Skip to content

Commit

Permalink
chore: update SBOM for Python 3.8
Browse files Browse the repository at this point in the history
  • Loading branch information
@web-flow
web-flow authored Apr 24, 2023
1 parent 84f3c4b commit 6a2460f
Show file tree
Hide file tree
Showing 2 changed files with 84 additions and 91 deletions.
94 changes: 44 additions & 50 deletions sbom/cve-bin-tool-py3.8.json
View file
Original file line number Diff line number Diff line change
Expand Up @@ -2,10 +2,10 @@
"$schema": "http://cyclonedx.org/schema/bom-1.4.schema.json",
"bomFormat": "CycloneDX",
"specVersion": "1.4",
"serialNumber": "urn:uuid09a96c6e-705f-483c-ab4d-39ff96a28279",
"serialNumber": "urn:uuidd5ddb30b-bf0a-46c5-98f2-023a60c6b7ea",
"version": 1,
"metadata": {
"timestamp": "2023-04-17T00:36:26Z",
"timestamp": "2023-04-24T00:55:58Z",
"tools": [
{
"name": "sbom4python",
Expand Down Expand Up @@ -309,7 +309,7 @@
"type": "library",
"bom-ref": "9-yarl",
"name": "yarl",
"version": "1.8.2",
"version": "1.9.1",
"supplier": {
"name": "Andrew Svetlov",
"contact": [
Expand All @@ -318,7 +318,7 @@
}
]
},
"cpe": "cpe:2.3:a:andrew_svetlov:yarl:1.8.2:*:*:*:*:*:*:*",
"cpe": "cpe:2.3:a:andrew_svetlov:yarl:1.9.1:*:*:*:*:*:*:*",
"description": "Yet another URL library",
"licenses": [
{
Expand All @@ -335,18 +335,12 @@
"comment": "Home page for project"
},
{
"url": "https://pypi.org/project/yarl/1.8.2",
"url": "https://pypi.org/project/yarl/1.9.1",
"type": "distribution",
"comment": "Download location for component"
}
],
"purl": "pkg:pypi/[email protected]",
"properties": [
{
"name": "License Comments",
"value": "yarl declares Apache 2 which is not currently a valid SPDX License identifier or expression."
}
]
"purl": "pkg:pypi/[email protected]"
},
{
"type": "library",
Expand Down Expand Up @@ -596,7 +590,7 @@
"type": "library",
"bom-ref": "17-argcomplete",
"name": "argcomplete",
"version": "3.0.5",
"version": "3.0.8",
"supplier": {
"name": "Andrey Kislyuk",
"contact": [
Expand All @@ -605,7 +599,7 @@
}
]
},
"cpe": "cpe:2.3:a:andrey_kislyuk:argcomplete:3.0.5:*:*:*:*:*:*:*",
"cpe": "cpe:2.3:a:andrey_kislyuk:argcomplete:3.0.8:*:*:*:*:*:*:*",
"description": "Bash tab completion for argparse",
"licenses": [
{
Expand All @@ -622,12 +616,12 @@
"comment": "Home page for project"
},
{
"url": "https://pypi.org/project/argcomplete/3.0.5",
"url": "https://pypi.org/project/argcomplete/3.0.8",
"type": "distribution",
"comment": "Download location for component"
}
],
"purl": "pkg:pypi/[email protected].5",
"purl": "pkg:pypi/[email protected].8",
"properties": [
{
"name": "License Comments",
Expand Down Expand Up @@ -1021,7 +1015,7 @@
"type": "library",
"bom-ref": "28-pyasn1",
"name": "pyasn1",
"version": "0.4.8",
"version": "0.5.0",
"supplier": {
"name": "Ilya Etingof",
"contact": [
Expand All @@ -1030,41 +1024,35 @@
}
]
},
"cpe": "cpe:2.3:a:ilya_etingof:pyasn1:0.4.8:*:*:*:*:*:*:*",
"description": "ASN.1 types and codecs",
"cpe": "cpe:2.3:a:ilya_etingof:pyasn1:0.5.0:*:*:*:*:*:*:*",
"description": "Pure-Python implementation of ASN.1 types and DER/BER/CER codecs (X.208)",
"licenses": [
{
"license": {
"id": "BSD-3-Clause",
"url": "https://opensource.org/licenses/BSD-3-Clause"
"id": "BSD-2-Clause",
"url": "https://opensource.org/licenses/BSD-2-Clause"
}
}
],
"externalReferences": [
{
"url": "https://github.com/etingof/pyasn1",
"url": "https://github.com/pyasn1/pyasn1",
"type": "website",
"comment": "Home page for project"
},
{
"url": "https://pypi.org/project/pyasn1/0.4.8",
"url": "https://pypi.org/project/pyasn1/0.5.0",
"type": "distribution",
"comment": "Download location for component"
}
],
"purl": "pkg:pypi/[email protected]",
"properties": [
{
"name": "License Comments",
"value": "pyasn1 declares BSD which is not currently a valid SPDX License identifier or expression."
}
]
"purl": "pkg:pypi/[email protected]"
},
{
"type": "library",
"bom-ref": "29-pyasn1-modules",
"name": "pyasn1-modules",
"version": "0.2.8",
"version": "0.3.0",
"supplier": {
"name": "Ilya Etingof",
"contact": [
Expand All @@ -1073,29 +1061,35 @@
}
]
},
"cpe": "cpe:2.3:a:ilya_etingof:pyasn1-modules:0.2.8:*:*:*:*:*:*:*",
"description": "A collection of ASN.1-based protocols modules.",
"cpe": "cpe:2.3:a:ilya_etingof:pyasn1-modules:0.3.0:*:*:*:*:*:*:*",
"description": "A collection of ASN.1-based protocols modules",
"licenses": [
{
"license": {
"id": "BSD-2-Clause",
"url": "https://opensource.org/licenses/BSD-2-Clause"
"id": "BSD-3-Clause",
"url": "https://opensource.org/licenses/BSD-3-Clause"
}
}
],
"externalReferences": [
{
"url": "https://github.com/etingof/pyasn1-modules",
"url": "https://github.com/pyasn1/pyasn1-modules",
"type": "website",
"comment": "Home page for project"
},
{
"url": "https://pypi.org/project/pyasn1-modules/0.2.8",
"url": "https://pypi.org/project/pyasn1-modules/0.3.0",
"type": "distribution",
"comment": "Download location for component"
}
],
"purl": "pkg:pypi/[email protected]"
"purl": "pkg:pypi/[email protected]",
"properties": [
{
"name": "License Comments",
"value": "pyasn1-modules declares BSD which is not currently a valid SPDX License identifier or expression."
}
]
},
{
"type": "library",
Expand Down Expand Up @@ -1506,7 +1500,7 @@
"type": "library",
"bom-ref": "40-importlib-metadata",
"name": "importlib-metadata",
"version": "6.4.1",
"version": "6.6.0",
"supplier": {
"name": "Jason R. Coombs",
"contact": [
Expand All @@ -1515,7 +1509,7 @@
}
]
},
"cpe": "cpe:2.3:a:jason_r._coombs:importlib-metadata:6.4.1:*:*:*:*:*:*:*",
"cpe": "cpe:2.3:a:jason_r._coombs:importlib-metadata:6.6.0:*:*:*:*:*:*:*",
"description": "Read metadata from Python packages",
"externalReferences": [
{
Expand All @@ -1524,12 +1518,12 @@
"comment": "Home page for project"
},
{
"url": "https://pypi.org/project/importlib-metadata/6.4.1",
"url": "https://pypi.org/project/importlib-metadata/6.6.0",
"type": "distribution",
"comment": "Download location for component"
}
],
"purl": "pkg:pypi/importlib-metadata@6.4.1"
"purl": "pkg:pypi/importlib-metadata@6.6.0"
},
{
"type": "library",
Expand Down Expand Up @@ -2201,7 +2195,7 @@
"type": "library",
"bom-ref": "60-pygments",
"name": "pygments",
"version": "2.15.0",
"version": "2.15.1",
"supplier": {
"name": "Georg Brandl",
"contact": [
Expand All @@ -2210,7 +2204,7 @@
}
]
},
"cpe": "cpe:2.3:a:georg_brandl:pygments:2.15.0:*:*:*:*:*:*:*",
"cpe": "cpe:2.3:a:georg_brandl:pygments:2.15.1:*:*:*:*:*:*:*",
"description": "Pygments is a syntax highlighting package written in Python.",
"licenses": [
{
Expand All @@ -2222,12 +2216,12 @@
],
"externalReferences": [
{
"url": "https://pypi.org/project/Pygments/2.15.0",
"url": "https://pypi.org/project/Pygments/2.15.1",
"type": "distribution",
"comment": "Download location for component"
}
],
"purl": "pkg:pypi/[email protected].0"
"purl": "pkg:pypi/[email protected].1"
},
{
"type": "library",
Expand Down Expand Up @@ -2405,7 +2399,7 @@
"type": "library",
"bom-ref": "66-zstandard",
"name": "zstandard",
"version": "0.20.0",
"version": "0.21.0",
"supplier": {
"name": "Gregory Szorc",
"contact": [
Expand All @@ -2414,7 +2408,7 @@
}
]
},
"cpe": "cpe:2.3:a:gregory_szorc:zstandard:0.20.0:*:*:*:*:*:*:*",
"cpe": "cpe:2.3:a:gregory_szorc:zstandard:0.21.0:*:*:*:*:*:*:*",
"description": "Zstandard bindings for Python",
"licenses": [
{
Expand All @@ -2431,12 +2425,12 @@
"comment": "Home page for project"
},
{
"url": "https://pypi.org/project/zstandard/0.20.0",
"url": "https://pypi.org/project/zstandard/0.21.0",
"type": "distribution",
"comment": "Download location for component"
}
],
"purl": "pkg:pypi/zstandard@0.20.0",
"purl": "pkg:pypi/zstandard@0.21.0",
"properties": [
{
"name": "License Comments",
Expand Down
Loading

0 comments on commit 6a2460f

Please sign in to comment.