Skip to content

Commit dfe6c73

Browse files
github-actions[bot]web-flow
github-actions[bot]
and
web-flow
authored
chore: update SBOM for Python 3.8 (#3749)
Co-authored-by: GitHub <[email protected]>
1 parent 72c198c commit dfe6c73

File tree

2 files changed

+49
-36
lines changed

2 files changed

+49
-36
lines changed

‎sbom/cve-bin-tool-py3.8.json‎

Lines changed: 32 additions & 20 deletions
Original file line numberDiff line numberDiff line change
@@ -2,10 +2,10 @@
22
"$schema": "http://cyclonedx.org/schema/bom-1.5.schema.json",
33
"bomFormat": "CycloneDX",
44
"specVersion": "1.5",
5-
"serialNumber": "urn:uuid:b9c99b89-e092-4115-bf81-5f009ee8d462",
5+
"serialNumber": "urn:uuid:9a855f65-13ef-4ef7-9eaa-1a4159a78893",
66
"version": 1,
77
"metadata": {
8-
"timestamp": "2024-01-15T00:29:28Z",
8+
"timestamp": "2024-01-22T00:29:40Z",
99
"tools": {
1010
"components": [
1111
{
@@ -416,7 +416,7 @@
416416
"type": "library",
417417
"bom-ref": "10-beautifulsoup4",
418418
"name": "beautifulsoup4",
419-
"version": "4.12.2",
419+
"version": "4.12.3",
420420
"supplier": {
421421
"name": "Leonard Richardson",
422422
"contact": [
@@ -425,16 +425,24 @@
425425
}
426426
]
427427
},
428-
"cpe": "cpe:2.3:a:leonard_richardson:beautifulsoup4:4.12.2:*:*:*:*:*:*:*",
428+
"cpe": "cpe:2.3:a:leonard_richardson:beautifulsoup4:4.12.3:*:*:*:*:*:*:*",
429429
"description": "Screen-scraping library",
430+
"licenses": [
431+
{
432+
"license": {
433+
"id": "MIT",
434+
"url": "https://opensource.org/licenses/MIT"
435+
}
436+
}
437+
],
430438
"externalReferences": [
431439
{
432-
"url": "https://pypi.org/project/beautifulsoup4/4.12.2",
440+
"url": "https://pypi.org/project/beautifulsoup4/4.12.3",
433441
"type": "distribution",
434442
"comment": "Download location for component"
435443
}
436444
],
437-
"purl": "pkg:pypi/[email protected].2",
445+
"purl": "pkg:pypi/[email protected].3",
438446
"properties": [
439447
{
440448
"name": "language",
@@ -443,6 +451,10 @@
443451
{
444452
"name": "python_version",
445453
"value": "3.8.18"
454+
},
455+
{
456+
"name": "License Comments",
457+
"value": "beautifulsoup4 declares MIT License which is not currently a valid SPDX License identifier or expression."
446458
}
447459
]
448460
},
@@ -780,6 +792,12 @@
780792
},
781793
"cpe": "cpe:2.3:a:joshua_harlow:fasteners:0.19:*:*:*:*:*:*:*",
782794
"description": "A python package that provides useful locks",
795+
"hashes": [
796+
{
797+
"alg": "SHA-1",
798+
"content": "06c3f06cab4e135b8d921932019a231c180eb9f4"
799+
}
800+
],
783801
"licenses": [
784802
{
785803
"license": {
@@ -1927,12 +1945,12 @@
19271945
"type": "library",
19281946
"bom-ref": "43-markupsafe",
19291947
"name": "markupsafe",
1930-
"version": "2.1.3",
1948+
"version": "2.1.4",
19311949
"description": "Safely add untrusted strings to HTML/XML markup.",
19321950
"hashes": [
19331951
{
19341952
"alg": "SHA-1",
1935-
"content": "496112e00fcfa54d81d256f1f7e221ad01d033cc"
1953+
"content": "b7cd6523579ea5a08d89799f2a64ec2c2bc45eca"
19361954
}
19371955
],
19381956
"licenses": [
@@ -1945,12 +1963,12 @@
19451963
],
19461964
"externalReferences": [
19471965
{
1948-
"url": "https://pypi.org/project/MarkupSafe/2.1.3",
1966+
"url": "https://pypi.org/project/MarkupSafe/2.1.4",
19491967
"type": "distribution",
19501968
"comment": "Download location for component"
19511969
}
19521970
],
1953-
"purl": "pkg:pypi/[email protected].3",
1971+
"purl": "pkg:pypi/[email protected].4",
19541972
"properties": [
19551973
{
19561974
"name": "language",
@@ -1966,18 +1984,12 @@
19661984
"type": "library",
19671985
"bom-ref": "44-jsonschema",
19681986
"name": "jsonschema",
1969-
"version": "4.20.0",
1987+
"version": "4.21.1",
19701988
"supplier": {
19711989
"name": "Julian Berman"
19721990
},
1973-
"cpe": "cpe:2.3:a:julian_berman:jsonschema:4.20.0:*:*:*:*:*:*:*",
1991+
"cpe": "cpe:2.3:a:julian_berman:jsonschema:4.21.1:*:*:*:*:*:*:*",
19741992
"description": "An implementation of JSON Schema validation for Python",
1975-
"hashes": [
1976-
{
1977-
"alg": "SHA-1",
1978-
"content": "5ff5999d50420251744bc49e758f3b15ad2f8569"
1979-
}
1980-
],
19811993
"licenses": [
19821994
{
19831995
"license": {
@@ -1988,12 +2000,12 @@
19882000
],
19892001
"externalReferences": [
19902002
{
1991-
"url": "https://pypi.org/project/jsonschema/4.20.0",
2003+
"url": "https://pypi.org/project/jsonschema/4.21.1",
19922004
"type": "distribution",
19932005
"comment": "Download location for component"
19942006
}
19952007
],
1996-
"purl": "pkg:pypi/jsonschema@4.20.0",
2008+
"purl": "pkg:pypi/jsonschema@4.21.1",
19972009
"properties": [
19982010
{
19992011
"name": "language",

‎sbom/cve-bin-tool-py3.8.spdx‎

Lines changed: 17 additions & 16 deletions
Original file line numberDiff line numberDiff line change
@@ -2,10 +2,10 @@ SPDXVersion: SPDX-2.3
22
DataLicense: CC0-1.0
33
SPDXID: SPDXRef-DOCUMENT
44
DocumentName: Python-cve-bin-tool
5-
DocumentNamespace: http://spdx.org/spdxdocs/Python-cve-bin-tool-0940156b-7eca-4b05-a51f-026b0642bdb0
5+
DocumentNamespace: http://spdx.org/spdxdocs/Python-cve-bin-tool-9a720992-fee2-4f92-a459-2581ee931125
66
LicenseListVersion: 3.22
77
Creator: Tool: sbom4python-0.10.3
8-
Created: 2024-01-15T00:27:36Z
8+
Created: 2024-01-22T00:27:44Z
99
CreatorComment: <text>This document has been automatically generated.</text>
1010
#####
1111

@@ -153,17 +153,18 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:kim_davies:idna:3.6:*:*:*:*:*:*:*
153153

154154
PackageName: beautifulsoup4
155155
SPDXID: SPDXRef-Package-10-beautifulsoup4
156-
PackageVersion: 4.12.2
156+
PackageVersion: 4.12.3
157157
PrimaryPackagePurpose: LIBRARY
158158
PackageSupplier: Person: Leonard Richardson ([email protected])
159-
PackageDownloadLocation: https://pypi.org/project/beautifulsoup4/4.12.2
159+
PackageDownloadLocation: https://pypi.org/project/beautifulsoup4/4.12.3
160160
FilesAnalyzed: false
161161
PackageLicenseDeclared: NOASSERTION
162-
PackageLicenseConcluded: NOASSERTION
162+
PackageLicenseConcluded: MIT
163+
PackageLicenseComments: <text>beautifulsoup4 declares MIT License which is not currently a valid SPDX License identifier or expression.</text>
163164
PackageCopyrightText: NOASSERTION
164165
PackageSummary: <text>Screen-scraping library</text>
165-
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/[email protected].2
166-
ExternalRef: SECURITY cpe23Type cpe:2.3:a:leonard_richardson:beautifulsoup4:4.12.2:*:*:*:*:*:*:*
166+
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/[email protected].3
167+
ExternalRef: SECURITY cpe23Type cpe:2.3:a:leonard_richardson:beautifulsoup4:4.12.3:*:*:*:*:*:*:*
167168
#####
168169

169170
PackageName: soupsieve
@@ -286,6 +287,7 @@ PrimaryPackagePurpose: LIBRARY
286287
PackageSupplier: Person: Joshua Harlow
287288
PackageDownloadLocation: https://pypi.org/project/fasteners/0.19
288289
FilesAnalyzed: false
290+
PackageChecksum: SHA1: 06c3f06cab4e135b8d921932019a231c180eb9f4
289291
PackageLicenseDeclared: Apache-2.0
290292
PackageLicenseConcluded: Apache-2.0
291293
PackageCopyrightText: NOASSERTION
@@ -684,33 +686,32 @@ ExternalRef: PACKAGE-MANAGER purl pkg:pypi/[email protected]
684686

685687
PackageName: markupsafe
686688
SPDXID: SPDXRef-Package-43-markupsafe
687-
PackageVersion: 2.1.3
689+
PackageVersion: 2.1.4
688690
PrimaryPackagePurpose: LIBRARY
689691
PackageSupplier: NOASSERTION
690-
PackageDownloadLocation: https://pypi.org/project/MarkupSafe/2.1.3
692+
PackageDownloadLocation: https://pypi.org/project/MarkupSafe/2.1.4
691693
FilesAnalyzed: false
692-
PackageChecksum: SHA1: 496112e00fcfa54d81d256f1f7e221ad01d033cc
694+
PackageChecksum: SHA1: b7cd6523579ea5a08d89799f2a64ec2c2bc45eca
693695
PackageLicenseDeclared: BSD-3-Clause
694696
PackageLicenseConcluded: BSD-3-Clause
695697
PackageCopyrightText: NOASSERTION
696698
PackageSummary: <text>Safely add untrusted strings to HTML/XML markup.</text>
697-
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/[email protected].3
699+
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/[email protected].4
698700
#####
699701

700702
PackageName: jsonschema
701703
SPDXID: SPDXRef-Package-44-jsonschema
702-
PackageVersion: 4.20.0
704+
PackageVersion: 4.21.1
703705
PrimaryPackagePurpose: LIBRARY
704706
PackageSupplier: Person: Julian Berman
705-
PackageDownloadLocation: https://pypi.org/project/jsonschema/4.20.0
707+
PackageDownloadLocation: https://pypi.org/project/jsonschema/4.21.1
706708
FilesAnalyzed: false
707-
PackageChecksum: SHA1: 5ff5999d50420251744bc49e758f3b15ad2f8569
708709
PackageLicenseDeclared: MIT
709710
PackageLicenseConcluded: MIT
710711
PackageCopyrightText: NOASSERTION
711712
PackageSummary: <text>An implementation of JSON Schema validation for Python</text>
712-
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/jsonschema@4.20.0
713-
ExternalRef: SECURITY cpe23Type cpe:2.3:a:julian_berman:jsonschema:4.20.0:*:*:*:*:*:*:*
713+
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/jsonschema@4.21.1
714+
ExternalRef: SECURITY cpe23Type cpe:2.3:a:julian_berman:jsonschema:4.21.1:*:*:*:*:*:*:*
714715
#####
715716

716717
PackageName: jsonschema-specifications

0 commit comments

Comments
 (0)