|
2 | 2 | "$schema": "http://cyclonedx.org/schema/bom-1.4.schema.json",
|
3 | 3 | "bomFormat": "CycloneDX",
|
4 | 4 | "specVersion": "1.4",
|
5 |
| - "serialNumber": "urn:uuidca8671a5-fa96-42ce-8c2e-c4fc1edc4acc", |
| 5 | + "serialNumber": "urn:uuid53cb606f-9489-4fbd-bdda-1ac8295cfeb7", |
6 | 6 | "version": 1,
|
7 | 7 | "metadata": {
|
8 |
| - "timestamp": "2023-05-08T01:13:51Z", |
| 8 | + "timestamp": "2023-05-15T00:31:28Z", |
9 | 9 | "tools": [
|
10 | 10 | {
|
11 | 11 | "name": "sbom4python",
|
|
23 | 23 | "type": "application",
|
24 | 24 | "bom-ref": "1-cve-bin-tool",
|
25 | 25 | "name": "cve-bin-tool",
|
26 |
| - "version": "3.2.1.dev0", |
| 26 | + "version": "3.2.1rc0", |
27 | 27 | "supplier": {
|
28 | 28 | "name": "Terri Oda",
|
29 | 29 | "contact": [
|
|
32 | 32 | }
|
33 | 33 | ]
|
34 | 34 | },
|
35 |
| - "cpe": "cpe:2.3:a:terri_oda:cve-bin-tool:3.2.1.dev0:*:*:*:*:*:*:*", |
| 35 | + "cpe": "cpe:2.3:a:terri_oda:cve-bin-tool:3.2.1rc0:*:*:*:*:*:*:*", |
36 | 36 | "description": "CVE Binary Checker Tool",
|
37 | 37 | "licenses": [
|
38 | 38 | {
|
|
49 | 49 | "comment": "Home page for project"
|
50 | 50 | },
|
51 | 51 | {
|
52 |
| - "url": "https://pypi.org/project/cve-bin-tool/3.2.1.dev0", |
| 52 | + "url": "https://pypi.org/project/cve-bin-tool/3.2.1rc0", |
53 | 53 | "type": "distribution",
|
54 | 54 | "comment": "Download location for component"
|
55 | 55 | }
|
56 | 56 | ],
|
57 |
| - "purl": "pkg:pypi/[email protected].1.dev0" |
| 57 | + "purl": "pkg:pypi/[email protected].1rc0" |
58 | 58 | },
|
59 | 59 | {
|
60 | 60 | "type": "library",
|
|
1502 | 1502 | "type": "library",
|
1503 | 1503 | "bom-ref": "41-google-auth",
|
1504 | 1504 | "name": "google-auth",
|
1505 |
| - "version": "2.17.3", |
| 1505 | + "version": "2.18.0", |
1506 | 1506 | "supplier": {
|
1507 | 1507 | "name": "Google Cloud Platform",
|
1508 | 1508 | "contact": [
|
|
1511 | 1511 | }
|
1512 | 1512 | ]
|
1513 | 1513 | },
|
1514 |
| - "cpe": "cpe:2.3:a:google_cloud_platform:google-auth:2.17.3:*:*:*:*:*:*:*", |
| 1514 | + "cpe": "cpe:2.3:a:google_cloud_platform:google-auth:2.18.0:*:*:*:*:*:*:*", |
1515 | 1515 | "description": "Google Authentication Library",
|
1516 | 1516 | "licenses": [
|
1517 | 1517 | {
|
|
1528 | 1528 | "comment": "Home page for project"
|
1529 | 1529 | },
|
1530 | 1530 | {
|
1531 |
| - "url": "https://pypi.org/project/google-auth/2.17.3", |
| 1531 | + "url": "https://pypi.org/project/google-auth/2.18.0", |
1532 | 1532 | "type": "distribution",
|
1533 | 1533 | "comment": "Download location for component"
|
1534 | 1534 | }
|
1535 | 1535 | ],
|
1536 |
| - "purl": "pkg:pypi/google-auth@2.17.3", |
| 1536 | + "purl": "pkg:pypi/google-auth@2.18.0", |
1537 | 1537 | "properties": [
|
1538 | 1538 | {
|
1539 | 1539 | "name": "License Comments",
|
|
1580 | 1580 | },
|
1581 | 1581 | {
|
1582 | 1582 | "type": "library",
|
1583 |
| - "bom-ref": "43-monotonic", |
| 1583 | + "bom-ref": "43-urllib3", |
| 1584 | + "name": "urllib3", |
| 1585 | + "version": "1.26.15", |
| 1586 | + "supplier": { |
| 1587 | + "name": "Andrey Petrov", |
| 1588 | + "contact": [ |
| 1589 | + { |
| 1590 | + |
| 1591 | + } |
| 1592 | + ] |
| 1593 | + }, |
| 1594 | + "cpe": "cpe:2.3:a:andrey_petrov:urllib3:1.26.15:*:*:*:*:*:*:*", |
| 1595 | + "description": "HTTP library with thread-safe connection pooling, file post, and more.", |
| 1596 | + "licenses": [ |
| 1597 | + { |
| 1598 | + "license": { |
| 1599 | + "id": "MIT", |
| 1600 | + "url": "https://opensource.org/licenses/MIT" |
| 1601 | + } |
| 1602 | + } |
| 1603 | + ], |
| 1604 | + "externalReferences": [ |
| 1605 | + { |
| 1606 | + "url": "https://urllib3.readthedocs.io/", |
| 1607 | + "type": "website", |
| 1608 | + "comment": "Home page for project" |
| 1609 | + }, |
| 1610 | + { |
| 1611 | + "url": "https://pypi.org/project/urllib3/1.26.15", |
| 1612 | + "type": "distribution", |
| 1613 | + "comment": "Download location for component" |
| 1614 | + } |
| 1615 | + ], |
| 1616 | + "purl": "pkg:pypi/[email protected]" |
| 1617 | + }, |
| 1618 | + { |
| 1619 | + "type": "library", |
| 1620 | + "bom-ref": "44-monotonic", |
1584 | 1621 | "name": "monotonic",
|
1585 | 1622 | "version": "1.6",
|
1586 | 1623 | "supplier": {
|
|
1623 | 1660 | },
|
1624 | 1661 | {
|
1625 | 1662 | "type": "library",
|
1626 |
| - "bom-ref": "44-importlib-resources", |
| 1663 | + "bom-ref": "45-importlib-resources", |
1627 | 1664 | "name": "importlib-resources",
|
1628 | 1665 | "version": "5.12.0",
|
1629 | 1666 | "supplier": {
|
|
1652 | 1689 | },
|
1653 | 1690 | {
|
1654 | 1691 | "type": "library",
|
1655 |
| - "bom-ref": "45-jinja2", |
| 1692 | + "bom-ref": "46-jinja2", |
1656 | 1693 | "name": "jinja2",
|
1657 | 1694 | "version": "3.1.2",
|
1658 | 1695 | "supplier": {
|
|
1689 | 1726 | },
|
1690 | 1727 | {
|
1691 | 1728 | "type": "library",
|
1692 |
| - "bom-ref": "46-markupsafe", |
| 1729 | + "bom-ref": "47-markupsafe", |
1693 | 1730 | "name": "markupsafe",
|
1694 | 1731 | "version": "2.1.2",
|
1695 | 1732 | "supplier": {
|
|
1726 | 1763 | },
|
1727 | 1764 | {
|
1728 | 1765 | "type": "library",
|
1729 |
| - "bom-ref": "47-jsonschema", |
| 1766 | + "bom-ref": "48-jsonschema", |
1730 | 1767 | "name": "jsonschema",
|
1731 | 1768 | "version": "4.17.3",
|
1732 | 1769 | "supplier": {
|
|
1753 | 1790 | },
|
1754 | 1791 | {
|
1755 | 1792 | "type": "library",
|
1756 |
| - "bom-ref": "48-pkgutil-resolve-name", |
| 1793 | + "bom-ref": "49-pkgutil-resolve-name", |
1757 | 1794 | "name": "pkgutil-resolve-name",
|
1758 | 1795 | "version": "1.3.10",
|
1759 | 1796 | "supplier": {
|
|
1782 | 1819 | },
|
1783 | 1820 | {
|
1784 | 1821 | "type": "library",
|
1785 |
| - "bom-ref": "49-pyrsistent", |
| 1822 | + "bom-ref": "50-pyrsistent", |
1786 | 1823 | "name": "pyrsistent",
|
1787 | 1824 | "version": "0.19.3",
|
1788 | 1825 | "supplier": {
|
|
1819 | 1856 | },
|
1820 | 1857 | {
|
1821 | 1858 | "type": "library",
|
1822 |
| - "bom-ref": "50-lib4sbom", |
| 1859 | + "bom-ref": "51-lib4sbom", |
1823 | 1860 | "name": "lib4sbom",
|
1824 | 1861 | "version": "0.3.1",
|
1825 | 1862 | "supplier": {
|
|
1856 | 1893 | },
|
1857 | 1894 | {
|
1858 | 1895 | "type": "library",
|
1859 |
| - "bom-ref": "51-pyyaml", |
| 1896 | + "bom-ref": "52-pyyaml", |
1860 | 1897 | "name": "pyyaml",
|
1861 | 1898 | "version": "6.0",
|
1862 | 1899 | "supplier": {
|
|
1893 | 1930 | },
|
1894 | 1931 | {
|
1895 | 1932 | "type": "library",
|
1896 |
| - "bom-ref": "52-semantic-version", |
| 1933 | + "bom-ref": "53-semantic-version", |
1897 | 1934 | "name": "semantic-version",
|
1898 | 1935 | "version": "2.10.0",
|
1899 | 1936 | "supplier": {
|
|
1936 | 1973 | },
|
1937 | 1974 | {
|
1938 | 1975 | "type": "library",
|
1939 |
| - "bom-ref": "53-packaging", |
| 1976 | + "bom-ref": "54-packaging", |
1940 | 1977 | "name": "packaging",
|
1941 | 1978 | "version": "21.3",
|
1942 | 1979 | "supplier": {
|
|
1978 | 2015 | },
|
1979 | 2016 | {
|
1980 | 2017 | "type": "library",
|
1981 |
| - "bom-ref": "54-plotly", |
| 2018 | + "bom-ref": "55-plotly", |
1982 | 2019 | "name": "plotly",
|
1983 | 2020 | "version": "5.14.1",
|
1984 | 2021 | "supplier": {
|
|
2015 | 2052 | },
|
2016 | 2053 | {
|
2017 | 2054 | "type": "library",
|
2018 |
| - "bom-ref": "55-tenacity", |
| 2055 | + "bom-ref": "56-tenacity", |
2019 | 2056 | "name": "tenacity",
|
2020 | 2057 | "version": "8.2.2",
|
2021 | 2058 | "supplier": {
|
|
2058 | 2095 | },
|
2059 | 2096 | {
|
2060 | 2097 | "type": "library",
|
2061 |
| - "bom-ref": "56-requests", |
| 2098 | + "bom-ref": "57-requests", |
2062 | 2099 | "name": "requests",
|
2063 | 2100 | "version": "2.30.0",
|
2064 | 2101 | "supplier": {
|
|
2101 | 2138 | },
|
2102 | 2139 | {
|
2103 | 2140 | "type": "library",
|
2104 |
| - "bom-ref": "57-certifi", |
| 2141 | + "bom-ref": "58-certifi", |
2105 | 2142 | "name": "certifi",
|
2106 | 2143 | "version": "2023.5.7",
|
2107 | 2144 | "supplier": {
|
|
2136 | 2173 | ],
|
2137 | 2174 | "purl": "pkg:pypi/[email protected]"
|
2138 | 2175 | },
|
2139 |
| - { |
2140 |
| - "type": "library", |
2141 |
| - "bom-ref": "58-urllib3", |
2142 |
| - "name": "urllib3", |
2143 |
| - "version": "2.0.2", |
2144 |
| - "supplier": { |
2145 |
| - "name": "Andrey Petrov", |
2146 |
| - "contact": [ |
2147 |
| - { |
2148 |
| - |
2149 |
| - } |
2150 |
| - ] |
2151 |
| - }, |
2152 |
| - "cpe": "cpe:2.3:a:andrey_petrov:urllib3:2.0.2:*:*:*:*:*:*:*", |
2153 |
| - "description": "HTTP library with thread-safe connection pooling, file post, and more.", |
2154 |
| - "externalReferences": [ |
2155 |
| - { |
2156 |
| - "url": "https://pypi.org/project/urllib3/2.0.2", |
2157 |
| - "type": "distribution", |
2158 |
| - "comment": "Download location for component" |
2159 |
| - } |
2160 |
| - ], |
2161 |
| - "purl": "pkg:pypi/[email protected]" |
2162 |
| - }, |
2163 | 2176 | {
|
2164 | 2177 | "type": "library",
|
2165 | 2178 | "bom-ref": "59-rich",
|
|
2486 | 2499 | "19-distro",
|
2487 | 2500 | "20-gsutil",
|
2488 | 2501 | "9-importlib-metadata",
|
2489 |
| - "44-importlib-resources", |
2490 |
| - "45-jinja2", |
2491 |
| - "47-jsonschema", |
2492 |
| - "50-lib4sbom", |
2493 |
| - "53-packaging", |
2494 |
| - "54-plotly", |
2495 |
| - "51-pyyaml", |
2496 |
| - "56-requests", |
| 2502 | + "45-importlib-resources", |
| 2503 | + "46-jinja2", |
| 2504 | + "48-jsonschema", |
| 2505 | + "51-lib4sbom", |
| 2506 | + "54-packaging", |
| 2507 | + "55-plotly", |
| 2508 | + "52-pyyaml", |
| 2509 | + "57-requests", |
2497 | 2510 | "59-rich",
|
2498 | 2511 | "63-rpmfile",
|
2499 | 2512 | "64-toml",
|
2500 |
| - "58-urllib3", |
| 2513 | + "43-urllib3", |
2501 | 2514 | "65-xmlschema",
|
2502 | 2515 | "67-zstandard"
|
2503 | 2516 | ]
|
|
2566 | 2579 | "41-google-auth",
|
2567 | 2580 | "26-google-reauth",
|
2568 | 2581 | "29-httplib2",
|
2569 |
| - "43-monotonic", |
| 2582 | + "44-monotonic", |
2570 | 2583 | "35-pyopenssl",
|
2571 | 2584 | "39-retry-decorator",
|
2572 | 2585 | "28-six"
|
|
2664 | 2677 | "42-cachetools",
|
2665 | 2678 | "33-pyasn1-modules",
|
2666 | 2679 | "34-rsa",
|
2667 |
| - "28-six" |
| 2680 | + "28-six", |
| 2681 | + "43-urllib3" |
2668 | 2682 | ]
|
2669 | 2683 | },
|
2670 | 2684 | {
|
2671 |
| - "ref": "44-importlib-resources", |
| 2685 | + "ref": "45-importlib-resources", |
2672 | 2686 | "dependsOn": [
|
2673 | 2687 | "10-zipp"
|
2674 | 2688 | ]
|
2675 | 2689 | },
|
2676 | 2690 | {
|
2677 |
| - "ref": "45-jinja2", |
| 2691 | + "ref": "46-jinja2", |
2678 | 2692 | "dependsOn": [
|
2679 |
| - "46-markupsafe" |
| 2693 | + "47-markupsafe" |
2680 | 2694 | ]
|
2681 | 2695 | },
|
2682 | 2696 | {
|
2683 |
| - "ref": "47-jsonschema", |
| 2697 | + "ref": "48-jsonschema", |
2684 | 2698 | "dependsOn": [
|
2685 | 2699 | "8-attrs",
|
2686 | 2700 | "9-importlib-metadata",
|
2687 |
| - "44-importlib-resources", |
2688 |
| - "48-pkgutil-resolve-name", |
2689 |
| - "49-pyrsistent", |
| 2701 | + "45-importlib-resources", |
| 2702 | + "49-pkgutil-resolve-name", |
| 2703 | + "50-pyrsistent", |
2690 | 2704 | "6-typing-extensions"
|
2691 | 2705 | ]
|
2692 | 2706 | },
|
2693 | 2707 | {
|
2694 |
| - "ref": "50-lib4sbom", |
| 2708 | + "ref": "51-lib4sbom", |
2695 | 2709 | "dependsOn": [
|
2696 |
| - "51-pyyaml", |
2697 |
| - "52-semantic-version" |
| 2710 | + "52-pyyaml", |
| 2711 | + "53-semantic-version" |
2698 | 2712 | ]
|
2699 | 2713 | },
|
2700 | 2714 | {
|
2701 |
| - "ref": "53-packaging", |
| 2715 | + "ref": "54-packaging", |
2702 | 2716 | "dependsOn": [
|
2703 | 2717 | "30-pyparsing"
|
2704 | 2718 | ]
|
2705 | 2719 | },
|
2706 | 2720 | {
|
2707 |
| - "ref": "54-plotly", |
| 2721 | + "ref": "55-plotly", |
2708 | 2722 | "dependsOn": [
|
2709 |
| - "53-packaging", |
2710 |
| - "55-tenacity" |
| 2723 | + "54-packaging", |
| 2724 | + "56-tenacity" |
2711 | 2725 | ]
|
2712 | 2726 | },
|
2713 | 2727 | {
|
2714 |
| - "ref": "56-requests", |
| 2728 | + "ref": "57-requests", |
2715 | 2729 | "dependsOn": [
|
2716 |
| - "57-certifi", |
| 2730 | + "58-certifi", |
2717 | 2731 | "11-charset-normalizer",
|
2718 | 2732 | "14-idna",
|
2719 |
| - "58-urllib3" |
| 2733 | + "43-urllib3" |
2720 | 2734 | ]
|
2721 | 2735 | },
|
2722 | 2736 | {
|
|
0 commit comments