Skip to content

Commit aab0655

Browse files
web-flowweb-flow
authored
chore: update SBOM for Python 3.8
1 parent ef38dba commit aab0655

File tree

2 files changed

+60
-60
lines changed

2 files changed

+60
-60
lines changed

‎sbom/cve-bin-tool-py3.8.json

Lines changed: 30 additions & 30 deletions
Original file line numberDiff line numberDiff line change
@@ -2,10 +2,10 @@
22
"$schema": "http://cyclonedx.org/schema/bom-1.5.schema.json",
33
"bomFormat": "CycloneDX",
44
"specVersion": "1.5",
5-
"serialNumber": "urn:uuid:ad8b422c-3353-40d3-9fe2-39159471e9e1",
5+
"serialNumber": "urn:uuid:63b6ddf0-0f47-4d29-9bc7-d74d55620fb5",
66
"version": 1,
77
"metadata": {
8-
"timestamp": "2023-11-27T00:27:09Z",
8+
"timestamp": "2023-12-04T00:27:26Z",
99
"tools": {
1010
"components": [
1111
{
@@ -26,7 +26,7 @@
2626
"type": "application",
2727
"bom-ref": "1-cve-bin-tool",
2828
"name": "cve-bin-tool",
29-
"version": "3.2.2.dev0",
29+
"version": "3.3a0",
3030
"supplier": {
3131
"name": "Terri Oda",
3232
"contact": [
@@ -35,7 +35,7 @@
3535
}
3636
]
3737
},
38-
"cpe": "cpe:2.3:a:terri_oda:cve-bin-tool:3.2.2.dev0:*:*:*:*:*:*:*",
38+
"cpe": "cpe:2.3:a:terri_oda:cve-bin-tool:3.3a0:*:*:*:*:*:*:*",
3939
"description": "CVE Binary Checker Tool",
4040
"licenses": [
4141
{
@@ -47,12 +47,12 @@
4747
],
4848
"externalReferences": [
4949
{
50-
"url": "https://pypi.org/project/cve-bin-tool/3.2.2.dev0",
50+
"url": "https://pypi.org/project/cve-bin-tool/3.3a0",
5151
"type": "distribution",
5252
"comment": "Download location for component"
5353
}
5454
],
55-
"purl": "pkg:pypi/cve-bin-tool@3.2.2.dev0",
55+
"purl": "pkg:pypi/cve-bin-tool@3.3a0",
5656
"properties": [
5757
{
5858
"name": "language",
@@ -1173,7 +1173,7 @@
11731173
"type": "library",
11741174
"bom-ref": "31-cryptography",
11751175
"name": "cryptography",
1176-
"version": "41.0.5",
1176+
"version": "41.0.7",
11771177
"supplier": {
11781178
"name": "The Python Cryptographic Authority and individual contributors",
11791179
"contact": [
@@ -1182,7 +1182,7 @@
11821182
}
11831183
]
11841184
},
1185-
"cpe": "cpe:2.3:a:the_python_cryptographic_authority_and_individual_contributors:cryptography:41.0.5:*:*:*:*:*:*:*",
1185+
"cpe": "cpe:2.3:a:the_python_cryptographic_authority_and_individual_contributors:cryptography:41.0.7:*:*:*:*:*:*:*",
11861186
"description": "cryptography is a package which provides cryptographic recipes and primitives to Python developers.",
11871187
"licenses": [
11881188
{
@@ -1191,12 +1191,12 @@
11911191
],
11921192
"externalReferences": [
11931193
{
1194-
"url": "https://pypi.org/project/cryptography/41.0.5",
1194+
"url": "https://pypi.org/project/cryptography/41.0.7",
11951195
"type": "distribution",
11961196
"comment": "Download location for component"
11971197
}
11981198
],
1199-
"purl": "pkg:pypi/[email protected].5",
1199+
"purl": "pkg:pypi/[email protected].7",
12001200
"properties": [
12011201
{
12021202
"name": "language",
@@ -1368,7 +1368,7 @@
13681368
"type": "library",
13691369
"bom-ref": "36-google-auth",
13701370
"name": "google-auth",
1371-
"version": "2.23.4",
1371+
"version": "2.24.0",
13721372
"supplier": {
13731373
"name": "Google Cloud Platform",
13741374
"contact": [
@@ -1377,7 +1377,7 @@
13771377
}
13781378
]
13791379
},
1380-
"cpe": "cpe:2.3:a:google_cloud_platform:google-auth:2.23.4:*:*:*:*:*:*:*",
1380+
"cpe": "cpe:2.3:a:google_cloud_platform:google-auth:2.24.0:*:*:*:*:*:*:*",
13811381
"description": "Google Authentication Library",
13821382
"licenses": [
13831383
{
@@ -1389,12 +1389,12 @@
13891389
],
13901390
"externalReferences": [
13911391
{
1392-
"url": "https://pypi.org/project/google-auth/2.23.4",
1392+
"url": "https://pypi.org/project/google-auth/2.24.0",
13931393
"type": "distribution",
13941394
"comment": "Download location for component"
13951395
}
13961396
],
1397-
"purl": "pkg:pypi/google-auth@2.23.4",
1397+
"purl": "pkg:pypi/google-auth@2.24.0",
13981398
"properties": [
13991399
{
14001400
"name": "language",
@@ -1490,7 +1490,7 @@
14901490
"type": "library",
14911491
"bom-ref": "39-importlib-metadata",
14921492
"name": "importlib-metadata",
1493-
"version": "6.8.0",
1493+
"version": "7.0.0",
14941494
"supplier": {
14951495
"name": "Jason R . Coombs",
14961496
"contact": [
@@ -1499,16 +1499,16 @@
14991499
}
15001500
]
15011501
},
1502-
"cpe": "cpe:2.3:a:jason_r._coombs:importlib-metadata:6.8.0:*:*:*:*:*:*:*",
1502+
"cpe": "cpe:2.3:a:jason_r._coombs:importlib-metadata:7.0.0:*:*:*:*:*:*:*",
15031503
"description": "Read metadata from Python packages",
15041504
"externalReferences": [
15051505
{
1506-
"url": "https://pypi.org/project/importlib-metadata/6.8.0",
1506+
"url": "https://pypi.org/project/importlib-metadata/7.0.0",
15071507
"type": "distribution",
15081508
"comment": "Download location for component"
15091509
}
15101510
],
1511-
"purl": "pkg:pypi/importlib-metadata@6.8.0",
1511+
"purl": "pkg:pypi/importlib-metadata@7.0.0",
15121512
"properties": [
15131513
{
15141514
"name": "language",
@@ -1684,11 +1684,11 @@
16841684
"type": "library",
16851685
"bom-ref": "45-jsonschema-specifications",
16861686
"name": "jsonschema-specifications",
1687-
"version": "2023.11.1",
1687+
"version": "2023.11.2",
16881688
"supplier": {
16891689
"name": "Julian Berman"
16901690
},
1691-
"cpe": "cpe:2.3:a:julian_berman:jsonschema-specifications:2023.11.1:*:*:*:*:*:*:*",
1691+
"cpe": "cpe:2.3:a:julian_berman:jsonschema-specifications:2023.11.2:*:*:*:*:*:*:*",
16921692
"description": "The JSON Schema meta-schemas and vocabularies, exposed as a Registry",
16931693
"licenses": [
16941694
{
@@ -1700,12 +1700,12 @@
17001700
],
17011701
"externalReferences": [
17021702
{
1703-
"url": "https://pypi.org/project/jsonschema-specifications/2023.11.1",
1703+
"url": "https://pypi.org/project/jsonschema-specifications/2023.11.2",
17041704
"type": "distribution",
17051705
"comment": "Download location for component"
17061706
}
17071707
],
1708-
"purl": "pkg:pypi/[email protected].1",
1708+
"purl": "pkg:pypi/[email protected].2",
17091709
"properties": [
17101710
{
17111711
"name": "language",
@@ -1717,11 +1717,11 @@
17171717
"type": "library",
17181718
"bom-ref": "46-referencing",
17191719
"name": "referencing",
1720-
"version": "0.31.0",
1720+
"version": "0.31.1",
17211721
"supplier": {
17221722
"name": "Julian Berman"
17231723
},
1724-
"cpe": "cpe:2.3:a:julian_berman:referencing:0.31.0:*:*:*:*:*:*:*",
1724+
"cpe": "cpe:2.3:a:julian_berman:referencing:0.31.1:*:*:*:*:*:*:*",
17251725
"description": "JSON Referencing + Python",
17261726
"licenses": [
17271727
{
@@ -1733,12 +1733,12 @@
17331733
],
17341734
"externalReferences": [
17351735
{
1736-
"url": "https://pypi.org/project/referencing/0.31.0",
1736+
"url": "https://pypi.org/project/referencing/0.31.1",
17371737
"type": "distribution",
17381738
"comment": "Download location for component"
17391739
}
17401740
],
1741-
"purl": "pkg:pypi/[email protected].0",
1741+
"purl": "pkg:pypi/[email protected].1",
17421742
"properties": [
17431743
{
17441744
"name": "language",
@@ -1750,11 +1750,11 @@
17501750
"type": "library",
17511751
"bom-ref": "47-rpds-py",
17521752
"name": "rpds-py",
1753-
"version": "0.13.1",
1753+
"version": "0.13.2",
17541754
"supplier": {
17551755
"name": "Julian Berman"
17561756
},
1757-
"cpe": "cpe:2.3:a:julian_berman:rpds-py:0.13.1:*:*:*:*:*:*:*",
1757+
"cpe": "cpe:2.3:a:julian_berman:rpds-py:0.13.2:*:*:*:*:*:*:*",
17581758
"description": "Python bindings to Rust's persistent data structures (rpds)",
17591759
"licenses": [
17601760
{
@@ -1766,12 +1766,12 @@
17661766
],
17671767
"externalReferences": [
17681768
{
1769-
"url": "https://pypi.org/project/rpds-py/0.13.1",
1769+
"url": "https://pypi.org/project/rpds-py/0.13.2",
17701770
"type": "distribution",
17711771
"comment": "Download location for component"
17721772
}
17731773
],
1774-
"purl": "pkg:pypi/[email protected].1",
1774+
"purl": "pkg:pypi/[email protected].2",
17751775
"properties": [
17761776
{
17771777
"name": "language",

‎sbom/cve-bin-tool-py3.8.spdx

Lines changed: 30 additions & 30 deletions
Original file line numberDiff line numberDiff line change
@@ -2,26 +2,26 @@ SPDXVersion: SPDX-2.3
22
DataLicense: CC0-1.0
33
SPDXID: SPDXRef-DOCUMENT
44
DocumentName: Python-cve-bin-tool
5-
DocumentNamespace: http://spdx.org/spdxdocs/Python-cve-bin-tool-49c0d102-3d22-46cc-bb3f-a32a0fa5b018
5+
DocumentNamespace: http://spdx.org/spdxdocs/Python-cve-bin-tool-c97adb49-cd97-4afa-abfa-56c2f899134b
66
LicenseListVersion: 3.22
77
Creator: Tool: sbom4python-0.10.1
8-
Created: 2023-11-27T00:25:54Z
8+
Created: 2023-12-04T00:26:07Z
99
CreatorComment: <text>This document has been automatically generated.</text>
1010
#####
1111

1212
PackageName: cve-bin-tool
1313
SPDXID: SPDXRef-Package-1-cve-bin-tool
14-
PackageVersion: 3.2.2.dev0
14+
PackageVersion: 3.3a0
1515
PrimaryPackagePurpose: APPLICATION
1616
PackageSupplier: Person: Terri Oda ([email protected])
17-
PackageDownloadLocation: https://pypi.org/project/cve-bin-tool/3.2.2.dev0
17+
PackageDownloadLocation: https://pypi.org/project/cve-bin-tool/3.3a0
1818
FilesAnalyzed: false
1919
PackageLicenseDeclared: GPL-3.0-or-later
2020
PackageLicenseConcluded: GPL-3.0-or-later
2121
PackageCopyrightText: NOASSERTION
2222
PackageSummary: <text>CVE Binary Checker Tool</text>
23-
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/cve-bin-tool@3.2.2.dev0
24-
ExternalRef: SECURITY cpe23Type cpe:2.3:a:terri_oda:cve-bin-tool:3.2.2.dev0:*:*:*:*:*:*:*
23+
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/cve-bin-tool@3.3a0
24+
ExternalRef: SECURITY cpe23Type cpe:2.3:a:terri_oda:cve-bin-tool:3.3a0:*:*:*:*:*:*:*
2525
#####
2626

2727
PackageName: aiohttp
@@ -474,17 +474,17 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:the_pyopenssl_developers:pyopenssl:23.
474474

475475
PackageName: cryptography
476476
SPDXID: SPDXRef-Package-31-cryptography
477-
PackageVersion: 41.0.5
477+
PackageVersion: 41.0.7
478478
PrimaryPackagePurpose: LIBRARY
479479
PackageSupplier: Organization: The Python Cryptographic Authority and individual contributors ([email protected])
480-
PackageDownloadLocation: https://pypi.org/project/cryptography/41.0.5
480+
PackageDownloadLocation: https://pypi.org/project/cryptography/41.0.7
481481
FilesAnalyzed: false
482482
PackageLicenseDeclared: Apache-2.0 OR BSD-3-Clause
483483
PackageLicenseConcluded: Apache-2.0 OR BSD-3-Clause
484484
PackageCopyrightText: NOASSERTION
485485
PackageSummary: <text>cryptography is a package which provides cryptographic recipes and primitives to Python developers.</text>
486-
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/[email protected].5
487-
ExternalRef: SECURITY cpe23Type cpe:2.3:a:the_python_cryptographic_authority_and_individual_contributors:cryptography:41.0.5:*:*:*:*:*:*:*
486+
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/[email protected].7
487+
ExternalRef: SECURITY cpe23Type cpe:2.3:a:the_python_cryptographic_authority_and_individual_contributors:cryptography:41.0.7:*:*:*:*:*:*:*
488488
#####
489489

490490
PackageName: cffi
@@ -551,18 +551,18 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:craig_citro:google-apitools:0.5.32:*:*
551551

552552
PackageName: google-auth
553553
SPDXID: SPDXRef-Package-36-google-auth
554-
PackageVersion: 2.23.4
554+
PackageVersion: 2.24.0
555555
PrimaryPackagePurpose: LIBRARY
556556
PackageSupplier: Organization: Google Cloud Platform ([email protected])
557-
PackageDownloadLocation: https://pypi.org/project/google-auth/2.23.4
557+
PackageDownloadLocation: https://pypi.org/project/google-auth/2.24.0
558558
FilesAnalyzed: false
559559
PackageLicenseDeclared: NOASSERTION
560560
PackageLicenseConcluded: Apache-2.0
561561
PackageLicenseComments: <text>google-auth declares Apache 2.0 which is not currently a valid SPDX License identifier or expression.</text>
562562
PackageCopyrightText: NOASSERTION
563563
PackageSummary: <text>Google Authentication Library</text>
564-
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/google-auth@2.23.4
565-
ExternalRef: SECURITY cpe23Type cpe:2.3:a:google_cloud_platform:google-auth:2.23.4:*:*:*:*:*:*:*
564+
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/google-auth@2.24.0
565+
ExternalRef: SECURITY cpe23Type cpe:2.3:a:google_cloud_platform:google-auth:2.24.0:*:*:*:*:*:*:*
566566
#####
567567

568568
PackageName: cachetools
@@ -598,17 +598,17 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:ori_livneh:monotonic:1.6:*:*:*:*:*:*:*
598598

599599
PackageName: importlib-metadata
600600
SPDXID: SPDXRef-Package-39-importlib-metadata
601-
PackageVersion: 6.8.0
601+
PackageVersion: 7.0.0
602602
PrimaryPackagePurpose: LIBRARY
603603
PackageSupplier: Organization: Jason R. Coombs ([email protected])
604-
PackageDownloadLocation: https://pypi.org/project/importlib-metadata/6.8.0
604+
PackageDownloadLocation: https://pypi.org/project/importlib-metadata/7.0.0
605605
FilesAnalyzed: false
606606
PackageLicenseDeclared: NOASSERTION
607607
PackageLicenseConcluded: NOASSERTION
608608
PackageCopyrightText: NOASSERTION
609609
PackageSummary: <text>Read metadata from Python packages</text>
610-
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/importlib-metadata@6.8.0
611-
ExternalRef: SECURITY cpe23Type cpe:2.3:a:jason_r._coombs:importlib-metadata:6.8.0:*:*:*:*:*:*:*
610+
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/importlib-metadata@7.0.0
611+
ExternalRef: SECURITY cpe23Type cpe:2.3:a:jason_r._coombs:importlib-metadata:7.0.0:*:*:*:*:*:*:*
612612
#####
613613

614614
PackageName: zipp
@@ -687,47 +687,47 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:julian_berman:jsonschema:4.20.0:*:*:*:
687687

688688
PackageName: jsonschema-specifications
689689
SPDXID: SPDXRef-Package-45-jsonschema-specifications
690-
PackageVersion: 2023.11.1
690+
PackageVersion: 2023.11.2
691691
PrimaryPackagePurpose: LIBRARY
692692
PackageSupplier: Person: Julian Berman
693-
PackageDownloadLocation: https://pypi.org/project/jsonschema-specifications/2023.11.1
693+
PackageDownloadLocation: https://pypi.org/project/jsonschema-specifications/2023.11.2
694694
FilesAnalyzed: false
695695
PackageLicenseDeclared: MIT
696696
PackageLicenseConcluded: MIT
697697
PackageCopyrightText: NOASSERTION
698698
PackageSummary: <text>The JSON Schema meta-schemas and vocabularies, exposed as a Registry</text>
699-
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/[email protected].1
700-
ExternalRef: SECURITY cpe23Type cpe:2.3:a:julian_berman:jsonschema-specifications:2023.11.1:*:*:*:*:*:*:*
699+
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/[email protected].2
700+
ExternalRef: SECURITY cpe23Type cpe:2.3:a:julian_berman:jsonschema-specifications:2023.11.2:*:*:*:*:*:*:*
701701
#####
702702

703703
PackageName: referencing
704704
SPDXID: SPDXRef-Package-46-referencing
705-
PackageVersion: 0.31.0
705+
PackageVersion: 0.31.1
706706
PrimaryPackagePurpose: LIBRARY
707707
PackageSupplier: Person: Julian Berman
708-
PackageDownloadLocation: https://pypi.org/project/referencing/0.31.0
708+
PackageDownloadLocation: https://pypi.org/project/referencing/0.31.1
709709
FilesAnalyzed: false
710710
PackageLicenseDeclared: MIT
711711
PackageLicenseConcluded: MIT
712712
PackageCopyrightText: NOASSERTION
713713
PackageSummary: <text>JSON Referencing + Python</text>
714-
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/[email protected].0
715-
ExternalRef: SECURITY cpe23Type cpe:2.3:a:julian_berman:referencing:0.31.0:*:*:*:*:*:*:*
714+
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/[email protected].1
715+
ExternalRef: SECURITY cpe23Type cpe:2.3:a:julian_berman:referencing:0.31.1:*:*:*:*:*:*:*
716716
#####
717717

718718
PackageName: rpds-py
719719
SPDXID: SPDXRef-Package-47-rpds-py
720-
PackageVersion: 0.13.1
720+
PackageVersion: 0.13.2
721721
PrimaryPackagePurpose: LIBRARY
722722
PackageSupplier: Person: Julian Berman
723-
PackageDownloadLocation: https://pypi.org/project/rpds-py/0.13.1
723+
PackageDownloadLocation: https://pypi.org/project/rpds-py/0.13.2
724724
FilesAnalyzed: false
725725
PackageLicenseDeclared: MIT
726726
PackageLicenseConcluded: MIT
727727
PackageCopyrightText: NOASSERTION
728728
PackageSummary: <text>Python bindings to Rust's persistent data structures (rpds)</text>
729-
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/[email protected].1
730-
ExternalRef: SECURITY cpe23Type cpe:2.3:a:julian_berman:rpds-py:0.13.1:*:*:*:*:*:*:*
729+
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/[email protected].2
730+
ExternalRef: SECURITY cpe23Type cpe:2.3:a:julian_berman:rpds-py:0.13.2:*:*:*:*:*:*:*
731731
#####
732732

733733
PackageName: pkgutil-resolve-name

0 commit comments

Comments
 (0)