Skip to content

chore: update SBOM for Python 3.11 #2569

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 1 commit into from
Jan 23, 2023
Merged

chore: update SBOM for Python 3.11 #2569

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
85 changes: 46 additions & 39 deletions sbom/cve-bin-tool-py3.11.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,10 +2,10 @@
"$schema": "http://cyclonedx.org/schema/bom-1.4.schema.json",
"bomFormat": "CycloneDX",
"specVersion": "1.4",
"serialNumber": "urn:uuida1a94d53-e5d0-44d7-8823-365618603cf3",
"serialNumber": "urn:uuid2bccd5d8-fa96-41ad-b2da-d4d601ff39f2",
"version": 1,
"metadata": {
"timestamp": "2023-01-16T00:27:40Z",
"timestamp": "2023-01-23T00:26:10Z",
"tools": [
{
"name": "sbom4python",
Expand Down Expand Up @@ -561,9 +561,9 @@
"type": "library",
"bom-ref": "38-cachetools",
"name": "cachetools",
"version": "5.2.1",
"version": "5.3.0",
"author": "Thomas Kemmer",
"cpe": "cpe:/a:thomas_kemmer:cachetools:5.2.1",
"cpe": "cpe:/a:thomas_kemmer:cachetools:5.3.0",
"licenses": [
{
"license": {
Expand All @@ -572,7 +572,7 @@
}
}
],
"purl": "pkg:pypi/cachetools@5.2.1"
"purl": "pkg:pypi/cachetools@5.3.0"
},
{
"type": "library",
Expand Down Expand Up @@ -604,9 +604,9 @@
"type": "library",
"bom-ref": "41-markupsafe",
"name": "markupsafe",
"version": "2.1.1",
"version": "2.1.2",
"author": "Armin Ronacher",
"cpe": "cpe:/a:armin_ronacher:markupsafe:2.1.1",
"cpe": "cpe:/a:armin_ronacher:markupsafe:2.1.2",
"licenses": [
{
"license": {
Expand All @@ -615,7 +615,7 @@
}
}
],
"purl": "pkg:pypi/[email protected].1"
"purl": "pkg:pypi/[email protected].2"
},
{
"type": "library",
Expand Down Expand Up @@ -766,9 +766,9 @@
"type": "library",
"bom-ref": "51-rich",
"name": "rich",
"version": "13.1.0",
"version": "13.2.0",
"author": "Will McGugan",
"cpe": "cpe:/a:will_mcgugan:rich:13.1.0",
"cpe": "cpe:/a:will_mcgugan:rich:13.2.0",
"licenses": [
{
"license": {
Expand All @@ -777,28 +777,29 @@
}
}
],
"purl": "pkg:pypi/rich@13.1.0"
"purl": "pkg:pypi/rich@13.2.0"
},
{
"type": "library",
"bom-ref": "52-commonmark",
"name": "commonmark",
"version": "0.9.1",
"author": "Bibek Kafle Roland Shoemaker",
"cpe": "cpe:/a:bibek_kafle_roland_shoemaker:commonmark:0.9.1",
"licenses": [
{
"license": {
"id": "BSD-3-Clause",
"url": "https://opensource.org/licenses/BSD-3-Clause"
}
}
],
"purl": "pkg:pypi/[email protected]"
"bom-ref": "52-markdown-it-py",
"name": "markdown-it-py",
"version": "2.1.0",
"author": "Chris Sewell",
"cpe": "cpe:/a:chris_sewell:markdown-it-py:2.1.0",
"purl": "pkg:pypi/[email protected]"
},
{
"type": "library",
"bom-ref": "53-mdurl",
"name": "mdurl",
"version": "0.1.2",
"author": "Taneli Hukkinen",
"cpe": "cpe:/a:taneli_hukkinen:mdurl:0.1.2",
"purl": "pkg:pypi/[email protected]"
},
{
"type": "library",
"bom-ref": "53-pygments",
"bom-ref": "54-pygments",
"name": "pygments",
"version": "2.14.0",
"author": "Georg Brandl",
Expand All @@ -815,7 +816,7 @@
},
{
"type": "library",
"bom-ref": "54-rpmfile",
"bom-ref": "55-rpmfile",
"name": "rpmfile",
"version": "1.0.8",
"author": "Sean Ross",
Expand All @@ -832,7 +833,7 @@
},
{
"type": "library",
"bom-ref": "55-toml",
"bom-ref": "56-toml",
"name": "toml",
"version": "0.10.2",
"author": "William Pearson",
Expand All @@ -849,7 +850,7 @@
},
{
"type": "library",
"bom-ref": "56-xmlschema",
"bom-ref": "57-xmlschema",
"name": "xmlschema",
"version": "2.1.1",
"author": "Davide Brunato",
Expand All @@ -866,7 +867,7 @@
},
{
"type": "library",
"bom-ref": "57-elementpath",
"bom-ref": "58-elementpath",
"name": "elementpath",
"version": "3.0.2",
"author": "Davide Brunato",
Expand All @@ -883,7 +884,7 @@
},
{
"type": "library",
"bom-ref": "58-zstandard",
"bom-ref": "59-zstandard",
"name": "zstandard",
"version": "0.19.0",
"author": "Gregory Szorc",
Expand All @@ -908,11 +909,11 @@
"47-pyyaml",
"48-requests",
"51-rich",
"54-rpmfile",
"55-toml",
"55-rpmfile",
"56-toml",
"50-urllib3",
"56-xmlschema",
"58-zstandard"
"57-xmlschema",
"59-zstandard"
]
},
{
Expand Down Expand Up @@ -1089,14 +1090,20 @@
{
"ref": "51-rich",
"dependsOn": [
"52-commonmark",
"53-pygments"
"52-markdown-it-py",
"54-pygments"
]
},
{
"ref": "52-markdown-it-py",
"dependsOn": [
"53-mdurl"
]
},
{
"ref": "56-xmlschema",
"ref": "57-xmlschema",
"dependsOn": [
"57-elementpath"
"58-elementpath"
]
}
]
Expand Down
81 changes: 48 additions & 33 deletions sbom/cve-bin-tool-py3.11.spdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,10 +2,10 @@ SPDXVersion: SPDX-2.2
DataLicense: CC0-1.0
SPDXID: SPDXRef-DOCUMENT
DocumentName: cve-bin-tool
DocumentNamespace: http://spdx.org/spdxdocs/cve-bin-tool-4a88a599-2f17-4548-978a-1d925135b726
DocumentNamespace: http://spdx.org/spdxdocs/cve-bin-tool-417e9044-1bc1-4980-aee1-720c2dc7775d
LicenseListVersion: 3.18
Creator: Tool: sbom4python-0.7.0
Created: 2023-01-16T00:26:25Z
Created: 2023-01-23T00:25:02Z
CreatorComment: <text>This document has been automatically generated.</text>
#####

Expand Down Expand Up @@ -527,15 +527,15 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:google_cloud_platform:google-auth:2.16
PackageName: cachetools
SPDXID: SPDXRef-Package-38-cachetools
PackageSupplier: Person: Thomas Kemmer ([email protected])
PackageVersion: 5.2.1
PackageVersion: 5.3.0
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
##### Reported license MIT
PackageLicenseConcluded: MIT
PackageLicenseDeclared: MIT
PackageCopyrightText: NOASSERTION
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/cachetools@5.2.1
ExternalRef: SECURITY cpe23Type cpe:2.3:a:thomas_kemmer:cachetools:5.2.1:*:*:*:*:*:*:*
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/cachetools@5.3.0
ExternalRef: SECURITY cpe23Type cpe:2.3:a:thomas_kemmer:cachetools:5.3.0:*:*:*:*:*:*:*
#####

PackageName: monotonic
Expand Down Expand Up @@ -569,15 +569,15 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:armin_ronacher:jinja2:3.1.2:*:*:*:*:*:
PackageName: markupsafe
SPDXID: SPDXRef-Package-41-markupsafe
PackageSupplier: Person: Armin Ronacher ([email protected])
PackageVersion: 2.1.1
PackageVersion: 2.1.2
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
##### Reported license BSD-3-Clause
PackageLicenseConcluded: BSD-3-Clause
PackageLicenseDeclared: BSD-3-Clause
PackageCopyrightText: NOASSERTION
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/[email protected].1
ExternalRef: SECURITY cpe23Type cpe:2.3:a:armin_ronacher:markupsafe:2.1.1:*:*:*:*:*:*:*
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/[email protected].2
ExternalRef: SECURITY cpe23Type cpe:2.3:a:armin_ronacher:markupsafe:2.1.2:*:*:*:*:*:*:*
#####

PackageName: jsonschema
Expand Down Expand Up @@ -709,33 +709,47 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:andrey_petrov:urllib3:1.26.14:*:*:*:*:
PackageName: rich
SPDXID: SPDXRef-Package-51-rich
PackageSupplier: Person: Will McGugan ([email protected])
PackageVersion: 13.1.0
PackageVersion: 13.2.0
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
##### Reported license MIT
PackageLicenseConcluded: MIT
PackageLicenseDeclared: MIT
PackageCopyrightText: NOASSERTION
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/rich@13.1.0
ExternalRef: SECURITY cpe23Type cpe:2.3:a:will_mcgugan:rich:13.1.0:*:*:*:*:*:*:*
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/rich@13.2.0
ExternalRef: SECURITY cpe23Type cpe:2.3:a:will_mcgugan:rich:13.2.0:*:*:*:*:*:*:*
#####

PackageName: commonmark
SPDXID: SPDXRef-Package-52-commonmark
PackageSupplier: Organization: Bibek Kafle Roland Shoemaker (rolandshoemaker@gmail.com)
PackageVersion: 0.9.1
PackageName: markdown-it-py
SPDXID: SPDXRef-Package-52-markdown-it-py
PackageSupplier: Person: Chris Sewell (chrisj_sewell@hotmail.com)
PackageVersion: 2.1.0
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
##### Reported license BSD-3-Clause
PackageLicenseConcluded: BSD-3-Clause
PackageLicenseDeclared: BSD-3-Clause
##### Reported license
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/[email protected]
ExternalRef: SECURITY cpe23Type cpe:2.3:a:chris_sewell:markdown-it-py:2.1.0:*:*:*:*:*:*:*
#####

PackageName: mdurl
SPDXID: SPDXRef-Package-53-mdurl
PackageSupplier: Person: Taneli Hukkinen ([email protected])
PackageVersion: 0.1.2
PackageDownloadLocation: NOASSERTION
FilesAnalyzed: false
##### Reported license
PackageLicenseConcluded: NOASSERTION
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/commonmark@0.9.1
ExternalRef: SECURITY cpe23Type cpe:2.3:a:bibek_kafle_roland_shoemaker:commonmark:0.9.1:*:*:*:*:*:*:*
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/mdurl@0.1.2
ExternalRef: SECURITY cpe23Type cpe:2.3:a:taneli_hukkinen:mdurl:0.1.2:*:*:*:*:*:*:*
#####

PackageName: pygments
SPDXID: SPDXRef-Package-53-pygments
SPDXID: SPDXRef-Package-54-pygments
PackageSupplier: Person: Georg Brandl ([email protected])
PackageVersion: 2.14.0
PackageDownloadLocation: NOASSERTION
Expand All @@ -749,7 +763,7 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:georg_brandl:pygments:2.14.0:*:*:*:*:*
#####

PackageName: rpmfile
SPDXID: SPDXRef-Package-54-rpmfile
SPDXID: SPDXRef-Package-55-rpmfile
PackageSupplier: Person: Sean Ross ([email protected])
PackageVersion: 1.0.8
PackageDownloadLocation: NOASSERTION
Expand All @@ -763,7 +777,7 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:sean_ross:rpmfile:1.0.8:*:*:*:*:*:*:*
#####

PackageName: toml
SPDXID: SPDXRef-Package-55-toml
SPDXID: SPDXRef-Package-56-toml
PackageSupplier: Person: William Pearson ([email protected])
PackageVersion: 0.10.2
PackageDownloadLocation: NOASSERTION
Expand All @@ -777,7 +791,7 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:william_pearson:toml:0.10.2:*:*:*:*:*:
#####

PackageName: xmlschema
SPDXID: SPDXRef-Package-56-xmlschema
SPDXID: SPDXRef-Package-57-xmlschema
PackageSupplier: Person: Davide Brunato ([email protected])
PackageVersion: 2.1.1
PackageDownloadLocation: NOASSERTION
Expand All @@ -791,7 +805,7 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:davide_brunato:xmlschema:2.1.1:*:*:*:*
#####

PackageName: elementpath
SPDXID: SPDXRef-Package-57-elementpath
SPDXID: SPDXRef-Package-58-elementpath
PackageSupplier: Person: Davide Brunato ([email protected])
PackageVersion: 3.0.2
PackageDownloadLocation: NOASSERTION
Expand All @@ -805,7 +819,7 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:davide_brunato:elementpath:3.0.2:*:*:*
#####

PackageName: zstandard
SPDXID: SPDXRef-Package-58-zstandard
SPDXID: SPDXRef-Package-59-zstandard
PackageSupplier: Person: Gregory Szorc ([email protected])
PackageVersion: 0.19.0
PackageDownloadLocation: NOASSERTION
Expand All @@ -831,10 +845,10 @@ Relationship: SPDXRef-Package-1-cve-bin-tool DEPENDS_ON SPDXRef-Package-47-pyyam
Relationship: SPDXRef-Package-1-cve-bin-tool DEPENDS_ON SPDXRef-Package-48-requests
Relationship: SPDXRef-Package-1-cve-bin-tool DEPENDS_ON SPDXRef-Package-50-urllib3
Relationship: SPDXRef-Package-1-cve-bin-tool DEPENDS_ON SPDXRef-Package-51-rich
Relationship: SPDXRef-Package-1-cve-bin-tool DEPENDS_ON SPDXRef-Package-54-rpmfile
Relationship: SPDXRef-Package-1-cve-bin-tool DEPENDS_ON SPDXRef-Package-55-toml
Relationship: SPDXRef-Package-1-cve-bin-tool DEPENDS_ON SPDXRef-Package-56-xmlschema
Relationship: SPDXRef-Package-1-cve-bin-tool DEPENDS_ON SPDXRef-Package-58-zstandard
Relationship: SPDXRef-Package-1-cve-bin-tool DEPENDS_ON SPDXRef-Package-55-rpmfile
Relationship: SPDXRef-Package-1-cve-bin-tool DEPENDS_ON SPDXRef-Package-56-toml
Relationship: SPDXRef-Package-1-cve-bin-tool DEPENDS_ON SPDXRef-Package-57-xmlschema
Relationship: SPDXRef-Package-1-cve-bin-tool DEPENDS_ON SPDXRef-Package-59-zstandard
Relationship: SPDXRef-Package-11-beautifulsoup4 DEPENDS_ON SPDXRef-Package-12-soupsieve
Relationship: SPDXRef-Package-16-gsutil DEPENDS_ON SPDXRef-Package-17-argcomplete
Relationship: SPDXRef-Package-16-gsutil DEPENDS_ON SPDXRef-Package-18-crcmod
Expand Down Expand Up @@ -894,8 +908,9 @@ Relationship: SPDXRef-Package-48-requests DEPENDS_ON SPDXRef-Package-10-idna
Relationship: SPDXRef-Package-48-requests DEPENDS_ON SPDXRef-Package-49-certifi
Relationship: SPDXRef-Package-48-requests DEPENDS_ON SPDXRef-Package-50-urllib3
Relationship: SPDXRef-Package-48-requests DEPENDS_ON SPDXRef-Package-7-charset-normalizer
Relationship: SPDXRef-Package-51-rich DEPENDS_ON SPDXRef-Package-52-commonmark
Relationship: SPDXRef-Package-51-rich DEPENDS_ON SPDXRef-Package-53-pygments
Relationship: SPDXRef-Package-56-xmlschema DEPENDS_ON SPDXRef-Package-57-elementpath
Relationship: SPDXRef-Package-51-rich DEPENDS_ON SPDXRef-Package-52-markdown-it-py
Relationship: SPDXRef-Package-51-rich DEPENDS_ON SPDXRef-Package-54-pygments
Relationship: SPDXRef-Package-52-markdown-it-py DEPENDS_ON SPDXRef-Package-53-mdurl
Relationship: SPDXRef-Package-57-xmlschema DEPENDS_ON SPDXRef-Package-58-elementpath
Relationship: SPDXRef-Package-9-yarl DEPENDS_ON SPDXRef-Package-10-idna
Relationship: SPDXRef-Package-9-yarl DEPENDS_ON SPDXRef-Package-8-multidict