Skip to content

Commit de0a312

Browse files
github-actions[bot]web-flow
github-actions[bot]
and
web-flow
authored
chore: update SBOM for Python 3.11 (#4384)
Co-authored-by: GitHub <[email protected]>
1 parent 206d14d commit de0a312

File tree

2 files changed

+78
-64
lines changed

2 files changed

+78
-64
lines changed

‎sbom/cve-bin-tool-py3.11.json‎

Lines changed: 49 additions & 37 deletions
Original file line numberDiff line numberDiff line change
@@ -2,10 +2,10 @@
22
"$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
33
"bomFormat": "CycloneDX",
44
"specVersion": "1.6",
5-
"serialNumber": "urn:uuid:0756c440-35f1-4087-a1d1-b2150d425fe2",
5+
"serialNumber": "urn:uuid:9af242dd-4082-4aa8-816f-1bde08e5ec39",
66
"version": 1,
77
"metadata": {
8-
"timestamp": "2024-08-19T00:34:30Z",
8+
"timestamp": "2024-08-26T00:33:39Z",
99
"lifecycles": [
1010
{
1111
"phase": "build"
@@ -31,7 +31,7 @@
3131
"type": "application",
3232
"bom-ref": "1-cve-bin-tool",
3333
"name": "cve-bin-tool",
34-
"version": "3.3.1.dev0",
34+
"version": "3.4rc0",
3535
"supplier": {
3636
"name": "Terri Oda",
3737
"contact": [
@@ -40,7 +40,7 @@
4040
}
4141
]
4242
},
43-
"cpe": "cpe:2.3:a:terri_oda:cve-bin-tool:3.3.1.dev0:*:*:*:*:*:*:*",
43+
"cpe": "cpe:2.3:a:terri_oda:cve-bin-tool:3.4rc0:*:*:*:*:*:*:*",
4444
"description": "CVE Binary Checker Tool",
4545
"licenses": [
4646
{
@@ -53,12 +53,12 @@
5353
],
5454
"externalReferences": [
5555
{
56-
"url": "https://pypi.org/project/cve-bin-tool/3.3.1.dev0",
56+
"url": "https://pypi.org/project/cve-bin-tool/3.4rc0",
5757
"type": "distribution",
5858
"comment": "Download location for component"
5959
}
6060
],
61-
"purl": "pkg:pypi/cve-bin-tool@3.3.1.dev0",
61+
"purl": "pkg:pypi/cve-bin-tool@3.4rc0",
6262
"properties": [
6363
{
6464
"name": "language",
@@ -74,7 +74,7 @@
7474
"type": "library",
7575
"bom-ref": "2-aiohttp",
7676
"name": "aiohttp",
77-
"version": "3.10.4",
77+
"version": "3.10.5",
7878
"description": "Async http client/server framework (asyncio)",
7979
"licenses": [
8080
{
@@ -87,12 +87,12 @@
8787
],
8888
"externalReferences": [
8989
{
90-
"url": "https://pypi.org/project/aiohttp/3.10.4",
90+
"url": "https://pypi.org/project/aiohttp/3.10.5",
9191
"type": "distribution",
9292
"comment": "Download location for component"
9393
}
9494
],
95-
"purl": "pkg:pypi/[email protected].4",
95+
"purl": "pkg:pypi/[email protected].5",
9696
"properties": [
9797
{
9898
"name": "language",
@@ -108,7 +108,7 @@
108108
"type": "library",
109109
"bom-ref": "3-aiohappyeyeballs",
110110
"name": "aiohappyeyeballs",
111-
"version": "2.3.7",
111+
"version": "2.4.0",
112112
"supplier": {
113113
"name": "J. Nick Koston",
114114
"contact": [
@@ -117,7 +117,7 @@
117117
}
118118
]
119119
},
120-
"cpe": "cpe:2.3:a:j._nick_koston:aiohappyeyeballs:2.3.7:*:*:*:*:*:*:*",
120+
"cpe": "cpe:2.3:a:j._nick_koston:aiohappyeyeballs:2.4.0:*:*:*:*:*:*:*",
121121
"description": "Happy Eyeballs for asyncio",
122122
"licenses": [
123123
{
@@ -130,12 +130,12 @@
130130
],
131131
"externalReferences": [
132132
{
133-
"url": "https://pypi.org/project/aiohappyeyeballs/2.3.7",
133+
"url": "https://pypi.org/project/aiohappyeyeballs/2.4.0",
134134
"type": "distribution",
135135
"comment": "Download location for component"
136136
}
137137
],
138-
"purl": "pkg:pypi/aiohappyeyeballs@2.3.7",
138+
"purl": "pkg:pypi/aiohappyeyeballs@2.4.0",
139139
"properties": [
140140
{
141141
"name": "language",
@@ -356,7 +356,7 @@
356356
"type": "library",
357357
"bom-ref": "9-idna",
358358
"name": "idna",
359-
"version": "3.7",
359+
"version": "3.8",
360360
"supplier": {
361361
"name": "Kim Davies",
362362
"contact": [
@@ -365,22 +365,16 @@
365365
}
366366
]
367367
},
368-
"cpe": "cpe:2.3:a:kim_davies:idna:3.7:*:*:*:*:*:*:*",
368+
"cpe": "cpe:2.3:a:kim_davies:idna:3.8:*:*:*:*:*:*:*",
369369
"description": "Internationalized Domain Names in Applications (IDNA)",
370-
"hashes": [
371-
{
372-
"alg": "SHA-1",
373-
"content": "1d365e17e10d72d0b7876316fc7b9ca0eebdd38d"
374-
}
375-
],
376370
"externalReferences": [
377371
{
378-
"url": "https://pypi.org/project/idna/3.7",
372+
"url": "https://pypi.org/project/idna/3.8",
379373
"type": "distribution",
380374
"comment": "Download location for component"
381375
}
382376
],
383-
"purl": "pkg:pypi/idna@3.7",
377+
"purl": "pkg:pypi/idna@3.8",
384378
"properties": [
385379
{
386380
"name": "language",
@@ -847,6 +841,12 @@
847841
},
848842
"cpe": "cpe:2.3:a:google_inc.:gcs-oauth2-boto-plugin:3.2:*:*:*:*:*:*:*",
849843
"description": "Auth plugin allowing use the use of OAuth 2.0 credentials for Google Cloud Storage in the Boto library.",
844+
"hashes": [
845+
{
846+
"alg": "SHA-1",
847+
"content": "7dfa0149811e5617fe1428f692a18ab8b8c31ddb"
848+
}
849+
],
850850
"licenses": [
851851
{
852852
"license": {
@@ -1301,7 +1301,7 @@
13011301
"type": "library",
13021302
"bom-ref": "30-pyparsing",
13031303
"name": "pyparsing",
1304-
"version": "3.1.2",
1304+
"version": "3.1.4",
13051305
"supplier": {
13061306
"name": "Paul McGuire",
13071307
"contact": [
@@ -1310,22 +1310,16 @@
13101310
}
13111311
]
13121312
},
1313-
"cpe": "cpe:2.3:a:paul_mcguire:pyparsing:3.1.2:*:*:*:*:*:*:*",
1313+
"cpe": "cpe:2.3:a:paul_mcguire:pyparsing:3.1.4:*:*:*:*:*:*:*",
13141314
"description": "pyparsing module - Classes and methods to define and execute parsing grammars",
1315-
"hashes": [
1316-
{
1317-
"alg": "SHA-1",
1318-
"content": "7d4bda2743ebc04f68d2594bc4fffc70cd65848f"
1319-
}
1320-
],
13211315
"externalReferences": [
13221316
{
1323-
"url": "https://pypi.org/project/pyparsing/3.1.2",
1317+
"url": "https://pypi.org/project/pyparsing/3.1.4",
13241318
"type": "distribution",
13251319
"comment": "Download location for component"
13261320
}
13271321
],
1328-
"purl": "pkg:pypi/[email protected].2",
1322+
"purl": "pkg:pypi/[email protected].4",
13291323
"properties": [
13301324
{
13311325
"name": "language",
@@ -1811,6 +1805,12 @@
18111805
"name": "jinja2",
18121806
"version": "3.1.4",
18131807
"description": "A very fast and expressive template engine.",
1808+
"hashes": [
1809+
{
1810+
"alg": "SHA-1",
1811+
"content": "dd4a8b5466d8790540c181590b14db4d4d889d57"
1812+
}
1813+
],
18141814
"externalReferences": [
18151815
{
18161816
"url": "https://pypi.org/project/jinja2/3.1.4",
@@ -2560,6 +2560,12 @@
25602560
},
25612561
"cpe": "cpe:2.3:a:julien_danjou:tenacity:9.0.0:*:*:*:*:*:*:*",
25622562
"description": "Retry code until it succeeds",
2563+
"hashes": [
2564+
{
2565+
"alg": "SHA-1",
2566+
"content": "a662bbb487cd6d34541824589f8e8c7a1f7791bb"
2567+
}
2568+
],
25632569
"licenses": [
25642570
{
25652571
"license": {
@@ -2865,7 +2871,7 @@
28652871
"type": "library",
28662872
"bom-ref": "66-setuptools",
28672873
"name": "setuptools",
2868-
"version": "72.2.0",
2874+
"version": "73.0.1",
28692875
"supplier": {
28702876
"name": "Python Packaging Authority",
28712877
"contact": [
@@ -2874,16 +2880,16 @@
28742880
}
28752881
]
28762882
},
2877-
"cpe": "cpe:2.3:a:python_packaging_authority:setuptools:72.2.0:*:*:*:*:*:*:*",
2883+
"cpe": "cpe:2.3:a:python_packaging_authority:setuptools:73.0.1:*:*:*:*:*:*:*",
28782884
"description": "Easily download, build, install, upgrade, and uninstall Python packages",
28792885
"externalReferences": [
28802886
{
2881-
"url": "https://pypi.org/project/setuptools/72.2.0",
2887+
"url": "https://pypi.org/project/setuptools/73.0.1",
28822888
"type": "distribution",
28832889
"comment": "Download location for component"
28842890
}
28852891
],
2886-
"purl": "pkg:pypi/setuptools@72.2.0",
2892+
"purl": "pkg:pypi/setuptools@73.0.1",
28872893
"properties": [
28882894
{
28892895
"name": "language",
@@ -2910,6 +2916,12 @@
29102916
},
29112917
"cpe": "cpe:2.3:a:davide_brunato:xmlschema:3.3.2:*:*:*:*:*:*:*",
29122918
"description": "An XML Schema validator and decoder",
2919+
"hashes": [
2920+
{
2921+
"alg": "SHA-1",
2922+
"content": "90a7233292cfe5d877110fe369869996a3a25928"
2923+
}
2924+
],
29132925
"licenses": [
29142926
{
29152927
"license": {

0 commit comments

Comments
 (0)