Skip to content

Commit 15544d6

Browse files
web-flowgithub-actions[bot]
web-flow
authored and
github-actions[bot]
committed
chore: update SBOM for Python 3.9
1 parent 9f8d4d9 commit 15544d6

File tree

2 files changed

+86
-72
lines changed

2 files changed

+86
-72
lines changed

‎sbom/cve-bin-tool-py3.9.json

Lines changed: 53 additions & 41 deletions
Original file line numberDiff line numberDiff line change
@@ -2,10 +2,10 @@
22
"$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
33
"bomFormat": "CycloneDX",
44
"specVersion": "1.6",
5-
"serialNumber": "urn:uuid:a7c4e360-1ac7-4f5a-b5f9-e86512a3016c",
5+
"serialNumber": "urn:uuid:d9b39d3b-6c3f-40c2-92f5-0cb2db8e77c6",
66
"version": 1,
77
"metadata": {
8-
"timestamp": "2024-08-19T00:37:24Z",
8+
"timestamp": "2024-08-26T00:36:59Z",
99
"lifecycles": [
1010
{
1111
"phase": "build"
@@ -31,7 +31,7 @@
3131
"type": "application",
3232
"bom-ref": "1-cve-bin-tool",
3333
"name": "cve-bin-tool",
34-
"version": "3.3.1.dev0",
34+
"version": "3.4rc0",
3535
"supplier": {
3636
"name": "Terri Oda",
3737
"contact": [
@@ -40,7 +40,7 @@
4040
}
4141
]
4242
},
43-
"cpe": "cpe:2.3:a:terri_oda:cve-bin-tool:3.3.1.dev0:*:*:*:*:*:*:*",
43+
"cpe": "cpe:2.3:a:terri_oda:cve-bin-tool:3.4rc0:*:*:*:*:*:*:*",
4444
"description": "CVE Binary Checker Tool",
4545
"licenses": [
4646
{
@@ -53,12 +53,12 @@
5353
],
5454
"externalReferences": [
5555
{
56-
"url": "https://pypi.org/project/cve-bin-tool/3.3.1.dev0",
56+
"url": "https://pypi.org/project/cve-bin-tool/3.4rc0",
5757
"type": "distribution",
5858
"comment": "Download location for component"
5959
}
6060
],
61-
"purl": "pkg:pypi/cve-bin-tool@3.3.1.dev0",
61+
"purl": "pkg:pypi/cve-bin-tool@3.4rc0",
6262
"properties": [
6363
{
6464
"name": "language",
@@ -74,7 +74,7 @@
7474
"type": "library",
7575
"bom-ref": "2-aiohttp",
7676
"name": "aiohttp",
77-
"version": "3.10.4",
77+
"version": "3.10.5",
7878
"description": "Async http client/server framework (asyncio)",
7979
"licenses": [
8080
{
@@ -87,12 +87,12 @@
8787
],
8888
"externalReferences": [
8989
{
90-
"url": "https://pypi.org/project/aiohttp/3.10.4",
90+
"url": "https://pypi.org/project/aiohttp/3.10.5",
9191
"type": "distribution",
9292
"comment": "Download location for component"
9393
}
9494
],
95-
"purl": "pkg:pypi/[email protected].4",
95+
"purl": "pkg:pypi/[email protected].5",
9696
"properties": [
9797
{
9898
"name": "language",
@@ -108,7 +108,7 @@
108108
"type": "library",
109109
"bom-ref": "3-aiohappyeyeballs",
110110
"name": "aiohappyeyeballs",
111-
"version": "2.3.7",
111+
"version": "2.4.0",
112112
"supplier": {
113113
"name": "J. Nick Koston",
114114
"contact": [
@@ -117,7 +117,7 @@
117117
}
118118
]
119119
},
120-
"cpe": "cpe:2.3:a:j._nick_koston:aiohappyeyeballs:2.3.7:*:*:*:*:*:*:*",
120+
"cpe": "cpe:2.3:a:j._nick_koston:aiohappyeyeballs:2.4.0:*:*:*:*:*:*:*",
121121
"description": "Happy Eyeballs for asyncio",
122122
"licenses": [
123123
{
@@ -130,12 +130,12 @@
130130
],
131131
"externalReferences": [
132132
{
133-
"url": "https://pypi.org/project/aiohappyeyeballs/2.3.7",
133+
"url": "https://pypi.org/project/aiohappyeyeballs/2.4.0",
134134
"type": "distribution",
135135
"comment": "Download location for component"
136136
}
137137
],
138-
"purl": "pkg:pypi/aiohappyeyeballs@2.3.7",
138+
"purl": "pkg:pypi/aiohappyeyeballs@2.4.0",
139139
"properties": [
140140
{
141141
"name": "language",
@@ -405,7 +405,7 @@
405405
"type": "library",
406406
"bom-ref": "10-idna",
407407
"name": "idna",
408-
"version": "3.7",
408+
"version": "3.8",
409409
"supplier": {
410410
"name": "Kim Davies",
411411
"contact": [
@@ -414,22 +414,16 @@
414414
}
415415
]
416416
},
417-
"cpe": "cpe:2.3:a:kim_davies:idna:3.7:*:*:*:*:*:*:*",
417+
"cpe": "cpe:2.3:a:kim_davies:idna:3.8:*:*:*:*:*:*:*",
418418
"description": "Internationalized Domain Names in Applications (IDNA)",
419-
"hashes": [
420-
{
421-
"alg": "SHA-1",
422-
"content": "1d365e17e10d72d0b7876316fc7b9ca0eebdd38d"
423-
}
424-
],
425419
"externalReferences": [
426420
{
427-
"url": "https://pypi.org/project/idna/3.7",
421+
"url": "https://pypi.org/project/idna/3.8",
428422
"type": "distribution",
429423
"comment": "Download location for component"
430424
}
431425
],
432-
"purl": "pkg:pypi/idna@3.7",
426+
"purl": "pkg:pypi/idna@3.8",
433427
"properties": [
434428
{
435429
"name": "language",
@@ -896,6 +890,12 @@
896890
},
897891
"cpe": "cpe:2.3:a:google_inc.:gcs-oauth2-boto-plugin:3.2:*:*:*:*:*:*:*",
898892
"description": "Auth plugin allowing use the use of OAuth 2.0 credentials for Google Cloud Storage in the Boto library.",
893+
"hashes": [
894+
{
895+
"alg": "SHA-1",
896+
"content": "7dfa0149811e5617fe1428f692a18ab8b8c31ddb"
897+
}
898+
],
899899
"licenses": [
900900
{
901901
"license": {
@@ -1350,7 +1350,7 @@
13501350
"type": "library",
13511351
"bom-ref": "31-pyparsing",
13521352
"name": "pyparsing",
1353-
"version": "3.1.2",
1353+
"version": "3.1.4",
13541354
"supplier": {
13551355
"name": "Paul McGuire",
13561356
"contact": [
@@ -1359,22 +1359,16 @@
13591359
}
13601360
]
13611361
},
1362-
"cpe": "cpe:2.3:a:paul_mcguire:pyparsing:3.1.2:*:*:*:*:*:*:*",
1362+
"cpe": "cpe:2.3:a:paul_mcguire:pyparsing:3.1.4:*:*:*:*:*:*:*",
13631363
"description": "pyparsing module - Classes and methods to define and execute parsing grammars",
1364-
"hashes": [
1365-
{
1366-
"alg": "SHA-1",
1367-
"content": "7d4bda2743ebc04f68d2594bc4fffc70cd65848f"
1368-
}
1369-
],
13701364
"externalReferences": [
13711365
{
1372-
"url": "https://pypi.org/project/pyparsing/3.1.2",
1366+
"url": "https://pypi.org/project/pyparsing/3.1.4",
13731367
"type": "distribution",
13741368
"comment": "Download location for component"
13751369
}
13761370
],
1377-
"purl": "pkg:pypi/[email protected].2",
1371+
"purl": "pkg:pypi/[email protected].4",
13781372
"properties": [
13791373
{
13801374
"name": "language",
@@ -1858,7 +1852,7 @@
18581852
"type": "library",
18591853
"bom-ref": "42-importlib-metadata",
18601854
"name": "importlib-metadata",
1861-
"version": "8.2.0",
1855+
"version": "8.4.0",
18621856
"supplier": {
18631857
"name": "Jason R .",
18641858
"contact": [
@@ -1867,16 +1861,16 @@
18671861
}
18681862
]
18691863
},
1870-
"cpe": "cpe:2.3:a:jason_r.:importlib-metadata:8.2.0:*:*:*:*:*:*:*",
1864+
"cpe": "cpe:2.3:a:jason_r.:importlib-metadata:8.4.0:*:*:*:*:*:*:*",
18711865
"description": "Read metadata from Python packages",
18721866
"externalReferences": [
18731867
{
1874-
"url": "https://pypi.org/project/importlib-metadata/8.2.0",
1868+
"url": "https://pypi.org/project/importlib-metadata/8.4.0",
18751869
"type": "distribution",
18761870
"comment": "Download location for component"
18771871
}
18781872
],
1879-
"purl": "pkg:pypi/importlib-metadata@8.2.0",
1873+
"purl": "pkg:pypi/importlib-metadata@8.4.0",
18801874
"properties": [
18811875
{
18821876
"name": "language",
@@ -1928,6 +1922,12 @@
19281922
"name": "jinja2",
19291923
"version": "3.1.4",
19301924
"description": "A very fast and expressive template engine.",
1925+
"hashes": [
1926+
{
1927+
"alg": "SHA-1",
1928+
"content": "dd4a8b5466d8790540c181590b14db4d4d889d57"
1929+
}
1930+
],
19311931
"externalReferences": [
19321932
{
19331933
"url": "https://pypi.org/project/jinja2/3.1.4",
@@ -2677,6 +2677,12 @@
26772677
},
26782678
"cpe": "cpe:2.3:a:julien_danjou:tenacity:9.0.0:*:*:*:*:*:*:*",
26792679
"description": "Retry code until it succeeds",
2680+
"hashes": [
2681+
{
2682+
"alg": "SHA-1",
2683+
"content": "a662bbb487cd6d34541824589f8e8c7a1f7791bb"
2684+
}
2685+
],
26802686
"licenses": [
26812687
{
26822688
"license": {
@@ -2982,7 +2988,7 @@
29822988
"type": "library",
29832989
"bom-ref": "69-setuptools",
29842990
"name": "setuptools",
2985-
"version": "72.2.0",
2991+
"version": "73.0.1",
29862992
"supplier": {
29872993
"name": "Python Packaging Authority",
29882994
"contact": [
@@ -2991,16 +2997,16 @@
29912997
}
29922998
]
29932999
},
2994-
"cpe": "cpe:2.3:a:python_packaging_authority:setuptools:72.2.0:*:*:*:*:*:*:*",
3000+
"cpe": "cpe:2.3:a:python_packaging_authority:setuptools:73.0.1:*:*:*:*:*:*:*",
29953001
"description": "Easily download, build, install, upgrade, and uninstall Python packages",
29963002
"externalReferences": [
29973003
{
2998-
"url": "https://pypi.org/project/setuptools/72.2.0",
3004+
"url": "https://pypi.org/project/setuptools/73.0.1",
29993005
"type": "distribution",
30003006
"comment": "Download location for component"
30013007
}
30023008
],
3003-
"purl": "pkg:pypi/setuptools@72.2.0",
3009+
"purl": "pkg:pypi/setuptools@73.0.1",
30043010
"properties": [
30053011
{
30063012
"name": "language",
@@ -3076,6 +3082,12 @@
30763082
},
30773083
"cpe": "cpe:2.3:a:davide_brunato:xmlschema:3.3.2:*:*:*:*:*:*:*",
30783084
"description": "An XML Schema validator and decoder",
3085+
"hashes": [
3086+
{
3087+
"alg": "SHA-1",
3088+
"content": "90a7233292cfe5d877110fe369869996a3a25928"
3089+
}
3090+
],
30793091
"licenses": [
30803092
{
30813093
"license": {

0 commit comments

Comments
 (0)