Skip to content

Commit

Permalink
chore: update SBOM for Python 3.8 (#4144)
Browse files Browse the repository at this point in the history 
Co-authored-by: GitHub <[email protected]>
  • Loading branch information
@github-actions @web-flow
github-actions[bot] and web-flow authored May 30, 2024
1 parent c30c7b7 commit 935fb46
Show file tree
Hide file tree
Showing 2 changed files with 31 additions and 46 deletions.
42 changes: 15 additions & 27 deletions sbom/cve-bin-tool-py3.8.json
View file
Original file line number Diff line number Diff line change
Expand Up @@ -2,10 +2,10 @@
"$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
"bomFormat": "CycloneDX",
"specVersion": "1.6",
"serialNumber": "urn:uuid:f53f9e27-e6db-4127-9e63-6435bf1f921e",
"serialNumber": "urn:uuid:00d1cc95-5d4b-42f8-8144-aede4c299a1f",
"version": 1,
"metadata": {
"timestamp": "2024-05-20T00:29:17Z",
"timestamp": "2024-05-27T00:29:13Z",
"tools": {
"components": [
{
Expand Down Expand Up @@ -1839,7 +1839,7 @@
"type": "library",
"bom-ref": "42-zipp",
"name": "zipp",
"version": "3.18.2",
"version": "3.19.0",
"supplier": {
"name": "Jason R .",
"contact": [
Expand All @@ -1848,22 +1848,16 @@
}
]
},
"cpe": "cpe:2.3:a:jason_r.:zipp:3.18.2:*:*:*:*:*:*:*",
"cpe": "cpe:2.3:a:jason_r.:zipp:3.19.0:*:*:*:*:*:*:*",
"description": "Backport of pathlib-compatible object wrapper for zip files",
"hashes": [
{
"alg": "SHA-1",
"content": "051250eb0e3024d75e7de09921e4efab074f0112"
}
],
"externalReferences": [
{
"url": "https://pypi.org/project/zipp/3.18.2",
"url": "https://pypi.org/project/zipp/3.19.0",
"type": "distribution",
"comment": "Download location for component"
}
],
"purl": "pkg:pypi/zipp@3.18.2",
"purl": "pkg:pypi/zipp@3.19.0",
"properties": [
{
"name": "language",
Expand Down Expand Up @@ -2516,7 +2510,7 @@
"type": "library",
"bom-ref": "59-requests",
"name": "requests",
"version": "2.31.0",
"version": "2.32.2",
"supplier": {
"name": "Kenneth Reitz",
"contact": [
Expand All @@ -2525,14 +2519,8 @@
}
]
},
"cpe": "cpe:2.3:a:kenneth_reitz:requests:2.31.0:*:*:*:*:*:*:*",
"cpe": "cpe:2.3:a:kenneth_reitz:requests:2.32.2:*:*:*:*:*:*:*",
"description": "Python HTTP for Humans.",
"hashes": [
{
"alg": "SHA-1",
"content": "147c8511ddbfa5e8f71bbf5c18ede0c4ceb3bba4"
}
],
"licenses": [
{
"license": {
Expand All @@ -2543,12 +2531,12 @@
],
"externalReferences": [
{
"url": "https://pypi.org/project/requests/2.31.0",
"url": "https://pypi.org/project/requests/2.32.2",
"type": "distribution",
"comment": "Download location for component"
}
],
"purl": "pkg:pypi/requests@2.31.0",
"purl": "pkg:pypi/requests@2.32.2",
"properties": [
{
"name": "language",
Expand Down Expand Up @@ -2852,7 +2840,7 @@
"type": "library",
"bom-ref": "67-typing-extensions",
"name": "typing-extensions",
"version": "4.11.0",
"version": "4.12.0",
"supplier": {
"name": "Guido van Jukka ukasz Michael",
"contact": [
Expand All @@ -2861,22 +2849,22 @@
}
]
},
"cpe": "cpe:2.3:a:guido_van_jukka_ukasz_michael:typing-extensions:4.11.0:*:*:*:*:*:*:*",
"cpe": "cpe:2.3:a:guido_van_jukka_ukasz_michael:typing-extensions:4.12.0:*:*:*:*:*:*:*",
"description": "Backported and Experimental Type Hints for Python 3.8+",
"hashes": [
{
"alg": "SHA-1",
"content": "d4d929d44bd984350e2d17726362295f588eaace"
"content": "0dbc7c971f7ec61f12a1466f8d8f222bdf9a4b31"
}
],
"externalReferences": [
{
"url": "https://pypi.org/project/typing_extensions/4.11.0",
"url": "https://pypi.org/project/typing_extensions/4.12.0",
"type": "distribution",
"comment": "Download location for component"
}
],
"purl": "pkg:pypi/typing-extensions@4.11.0",
"purl": "pkg:pypi/typing-extensions@4.12.0",
"properties": [
{
"name": "language",
Expand Down
35 changes: 16 additions & 19 deletions sbom/cve-bin-tool-py3.8.spdx
View file
Original file line number Diff line number Diff line change
Expand Up @@ -2,10 +2,10 @@ SPDXVersion: SPDX-2.3
DataLicense: CC0-1.0
SPDXID: SPDXRef-DOCUMENT
DocumentName: Python-cve-bin-tool
DocumentNamespace: http://spdx.org/spdxdocs/Python-cve-bin-tool-21bd54f8-a7dd-4a2c-8575-f6ff48205e56
DocumentNamespace: http://spdx.org/spdxdocs/Python-cve-bin-tool-410b7460-4264-4898-bc9c-69e907bac35d
LicenseListVersion: 3.22
Creator: Tool: sbom4python-0.10.4
Created: 2024-05-20T00:27:33Z
Created: 2024-05-27T00:27:32Z
CreatorComment: <text>This document has been automatically generated.</text>
#####

Expand Down Expand Up @@ -671,18 +671,17 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:jason_r._coombs:importlib-metadata:7.1

PackageName: zipp
SPDXID: SPDXRef-Package-42-zipp
PackageVersion: 3.18.2
PackageVersion: 3.19.0
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Organization: Jason R. ([email protected])
PackageDownloadLocation: https://pypi.org/project/zipp/3.18.2
PackageDownloadLocation: https://pypi.org/project/zipp/3.19.0
FilesAnalyzed: false
PackageChecksum: SHA1: 051250eb0e3024d75e7de09921e4efab074f0112
PackageLicenseDeclared: NOASSERTION
PackageLicenseConcluded: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageSummary: <text>Backport of pathlib-compatible object wrapper for zip files</text>
ExternalRef: PACKAGE_MANAGER purl pkg:pypi/zipp@3.18.2
ExternalRef: SECURITY cpe23Type cpe:2.3:a:jason_r.:zipp:3.18.2:*:*:*:*:*:*:*
ExternalRef: PACKAGE_MANAGER purl pkg:pypi/zipp@3.19.0
ExternalRef: SECURITY cpe23Type cpe:2.3:a:jason_r.:zipp:3.19.0:*:*:*:*:*:*:*
#####

PackageName: importlib-resources
Expand Down Expand Up @@ -936,19 +935,17 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:vinay_sajip:python-gnupg:0.5.2:*:*:*:*

PackageName: requests
SPDXID: SPDXRef-Package-59-requests
PackageVersion: 2.31.0
PackageVersion: 2.32.2
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Person: Kenneth Reitz ([email protected])
PackageDownloadLocation: https://pypi.org/project/requests/2.31.0
PackageDownloadLocation: https://pypi.org/project/requests/2.32.2
FilesAnalyzed: false
PackageChecksum: SHA1: 147c8511ddbfa5e8f71bbf5c18ede0c4ceb3bba4
PackageLicenseDeclared: NOASSERTION
PackageLicenseDeclared: Apache-2.0
PackageLicenseConcluded: Apache-2.0
PackageLicenseComments: <text>requests declares Apache 2.0 which is not currently a valid SPDX License identifier or expression.</text>
PackageCopyrightText: NOASSERTION
PackageSummary: <text>Python HTTP for Humans.</text>
ExternalRef: PACKAGE_MANAGER purl pkg:pypi/requests@2.31.0
ExternalRef: SECURITY cpe23Type cpe:2.3:a:kenneth_reitz:requests:2.31.0:*:*:*:*:*:*:*
ExternalRef: PACKAGE_MANAGER purl pkg:pypi/requests@2.32.2
ExternalRef: SECURITY cpe23Type cpe:2.3:a:kenneth_reitz:requests:2.32.2:*:*:*:*:*:*:*
#####

PackageName: certifi
Expand Down Expand Up @@ -1061,18 +1058,18 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:georg_brandl:pygments:2.18.0:*:*:*:*:*

PackageName: typing-extensions
SPDXID: SPDXRef-Package-67-typing-extensions
PackageVersion: 4.11.0
PackageVersion: 4.12.0
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Organization: Guido van Jukka ukasz Michael ([email protected])
PackageDownloadLocation: https://pypi.org/project/typing_extensions/4.11.0
PackageDownloadLocation: https://pypi.org/project/typing_extensions/4.12.0
FilesAnalyzed: false
PackageChecksum: SHA1: d4d929d44bd984350e2d17726362295f588eaace
PackageChecksum: SHA1: 0dbc7c971f7ec61f12a1466f8d8f222bdf9a4b31
PackageLicenseDeclared: NOASSERTION
PackageLicenseConcluded: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageSummary: <text>Backported and Experimental Type Hints for Python 3.8+</text>
ExternalRef: PACKAGE_MANAGER purl pkg:pypi/typing-extensions@4.11.0
ExternalRef: SECURITY cpe23Type cpe:2.3:a:guido_van_jukka_ukasz_michael:typing-extensions:4.11.0:*:*:*:*:*:*:*
ExternalRef: PACKAGE_MANAGER purl pkg:pypi/typing-extensions@4.12.0
ExternalRef: SECURITY cpe23Type cpe:2.3:a:guido_van_jukka_ukasz_michael:typing-extensions:4.12.0:*:*:*:*:*:*:*
#####

PackageName: rpmfile
Expand Down

0 comments on commit 935fb46

Please sign in to comment.