Skip to content

Commit 3fa9cfb

Browse files
github-actions[bot]web-flow
github-actions[bot]
and
web-flow
authored
chore: update SBOM for Python 3.12 (#4673)
Co-authored-by: GitHub <[email protected]>
1 parent 450e5b2 commit 3fa9cfb

File tree

2 files changed

+52
-52
lines changed

2 files changed

+52
-52
lines changed

‎sbom/cve-bin-tool-py3.12.json

Lines changed: 26 additions & 26 deletions
Original file line numberDiff line numberDiff line change
@@ -2,10 +2,10 @@
22
"$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
33
"bomFormat": "CycloneDX",
44
"specVersion": "1.6",
5-
"serialNumber": "urn:uuid:a96614bc-e99f-48ba-9bfe-beea6e6e2028",
5+
"serialNumber": "urn:uuid:fcab39ff-a147-4ec9-beb0-46341817a2c0",
66
"version": 1,
77
"metadata": {
8-
"timestamp": "2024-12-30T00:36:13Z",
8+
"timestamp": "2025-01-06T00:36:47Z",
99
"lifecycles": [
1010
{
1111
"phase": "build"
@@ -1290,7 +1290,7 @@
12901290
"type": "library",
12911291
"bom-ref": "19-argcomplete",
12921292
"name": "argcomplete",
1293-
"version": "3.5.2",
1293+
"version": "3.5.3",
12941294
"supplier": {
12951295
"name": "Andrey Kislyuk",
12961296
"contact": [
@@ -1299,12 +1299,12 @@
12991299
}
13001300
]
13011301
},
1302-
"cpe": "cpe:2.3:a:andrey_kislyuk:argcomplete:3.5.2:*:*:*:*:*:*:*",
1302+
"cpe": "cpe:2.3:a:andrey_kislyuk:argcomplete:3.5.3:*:*:*:*:*:*:*",
13031303
"description": "Bash tab completion for argparse",
13041304
"hashes": [
13051305
{
13061306
"alg": "SHA-256",
1307-
"content": "036d020d79048a5d525bc63880d7a4b8d1668566b8a76daf1144c0bbe0f63472"
1307+
"content": "2ab2c4a215c59fd6caaff41a869480a23e8f6a5f910b266c1808037f4e375b61"
13081308
}
13091309
],
13101310
"licenses": [
@@ -1323,7 +1323,7 @@
13231323
"comment": "Home page for project"
13241324
},
13251325
{
1326-
"url": "https://pypi.org/project/argcomplete/3.5.2/#files",
1326+
"url": "https://pypi.org/project/argcomplete/3.5.3/#files",
13271327
"type": "distribution",
13281328
"comment": "Download location for component"
13291329
},
@@ -1344,11 +1344,11 @@
13441344
"type": "log"
13451345
}
13461346
],
1347-
"purl": "pkg:pypi/[email protected].2",
1347+
"purl": "pkg:pypi/[email protected].3",
13481348
"properties": [
13491349
{
13501350
"name": "release_date",
1351-
"value": "2024-12-06T18:24:27Z"
1351+
"value": "2024-12-31T19:22:54Z"
13521352
},
13531353
{
13541354
"name": "language",
@@ -1955,7 +1955,7 @@
19551955
"type": "library",
19561956
"bom-ref": "30-pyparsing",
19571957
"name": "pyparsing",
1958-
"version": "3.2.0",
1958+
"version": "3.2.1",
19591959
"supplier": {
19601960
"name": "Paul McGuire",
19611961
"contact": [
@@ -1964,12 +1964,12 @@
19641964
}
19651965
]
19661966
},
1967-
"cpe": "cpe:2.3:a:paul_mcguire:pyparsing:3.2.0:*:*:*:*:*:*:*",
1967+
"cpe": "cpe:2.3:a:paul_mcguire:pyparsing:3.2.1:*:*:*:*:*:*:*",
19681968
"description": "pyparsing module - Classes and methods to define and execute parsing grammars",
19691969
"hashes": [
19701970
{
19711971
"alg": "SHA-256",
1972-
"content": "93d9577b88da0bbea8cc8334ee8b918ed014968fd2ec383e868fb8afb1ccef84"
1972+
"content": "506ff4f4386c4cec0590ec19e6302d3aedb992fdc02c761e90416f158dacf8e1"
19731973
}
19741974
],
19751975
"externalReferences": [
@@ -1979,16 +1979,16 @@
19791979
"comment": "Home page for project"
19801980
},
19811981
{
1982-
"url": "https://pypi.org/project/pyparsing/3.2.0/#files",
1982+
"url": "https://pypi.org/project/pyparsing/3.2.1/#files",
19831983
"type": "distribution",
19841984
"comment": "Download location for component"
19851985
}
19861986
],
1987-
"purl": "pkg:pypi/[email protected].0",
1987+
"purl": "pkg:pypi/[email protected].1",
19881988
"properties": [
19891989
{
19901990
"name": "release_date",
1991-
"value": "2024-10-13T10:01:13Z"
1991+
"value": "2024-12-31T20:59:42Z"
19921992
},
19931993
{
19941994
"name": "language",
@@ -3782,7 +3782,7 @@
37823782
"type": "library",
37833783
"bom-ref": "60-pygments",
37843784
"name": "pygments",
3785-
"version": "2.18.0",
3785+
"version": "2.19.0",
37863786
"supplier": {
37873787
"name": "Georg Brandl",
37883788
"contact": [
@@ -3791,12 +3791,12 @@
37913791
}
37923792
]
37933793
},
3794-
"cpe": "cpe:2.3:a:georg_brandl:pygments:2.18.0:*:*:*:*:*:*:*",
3794+
"cpe": "cpe:2.3:a:georg_brandl:pygments:2.19.0:*:*:*:*:*:*:*",
37953795
"description": "Pygments is a syntax highlighting package written in Python.",
37963796
"hashes": [
37973797
{
37983798
"alg": "SHA-256",
3799-
"content": "b8e6aca0523f3ab76fee51799c488e38782ac06eafcf95e7ba832985c8e7b13a"
3799+
"content": "4755e6e64d22161d5b61432c0600c923c5927214e7c956e31c23923c89251a9b"
38003800
}
38013801
],
38023802
"licenses": [
@@ -3815,7 +3815,7 @@
38153815
"comment": "Home page for project"
38163816
},
38173817
{
3818-
"url": "https://pypi.org/project/pygments/2.18.0/#files",
3818+
"url": "https://pypi.org/project/pygments/2.19.0/#files",
38193819
"type": "distribution",
38203820
"comment": "Download location for component"
38213821
},
@@ -3836,11 +3836,11 @@
38363836
"type": "log"
38373837
}
38383838
],
3839-
"purl": "pkg:pypi/pygments@2.18.0",
3839+
"purl": "pkg:pypi/pygments@2.19.0",
38403840
"properties": [
38413841
{
38423842
"name": "release_date",
3843-
"value": "2024-05-04T13:41:57Z"
3843+
"value": "2025-01-05T14:11:12Z"
38443844
},
38453845
{
38463846
"name": "language",
@@ -4421,7 +4421,7 @@
44214421
"type": "library",
44224422
"bom-ref": "70-setuptools",
44234423
"name": "setuptools",
4424-
"version": "75.6.0",
4424+
"version": "75.7.0",
44254425
"supplier": {
44264426
"name": "Python Packaging Authority",
44274427
"contact": [
@@ -4430,17 +4430,17 @@
44304430
}
44314431
]
44324432
},
4433-
"cpe": "cpe:2.3:a:python_packaging_authority:setuptools:75.6.0:*:*:*:*:*:*:*",
4433+
"cpe": "cpe:2.3:a:python_packaging_authority:setuptools:75.7.0:*:*:*:*:*:*:*",
44344434
"description": "Easily download, build, install, upgrade, and uninstall Python packages",
44354435
"hashes": [
44364436
{
44374437
"alg": "SHA-256",
4438-
"content": "ce74b49e8f7110f9bf04883b730f4765b774ef3ef28f722cce7c273d253aaf7d"
4438+
"content": "84fb203f278ebcf5cd08f97d3fb96d3fbed4b629d500b29ad60d11e00769b183"
44394439
}
44404440
],
44414441
"externalReferences": [
44424442
{
4443-
"url": "https://pypi.org/project/setuptools/75.6.0/#files",
4443+
"url": "https://pypi.org/project/setuptools/75.7.0/#files",
44444444
"type": "distribution",
44454445
"comment": "Download location for component"
44464446
},
@@ -4457,11 +4457,11 @@
44574457
"type": "log"
44584458
}
44594459
],
4460-
"purl": "pkg:pypi/setuptools@75.6.0",
4460+
"purl": "pkg:pypi/setuptools@75.7.0",
44614461
"properties": [
44624462
{
44634463
"name": "release_date",
4464-
"value": "2024-11-20T18:16:10Z"
4464+
"value": "2025-01-05T16:31:09Z"
44654465
},
44664466
{
44674467
"name": "language",

‎sbom/cve-bin-tool-py3.12.spdx

Lines changed: 26 additions & 26 deletions
Original file line numberDiff line numberDiff line change
@@ -2,10 +2,10 @@ SPDXVersion: SPDX-2.3
22
DataLicense: CC0-1.0
33
SPDXID: SPDXRef-DOCUMENT
44
DocumentName: Python-cve-bin-tool
5-
DocumentNamespace: http://spdx.org/spdxdocs/Python-cve-bin-tool-a67a67da-e7ea-41be-8157-ee7e9237e8b6
5+
DocumentNamespace: http://spdx.org/spdxdocs/Python-cve-bin-tool-fdb12592-02b6-41ec-bc50-b1ca7a76ab10
66
LicenseListVersion: 3.25
77
Creator: Tool: sbom4python-0.12.1
8-
Created: 2024-12-30T00:36:05Z
8+
Created: 2025-01-06T00:36:40Z
99
CreatorComment: <text>This document has been automatically generated.</text>
1010
#####
1111

@@ -410,25 +410,25 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:google_inc.:gsutil:5.33:*:*:*:*:*:*:*
410410

411411
PackageName: argcomplete
412412
SPDXID: SPDXRef-19-argcomplete
413-
PackageVersion: 3.5.2
413+
PackageVersion: 3.5.3
414414
PrimaryPackagePurpose: LIBRARY
415415
PackageSupplier: Person: Andrey Kislyuk ([email protected])
416-
PackageDownloadLocation: https://pypi.org/project/argcomplete/3.5.2/#files
416+
PackageDownloadLocation: https://pypi.org/project/argcomplete/3.5.3/#files
417417
FilesAnalyzed: false
418418
PackageHomePage: https://github.com/kislyuk/argcomplete
419-
PackageChecksum: SHA256: 036d020d79048a5d525bc63880d7a4b8d1668566b8a76daf1144c0bbe0f63472
419+
PackageChecksum: SHA256: 2ab2c4a215c59fd6caaff41a869480a23e8f6a5f910b266c1808037f4e375b61
420420
PackageLicenseDeclared: NOASSERTION
421421
PackageLicenseConcluded: Apache-2.0
422422
PackageLicenseComments: <text>argcomplete declares Apache Software License which is not currently a valid SPDX License identifier or expression.</text>
423423
PackageCopyrightText: NOASSERTION
424424
PackageSummary: <text>Bash tab completion for argparse</text>
425-
ReleaseDate: 2024-12-06T18:24:27Z
425+
ReleaseDate: 2024-12-31T19:22:54Z
426426
ExternalRef: OTHER documentation https://kislyuk.github.io/argcomplete
427427
ExternalRef: OTHER vcs https://github.com/kislyuk/argcomplete
428428
ExternalRef: OTHER issue-tracker https://github.com/kislyuk/argcomplete/issues
429429
ExternalRef: OTHER log https://github.com/kislyuk/argcomplete/blob/develop/Changes.rst
430-
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/[email protected].2
431-
ExternalRef: SECURITY cpe23Type cpe:2.3:a:andrey_kislyuk:argcomplete:3.5.2:*:*:*:*:*:*:*
430+
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/[email protected].3
431+
ExternalRef: SECURITY cpe23Type cpe:2.3:a:andrey_kislyuk:argcomplete:3.5.3:*:*:*:*:*:*:*
432432
#####
433433

434434
PackageName: crcmod
@@ -621,20 +621,20 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:joe_gregorio:httplib2:0.20.4:*:*:*:*:*
621621

622622
PackageName: pyparsing
623623
SPDXID: SPDXRef-30-pyparsing
624-
PackageVersion: 3.2.0
624+
PackageVersion: 3.2.1
625625
PrimaryPackagePurpose: LIBRARY
626626
PackageSupplier: Person: Paul McGuire ([email protected])
627-
PackageDownloadLocation: https://pypi.org/project/pyparsing/3.2.0/#files
627+
PackageDownloadLocation: https://pypi.org/project/pyparsing/3.2.1/#files
628628
FilesAnalyzed: false
629629
PackageHomePage: https://github.com/pyparsing/pyparsing/
630-
PackageChecksum: SHA256: 93d9577b88da0bbea8cc8334ee8b918ed014968fd2ec383e868fb8afb1ccef84
630+
PackageChecksum: SHA256: 506ff4f4386c4cec0590ec19e6302d3aedb992fdc02c761e90416f158dacf8e1
631631
PackageLicenseDeclared: NOASSERTION
632632
PackageLicenseConcluded: NOASSERTION
633633
PackageCopyrightText: NOASSERTION
634634
PackageSummary: <text>pyparsing module - Classes and methods to define and execute parsing grammars</text>
635-
ReleaseDate: 2024-10-13T10:01:13Z
636-
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/[email protected].0
637-
ExternalRef: SECURITY cpe23Type cpe:2.3:a:paul_mcguire:pyparsing:3.2.0:*:*:*:*:*:*:*
635+
ReleaseDate: 2024-12-31T20:59:42Z
636+
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/[email protected].1
637+
ExternalRef: SECURITY cpe23Type cpe:2.3:a:paul_mcguire:pyparsing:3.2.1:*:*:*:*:*:*:*
638638
#####
639639

640640
PackageName: oauth2client
@@ -1248,24 +1248,24 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:taneli_hukkinen:mdurl:0.1.2:*:*:*:*:*:
12481248

12491249
PackageName: pygments
12501250
SPDXID: SPDXRef-60-pygments
1251-
PackageVersion: 2.18.0
1251+
PackageVersion: 2.19.0
12521252
PrimaryPackagePurpose: LIBRARY
12531253
PackageSupplier: Person: Georg Brandl ([email protected])
1254-
PackageDownloadLocation: https://pypi.org/project/pygments/2.18.0/#files
1254+
PackageDownloadLocation: https://pypi.org/project/pygments/2.19.0/#files
12551255
FilesAnalyzed: false
12561256
PackageHomePage: https://pygments.org
1257-
PackageChecksum: SHA256: b8e6aca0523f3ab76fee51799c488e38782ac06eafcf95e7ba832985c8e7b13a
1257+
PackageChecksum: SHA256: 4755e6e64d22161d5b61432c0600c923c5927214e7c956e31c23923c89251a9b
12581258
PackageLicenseDeclared: BSD-2-Clause
12591259
PackageLicenseConcluded: BSD-2-Clause
12601260
PackageCopyrightText: NOASSERTION
12611261
PackageSummary: <text>Pygments is a syntax highlighting package written in Python.</text>
1262-
ReleaseDate: 2024-05-04T13:41:57Z
1262+
ReleaseDate: 2025-01-05T14:11:12Z
12631263
ExternalRef: OTHER documentation https://pygments.org/docs
12641264
ExternalRef: OTHER vcs https://github.com/pygments/pygments
12651265
ExternalRef: OTHER issue-tracker https://github.com/pygments/pygments/issues
12661266
ExternalRef: OTHER log https://github.com/pygments/pygments/blob/master/CHANGES
1267-
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/pygments@2.18.0
1268-
ExternalRef: SECURITY cpe23Type cpe:2.3:a:georg_brandl:pygments:2.18.0:*:*:*:*:*:*:*
1267+
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/pygments@2.19.0
1268+
ExternalRef: SECURITY cpe23Type cpe:2.3:a:georg_brandl:pygments:2.19.0:*:*:*:*:*:*:*
12691269
#####
12701270

12711271
PackageName: python-gnupg
@@ -1450,22 +1450,22 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:sean_ross:rpmfile:2.1.0:*:*:*:*:*:*:*
14501450

14511451
PackageName: setuptools
14521452
SPDXID: SPDXRef-70-setuptools
1453-
PackageVersion: 75.6.0
1453+
PackageVersion: 75.7.0
14541454
PrimaryPackagePurpose: LIBRARY
14551455
PackageSupplier: Organization: Python Packaging Authority ([email protected])
1456-
PackageDownloadLocation: https://pypi.org/project/setuptools/75.6.0/#files
1456+
PackageDownloadLocation: https://pypi.org/project/setuptools/75.7.0/#files
14571457
FilesAnalyzed: false
1458-
PackageChecksum: SHA256: ce74b49e8f7110f9bf04883b730f4765b774ef3ef28f722cce7c273d253aaf7d
1458+
PackageChecksum: SHA256: 84fb203f278ebcf5cd08f97d3fb96d3fbed4b629d500b29ad60d11e00769b183
14591459
PackageLicenseDeclared: NOASSERTION
14601460
PackageLicenseConcluded: NOASSERTION
14611461
PackageCopyrightText: NOASSERTION
14621462
PackageSummary: <text>Easily download, build, install, upgrade, and uninstall Python packages</text>
1463-
ReleaseDate: 2024-11-20T18:16:10Z
1463+
ReleaseDate: 2025-01-05T16:31:09Z
14641464
ExternalRef: OTHER vcs https://github.com/pypa/setuptools
14651465
ExternalRef: OTHER documentation https://setuptools.pypa.io/
14661466
ExternalRef: OTHER log https://setuptools.pypa.io/en/stable/history.html
1467-
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/setuptools@75.6.0
1468-
ExternalRef: SECURITY cpe23Type cpe:2.3:a:python_packaging_authority:setuptools:75.6.0:*:*:*:*:*:*:*
1467+
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/setuptools@75.7.0
1468+
ExternalRef: SECURITY cpe23Type cpe:2.3:a:python_packaging_authority:setuptools:75.7.0:*:*:*:*:*:*:*
14691469
#####
14701470

14711471
PackageName: xmlschema

0 commit comments

Comments
 (0)