Skip to content

Commit 6d7f355

Browse files
web-flowgithub-actions[bot]
web-flow
authored and
github-actions[bot]
committed
chore: update SBOM for Python 3.9
1 parent 1d15256 commit 6d7f355

File tree

2 files changed

+78
-99
lines changed

2 files changed

+78
-99
lines changed

‎sbom/cve-bin-tool-py3.9.json‎

Lines changed: 39 additions & 57 deletions
Original file line numberDiff line numberDiff line change
@@ -2,10 +2,10 @@
22
"$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
33
"bomFormat": "CycloneDX",
44
"specVersion": "1.6",
5-
"serialNumber": "urn:uuid:315f2a51-50c8-4ce3-85a6-4d80347c618d",
5+
"serialNumber": "urn:uuid:166cc978-28f5-43a1-be48-ea7d2c683d92",
66
"version": 1,
77
"metadata": {
8-
"timestamp": "2024-07-01T00:32:36Z",
8+
"timestamp": "2024-07-22T00:30:13Z",
99
"tools": {
1010
"components": [
1111
{
@@ -965,7 +965,7 @@
965965
"type": "library",
966966
"bom-ref": "23-cachetools",
967967
"name": "cachetools",
968-
"version": "5.3.3",
968+
"version": "5.4.0",
969969
"supplier": {
970970
"name": "Thomas Kemmer",
971971
"contact": [
@@ -974,7 +974,7 @@
974974
}
975975
]
976976
},
977-
"cpe": "cpe:2.3:a:thomas_kemmer:cachetools:5.3.3:*:*:*:*:*:*:*",
977+
"cpe": "cpe:2.3:a:thomas_kemmer:cachetools:5.4.0:*:*:*:*:*:*:*",
978978
"description": "Extensible memoizing collections and decorators",
979979
"licenses": [
980980
{
@@ -986,12 +986,12 @@
986986
],
987987
"externalReferences": [
988988
{
989-
"url": "https://pypi.org/project/cachetools/5.3.3",
989+
"url": "https://pypi.org/project/cachetools/5.4.0",
990990
"type": "distribution",
991991
"comment": "Download location for component"
992992
}
993993
],
994-
"purl": "pkg:pypi/cachetools@5.3.3",
994+
"purl": "pkg:pypi/cachetools@5.4.0",
995995
"properties": [
996996
{
997997
"name": "language",
@@ -1466,7 +1466,7 @@
14661466
"type": "library",
14671467
"bom-ref": "34-pyopenssl",
14681468
"name": "pyopenssl",
1469-
"version": "24.1.0",
1469+
"version": "24.2.1",
14701470
"supplier": {
14711471
"name": "The pyOpenSSL developers",
14721472
"contact": [
@@ -1475,14 +1475,8 @@
14751475
}
14761476
]
14771477
},
1478-
"cpe": "cpe:2.3:a:the_pyopenssl_developers:pyopenssl:24.1.0:*:*:*:*:*:*:*",
1478+
"cpe": "cpe:2.3:a:the_pyopenssl_developers:pyopenssl:24.2.1:*:*:*:*:*:*:*",
14791479
"description": "Python wrapper module around the OpenSSL library",
1480-
"hashes": [
1481-
{
1482-
"alg": "SHA-1",
1483-
"content": "d9f2c46de70c1aee20a4309424d9f506b7aae68e"
1484-
}
1485-
],
14861480
"licenses": [
14871481
{
14881482
"license": {
@@ -1493,12 +1487,12 @@
14931487
],
14941488
"externalReferences": [
14951489
{
1496-
"url": "https://pypi.org/project/pyOpenSSL/24.1.0",
1490+
"url": "https://pypi.org/project/pyOpenSSL/24.2.1",
14971491
"type": "distribution",
14981492
"comment": "Download location for component"
14991493
}
15001494
],
1501-
"purl": "pkg:pypi/pyopenssl@24.1.0",
1495+
"purl": "pkg:pypi/pyopenssl@24.2.1",
15021496
"properties": [
15031497
{
15041498
"name": "language",
@@ -1514,16 +1508,16 @@
15141508
"type": "library",
15151509
"bom-ref": "35-cryptography",
15161510
"name": "cryptography",
1517-
"version": "42.0.8",
1511+
"version": "43.0.0",
15181512
"supplier": {
1519-
"name": "The Python Cryptographic Authority and individual contributors",
1513+
"name": "The cryptography developers The Python Cryptographic Authority and individual contributors",
15201514
"contact": [
15211515
{
15221516
"email": "[email protected]"
15231517
}
15241518
]
15251519
},
1526-
"cpe": "cpe:2.3:a:the_python_cryptographic_authority_and_individual_contributors:cryptography:42.0.8:*:*:*:*:*:*:*",
1520+
"cpe": "cpe:2.3:a:the_cryptography_developers_the_python_cryptographic_authority_and_individual_contributors:cryptography:43.0.0:*:*:*:*:*:*:*",
15271521
"description": "cryptography is a package which provides cryptographic recipes and primitives to Python developers.",
15281522
"licenses": [
15291523
{
@@ -1532,12 +1526,12 @@
15321526
],
15331527
"externalReferences": [
15341528
{
1535-
"url": "https://pypi.org/project/cryptography/42.0.8",
1529+
"url": "https://pypi.org/project/cryptography/43.0.0",
15361530
"type": "distribution",
15371531
"comment": "Download location for component"
15381532
}
15391533
],
1540-
"purl": "pkg:pypi/cryptography@42.0.8",
1534+
"purl": "pkg:pypi/cryptography@43.0.0",
15411535
"properties": [
15421536
{
15431537
"name": "language",
@@ -1925,11 +1919,11 @@
19251919
"type": "library",
19261920
"bom-ref": "45-jsonschema",
19271921
"name": "jsonschema",
1928-
"version": "4.22.0",
1922+
"version": "4.23.0",
19291923
"supplier": {
19301924
"name": "Julian Berman"
19311925
},
1932-
"cpe": "cpe:2.3:a:julian_berman:jsonschema:4.22.0:*:*:*:*:*:*:*",
1926+
"cpe": "cpe:2.3:a:julian_berman:jsonschema:4.23.0:*:*:*:*:*:*:*",
19331927
"description": "An implementation of JSON Schema validation for Python",
19341928
"licenses": [
19351929
{
@@ -1941,12 +1935,12 @@
19411935
],
19421936
"externalReferences": [
19431937
{
1944-
"url": "https://pypi.org/project/jsonschema/4.22.0",
1938+
"url": "https://pypi.org/project/jsonschema/4.23.0",
19451939
"type": "distribution",
19461940
"comment": "Download location for component"
19471941
}
19481942
],
1949-
"purl": "pkg:pypi/jsonschema@4.22.0",
1943+
"purl": "pkg:pypi/jsonschema@4.23.0",
19501944
"properties": [
19511945
{
19521946
"name": "language",
@@ -2034,11 +2028,11 @@
20342028
"type": "library",
20352029
"bom-ref": "48-rpds-py",
20362030
"name": "rpds-py",
2037-
"version": "0.18.1",
2031+
"version": "0.19.0",
20382032
"supplier": {
20392033
"name": "Julian Berman"
20402034
},
2041-
"cpe": "cpe:2.3:a:julian_berman:rpds-py:0.18.1:*:*:*:*:*:*:*",
2035+
"cpe": "cpe:2.3:a:julian_berman:rpds-py:0.19.0:*:*:*:*:*:*:*",
20422036
"description": "Python bindings to Rust's persistent data structures (rpds)",
20432037
"licenses": [
20442038
{
@@ -2050,12 +2044,12 @@
20502044
],
20512045
"externalReferences": [
20522046
{
2053-
"url": "https://pypi.org/project/rpds-py/0.18.1",
2047+
"url": "https://pypi.org/project/rpds-py/0.19.0",
20542048
"type": "distribution",
20552049
"comment": "Download location for component"
20562050
}
20572051
],
2058-
"purl": "pkg:pypi/rpds-py@0.18.1",
2052+
"purl": "pkg:pypi/rpds-py@0.19.0",
20592053
"properties": [
20602054
{
20612055
"name": "language",
@@ -2311,18 +2305,12 @@
23112305
"type": "library",
23122306
"bom-ref": "54-packageurl-python",
23132307
"name": "packageurl-python",
2314-
"version": "0.15.1",
2308+
"version": "0.15.4",
23152309
"supplier": {
23162310
"name": "the purl authors"
23172311
},
2318-
"cpe": "cpe:2.3:a:the_purl_authors:packageurl-python:0.15.1:*:*:*:*:*:*:*",
2312+
"cpe": "cpe:2.3:a:the_purl_authors:packageurl-python:0.15.4:*:*:*:*:*:*:*",
23192313
"description": "A purl aka. Package URL parser and builder",
2320-
"hashes": [
2321-
{
2322-
"alg": "SHA-1",
2323-
"content": "b744d07798b8aa1454f949e17d89791a18d85b0e"
2324-
}
2325-
],
23262314
"licenses": [
23272315
{
23282316
"license": {
@@ -2333,12 +2321,12 @@
23332321
],
23342322
"externalReferences": [
23352323
{
2336-
"url": "https://pypi.org/project/packageurl-python/0.15.1",
2324+
"url": "https://pypi.org/project/packageurl-python/0.15.4",
23372325
"type": "distribution",
23382326
"comment": "Download location for component"
23392327
}
23402328
],
2341-
"purl": "pkg:pypi/[email protected].1",
2329+
"purl": "pkg:pypi/[email protected].4",
23422330
"properties": [
23432331
{
23442332
"name": "language",
@@ -2600,7 +2588,7 @@
26002588
"type": "library",
26012589
"bom-ref": "61-tenacity",
26022590
"name": "tenacity",
2603-
"version": "8.4.2",
2591+
"version": "8.5.0",
26042592
"supplier": {
26052593
"name": "Julien Danjou",
26062594
"contact": [
@@ -2609,7 +2597,7 @@
26092597
}
26102598
]
26112599
},
2612-
"cpe": "cpe:2.3:a:julien_danjou:tenacity:8.4.2:*:*:*:*:*:*:*",
2600+
"cpe": "cpe:2.3:a:julien_danjou:tenacity:8.5.0:*:*:*:*:*:*:*",
26132601
"description": "Retry code until it succeeds",
26142602
"licenses": [
26152603
{
@@ -2621,12 +2609,12 @@
26212609
],
26222610
"externalReferences": [
26232611
{
2624-
"url": "https://pypi.org/project/tenacity/8.4.2",
2612+
"url": "https://pypi.org/project/tenacity/8.5.0",
26252613
"type": "distribution",
26262614
"comment": "Download location for component"
26272615
}
26282616
],
2629-
"purl": "pkg:pypi/tenacity@8.4.2",
2617+
"purl": "pkg:pypi/tenacity@8.5.0",
26302618
"properties": [
26312619
{
26322620
"name": "language",
@@ -2738,7 +2726,7 @@
27382726
"type": "library",
27392727
"bom-ref": "64-certifi",
27402728
"name": "certifi",
2741-
"version": "2024.6.2",
2729+
"version": "2024.7.4",
27422730
"supplier": {
27432731
"name": "Kenneth Reitz",
27442732
"contact": [
@@ -2747,7 +2735,7 @@
27472735
}
27482736
]
27492737
},
2750-
"cpe": "cpe:2.3:a:kenneth_reitz:certifi:2024.6.2:*:*:*:*:*:*:*",
2738+
"cpe": "cpe:2.3:a:kenneth_reitz:certifi:2024.7.4:*:*:*:*:*:*:*",
27512739
"description": "Python package for providing Mozilla's CA Bundle.",
27522740
"licenses": [
27532741
{
@@ -2759,12 +2747,12 @@
27592747
],
27602748
"externalReferences": [
27612749
{
2762-
"url": "https://pypi.org/project/certifi/2024.6.2",
2750+
"url": "https://pypi.org/project/certifi/2024.7.4",
27632751
"type": "distribution",
27642752
"comment": "Download location for component"
27652753
}
27662754
],
2767-
"purl": "pkg:pypi/certifi@2024.6.2",
2755+
"purl": "pkg:pypi/certifi@2024.7.4",
27682756
"properties": [
27692757
{
27702758
"name": "language",
@@ -3048,7 +3036,7 @@
30483036
"type": "library",
30493037
"bom-ref": "71-zstandard",
30503038
"name": "zstandard",
3051-
"version": "0.22.0",
3039+
"version": "0.23.0",
30523040
"supplier": {
30533041
"name": "Gregory Szorc",
30543042
"contact": [
@@ -3057,14 +3045,8 @@
30573045
}
30583046
]
30593047
},
3060-
"cpe": "cpe:2.3:a:gregory_szorc:zstandard:0.22.0:*:*:*:*:*:*:*",
3048+
"cpe": "cpe:2.3:a:gregory_szorc:zstandard:0.23.0:*:*:*:*:*:*:*",
30613049
"description": "Zstandard bindings for Python",
3062-
"hashes": [
3063-
{
3064-
"alg": "SHA-1",
3065-
"content": "255b579735f26c2d0e08257f632de75d2ab882cf"
3066-
}
3067-
],
30683050
"licenses": [
30693051
{
30703052
"license": {
@@ -3075,12 +3057,12 @@
30753057
],
30763058
"externalReferences": [
30773059
{
3078-
"url": "https://pypi.org/project/zstandard/0.22.0",
3060+
"url": "https://pypi.org/project/zstandard/0.23.0",
30793061
"type": "distribution",
30803062
"comment": "Download location for component"
30813063
}
30823064
],
3083-
"purl": "pkg:pypi/zstandard@0.22.0",
3065+
"purl": "pkg:pypi/zstandard@0.23.0",
30843066
"properties": [
30853067
{
30863068
"name": "language",

0 commit comments

Comments
 (0)