Skip to content

Commit

Permalink
chore: update SBOM for Python 3.8 (#4232)
Browse files Browse the repository at this point in the history 
Co-authored-by: GitHub <[email protected]>
  • Loading branch information
@github-actions @web-flow
github-actions[bot] and web-flow authored Jul 2, 2024
1 parent 20781f3 commit d9e1fa9
Show file tree
Hide file tree
Showing 2 changed files with 27 additions and 20 deletions.
26 changes: 16 additions & 10 deletions sbom/cve-bin-tool-py3.8.json
View file
Original file line number Diff line number Diff line change
Expand Up @@ -2,10 +2,10 @@
"$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
"bomFormat": "CycloneDX",
"specVersion": "1.6",
"serialNumber": "urn:uuid:ace3d1ef-b123-40c1-ae05-d46823eaa9b4",
"serialNumber": "urn:uuid:732e2995-c1d4-4acb-b56e-c6d11b6e164d",
"version": 1,
"metadata": {
"timestamp": "2024-06-24T00:29:54Z",
"timestamp": "2024-07-01T00:32:38Z",
"tools": {
"components": [
{
Expand Down Expand Up @@ -1793,7 +1793,7 @@
"type": "library",
"bom-ref": "41-importlib-metadata",
"name": "importlib-metadata",
"version": "7.2.1",
"version": "8.0.0",
"supplier": {
"name": "Jason R .",
"contact": [
Expand All @@ -1802,16 +1802,16 @@
}
]
},
"cpe": "cpe:2.3:a:jason_r.:importlib-metadata:7.2.1:*:*:*:*:*:*:*",
"cpe": "cpe:2.3:a:jason_r.:importlib-metadata:8.0.0:*:*:*:*:*:*:*",
"description": "Read metadata from Python packages",
"externalReferences": [
{
"url": "https://pypi.org/project/importlib_metadata/7.2.1",
"url": "https://pypi.org/project/importlib_metadata/8.0.0",
"type": "distribution",
"comment": "Download location for component"
}
],
"purl": "pkg:pypi/importlib-metadata@7.2.1",
"purl": "pkg:pypi/importlib-metadata@8.0.0",
"properties": [
{
"name": "language",
Expand Down Expand Up @@ -2708,7 +2708,7 @@
"type": "library",
"bom-ref": "64-tenacity",
"name": "tenacity",
"version": "8.4.1",
"version": "8.4.2",
"supplier": {
"name": "Julien Danjou",
"contact": [
Expand All @@ -2717,7 +2717,7 @@
}
]
},
"cpe": "cpe:2.3:a:julien_danjou:tenacity:8.4.1:*:*:*:*:*:*:*",
"cpe": "cpe:2.3:a:julien_danjou:tenacity:8.4.2:*:*:*:*:*:*:*",
"description": "Retry code until it succeeds",
"licenses": [
{
Expand All @@ -2729,12 +2729,12 @@
],
"externalReferences": [
{
"url": "https://pypi.org/project/tenacity/8.4.1",
"url": "https://pypi.org/project/tenacity/8.4.2",
"type": "distribution",
"comment": "Download location for component"
}
],
"purl": "pkg:pypi/[email protected].1",
"purl": "pkg:pypi/[email protected].2",
"properties": [
{
"name": "language",
Expand Down Expand Up @@ -3119,6 +3119,12 @@
},
"cpe": "cpe:2.3:a:davide_brunato:elementpath:4.4.0:*:*:*:*:*:*:*",
"description": "XPath 1.0/2.0/3.0/3.1 parsers and selectors for ElementTree and lxml",
"hashes": [
{
"alg": "SHA-1",
"content": "004fca18366974c34193176bd3a356f711330ca0"
}
],
"licenses": [
{
"license": {
Expand Down
21 changes: 11 additions & 10 deletions sbom/cve-bin-tool-py3.8.spdx
View file
Original file line number Diff line number Diff line change
Expand Up @@ -2,10 +2,10 @@ SPDXVersion: SPDX-2.3
DataLicense: CC0-1.0
SPDXID: SPDXRef-DOCUMENT
DocumentName: Python-cve-bin-tool
DocumentNamespace: http://spdx.org/spdxdocs/Python-cve-bin-tool-5be2bc4b-f980-4b57-a553-d22cca50c597
DocumentNamespace: http://spdx.org/spdxdocs/Python-cve-bin-tool-82c2354a-78f3-44a1-9da4-6b9882af616e
LicenseListVersion: 3.22
Creator: Tool: sbom4python-0.10.4
Created: 2024-06-24T00:28:51Z
Created: 2024-07-01T00:31:35Z
CreatorComment: <text>This document has been automatically generated.</text>
#####

Expand Down Expand Up @@ -654,17 +654,17 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:ori_livneh:monotonic:1.6:*:*:*:*:*:*:*

PackageName: importlib-metadata
SPDXID: SPDXRef-Package-41-importlib-metadata
PackageVersion: 7.2.1
PackageVersion: 8.0.0
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Organization: Jason R. ([email protected])
PackageDownloadLocation: https://pypi.org/project/importlib_metadata/7.2.1
PackageDownloadLocation: https://pypi.org/project/importlib_metadata/8.0.0
FilesAnalyzed: false
PackageLicenseDeclared: NOASSERTION
PackageLicenseConcluded: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageSummary: <text>Read metadata from Python packages</text>
ExternalRef: PACKAGE_MANAGER purl pkg:pypi/importlib-metadata@7.2.1
ExternalRef: SECURITY cpe23Type cpe:2.3:a:jason_r.:importlib-metadata:7.2.1:*:*:*:*:*:*:*
ExternalRef: PACKAGE_MANAGER purl pkg:pypi/importlib-metadata@8.0.0
ExternalRef: SECURITY cpe23Type cpe:2.3:a:jason_r.:importlib-metadata:8.0.0:*:*:*:*:*:*:*
#####

PackageName: zipp
Expand Down Expand Up @@ -1010,18 +1010,18 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:chris_p:plotly:5.22.0:*:*:*:*:*:*:*

PackageName: tenacity
SPDXID: SPDXRef-Package-64-tenacity
PackageVersion: 8.4.1
PackageVersion: 8.4.2
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Person: Julien Danjou ([email protected])
PackageDownloadLocation: https://pypi.org/project/tenacity/8.4.1
PackageDownloadLocation: https://pypi.org/project/tenacity/8.4.2
FilesAnalyzed: false
PackageLicenseDeclared: NOASSERTION
PackageLicenseConcluded: Apache-2.0
PackageLicenseComments: <text>tenacity declares Apache 2.0 which is not currently a valid SPDX License identifier or expression.</text>
PackageCopyrightText: NOASSERTION
PackageSummary: <text>Retry code until it succeeds</text>
ExternalRef: PACKAGE_MANAGER purl pkg:pypi/[email protected].1
ExternalRef: SECURITY cpe23Type cpe:2.3:a:julien_danjou:tenacity:8.4.1:*:*:*:*:*:*:*
ExternalRef: PACKAGE_MANAGER purl pkg:pypi/[email protected].2
ExternalRef: SECURITY cpe23Type cpe:2.3:a:julien_danjou:tenacity:8.4.2:*:*:*:*:*:*:*
#####

PackageName: python-gnupg
Expand Down Expand Up @@ -1157,6 +1157,7 @@ PrimaryPackagePurpose: LIBRARY
PackageSupplier: Person: Davide Brunato ([email protected])
PackageDownloadLocation: https://pypi.org/project/elementpath/4.4.0
FilesAnalyzed: false
PackageChecksum: SHA1: 004fca18366974c34193176bd3a356f711330ca0
PackageLicenseDeclared: MIT
PackageLicenseConcluded: MIT
PackageCopyrightText: NOASSERTION
Expand Down

0 comments on commit d9e1fa9

Please sign in to comment.