Skip to content

Commit

Permalink
chore: update SBOM for Python 3.8 (#4409)
Browse files Browse the repository at this point in the history 
Co-authored-by: GitHub <[email protected]>
  • Loading branch information
@github-actions @web-flow
github-actions[bot] and web-flow authored Sep 3, 2024
1 parent c99bbdd commit 1834f63
Show file tree
Hide file tree
Showing 2 changed files with 90 additions and 90 deletions.
100 changes: 50 additions & 50 deletions sbom/cve-bin-tool-py3.8.json
View file
Original file line number Diff line number Diff line change
Expand Up @@ -2,10 +2,10 @@
"$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
"bomFormat": "CycloneDX",
"specVersion": "1.6",
"serialNumber": "urn:uuid:78249e2c-ba6b-44f6-bf53-f4428b5dd43d",
"serialNumber": "urn:uuid:d87a674a-b387-4583-a4d4-bfed4fdfb862",
"version": 1,
"metadata": {
"timestamp": "2024-08-26T00:35:34Z",
"timestamp": "2024-09-02T00:36:17Z",
"lifecycles": [
{
"phase": "build"
Expand All @@ -31,7 +31,7 @@
"type": "application",
"bom-ref": "1-cve-bin-tool",
"name": "cve-bin-tool",
"version": "3.4rc0",
"version": "3.4rc1",
"supplier": {
"name": "Terri Oda",
"contact": [
Expand All @@ -40,7 +40,7 @@
}
]
},
"cpe": "cpe:2.3:a:terri_oda:cve-bin-tool:3.4rc0:*:*:*:*:*:*:*",
"cpe": "cpe:2.3:a:terri_oda:cve-bin-tool:3.4rc1:*:*:*:*:*:*:*",
"description": "CVE Binary Checker Tool",
"licenses": [
{
Expand All @@ -53,12 +53,12 @@
],
"externalReferences": [
{
"url": "https://pypi.org/project/cve-bin-tool/3.4rc0",
"url": "https://pypi.org/project/cve-bin-tool/3.4rc1",
"type": "distribution",
"comment": "Download location for component"
}
],
"purl": "pkg:pypi/cve-bin-tool@3.4rc0",
"purl": "pkg:pypi/cve-bin-tool@3.4rc1",
"properties": [
{
"name": "language",
Expand Down Expand Up @@ -119,6 +119,12 @@
},
"cpe": "cpe:2.3:a:j._nick_koston:aiohappyeyeballs:2.4.0:*:*:*:*:*:*:*",
"description": "Happy Eyeballs for asyncio",
"hashes": [
{
"alg": "SHA-1",
"content": "c31b127a69bdcd7895d1a521985d918061955348"
}
],
"licenses": [
{
"license": {
Expand Down Expand Up @@ -356,7 +362,7 @@
"type": "library",
"bom-ref": "9-yarl",
"name": "yarl",
"version": "1.9.4",
"version": "1.9.7",
"supplier": {
"name": "Andrew Svetlov",
"contact": [
Expand All @@ -365,14 +371,8 @@
}
]
},
"cpe": "cpe:2.3:a:andrew_svetlov:yarl:1.9.4:*:*:*:*:*:*:*",
"cpe": "cpe:2.3:a:andrew_svetlov:yarl:1.9.7:*:*:*:*:*:*:*",
"description": "Yet another URL library",
"hashes": [
{
"alg": "SHA-1",
"content": "6362ff155ba02964a5e773927412f7cf4ca23cd1"
}
],
"licenses": [
{
"license": {
Expand All @@ -384,12 +384,12 @@
],
"externalReferences": [
{
"url": "https://pypi.org/project/yarl/1.9.4",
"url": "https://pypi.org/project/yarl/1.9.7",
"type": "distribution",
"comment": "Download location for component"
}
],
"purl": "pkg:pypi/[email protected].4",
"purl": "pkg:pypi/[email protected].7",
"properties": [
{
"name": "language",
Expand All @@ -416,6 +416,12 @@
},
"cpe": "cpe:2.3:a:kim_davies:idna:3.8:*:*:*:*:*:*:*",
"description": "Internationalized Domain Names in Applications (IDNA)",
"hashes": [
{
"alg": "SHA-1",
"content": "784c6f45c162db9709588124f2f1def5b70615ff"
}
],
"externalReferences": [
{
"url": "https://pypi.org/project/idna/3.8",
Expand Down Expand Up @@ -1886,7 +1892,7 @@
"type": "library",
"bom-ref": "43-zipp",
"name": "zipp",
"version": "3.20.0",
"version": "3.20.1",
"supplier": {
"name": "Jason R .",
"contact": [
Expand All @@ -1895,16 +1901,16 @@
}
]
},
"cpe": "cpe:2.3:a:jason_r.:zipp:3.20.0:*:*:*:*:*:*:*",
"cpe": "cpe:2.3:a:jason_r.:zipp:3.20.1:*:*:*:*:*:*:*",
"description": "Backport of pathlib-compatible object wrapper for zip files",
"externalReferences": [
{
"url": "https://pypi.org/project/zipp/3.20.0",
"url": "https://pypi.org/project/zipp/3.20.1",
"type": "distribution",
"comment": "Download location for component"
}
],
"purl": "pkg:pypi/[email protected].0",
"purl": "pkg:pypi/[email protected].1",
"properties": [
{
"name": "language",
Expand Down Expand Up @@ -2208,7 +2214,7 @@
"type": "library",
"bom-ref": "52-lib4sbom",
"name": "lib4sbom",
"version": "0.7.3",
"version": "0.7.4",
"supplier": {
"name": "Anthony Harrison",
"contact": [
Expand All @@ -2217,7 +2223,7 @@
}
]
},
"cpe": "cpe:2.3:a:anthony_harrison:lib4sbom:0.7.3:*:*:*:*:*:*:*",
"cpe": "cpe:2.3:a:anthony_harrison:lib4sbom:0.7.4:*:*:*:*:*:*:*",
"description": "Software Bill of Material (SBOM) generator and consumer library",
"licenses": [
{
Expand All @@ -2230,12 +2236,12 @@
],
"externalReferences": [
{
"url": "https://pypi.org/project/lib4sbom/0.7.3",
"url": "https://pypi.org/project/lib4sbom/0.7.4",
"type": "distribution",
"comment": "Download location for component"
}
],
"purl": "pkg:pypi/[email protected].3",
"purl": "pkg:pypi/[email protected].4",
"properties": [
{
"name": "language",
Expand Down Expand Up @@ -2343,7 +2349,7 @@
"type": "library",
"bom-ref": "55-lib4vex",
"name": "lib4vex",
"version": "0.1.0",
"version": "0.2.0",
"supplier": {
"name": "Anthony Harrison",
"contact": [
Expand All @@ -2352,14 +2358,8 @@
}
]
},
"cpe": "cpe:2.3:a:anthony_harrison:lib4vex:0.1.0:*:*:*:*:*:*:*",
"cpe": "cpe:2.3:a:anthony_harrison:lib4vex:0.2.0:*:*:*:*:*:*:*",
"description": "VEX generator and consumer library",
"hashes": [
{
"alg": "SHA-1",
"content": "84229c7770dd95cf887d6874e0203da4c8aa809b"
}
],
"licenses": [
{
"license": {
Expand All @@ -2371,12 +2371,12 @@
],
"externalReferences": [
{
"url": "https://pypi.org/project/lib4vex/0.1.0",
"url": "https://pypi.org/project/lib4vex/0.2.0",
"type": "distribution",
"comment": "Download location for component"
}
],
"purl": "pkg:pypi/lib4vex@0.1.0",
"purl": "pkg:pypi/lib4vex@0.2.0",
"properties": [
{
"name": "language",
Expand Down Expand Up @@ -2485,7 +2485,7 @@
"type": "library",
"bom-ref": "58-rich",
"name": "rich",
"version": "13.7.1",
"version": "13.8.0",
"supplier": {
"name": "Will McGugan",
"contact": [
Expand All @@ -2494,7 +2494,7 @@
}
]
},
"cpe": "cpe:2.3:a:will_mcgugan:rich:13.7.1:*:*:*:*:*:*:*",
"cpe": "cpe:2.3:a:will_mcgugan:rich:13.8.0:*:*:*:*:*:*:*",
"description": "Render rich text, tables, progress bars, syntax highlighting, markdown and more to the terminal",
"licenses": [
{
Expand All @@ -2507,12 +2507,12 @@
],
"externalReferences": [
{
"url": "https://pypi.org/project/rich/13.7.1",
"url": "https://pypi.org/project/rich/13.8.0",
"type": "distribution",
"comment": "Download location for component"
}
],
"purl": "pkg:pypi/rich@13.7.1",
"purl": "pkg:pypi/rich@13.8.0",
"properties": [
{
"name": "language",
Expand Down Expand Up @@ -2725,7 +2725,7 @@
"type": "library",
"bom-ref": "64-plotly",
"name": "plotly",
"version": "5.23.0",
"version": "5.24.0",
"supplier": {
"name": "Chris P",
"contact": [
Expand All @@ -2734,7 +2734,7 @@
}
]
},
"cpe": "cpe:2.3:a:chris_p:plotly:5.23.0:*:*:*:*:*:*:*",
"cpe": "cpe:2.3:a:chris_p:plotly:5.24.0:*:*:*:*:*:*:*",
"description": "An open-source, interactive data visualization library for Python",
"licenses": [
{
Expand All @@ -2747,12 +2747,12 @@
],
"externalReferences": [
{
"url": "https://pypi.org/project/plotly/5.23.0",
"url": "https://pypi.org/project/plotly/5.24.0",
"type": "distribution",
"comment": "Download location for component"
}
],
"purl": "pkg:pypi/plotly@5.23.0",
"purl": "pkg:pypi/plotly@5.24.0",
"properties": [
{
"name": "language",
Expand Down Expand Up @@ -2915,7 +2915,7 @@
"type": "library",
"bom-ref": "68-certifi",
"name": "certifi",
"version": "2024.7.4",
"version": "2024.8.30",
"supplier": {
"name": "Kenneth Reitz",
"contact": [
Expand All @@ -2924,7 +2924,7 @@
}
]
},
"cpe": "cpe:2.3:a:kenneth_reitz:certifi:2024.7.4:*:*:*:*:*:*:*",
"cpe": "cpe:2.3:a:kenneth_reitz:certifi:2024.8.30:*:*:*:*:*:*:*",
"description": "Python package for providing Mozilla's CA Bundle.",
"licenses": [
{
Expand All @@ -2937,12 +2937,12 @@
],
"externalReferences": [
{
"url": "https://pypi.org/project/certifi/2024.7.4",
"url": "https://pypi.org/project/certifi/2024.8.30",
"type": "distribution",
"comment": "Download location for component"
}
],
"purl": "pkg:pypi/certifi@2024.7.4",
"purl": "pkg:pypi/certifi@2024.8.30",
"properties": [
{
"name": "language",
Expand Down Expand Up @@ -3090,7 +3090,7 @@
"type": "library",
"bom-ref": "72-setuptools",
"name": "setuptools",
"version": "73.0.1",
"version": "74.0.0",
"supplier": {
"name": "Python Packaging Authority",
"contact": [
Expand All @@ -3099,16 +3099,16 @@
}
]
},
"cpe": "cpe:2.3:a:python_packaging_authority:setuptools:73.0.1:*:*:*:*:*:*:*",
"cpe": "cpe:2.3:a:python_packaging_authority:setuptools:74.0.0:*:*:*:*:*:*:*",
"description": "Easily download, build, install, upgrade, and uninstall Python packages",
"externalReferences": [
{
"url": "https://pypi.org/project/setuptools/73.0.1",
"url": "https://pypi.org/project/setuptools/74.0.0",
"type": "distribution",
"comment": "Download location for component"
}
],
"purl": "pkg:pypi/setuptools@73.0.1",
"purl": "pkg:pypi/setuptools@74.0.0",
"properties": [
{
"name": "language",
Expand Down
Loading

0 comments on commit 1834f63

Please sign in to comment.