Skip to content

Commit

Permalink
chore: update SBOM for Python 3.9
Browse files Browse the repository at this point in the history
  • Loading branch information
@web-flow
web-flow committed Aug 14, 2023
1 parent 8f10390 commit 006721b
Show file tree
Hide file tree
Showing 2 changed files with 37 additions and 37 deletions.
38 changes: 19 additions & 19 deletions sbom/cve-bin-tool-py3.9.json
View file
Original file line number Diff line number Diff line change
@@ -1,11 +1,11 @@
{
"$schema": "http://cyclonedx.org/schema/bom-1.4.schema.json",
"$schema": "http://cyclonedx.org/schema/bom-1.5.schema.json",
"bomFormat": "CycloneDX",
"specVersion": "1.5",
"serialNumber": "urn:uuidfe4b268c-cc3c-453d-b219-54512a78784d",
"serialNumber": "urn:uuid:b6888fef-f1b9-4033-95ca-a3f3c0050340",
"version": 1,
"metadata": {
"timestamp": "2023-08-07T01:15:57Z",
"timestamp": "2023-08-14T00:46:59Z",
"tools": {
"components": [
{
Expand Down Expand Up @@ -144,7 +144,7 @@
"type": "library",
"bom-ref": "5-async-timeout",
"name": "async-timeout",
"version": "4.0.2",
"version": "4.0.3",
"supplier": {
"name": "Andrew Svetlov",
"contact": [
Expand All @@ -153,7 +153,7 @@
}
]
},
"cpe": "cpe:2.3:a:andrew_svetlov:async-timeout:4.0.2:*:*:*:*:*:*:*",
"cpe": "cpe:2.3:a:andrew_svetlov:async-timeout:4.0.3:*:*:*:*:*:*:*",
"description": "Timeout context manager for asyncio programs",
"licenses": [
{
Expand All @@ -165,12 +165,12 @@
],
"externalReferences": [
{
"url": "https://pypi.org/project/async-timeout/4.0.2",
"url": "https://pypi.org/project/async-timeout/4.0.3",
"type": "distribution",
"comment": "Download location for component"
}
],
"purl": "pkg:pypi/async-timeout@4.0.2",
"purl": "pkg:pypi/async-timeout@4.0.3",
"properties": [
{
"name": "License Comments",
Expand Down Expand Up @@ -1467,11 +1467,11 @@
"type": "library",
"bom-ref": "45-jsonschema",
"name": "jsonschema",
"version": "4.18.6",
"version": "4.19.0",
"supplier": {
"name": "Julian Berman"
},
"cpe": "cpe:2.3:a:julian_berman:jsonschema:4.18.6:*:*:*:*:*:*:*",
"cpe": "cpe:2.3:a:julian_berman:jsonschema:4.19.0:*:*:*:*:*:*:*",
"description": "An implementation of JSON Schema validation for Python",
"licenses": [
{
Expand All @@ -1483,12 +1483,12 @@
],
"externalReferences": [
{
"url": "https://pypi.org/project/jsonschema/4.18.6",
"url": "https://pypi.org/project/jsonschema/4.19.0",
"type": "distribution",
"comment": "Download location for component"
}
],
"purl": "pkg:pypi/jsonschema@4.18.6"
"purl": "pkg:pypi/jsonschema@4.19.0"
},
{
"type": "library",
Expand Down Expand Up @@ -1575,7 +1575,7 @@
"type": "library",
"bom-ref": "49-lib4sbom",
"name": "lib4sbom",
"version": "0.4.1",
"version": "0.4.2",
"supplier": {
"name": "Anthony Harrison",
"contact": [
Expand All @@ -1584,7 +1584,7 @@
}
]
},
"cpe": "cpe:2.3:a:anthony_harrison:lib4sbom:0.4.1:*:*:*:*:*:*:*",
"cpe": "cpe:2.3:a:anthony_harrison:lib4sbom:0.4.2:*:*:*:*:*:*:*",
"description": "Software Bill of Material (SBOM) generator and consumer library",
"licenses": [
{
Expand All @@ -1596,12 +1596,12 @@
],
"externalReferences": [
{
"url": "https://pypi.org/project/lib4sbom/0.4.1",
"url": "https://pypi.org/project/lib4sbom/0.4.2",
"type": "distribution",
"comment": "Download location for component"
}
],
"purl": "pkg:pypi/lib4sbom@0.4.1"
"purl": "pkg:pypi/lib4sbom@0.4.2"
},
{
"type": "library",
Expand Down Expand Up @@ -1714,7 +1714,7 @@
"type": "library",
"bom-ref": "53-plotly",
"name": "plotly",
"version": "5.15.0",
"version": "5.16.0",
"supplier": {
"name": "Chris P",
"contact": [
Expand All @@ -1723,7 +1723,7 @@
}
]
},
"cpe": "cpe:2.3:a:chris_p:plotly:5.15.0:*:*:*:*:*:*:*",
"cpe": "cpe:2.3:a:chris_p:plotly:5.16.0:*:*:*:*:*:*:*",
"description": "An open-source, interactive data visualization library for Python",
"licenses": [
{
Expand All @@ -1735,12 +1735,12 @@
],
"externalReferences": [
{
"url": "https://pypi.org/project/plotly/5.15.0",
"url": "https://pypi.org/project/plotly/5.16.0",
"type": "distribution",
"comment": "Download location for component"
}
],
"purl": "pkg:pypi/plotly@5.15.0"
"purl": "pkg:pypi/plotly@5.16.0"
},
{
"type": "library",
Expand Down
36 changes: 18 additions & 18 deletions sbom/cve-bin-tool-py3.9.spdx
View file
Original file line number Diff line number Diff line change
Expand Up @@ -2,10 +2,10 @@ SPDXVersion: SPDX-2.3
DataLicense: CC0-1.0
SPDXID: SPDXRef-DOCUMENT
DocumentName: Python-cve-bin-tool
DocumentNamespace: http://spdx.org/spdxdocs/Python-cve-bin-tool-cc88efbc-1429-47bf-8ecc-2e871d9f79b3
DocumentNamespace: http://spdx.org/spdxdocs/Python-cve-bin-tool-aeb624a0-fc0b-48d0-86a9-62e1762bb1c1
LicenseListVersion: 3.21
Creator: Tool: sbom4python-0.10.0
Created: 2023-08-07T01:14:05Z
Created: 2023-08-14T00:45:27Z
CreatorComment: <text>This document has been automatically generated.</text>
#####

Expand Down Expand Up @@ -70,18 +70,18 @@ ExternalRef: PACKAGE-MANAGER purl pkg:pypi/frozenlist@1.4.0

PackageName: async-timeout
SPDXID: SPDXRef-Package-5-async-timeout
PackageVersion: 4.0.2
PackageVersion: 4.0.3
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Organization: Andrew Svetlov (andrew.svetlov@gmail.com)
PackageDownloadLocation: https://pypi.org/project/async-timeout/4.0.2
PackageDownloadLocation: https://pypi.org/project/async-timeout/4.0.3
FilesAnalyzed: false
PackageLicenseDeclared: NOASSERTION
PackageLicenseConcluded: Apache-2.0
PackageLicenseComments: <text>async-timeout declares Apache 2 which is not currently a valid SPDX License identifier or expression.</text>
PackageCopyrightText: NOASSERTION
PackageSummary: <text>Timeout context manager for asyncio programs</text>
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/async-timeout@4.0.2
ExternalRef: SECURITY cpe23Type cpe:2.3:a:andrew_svetlov:async-timeout:4.0.2:*:*:*:*:*:*:*
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/async-timeout@4.0.3
ExternalRef: SECURITY cpe23Type cpe:2.3:a:andrew_svetlov:async-timeout:4.0.3:*:*:*:*:*:*:*
#####

PackageName: attrs
Expand Down Expand Up @@ -688,17 +688,17 @@ ExternalRef: PACKAGE-MANAGER purl pkg:pypi/markupsafe@2.1.3

PackageName: jsonschema
SPDXID: SPDXRef-Package-45-jsonschema
PackageVersion: 4.18.6
PackageVersion: 4.19.0
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Person: Julian Berman
PackageDownloadLocation: https://pypi.org/project/jsonschema/4.18.6
PackageDownloadLocation: https://pypi.org/project/jsonschema/4.19.0
FilesAnalyzed: false
PackageLicenseDeclared: MIT
PackageLicenseConcluded: MIT
PackageCopyrightText: NOASSERTION
PackageSummary: <text>An implementation of JSON Schema validation for Python</text>
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/jsonschema@4.18.6
ExternalRef: SECURITY cpe23Type cpe:2.3:a:julian_berman:jsonschema:4.18.6:*:*:*:*:*:*:*
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/jsonschema@4.19.0
ExternalRef: SECURITY cpe23Type cpe:2.3:a:julian_berman:jsonschema:4.19.0:*:*:*:*:*:*:*
#####

PackageName: jsonschema-specifications
Expand Down Expand Up @@ -748,17 +748,17 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:julian_berman:rpds-py:0.9.2:*:*:*:*:*:

PackageName: lib4sbom
SPDXID: SPDXRef-Package-49-lib4sbom
PackageVersion: 0.4.1
PackageVersion: 0.4.2
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Person: Anthony Harrison (anthony.p.harrison@gmail.com)
PackageDownloadLocation: https://pypi.org/project/lib4sbom/0.4.1
PackageDownloadLocation: https://pypi.org/project/lib4sbom/0.4.2
FilesAnalyzed: false
PackageLicenseDeclared: Apache-2.0
PackageLicenseConcluded: Apache-2.0
PackageCopyrightText: NOASSERTION
PackageSummary: <text>Software Bill of Material (SBOM) generator and consumer library</text>
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/lib4sbom@0.4.1
ExternalRef: SECURITY cpe23Type cpe:2.3:a:anthony_harrison:lib4sbom:0.4.1:*:*:*:*:*:*:*
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/lib4sbom@0.4.2
ExternalRef: SECURITY cpe23Type cpe:2.3:a:anthony_harrison:lib4sbom:0.4.2:*:*:*:*:*:*:*
#####

PackageName: pyyaml
Expand Down Expand Up @@ -810,17 +810,17 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:donald_stufft_and_individual_contribut

PackageName: plotly
SPDXID: SPDXRef-Package-53-plotly
PackageVersion: 5.15.0
PackageVersion: 5.16.0
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Person: Chris P (chris@plot.ly)
PackageDownloadLocation: https://pypi.org/project/plotly/5.15.0
PackageDownloadLocation: https://pypi.org/project/plotly/5.16.0
FilesAnalyzed: false
PackageLicenseDeclared: MIT
PackageLicenseConcluded: MIT
PackageCopyrightText: NOASSERTION
PackageSummary: <text>An open-source, interactive data visualization library for Python</text>
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/plotly@5.15.0
ExternalRef: SECURITY cpe23Type cpe:2.3:a:chris_p:plotly:5.15.0:*:*:*:*:*:*:*
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/plotly@5.16.0
ExternalRef: SECURITY cpe23Type cpe:2.3:a:chris_p:plotly:5.16.0:*:*:*:*:*:*:*
#####

PackageName: tenacity
Expand Down

0 comments on commit 006721b

Please sign in to comment.