:2.3:a:anthony_harrison:lib4vex:0.1.0:*:*:*:*:*:*:*",
2361+
"cpe": "cpe:2.3:a:anthony_harrison:lib4vex:0.2.0:*:*:*:*:*:*:*",
23562362
"description": "VEX generator and consumer library",
2357-
"hashes": [
2358-
{
2359-
"alg": "SHA-1",
2360-
"content": "84229c7770dd95cf887d6874e0203da4c8aa809b"
2361-
}
2362-
],
23632363
"licenses": [
23642364
{
23652365
"license": {
@@ -2371,12 +2371,12 @@
23712371
],
23722372
"externalReferences": [
23732373
{
2374-
"url": "https://pypi.org/project/lib4vex/0.1.0",
2374+
"url": "https://pypi.org/project/lib4vex/0.2.0",
23752375
"type": "distribution",
23762376
"comment": "Download location for component"
23772377
}
23782378
],
2379-
"purl": "pkg:pypi/lib4vex@0.1.0",
2379+
"purl": "pkg:pypi/lib4vex@0.2.0",
23802380
"properties": [
23812381
{
23822382
"name": "language",
@@ -2485,7 +2485,7 @@
24852485
"type": "library",
24862486
"bom-ref": "58-rich",
24872487
"name": "rich",
2488-
"version": "13.7.1",
2488+
"version": "13.8.0",
24892489
"supplier": {
24902490
"name": "Will McGugan",
24912491
"contact": [
@@ -2494,7 +2494,7 @@
24942494
}
24952495
]
24962496
},
2497-
"cpe": "cpe:2.3:a:will_mcgugan:rich:13.7.1:*:*:*:*:*:*:*",
2497+
"cpe": "cpe:2.3:a:will_mcgugan:rich:13.8.0:*:*:*:*:*:*:*",
24982498
"description": "Render rich text, tables, progress bars, syntax highlighting, markdown and more to the terminal",
24992499
"licenses": [
25002500
{
@@ -2507,12 +2507,12 @@
25072507
],
25082508
"externalReferences": [
25092509
{
2510-
"url": "https://pypi.org/project/rich/13.7.1",
2510+
"url": "https://pypi.org/project/rich/13.8.0",
25112511
"type": "distribution",
25122512
"comment": "Download location for component"
25132513
}
25142514
],
2515-
"purl": "pkg:pypi/rich@13.7.1",
2515+
"purl": "pkg:pypi/rich@13.8.0",
25162516
"properties": [
25172517
{
25182518
"name": "language",
@@ -2725,7 +2725,7 @@
27252725
"type": "library",
27262726
"bom-ref": "64-plotly",
27272727
"name": "plotly",
2728-
"version": "5.23.0",
2728+
"version": "5.24.0",
27292729
"supplier": {
27302730
"name": "Chris P",
27312731
"contact": [
@@ -2734,7 +2734,7 @@
27342734
}
27352735
]
27362736
},
2737-
"cpe": "cpe:2.3:a:chris_p:plotly:5.23.0:*:*:*:*:*:*:*",
2737+
"cpe": "cpe:2.3:a:chris_p:plotly:5.24.0:*:*:*:*:*:*:*",
27382738
"description": "An open-source, interactive data visualization library for Python",
27392739
"licenses": [
27402740
{
@@ -2747,12 +2747,12 @@
27472747
],
27482748
"externalReferences": [
27492749
{
2750-
"url": "https://pypi.org/project/plotly/5.23.0",
2750+
"url": "https://pypi.org/project/plotly/5.24.0",
27512751
"type": "distribution",
27522752
"comment": "Download location for component"
27532753
}
27542754
],
2755-
"purl": "pkg:pypi/plotly@5.23.0",
2755+
"purl": "pkg:pypi/plotly@5.24.0",
27562756
"properties": [
27572757
{
27582758
"name": "language",
@@ -2915,7 +2915,7 @@
29152915
"type": "library",
29162916
"bom-ref": "68-certifi",
29172917
"name": "certifi",
2918-
"version": "2024.7.4",
2918+
"version": "2024.8.30",
29192919
"supplier": {
29202920
"name": "Kenneth Reitz",
29212921
"contact": [
@@ -2924,7 +2924,7 @@
29242924
}
29252925
]
29262926
},
2927-
"cpe": "cpe:2.3:a:kenneth_reitz:certifi:2024.7.4:*:*:*:*:*:*:*",
2927+
"cpe": "cpe:2.3:a:kenneth_reitz:certifi:2024.8.30:*:*:*:*:*:*:*",
29282928
"description": "Python package for providing Mozilla's CA Bundle.",
29292929
"licenses": [
29302930
{
@@ -2937,12 +2937,12 @@
29372937
],
29382938
"externalReferences": [
29392939
{
2940-
"url": "https://pypi.org/project/certifi/2024.7.4",
2940+
"url": "https://pypi.org/project/certifi/2024.8.30",
29412941
"type": "distribution",
29422942
"comment": "Download location for component"
29432943
}
29442944
],
2945-
"purl": "pkg:pypi/certifi@2024.7.4",
2945+
"purl": "pkg:pypi/certifi@2024.8.30",
29462946
"properties": [
29472947
{
29482948
"name": "language",
@@ -3090,7 +3090,7 @@
30903090
"type": "library",
30913091
"bom-ref": "72-setuptools",
30923092
"name": "setuptools",
3093-
"version": "73.0.1",
3093+
"version": "74.0.0",
30943094
"supplier": {
30953095
"name": "Python Packaging Authority",
30963096
"contact": [
@@ -3099,16 +3099,16 @@
30993099
}
31003100
]
31013101
},
3102-
"cpe": "cpe:2.3:a:python_packaging_authority:setuptools:73.0.1:*:*:*:*:*:*:*",
3102+
"cpe": "cpe:2.3:a:python_packaging_authority:setuptools:74.0.0:*:*:*:*:*:*:*",
31033103
"description": "Easily download, build, install, upgrade, and uninstall Python packages",
31043104
"externalReferences": [
31053105
{
3106-
"url": "https://pypi.org/project/setuptools/73.0.1",
3106+
"url": "https://pypi.org/project/setuptools/74.0.0",
31073107
"type": "distribution",
31083108
"comment": "Download location for component"
31093109
}
31103110
],
3111-
"purl": "pkg:pypi/setuptools@73.0.1",
3111+
"purl": "pkg:pypi/setuptools@74.0.0",
31123112
"properties": [
31133113
{
31143114
"name": "language",

0 commit comments

Comments
 (0)