Skip to content

Commit 9b305bb

Browse files
chore: update SBOM for Python 3.10 (#4142)
Co-authored-by: GitHub <[email protected]>
1 parent 64b562a commit 9b305bb

File tree

2 files changed

+13
-21
lines changed

2 files changed

+13
-21
lines changed

sbom/cve-bin-tool-py3.10.json

Lines changed: 6 additions & 12 deletions
Original file line numberDiff line numberDiff line change
@@ -2,10 +2,10 @@
22
"$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
33
"bomFormat": "CycloneDX",
44
"specVersion": "1.6",
5-
"serialNumber": "urn:uuid:6f0a7ce7-de20-4120-9766-3f133c57ee38",
5+
"serialNumber": "urn:uuid:b2dc5259-963f-4893-87ac-91f14b10d00c",
66
"version": 1,
77
"metadata": {
8-
"timestamp": "2024-05-20T00:28:21Z",
8+
"timestamp": "2024-05-27T00:28:44Z",
99
"tools": {
1010
"components": [
1111
{
@@ -2362,7 +2362,7 @@
23622362
"type": "library",
23632363
"bom-ref": "55-requests",
23642364
"name": "requests",
2365-
"version": "2.31.0",
2365+
"version": "2.32.2",
23662366
"supplier": {
23672367
"name": "Kenneth Reitz",
23682368
"contact": [
@@ -2371,14 +2371,8 @@
23712371
}
23722372
]
23732373
},
2374-
"cpe": "cpe:2.3:a:kenneth_reitz:requests:2.31.0:*:*:*:*:*:*:*",
2374+
"cpe": "cpe:2.3:a:kenneth_reitz:requests:2.32.2:*:*:*:*:*:*:*",
23752375
"description": "Python HTTP for Humans.",
2376-
"hashes": [
2377-
{
2378-
"alg": "SHA-1",
2379-
"content": "147c8511ddbfa5e8f71bbf5c18ede0c4ceb3bba4"
2380-
}
2381-
],
23822376
"licenses": [
23832377
{
23842378
"license": {
@@ -2389,12 +2383,12 @@
23892383
],
23902384
"externalReferences": [
23912385
{
2392-
"url": "https://pypi.org/project/requests/2.31.0",
2386+
"url": "https://pypi.org/project/requests/2.32.2",
23932387
"type": "distribution",
23942388
"comment": "Download location for component"
23952389
}
23962390
],
2397-
"purl": "pkg:pypi/requests@2.31.0",
2391+
"purl": "pkg:pypi/requests@2.32.2",
23982392
"properties": [
23992393
{
24002394
"name": "language",

sbom/cve-bin-tool-py3.10.spdx

Lines changed: 7 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -2,10 +2,10 @@ SPDXVersion: SPDX-2.3
22
DataLicense: CC0-1.0
33
SPDXID: SPDXRef-DOCUMENT
44
DocumentName: Python-cve-bin-tool
5-
DocumentNamespace: http://spdx.org/spdxdocs/Python-cve-bin-tool-68475ad9-59ac-45a0-aa18-f5fada8c42c1
5+
DocumentNamespace: http://spdx.org/spdxdocs/Python-cve-bin-tool-14a54b7e-c913-4e61-b581-813269f50967
66
LicenseListVersion: 3.22
77
Creator: Tool: sbom4python-0.10.4
8-
Created: 2024-05-20T00:26:49Z
8+
Created: 2024-05-27T00:27:21Z
99
CreatorComment: <text>This document has been automatically generated.</text>
1010
#####
1111

@@ -873,19 +873,17 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:vinay_sajip:python-gnupg:0.5.2:*:*:*:*
873873

874874
PackageName: requests
875875
SPDXID: SPDXRef-Package-55-requests
876-
PackageVersion: 2.31.0
876+
PackageVersion: 2.32.2
877877
PrimaryPackagePurpose: LIBRARY
878878
PackageSupplier: Person: Kenneth Reitz ([email protected])
879-
PackageDownloadLocation: https://pypi.org/project/requests/2.31.0
879+
PackageDownloadLocation: https://pypi.org/project/requests/2.32.2
880880
FilesAnalyzed: false
881-
PackageChecksum: SHA1: 147c8511ddbfa5e8f71bbf5c18ede0c4ceb3bba4
882-
PackageLicenseDeclared: NOASSERTION
881+
PackageLicenseDeclared: Apache-2.0
883882
PackageLicenseConcluded: Apache-2.0
884-
PackageLicenseComments: <text>requests declares Apache 2.0 which is not currently a valid SPDX License identifier or expression.</text>
885883
PackageCopyrightText: NOASSERTION
886884
PackageSummary: <text>Python HTTP for Humans.</text>
887-
ExternalRef: PACKAGE_MANAGER purl pkg:pypi/requests@2.31.0
888-
ExternalRef: SECURITY cpe23Type cpe:2.3:a:kenneth_reitz:requests:2.31.0:*:*:*:*:*:*:*
885+
ExternalRef: PACKAGE_MANAGER purl pkg:pypi/requests@2.32.2
886+
ExternalRef: SECURITY cpe23Type cpe:2.3:a:kenneth_reitz:requests:2.32.2:*:*:*:*:*:*:*
889887
#####
890888

891889
PackageName: certifi

0 commit comments

Comments
 (0)