Skip to content

Commit 95a48fd

Browse files
github-actions[bot]web-flow
github-actions[bot]
and
web-flow
authored
chore: update SBOM for Python 3.11 (#2935)
Co-authored-by: GitHub <[email protected]>
1 parent 4153567 commit 95a48fd

File tree

2 files changed

+76
-83
lines changed

2 files changed

+76
-83
lines changed

‎sbom/cve-bin-tool-py3.11.json

+40-46
Original file line numberDiff line numberDiff line change
@@ -2,10 +2,10 @@
22
"$schema": "http://cyclonedx.org/schema/bom-1.4.schema.json",
33
"bomFormat": "CycloneDX",
44
"specVersion": "1.4",
5-
"serialNumber": "urn:uuid49931bea-602c-40b9-a69a-75989ac89a2c",
5+
"serialNumber": "urn:uuida3cd3ddd-ff48-4d46-b39a-aed26e3e1510",
66
"version": 1,
77
"metadata": {
8-
"timestamp": "2023-04-17T00:29:23Z",
8+
"timestamp": "2023-04-24T00:26:32Z",
99
"tools": [
1010
{
1111
"name": "sbom4python",
@@ -309,7 +309,7 @@
309309
"type": "library",
310310
"bom-ref": "9-yarl",
311311
"name": "yarl",
312-
"version": "1.8.2",
312+
"version": "1.9.1",
313313
"supplier": {
314314
"name": "Andrew Svetlov",
315315
"contact": [
@@ -318,7 +318,7 @@
318318
}
319319
]
320320
},
321-
"cpe": "cpe:2.3:a:andrew_svetlov:yarl:1.8.2:*:*:*:*:*:*:*",
321+
"cpe": "cpe:2.3:a:andrew_svetlov:yarl:1.9.1:*:*:*:*:*:*:*",
322322
"description": "Yet another URL library",
323323
"licenses": [
324324
{
@@ -335,18 +335,12 @@
335335
"comment": "Home page for project"
336336
},
337337
{
338-
"url": "https://pypi.org/project/yarl/1.8.2",
338+
"url": "https://pypi.org/project/yarl/1.9.1",
339339
"type": "distribution",
340340
"comment": "Download location for component"
341341
}
342342
],
343-
"purl": "pkg:pypi/[email protected]",
344-
"properties": [
345-
{
346-
"name": "License Comments",
347-
"value": "yarl declares Apache 2 which is not currently a valid SPDX License identifier or expression."
348-
}
349-
]
343+
"purl": "pkg:pypi/[email protected]"
350344
},
351345
{
352346
"type": "library",
@@ -596,7 +590,7 @@
596590
"type": "library",
597591
"bom-ref": "17-argcomplete",
598592
"name": "argcomplete",
599-
"version": "3.0.5",
593+
"version": "3.0.8",
600594
"supplier": {
601595
"name": "Andrey Kislyuk",
602596
"contact": [
@@ -605,7 +599,7 @@
605599
}
606600
]
607601
},
608-
"cpe": "cpe:2.3:a:andrey_kislyuk:argcomplete:3.0.5:*:*:*:*:*:*:*",
602+
"cpe": "cpe:2.3:a:andrey_kislyuk:argcomplete:3.0.8:*:*:*:*:*:*:*",
609603
"description": "Bash tab completion for argparse",
610604
"licenses": [
611605
{
@@ -622,12 +616,12 @@
622616
"comment": "Home page for project"
623617
},
624618
{
625-
"url": "https://pypi.org/project/argcomplete/3.0.5",
619+
"url": "https://pypi.org/project/argcomplete/3.0.8",
626620
"type": "distribution",
627621
"comment": "Download location for component"
628622
}
629623
],
630-
"purl": "pkg:pypi/[email protected].5",
624+
"purl": "pkg:pypi/[email protected].8",
631625
"properties": [
632626
{
633627
"name": "License Comments",
@@ -1021,7 +1015,7 @@
10211015
"type": "library",
10221016
"bom-ref": "28-pyasn1",
10231017
"name": "pyasn1",
1024-
"version": "0.4.8",
1018+
"version": "0.5.0",
10251019
"supplier": {
10261020
"name": "Ilya Etingof",
10271021
"contact": [
@@ -1030,41 +1024,35 @@
10301024
}
10311025
]
10321026
},
1033-
"cpe": "cpe:2.3:a:ilya_etingof:pyasn1:0.4.8:*:*:*:*:*:*:*",
1034-
"description": "ASN.1 types and codecs",
1027+
"cpe": "cpe:2.3:a:ilya_etingof:pyasn1:0.5.0:*:*:*:*:*:*:*",
1028+
"description": "Pure-Python implementation of ASN.1 types and DER/BER/CER codecs (X.208)",
10351029
"licenses": [
10361030
{
10371031
"license": {
1038-
"id": "BSD-3-Clause",
1039-
"url": "https://opensource.org/licenses/BSD-3-Clause"
1032+
"id": "BSD-2-Clause",
1033+
"url": "https://opensource.org/licenses/BSD-2-Clause"
10401034
}
10411035
}
10421036
],
10431037
"externalReferences": [
10441038
{
1045-
"url": "https://github.com/etingof/pyasn1",
1039+
"url": "https://github.com/pyasn1/pyasn1",
10461040
"type": "website",
10471041
"comment": "Home page for project"
10481042
},
10491043
{
1050-
"url": "https://pypi.org/project/pyasn1/0.4.8",
1044+
"url": "https://pypi.org/project/pyasn1/0.5.0",
10511045
"type": "distribution",
10521046
"comment": "Download location for component"
10531047
}
10541048
],
1055-
"purl": "pkg:pypi/[email protected]",
1056-
"properties": [
1057-
{
1058-
"name": "License Comments",
1059-
"value": "pyasn1 declares BSD which is not currently a valid SPDX License identifier or expression."
1060-
}
1061-
]
1049+
"purl": "pkg:pypi/[email protected]"
10621050
},
10631051
{
10641052
"type": "library",
10651053
"bom-ref": "29-pyasn1-modules",
10661054
"name": "pyasn1-modules",
1067-
"version": "0.2.8",
1055+
"version": "0.3.0",
10681056
"supplier": {
10691057
"name": "Ilya Etingof",
10701058
"contact": [
@@ -1073,29 +1061,35 @@
10731061
}
10741062
]
10751063
},
1076-
"cpe": "cpe:2.3:a:ilya_etingof:pyasn1-modules:0.2.8:*:*:*:*:*:*:*",
1077-
"description": "A collection of ASN.1-based protocols modules.",
1064+
"cpe": "cpe:2.3:a:ilya_etingof:pyasn1-modules:0.3.0:*:*:*:*:*:*:*",
1065+
"description": "A collection of ASN.1-based protocols modules",
10781066
"licenses": [
10791067
{
10801068
"license": {
1081-
"id": "BSD-2-Clause",
1082-
"url": "https://opensource.org/licenses/BSD-2-Clause"
1069+
"id": "BSD-3-Clause",
1070+
"url": "https://opensource.org/licenses/BSD-3-Clause"
10831071
}
10841072
}
10851073
],
10861074
"externalReferences": [
10871075
{
1088-
"url": "https://github.com/etingof/pyasn1-modules",
1076+
"url": "https://github.com/pyasn1/pyasn1-modules",
10891077
"type": "website",
10901078
"comment": "Home page for project"
10911079
},
10921080
{
1093-
"url": "https://pypi.org/project/pyasn1-modules/0.2.8",
1081+
"url": "https://pypi.org/project/pyasn1-modules/0.3.0",
10941082
"type": "distribution",
10951083
"comment": "Download location for component"
10961084
}
10971085
],
1098-
"purl": "pkg:pypi/[email protected]"
1086+
"purl": "pkg:pypi/[email protected]",
1087+
"properties": [
1088+
{
1089+
"name": "License Comments",
1090+
"value": "pyasn1-modules declares BSD which is not currently a valid SPDX License identifier or expression."
1091+
}
1092+
]
10991093
},
11001094
{
11011095
"type": "library",
@@ -2085,7 +2079,7 @@
20852079
"type": "library",
20862080
"bom-ref": "56-pygments",
20872081
"name": "pygments",
2088-
"version": "2.15.0",
2082+
"version": "2.15.1",
20892083
"supplier": {
20902084
"name": "Georg Brandl",
20912085
"contact": [
@@ -2094,7 +2088,7 @@
20942088
}
20952089
]
20962090
},
2097-
"cpe": "cpe:2.3:a:georg_brandl:pygments:2.15.0:*:*:*:*:*:*:*",
2091+
"cpe": "cpe:2.3:a:georg_brandl:pygments:2.15.1:*:*:*:*:*:*:*",
20982092
"description": "Pygments is a syntax highlighting package written in Python.",
20992093
"licenses": [
21002094
{
@@ -2106,12 +2100,12 @@
21062100
],
21072101
"externalReferences": [
21082102
{
2109-
"url": "https://pypi.org/project/Pygments/2.15.0",
2103+
"url": "https://pypi.org/project/Pygments/2.15.1",
21102104
"type": "distribution",
21112105
"comment": "Download location for component"
21122106
}
21132107
],
2114-
"purl": "pkg:pypi/[email protected].0"
2108+
"purl": "pkg:pypi/[email protected].1"
21152109
},
21162110
{
21172111
"type": "library",
@@ -2265,7 +2259,7 @@
22652259
"type": "library",
22662260
"bom-ref": "61-zstandard",
22672261
"name": "zstandard",
2268-
"version": "0.20.0",
2262+
"version": "0.21.0",
22692263
"supplier": {
22702264
"name": "Gregory Szorc",
22712265
"contact": [
@@ -2274,7 +2268,7 @@
22742268
}
22752269
]
22762270
},
2277-
"cpe": "cpe:2.3:a:gregory_szorc:zstandard:0.20.0:*:*:*:*:*:*:*",
2271+
"cpe": "cpe:2.3:a:gregory_szorc:zstandard:0.21.0:*:*:*:*:*:*:*",
22782272
"description": "Zstandard bindings for Python",
22792273
"licenses": [
22802274
{
@@ -2291,12 +2285,12 @@
22912285
"comment": "Home page for project"
22922286
},
22932287
{
2294-
"url": "https://pypi.org/project/zstandard/0.20.0",
2288+
"url": "https://pypi.org/project/zstandard/0.21.0",
22952289
"type": "distribution",
22962290
"comment": "Download location for component"
22972291
}
22982292
],
2299-
"purl": "pkg:pypi/zstandard@0.20.0",
2293+
"purl": "pkg:pypi/zstandard@0.21.0",
23002294
"properties": [
23012295
{
23022296
"name": "License Comments",

0 commit comments

Comments
 (0)