Skip to content

Commit 4c1f4f0

Browse files
github-actions[bot]web-flow
github-actions[bot]
and
web-flow
authored
chore: update SBOM for Python 3.11 (#4488)
Co-authored-by: GitHub <[email protected]>
1 parent 23610f4 commit 4c1f4f0

File tree

2 files changed

+32
-32
lines changed

2 files changed

+32
-32
lines changed

‎sbom/cve-bin-tool-py3.11.json‎

Lines changed: 16 additions & 16 deletions
Original file line numberDiff line numberDiff line change
@@ -2,10 +2,10 @@
22
"$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
33
"bomFormat": "CycloneDX",
44
"specVersion": "1.6",
5-
"serialNumber": "urn:uuid:378d0793-fd54-48eb-a1ea-98052fbe8a8b",
5+
"serialNumber": "urn:uuid:28f4e361-a97e-4a4d-b2f3-3a0d9c2a9edf",
66
"version": 1,
77
"metadata": {
8-
"timestamp": "2024-09-30T00:38:54Z",
8+
"timestamp": "2024-10-07T00:38:05Z",
99
"lifecycles": [
1010
{
1111
"phase": "build"
@@ -15,7 +15,7 @@
1515
"components": [
1616
{
1717
"name": "sbom4python",
18-
"version": "0.11.2",
18+
"version": "0.11.3",
1919
"type": "application"
2020
}
2121
]
@@ -79,7 +79,7 @@
7979
"type": "library",
8080
"bom-ref": "2-aiohttp",
8181
"name": "aiohttp",
82-
"version": "3.10.8",
82+
"version": "3.10.9",
8383
"description": "Async http client/server framework (asyncio)",
8484
"licenses": [
8585
{
@@ -97,12 +97,12 @@
9797
"comment": "Home page for project"
9898
},
9999
{
100-
"url": "https://pypi.org/project/aiohttp/3.10.8/#files",
100+
"url": "https://pypi.org/project/aiohttp/3.10.9/#files",
101101
"type": "distribution",
102102
"comment": "Download location for component"
103103
}
104104
],
105-
"purl": "pkg:pypi/[email protected].8",
105+
"purl": "pkg:pypi/[email protected].9",
106106
"properties": [
107107
{
108108
"name": "language",
@@ -118,7 +118,7 @@
118118
"type": "library",
119119
"bom-ref": "3-aiohappyeyeballs",
120120
"name": "aiohappyeyeballs",
121-
"version": "2.4.2",
121+
"version": "2.4.3",
122122
"supplier": {
123123
"name": "J. Nick Koston",
124124
"contact": [
@@ -127,13 +127,13 @@
127127
}
128128
]
129129
},
130-
"cpe": "cpe:2.3:a:j._nick_koston:aiohappyeyeballs:2.4.2:*:*:*:*:*:*:*",
130+
"cpe": "cpe:2.3:a:j._nick_koston:aiohappyeyeballs:2.4.3:*:*:*:*:*:*:*",
131131
"description": "Happy Eyeballs for asyncio",
132132
"licenses": [
133133
{
134134
"license": {
135-
"id": "Python-2.0.1",
136-
"url": "https://www.python.org/download/releases/2.0.1/license/",
135+
"id": "PSF-2.0",
136+
"url": "https://opensource.org/licenses/Python-2.0",
137137
"acknowledgement": "concluded"
138138
}
139139
}
@@ -145,12 +145,12 @@
145145
"comment": "Home page for project"
146146
},
147147
{
148-
"url": "https://pypi.org/project/aiohappyeyeballs/2.4.2/#files",
148+
"url": "https://pypi.org/project/aiohappyeyeballs/2.4.3/#files",
149149
"type": "distribution",
150150
"comment": "Download location for component"
151151
}
152152
],
153-
"purl": "pkg:pypi/[email protected].2",
153+
"purl": "pkg:pypi/[email protected].3",
154154
"properties": [
155155
{
156156
"name": "language",
@@ -2653,7 +2653,7 @@
26532653
"type": "library",
26542654
"bom-ref": "53-rich",
26552655
"name": "rich",
2656-
"version": "13.8.1",
2656+
"version": "13.9.2",
26572657
"supplier": {
26582658
"name": "Will McGugan",
26592659
"contact": [
@@ -2662,7 +2662,7 @@
26622662
}
26632663
]
26642664
},
2665-
"cpe": "cpe:2.3:a:will_mcgugan:rich:13.8.1:*:*:*:*:*:*:*",
2665+
"cpe": "cpe:2.3:a:will_mcgugan:rich:13.9.2:*:*:*:*:*:*:*",
26662666
"description": "Render rich text, tables, progress bars, syntax highlighting, markdown and more to the terminal",
26672667
"licenses": [
26682668
{
@@ -2680,12 +2680,12 @@
26802680
"comment": "Home page for project"
26812681
},
26822682
{
2683-
"url": "https://pypi.org/project/rich/13.8.1/#files",
2683+
"url": "https://pypi.org/project/rich/13.9.2/#files",
26842684
"type": "distribution",
26852685
"comment": "Download location for component"
26862686
}
26872687
],
2688-
"purl": "pkg:pypi/rich@13.8.1",
2688+
"purl": "pkg:pypi/rich@13.9.2",
26892689
"properties": [
26902690
{
26912691
"name": "language",

‎sbom/cve-bin-tool-py3.11.spdx‎

Lines changed: 16 additions & 16 deletions
Original file line numberDiff line numberDiff line change
@@ -2,10 +2,10 @@ SPDXVersion: SPDX-2.3
22
DataLicense: CC0-1.0
33
SPDXID: SPDXRef-DOCUMENT
44
DocumentName: Python-cve-bin-tool
5-
DocumentNamespace: http://spdx.org/spdxdocs/Python-cve-bin-tool-c2491612-fcd4-4062-b975-6593590c5eb9
5+
DocumentNamespace: http://spdx.org/spdxdocs/Python-cve-bin-tool-7c107edf-643b-4afd-8fd8-372b836c2aba
66
LicenseListVersion: 3.22
7-
Creator: Tool: sbom4python-0.11.2
8-
Created: 2024-09-30T00:37:42Z
7+
Creator: Tool: sbom4python-0.11.3
8+
Created: 2024-10-07T00:37:22Z
99
CreatorComment: <text>This document has been automatically generated.</text>
1010
#####
1111

@@ -27,34 +27,34 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:terri_oda:cve-bin-tool:3.4:*:*:*:*:*:*
2727

2828
PackageName: aiohttp
2929
SPDXID: SPDXRef-2-aiohttp
30-
PackageVersion: 3.10.8
30+
PackageVersion: 3.10.9
3131
PrimaryPackagePurpose: LIBRARY
3232
PackageSupplier: NOASSERTION
33-
PackageDownloadLocation: https://pypi.org/project/aiohttp/3.10.8/#files
33+
PackageDownloadLocation: https://pypi.org/project/aiohttp/3.10.9/#files
3434
FilesAnalyzed: false
3535
PackageHomePage: https://github.com/aio-libs/aiohttp
3636
PackageLicenseDeclared: NOASSERTION
3737
PackageLicenseConcluded: Apache-2.0
3838
PackageLicenseComments: <text>aiohttp declares Apache 2 which is not currently a valid SPDX License identifier or expression.</text>
3939
PackageCopyrightText: NOASSERTION
4040
PackageSummary: <text>Async http client/server framework (asyncio)</text>
41-
ExternalRef: PACKAGE_MANAGER purl pkg:pypi/[email protected].8
41+
ExternalRef: PACKAGE_MANAGER purl pkg:pypi/[email protected].9
4242
#####
4343

4444
PackageName: aiohappyeyeballs
4545
SPDXID: SPDXRef-3-aiohappyeyeballs
46-
PackageVersion: 2.4.2
46+
PackageVersion: 2.4.3
4747
PrimaryPackagePurpose: LIBRARY
4848
PackageSupplier: Organization: J. Nick Koston ([email protected])
49-
PackageDownloadLocation: https://pypi.org/project/aiohappyeyeballs/2.4.2/#files
49+
PackageDownloadLocation: https://pypi.org/project/aiohappyeyeballs/2.4.3/#files
5050
FilesAnalyzed: false
5151
PackageHomePage: https://github.com/aio-libs/aiohappyeyeballs
52-
PackageLicenseDeclared: Python-2.0.1
53-
PackageLicenseConcluded: Python-2.0.1
52+
PackageLicenseDeclared: PSF-2.0
53+
PackageLicenseConcluded: PSF-2.0
5454
PackageCopyrightText: NOASSERTION
5555
PackageSummary: <text>Happy Eyeballs for asyncio</text>
56-
ExternalRef: PACKAGE_MANAGER purl pkg:pypi/[email protected].2
57-
ExternalRef: SECURITY cpe23Type cpe:2.3:a:j._nick_koston:aiohappyeyeballs:2.4.2:*:*:*:*:*:*:*
56+
ExternalRef: PACKAGE_MANAGER purl pkg:pypi/[email protected].3
57+
ExternalRef: SECURITY cpe23Type cpe:2.3:a:j._nick_koston:aiohappyeyeballs:2.4.3:*:*:*:*:*:*:*
5858
#####
5959

6060
PackageName: aiosignal
@@ -884,18 +884,18 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:the_purl_authors:packageurl-python:0.1
884884

885885
PackageName: rich
886886
SPDXID: SPDXRef-53-rich
887-
PackageVersion: 13.8.1
887+
PackageVersion: 13.9.2
888888
PrimaryPackagePurpose: LIBRARY
889889
PackageSupplier: Person: Will McGugan ([email protected])
890-
PackageDownloadLocation: https://pypi.org/project/rich/13.8.1/#files
890+
PackageDownloadLocation: https://pypi.org/project/rich/13.9.2/#files
891891
FilesAnalyzed: false
892892
PackageHomePage: https://github.com/Textualize/rich
893893
PackageLicenseDeclared: MIT
894894
PackageLicenseConcluded: MIT
895895
PackageCopyrightText: NOASSERTION
896896
PackageSummary: <text>Render rich text, tables, progress bars, syntax highlighting, markdown and more to the terminal</text>
897-
ExternalRef: PACKAGE_MANAGER purl pkg:pypi/rich@13.8.1
898-
ExternalRef: SECURITY cpe23Type cpe:2.3:a:will_mcgugan:rich:13.8.1:*:*:*:*:*:*:*
897+
ExternalRef: PACKAGE_MANAGER purl pkg:pypi/rich@13.9.2
898+
ExternalRef: SECURITY cpe23Type cpe:2.3:a:will_mcgugan:rich:13.9.2:*:*:*:*:*:*:*
899899
#####
900900

901901
PackageName: markdown-it-py

0 commit comments

Comments
 (0)