Skip to content

Commit c77b7fd

Browse files
github-actions[bot]web-flow
github-actions[bot]
and
web-flow
authored
chore: update SBOM for Python 3.8 (#4387)
Co-authored-by: GitHub <[email protected]>
1 parent 04b6633 commit c77b7fd

File tree

2 files changed

+94
-80
lines changed

2 files changed

+94
-80
lines changed

‎sbom/cve-bin-tool-py3.8.json‎

Lines changed: 57 additions & 45 deletions
Original file line numberDiff line numberDiff line change
@@ -2,10 +2,10 @@
22
"$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
33
"bomFormat": "CycloneDX",
44
"specVersion": "1.6",
5-
"serialNumber": "urn:uuid:e590664e-704c-4ef2-83fb-1bb29edfc0f7",
5+
"serialNumber": "urn:uuid:78249e2c-ba6b-44f6-bf53-f4428b5dd43d",
66
"version": 1,
77
"metadata": {
8-
"timestamp": "2024-08-19T00:36:28Z",
8+
"timestamp": "2024-08-26T00:35:34Z",
99
"lifecycles": [
1010
{
1111
"phase": "build"
@@ -31,7 +31,7 @@
3131
"type": "application",
3232
"bom-ref": "1-cve-bin-tool",
3333
"name": "cve-bin-tool",
34-
"version": "3.3.1.dev0",
34+
"version": "3.4rc0",
3535
"supplier": {
3636
"name": "Terri Oda",
3737
"contact": [
@@ -40,7 +40,7 @@
4040
}
4141
]
4242
},
43-
"cpe": "cpe:2.3:a:terri_oda:cve-bin-tool:3.3.1.dev0:*:*:*:*:*:*:*",
43+
"cpe": "cpe:2.3:a:terri_oda:cve-bin-tool:3.4rc0:*:*:*:*:*:*:*",
4444
"description": "CVE Binary Checker Tool",
4545
"licenses": [
4646
{
@@ -53,12 +53,12 @@
5353
],
5454
"externalReferences": [
5555
{
56-
"url": "https://pypi.org/project/cve-bin-tool/3.3.1.dev0",
56+
"url": "https://pypi.org/project/cve-bin-tool/3.4rc0",
5757
"type": "distribution",
5858
"comment": "Download location for component"
5959
}
6060
],
61-
"purl": "pkg:pypi/cve-bin-tool@3.3.1.dev0",
61+
"purl": "pkg:pypi/cve-bin-tool@3.4rc0",
6262
"properties": [
6363
{
6464
"name": "language",
@@ -74,7 +74,7 @@
7474
"type": "library",
7575
"bom-ref": "2-aiohttp",
7676
"name": "aiohttp",
77-
"version": "3.10.4",
77+
"version": "3.10.5",
7878
"description": "Async http client/server framework (asyncio)",
7979
"licenses": [
8080
{
@@ -87,12 +87,12 @@
8787
],
8888
"externalReferences": [
8989
{
90-
"url": "https://pypi.org/project/aiohttp/3.10.4",
90+
"url": "https://pypi.org/project/aiohttp/3.10.5",
9191
"type": "distribution",
9292
"comment": "Download location for component"
9393
}
9494
],
95-
"purl": "pkg:pypi/[email protected].4",
95+
"purl": "pkg:pypi/[email protected].5",
9696
"properties": [
9797
{
9898
"name": "language",
@@ -108,7 +108,7 @@
108108
"type": "library",
109109
"bom-ref": "3-aiohappyeyeballs",
110110
"name": "aiohappyeyeballs",
111-
"version": "2.3.7",
111+
"version": "2.4.0",
112112
"supplier": {
113113
"name": "J. Nick Koston",
114114
"contact": [
@@ -117,7 +117,7 @@
117117
}
118118
]
119119
},
120-
"cpe": "cpe:2.3:a:j._nick_koston:aiohappyeyeballs:2.3.7:*:*:*:*:*:*:*",
120+
"cpe": "cpe:2.3:a:j._nick_koston:aiohappyeyeballs:2.4.0:*:*:*:*:*:*:*",
121121
"description": "Happy Eyeballs for asyncio",
122122
"licenses": [
123123
{
@@ -130,12 +130,12 @@
130130
],
131131
"externalReferences": [
132132
{
133-
"url": "https://pypi.org/project/aiohappyeyeballs/2.3.7",
133+
"url": "https://pypi.org/project/aiohappyeyeballs/2.4.0",
134134
"type": "distribution",
135135
"comment": "Download location for component"
136136
}
137137
],
138-
"purl": "pkg:pypi/aiohappyeyeballs@2.3.7",
138+
"purl": "pkg:pypi/aiohappyeyeballs@2.4.0",
139139
"properties": [
140140
{
141141
"name": "language",
@@ -405,7 +405,7 @@
405405
"type": "library",
406406
"bom-ref": "10-idna",
407407
"name": "idna",
408-
"version": "3.7",
408+
"version": "3.8",
409409
"supplier": {
410410
"name": "Kim Davies",
411411
"contact": [
@@ -414,22 +414,16 @@
414414
}
415415
]
416416
},
417-
"cpe": "cpe:2.3:a:kim_davies:idna:3.7:*:*:*:*:*:*:*",
417+
"cpe": "cpe:2.3:a:kim_davies:idna:3.8:*:*:*:*:*:*:*",
418418
"description": "Internationalized Domain Names in Applications (IDNA)",
419-
"hashes": [
420-
{
421-
"alg": "SHA-1",
422-
"content": "1d365e17e10d72d0b7876316fc7b9ca0eebdd38d"
423-
}
424-
],
425419
"externalReferences": [
426420
{
427-
"url": "https://pypi.org/project/idna/3.7",
421+
"url": "https://pypi.org/project/idna/3.8",
428422
"type": "distribution",
429423
"comment": "Download location for component"
430424
}
431425
],
432-
"purl": "pkg:pypi/idna@3.7",
426+
"purl": "pkg:pypi/idna@3.8",
433427
"properties": [
434428
{
435429
"name": "language",
@@ -896,6 +890,12 @@
896890
},
897891
"cpe": "cpe:2.3:a:google_inc.:gcs-oauth2-boto-plugin:3.2:*:*:*:*:*:*:*",
898892
"description": "Auth plugin allowing use the use of OAuth 2.0 credentials for Google Cloud Storage in the Boto library.",
893+
"hashes": [
894+
{
895+
"alg": "SHA-1",
896+
"content": "7dfa0149811e5617fe1428f692a18ab8b8c31ddb"
897+
}
898+
],
899899
"licenses": [
900900
{
901901
"license": {
@@ -1350,7 +1350,7 @@
13501350
"type": "library",
13511351
"bom-ref": "31-pyparsing",
13521352
"name": "pyparsing",
1353-
"version": "3.1.2",
1353+
"version": "3.1.4",
13541354
"supplier": {
13551355
"name": "Paul McGuire",
13561356
"contact": [
@@ -1359,22 +1359,16 @@
13591359
}
13601360
]
13611361
},
1362-
"cpe": "cpe:2.3:a:paul_mcguire:pyparsing:3.1.2:*:*:*:*:*:*:*",
1362+
"cpe": "cpe:2.3:a:paul_mcguire:pyparsing:3.1.4:*:*:*:*:*:*:*",
13631363
"description": "pyparsing module - Classes and methods to define and execute parsing grammars",
1364-
"hashes": [
1365-
{
1366-
"alg": "SHA-1",
1367-
"content": "7d4bda2743ebc04f68d2594bc4fffc70cd65848f"
1368-
}
1369-
],
13701364
"externalReferences": [
13711365
{
1372-
"url": "https://pypi.org/project/pyparsing/3.1.2",
1366+
"url": "https://pypi.org/project/pyparsing/3.1.4",
13731367
"type": "distribution",
13741368
"comment": "Download location for component"
13751369
}
13761370
],
1377-
"purl": "pkg:pypi/[email protected].2",
1371+
"purl": "pkg:pypi/[email protected].4",
13781372
"properties": [
13791373
{
13801374
"name": "language",
@@ -1858,7 +1852,7 @@
18581852
"type": "library",
18591853
"bom-ref": "42-importlib-metadata",
18601854
"name": "importlib-metadata",
1861-
"version": "8.2.0",
1855+
"version": "8.4.0",
18621856
"supplier": {
18631857
"name": "Jason R .",
18641858
"contact": [
@@ -1867,16 +1861,16 @@
18671861
}
18681862
]
18691863
},
1870-
"cpe": "cpe:2.3:a:jason_r.:importlib-metadata:8.2.0:*:*:*:*:*:*:*",
1864+
"cpe": "cpe:2.3:a:jason_r.:importlib-metadata:8.4.0:*:*:*:*:*:*:*",
18711865
"description": "Read metadata from Python packages",
18721866
"externalReferences": [
18731867
{
1874-
"url": "https://pypi.org/project/importlib-metadata/8.2.0",
1868+
"url": "https://pypi.org/project/importlib-metadata/8.4.0",
18751869
"type": "distribution",
18761870
"comment": "Download location for component"
18771871
}
18781872
],
1879-
"purl": "pkg:pypi/importlib-metadata@8.2.0",
1873+
"purl": "pkg:pypi/importlib-metadata@8.4.0",
18801874
"properties": [
18811875
{
18821876
"name": "language",
@@ -1926,7 +1920,7 @@
19261920
"type": "library",
19271921
"bom-ref": "44-importlib-resources",
19281922
"name": "importlib-resources",
1929-
"version": "6.4.3",
1923+
"version": "6.4.4",
19301924
"supplier": {
19311925
"name": "Barry Warsaw",
19321926
"contact": [
@@ -1935,16 +1929,16 @@
19351929
}
19361930
]
19371931
},
1938-
"cpe": "cpe:2.3:a:barry_warsaw:importlib-resources:6.4.3:*:*:*:*:*:*:*",
1932+
"cpe": "cpe:2.3:a:barry_warsaw:importlib-resources:6.4.4:*:*:*:*:*:*:*",
19391933
"description": "Read resources from Python packages",
19401934
"externalReferences": [
19411935
{
1942-
"url": "https://pypi.org/project/importlib-resources/6.4.3",
1936+
"url": "https://pypi.org/project/importlib-resources/6.4.4",
19431937
"type": "distribution",
19441938
"comment": "Download location for component"
19451939
}
19461940
],
1947-
"purl": "pkg:pypi/[email protected].3",
1941+
"purl": "pkg:pypi/[email protected].4",
19481942
"properties": [
19491943
{
19501944
"name": "language",
@@ -1962,6 +1956,12 @@
19621956
"name": "jinja2",
19631957
"version": "3.1.4",
19641958
"description": "A very fast and expressive template engine.",
1959+
"hashes": [
1960+
{
1961+
"alg": "SHA-1",
1962+
"content": "dd4a8b5466d8790540c181590b14db4d4d889d57"
1963+
}
1964+
],
19651965
"externalReferences": [
19661966
{
19671967
"url": "https://pypi.org/project/jinja2/3.1.4",
@@ -2779,6 +2779,12 @@
27792779
},
27802780
"cpe": "cpe:2.3:a:julien_danjou:tenacity:9.0.0:*:*:*:*:*:*:*",
27812781
"description": "Retry code until it succeeds",
2782+
"hashes": [
2783+
{
2784+
"alg": "SHA-1",
2785+
"content": "a662bbb487cd6d34541824589f8e8c7a1f7791bb"
2786+
}
2787+
],
27822788
"licenses": [
27832789
{
27842790
"license": {
@@ -3084,7 +3090,7 @@
30843090
"type": "library",
30853091
"bom-ref": "72-setuptools",
30863092
"name": "setuptools",
3087-
"version": "72.2.0",
3093+
"version": "73.0.1",
30883094
"supplier": {
30893095
"name": "Python Packaging Authority",
30903096
"contact": [
@@ -3093,16 +3099,16 @@
30933099
}
30943100
]
30953101
},
3096-
"cpe": "cpe:2.3:a:python_packaging_authority:setuptools:72.2.0:*:*:*:*:*:*:*",
3102+
"cpe": "cpe:2.3:a:python_packaging_authority:setuptools:73.0.1:*:*:*:*:*:*:*",
30973103
"description": "Easily download, build, install, upgrade, and uninstall Python packages",
30983104
"externalReferences": [
30993105
{
3100-
"url": "https://pypi.org/project/setuptools/72.2.0",
3106+
"url": "https://pypi.org/project/setuptools/73.0.1",
31013107
"type": "distribution",
31023108
"comment": "Download location for component"
31033109
}
31043110
],
3105-
"purl": "pkg:pypi/setuptools@72.2.0",
3111+
"purl": "pkg:pypi/setuptools@73.0.1",
31063112
"properties": [
31073113
{
31083114
"name": "language",
@@ -3178,6 +3184,12 @@
31783184
},
31793185
"cpe": "cpe:2.3:a:davide_brunato:xmlschema:3.3.2:*:*:*:*:*:*:*",
31803186
"description": "An XML Schema validator and decoder",
3187+
"hashes": [
3188+
{
3189+
"alg": "SHA-1",
3190+
"content": "90a7233292cfe5d877110fe369869996a3a25928"
3191+
}
3192+
],
31813193
"licenses": [
31823194
{
31833195
"license": {

0 commit comments

Comments
 (0)