Skip to content

Commit

Permalink
chore: update SBOM for Python 3.10
Browse files Browse the repository at this point in the history
  • Loading branch information
@web-flow @github-actions
web-flow authored and github-actions[bot] committed Jan 13, 2025
1 parent a8800da commit 20a5335
Show file tree
Hide file tree
Showing 2 changed files with 40 additions and 40 deletions.
40 changes: 20 additions & 20 deletions sbom/cve-bin-tool-py3.10.json
View file
Original file line number Diff line number Diff line change
Expand Up @@ -2,10 +2,10 @@
"$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
"bomFormat": "CycloneDX",
"specVersion": "1.6",
"serialNumber": "urn:uuid:3ac59c73-875e-4d32-9a5a-2cacfe629cdd",
"serialNumber": "urn:uuid:8107b27f-aefb-4968-98d1-b9d0503ea396",
"version": 1,
"metadata": {
"timestamp": "2025-01-06T00:36:19Z",
"timestamp": "2025-01-13T00:37:15Z",
"lifecycles": [
{
"phase": "build"
Expand Down Expand Up @@ -3860,7 +3860,7 @@
"type": "library",
"bom-ref": "61-pygments",
"name": "pygments",
"version": "2.19.0",
"version": "2.19.1",
"supplier": {
"name": "Georg Brandl",
"contact": [
Expand All @@ -3869,12 +3869,12 @@
}
]
},
"cpe": "cpe:2.3:a:georg_brandl:pygments:2.19.0:*:*:*:*:*:*:*",
"cpe": "cpe:2.3:a:georg_brandl:pygments:2.19.1:*:*:*:*:*:*:*",
"description": "Pygments is a syntax highlighting package written in Python.",
"hashes": [
{
"alg": "SHA-256",
"content": "4755e6e64d22161d5b61432c0600c923c5927214e7c956e31c23923c89251a9b"
"content": "9ea1544ad55cecf4b8242fab6dd35a93bbce657034b0611ee383099054ab6d8c"
}
],
"licenses": [
Expand All @@ -3893,7 +3893,7 @@
"comment": "Home page for project"
},
{
"url": "https://pypi.org/project/pygments/2.19.0/#files",
"url": "https://pypi.org/project/pygments/2.19.1/#files",
"type": "distribution",
"comment": "Download location for component"
},
Expand All @@ -3914,11 +3914,11 @@
"type": "log"
}
],
"purl": "pkg:pypi/pygments@2.19.0",
"purl": "pkg:pypi/pygments@2.19.1",
"properties": [
{
"name": "release_date",
"value": "2025-01-05T14:11:12Z"
"value": "2025-01-06T17:26:25Z"
},
{
"name": "language",
Expand All @@ -3934,7 +3934,7 @@
"type": "library",
"bom-ref": "62-python-gnupg",
"name": "python-gnupg",
"version": "0.5.3",
"version": "0.5.4",
"supplier": {
"name": "Vinay Sajip",
"contact": [
Expand All @@ -3943,12 +3943,12 @@
}
]
},
"cpe": "cpe:2.3:a:vinay_sajip:python-gnupg:0.5.3:*:*:*:*:*:*:*",
"cpe": "cpe:2.3:a:vinay_sajip:python-gnupg:0.5.4:*:*:*:*:*:*:*",
"description": "A wrapper for the Gnu Privacy Guard (GPG or GnuPG)",
"hashes": [
{
"alg": "SHA-256",
"content": "2f8a4c6f63766feca6cc1416408f8b84e1b914fe7b54514e570fc5cbe92e9248"
"content": "40ce25cde9df29af91fe931ce9df3ce544e14a37f62b13ca878c897217b2de6c"
}
],
"licenses": [
Expand All @@ -3967,7 +3967,7 @@
"comment": "Home page for project"
},
{
"url": "https://pypi.org/project/python-gnupg/0.5.3/#files",
"url": "https://pypi.org/project/python-gnupg/0.5.4/#files",
"type": "distribution",
"comment": "Download location for component"
},
Expand All @@ -3984,11 +3984,11 @@
"type": "issue-tracker"
}
],
"purl": "pkg:pypi/python-gnupg@0.5.3",
"purl": "pkg:pypi/python-gnupg@0.5.4",
"properties": [
{
"name": "release_date",
"value": "2024-09-20T16:43:47Z"
"value": "2025-01-07T11:58:32Z"
},
{
"name": "language",
Expand Down Expand Up @@ -4499,7 +4499,7 @@
"type": "library",
"bom-ref": "71-setuptools",
"name": "setuptools",
"version": "75.7.0",
"version": "75.8.0",
"supplier": {
"name": "Python Packaging Authority",
"contact": [
Expand All @@ -4508,17 +4508,17 @@
}
]
},
"cpe": "cpe:2.3:a:python_packaging_authority:setuptools:75.7.0:*:*:*:*:*:*:*",
"cpe": "cpe:2.3:a:python_packaging_authority:setuptools:75.8.0:*:*:*:*:*:*:*",
"description": "Easily download, build, install, upgrade, and uninstall Python packages",
"hashes": [
{
"alg": "SHA-256",
"content": "84fb203f278ebcf5cd08f97d3fb96d3fbed4b629d500b29ad60d11e00769b183"
"content": "e3982f444617239225d675215d51f6ba05f845d4eec313da4418fdbb56fb27e3"
}
],
"externalReferences": [
{
"url": "https://pypi.org/project/setuptools/75.7.0/#files",
"url": "https://pypi.org/project/setuptools/75.8.0/#files",
"type": "distribution",
"comment": "Download location for component"
},
Expand All @@ -4535,11 +4535,11 @@
"type": "log"
}
],
"purl": "pkg:pypi/setuptools@75.7.0",
"purl": "pkg:pypi/setuptools@75.8.0",
"properties": [
{
"name": "release_date",
"value": "2025-01-05T16:31:09Z"
"value": "2025-01-08T18:28:20Z"
},
{
"name": "language",
Expand Down
40 changes: 20 additions & 20 deletions sbom/cve-bin-tool-py3.10.spdx
View file
Original file line number Diff line number Diff line change
Expand Up @@ -2,10 +2,10 @@ SPDXVersion: SPDX-2.3
DataLicense: CC0-1.0
SPDXID: SPDXRef-DOCUMENT
DocumentName: Python-cve-bin-tool
DocumentNamespace: http://spdx.org/spdxdocs/Python-cve-bin-tool-5be38161-3148-45bb-a7af-20ff2c08631c
DocumentNamespace: http://spdx.org/spdxdocs/Python-cve-bin-tool-b5a63ce0-27fa-49ca-8dc2-a124dfe9797f
LicenseListVersion: 3.25
Creator: Tool: sbom4python-0.12.1
Created: 2025-01-06T00:36:11Z
Created: 2025-01-13T00:37:08Z
CreatorComment: <text>This document has been automatically generated.</text>
#####

Expand Down Expand Up @@ -1272,46 +1272,46 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:taneli_hukkinen:mdurl:0.1.2:*:*:*:*:*:

PackageName: pygments
SPDXID: SPDXRef-61-pygments
PackageVersion: 2.19.0
PackageVersion: 2.19.1
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Person: Georg Brandl (georg@python.org)
PackageDownloadLocation: https://pypi.org/project/pygments/2.19.0/#files
PackageDownloadLocation: https://pypi.org/project/pygments/2.19.1/#files
FilesAnalyzed: false
PackageHomePage: https://pygments.org
PackageChecksum: SHA256: 4755e6e64d22161d5b61432c0600c923c5927214e7c956e31c23923c89251a9b
PackageChecksum: SHA256: 9ea1544ad55cecf4b8242fab6dd35a93bbce657034b0611ee383099054ab6d8c
PackageLicenseDeclared: BSD-2-Clause
PackageLicenseConcluded: BSD-2-Clause
PackageCopyrightText: NOASSERTION
PackageSummary: <text>Pygments is a syntax highlighting package written in Python.</text>
ReleaseDate: 2025-01-05T14:11:12Z
ReleaseDate: 2025-01-06T17:26:25Z
ExternalRef: OTHER documentation https://pygments.org/docs
ExternalRef: OTHER vcs https://github.com/pygments/pygments
ExternalRef: OTHER issue-tracker https://github.com/pygments/pygments/issues
ExternalRef: OTHER log https://github.com/pygments/pygments/blob/master/CHANGES
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/pygments@2.19.0
ExternalRef: SECURITY cpe23Type cpe:2.3:a:georg_brandl:pygments:2.19.0:*:*:*:*:*:*:*
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/pygments@2.19.1
ExternalRef: SECURITY cpe23Type cpe:2.3:a:georg_brandl:pygments:2.19.1:*:*:*:*:*:*:*
#####

PackageName: python-gnupg
SPDXID: SPDXRef-62-python-gnupg
PackageVersion: 0.5.3
PackageVersion: 0.5.4
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Person: Vinay Sajip (vinay_sajip@yahoo.co.uk)
PackageDownloadLocation: https://pypi.org/project/python-gnupg/0.5.3/#files
PackageDownloadLocation: https://pypi.org/project/python-gnupg/0.5.4/#files
FilesAnalyzed: false
PackageHomePage: https://github.com/vsajip/python-gnupg
PackageChecksum: SHA256: 2f8a4c6f63766feca6cc1416408f8b84e1b914fe7b54514e570fc5cbe92e9248
PackageChecksum: SHA256: 40ce25cde9df29af91fe931ce9df3ce544e14a37f62b13ca878c897217b2de6c
PackageLicenseDeclared: NOASSERTION
PackageLicenseConcluded: BSD-3-Clause
PackageLicenseComments: <text>python-gnupg declares BSD which is not currently a valid SPDX License identifier or expression.</text>
PackageCopyrightText: NOASSERTION
PackageSummary: <text>A wrapper for the Gnu Privacy Guard (GPG or GnuPG)</text>
ReleaseDate: 2024-09-20T16:43:47Z
ReleaseDate: 2025-01-07T11:58:32Z
ExternalRef: OTHER documentation https://gnupg.readthedocs.io/
ExternalRef: OTHER vcs https://github.com/vsajip/python-gnupg
ExternalRef: OTHER issue-tracker https://github.com/vsajip/python-gnupg/issues
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/python-gnupg@0.5.3
ExternalRef: SECURITY cpe23Type cpe:2.3:a:vinay_sajip:python-gnupg:0.5.3:*:*:*:*:*:*:*
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/python-gnupg@0.5.4
ExternalRef: SECURITY cpe23Type cpe:2.3:a:vinay_sajip:python-gnupg:0.5.4:*:*:*:*:*:*:*
#####

PackageName: packaging
Expand Down Expand Up @@ -1474,22 +1474,22 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:sean_ross:rpmfile:2.1.0:*:*:*:*:*:*:*

PackageName: setuptools
SPDXID: SPDXRef-71-setuptools
PackageVersion: 75.7.0
PackageVersion: 75.8.0
PrimaryPackagePurpose: LIBRARY
PackageSupplier: Organization: Python Packaging Authority (distutils-sig@python.org)
PackageDownloadLocation: https://pypi.org/project/setuptools/75.7.0/#files
PackageDownloadLocation: https://pypi.org/project/setuptools/75.8.0/#files
FilesAnalyzed: false
PackageChecksum: SHA256: 84fb203f278ebcf5cd08f97d3fb96d3fbed4b629d500b29ad60d11e00769b183
PackageChecksum: SHA256: e3982f444617239225d675215d51f6ba05f845d4eec313da4418fdbb56fb27e3
PackageLicenseDeclared: NOASSERTION
PackageLicenseConcluded: NOASSERTION
PackageCopyrightText: NOASSERTION
PackageSummary: <text>Easily download, build, install, upgrade, and uninstall Python packages</text>
ReleaseDate: 2025-01-05T16:31:09Z
ReleaseDate: 2025-01-08T18:28:20Z
ExternalRef: OTHER vcs https://github.com/pypa/setuptools
ExternalRef: OTHER documentation https://setuptools.pypa.io/
ExternalRef: OTHER log https://setuptools.pypa.io/en/stable/history.html
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/setuptools@75.7.0
ExternalRef: SECURITY cpe23Type cpe:2.3:a:python_packaging_authority:setuptools:75.7.0:*:*:*:*:*:*:*
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/setuptools@75.8.0
ExternalRef: SECURITY cpe23Type cpe:2.3:a:python_packaging_authority:setuptools:75.8.0:*:*:*:*:*:*:*
#####

PackageName: toml
Expand Down

0 comments on commit 20a5335

Please sign in to comment.