Skip to content

Commit 4159471

Browse files
web-flowweb-flow
authored
chore: update SBOM for Python 3.8
1 parent f6e5321 commit 4159471

File tree

2 files changed

+28
-49
lines changed

2 files changed

+28
-49
lines changed

‎sbom/cve-bin-tool-py3.8.json

Lines changed: 14 additions & 32 deletions
Original file line numberDiff line numberDiff line change
@@ -2,10 +2,10 @@
22
"$schema": "http://cyclonedx.org/schema/bom-1.5.schema.json",
33
"bomFormat": "CycloneDX",
44
"specVersion": "1.5",
5-
"serialNumber": "urn:uuid:0692a5a1-db5c-47ac-97f9-f93b07c81ee8",
5+
"serialNumber": "urn:uuid:09b79a4d-7203-4677-92ec-142dbfff998a",
66
"version": 1,
77
"metadata": {
8-
"timestamp": "2024-01-04T20:02:58Z",
8+
"timestamp": "2024-01-09T17:42:00Z",
99
"tools": {
1010
"components": [
1111
{
@@ -2061,18 +2061,12 @@
20612061
"type": "library",
20622062
"bom-ref": "46-referencing",
20632063
"name": "referencing",
2064-
"version": "0.32.0",
2064+
"version": "0.32.1",
20652065
"supplier": {
20662066
"name": "Julian Berman"
20672067
},
2068-
"cpe": "cpe:2.3:a:julian_berman:referencing:0.32.0:*:*:*:*:*:*:*",
2068+
"cpe": "cpe:2.3:a:julian_berman:referencing:0.32.1:*:*:*:*:*:*:*",
20692069
"description": "JSON Referencing + Python",
2070-
"hashes": [
2071-
{
2072-
"alg": "SHA-1",
2073-
"content": "ff99d1e5e46c43c63c0bc45188206d02615c0672"
2074-
}
2075-
],
20762070
"licenses": [
20772071
{
20782072
"license": {
@@ -2083,12 +2077,12 @@
20832077
],
20842078
"externalReferences": [
20852079
{
2086-
"url": "https://pypi.org/project/referencing/0.32.0",
2080+
"url": "https://pypi.org/project/referencing/0.32.1",
20872081
"type": "distribution",
20882082
"comment": "Download location for component"
20892083
}
20902084
],
2091-
"purl": "pkg:pypi/[email protected].0",
2085+
"purl": "pkg:pypi/[email protected].1",
20922086
"properties": [
20932087
{
20942088
"name": "language",
@@ -2317,18 +2311,12 @@
23172311
"type": "library",
23182312
"bom-ref": "52-packageurl-python",
23192313
"name": "packageurl-python",
2320-
"version": "0.13.1",
2314+
"version": "0.13.4",
23212315
"supplier": {
23222316
"name": "the purl authors"
23232317
},
2324-
"cpe": "cpe:2.3:a:the_purl_authors:packageurl-python:0.13.1:*:*:*:*:*:*:*",
2318+
"cpe": "cpe:2.3:a:the_purl_authors:packageurl-python:0.13.4:*:*:*:*:*:*:*",
23252319
"description": "A purl aka. Package URL parser and builder",
2326-
"hashes": [
2327-
{
2328-
"alg": "SHA-1",
2329-
"content": "b820e15ae401cb2aa9b9efc9f239a098bc754e19"
2330-
}
2331-
],
23322320
"licenses": [
23332321
{
23342322
"license": {
@@ -2339,12 +2327,12 @@
23392327
],
23402328
"externalReferences": [
23412329
{
2342-
"url": "https://pypi.org/project/packageurl-python/0.13.1",
2330+
"url": "https://pypi.org/project/packageurl-python/0.13.4",
23432331
"type": "distribution",
23442332
"comment": "Download location for component"
23452333
}
23462334
],
2347-
"purl": "pkg:pypi/[email protected].1",
2335+
"purl": "pkg:pypi/[email protected].4",
23482336
"properties": [
23492337
{
23502338
"name": "language",
@@ -3016,7 +3004,7 @@
30163004
"type": "library",
30173005
"bom-ref": "68-xmlschema",
30183006
"name": "xmlschema",
3019-
"version": "2.5.1",
3007+
"version": "3.0.0",
30203008
"supplier": {
30213009
"name": "Davide Brunato",
30223010
"contact": [
@@ -3025,14 +3013,8 @@
30253013
}
30263014
]
30273015
},
3028-
"cpe": "cpe:2.3:a:davide_brunato:xmlschema:2.5.1:*:*:*:*:*:*:*",
3016+
"cpe": "cpe:2.3:a:davide_brunato:xmlschema:3.0.0:*:*:*:*:*:*:*",
30293017
"description": "An XML Schema validator and decoder",
3030-
"hashes": [
3031-
{
3032-
"alg": "SHA-1",
3033-
"content": "faff4d8ca954d8722df89e1e77bc4246a36ed62c"
3034-
}
3035-
],
30363018
"licenses": [
30373019
{
30383020
"license": {
@@ -3043,12 +3025,12 @@
30433025
],
30443026
"externalReferences": [
30453027
{
3046-
"url": "https://pypi.org/project/xmlschema/2.5.1",
3028+
"url": "https://pypi.org/project/xmlschema/3.0.0",
30473029
"type": "distribution",
30483030
"comment": "Download location for component"
30493031
}
30503032
],
3051-
"purl": "pkg:pypi/xmlschema@2.5.1",
3033+
"purl": "pkg:pypi/xmlschema@3.0.0",
30523034
"properties": [
30533035
{
30543036
"name": "language",

‎sbom/cve-bin-tool-py3.8.spdx

Lines changed: 14 additions & 17 deletions
Original file line numberDiff line numberDiff line change
@@ -2,10 +2,10 @@ SPDXVersion: SPDX-2.3
22
DataLicense: CC0-1.0
33
SPDXID: SPDXRef-DOCUMENT
44
DocumentName: Python-cve-bin-tool
5-
DocumentNamespace: http://spdx.org/spdxdocs/Python-cve-bin-tool-3a7d6baa-0ca4-467b-ba41-971aef288c74
5+
DocumentNamespace: http://spdx.org/spdxdocs/Python-cve-bin-tool-f326f51e-d6ad-4030-aabb-dabbcdd90a97
66
LicenseListVersion: 3.22
77
Creator: Tool: sbom4python-0.10.3
8-
Created: 2024-01-04T20:00:56Z
8+
Created: 2024-01-09T17:39:54Z
99
CreatorComment: <text>This document has been automatically generated.</text>
1010
#####
1111

@@ -732,18 +732,17 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:julian_berman:jsonschema-specification
732732

733733
PackageName: referencing
734734
SPDXID: SPDXRef-Package-46-referencing
735-
PackageVersion: 0.32.0
735+
PackageVersion: 0.32.1
736736
PrimaryPackagePurpose: LIBRARY
737737
PackageSupplier: Person: Julian Berman
738-
PackageDownloadLocation: https://pypi.org/project/referencing/0.32.0
738+
PackageDownloadLocation: https://pypi.org/project/referencing/0.32.1
739739
FilesAnalyzed: false
740-
PackageChecksum: SHA1: ff99d1e5e46c43c63c0bc45188206d02615c0672
741740
PackageLicenseDeclared: MIT
742741
PackageLicenseConcluded: MIT
743742
PackageCopyrightText: NOASSERTION
744743
PackageSummary: <text>JSON Referencing + Python</text>
745-
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/[email protected].0
746-
ExternalRef: SECURITY cpe23Type cpe:2.3:a:julian_berman:referencing:0.32.0:*:*:*:*:*:*:*
744+
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/[email protected].1
745+
ExternalRef: SECURITY cpe23Type cpe:2.3:a:julian_berman:referencing:0.32.1:*:*:*:*:*:*:*
747746
#####
748747

749748
PackageName: rpds-py
@@ -826,18 +825,17 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:raphael_barrois:semantic-version:2.10.
826825

827826
PackageName: packageurl-python
828827
SPDXID: SPDXRef-Package-52-packageurl-python
829-
PackageVersion: 0.13.1
828+
PackageVersion: 0.13.4
830829
PrimaryPackagePurpose: LIBRARY
831830
PackageSupplier: Person: the purl authors
832-
PackageDownloadLocation: https://pypi.org/project/packageurl-python/0.13.1
831+
PackageDownloadLocation: https://pypi.org/project/packageurl-python/0.13.4
833832
FilesAnalyzed: false
834-
PackageChecksum: SHA1: b820e15ae401cb2aa9b9efc9f239a098bc754e19
835833
PackageLicenseDeclared: MIT
836834
PackageLicenseConcluded: MIT
837835
PackageCopyrightText: NOASSERTION
838836
PackageSummary: <text>A purl aka. Package URL parser and builder</text>
839-
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/[email protected].1
840-
ExternalRef: SECURITY cpe23Type cpe:2.3:a:the_purl_authors:packageurl-python:0.13.1:*:*:*:*:*:*:*
837+
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/[email protected].4
838+
ExternalRef: SECURITY cpe23Type cpe:2.3:a:the_purl_authors:packageurl-python:0.13.4:*:*:*:*:*:*:*
841839
#####
842840

843841
PackageName: packaging
@@ -1079,18 +1077,17 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:william_pearson:toml:0.10.2:*:*:*:*:*:
10791077

10801078
PackageName: xmlschema
10811079
SPDXID: SPDXRef-Package-68-xmlschema
1082-
PackageVersion: 2.5.1
1080+
PackageVersion: 3.0.0
10831081
PrimaryPackagePurpose: LIBRARY
10841082
PackageSupplier: Person: Davide Brunato ([email protected])
1085-
PackageDownloadLocation: https://pypi.org/project/xmlschema/2.5.1
1083+
PackageDownloadLocation: https://pypi.org/project/xmlschema/3.0.0
10861084
FilesAnalyzed: false
1087-
PackageChecksum: SHA1: faff4d8ca954d8722df89e1e77bc4246a36ed62c
10881085
PackageLicenseDeclared: MIT
10891086
PackageLicenseConcluded: MIT
10901087
PackageCopyrightText: NOASSERTION
10911088
PackageSummary: <text>An XML Schema validator and decoder</text>
1092-
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/xmlschema@2.5.1
1093-
ExternalRef: SECURITY cpe23Type cpe:2.3:a:davide_brunato:xmlschema:2.5.1:*:*:*:*:*:*:*
1089+
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/xmlschema@3.0.0
1090+
ExternalRef: SECURITY cpe23Type cpe:2.3:a:davide_brunato:xmlschema:3.0.0:*:*:*:*:*:*:*
10941091
#####
10951092

10961093
PackageName: elementpath

0 commit comments

Comments
 (0)