Skip to content

Commit 206d14d

Browse files
github-actions[bot]web-flow
github-actions[bot]
and
web-flow
authored
chore: update SBOM for Python 3.10 (#4385)
Co-authored-by: GitHub <[email protected]>
1 parent 84c41bb commit 206d14d

File tree

2 files changed

+78
-64
lines changed

2 files changed

+78
-64
lines changed

‎sbom/cve-bin-tool-py3.10.json‎

Lines changed: 49 additions & 37 deletions
Original file line numberDiff line numberDiff line change
@@ -2,10 +2,10 @@
22
"$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
33
"bomFormat": "CycloneDX",
44
"specVersion": "1.6",
5-
"serialNumber": "urn:uuid:22720d5a-f6b4-4a5c-84a7-38b76308c94c",
5+
"serialNumber": "urn:uuid:7eff258d-ffbd-4ef3-8572-1791b27b4ba9",
66
"version": 1,
77
"metadata": {
8-
"timestamp": "2024-08-19T00:34:42Z",
8+
"timestamp": "2024-08-26T00:33:42Z",
99
"lifecycles": [
1010
{
1111
"phase": "build"
@@ -31,7 +31,7 @@
3131
"type": "application",
3232
"bom-ref": "1-cve-bin-tool",
3333
"name": "cve-bin-tool",
34-
"version": "3.3.1.dev0",
34+
"version": "3.4rc0",
3535
"supplier": {
3636
"name": "Terri Oda",
3737
"contact": [
@@ -40,7 +40,7 @@
4040
}
4141
]
4242
},
43-
"cpe": "cpe:2.3:a:terri_oda:cve-bin-tool:3.3.1.dev0:*:*:*:*:*:*:*",
43+
"cpe": "cpe:2.3:a:terri_oda:cve-bin-tool:3.4rc0:*:*:*:*:*:*:*",
4444
"description": "CVE Binary Checker Tool",
4545
"licenses": [
4646
{
@@ -53,12 +53,12 @@
5353
],
5454
"externalReferences": [
5555
{
56-
"url": "https://pypi.org/project/cve-bin-tool/3.3.1.dev0",
56+
"url": "https://pypi.org/project/cve-bin-tool/3.4rc0",
5757
"type": "distribution",
5858
"comment": "Download location for component"
5959
}
6060
],
61-
"purl": "pkg:pypi/cve-bin-tool@3.3.1.dev0",
61+
"purl": "pkg:pypi/cve-bin-tool@3.4rc0",
6262
"properties": [
6363
{
6464
"name": "language",
@@ -74,7 +74,7 @@
7474
"type": "library",
7575
"bom-ref": "2-aiohttp",
7676
"name": "aiohttp",
77-
"version": "3.10.4",
77+
"version": "3.10.5",
7878
"description": "Async http client/server framework (asyncio)",
7979
"licenses": [
8080
{
@@ -87,12 +87,12 @@
8787
],
8888
"externalReferences": [
8989
{
90-
"url": "https://pypi.org/project/aiohttp/3.10.4",
90+
"url": "https://pypi.org/project/aiohttp/3.10.5",
9191
"type": "distribution",
9292
"comment": "Download location for component"
9393
}
9494
],
95-
"purl": "pkg:pypi/[email protected].4",
95+
"purl": "pkg:pypi/[email protected].5",
9696
"properties": [
9797
{
9898
"name": "language",
@@ -108,7 +108,7 @@
108108
"type": "library",
109109
"bom-ref": "3-aiohappyeyeballs",
110110
"name": "aiohappyeyeballs",
111-
"version": "2.3.7",
111+
"version": "2.4.0",
112112
"supplier": {
113113
"name": "J. Nick Koston",
114114
"contact": [
@@ -117,7 +117,7 @@
117117
}
118118
]
119119
},
120-
"cpe": "cpe:2.3:a:j._nick_koston:aiohappyeyeballs:2.3.7:*:*:*:*:*:*:*",
120+
"cpe": "cpe:2.3:a:j._nick_koston:aiohappyeyeballs:2.4.0:*:*:*:*:*:*:*",
121121
"description": "Happy Eyeballs for asyncio",
122122
"licenses": [
123123
{
@@ -130,12 +130,12 @@
130130
],
131131
"externalReferences": [
132132
{
133-
"url": "https://pypi.org/project/aiohappyeyeballs/2.3.7",
133+
"url": "https://pypi.org/project/aiohappyeyeballs/2.4.0",
134134
"type": "distribution",
135135
"comment": "Download location for component"
136136
}
137137
],
138-
"purl": "pkg:pypi/aiohappyeyeballs@2.3.7",
138+
"purl": "pkg:pypi/aiohappyeyeballs@2.4.0",
139139
"properties": [
140140
{
141141
"name": "language",
@@ -405,7 +405,7 @@
405405
"type": "library",
406406
"bom-ref": "10-idna",
407407
"name": "idna",
408-
"version": "3.7",
408+
"version": "3.8",
409409
"supplier": {
410410
"name": "Kim Davies",
411411
"contact": [
@@ -414,22 +414,16 @@
414414
}
415415
]
416416
},
417-
"cpe": "cpe:2.3:a:kim_davies:idna:3.7:*:*:*:*:*:*:*",
417+
"cpe": "cpe:2.3:a:kim_davies:idna:3.8:*:*:*:*:*:*:*",
418418
"description": "Internationalized Domain Names in Applications (IDNA)",
419-
"hashes": [
420-
{
421-
"alg": "SHA-1",
422-
"content": "1d365e17e10d72d0b7876316fc7b9ca0eebdd38d"
423-
}
424-
],
425419
"externalReferences": [
426420
{
427-
"url": "https://pypi.org/project/idna/3.7",
421+
"url": "https://pypi.org/project/idna/3.8",
428422
"type": "distribution",
429423
"comment": "Download location for component"
430424
}
431425
],
432-
"purl": "pkg:pypi/idna@3.7",
426+
"purl": "pkg:pypi/idna@3.8",
433427
"properties": [
434428
{
435429
"name": "language",
@@ -896,6 +890,12 @@
896890
},
897891
"cpe": "cpe:2.3:a:google_inc.:gcs-oauth2-boto-plugin:3.2:*:*:*:*:*:*:*",
898892
"description": "Auth plugin allowing use the use of OAuth 2.0 credentials for Google Cloud Storage in the Boto library.",
893+
"hashes": [
894+
{
895+
"alg": "SHA-1",
896+
"content": "7dfa0149811e5617fe1428f692a18ab8b8c31ddb"
897+
}
898+
],
899899
"licenses": [
900900
{
901901
"license": {
@@ -1350,7 +1350,7 @@
13501350
"type": "library",
13511351
"bom-ref": "31-pyparsing",
13521352
"name": "pyparsing",
1353-
"version": "3.1.2",
1353+
"version": "3.1.4",
13541354
"supplier": {
13551355
"name": "Paul McGuire",
13561356
"contact": [
@@ -1359,22 +1359,16 @@
13591359
}
13601360
]
13611361
},
1362-
"cpe": "cpe:2.3:a:paul_mcguire:pyparsing:3.1.2:*:*:*:*:*:*:*",
1362+
"cpe": "cpe:2.3:a:paul_mcguire:pyparsing:3.1.4:*:*:*:*:*:*:*",
13631363
"description": "pyparsing module - Classes and methods to define and execute parsing grammars",
1364-
"hashes": [
1365-
{
1366-
"alg": "SHA-1",
1367-
"content": "7d4bda2743ebc04f68d2594bc4fffc70cd65848f"
1368-
}
1369-
],
13701364
"externalReferences": [
13711365
{
1372-
"url": "https://pypi.org/project/pyparsing/3.1.2",
1366+
"url": "https://pypi.org/project/pyparsing/3.1.4",
13731367
"type": "distribution",
13741368
"comment": "Download location for component"
13751369
}
13761370
],
1377-
"purl": "pkg:pypi/[email protected].2",
1371+
"purl": "pkg:pypi/[email protected].4",
13781372
"properties": [
13791373
{
13801374
"name": "language",
@@ -1860,6 +1854,12 @@
18601854
"name": "jinja2",
18611855
"version": "3.1.4",
18621856
"description": "A very fast and expressive template engine.",
1857+
"hashes": [
1858+
{
1859+
"alg": "SHA-1",
1860+
"content": "dd4a8b5466d8790540c181590b14db4d4d889d57"
1861+
}
1862+
],
18631863
"externalReferences": [
18641864
{
18651865
"url": "https://pypi.org/project/jinja2/3.1.4",
@@ -2609,6 +2609,12 @@
26092609
},
26102610
"cpe": "cpe:2.3:a:julien_danjou:tenacity:9.0.0:*:*:*:*:*:*:*",
26112611
"description": "Retry code until it succeeds",
2612+
"hashes": [
2613+
{
2614+
"alg": "SHA-1",
2615+
"content": "a662bbb487cd6d34541824589f8e8c7a1f7791bb"
2616+
}
2617+
],
26122618
"licenses": [
26132619
{
26142620
"license": {
@@ -2914,7 +2920,7 @@
29142920
"type": "library",
29152921
"bom-ref": "67-setuptools",
29162922
"name": "setuptools",
2917-
"version": "72.2.0",
2923+
"version": "73.0.1",
29182924
"supplier": {
29192925
"name": "Python Packaging Authority",
29202926
"contact": [
@@ -2923,16 +2929,16 @@
29232929
}
29242930
]
29252931
},
2926-
"cpe": "cpe:2.3:a:python_packaging_authority:setuptools:72.2.0:*:*:*:*:*:*:*",
2932+
"cpe": "cpe:2.3:a:python_packaging_authority:setuptools:73.0.1:*:*:*:*:*:*:*",
29272933
"description": "Easily download, build, install, upgrade, and uninstall Python packages",
29282934
"externalReferences": [
29292935
{
2930-
"url": "https://pypi.org/project/setuptools/72.2.0",
2936+
"url": "https://pypi.org/project/setuptools/73.0.1",
29312937
"type": "distribution",
29322938
"comment": "Download location for component"
29332939
}
29342940
],
2935-
"purl": "pkg:pypi/setuptools@72.2.0",
2941+
"purl": "pkg:pypi/setuptools@73.0.1",
29362942
"properties": [
29372943
{
29382944
"name": "language",
@@ -3008,6 +3014,12 @@
30083014
},
30093015
"cpe": "cpe:2.3:a:davide_brunato:xmlschema:3.3.2:*:*:*:*:*:*:*",
30103016
"description": "An XML Schema validator and decoder",
3017+
"hashes": [
3018+
{
3019+
"alg": "SHA-1",
3020+
"content": "90a7233292cfe5d877110fe369869996a3a25928"
3021+
}
3022+
],
30113023
"licenses": [
30123024
{
30133025
"license": {

0 commit comments

Comments
 (0)