|
2 | 2 | "$schema": "http://cyclonedx.org/schema/bom-1.4.schema.json", |
3 | 3 | "bomFormat": "CycloneDX", |
4 | 4 | "specVersion": "1.4", |
5 | | - "serialNumber": "urn:uuidca8671a5-fa96-42ce-8c2e-c4fc1edc4acc", |
| 5 | + "serialNumber": "urn:uuid53cb606f-9489-4fbd-bdda-1ac8295cfeb7", |
6 | 6 | "version": 1, |
7 | 7 | "metadata": { |
8 | | - "timestamp": "2023-05-08T01:13:51Z", |
| 8 | + "timestamp": "2023-05-15T00:31:28Z", |
9 | 9 | "tools": [ |
10 | 10 | { |
11 | 11 | "name": "sbom4python", |
|
23 | 23 | "type": "application", |
24 | 24 | "bom-ref": "1-cve-bin-tool", |
25 | 25 | "name": "cve-bin-tool", |
26 | | - "version": "3.2.1.dev0", |
| 26 | + "version": "3.2.1rc0", |
27 | 27 | "supplier": { |
28 | 28 | "name": "Terri Oda", |
29 | 29 | "contact": [ |
|
32 | 32 | } |
33 | 33 | ] |
34 | 34 | }, |
35 | | - "cpe": "cpe:2.3:a:terri_oda:cve-bin-tool:3.2.1.dev0:*:*:*:*:*:*:*", |
| 35 | + "cpe": "cpe:2.3:a:terri_oda:cve-bin-tool:3.2.1rc0:*:*:*:*:*:*:*", |
36 | 36 | "description": "CVE Binary Checker Tool", |
37 | 37 | "licenses": [ |
38 | 38 | { |
|
49 | 49 | "comment": "Home page for project" |
50 | 50 | }, |
51 | 51 | { |
52 | | - "url": "https://pypi.org/project/cve-bin-tool/3.2.1.dev0", |
| 52 | + "url": "https://pypi.org/project/cve-bin-tool/3.2.1rc0", |
53 | 53 | "type": "distribution", |
54 | 54 | "comment": "Download location for component" |
55 | 55 | } |
56 | 56 | ], |
57 | | - "purl": "pkg:pypi/[email protected].1.dev0" |
| 57 | + "purl": "pkg:pypi/[email protected].1rc0" |
58 | 58 | }, |
59 | 59 | { |
60 | 60 | "type": "library", |
|
1502 | 1502 | "type": "library", |
1503 | 1503 | "bom-ref": "41-google-auth", |
1504 | 1504 | "name": "google-auth", |
1505 | | - "version": "2.17.3", |
| 1505 | + "version": "2.18.0", |
1506 | 1506 | "supplier": { |
1507 | 1507 | "name": "Google Cloud Platform", |
1508 | 1508 | "contact": [ |
|
1511 | 1511 | } |
1512 | 1512 | ] |
1513 | 1513 | }, |
1514 | | - "cpe": "cpe:2.3:a:google_cloud_platform:google-auth:2.17.3:*:*:*:*:*:*:*", |
| 1514 | + "cpe": "cpe:2.3:a:google_cloud_platform:google-auth:2.18.0:*:*:*:*:*:*:*", |
1515 | 1515 | "description": "Google Authentication Library", |
1516 | 1516 | "licenses": [ |
1517 | 1517 | { |
|
1528 | 1528 | "comment": "Home page for project" |
1529 | 1529 | }, |
1530 | 1530 | { |
1531 | | - "url": "https://pypi.org/project/google-auth/2.17.3", |
| 1531 | + "url": "https://pypi.org/project/google-auth/2.18.0", |
1532 | 1532 | "type": "distribution", |
1533 | 1533 | "comment": "Download location for component" |
1534 | 1534 | } |
1535 | 1535 | ], |
1536 | | - "purl": "pkg:pypi/google-auth@2.17.3", |
| 1536 | + "purl": "pkg:pypi/google-auth@2.18.0", |
1537 | 1537 | "properties": [ |
1538 | 1538 | { |
1539 | 1539 | "name": "License Comments", |
|
1580 | 1580 | }, |
1581 | 1581 | { |
1582 | 1582 | "type": "library", |
1583 | | - "bom-ref": "43-monotonic", |
| 1583 | + "bom-ref": "43-urllib3", |
| 1584 | + "name": "urllib3", |
| 1585 | + "version": "1.26.15", |
| 1586 | + "supplier": { |
| 1587 | + "name": "Andrey Petrov", |
| 1588 | + "contact": [ |
| 1589 | + { |
| 1590 | + |
| 1591 | + } |
| 1592 | + ] |
| 1593 | + }, |
| 1594 | + "cpe": "cpe:2.3:a:andrey_petrov:urllib3:1.26.15:*:*:*:*:*:*:*", |
| 1595 | + "description": "HTTP library with thread-safe connection pooling, file post, and more.", |
| 1596 | + "licenses": [ |
| 1597 | + { |
| 1598 | + "license": { |
| 1599 | + "id": "MIT", |
| 1600 | + "url": "https://opensource.org/licenses/MIT" |
| 1601 | + } |
| 1602 | + } |
| 1603 | + ], |
| 1604 | + "externalReferences": [ |
| 1605 | + { |
| 1606 | + "url": "https://urllib3.readthedocs.io/", |
| 1607 | + "type": "website", |
| 1608 | + "comment": "Home page for project" |
| 1609 | + }, |
| 1610 | + { |
| 1611 | + "url": "https://pypi.org/project/urllib3/1.26.15", |
| 1612 | + "type": "distribution", |
| 1613 | + "comment": "Download location for component" |
| 1614 | + } |
| 1615 | + ], |
| 1616 | + "purl": "pkg:pypi/[email protected]" |
| 1617 | + }, |
| 1618 | + { |
| 1619 | + "type": "library", |
| 1620 | + "bom-ref": "44-monotonic", |
1584 | 1621 | "name": "monotonic", |
1585 | 1622 | "version": "1.6", |
1586 | 1623 | "supplier": { |
|
1623 | 1660 | }, |
1624 | 1661 | { |
1625 | 1662 | "type": "library", |
1626 | | - "bom-ref": "44-importlib-resources", |
| 1663 | + "bom-ref": "45-importlib-resources", |
1627 | 1664 | "name": "importlib-resources", |
1628 | 1665 | "version": "5.12.0", |
1629 | 1666 | "supplier": { |
|
1652 | 1689 | }, |
1653 | 1690 | { |
1654 | 1691 | "type": "library", |
1655 | | - "bom-ref": "45-jinja2", |
| 1692 | + "bom-ref": "46-jinja2", |
1656 | 1693 | "name": "jinja2", |
1657 | 1694 | "version": "3.1.2", |
1658 | 1695 | "supplier": { |
|
1689 | 1726 | }, |
1690 | 1727 | { |
1691 | 1728 | "type": "library", |
1692 | | - "bom-ref": "46-markupsafe", |
| 1729 | + "bom-ref": "47-markupsafe", |
1693 | 1730 | "name": "markupsafe", |
1694 | 1731 | "version": "2.1.2", |
1695 | 1732 | "supplier": { |
|
1726 | 1763 | }, |
1727 | 1764 | { |
1728 | 1765 | "type": "library", |
1729 | | - "bom-ref": "47-jsonschema", |
| 1766 | + "bom-ref": "48-jsonschema", |
1730 | 1767 | "name": "jsonschema", |
1731 | 1768 | "version": "4.17.3", |
1732 | 1769 | "supplier": { |
|
1753 | 1790 | }, |
1754 | 1791 | { |
1755 | 1792 | "type": "library", |
1756 | | - "bom-ref": "48-pkgutil-resolve-name", |
| 1793 | + "bom-ref": "49-pkgutil-resolve-name", |
1757 | 1794 | "name": "pkgutil-resolve-name", |
1758 | 1795 | "version": "1.3.10", |
1759 | 1796 | "supplier": { |
|
1782 | 1819 | }, |
1783 | 1820 | { |
1784 | 1821 | "type": "library", |
1785 | | - "bom-ref": "49-pyrsistent", |
| 1822 | + "bom-ref": "50-pyrsistent", |
1786 | 1823 | "name": "pyrsistent", |
1787 | 1824 | "version": "0.19.3", |
1788 | 1825 | "supplier": { |
|
1819 | 1856 | }, |
1820 | 1857 | { |
1821 | 1858 | "type": "library", |
1822 | | - "bom-ref": "50-lib4sbom", |
| 1859 | + "bom-ref": "51-lib4sbom", |
1823 | 1860 | "name": "lib4sbom", |
1824 | 1861 | "version": "0.3.1", |
1825 | 1862 | "supplier": { |
|
1856 | 1893 | }, |
1857 | 1894 | { |
1858 | 1895 | "type": "library", |
1859 | | - "bom-ref": "51-pyyaml", |
| 1896 | + "bom-ref": "52-pyyaml", |
1860 | 1897 | "name": "pyyaml", |
1861 | 1898 | "version": "6.0", |
1862 | 1899 | "supplier": { |
|
1893 | 1930 | }, |
1894 | 1931 | { |
1895 | 1932 | "type": "library", |
1896 | | - "bom-ref": "52-semantic-version", |
| 1933 | + "bom-ref": "53-semantic-version", |
1897 | 1934 | "name": "semantic-version", |
1898 | 1935 | "version": "2.10.0", |
1899 | 1936 | "supplier": { |
|
1936 | 1973 | }, |
1937 | 1974 | { |
1938 | 1975 | "type": "library", |
1939 | | - "bom-ref": "53-packaging", |
| 1976 | + "bom-ref": "54-packaging", |
1940 | 1977 | "name": "packaging", |
1941 | 1978 | "version": "21.3", |
1942 | 1979 | "supplier": { |
|
1978 | 2015 | }, |
1979 | 2016 | { |
1980 | 2017 | "type": "library", |
1981 | | - "bom-ref": "54-plotly", |
| 2018 | + "bom-ref": "55-plotly", |
1982 | 2019 | "name": "plotly", |
1983 | 2020 | "version": "5.14.1", |
1984 | 2021 | "supplier": { |
|
2015 | 2052 | }, |
2016 | 2053 | { |
2017 | 2054 | "type": "library", |
2018 | | - "bom-ref": "55-tenacity", |
| 2055 | + "bom-ref": "56-tenacity", |
2019 | 2056 | "name": "tenacity", |
2020 | 2057 | "version": "8.2.2", |
2021 | 2058 | "supplier": { |
|
2058 | 2095 | }, |
2059 | 2096 | { |
2060 | 2097 | "type": "library", |
2061 | | - "bom-ref": "56-requests", |
| 2098 | + "bom-ref": "57-requests", |
2062 | 2099 | "name": "requests", |
2063 | 2100 | "version": "2.30.0", |
2064 | 2101 | "supplier": { |
|
2101 | 2138 | }, |
2102 | 2139 | { |
2103 | 2140 | "type": "library", |
2104 | | - "bom-ref": "57-certifi", |
| 2141 | + "bom-ref": "58-certifi", |
2105 | 2142 | "name": "certifi", |
2106 | 2143 | "version": "2023.5.7", |
2107 | 2144 | "supplier": { |
|
2136 | 2173 | ], |
2137 | 2174 | "purl": "pkg:pypi/[email protected]" |
2138 | 2175 | }, |
2139 | | - { |
2140 | | - "type": "library", |
2141 | | - "bom-ref": "58-urllib3", |
2142 | | - "name": "urllib3", |
2143 | | - "version": "2.0.2", |
2144 | | - "supplier": { |
2145 | | - "name": "Andrey Petrov", |
2146 | | - "contact": [ |
2147 | | - { |
2148 | | - |
2149 | | - } |
2150 | | - ] |
2151 | | - }, |
2152 | | - "cpe": "cpe:2.3:a:andrey_petrov:urllib3:2.0.2:*:*:*:*:*:*:*", |
2153 | | - "description": "HTTP library with thread-safe connection pooling, file post, and more.", |
2154 | | - "externalReferences": [ |
2155 | | - { |
2156 | | - "url": "https://pypi.org/project/urllib3/2.0.2", |
2157 | | - "type": "distribution", |
2158 | | - "comment": "Download location for component" |
2159 | | - } |
2160 | | - ], |
2161 | | - "purl": "pkg:pypi/[email protected]" |
2162 | | - }, |
2163 | 2176 | { |
2164 | 2177 | "type": "library", |
2165 | 2178 | "bom-ref": "59-rich", |
|
2486 | 2499 | "19-distro", |
2487 | 2500 | "20-gsutil", |
2488 | 2501 | "9-importlib-metadata", |
2489 | | - "44-importlib-resources", |
2490 | | - "45-jinja2", |
2491 | | - "47-jsonschema", |
2492 | | - "50-lib4sbom", |
2493 | | - "53-packaging", |
2494 | | - "54-plotly", |
2495 | | - "51-pyyaml", |
2496 | | - "56-requests", |
| 2502 | + "45-importlib-resources", |
| 2503 | + "46-jinja2", |
| 2504 | + "48-jsonschema", |
| 2505 | + "51-lib4sbom", |
| 2506 | + "54-packaging", |
| 2507 | + "55-plotly", |
| 2508 | + "52-pyyaml", |
| 2509 | + "57-requests", |
2497 | 2510 | "59-rich", |
2498 | 2511 | "63-rpmfile", |
2499 | 2512 | "64-toml", |
2500 | | - "58-urllib3", |
| 2513 | + "43-urllib3", |
2501 | 2514 | "65-xmlschema", |
2502 | 2515 | "67-zstandard" |
2503 | 2516 | ] |
|
2566 | 2579 | "41-google-auth", |
2567 | 2580 | "26-google-reauth", |
2568 | 2581 | "29-httplib2", |
2569 | | - "43-monotonic", |
| 2582 | + "44-monotonic", |
2570 | 2583 | "35-pyopenssl", |
2571 | 2584 | "39-retry-decorator", |
2572 | 2585 | "28-six" |
|
2664 | 2677 | "42-cachetools", |
2665 | 2678 | "33-pyasn1-modules", |
2666 | 2679 | "34-rsa", |
2667 | | - "28-six" |
| 2680 | + "28-six", |
| 2681 | + "43-urllib3" |
2668 | 2682 | ] |
2669 | 2683 | }, |
2670 | 2684 | { |
2671 | | - "ref": "44-importlib-resources", |
| 2685 | + "ref": "45-importlib-resources", |
2672 | 2686 | "dependsOn": [ |
2673 | 2687 | "10-zipp" |
2674 | 2688 | ] |
2675 | 2689 | }, |
2676 | 2690 | { |
2677 | | - "ref": "45-jinja2", |
| 2691 | + "ref": "46-jinja2", |
2678 | 2692 | "dependsOn": [ |
2679 | | - "46-markupsafe" |
| 2693 | + "47-markupsafe" |
2680 | 2694 | ] |
2681 | 2695 | }, |
2682 | 2696 | { |
2683 | | - "ref": "47-jsonschema", |
| 2697 | + "ref": "48-jsonschema", |
2684 | 2698 | "dependsOn": [ |
2685 | 2699 | "8-attrs", |
2686 | 2700 | "9-importlib-metadata", |
2687 | | - "44-importlib-resources", |
2688 | | - "48-pkgutil-resolve-name", |
2689 | | - "49-pyrsistent", |
| 2701 | + "45-importlib-resources", |
| 2702 | + "49-pkgutil-resolve-name", |
| 2703 | + "50-pyrsistent", |
2690 | 2704 | "6-typing-extensions" |
2691 | 2705 | ] |
2692 | 2706 | }, |
2693 | 2707 | { |
2694 | | - "ref": "50-lib4sbom", |
| 2708 | + "ref": "51-lib4sbom", |
2695 | 2709 | "dependsOn": [ |
2696 | | - "51-pyyaml", |
2697 | | - "52-semantic-version" |
| 2710 | + "52-pyyaml", |
| 2711 | + "53-semantic-version" |
2698 | 2712 | ] |
2699 | 2713 | }, |
2700 | 2714 | { |
2701 | | - "ref": "53-packaging", |
| 2715 | + "ref": "54-packaging", |
2702 | 2716 | "dependsOn": [ |
2703 | 2717 | "30-pyparsing" |
2704 | 2718 | ] |
2705 | 2719 | }, |
2706 | 2720 | { |
2707 | | - "ref": "54-plotly", |
| 2721 | + "ref": "55-plotly", |
2708 | 2722 | "dependsOn": [ |
2709 | | - "53-packaging", |
2710 | | - "55-tenacity" |
| 2723 | + "54-packaging", |
| 2724 | + "56-tenacity" |
2711 | 2725 | ] |
2712 | 2726 | }, |
2713 | 2727 | { |
2714 | | - "ref": "56-requests", |
| 2728 | + "ref": "57-requests", |
2715 | 2729 | "dependsOn": [ |
2716 | | - "57-certifi", |
| 2730 | + "58-certifi", |
2717 | 2731 | "11-charset-normalizer", |
2718 | 2732 | "14-idna", |
2719 | | - "58-urllib3" |
| 2733 | + "43-urllib3" |
2720 | 2734 | ] |
2721 | 2735 | }, |
2722 | 2736 | { |
|
0 commit comments