Skip to content

Commit 0b65875

Browse files
chore: update SBOM for Python 3.10 (#3516)
Co-authored-by: GitHub <[email protected]>
1 parent 59cb6fe commit 0b65875

File tree

2 files changed

+20
-20
lines changed

2 files changed

+20
-20
lines changed

sbom/cve-bin-tool-py3.10.json

Lines changed: 10 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -2,10 +2,10 @@
22
"$schema": "http://cyclonedx.org/schema/bom-1.5.schema.json",
33
"bomFormat": "CycloneDX",
44
"specVersion": "1.5",
5-
"serialNumber": "urn:uuid:2a086ae5-3fb9-42cf-982a-3ecad9131c83",
5+
"serialNumber": "urn:uuid:0d3dde17-e1be-4202-8cb3-1c152e43eb49",
66
"version": 1,
77
"metadata": {
8-
"timestamp": "2023-11-06T00:26:37Z",
8+
"timestamp": "2023-11-13T00:26:06Z",
99
"tools": {
1010
"components": [
1111
{
@@ -544,7 +544,7 @@
544544
"type": "library",
545545
"bom-ref": "17-argcomplete",
546546
"name": "argcomplete",
547-
"version": "3.1.4",
547+
"version": "3.1.6",
548548
"supplier": {
549549
"name": "Andrey Kislyuk",
550550
"contact": [
@@ -553,7 +553,7 @@
553553
}
554554
]
555555
},
556-
"cpe": "cpe:2.3:a:andrey_kislyuk:argcomplete:3.1.4:*:*:*:*:*:*:*",
556+
"cpe": "cpe:2.3:a:andrey_kislyuk:argcomplete:3.1.6:*:*:*:*:*:*:*",
557557
"description": "Bash tab completion for argparse",
558558
"licenses": [
559559
{
@@ -565,12 +565,12 @@
565565
],
566566
"externalReferences": [
567567
{
568-
"url": "https://pypi.org/project/argcomplete/3.1.4",
568+
"url": "https://pypi.org/project/argcomplete/3.1.6",
569569
"type": "distribution",
570570
"comment": "Download location for component"
571571
}
572572
],
573-
"purl": "pkg:pypi/[email protected].4",
573+
"purl": "pkg:pypi/[email protected].6",
574574
"properties": [
575575
{
576576
"name": "License Comments",
@@ -1981,7 +1981,7 @@
19811981
"type": "library",
19821982
"bom-ref": "61-rpmfile",
19831983
"name": "rpmfile",
1984-
"version": "1.1.1",
1984+
"version": "2.0.0",
19851985
"supplier": {
19861986
"name": "Sean Ross",
19871987
"contact": [
@@ -1990,7 +1990,7 @@
19901990
}
19911991
]
19921992
},
1993-
"cpe": "cpe:2.3:a:sean_ross:rpmfile:1.1.1:*:*:*:*:*:*:*",
1993+
"cpe": "cpe:2.3:a:sean_ross:rpmfile:2.0.0:*:*:*:*:*:*:*",
19941994
"description": "Read rpm archive files",
19951995
"licenses": [
19961996
{
@@ -2002,12 +2002,12 @@
20022002
],
20032003
"externalReferences": [
20042004
{
2005-
"url": "https://pypi.org/project/rpmfile/1.1.1",
2005+
"url": "https://pypi.org/project/rpmfile/2.0.0",
20062006
"type": "distribution",
20072007
"comment": "Download location for component"
20082008
}
20092009
],
2010-
"purl": "pkg:pypi/rpmfile@1.1.1"
2010+
"purl": "pkg:pypi/rpmfile@2.0.0"
20112011
},
20122012
{
20132013
"type": "library",

sbom/cve-bin-tool-py3.10.spdx

Lines changed: 10 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -2,10 +2,10 @@ SPDXVersion: SPDX-2.3
22
DataLicense: CC0-1.0
33
SPDXID: SPDXRef-DOCUMENT
44
DocumentName: Python-cve-bin-tool
5-
DocumentNamespace: http://spdx.org/spdxdocs/Python-cve-bin-tool-d67f7e47-e74d-482c-8dc2-ba1cb3bf54b1
5+
DocumentNamespace: http://spdx.org/spdxdocs/Python-cve-bin-tool-e27b3244-c357-4bef-a0de-e81174e09a38
66
LicenseListVersion: 3.21
77
Creator: Tool: sbom4python-0.10.0
8-
Created: 2023-11-06T00:25:22Z
8+
Created: 2023-11-13T00:25:02Z
99
CreatorComment: <text>This document has been automatically generated.</text>
1010
#####
1111

@@ -256,18 +256,18 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:google_inc.:gsutil:5.27:*:*:*:*:*:*:*
256256

257257
PackageName: argcomplete
258258
SPDXID: SPDXRef-Package-17-argcomplete
259-
PackageVersion: 3.1.4
259+
PackageVersion: 3.1.6
260260
PrimaryPackagePurpose: LIBRARY
261261
PackageSupplier: Person: Andrey Kislyuk ([email protected])
262-
PackageDownloadLocation: https://pypi.org/project/argcomplete/3.1.4
262+
PackageDownloadLocation: https://pypi.org/project/argcomplete/3.1.6
263263
FilesAnalyzed: false
264264
PackageLicenseDeclared: NOASSERTION
265265
PackageLicenseConcluded: Apache-2.0
266266
PackageLicenseComments: <text>argcomplete declares Apache Software License which is not currently a valid SPDX License identifier or expression.</text>
267267
PackageCopyrightText: NOASSERTION
268268
PackageSummary: <text>Bash tab completion for argparse</text>
269-
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/[email protected].4
270-
ExternalRef: SECURITY cpe23Type cpe:2.3:a:andrey_kislyuk:argcomplete:3.1.4:*:*:*:*:*:*:*
269+
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/[email protected].6
270+
ExternalRef: SECURITY cpe23Type cpe:2.3:a:andrey_kislyuk:argcomplete:3.1.6:*:*:*:*:*:*:*
271271
#####
272272

273273
PackageName: crcmod
@@ -932,17 +932,17 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:georg_brandl:pygments:2.16.1:*:*:*:*:*
932932

933933
PackageName: rpmfile
934934
SPDXID: SPDXRef-Package-61-rpmfile
935-
PackageVersion: 1.1.1
935+
PackageVersion: 2.0.0
936936
PrimaryPackagePurpose: LIBRARY
937937
PackageSupplier: Person: Sean Ross ([email protected])
938-
PackageDownloadLocation: https://pypi.org/project/rpmfile/1.1.1
938+
PackageDownloadLocation: https://pypi.org/project/rpmfile/2.0.0
939939
FilesAnalyzed: false
940940
PackageLicenseDeclared: MIT
941941
PackageLicenseConcluded: MIT
942942
PackageCopyrightText: NOASSERTION
943943
PackageSummary: <text>Read rpm archive files</text>
944-
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/rpmfile@1.1.1
945-
ExternalRef: SECURITY cpe23Type cpe:2.3:a:sean_ross:rpmfile:1.1.1:*:*:*:*:*:*:*
944+
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/rpmfile@2.0.0
945+
ExternalRef: SECURITY cpe23Type cpe:2.3:a:sean_ross:rpmfile:2.0.0:*:*:*:*:*:*:*
946946
#####
947947

948948
PackageName: toml

0 commit comments

Comments
 (0)