Skip to content

Commit 89a4fe7

Browse files
github-actions[bot]web-flow
github-actions[bot]
and
web-flow
authored
chore: update SBOM for Python 3.9 (#3038)
Co-authored-by: GitHub <[email protected]>
1 parent 6ceb7ed commit 89a4fe7

File tree

2 files changed

+36
-36
lines changed

2 files changed

+36
-36
lines changed

‎sbom/cve-bin-tool-py3.9.json

Lines changed: 18 additions & 18 deletions
Original file line numberDiff line numberDiff line change
@@ -2,10 +2,10 @@
22
"$schema": "http://cyclonedx.org/schema/bom-1.4.schema.json",
33
"bomFormat": "CycloneDX",
44
"specVersion": "1.4",
5-
"serialNumber": "urn:uuidbf11c2c5-415a-4cc8-9127-c769c21e21d0",
5+
"serialNumber": "urn:uuid7bbf99d3-1651-4953-b3e2-836f89535bd3",
66
"version": 1,
77
"metadata": {
8-
"timestamp": "2023-05-22T00:27:20Z",
8+
"timestamp": "2023-05-29T00:27:11Z",
99
"tools": [
1010
{
1111
"name": "sbom4python",
@@ -1377,7 +1377,7 @@
13771377
"type": "library",
13781378
"bom-ref": "37-google-auth",
13791379
"name": "google-auth",
1380-
"version": "2.18.1",
1380+
"version": "2.19.0",
13811381
"supplier": {
13821382
"name": "Google Cloud Platform",
13831383
"contact": [
@@ -1386,7 +1386,7 @@
13861386
}
13871387
]
13881388
},
1389-
"cpe": "cpe:2.3:a:google_cloud_platform:google-auth:2.18.1:*:*:*:*:*:*:*",
1389+
"cpe": "cpe:2.3:a:google_cloud_platform:google-auth:2.19.0:*:*:*:*:*:*:*",
13901390
"description": "Google Authentication Library",
13911391
"licenses": [
13921392
{
@@ -1403,12 +1403,12 @@
14031403
"comment": "Home page for project"
14041404
},
14051405
{
1406-
"url": "https://pypi.org/project/google-auth/2.18.1",
1406+
"url": "https://pypi.org/project/google-auth/2.19.0",
14071407
"type": "distribution",
14081408
"comment": "Download location for component"
14091409
}
14101410
],
1411-
"purl": "pkg:pypi/google-auth@2.18.1",
1411+
"purl": "pkg:pypi/google-auth@2.19.0",
14121412
"properties": [
14131413
{
14141414
"name": "License Comments",
@@ -1420,7 +1420,7 @@
14201420
"type": "library",
14211421
"bom-ref": "38-cachetools",
14221422
"name": "cachetools",
1423-
"version": "5.3.0",
1423+
"version": "5.3.1",
14241424
"supplier": {
14251425
"name": "Thomas Kemmer",
14261426
"contact": [
@@ -1429,7 +1429,7 @@
14291429
}
14301430
]
14311431
},
1432-
"cpe": "cpe:2.3:a:thomas_kemmer:cachetools:5.3.0:*:*:*:*:*:*:*",
1432+
"cpe": "cpe:2.3:a:thomas_kemmer:cachetools:5.3.1:*:*:*:*:*:*:*",
14331433
"description": "Extensible memoizing collections and decorators",
14341434
"licenses": [
14351435
{
@@ -1446,18 +1446,18 @@
14461446
"comment": "Home page for project"
14471447
},
14481448
{
1449-
"url": "https://pypi.org/project/cachetools/5.3.0",
1449+
"url": "https://pypi.org/project/cachetools/5.3.1",
14501450
"type": "distribution",
14511451
"comment": "Download location for component"
14521452
}
14531453
],
1454-
"purl": "pkg:pypi/[email protected].0"
1454+
"purl": "pkg:pypi/[email protected].1"
14551455
},
14561456
{
14571457
"type": "library",
14581458
"bom-ref": "39-urllib3",
14591459
"name": "urllib3",
1460-
"version": "1.26.15",
1460+
"version": "1.26.16",
14611461
"supplier": {
14621462
"name": "Andrey Petrov",
14631463
"contact": [
@@ -1466,7 +1466,7 @@
14661466
}
14671467
]
14681468
},
1469-
"cpe": "cpe:2.3:a:andrey_petrov:urllib3:1.26.15:*:*:*:*:*:*:*",
1469+
"cpe": "cpe:2.3:a:andrey_petrov:urllib3:1.26.16:*:*:*:*:*:*:*",
14701470
"description": "HTTP library with thread-safe connection pooling, file post, and more.",
14711471
"licenses": [
14721472
{
@@ -1483,12 +1483,12 @@
14831483
"comment": "Home page for project"
14841484
},
14851485
{
1486-
"url": "https://pypi.org/project/urllib3/1.26.15",
1486+
"url": "https://pypi.org/project/urllib3/1.26.16",
14871487
"type": "distribution",
14881488
"comment": "Download location for component"
14891489
}
14901490
],
1491-
"purl": "pkg:pypi/[email protected].15"
1491+
"purl": "pkg:pypi/[email protected].16"
14921492
},
14931493
{
14941494
"type": "library",
@@ -1972,7 +1972,7 @@
19721972
"type": "library",
19731973
"bom-ref": "53-requests",
19741974
"name": "requests",
1975-
"version": "2.30.0",
1975+
"version": "2.31.0",
19761976
"supplier": {
19771977
"name": "Kenneth Reitz",
19781978
"contact": [
@@ -1981,7 +1981,7 @@
19811981
}
19821982
]
19831983
},
1984-
"cpe": "cpe:2.3:a:kenneth_reitz:requests:2.30.0:*:*:*:*:*:*:*",
1984+
"cpe": "cpe:2.3:a:kenneth_reitz:requests:2.31.0:*:*:*:*:*:*:*",
19851985
"description": "Python HTTP for Humans.",
19861986
"licenses": [
19871987
{
@@ -1998,12 +1998,12 @@
19981998
"comment": "Home page for project"
19991999
},
20002000
{
2001-
"url": "https://pypi.org/project/requests/2.30.0",
2001+
"url": "https://pypi.org/project/requests/2.31.0",
20022002
"type": "distribution",
20032003
"comment": "Download location for component"
20042004
}
20052005
],
2006-
"purl": "pkg:pypi/requests@2.30.0",
2006+
"purl": "pkg:pypi/requests@2.31.0",
20072007
"properties": [
20082008
{
20092009
"name": "License Comments",

‎sbom/cve-bin-tool-py3.9.spdx

Lines changed: 18 additions & 18 deletions
Original file line numberDiff line numberDiff line change
@@ -2,10 +2,10 @@ SPDXVersion: SPDX-2.3
22
DataLicense: CC0-1.0
33
SPDXID: SPDXRef-DOCUMENT
44
DocumentName: Python-cve-bin-tool
5-
DocumentNamespace: http://spdx.org/spdxdocs/Python-cve-bin-tool-992ad455-14db-4167-a4fb-1ffd2b6bf795
5+
DocumentNamespace: http://spdx.org/spdxdocs/Python-cve-bin-tool-c3a21b8b-1e5e-4f6d-a597-daf2fddd9ed0
66
LicenseListVersion: 3.20
77
Creator: Tool: sbom4python-0.9.1
8-
Created: 2023-05-22T00:26:03Z
8+
Created: 2023-05-29T00:25:52Z
99
CreatorComment: <text>This document has been automatically generated.</text>
1010
#####
1111

@@ -599,51 +599,51 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:craig_citro:google-apitools:0.5.32:*:*
599599

600600
PackageName: google-auth
601601
SPDXID: SPDXRef-Package-37-google-auth
602-
PackageVersion: 2.18.1
602+
PackageVersion: 2.19.0
603603
PrimaryPackagePurpose: LIBRARY
604604
PackageSupplier: Organization: Google Cloud Platform ([email protected])
605-
PackageDownloadLocation: https://pypi.org/project/google-auth/2.18.1
605+
PackageDownloadLocation: https://pypi.org/project/google-auth/2.19.0
606606
FilesAnalyzed: false
607607
PackageHomePage: https://github.com/googleapis/google-auth-library-python
608608
PackageLicenseDeclared: NOASSERTION
609609
PackageLicenseConcluded: Apache-2.0
610610
PackageLicenseComments: <text>google-auth declares Apache 2.0 which is not currently a valid SPDX License identifier or expression.</text>
611611
PackageCopyrightText: NOASSERTION
612612
PackageSummary: <text>Google Authentication Library</text>
613-
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/google-auth@2.18.1
614-
ExternalRef: SECURITY cpe23Type cpe:2.3:a:google_cloud_platform:google-auth:2.18.1:*:*:*:*:*:*:*
613+
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/google-auth@2.19.0
614+
ExternalRef: SECURITY cpe23Type cpe:2.3:a:google_cloud_platform:google-auth:2.19.0:*:*:*:*:*:*:*
615615
#####
616616

617617
PackageName: cachetools
618618
SPDXID: SPDXRef-Package-38-cachetools
619-
PackageVersion: 5.3.0
619+
PackageVersion: 5.3.1
620620
PrimaryPackagePurpose: LIBRARY
621621
PackageSupplier: Person: Thomas Kemmer ([email protected])
622-
PackageDownloadLocation: https://pypi.org/project/cachetools/5.3.0
622+
PackageDownloadLocation: https://pypi.org/project/cachetools/5.3.1
623623
FilesAnalyzed: false
624624
PackageHomePage: https://github.com/tkem/cachetools/
625625
PackageLicenseDeclared: MIT
626626
PackageLicenseConcluded: MIT
627627
PackageCopyrightText: NOASSERTION
628628
PackageSummary: <text>Extensible memoizing collections and decorators</text>
629-
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/[email protected].0
630-
ExternalRef: SECURITY cpe23Type cpe:2.3:a:thomas_kemmer:cachetools:5.3.0:*:*:*:*:*:*:*
629+
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/[email protected].1
630+
ExternalRef: SECURITY cpe23Type cpe:2.3:a:thomas_kemmer:cachetools:5.3.1:*:*:*:*:*:*:*
631631
#####
632632

633633
PackageName: urllib3
634634
SPDXID: SPDXRef-Package-39-urllib3
635-
PackageVersion: 1.26.15
635+
PackageVersion: 1.26.16
636636
PrimaryPackagePurpose: LIBRARY
637637
PackageSupplier: Person: Andrey Petrov ([email protected])
638-
PackageDownloadLocation: https://pypi.org/project/urllib3/1.26.15
638+
PackageDownloadLocation: https://pypi.org/project/urllib3/1.26.16
639639
FilesAnalyzed: false
640640
PackageHomePage: https://urllib3.readthedocs.io/
641641
PackageLicenseDeclared: MIT
642642
PackageLicenseConcluded: MIT
643643
PackageCopyrightText: NOASSERTION
644644
PackageSummary: <text>HTTP library with thread-safe connection pooling, file post, and more.</text>
645-
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/[email protected].15
646-
ExternalRef: SECURITY cpe23Type cpe:2.3:a:andrey_petrov:urllib3:1.26.15:*:*:*:*:*:*:*
645+
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/[email protected].16
646+
ExternalRef: SECURITY cpe23Type cpe:2.3:a:andrey_petrov:urllib3:1.26.16:*:*:*:*:*:*:*
647647
#####
648648

649649
PackageName: monotonic
@@ -859,19 +859,19 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:julien_danjou:tenacity:8.2.2:*:*:*:*:*
859859

860860
PackageName: requests
861861
SPDXID: SPDXRef-Package-53-requests
862-
PackageVersion: 2.30.0
862+
PackageVersion: 2.31.0
863863
PrimaryPackagePurpose: LIBRARY
864864
PackageSupplier: Person: Kenneth Reitz ([email protected])
865-
PackageDownloadLocation: https://pypi.org/project/requests/2.30.0
865+
PackageDownloadLocation: https://pypi.org/project/requests/2.31.0
866866
FilesAnalyzed: false
867867
PackageHomePage: https://requests.readthedocs.io
868868
PackageLicenseDeclared: NOASSERTION
869869
PackageLicenseConcluded: Apache-2.0
870870
PackageLicenseComments: <text>requests declares Apache 2.0 which is not currently a valid SPDX License identifier or expression.</text>
871871
PackageCopyrightText: NOASSERTION
872872
PackageSummary: <text>Python HTTP for Humans.</text>
873-
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/requests@2.30.0
874-
ExternalRef: SECURITY cpe23Type cpe:2.3:a:kenneth_reitz:requests:2.30.0:*:*:*:*:*:*:*
873+
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/requests@2.31.0
874+
ExternalRef: SECURITY cpe23Type cpe:2.3:a:kenneth_reitz:requests:2.31.0:*:*:*:*:*:*:*
875875
#####
876876

877877
PackageName: certifi

0 commit comments

Comments
 (0)