Skip to content

Commit 47c6da7

Browse files
github-actions[bot]web-flow
github-actions[bot]
and
web-flow
authored
chore: update SBOM for Python 3.7 (#3078)
Co-authored-by: GitHub <[email protected]>
1 parent f139848 commit 47c6da7

File tree

2 files changed

+68
-68
lines changed

2 files changed

+68
-68
lines changed

‎sbom/cve-bin-tool-py3.7.json

Lines changed: 34 additions & 34 deletions
Original file line numberDiff line numberDiff line change
@@ -2,10 +2,10 @@
22
"$schema": "http://cyclonedx.org/schema/bom-1.4.schema.json",
33
"bomFormat": "CycloneDX",
44
"specVersion": "1.4",
5-
"serialNumber": "urn:uuid158e8cf6-2cf0-444e-9670-a5773cab0270",
5+
"serialNumber": "urn:uuid8a603660-c546-4adb-81d6-0186c90e9e3f",
66
"version": 1,
77
"metadata": {
8-
"timestamp": "2023-06-05T00:30:23Z",
8+
"timestamp": "2023-06-19T00:30:13Z",
99
"tools": [
1010
{
1111
"name": "sbom4python",
@@ -296,7 +296,7 @@
296296
"type": "library",
297297
"bom-ref": "9-importlib-metadata",
298298
"name": "importlib-metadata",
299-
"version": "6.6.0",
299+
"version": "6.7.0",
300300
"supplier": {
301301
"name": "Jason R. Coombs",
302302
"contact": [
@@ -305,7 +305,7 @@
305305
}
306306
]
307307
},
308-
"cpe": "cpe:2.3:a:jason_r._coombs:importlib-metadata:6.6.0:*:*:*:*:*:*:*",
308+
"cpe": "cpe:2.3:a:jason_r._coombs:importlib-metadata:6.7.0:*:*:*:*:*:*:*",
309309
"description": "Read metadata from Python packages",
310310
"externalReferences": [
311311
{
@@ -314,12 +314,12 @@
314314
"comment": "Home page for project"
315315
},
316316
{
317-
"url": "https://pypi.org/project/importlib-metadata/6.6.0",
317+
"url": "https://pypi.org/project/importlib-metadata/6.7.0",
318318
"type": "distribution",
319319
"comment": "Download location for component"
320320
}
321321
],
322-
"purl": "pkg:pypi/importlib-metadata@6.6.0"
322+
"purl": "pkg:pypi/importlib-metadata@6.7.0"
323323
},
324324
{
325325
"type": "library",
@@ -715,7 +715,7 @@
715715
"type": "library",
716716
"bom-ref": "21-argcomplete",
717717
"name": "argcomplete",
718-
"version": "3.0.8",
718+
"version": "3.1.1",
719719
"supplier": {
720720
"name": "Andrey Kislyuk",
721721
"contact": [
@@ -724,7 +724,7 @@
724724
}
725725
]
726726
},
727-
"cpe": "cpe:2.3:a:andrey_kislyuk:argcomplete:3.0.8:*:*:*:*:*:*:*",
727+
"cpe": "cpe:2.3:a:andrey_kislyuk:argcomplete:3.1.1:*:*:*:*:*:*:*",
728728
"description": "Bash tab completion for argparse",
729729
"licenses": [
730730
{
@@ -741,12 +741,12 @@
741741
"comment": "Home page for project"
742742
},
743743
{
744-
"url": "https://pypi.org/project/argcomplete/3.0.8",
744+
"url": "https://pypi.org/project/argcomplete/3.1.1",
745745
"type": "distribution",
746746
"comment": "Download location for component"
747747
}
748748
],
749-
"purl": "pkg:pypi/argcomplete@3.0.8",
749+
"purl": "pkg:pypi/argcomplete@3.1.1",
750750
"properties": [
751751
{
752752
"name": "License Comments",
@@ -1073,7 +1073,7 @@
10731073
"type": "library",
10741074
"bom-ref": "30-pyparsing",
10751075
"name": "pyparsing",
1076-
"version": "3.0.9",
1076+
"version": "3.1.0",
10771077
"supplier": {
10781078
"name": "Paul McGuire",
10791079
"contact": [
@@ -1082,16 +1082,16 @@
10821082
}
10831083
]
10841084
},
1085-
"cpe": "cpe:2.3:a:paul_mcguire:pyparsing:3.0.9:*:*:*:*:*:*:*",
1085+
"cpe": "cpe:2.3:a:paul_mcguire:pyparsing:3.1.0:*:*:*:*:*:*:*",
10861086
"description": "pyparsing module - Classes and methods to define and execute parsing grammars",
10871087
"externalReferences": [
10881088
{
1089-
"url": "https://pypi.org/project/pyparsing/3.0.9",
1089+
"url": "https://pypi.org/project/pyparsing/3.1.0",
10901090
"type": "distribution",
10911091
"comment": "Download location for component"
10921092
}
10931093
],
1094-
"purl": "pkg:pypi/pyparsing@3.0.9"
1094+
"purl": "pkg:pypi/pyparsing@3.1.0"
10951095
},
10961096
{
10971097
"type": "library",
@@ -1497,7 +1497,7 @@
14971497
"type": "library",
14981498
"bom-ref": "41-google-auth",
14991499
"name": "google-auth",
1500-
"version": "2.19.1",
1500+
"version": "2.20.0",
15011501
"supplier": {
15021502
"name": "Google Cloud Platform",
15031503
"contact": [
@@ -1506,7 +1506,7 @@
15061506
}
15071507
]
15081508
},
1509-
"cpe": "cpe:2.3:a:google_cloud_platform:google-auth:2.19.1:*:*:*:*:*:*:*",
1509+
"cpe": "cpe:2.3:a:google_cloud_platform:google-auth:2.20.0:*:*:*:*:*:*:*",
15101510
"description": "Google Authentication Library",
15111511
"licenses": [
15121512
{
@@ -1523,12 +1523,12 @@
15231523
"comment": "Home page for project"
15241524
},
15251525
{
1526-
"url": "https://pypi.org/project/google-auth/2.19.1",
1526+
"url": "https://pypi.org/project/google-auth/2.20.0",
15271527
"type": "distribution",
15281528
"comment": "Download location for component"
15291529
}
15301530
],
1531-
"purl": "pkg:pypi/google-auth@2.19.1",
1531+
"purl": "pkg:pypi/google-auth@2.20.0",
15321532
"properties": [
15331533
{
15341534
"name": "License Comments",
@@ -2003,7 +2003,7 @@
20032003
"type": "library",
20042004
"bom-ref": "55-plotly",
20052005
"name": "plotly",
2006-
"version": "5.14.1",
2006+
"version": "5.15.0",
20072007
"supplier": {
20082008
"name": "Chris P",
20092009
"contact": [
@@ -2012,7 +2012,7 @@
20122012
}
20132013
]
20142014
},
2015-
"cpe": "cpe:2.3:a:chris_p:plotly:5.14.1:*:*:*:*:*:*:*",
2015+
"cpe": "cpe:2.3:a:chris_p:plotly:5.15.0:*:*:*:*:*:*:*",
20162016
"description": "An open-source, interactive data visualization library for Python",
20172017
"licenses": [
20182018
{
@@ -2029,12 +2029,12 @@
20292029
"comment": "Home page for project"
20302030
},
20312031
{
2032-
"url": "https://pypi.org/project/plotly/5.14.1",
2032+
"url": "https://pypi.org/project/plotly/5.15.0",
20332033
"type": "distribution",
20342034
"comment": "Download location for component"
20352035
}
20362036
],
2037-
"purl": "pkg:pypi/plotly@5.14.1"
2037+
"purl": "pkg:pypi/plotly@5.15.0"
20382038
},
20392039
{
20402040
"type": "library",
@@ -2206,7 +2206,7 @@
22062206
"type": "library",
22072207
"bom-ref": "60-rich",
22082208
"name": "rich",
2209-
"version": "13.4.1",
2209+
"version": "13.4.2",
22102210
"supplier": {
22112211
"name": "Will McGugan",
22122212
"contact": [
@@ -2215,7 +2215,7 @@
22152215
}
22162216
]
22172217
},
2218-
"cpe": "cpe:2.3:a:will_mcgugan:rich:13.4.1:*:*:*:*:*:*:*",
2218+
"cpe": "cpe:2.3:a:will_mcgugan:rich:13.4.2:*:*:*:*:*:*:*",
22192219
"description": "Render rich text, tables, progress bars, syntax highlighting, markdown and more to the terminal",
22202220
"licenses": [
22212221
{
@@ -2232,12 +2232,12 @@
22322232
"comment": "Home page for project"
22332233
},
22342234
{
2235-
"url": "https://pypi.org/project/rich/13.4.1",
2235+
"url": "https://pypi.org/project/rich/13.4.2",
22362236
"type": "distribution",
22372237
"comment": "Download location for component"
22382238
}
22392239
],
2240-
"purl": "pkg:pypi/[email protected].1"
2240+
"purl": "pkg:pypi/[email protected].2"
22412241
},
22422242
{
22432243
"type": "library",
@@ -2397,7 +2397,7 @@
23972397
"type": "library",
23982398
"bom-ref": "66-xmlschema",
23992399
"name": "xmlschema",
2400-
"version": "2.3.0",
2400+
"version": "2.3.1",
24012401
"supplier": {
24022402
"name": "Davide Brunato",
24032403
"contact": [
@@ -2406,7 +2406,7 @@
24062406
}
24072407
]
24082408
},
2409-
"cpe": "cpe:2.3:a:davide_brunato:xmlschema:2.3.0:*:*:*:*:*:*:*",
2409+
"cpe": "cpe:2.3:a:davide_brunato:xmlschema:2.3.1:*:*:*:*:*:*:*",
24102410
"description": "An XML Schema validator and decoder",
24112411
"licenses": [
24122412
{
@@ -2423,18 +2423,18 @@
24232423
"comment": "Home page for project"
24242424
},
24252425
{
2426-
"url": "https://pypi.org/project/xmlschema/2.3.0",
2426+
"url": "https://pypi.org/project/xmlschema/2.3.1",
24272427
"type": "distribution",
24282428
"comment": "Download location for component"
24292429
}
24302430
],
2431-
"purl": "pkg:pypi/[email protected].0"
2431+
"purl": "pkg:pypi/[email protected].1"
24322432
},
24332433
{
24342434
"type": "library",
24352435
"bom-ref": "67-elementpath",
24362436
"name": "elementpath",
2437-
"version": "4.1.2",
2437+
"version": "4.1.3",
24382438
"supplier": {
24392439
"name": "Davide Brunato",
24402440
"contact": [
@@ -2443,7 +2443,7 @@
24432443
}
24442444
]
24452445
},
2446-
"cpe": "cpe:2.3:a:davide_brunato:elementpath:4.1.2:*:*:*:*:*:*:*",
2446+
"cpe": "cpe:2.3:a:davide_brunato:elementpath:4.1.3:*:*:*:*:*:*:*",
24472447
"description": "XPath 1.0/2.0/3.0/3.1 parsers and selectors for ElementTree and lxml",
24482448
"licenses": [
24492449
{
@@ -2460,12 +2460,12 @@
24602460
"comment": "Home page for project"
24612461
},
24622462
{
2463-
"url": "https://pypi.org/project/elementpath/4.1.2",
2463+
"url": "https://pypi.org/project/elementpath/4.1.3",
24642464
"type": "distribution",
24652465
"comment": "Download location for component"
24662466
}
24672467
],
2468-
"purl": "pkg:pypi/[email protected].2"
2468+
"purl": "pkg:pypi/[email protected].3"
24692469
},
24702470
{
24712471
"type": "library",

0 commit comments

Comments
 (0)