From 4c1f4f050664ef9a6d0fded06bc3182bd4531436 Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" <41898282+github-actions[bot]@users.noreply.github.com> Date: Mon, 7 Oct 2024 15:24:40 -0700 Subject: [PATCH] chore: update SBOM for Python 3.11 (#4488) Co-authored-by: GitHub --- sbom/cve-bin-tool-py3.11.json | 32 ++++++++++++++++---------------- sbom/cve-bin-tool-py3.11.spdx | 32 ++++++++++++++++---------------- 2 files changed, 32 insertions(+), 32 deletions(-) diff --git a/sbom/cve-bin-tool-py3.11.json b/sbom/cve-bin-tool-py3.11.json index ac2c285483..650b6ec453 100644 --- a/sbom/cve-bin-tool-py3.11.json +++ b/sbom/cve-bin-tool-py3.11.json @@ -2,10 +2,10 @@ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", - "serialNumber": "urn:uuid:378d0793-fd54-48eb-a1ea-98052fbe8a8b", + "serialNumber": "urn:uuid:28f4e361-a97e-4a4d-b2f3-3a0d9c2a9edf", "version": 1, "metadata": { - "timestamp": "2024-09-30T00:38:54Z", + "timestamp": "2024-10-07T00:38:05Z", "lifecycles": [ { "phase": "build" @@ -15,7 +15,7 @@ "components": [ { "name": "sbom4python", - "version": "0.11.2", + "version": "0.11.3", "type": "application" } ] @@ -79,7 +79,7 @@ "type": "library", "bom-ref": "2-aiohttp", "name": "aiohttp", - "version": "3.10.8", + "version": "3.10.9", "description": "Async http client/server framework (asyncio)", "licenses": [ { @@ -97,12 +97,12 @@ "comment": "Home page for project" }, { - "url": "https://pypi.org/project/aiohttp/3.10.8/#files", + "url": "https://pypi.org/project/aiohttp/3.10.9/#files", "type": "distribution", "comment": "Download location for component" } ], - "purl": "pkg:pypi/aiohttp@3.10.8", + "purl": "pkg:pypi/aiohttp@3.10.9", "properties": [ { "name": "language", @@ -118,7 +118,7 @@ "type": "library", "bom-ref": "3-aiohappyeyeballs", "name": "aiohappyeyeballs", - "version": "2.4.2", + "version": "2.4.3", "supplier": { "name": "J. Nick Koston", "contact": [ @@ -127,13 +127,13 @@ } ] }, - "cpe": "cpe:2.3:a:j._nick_koston:aiohappyeyeballs:2.4.2:*:*:*:*:*:*:*", + "cpe": "cpe:2.3:a:j._nick_koston:aiohappyeyeballs:2.4.3:*:*:*:*:*:*:*", "description": "Happy Eyeballs for asyncio", "licenses": [ { "license": { - "id": "Python-2.0.1", - "url": "https://www.python.org/download/releases/2.0.1/license/", + "id": "PSF-2.0", + "url": "https://opensource.org/licenses/Python-2.0", "acknowledgement": "concluded" } } @@ -145,12 +145,12 @@ "comment": "Home page for project" }, { - "url": "https://pypi.org/project/aiohappyeyeballs/2.4.2/#files", + "url": "https://pypi.org/project/aiohappyeyeballs/2.4.3/#files", "type": "distribution", "comment": "Download location for component" } ], - "purl": "pkg:pypi/aiohappyeyeballs@2.4.2", + "purl": "pkg:pypi/aiohappyeyeballs@2.4.3", "properties": [ { "name": "language", @@ -2653,7 +2653,7 @@ "type": "library", "bom-ref": "53-rich", "name": "rich", - "version": "13.8.1", + "version": "13.9.2", "supplier": { "name": "Will McGugan", "contact": [ @@ -2662,7 +2662,7 @@ } ] }, - "cpe": "cpe:2.3:a:will_mcgugan:rich:13.8.1:*:*:*:*:*:*:*", + "cpe": "cpe:2.3:a:will_mcgugan:rich:13.9.2:*:*:*:*:*:*:*", "description": "Render rich text, tables, progress bars, syntax highlighting, markdown and more to the terminal", "licenses": [ { @@ -2680,12 +2680,12 @@ "comment": "Home page for project" }, { - "url": "https://pypi.org/project/rich/13.8.1/#files", + "url": "https://pypi.org/project/rich/13.9.2/#files", "type": "distribution", "comment": "Download location for component" } ], - "purl": "pkg:pypi/rich@13.8.1", + "purl": "pkg:pypi/rich@13.9.2", "properties": [ { "name": "language", diff --git a/sbom/cve-bin-tool-py3.11.spdx b/sbom/cve-bin-tool-py3.11.spdx index ead639f050..01917ca6d7 100644 --- a/sbom/cve-bin-tool-py3.11.spdx +++ b/sbom/cve-bin-tool-py3.11.spdx @@ -2,10 +2,10 @@ SPDXVersion: SPDX-2.3 DataLicense: CC0-1.0 SPDXID: SPDXRef-DOCUMENT DocumentName: Python-cve-bin-tool -DocumentNamespace: http://spdx.org/spdxdocs/Python-cve-bin-tool-c2491612-fcd4-4062-b975-6593590c5eb9 +DocumentNamespace: http://spdx.org/spdxdocs/Python-cve-bin-tool-7c107edf-643b-4afd-8fd8-372b836c2aba LicenseListVersion: 3.22 -Creator: Tool: sbom4python-0.11.2 -Created: 2024-09-30T00:37:42Z +Creator: Tool: sbom4python-0.11.3 +Created: 2024-10-07T00:37:22Z CreatorComment: This document has been automatically generated. ##### @@ -27,10 +27,10 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:terri_oda:cve-bin-tool:3.4:*:*:*:*:*:* PackageName: aiohttp SPDXID: SPDXRef-2-aiohttp -PackageVersion: 3.10.8 +PackageVersion: 3.10.9 PrimaryPackagePurpose: LIBRARY PackageSupplier: NOASSERTION -PackageDownloadLocation: https://pypi.org/project/aiohttp/3.10.8/#files +PackageDownloadLocation: https://pypi.org/project/aiohttp/3.10.9/#files FilesAnalyzed: false PackageHomePage: https://github.com/aio-libs/aiohttp PackageLicenseDeclared: NOASSERTION @@ -38,23 +38,23 @@ PackageLicenseConcluded: Apache-2.0 PackageLicenseComments: aiohttp declares Apache 2 which is not currently a valid SPDX License identifier or expression. PackageCopyrightText: NOASSERTION PackageSummary: Async http client/server framework (asyncio) -ExternalRef: PACKAGE_MANAGER purl pkg:pypi/aiohttp@3.10.8 +ExternalRef: PACKAGE_MANAGER purl pkg:pypi/aiohttp@3.10.9 ##### PackageName: aiohappyeyeballs SPDXID: SPDXRef-3-aiohappyeyeballs -PackageVersion: 2.4.2 +PackageVersion: 2.4.3 PrimaryPackagePurpose: LIBRARY PackageSupplier: Organization: J. Nick Koston (nick@koston.org) -PackageDownloadLocation: https://pypi.org/project/aiohappyeyeballs/2.4.2/#files +PackageDownloadLocation: https://pypi.org/project/aiohappyeyeballs/2.4.3/#files FilesAnalyzed: false PackageHomePage: https://github.com/aio-libs/aiohappyeyeballs -PackageLicenseDeclared: Python-2.0.1 -PackageLicenseConcluded: Python-2.0.1 +PackageLicenseDeclared: PSF-2.0 +PackageLicenseConcluded: PSF-2.0 PackageCopyrightText: NOASSERTION PackageSummary: Happy Eyeballs for asyncio -ExternalRef: PACKAGE_MANAGER purl pkg:pypi/aiohappyeyeballs@2.4.2 -ExternalRef: SECURITY cpe23Type cpe:2.3:a:j._nick_koston:aiohappyeyeballs:2.4.2:*:*:*:*:*:*:* +ExternalRef: PACKAGE_MANAGER purl pkg:pypi/aiohappyeyeballs@2.4.3 +ExternalRef: SECURITY cpe23Type cpe:2.3:a:j._nick_koston:aiohappyeyeballs:2.4.3:*:*:*:*:*:*:* ##### PackageName: aiosignal @@ -884,18 +884,18 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:the_purl_authors:packageurl-python:0.1 PackageName: rich SPDXID: SPDXRef-53-rich -PackageVersion: 13.8.1 +PackageVersion: 13.9.2 PrimaryPackagePurpose: LIBRARY PackageSupplier: Person: Will McGugan (willmcgugan@gmail.com) -PackageDownloadLocation: https://pypi.org/project/rich/13.8.1/#files +PackageDownloadLocation: https://pypi.org/project/rich/13.9.2/#files FilesAnalyzed: false PackageHomePage: https://github.com/Textualize/rich PackageLicenseDeclared: MIT PackageLicenseConcluded: MIT PackageCopyrightText: NOASSERTION PackageSummary: Render rich text, tables, progress bars, syntax highlighting, markdown and more to the terminal -ExternalRef: PACKAGE_MANAGER purl pkg:pypi/rich@13.8.1 -ExternalRef: SECURITY cpe23Type cpe:2.3:a:will_mcgugan:rich:13.8.1:*:*:*:*:*:*:* +ExternalRef: PACKAGE_MANAGER purl pkg:pypi/rich@13.9.2 +ExternalRef: SECURITY cpe23Type cpe:2.3:a:will_mcgugan:rich:13.9.2:*:*:*:*:*:*:* ##### PackageName: markdown-it-py