Skip to content

Commit b4494d8

Browse files
web-flowgithub-actions[bot]
web-flow
authored and
github-actions[bot]
committed
chore: update SBOM for Python 3.12
1 parent 1d15256 commit b4494d8

File tree

2 files changed

+78
-99
lines changed

2 files changed

+78
-99
lines changed

‎sbom/cve-bin-tool-py3.12.json‎

Lines changed: 39 additions & 57 deletions
Original file line numberDiff line numberDiff line change
@@ -2,10 +2,10 @@
22
"$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
33
"bomFormat": "CycloneDX",
44
"specVersion": "1.6",
5-
"serialNumber": "urn:uuid:e27b5902-ba3a-444c-8a9d-845375e9619f",
5+
"serialNumber": "urn:uuid:a3da6c3d-8a6c-46c5-9e94-dc35cea8dfb9",
66
"version": 1,
77
"metadata": {
8-
"timestamp": "2024-07-01T00:32:44Z",
8+
"timestamp": "2024-07-22T00:30:14Z",
99
"tools": {
1010
"components": [
1111
{
@@ -917,7 +917,7 @@
917917
"type": "library",
918918
"bom-ref": "22-cachetools",
919919
"name": "cachetools",
920-
"version": "5.3.3",
920+
"version": "5.4.0",
921921
"supplier": {
922922
"name": "Thomas Kemmer",
923923
"contact": [
@@ -926,7 +926,7 @@
926926
}
927927
]
928928
},
929-
"cpe": "cpe:2.3:a:thomas_kemmer:cachetools:5.3.3:*:*:*:*:*:*:*",
929+
"cpe": "cpe:2.3:a:thomas_kemmer:cachetools:5.4.0:*:*:*:*:*:*:*",
930930
"description": "Extensible memoizing collections and decorators",
931931
"licenses": [
932932
{
@@ -938,12 +938,12 @@
938938
],
939939
"externalReferences": [
940940
{
941-
"url": "https://pypi.org/project/cachetools/5.3.3",
941+
"url": "https://pypi.org/project/cachetools/5.4.0",
942942
"type": "distribution",
943943
"comment": "Download location for component"
944944
}
945945
],
946-
"purl": "pkg:pypi/cachetools@5.3.3",
946+
"purl": "pkg:pypi/cachetools@5.4.0",
947947
"properties": [
948948
{
949949
"name": "language",
@@ -1418,7 +1418,7 @@
14181418
"type": "library",
14191419
"bom-ref": "33-pyopenssl",
14201420
"name": "pyopenssl",
1421-
"version": "24.1.0",
1421+
"version": "24.2.1",
14221422
"supplier": {
14231423
"name": "The pyOpenSSL developers",
14241424
"contact": [
@@ -1427,14 +1427,8 @@
14271427
}
14281428
]
14291429
},
1430-
"cpe": "cpe:2.3:a:the_pyopenssl_developers:pyopenssl:24.1.0:*:*:*:*:*:*:*",
1430+
"cpe": "cpe:2.3:a:the_pyopenssl_developers:pyopenssl:24.2.1:*:*:*:*:*:*:*",
14311431
"description": "Python wrapper module around the OpenSSL library",
1432-
"hashes": [
1433-
{
1434-
"alg": "SHA-1",
1435-
"content": "d9f2c46de70c1aee20a4309424d9f506b7aae68e"
1436-
}
1437-
],
14381432
"licenses": [
14391433
{
14401434
"license": {
@@ -1445,12 +1439,12 @@
14451439
],
14461440
"externalReferences": [
14471441
{
1448-
"url": "https://pypi.org/project/pyOpenSSL/24.1.0",
1442+
"url": "https://pypi.org/project/pyOpenSSL/24.2.1",
14491443
"type": "distribution",
14501444
"comment": "Download location for component"
14511445
}
14521446
],
1453-
"purl": "pkg:pypi/pyopenssl@24.1.0",
1447+
"purl": "pkg:pypi/pyopenssl@24.2.1",
14541448
"properties": [
14551449
{
14561450
"name": "language",
@@ -1466,16 +1460,16 @@
14661460
"type": "library",
14671461
"bom-ref": "34-cryptography",
14681462
"name": "cryptography",
1469-
"version": "42.0.8",
1463+
"version": "43.0.0",
14701464
"supplier": {
1471-
"name": "The Python Cryptographic Authority and individual contributors",
1465+
"name": "The cryptography developers The Python Cryptographic Authority and individual contributors",
14721466
"contact": [
14731467
{
14741468
"email": "[email protected]"
14751469
}
14761470
]
14771471
},
1478-
"cpe": "cpe:2.3:a:the_python_cryptographic_authority_and_individual_contributors:cryptography:42.0.8:*:*:*:*:*:*:*",
1472+
"cpe": "cpe:2.3:a:the_cryptography_developers_the_python_cryptographic_authority_and_individual_contributors:cryptography:43.0.0:*:*:*:*:*:*:*",
14791473
"description": "cryptography is a package which provides cryptographic recipes and primitives to Python developers.",
14801474
"licenses": [
14811475
{
@@ -1484,12 +1478,12 @@
14841478
],
14851479
"externalReferences": [
14861480
{
1487-
"url": "https://pypi.org/project/cryptography/42.0.8",
1481+
"url": "https://pypi.org/project/cryptography/43.0.0",
14881482
"type": "distribution",
14891483
"comment": "Download location for component"
14901484
}
14911485
],
1492-
"purl": "pkg:pypi/cryptography@42.0.8",
1486+
"purl": "pkg:pypi/cryptography@43.0.0",
14931487
"properties": [
14941488
{
14951489
"name": "language",
@@ -1809,11 +1803,11 @@
18091803
"type": "library",
18101804
"bom-ref": "42-jsonschema",
18111805
"name": "jsonschema",
1812-
"version": "4.22.0",
1806+
"version": "4.23.0",
18131807
"supplier": {
18141808
"name": "Julian Berman"
18151809
},
1816-
"cpe": "cpe:2.3:a:julian_berman:jsonschema:4.22.0:*:*:*:*:*:*:*",
1810+
"cpe": "cpe:2.3:a:julian_berman:jsonschema:4.23.0:*:*:*:*:*:*:*",
18171811
"description": "An implementation of JSON Schema validation for Python",
18181812
"licenses": [
18191813
{
@@ -1825,12 +1819,12 @@
18251819
],
18261820
"externalReferences": [
18271821
{
1828-
"url": "https://pypi.org/project/jsonschema/4.22.0",
1822+
"url": "https://pypi.org/project/jsonschema/4.23.0",
18291823
"type": "distribution",
18301824
"comment": "Download location for component"
18311825
}
18321826
],
1833-
"purl": "pkg:pypi/jsonschema@4.22.0",
1827+
"purl": "pkg:pypi/jsonschema@4.23.0",
18341828
"properties": [
18351829
{
18361830
"name": "language",
@@ -1918,11 +1912,11 @@
19181912
"type": "library",
19191913
"bom-ref": "45-rpds-py",
19201914
"name": "rpds-py",
1921-
"version": "0.18.1",
1915+
"version": "0.19.0",
19221916
"supplier": {
19231917
"name": "Julian Berman"
19241918
},
1925-
"cpe": "cpe:2.3:a:julian_berman:rpds-py:0.18.1:*:*:*:*:*:*:*",
1919+
"cpe": "cpe:2.3:a:julian_berman:rpds-py:0.19.0:*:*:*:*:*:*:*",
19261920
"description": "Python bindings to Rust's persistent data structures (rpds)",
19271921
"licenses": [
19281922
{
@@ -1934,12 +1928,12 @@
19341928
],
19351929
"externalReferences": [
19361930
{
1937-
"url": "https://pypi.org/project/rpds-py/0.18.1",
1931+
"url": "https://pypi.org/project/rpds-py/0.19.0",
19381932
"type": "distribution",
19391933
"comment": "Download location for component"
19401934
}
19411935
],
1942-
"purl": "pkg:pypi/rpds-py@0.18.1",
1936+
"purl": "pkg:pypi/rpds-py@0.19.0",
19431937
"properties": [
19441938
{
19451939
"name": "language",
@@ -2195,18 +2189,12 @@
21952189
"type": "library",
21962190
"bom-ref": "51-packageurl-python",
21972191
"name": "packageurl-python",
2198-
"version": "0.15.1",
2192+
"version": "0.15.4",
21992193
"supplier": {
22002194
"name": "the purl authors"
22012195
},
2202-
"cpe": "cpe:2.3:a:the_purl_authors:packageurl-python:0.15.1:*:*:*:*:*:*:*",
2196+
"cpe": "cpe:2.3:a:the_purl_authors:packageurl-python:0.15.4:*:*:*:*:*:*:*",
22032197
"description": "A purl aka. Package URL parser and builder",
2204-
"hashes": [
2205-
{
2206-
"alg": "SHA-1",
2207-
"content": "b744d07798b8aa1454f949e17d89791a18d85b0e"
2208-
}
2209-
],
22102198
"licenses": [
22112199
{
22122200
"license": {
@@ -2217,12 +2205,12 @@
22172205
],
22182206
"externalReferences": [
22192207
{
2220-
"url": "https://pypi.org/project/packageurl-python/0.15.1",
2208+
"url": "https://pypi.org/project/packageurl-python/0.15.4",
22212209
"type": "distribution",
22222210
"comment": "Download location for component"
22232211
}
22242212
],
2225-
"purl": "pkg:pypi/[email protected].1",
2213+
"purl": "pkg:pypi/[email protected].4",
22262214
"properties": [
22272215
{
22282216
"name": "language",
@@ -2484,7 +2472,7 @@
24842472
"type": "library",
24852473
"bom-ref": "58-tenacity",
24862474
"name": "tenacity",
2487-
"version": "8.4.2",
2475+
"version": "8.5.0",
24882476
"supplier": {
24892477
"name": "Julien Danjou",
24902478
"contact": [
@@ -2493,7 +2481,7 @@
24932481
}
24942482
]
24952483
},
2496-
"cpe": "cpe:2.3:a:julien_danjou:tenacity:8.4.2:*:*:*:*:*:*:*",
2484+
"cpe": "cpe:2.3:a:julien_danjou:tenacity:8.5.0:*:*:*:*:*:*:*",
24972485
"description": "Retry code until it succeeds",
24982486
"licenses": [
24992487
{
@@ -2505,12 +2493,12 @@
25052493
],
25062494
"externalReferences": [
25072495
{
2508-
"url": "https://pypi.org/project/tenacity/8.4.2",
2496+
"url": "https://pypi.org/project/tenacity/8.5.0",
25092497
"type": "distribution",
25102498
"comment": "Download location for component"
25112499
}
25122500
],
2513-
"purl": "pkg:pypi/tenacity@8.4.2",
2501+
"purl": "pkg:pypi/tenacity@8.5.0",
25142502
"properties": [
25152503
{
25162504
"name": "language",
@@ -2622,7 +2610,7 @@
26222610
"type": "library",
26232611
"bom-ref": "61-certifi",
26242612
"name": "certifi",
2625-
"version": "2024.6.2",
2613+
"version": "2024.7.4",
26262614
"supplier": {
26272615
"name": "Kenneth Reitz",
26282616
"contact": [
@@ -2631,7 +2619,7 @@
26312619
}
26322620
]
26332621
},
2634-
"cpe": "cpe:2.3:a:kenneth_reitz:certifi:2024.6.2:*:*:*:*:*:*:*",
2622+
"cpe": "cpe:2.3:a:kenneth_reitz:certifi:2024.7.4:*:*:*:*:*:*:*",
26352623
"description": "Python package for providing Mozilla's CA Bundle.",
26362624
"licenses": [
26372625
{
@@ -2643,12 +2631,12 @@
26432631
],
26442632
"externalReferences": [
26452633
{
2646-
"url": "https://pypi.org/project/certifi/2024.6.2",
2634+
"url": "https://pypi.org/project/certifi/2024.7.4",
26472635
"type": "distribution",
26482636
"comment": "Download location for component"
26492637
}
26502638
],
2651-
"purl": "pkg:pypi/certifi@2024.6.2",
2639+
"purl": "pkg:pypi/certifi@2024.7.4",
26522640
"properties": [
26532641
{
26542642
"name": "language",
@@ -2884,7 +2872,7 @@
28842872
"type": "library",
28852873
"bom-ref": "67-zstandard",
28862874
"name": "zstandard",
2887-
"version": "0.22.0",
2875+
"version": "0.23.0",
28882876
"supplier": {
28892877
"name": "Gregory Szorc",
28902878
"contact": [
@@ -2893,14 +2881,8 @@
28932881
}
28942882
]
28952883
},
2896-
"cpe": "cpe:2.3:a:gregory_szorc:zstandard:0.22.0:*:*:*:*:*:*:*",
2884+
"cpe": "cpe:2.3:a:gregory_szorc:zstandard:0.23.0:*:*:*:*:*:*:*",
28972885
"description": "Zstandard bindings for Python",
2898-
"hashes": [
2899-
{
2900-
"alg": "SHA-1",
2901-
"content": "255b579735f26c2d0e08257f632de75d2ab882cf"
2902-
}
2903-
],
29042886
"licenses": [
29052887
{
29062888
"license": {
@@ -2911,12 +2893,12 @@
29112893
],
29122894
"externalReferences": [
29132895
{
2914-
"url": "https://pypi.org/project/zstandard/0.22.0",
2896+
"url": "https://pypi.org/project/zstandard/0.23.0",
29152897
"type": "distribution",
29162898
"comment": "Download location for component"
29172899
}
29182900
],
2919-
"purl": "pkg:pypi/zstandard@0.22.0",
2901+
"purl": "pkg:pypi/zstandard@0.23.0",
29202902
"properties": [
29212903
{
29222904
"name": "language",

0 commit comments

Comments
 (0)