Skip to content

Commit 4ad7797

Browse files
github-actions[bot]web-flow
github-actions[bot]
and
web-flow
authored
chore: update SBOM for Python 3.11 (#3797)
Co-authored-by: GitHub <[email protected]>
1 parent 344bee8 commit 4ad7797

File tree

2 files changed

+99
-158
lines changed

2 files changed

+99
-158
lines changed

‎sbom/cve-bin-tool-py3.11.json

Lines changed: 60 additions & 103 deletions
Original file line numberDiff line numberDiff line change
@@ -2,10 +2,10 @@
22
"$schema": "http://cyclonedx.org/schema/bom-1.5.schema.json",
33
"bomFormat": "CycloneDX",
44
"specVersion": "1.5",
5-
"serialNumber": "urn:uuid:02495323-7eae-48c7-b120-c85429d63669",
5+
"serialNumber": "urn:uuid:2c51a0ce-1204-4492-9e3d-37c313400a75",
66
"version": 1,
77
"metadata": {
8-
"timestamp": "2024-01-29T00:27:03Z",
8+
"timestamp": "2024-02-06T18:37:48Z",
99
"tools": {
1010
"components": [
1111
{
@@ -37,6 +37,12 @@
3737
},
3838
"cpe": "cpe:2.3:a:terri_oda:cve-bin-tool:3.3rc2:*:*:*:*:*:*:*",
3939
"description": "CVE Binary Checker Tool",
40+
"hashes": [
41+
{
42+
"alg": "SHA-1",
43+
"content": "c491590aeea36235930d1c6b8480d2489a470ece"
44+
}
45+
],
4046
"licenses": [
4147
{
4248
"license": {
@@ -68,7 +74,7 @@
6874
"type": "library",
6975
"bom-ref": "2-aiohttp",
7076
"name": "aiohttp",
71-
"version": "3.9.2",
77+
"version": "3.9.3",
7278
"description": "Async http client/server framework (asyncio)",
7379
"licenses": [
7480
{
@@ -80,12 +86,12 @@
8086
],
8187
"externalReferences": [
8288
{
83-
"url": "https://pypi.org/project/aiohttp/3.9.2",
89+
"url": "https://pypi.org/project/aiohttp/3.9.3",
8490
"type": "distribution",
8591
"comment": "Download location for component"
8692
}
8793
],
88-
"purl": "pkg:pypi/[email protected].2",
94+
"purl": "pkg:pypi/[email protected].3",
8995
"properties": [
9096
{
9197
"name": "language",
@@ -218,7 +224,7 @@
218224
"type": "library",
219225
"bom-ref": "6-multidict",
220226
"name": "multidict",
221-
"version": "6.0.4",
227+
"version": "6.0.5",
222228
"supplier": {
223229
"name": "Andrew Svetlov",
224230
"contact": [
@@ -227,14 +233,8 @@
227233
}
228234
]
229235
},
230-
"cpe": "cpe:2.3:a:andrew_svetlov:multidict:6.0.4:*:*:*:*:*:*:*",
236+
"cpe": "cpe:2.3:a:andrew_svetlov:multidict:6.0.5:*:*:*:*:*:*:*",
231237
"description": "multidict implementation",
232-
"hashes": [
233-
{
234-
"alg": "SHA-1",
235-
"content": "47ac8a18ccfee3578c0a92a2651325fc9dd3ae72"
236-
}
237-
],
238238
"licenses": [
239239
{
240240
"license": {
@@ -245,12 +245,12 @@
245245
],
246246
"externalReferences": [
247247
{
248-
"url": "https://pypi.org/project/multidict/6.0.4",
248+
"url": "https://pypi.org/project/multidict/6.0.5",
249249
"type": "distribution",
250250
"comment": "Download location for component"
251251
}
252252
],
253-
"purl": "pkg:pypi/[email protected].4",
253+
"purl": "pkg:pypi/[email protected].5",
254254
"properties": [
255255
{
256256
"name": "language",
@@ -1343,7 +1343,7 @@
13431343
"type": "library",
13441344
"bom-ref": "30-cryptography",
13451345
"name": "cryptography",
1346-
"version": "42.0.1",
1346+
"version": "42.0.2",
13471347
"supplier": {
13481348
"name": "The Python Cryptographic Authority and individual contributors",
13491349
"contact": [
@@ -1352,7 +1352,7 @@
13521352
}
13531353
]
13541354
},
1355-
"cpe": "cpe:2.3:a:the_python_cryptographic_authority_and_individual_contributors:cryptography:42.0.1:*:*:*:*:*:*:*",
1355+
"cpe": "cpe:2.3:a:the_python_cryptographic_authority_and_individual_contributors:cryptography:42.0.2:*:*:*:*:*:*:*",
13561356
"description": "cryptography is a package which provides cryptographic recipes and primitives to Python developers.",
13571357
"licenses": [
13581358
{
@@ -1361,12 +1361,12 @@
13611361
],
13621362
"externalReferences": [
13631363
{
1364-
"url": "https://pypi.org/project/cryptography/42.0.1",
1364+
"url": "https://pypi.org/project/cryptography/42.0.2",
13651365
"type": "distribution",
13661366
"comment": "Download location for component"
13671367
}
13681368
],
1369-
"purl": "pkg:pypi/[email protected].1",
1369+
"purl": "pkg:pypi/[email protected].2",
13701370
"properties": [
13711371
{
13721372
"name": "language",
@@ -1730,6 +1730,12 @@
17301730
"name": "jinja2",
17311731
"version": "3.1.3",
17321732
"description": "A very fast and expressive template engine.",
1733+
"hashes": [
1734+
{
1735+
"alg": "SHA-1",
1736+
"content": "d9de4bb215fd1cc8092a410fb834c7c4060b1fc1"
1737+
}
1738+
],
17331739
"licenses": [
17341740
{
17351741
"license": {
@@ -1761,12 +1767,12 @@
17611767
"type": "library",
17621768
"bom-ref": "39-markupsafe",
17631769
"name": "markupsafe",
1764-
"version": "2.1.4",
1770+
"version": "2.1.5",
17651771
"description": "Safely add untrusted strings to HTML/XML markup.",
17661772
"hashes": [
17671773
{
17681774
"alg": "SHA-1",
1769-
"content": "b7cd6523579ea5a08d89799f2a64ec2c2bc45eca"
1775+
"content": "fbba4acd0312826cec9cfe18371c7df07962cb65"
17701776
}
17711777
],
17721778
"licenses": [
@@ -1779,12 +1785,12 @@
17791785
],
17801786
"externalReferences": [
17811787
{
1782-
"url": "https://pypi.org/project/MarkupSafe/2.1.4",
1788+
"url": "https://pypi.org/project/MarkupSafe/2.1.5",
17831789
"type": "distribution",
17841790
"comment": "Download location for component"
17851791
}
17861792
],
1787-
"purl": "pkg:pypi/[email protected].4",
1793+
"purl": "pkg:pypi/[email protected].5",
17881794
"properties": [
17891795
{
17901796
"name": "language",
@@ -1965,6 +1971,12 @@
19651971
},
19661972
"cpe": "cpe:2.3:a:anthony_harrison:lib4sbom:0.6.1:*:*:*:*:*:*:*",
19671973
"description": "Software Bill of Material (SBOM) generator and consumer library",
1974+
"hashes": [
1975+
{
1976+
"alg": "SHA-1",
1977+
"content": "45c891cb64148f16f722fbc39b12b7f1fb253a57"
1978+
}
1979+
],
19681980
"licenses": [
19691981
{
19701982
"license": {
@@ -2377,7 +2389,7 @@
23772389
"type": "library",
23782390
"bom-ref": "53-certifi",
23792391
"name": "certifi",
2380-
"version": "2023.11.17",
2392+
"version": "2024.2.2",
23812393
"supplier": {
23822394
"name": "Kenneth Reitz",
23832395
"contact": [
@@ -2386,14 +2398,8 @@
23862398
}
23872399
]
23882400
},
2389-
"cpe": "cpe:2.3:a:kenneth_reitz:certifi:2023.11.17:*:*:*:*:*:*:*",
2401+
"cpe": "cpe:2.3:a:kenneth_reitz:certifi:2024.2.2:*:*:*:*:*:*:*",
23902402
"description": "Python package for providing Mozilla's CA Bundle.",
2391-
"hashes": [
2392-
{
2393-
"alg": "SHA-1",
2394-
"content": "515962b01a24501c912c26ccced7ef8b47f81553"
2395-
}
2396-
],
23972403
"licenses": [
23982404
{
23992405
"license": {
@@ -2404,12 +2410,12 @@
24042410
],
24052411
"externalReferences": [
24062412
{
2407-
"url": "https://pypi.org/project/certifi/2023.11.17",
2413+
"url": "https://pypi.org/project/certifi/2024.2.2",
24082414
"type": "distribution",
24092415
"comment": "Download location for component"
24102416
}
24112417
],
2412-
"purl": "pkg:pypi/certifi@2023.11.17",
2418+
"purl": "pkg:pypi/certifi@2024.2.2",
24132419
"properties": [
24142420
{
24152421
"name": "language",
@@ -2436,6 +2442,12 @@
24362442
},
24372443
"cpe": "cpe:2.3:a:ahmed_tahri:charset-normalizer:3.3.2:*:*:*:*:*:*:*",
24382444
"description": "The Real First Universal Charset Detector. Open, modern and actively maintained alternative to Chardet.",
2445+
"hashes": [
2446+
{
2447+
"alg": "SHA-1",
2448+
"content": "79dce4857914fead2ffe55eb787cad6d5cf14643"
2449+
}
2450+
],
24392451
"licenses": [
24402452
{
24412453
"license": {
@@ -2467,7 +2479,7 @@
24672479
"type": "library",
24682480
"bom-ref": "55-urllib3",
24692481
"name": "urllib3",
2470-
"version": "2.1.0",
2482+
"version": "2.2.0",
24712483
"supplier": {
24722484
"name": "Andrey Petrov",
24732485
"contact": [
@@ -2476,22 +2488,16 @@
24762488
}
24772489
]
24782490
},
2479-
"cpe": "cpe:2.3:a:andrey_petrov:urllib3:2.1.0:*:*:*:*:*:*:*",
2491+
"cpe": "cpe:2.3:a:andrey_petrov:urllib3:2.2.0:*:*:*:*:*:*:*",
24802492
"description": "HTTP library with thread-safe connection pooling, file post, and more.",
2481-
"hashes": [
2482-
{
2483-
"alg": "SHA-1",
2484-
"content": "69be2992f8a25a1f27e49f339e4d5b98dec07462"
2485-
}
2486-
],
24872493
"externalReferences": [
24882494
{
2489-
"url": "https://pypi.org/project/urllib3/2.1.0",
2495+
"url": "https://pypi.org/project/urllib3/2.2.0",
24902496
"type": "distribution",
24912497
"comment": "Download location for component"
24922498
}
24932499
],
2494-
"purl": "pkg:pypi/urllib3@2.1.0",
2500+
"purl": "pkg:pypi/urllib3@2.2.0",
24952501
"properties": [
24962502
{
24972503
"name": "language",
@@ -2717,55 +2723,7 @@
27172723
},
27182724
{
27192725
"type": "library",
2720-
"bom-ref": "61-toml",
2721-
"name": "toml",
2722-
"version": "0.10.2",
2723-
"supplier": {
2724-
"name": "William Pearson",
2725-
"contact": [
2726-
{
2727-
"email": "[email protected]"
2728-
}
2729-
]
2730-
},
2731-
"cpe": "cpe:2.3:a:william_pearson:toml:0.10.2:*:*:*:*:*:*:*",
2732-
"description": "Python Library for Tom's Obvious, Minimal Language",
2733-
"hashes": [
2734-
{
2735-
"alg": "SHA-1",
2736-
"content": "3f637dba5f68db63d4b30967fedda51c82459471"
2737-
}
2738-
],
2739-
"licenses": [
2740-
{
2741-
"license": {
2742-
"id": "MIT",
2743-
"url": "https://opensource.org/licenses/MIT"
2744-
}
2745-
}
2746-
],
2747-
"externalReferences": [
2748-
{
2749-
"url": "https://pypi.org/project/toml/0.10.2",
2750-
"type": "distribution",
2751-
"comment": "Download location for component"
2752-
}
2753-
],
2754-
"purl": "pkg:pypi/[email protected]",
2755-
"properties": [
2756-
{
2757-
"name": "language",
2758-
"value": "Python"
2759-
},
2760-
{
2761-
"name": "python_version",
2762-
"value": "3.11.7"
2763-
}
2764-
]
2765-
},
2766-
{
2767-
"type": "library",
2768-
"bom-ref": "62-xmlschema",
2726+
"bom-ref": "61-xmlschema",
27692727
"name": "xmlschema",
27702728
"version": "3.0.1",
27712729
"supplier": {
@@ -2807,9 +2765,9 @@
28072765
},
28082766
{
28092767
"type": "library",
2810-
"bom-ref": "63-elementpath",
2768+
"bom-ref": "62-elementpath",
28112769
"name": "elementpath",
2812-
"version": "4.1.5",
2770+
"version": "4.2.0",
28132771
"supplier": {
28142772
"name": "Davide Brunato",
28152773
"contact": [
@@ -2818,7 +2776,7 @@
28182776
}
28192777
]
28202778
},
2821-
"cpe": "cpe:2.3:a:davide_brunato:elementpath:4.1.5:*:*:*:*:*:*:*",
2779+
"cpe": "cpe:2.3:a:davide_brunato:elementpath:4.2.0:*:*:*:*:*:*:*",
28222780
"description": "XPath 1.0/2.0/3.0/3.1 parsers and selectors for ElementTree and lxml",
28232781
"licenses": [
28242782
{
@@ -2830,12 +2788,12 @@
28302788
],
28312789
"externalReferences": [
28322790
{
2833-
"url": "https://pypi.org/project/elementpath/4.1.5",
2791+
"url": "https://pypi.org/project/elementpath/4.2.0",
28342792
"type": "distribution",
28352793
"comment": "Download location for component"
28362794
}
28372795
],
2838-
"purl": "pkg:pypi/elementpath@4.1.5",
2796+
"purl": "pkg:pypi/elementpath@4.2.0",
28392797
"properties": [
28402798
{
28412799
"name": "language",
@@ -2849,7 +2807,7 @@
28492807
},
28502808
{
28512809
"type": "library",
2852-
"bom-ref": "64-zstandard",
2810+
"bom-ref": "63-zstandard",
28532811
"name": "zstandard",
28542812
"version": "0.22.0",
28552813
"supplier": {
@@ -2921,10 +2879,9 @@
29212879
"52-requests",
29222880
"56-rich",
29232881
"60-rpmfile",
2924-
"61-toml",
29252882
"55-urllib3",
2926-
"62-xmlschema",
2927-
"64-zstandard"
2883+
"61-xmlschema",
2884+
"63-zstandard"
29282885
]
29292886
},
29302887
{
@@ -3127,9 +3084,9 @@
31273084
]
31283085
},
31293086
{
3130-
"ref": "62-xmlschema",
3087+
"ref": "61-xmlschema",
31313088
"dependsOn": [
3132-
"63-elementpath"
3089+
"62-elementpath"
31333090
]
31343091
}
31353092
]

0 commit comments

Comments
 (0)