Skip to content

Commit 4a1b84e

Browse files
github-actions[bot]web-flow
github-actions[bot]
and
web-flow
authored
chore: update SBOM for Python 3.11 (#4597)
Co-authored-by: GitHub <[email protected]>
1 parent 7b7eb97 commit 4a1b84e

File tree

2 files changed

+68
-76
lines changed

2 files changed

+68
-76
lines changed

‎sbom/cve-bin-tool-py3.11.json

Lines changed: 41 additions & 49 deletions
Original file line numberDiff line numberDiff line change
@@ -2,10 +2,10 @@
22
"$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
33
"bomFormat": "CycloneDX",
44
"specVersion": "1.6",
5-
"serialNumber": "urn:uuid:c0ad9887-1afc-490c-9a2f-74e4604b1a74",
5+
"serialNumber": "urn:uuid:26cf65a2-3634-40ba-9952-49f2946933a2",
66
"version": 1,
77
"metadata": {
8-
"timestamp": "2024-11-25T00:37:53Z",
8+
"timestamp": "2024-12-02T00:40:31Z",
99
"lifecycles": [
1010
{
1111
"phase": "build"
@@ -79,7 +79,7 @@
7979
"type": "library",
8080
"bom-ref": "2-aiohttp",
8181
"name": "aiohttp",
82-
"version": "3.11.7",
82+
"version": "3.11.9",
8383
"description": "Async http client/server framework (asyncio)",
8484
"licenses": [
8585
{
@@ -97,12 +97,12 @@
9797
"comment": "Home page for project"
9898
},
9999
{
100-
"url": "https://pypi.org/project/aiohttp/3.11.7/#files",
100+
"url": "https://pypi.org/project/aiohttp/3.11.9/#files",
101101
"type": "distribution",
102102
"comment": "Download location for component"
103103
}
104104
],
105-
"purl": "pkg:pypi/[email protected].7",
105+
"purl": "pkg:pypi/[email protected].9",
106106
"properties": [
107107
{
108108
"name": "language",
@@ -114,15 +114,15 @@
114114
},
115115
{
116116
"name": "package_release_date",
117-
"value": "2024-11-21T15:42:26.000Z"
117+
"value": "2024-12-01T23:26:48.000Z"
118118
}
119119
]
120120
},
121121
{
122122
"type": "library",
123123
"bom-ref": "3-aiohappyeyeballs",
124124
"name": "aiohappyeyeballs",
125-
"version": "2.4.3",
125+
"version": "2.4.4",
126126
"supplier": {
127127
"name": "J. Nick Koston",
128128
"contact": [
@@ -131,14 +131,8 @@
131131
}
132132
]
133133
},
134-
"cpe": "cpe:2.3:a:j._nick_koston:aiohappyeyeballs:2.4.3:*:*:*:*:*:*:*",
134+
"cpe": "cpe:2.3:a:j._nick_koston:aiohappyeyeballs:2.4.4:*:*:*:*:*:*:*",
135135
"description": "Happy Eyeballs for asyncio",
136-
"hashes": [
137-
{
138-
"alg": "SHA-1",
139-
"content": "e3519bbebf2069eee0aff0dfde50689c742ba97f"
140-
}
141-
],
142136
"licenses": [
143137
{
144138
"license": {
@@ -155,12 +149,12 @@
155149
"comment": "Home page for project"
156150
},
157151
{
158-
"url": "https://pypi.org/project/aiohappyeyeballs/2.4.3/#files",
152+
"url": "https://pypi.org/project/aiohappyeyeballs/2.4.4/#files",
159153
"type": "distribution",
160154
"comment": "Download location for component"
161155
}
162156
],
163-
"purl": "pkg:pypi/[email protected].3",
157+
"purl": "pkg:pypi/[email protected].4",
164158
"properties": [
165159
{
166160
"name": "language",
@@ -172,7 +166,7 @@
172166
},
173167
{
174168
"name": "package_release_date",
175-
"value": "2024-09-30T19:42:26.000Z"
169+
"value": "2024-11-30T18:43:39.000Z"
176170
}
177171
]
178172
},
@@ -327,6 +321,12 @@
327321
},
328322
"cpe": "cpe:2.3:a:andrew_svetlov:multidict:6.1.0:*:*:*:*:*:*:*",
329323
"description": "multidict implementation",
324+
"hashes": [
325+
{
326+
"alg": "SHA-1",
327+
"content": "4140e63780dc6dd600a1837cb9b4c5198c3dcd68"
328+
}
329+
],
330330
"licenses": [
331331
{
332332
"license": {
@@ -368,7 +368,7 @@
368368
"type": "library",
369369
"bom-ref": "8-propcache",
370370
"name": "propcache",
371-
"version": "0.2.0",
371+
"version": "0.2.1",
372372
"supplier": {
373373
"name": "Andrew Svetlov",
374374
"contact": [
@@ -377,14 +377,8 @@
377377
}
378378
]
379379
},
380-
"cpe": "cpe:2.3:a:andrew_svetlov:propcache:0.2.0:*:*:*:*:*:*:*",
380+
"cpe": "cpe:2.3:a:andrew_svetlov:propcache:0.2.1:*:*:*:*:*:*:*",
381381
"description": "Accelerated property cache",
382-
"hashes": [
383-
{
384-
"alg": "SHA-1",
385-
"content": "f157b0a7b0b3a3c755764b9f03f4d90c43ee5cda"
386-
}
387-
],
388382
"licenses": [
389383
{
390384
"license": {
@@ -401,12 +395,12 @@
401395
"comment": "Home page for project"
402396
},
403397
{
404-
"url": "https://pypi.org/project/propcache/0.2.0/#files",
398+
"url": "https://pypi.org/project/propcache/0.2.1/#files",
405399
"type": "distribution",
406400
"comment": "Download location for component"
407401
}
408402
],
409-
"purl": "pkg:pypi/[email protected].0",
403+
"purl": "pkg:pypi/[email protected].1",
410404
"properties": [
411405
{
412406
"name": "language",
@@ -415,18 +409,14 @@
415409
{
416410
"name": "python_version",
417411
"value": "3.11.10"
418-
},
419-
{
420-
"name": "package_release_date",
421-
"value": "2024-10-07T12:54:02.000Z"
422412
}
423413
]
424414
},
425415
{
426416
"type": "library",
427417
"bom-ref": "9-yarl",
428418
"name": "yarl",
429-
"version": "1.18.0",
419+
"version": "1.18.3",
430420
"supplier": {
431421
"name": "Andrew Svetlov",
432422
"contact": [
@@ -435,7 +425,7 @@
435425
}
436426
]
437427
},
438-
"cpe": "cpe:2.3:a:andrew_svetlov:yarl:1.18.0:*:*:*:*:*:*:*",
428+
"cpe": "cpe:2.3:a:andrew_svetlov:yarl:1.18.3:*:*:*:*:*:*:*",
439429
"description": "Yet another URL library",
440430
"licenses": [
441431
{
@@ -453,12 +443,12 @@
453443
"comment": "Home page for project"
454444
},
455445
{
456-
"url": "https://pypi.org/project/yarl/1.18.0/#files",
446+
"url": "https://pypi.org/project/yarl/1.18.3/#files",
457447
"type": "distribution",
458448
"comment": "Download location for component"
459449
}
460450
],
461-
"purl": "pkg:pypi/[email protected].0",
451+
"purl": "pkg:pypi/[email protected].3",
462452
"properties": [
463453
{
464454
"name": "language",
@@ -467,10 +457,6 @@
467457
{
468458
"name": "python_version",
469459
"value": "3.11.10"
470-
},
471-
{
472-
"name": "package_release_date",
473-
"value": "2024-11-21T15:02:50.000Z"
474460
}
475461
]
476462
},
@@ -1811,7 +1797,7 @@
18111797
"type": "library",
18121798
"bom-ref": "35-pyopenssl",
18131799
"name": "pyopenssl",
1814-
"version": "24.2.1",
1800+
"version": "24.3.0",
18151801
"supplier": {
18161802
"name": "The pyOpenSSL developers",
18171803
"contact": [
@@ -1820,7 +1806,7 @@
18201806
}
18211807
]
18221808
},
1823-
"cpe": "cpe:2.3:a:the_pyopenssl_developers:pyopenssl:24.2.1:*:*:*:*:*:*:*",
1809+
"cpe": "cpe:2.3:a:the_pyopenssl_developers:pyopenssl:24.3.0:*:*:*:*:*:*:*",
18241810
"description": "Python wrapper module around the OpenSSL library",
18251811
"licenses": [
18261812
{
@@ -1838,12 +1824,12 @@
18381824
"comment": "Home page for project"
18391825
},
18401826
{
1841-
"url": "https://pypi.org/project/pyopenssl/24.2.1/#files",
1827+
"url": "https://pypi.org/project/pyopenssl/24.3.0/#files",
18421828
"type": "distribution",
18431829
"comment": "Download location for component"
18441830
}
18451831
],
1846-
"purl": "pkg:pypi/pyopenssl@24.2.1",
1832+
"purl": "pkg:pypi/pyopenssl@24.3.0",
18471833
"properties": [
18481834
{
18491835
"name": "language",
@@ -1855,15 +1841,15 @@
18551841
},
18561842
{
18571843
"name": "package_release_date",
1858-
"value": "2024-07-20T17:26:29.000Z"
1844+
"value": "2024-11-27T20:43:21.000Z"
18591845
}
18601846
]
18611847
},
18621848
{
18631849
"type": "library",
18641850
"bom-ref": "36-cryptography",
18651851
"name": "cryptography",
1866-
"version": "43.0.3",
1852+
"version": "44.0.0",
18671853
"supplier": {
18681854
"name": "The cryptography developers The Python Cryptographic Authority and individual contributors",
18691855
"contact": [
@@ -1872,7 +1858,7 @@
18721858
}
18731859
]
18741860
},
1875-
"cpe": "cpe:2.3:a:the_cryptography_developers_the_python_cryptographic_authority_and_individual_contributors:cryptography:43.0.3:*:*:*:*:*:*:*",
1861+
"cpe": "cpe:2.3:a:the_cryptography_developers_the_python_cryptographic_authority_and_individual_contributors:cryptography:44.0.0:*:*:*:*:*:*:*",
18761862
"description": "cryptography is a package which provides cryptographic recipes and primitives to Python developers.",
18771863
"licenses": [
18781864
{
@@ -1886,12 +1872,12 @@
18861872
"comment": "Home page for project"
18871873
},
18881874
{
1889-
"url": "https://pypi.org/project/cryptography/43.0.3/#files",
1875+
"url": "https://pypi.org/project/cryptography/44.0.0/#files",
18901876
"type": "distribution",
18911877
"comment": "Download location for component"
18921878
}
18931879
],
1894-
"purl": "pkg:pypi/cryptography@43.0.3",
1880+
"purl": "pkg:pypi/cryptography@44.0.0",
18951881
"properties": [
18961882
{
18971883
"name": "language",
@@ -1903,7 +1889,7 @@
19031889
},
19041890
{
19051891
"name": "package_release_date",
1906-
"value": "2024-10-18T15:57:36.000Z"
1892+
"value": "2024-11-27T18:05:55.000Z"
19071893
}
19081894
]
19091895
},
@@ -1922,6 +1908,12 @@
19221908
},
19231909
"cpe": "cpe:2.3:a:armin_maciej_fijalkowski:cffi:1.17.1:*:*:*:*:*:*:*",
19241910
"description": "Foreign Function Interface for Python calling C code.",
1911+
"hashes": [
1912+
{
1913+
"alg": "SHA-1",
1914+
"content": "38bd6be6b94a65182f4bffb45c78e230e9290f51"
1915+
}
1916+
],
19251917
"licenses": [
19261918
{
19271919
"license": {

0 commit comments

Comments
 (0)