Skip to content

Commit ada27e4

Browse files
web-flowweb-flow
authored
chore: update SBOM for Python 3.8
1 parent a0b6dfd commit ada27e4

File tree

2 files changed

+76
-76
lines changed

2 files changed

+76
-76
lines changed

‎sbom/cve-bin-tool-py3.8.json

Lines changed: 38 additions & 38 deletions
Original file line numberDiff line numberDiff line change
@@ -2,10 +2,10 @@
22
"$schema": "http://cyclonedx.org/schema/bom-1.4.schema.json",
33
"bomFormat": "CycloneDX",
44
"specVersion": "1.4",
5-
"serialNumber": "urn:uuid76ec96fe-82ee-4b65-9c9a-2e26de0ada5e",
5+
"serialNumber": "urn:uuid31d60468-ab8e-4f6a-b1d8-3680a07b7e79",
66
"version": 1,
77
"metadata": {
8-
"timestamp": "2023-06-05T00:30:24Z",
8+
"timestamp": "2023-06-19T00:30:45Z",
99
"tools": [
1010
{
1111
"name": "sbom4python",
@@ -590,7 +590,7 @@
590590
"type": "library",
591591
"bom-ref": "17-argcomplete",
592592
"name": "argcomplete",
593-
"version": "3.0.8",
593+
"version": "3.1.1",
594594
"supplier": {
595595
"name": "Andrey Kislyuk",
596596
"contact": [
@@ -599,7 +599,7 @@
599599
}
600600
]
601601
},
602-
"cpe": "cpe:2.3:a:andrey_kislyuk:argcomplete:3.0.8:*:*:*:*:*:*:*",
602+
"cpe": "cpe:2.3:a:andrey_kislyuk:argcomplete:3.1.1:*:*:*:*:*:*:*",
603603
"description": "Bash tab completion for argparse",
604604
"licenses": [
605605
{
@@ -616,12 +616,12 @@
616616
"comment": "Home page for project"
617617
},
618618
{
619-
"url": "https://pypi.org/project/argcomplete/3.0.8",
619+
"url": "https://pypi.org/project/argcomplete/3.1.1",
620620
"type": "distribution",
621621
"comment": "Download location for component"
622622
}
623623
],
624-
"purl": "pkg:pypi/argcomplete@3.0.8",
624+
"purl": "pkg:pypi/argcomplete@3.1.1",
625625
"properties": [
626626
{
627627
"name": "License Comments",
@@ -948,7 +948,7 @@
948948
"type": "library",
949949
"bom-ref": "26-pyparsing",
950950
"name": "pyparsing",
951-
"version": "3.0.9",
951+
"version": "3.1.0",
952952
"supplier": {
953953
"name": "Paul McGuire",
954954
"contact": [
@@ -957,16 +957,16 @@
957957
}
958958
]
959959
},
960-
"cpe": "cpe:2.3:a:paul_mcguire:pyparsing:3.0.9:*:*:*:*:*:*:*",
960+
"cpe": "cpe:2.3:a:paul_mcguire:pyparsing:3.1.0:*:*:*:*:*:*:*",
961961
"description": "pyparsing module - Classes and methods to define and execute parsing grammars",
962962
"externalReferences": [
963963
{
964-
"url": "https://pypi.org/project/pyparsing/3.0.9",
964+
"url": "https://pypi.org/project/pyparsing/3.1.0",
965965
"type": "distribution",
966966
"comment": "Download location for component"
967967
}
968968
],
969-
"purl": "pkg:pypi/pyparsing@3.0.9"
969+
"purl": "pkg:pypi/pyparsing@3.1.0"
970970
},
971971
{
972972
"type": "library",
@@ -1372,7 +1372,7 @@
13721372
"type": "library",
13731373
"bom-ref": "37-google-auth",
13741374
"name": "google-auth",
1375-
"version": "2.19.1",
1375+
"version": "2.20.0",
13761376
"supplier": {
13771377
"name": "Google Cloud Platform",
13781378
"contact": [
@@ -1381,7 +1381,7 @@
13811381
}
13821382
]
13831383
},
1384-
"cpe": "cpe:2.3:a:google_cloud_platform:google-auth:2.19.1:*:*:*:*:*:*:*",
1384+
"cpe": "cpe:2.3:a:google_cloud_platform:google-auth:2.20.0:*:*:*:*:*:*:*",
13851385
"description": "Google Authentication Library",
13861386
"licenses": [
13871387
{
@@ -1398,12 +1398,12 @@
13981398
"comment": "Home page for project"
13991399
},
14001400
{
1401-
"url": "https://pypi.org/project/google-auth/2.19.1",
1401+
"url": "https://pypi.org/project/google-auth/2.20.0",
14021402
"type": "distribution",
14031403
"comment": "Download location for component"
14041404
}
14051405
],
1406-
"purl": "pkg:pypi/google-auth@2.19.1",
1406+
"purl": "pkg:pypi/google-auth@2.20.0",
14071407
"properties": [
14081408
{
14091409
"name": "License Comments",
@@ -1532,7 +1532,7 @@
15321532
"type": "library",
15331533
"bom-ref": "41-importlib-metadata",
15341534
"name": "importlib-metadata",
1535-
"version": "6.6.0",
1535+
"version": "6.7.0",
15361536
"supplier": {
15371537
"name": "Jason R. Coombs",
15381538
"contact": [
@@ -1541,7 +1541,7 @@
15411541
}
15421542
]
15431543
},
1544-
"cpe": "cpe:2.3:a:jason_r._coombs:importlib-metadata:6.6.0:*:*:*:*:*:*:*",
1544+
"cpe": "cpe:2.3:a:jason_r._coombs:importlib-metadata:6.7.0:*:*:*:*:*:*:*",
15451545
"description": "Read metadata from Python packages",
15461546
"externalReferences": [
15471547
{
@@ -1550,12 +1550,12 @@
15501550
"comment": "Home page for project"
15511551
},
15521552
{
1553-
"url": "https://pypi.org/project/importlib-metadata/6.6.0",
1553+
"url": "https://pypi.org/project/importlib-metadata/6.7.0",
15541554
"type": "distribution",
15551555
"comment": "Download location for component"
15561556
}
15571557
],
1558-
"purl": "pkg:pypi/importlib-metadata@6.6.0"
1558+
"purl": "pkg:pypi/importlib-metadata@6.7.0"
15591559
},
15601560
{
15611561
"type": "library",
@@ -1936,7 +1936,7 @@
19361936
"type": "library",
19371937
"bom-ref": "53-plotly",
19381938
"name": "plotly",
1939-
"version": "5.14.1",
1939+
"version": "5.15.0",
19401940
"supplier": {
19411941
"name": "Chris P",
19421942
"contact": [
@@ -1945,7 +1945,7 @@
19451945
}
19461946
]
19471947
},
1948-
"cpe": "cpe:2.3:a:chris_p:plotly:5.14.1:*:*:*:*:*:*:*",
1948+
"cpe": "cpe:2.3:a:chris_p:plotly:5.15.0:*:*:*:*:*:*:*",
19491949
"description": "An open-source, interactive data visualization library for Python",
19501950
"licenses": [
19511951
{
@@ -1962,12 +1962,12 @@
19621962
"comment": "Home page for project"
19631963
},
19641964
{
1965-
"url": "https://pypi.org/project/plotly/5.14.1",
1965+
"url": "https://pypi.org/project/plotly/5.15.0",
19661966
"type": "distribution",
19671967
"comment": "Download location for component"
19681968
}
19691969
],
1970-
"purl": "pkg:pypi/plotly@5.14.1"
1970+
"purl": "pkg:pypi/plotly@5.15.0"
19711971
},
19721972
{
19731973
"type": "library",
@@ -2139,7 +2139,7 @@
21392139
"type": "library",
21402140
"bom-ref": "58-rich",
21412141
"name": "rich",
2142-
"version": "13.4.1",
2142+
"version": "13.4.2",
21432143
"supplier": {
21442144
"name": "Will McGugan",
21452145
"contact": [
@@ -2148,7 +2148,7 @@
21482148
}
21492149
]
21502150
},
2151-
"cpe": "cpe:2.3:a:will_mcgugan:rich:13.4.1:*:*:*:*:*:*:*",
2151+
"cpe": "cpe:2.3:a:will_mcgugan:rich:13.4.2:*:*:*:*:*:*:*",
21522152
"description": "Render rich text, tables, progress bars, syntax highlighting, markdown and more to the terminal",
21532153
"licenses": [
21542154
{
@@ -2165,18 +2165,18 @@
21652165
"comment": "Home page for project"
21662166
},
21672167
{
2168-
"url": "https://pypi.org/project/rich/13.4.1",
2168+
"url": "https://pypi.org/project/rich/13.4.2",
21692169
"type": "distribution",
21702170
"comment": "Download location for component"
21712171
}
21722172
],
2173-
"purl": "pkg:pypi/[email protected].1"
2173+
"purl": "pkg:pypi/[email protected].2"
21742174
},
21752175
{
21762176
"type": "library",
21772177
"bom-ref": "59-markdown-it-py",
21782178
"name": "markdown-it-py",
2179-
"version": "2.2.0",
2179+
"version": "3.0.0",
21802180
"supplier": {
21812181
"name": "Chris Sewell",
21822182
"contact": [
@@ -2185,16 +2185,16 @@
21852185
}
21862186
]
21872187
},
2188-
"cpe": "cpe:2.3:a:chris_sewell:markdown-it-py:2.2.0:*:*:*:*:*:*:*",
2188+
"cpe": "cpe:2.3:a:chris_sewell:markdown-it-py:3.0.0:*:*:*:*:*:*:*",
21892189
"description": "Python port of markdown-it. Markdown parsing, done right!",
21902190
"externalReferences": [
21912191
{
2192-
"url": "https://pypi.org/project/markdown-it-py/2.2.0",
2192+
"url": "https://pypi.org/project/markdown-it-py/3.0.0",
21932193
"type": "distribution",
21942194
"comment": "Download location for component"
21952195
}
21962196
],
2197-
"purl": "pkg:pypi/markdown-it-py@2.2.0"
2197+
"purl": "pkg:pypi/markdown-it-py@3.0.0"
21982198
},
21992199
{
22002200
"type": "library",
@@ -2354,7 +2354,7 @@
23542354
"type": "library",
23552355
"bom-ref": "65-xmlschema",
23562356
"name": "xmlschema",
2357-
"version": "2.3.0",
2357+
"version": "2.3.1",
23582358
"supplier": {
23592359
"name": "Davide Brunato",
23602360
"contact": [
@@ -2363,7 +2363,7 @@
23632363
}
23642364
]
23652365
},
2366-
"cpe": "cpe:2.3:a:davide_brunato:xmlschema:2.3.0:*:*:*:*:*:*:*",
2366+
"cpe": "cpe:2.3:a:davide_brunato:xmlschema:2.3.1:*:*:*:*:*:*:*",
23672367
"description": "An XML Schema validator and decoder",
23682368
"licenses": [
23692369
{
@@ -2380,18 +2380,18 @@
23802380
"comment": "Home page for project"
23812381
},
23822382
{
2383-
"url": "https://pypi.org/project/xmlschema/2.3.0",
2383+
"url": "https://pypi.org/project/xmlschema/2.3.1",
23842384
"type": "distribution",
23852385
"comment": "Download location for component"
23862386
}
23872387
],
2388-
"purl": "pkg:pypi/[email protected].0"
2388+
"purl": "pkg:pypi/[email protected].1"
23892389
},
23902390
{
23912391
"type": "library",
23922392
"bom-ref": "66-elementpath",
23932393
"name": "elementpath",
2394-
"version": "4.1.2",
2394+
"version": "4.1.3",
23952395
"supplier": {
23962396
"name": "Davide Brunato",
23972397
"contact": [
@@ -2400,7 +2400,7 @@
24002400
}
24012401
]
24022402
},
2403-
"cpe": "cpe:2.3:a:davide_brunato:elementpath:4.1.2:*:*:*:*:*:*:*",
2403+
"cpe": "cpe:2.3:a:davide_brunato:elementpath:4.1.3:*:*:*:*:*:*:*",
24042404
"description": "XPath 1.0/2.0/3.0/3.1 parsers and selectors for ElementTree and lxml",
24052405
"licenses": [
24062406
{
@@ -2417,12 +2417,12 @@
24172417
"comment": "Home page for project"
24182418
},
24192419
{
2420-
"url": "https://pypi.org/project/elementpath/4.1.2",
2420+
"url": "https://pypi.org/project/elementpath/4.1.3",
24212421
"type": "distribution",
24222422
"comment": "Download location for component"
24232423
}
24242424
],
2425-
"purl": "pkg:pypi/[email protected].2"
2425+
"purl": "pkg:pypi/[email protected].3"
24262426
},
24272427
{
24282428
"type": "library",

0 commit comments

Comments
 (0)