Skip to content

Commit 1601de6

Browse files
chore: update SBOM for Python 3.7 (#3006)
Co-authored-by: GitHub <[email protected]>
1 parent 61fc230 commit 1601de6

File tree

2 files changed

+160
-144
lines changed

2 files changed

+160
-144
lines changed

sbom/cve-bin-tool-py3.7.json

Lines changed: 91 additions & 77 deletions
Original file line numberDiff line numberDiff line change
@@ -2,10 +2,10 @@
22
"$schema": "http://cyclonedx.org/schema/bom-1.4.schema.json",
33
"bomFormat": "CycloneDX",
44
"specVersion": "1.4",
5-
"serialNumber": "urn:uuidca8671a5-fa96-42ce-8c2e-c4fc1edc4acc",
5+
"serialNumber": "urn:uuid53cb606f-9489-4fbd-bdda-1ac8295cfeb7",
66
"version": 1,
77
"metadata": {
8-
"timestamp": "2023-05-08T01:13:51Z",
8+
"timestamp": "2023-05-15T00:31:28Z",
99
"tools": [
1010
{
1111
"name": "sbom4python",
@@ -23,7 +23,7 @@
2323
"type": "application",
2424
"bom-ref": "1-cve-bin-tool",
2525
"name": "cve-bin-tool",
26-
"version": "3.2.1.dev0",
26+
"version": "3.2.1rc0",
2727
"supplier": {
2828
"name": "Terri Oda",
2929
"contact": [
@@ -32,7 +32,7 @@
3232
}
3333
]
3434
},
35-
"cpe": "cpe:2.3:a:terri_oda:cve-bin-tool:3.2.1.dev0:*:*:*:*:*:*:*",
35+
"cpe": "cpe:2.3:a:terri_oda:cve-bin-tool:3.2.1rc0:*:*:*:*:*:*:*",
3636
"description": "CVE Binary Checker Tool",
3737
"licenses": [
3838
{
@@ -49,12 +49,12 @@
4949
"comment": "Home page for project"
5050
},
5151
{
52-
"url": "https://pypi.org/project/cve-bin-tool/3.2.1.dev0",
52+
"url": "https://pypi.org/project/cve-bin-tool/3.2.1rc0",
5353
"type": "distribution",
5454
"comment": "Download location for component"
5555
}
5656
],
57-
"purl": "pkg:pypi/[email protected].1.dev0"
57+
"purl": "pkg:pypi/[email protected].1rc0"
5858
},
5959
{
6060
"type": "library",
@@ -1502,7 +1502,7 @@
15021502
"type": "library",
15031503
"bom-ref": "41-google-auth",
15041504
"name": "google-auth",
1505-
"version": "2.17.3",
1505+
"version": "2.18.0",
15061506
"supplier": {
15071507
"name": "Google Cloud Platform",
15081508
"contact": [
@@ -1511,7 +1511,7 @@
15111511
}
15121512
]
15131513
},
1514-
"cpe": "cpe:2.3:a:google_cloud_platform:google-auth:2.17.3:*:*:*:*:*:*:*",
1514+
"cpe": "cpe:2.3:a:google_cloud_platform:google-auth:2.18.0:*:*:*:*:*:*:*",
15151515
"description": "Google Authentication Library",
15161516
"licenses": [
15171517
{
@@ -1528,12 +1528,12 @@
15281528
"comment": "Home page for project"
15291529
},
15301530
{
1531-
"url": "https://pypi.org/project/google-auth/2.17.3",
1531+
"url": "https://pypi.org/project/google-auth/2.18.0",
15321532
"type": "distribution",
15331533
"comment": "Download location for component"
15341534
}
15351535
],
1536-
"purl": "pkg:pypi/google-auth@2.17.3",
1536+
"purl": "pkg:pypi/google-auth@2.18.0",
15371537
"properties": [
15381538
{
15391539
"name": "License Comments",
@@ -1580,7 +1580,44 @@
15801580
},
15811581
{
15821582
"type": "library",
1583-
"bom-ref": "43-monotonic",
1583+
"bom-ref": "43-urllib3",
1584+
"name": "urllib3",
1585+
"version": "1.26.15",
1586+
"supplier": {
1587+
"name": "Andrey Petrov",
1588+
"contact": [
1589+
{
1590+
"email": "[email protected]"
1591+
}
1592+
]
1593+
},
1594+
"cpe": "cpe:2.3:a:andrey_petrov:urllib3:1.26.15:*:*:*:*:*:*:*",
1595+
"description": "HTTP library with thread-safe connection pooling, file post, and more.",
1596+
"licenses": [
1597+
{
1598+
"license": {
1599+
"id": "MIT",
1600+
"url": "https://opensource.org/licenses/MIT"
1601+
}
1602+
}
1603+
],
1604+
"externalReferences": [
1605+
{
1606+
"url": "https://urllib3.readthedocs.io/",
1607+
"type": "website",
1608+
"comment": "Home page for project"
1609+
},
1610+
{
1611+
"url": "https://pypi.org/project/urllib3/1.26.15",
1612+
"type": "distribution",
1613+
"comment": "Download location for component"
1614+
}
1615+
],
1616+
"purl": "pkg:pypi/[email protected]"
1617+
},
1618+
{
1619+
"type": "library",
1620+
"bom-ref": "44-monotonic",
15841621
"name": "monotonic",
15851622
"version": "1.6",
15861623
"supplier": {
@@ -1623,7 +1660,7 @@
16231660
},
16241661
{
16251662
"type": "library",
1626-
"bom-ref": "44-importlib-resources",
1663+
"bom-ref": "45-importlib-resources",
16271664
"name": "importlib-resources",
16281665
"version": "5.12.0",
16291666
"supplier": {
@@ -1652,7 +1689,7 @@
16521689
},
16531690
{
16541691
"type": "library",
1655-
"bom-ref": "45-jinja2",
1692+
"bom-ref": "46-jinja2",
16561693
"name": "jinja2",
16571694
"version": "3.1.2",
16581695
"supplier": {
@@ -1689,7 +1726,7 @@
16891726
},
16901727
{
16911728
"type": "library",
1692-
"bom-ref": "46-markupsafe",
1729+
"bom-ref": "47-markupsafe",
16931730
"name": "markupsafe",
16941731
"version": "2.1.2",
16951732
"supplier": {
@@ -1726,7 +1763,7 @@
17261763
},
17271764
{
17281765
"type": "library",
1729-
"bom-ref": "47-jsonschema",
1766+
"bom-ref": "48-jsonschema",
17301767
"name": "jsonschema",
17311768
"version": "4.17.3",
17321769
"supplier": {
@@ -1753,7 +1790,7 @@
17531790
},
17541791
{
17551792
"type": "library",
1756-
"bom-ref": "48-pkgutil-resolve-name",
1793+
"bom-ref": "49-pkgutil-resolve-name",
17571794
"name": "pkgutil-resolve-name",
17581795
"version": "1.3.10",
17591796
"supplier": {
@@ -1782,7 +1819,7 @@
17821819
},
17831820
{
17841821
"type": "library",
1785-
"bom-ref": "49-pyrsistent",
1822+
"bom-ref": "50-pyrsistent",
17861823
"name": "pyrsistent",
17871824
"version": "0.19.3",
17881825
"supplier": {
@@ -1819,7 +1856,7 @@
18191856
},
18201857
{
18211858
"type": "library",
1822-
"bom-ref": "50-lib4sbom",
1859+
"bom-ref": "51-lib4sbom",
18231860
"name": "lib4sbom",
18241861
"version": "0.3.1",
18251862
"supplier": {
@@ -1856,7 +1893,7 @@
18561893
},
18571894
{
18581895
"type": "library",
1859-
"bom-ref": "51-pyyaml",
1896+
"bom-ref": "52-pyyaml",
18601897
"name": "pyyaml",
18611898
"version": "6.0",
18621899
"supplier": {
@@ -1893,7 +1930,7 @@
18931930
},
18941931
{
18951932
"type": "library",
1896-
"bom-ref": "52-semantic-version",
1933+
"bom-ref": "53-semantic-version",
18971934
"name": "semantic-version",
18981935
"version": "2.10.0",
18991936
"supplier": {
@@ -1936,7 +1973,7 @@
19361973
},
19371974
{
19381975
"type": "library",
1939-
"bom-ref": "53-packaging",
1976+
"bom-ref": "54-packaging",
19401977
"name": "packaging",
19411978
"version": "21.3",
19421979
"supplier": {
@@ -1978,7 +2015,7 @@
19782015
},
19792016
{
19802017
"type": "library",
1981-
"bom-ref": "54-plotly",
2018+
"bom-ref": "55-plotly",
19822019
"name": "plotly",
19832020
"version": "5.14.1",
19842021
"supplier": {
@@ -2015,7 +2052,7 @@
20152052
},
20162053
{
20172054
"type": "library",
2018-
"bom-ref": "55-tenacity",
2055+
"bom-ref": "56-tenacity",
20192056
"name": "tenacity",
20202057
"version": "8.2.2",
20212058
"supplier": {
@@ -2058,7 +2095,7 @@
20582095
},
20592096
{
20602097
"type": "library",
2061-
"bom-ref": "56-requests",
2098+
"bom-ref": "57-requests",
20622099
"name": "requests",
20632100
"version": "2.30.0",
20642101
"supplier": {
@@ -2101,7 +2138,7 @@
21012138
},
21022139
{
21032140
"type": "library",
2104-
"bom-ref": "57-certifi",
2141+
"bom-ref": "58-certifi",
21052142
"name": "certifi",
21062143
"version": "2023.5.7",
21072144
"supplier": {
@@ -2136,30 +2173,6 @@
21362173
],
21372174
"purl": "pkg:pypi/[email protected]"
21382175
},
2139-
{
2140-
"type": "library",
2141-
"bom-ref": "58-urllib3",
2142-
"name": "urllib3",
2143-
"version": "2.0.2",
2144-
"supplier": {
2145-
"name": "Andrey Petrov",
2146-
"contact": [
2147-
{
2148-
"email": "[email protected]"
2149-
}
2150-
]
2151-
},
2152-
"cpe": "cpe:2.3:a:andrey_petrov:urllib3:2.0.2:*:*:*:*:*:*:*",
2153-
"description": "HTTP library with thread-safe connection pooling, file post, and more.",
2154-
"externalReferences": [
2155-
{
2156-
"url": "https://pypi.org/project/urllib3/2.0.2",
2157-
"type": "distribution",
2158-
"comment": "Download location for component"
2159-
}
2160-
],
2161-
"purl": "pkg:pypi/[email protected]"
2162-
},
21632176
{
21642177
"type": "library",
21652178
"bom-ref": "59-rich",
@@ -2486,18 +2499,18 @@
24862499
"19-distro",
24872500
"20-gsutil",
24882501
"9-importlib-metadata",
2489-
"44-importlib-resources",
2490-
"45-jinja2",
2491-
"47-jsonschema",
2492-
"50-lib4sbom",
2493-
"53-packaging",
2494-
"54-plotly",
2495-
"51-pyyaml",
2496-
"56-requests",
2502+
"45-importlib-resources",
2503+
"46-jinja2",
2504+
"48-jsonschema",
2505+
"51-lib4sbom",
2506+
"54-packaging",
2507+
"55-plotly",
2508+
"52-pyyaml",
2509+
"57-requests",
24972510
"59-rich",
24982511
"63-rpmfile",
24992512
"64-toml",
2500-
"58-urllib3",
2513+
"43-urllib3",
25012514
"65-xmlschema",
25022515
"67-zstandard"
25032516
]
@@ -2566,7 +2579,7 @@
25662579
"41-google-auth",
25672580
"26-google-reauth",
25682581
"29-httplib2",
2569-
"43-monotonic",
2582+
"44-monotonic",
25702583
"35-pyopenssl",
25712584
"39-retry-decorator",
25722585
"28-six"
@@ -2664,59 +2677,60 @@
26642677
"42-cachetools",
26652678
"33-pyasn1-modules",
26662679
"34-rsa",
2667-
"28-six"
2680+
"28-six",
2681+
"43-urllib3"
26682682
]
26692683
},
26702684
{
2671-
"ref": "44-importlib-resources",
2685+
"ref": "45-importlib-resources",
26722686
"dependsOn": [
26732687
"10-zipp"
26742688
]
26752689
},
26762690
{
2677-
"ref": "45-jinja2",
2691+
"ref": "46-jinja2",
26782692
"dependsOn": [
2679-
"46-markupsafe"
2693+
"47-markupsafe"
26802694
]
26812695
},
26822696
{
2683-
"ref": "47-jsonschema",
2697+
"ref": "48-jsonschema",
26842698
"dependsOn": [
26852699
"8-attrs",
26862700
"9-importlib-metadata",
2687-
"44-importlib-resources",
2688-
"48-pkgutil-resolve-name",
2689-
"49-pyrsistent",
2701+
"45-importlib-resources",
2702+
"49-pkgutil-resolve-name",
2703+
"50-pyrsistent",
26902704
"6-typing-extensions"
26912705
]
26922706
},
26932707
{
2694-
"ref": "50-lib4sbom",
2708+
"ref": "51-lib4sbom",
26952709
"dependsOn": [
2696-
"51-pyyaml",
2697-
"52-semantic-version"
2710+
"52-pyyaml",
2711+
"53-semantic-version"
26982712
]
26992713
},
27002714
{
2701-
"ref": "53-packaging",
2715+
"ref": "54-packaging",
27022716
"dependsOn": [
27032717
"30-pyparsing"
27042718
]
27052719
},
27062720
{
2707-
"ref": "54-plotly",
2721+
"ref": "55-plotly",
27082722
"dependsOn": [
2709-
"53-packaging",
2710-
"55-tenacity"
2723+
"54-packaging",
2724+
"56-tenacity"
27112725
]
27122726
},
27132727
{
2714-
"ref": "56-requests",
2728+
"ref": "57-requests",
27152729
"dependsOn": [
2716-
"57-certifi",
2730+
"58-certifi",
27172731
"11-charset-normalizer",
27182732
"14-idna",
2719-
"58-urllib3"
2733+
"43-urllib3"
27202734
]
27212735
},
27222736
{

0 commit comments

Comments
 (0)