Skip to content

Commit 448ac64

Browse files
web-flowweb-flow
authored
chore: update SBOM for Python 3.9
1 parent 4bde7e8 commit 448ac64

File tree

2 files changed

+44
-44
lines changed

2 files changed

+44
-44
lines changed

‎sbom/cve-bin-tool-py3.9.json‎

Lines changed: 22 additions & 22 deletions
Original file line numberDiff line numberDiff line change
@@ -2,10 +2,10 @@
22
"$schema": "http://cyclonedx.org/schema/bom-1.5.schema.json",
33
"bomFormat": "CycloneDX",
44
"specVersion": "1.5",
5-
"serialNumber": "urn:uuid:138db72d-e281-405e-8689-ac86afcc138c",
5+
"serialNumber": "urn:uuid:49e5ab23-133b-4db2-9fa2-6bb79a50ff57",
66
"version": 1,
77
"metadata": {
8-
"timestamp": "2023-10-23T00:27:12Z",
8+
"timestamp": "2023-10-30T00:26:16Z",
99
"tools": {
1010
"components": [
1111
{
@@ -506,7 +506,7 @@
506506
"type": "library",
507507
"bom-ref": "16-gsutil",
508508
"name": "gsutil",
509-
"version": "5.26",
509+
"version": "5.27",
510510
"supplier": {
511511
"name": "Google Inc .",
512512
"contact": [
@@ -515,7 +515,7 @@
515515
}
516516
]
517517
},
518-
"cpe": "cpe:2.3:a:google_inc.:gsutil:5.26:*:*:*:*:*:*:*",
518+
"cpe": "cpe:2.3:a:google_inc.:gsutil:5.27:*:*:*:*:*:*:*",
519519
"description": "A command line tool for interacting with cloud storage services.",
520520
"licenses": [
521521
{
@@ -527,12 +527,12 @@
527527
],
528528
"externalReferences": [
529529
{
530-
"url": "https://pypi.org/project/gsutil/5.26",
530+
"url": "https://pypi.org/project/gsutil/5.27",
531531
"type": "distribution",
532532
"comment": "Download location for component"
533533
}
534534
],
535-
"purl": "pkg:pypi/gsutil@5.26",
535+
"purl": "pkg:pypi/gsutil@5.27",
536536
"properties": [
537537
{
538538
"name": "License Comments",
@@ -1021,7 +1021,7 @@
10211021
"type": "library",
10221022
"bom-ref": "31-pyopenssl",
10231023
"name": "pyopenssl",
1024-
"version": "23.2.0",
1024+
"version": "23.3.0",
10251025
"supplier": {
10261026
"name": "The pyOpenSSL developers",
10271027
"contact": [
@@ -1030,7 +1030,7 @@
10301030
}
10311031
]
10321032
},
1033-
"cpe": "cpe:2.3:a:the_pyopenssl_developers:pyopenssl:23.2.0:*:*:*:*:*:*:*",
1033+
"cpe": "cpe:2.3:a:the_pyopenssl_developers:pyopenssl:23.3.0:*:*:*:*:*:*:*",
10341034
"description": "Python wrapper module around the OpenSSL library",
10351035
"licenses": [
10361036
{
@@ -1042,12 +1042,12 @@
10421042
],
10431043
"externalReferences": [
10441044
{
1045-
"url": "https://pypi.org/project/pyOpenSSL/23.2.0",
1045+
"url": "https://pypi.org/project/pyOpenSSL/23.3.0",
10461046
"type": "distribution",
10471047
"comment": "Download location for component"
10481048
}
10491049
],
1050-
"purl": "pkg:pypi/pyopenssl@23.2.0",
1050+
"purl": "pkg:pypi/pyopenssl@23.3.0",
10511051
"properties": [
10521052
{
10531053
"name": "License Comments",
@@ -1059,7 +1059,7 @@
10591059
"type": "library",
10601060
"bom-ref": "32-cryptography",
10611061
"name": "cryptography",
1062-
"version": "41.0.4",
1062+
"version": "41.0.5",
10631063
"supplier": {
10641064
"name": "The Python Cryptographic Authority and individual contributors",
10651065
"contact": [
@@ -1068,7 +1068,7 @@
10681068
}
10691069
]
10701070
},
1071-
"cpe": "cpe:2.3:a:the_python_cryptographic_authority_and_individual_contributors:cryptography:41.0.4:*:*:*:*:*:*:*",
1071+
"cpe": "cpe:2.3:a:the_python_cryptographic_authority_and_individual_contributors:cryptography:41.0.5:*:*:*:*:*:*:*",
10721072
"description": "cryptography is a package which provides cryptographic recipes and primitives to Python developers.",
10731073
"licenses": [
10741074
{
@@ -1077,12 +1077,12 @@
10771077
],
10781078
"externalReferences": [
10791079
{
1080-
"url": "https://pypi.org/project/cryptography/41.0.4",
1080+
"url": "https://pypi.org/project/cryptography/41.0.5",
10811081
"type": "distribution",
10821082
"comment": "Download location for component"
10831083
}
10841084
],
1085-
"purl": "pkg:pypi/[email protected].4"
1085+
"purl": "pkg:pypi/[email protected].5"
10861086
},
10871087
{
10881088
"type": "library",
@@ -1266,7 +1266,7 @@
12661266
"type": "library",
12671267
"bom-ref": "38-cachetools",
12681268
"name": "cachetools",
1269-
"version": "5.3.1",
1269+
"version": "5.3.2",
12701270
"supplier": {
12711271
"name": "Thomas Kemmer",
12721272
"contact": [
@@ -1275,7 +1275,7 @@
12751275
}
12761276
]
12771277
},
1278-
"cpe": "cpe:2.3:a:thomas_kemmer:cachetools:5.3.1:*:*:*:*:*:*:*",
1278+
"cpe": "cpe:2.3:a:thomas_kemmer:cachetools:5.3.2:*:*:*:*:*:*:*",
12791279
"description": "Extensible memoizing collections and decorators",
12801280
"licenses": [
12811281
{
@@ -1287,12 +1287,12 @@
12871287
],
12881288
"externalReferences": [
12891289
{
1290-
"url": "https://pypi.org/project/cachetools/5.3.1",
1290+
"url": "https://pypi.org/project/cachetools/5.3.2",
12911291
"type": "distribution",
12921292
"comment": "Download location for component"
12931293
}
12941294
],
1295-
"purl": "pkg:pypi/[email protected].1"
1295+
"purl": "pkg:pypi/[email protected].2"
12961296
},
12971297
{
12981298
"type": "library",
@@ -1715,7 +1715,7 @@
17151715
"type": "library",
17161716
"bom-ref": "53-plotly",
17171717
"name": "plotly",
1718-
"version": "5.17.0",
1718+
"version": "5.18.0",
17191719
"supplier": {
17201720
"name": "Chris P",
17211721
"contact": [
@@ -1724,7 +1724,7 @@
17241724
}
17251725
]
17261726
},
1727-
"cpe": "cpe:2.3:a:chris_p:plotly:5.17.0:*:*:*:*:*:*:*",
1727+
"cpe": "cpe:2.3:a:chris_p:plotly:5.18.0:*:*:*:*:*:*:*",
17281728
"description": "An open-source, interactive data visualization library for Python",
17291729
"licenses": [
17301730
{
@@ -1736,12 +1736,12 @@
17361736
],
17371737
"externalReferences": [
17381738
{
1739-
"url": "https://pypi.org/project/plotly/5.17.0",
1739+
"url": "https://pypi.org/project/plotly/5.18.0",
17401740
"type": "distribution",
17411741
"comment": "Download location for component"
17421742
}
17431743
],
1744-
"purl": "pkg:pypi/plotly@5.17.0"
1744+
"purl": "pkg:pypi/plotly@5.18.0"
17451745
},
17461746
{
17471747
"type": "library",

‎sbom/cve-bin-tool-py3.9.spdx‎

Lines changed: 22 additions & 22 deletions
Original file line numberDiff line numberDiff line change
@@ -2,10 +2,10 @@ SPDXVersion: SPDX-2.3
22
DataLicense: CC0-1.0
33
SPDXID: SPDXRef-DOCUMENT
44
DocumentName: Python-cve-bin-tool
5-
DocumentNamespace: http://spdx.org/spdxdocs/Python-cve-bin-tool-44fef178-29ca-49aa-a90e-4e9fa1d6ed6d
5+
DocumentNamespace: http://spdx.org/spdxdocs/Python-cve-bin-tool-156d1333-107b-45f2-9bab-245ab3e876cb
66
LicenseListVersion: 3.21
77
Creator: Tool: sbom4python-0.10.0
8-
Created: 2023-10-23T00:25:18Z
8+
Created: 2023-10-30T00:24:47Z
99
CreatorComment: <text>This document has been automatically generated.</text>
1010
#####
1111

@@ -240,18 +240,18 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:nir_cohen:distro:1.8.0:*:*:*:*:*:*:*
240240

241241
PackageName: gsutil
242242
SPDXID: SPDXRef-Package-16-gsutil
243-
PackageVersion: 5.26
243+
PackageVersion: 5.27
244244
PrimaryPackagePurpose: LIBRARY
245245
PackageSupplier: Person: Google Inc. ([email protected])
246-
PackageDownloadLocation: https://pypi.org/project/gsutil/5.26
246+
PackageDownloadLocation: https://pypi.org/project/gsutil/5.27
247247
FilesAnalyzed: false
248248
PackageLicenseDeclared: NOASSERTION
249249
PackageLicenseConcluded: Apache-2.0
250250
PackageLicenseComments: <text>gsutil declares Apache 2.0 which is not currently a valid SPDX License identifier or expression.</text>
251251
PackageCopyrightText: NOASSERTION
252252
PackageSummary: <text>A command line tool for interacting with cloud storage services.</text>
253-
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/gsutil@5.26
254-
ExternalRef: SECURITY cpe23Type cpe:2.3:a:google_inc.:gsutil:5.26:*:*:*:*:*:*:*
253+
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/gsutil@5.27
254+
ExternalRef: SECURITY cpe23Type cpe:2.3:a:google_inc.:gsutil:5.27:*:*:*:*:*:*:*
255255
#####
256256

257257
PackageName: argcomplete
@@ -473,33 +473,33 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:sybren_a._stuvel:rsa:4.7.2:*:*:*:*:*:*
473473

474474
PackageName: pyopenssl
475475
SPDXID: SPDXRef-Package-31-pyopenssl
476-
PackageVersion: 23.2.0
476+
PackageVersion: 23.3.0
477477
PrimaryPackagePurpose: LIBRARY
478478
PackageSupplier: Organization: The pyOpenSSL developers ([email protected])
479-
PackageDownloadLocation: https://pypi.org/project/pyOpenSSL/23.2.0
479+
PackageDownloadLocation: https://pypi.org/project/pyOpenSSL/23.3.0
480480
FilesAnalyzed: false
481481
PackageLicenseDeclared: NOASSERTION
482482
PackageLicenseConcluded: Apache-2.0
483483
PackageLicenseComments: <text>pyOpenSSL declares Apache License, Version 2.0 which is not currently a valid SPDX License identifier or expression.</text>
484484
PackageCopyrightText: NOASSERTION
485485
PackageSummary: <text>Python wrapper module around the OpenSSL library</text>
486-
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/pyopenssl@23.2.0
487-
ExternalRef: SECURITY cpe23Type cpe:2.3:a:the_pyopenssl_developers:pyopenssl:23.2.0:*:*:*:*:*:*:*
486+
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/pyopenssl@23.3.0
487+
ExternalRef: SECURITY cpe23Type cpe:2.3:a:the_pyopenssl_developers:pyopenssl:23.3.0:*:*:*:*:*:*:*
488488
#####
489489

490490
PackageName: cryptography
491491
SPDXID: SPDXRef-Package-32-cryptography
492-
PackageVersion: 41.0.4
492+
PackageVersion: 41.0.5
493493
PrimaryPackagePurpose: LIBRARY
494494
PackageSupplier: Organization: The Python Cryptographic Authority and individual contributors ([email protected])
495-
PackageDownloadLocation: https://pypi.org/project/cryptography/41.0.4
495+
PackageDownloadLocation: https://pypi.org/project/cryptography/41.0.5
496496
FilesAnalyzed: false
497497
PackageLicenseDeclared: Apache-2.0 OR BSD-3-Clause
498498
PackageLicenseConcluded: Apache-2.0 OR BSD-3-Clause
499499
PackageCopyrightText: NOASSERTION
500500
PackageSummary: <text>cryptography is a package which provides cryptographic recipes and primitives to Python developers.</text>
501-
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/[email protected].4
502-
ExternalRef: SECURITY cpe23Type cpe:2.3:a:the_python_cryptographic_authority_and_individual_contributors:cryptography:41.0.4:*:*:*:*:*:*:*
501+
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/[email protected].5
502+
ExternalRef: SECURITY cpe23Type cpe:2.3:a:the_python_cryptographic_authority_and_individual_contributors:cryptography:41.0.5:*:*:*:*:*:*:*
503503
#####
504504

505505
PackageName: cffi
@@ -582,17 +582,17 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:google_cloud_platform:google-auth:2.23
582582

583583
PackageName: cachetools
584584
SPDXID: SPDXRef-Package-38-cachetools
585-
PackageVersion: 5.3.1
585+
PackageVersion: 5.3.2
586586
PrimaryPackagePurpose: LIBRARY
587587
PackageSupplier: Person: Thomas Kemmer ([email protected])
588-
PackageDownloadLocation: https://pypi.org/project/cachetools/5.3.1
588+
PackageDownloadLocation: https://pypi.org/project/cachetools/5.3.2
589589
FilesAnalyzed: false
590590
PackageLicenseDeclared: MIT
591591
PackageLicenseConcluded: MIT
592592
PackageCopyrightText: NOASSERTION
593593
PackageSummary: <text>Extensible memoizing collections and decorators</text>
594-
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/[email protected].1
595-
ExternalRef: SECURITY cpe23Type cpe:2.3:a:thomas_kemmer:cachetools:5.3.1:*:*:*:*:*:*:*
594+
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/[email protected].2
595+
ExternalRef: SECURITY cpe23Type cpe:2.3:a:thomas_kemmer:cachetools:5.3.2:*:*:*:*:*:*:*
596596
#####
597597

598598
PackageName: monotonic
@@ -809,17 +809,17 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:donald_stufft_and_individual_contribut
809809

810810
PackageName: plotly
811811
SPDXID: SPDXRef-Package-53-plotly
812-
PackageVersion: 5.17.0
812+
PackageVersion: 5.18.0
813813
PrimaryPackagePurpose: LIBRARY
814814
PackageSupplier: Person: Chris P ([email protected])
815-
PackageDownloadLocation: https://pypi.org/project/plotly/5.17.0
815+
PackageDownloadLocation: https://pypi.org/project/plotly/5.18.0
816816
FilesAnalyzed: false
817817
PackageLicenseDeclared: MIT
818818
PackageLicenseConcluded: MIT
819819
PackageCopyrightText: NOASSERTION
820820
PackageSummary: <text>An open-source, interactive data visualization library for Python</text>
821-
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/plotly@5.17.0
822-
ExternalRef: SECURITY cpe23Type cpe:2.3:a:chris_p:plotly:5.17.0:*:*:*:*:*:*:*
821+
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/plotly@5.18.0
822+
ExternalRef: SECURITY cpe23Type cpe:2.3:a:chris_p:plotly:5.18.0:*:*:*:*:*:*:*
823823
#####
824824

825825
PackageName: tenacity

0 commit comments

Comments
 (0)