Skip to content

Commit

Permalink
chore: update SBOM for Python 3.11 (#4597)
Browse files Browse the repository at this point in the history 
Co-authored-by: GitHub <noreply@github.com>
  • Loading branch information
@github-actions @web-flow
github-actions[bot] and web-flow authored Dec 3, 2024
1 parent 7b7eb97 commit 4a1b84e
Show file tree
Hide file tree
Showing 2 changed files with 68 additions and 76 deletions.
90 changes: 41 additions & 49 deletions sbom/cve-bin-tool-py3.11.json
View file
Original file line number Diff line number Diff line change
Expand Up @@ -2,10 +2,10 @@
"$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
"bomFormat": "CycloneDX",
"specVersion": "1.6",
"serialNumber": "urn:uuid:c0ad9887-1afc-490c-9a2f-74e4604b1a74",
"serialNumber": "urn:uuid:26cf65a2-3634-40ba-9952-49f2946933a2",
"version": 1,
"metadata": {
"timestamp": "2024-11-25T00:37:53Z",
"timestamp": "2024-12-02T00:40:31Z",
"lifecycles": [
{
"phase": "build"
Expand Down Expand Up @@ -79,7 +79,7 @@
"type": "library",
"bom-ref": "2-aiohttp",
"name": "aiohttp",
"version": "3.11.7",
"version": "3.11.9",
"description": "Async http client/server framework (asyncio)",
"licenses": [
{
Expand All @@ -97,12 +97,12 @@
"comment": "Home page for project"
},
{
"url": "https://pypi.org/project/aiohttp/3.11.7/#files",
"url": "https://pypi.org/project/aiohttp/3.11.9/#files",
"type": "distribution",
"comment": "Download location for component"
}
],
"purl": "pkg:pypi/aiohttp@3.11.7",
"purl": "pkg:pypi/aiohttp@3.11.9",
"properties": [
{
"name": "language",
Expand All @@ -114,15 +114,15 @@
},
{
"name": "package_release_date",
"value": "2024-11-21T15:42:26.000Z"
"value": "2024-12-01T23:26:48.000Z"
}
]
},
{
"type": "library",
"bom-ref": "3-aiohappyeyeballs",
"name": "aiohappyeyeballs",
"version": "2.4.3",
"version": "2.4.4",
"supplier": {
"name": "J. Nick Koston",
"contact": [
Expand All @@ -131,14 +131,8 @@
}
]
},
"cpe": "cpe:2.3:a:j._nick_koston:aiohappyeyeballs:2.4.3:*:*:*:*:*:*:*",
"cpe": "cpe:2.3:a:j._nick_koston:aiohappyeyeballs:2.4.4:*:*:*:*:*:*:*",
"description": "Happy Eyeballs for asyncio",
"hashes": [
{
"alg": "SHA-1",
"content": "e3519bbebf2069eee0aff0dfde50689c742ba97f"
}
],
"licenses": [
{
"license": {
Expand All @@ -155,12 +149,12 @@
"comment": "Home page for project"
},
{
"url": "https://pypi.org/project/aiohappyeyeballs/2.4.3/#files",
"url": "https://pypi.org/project/aiohappyeyeballs/2.4.4/#files",
"type": "distribution",
"comment": "Download location for component"
}
],
"purl": "pkg:pypi/aiohappyeyeballs@2.4.3",
"purl": "pkg:pypi/aiohappyeyeballs@2.4.4",
"properties": [
{
"name": "language",
Expand All @@ -172,7 +166,7 @@
},
{
"name": "package_release_date",
"value": "2024-09-30T19:42:26.000Z"
"value": "2024-11-30T18:43:39.000Z"
}
]
},
Expand Down Expand Up @@ -327,6 +321,12 @@
},
"cpe": "cpe:2.3:a:andrew_svetlov:multidict:6.1.0:*:*:*:*:*:*:*",
"description": "multidict implementation",
"hashes": [
{
"alg": "SHA-1",
"content": "4140e63780dc6dd600a1837cb9b4c5198c3dcd68"
}
],
"licenses": [
{
"license": {
Expand Down Expand Up @@ -368,7 +368,7 @@
"type": "library",
"bom-ref": "8-propcache",
"name": "propcache",
"version": "0.2.0",
"version": "0.2.1",
"supplier": {
"name": "Andrew Svetlov",
"contact": [
Expand All @@ -377,14 +377,8 @@
}
]
},
"cpe": "cpe:2.3:a:andrew_svetlov:propcache:0.2.0:*:*:*:*:*:*:*",
"cpe": "cpe:2.3:a:andrew_svetlov:propcache:0.2.1:*:*:*:*:*:*:*",
"description": "Accelerated property cache",
"hashes": [
{
"alg": "SHA-1",
"content": "f157b0a7b0b3a3c755764b9f03f4d90c43ee5cda"
}
],
"licenses": [
{
"license": {
Expand All @@ -401,12 +395,12 @@
"comment": "Home page for project"
},
{
"url": "https://pypi.org/project/propcache/0.2.0/#files",
"url": "https://pypi.org/project/propcache/0.2.1/#files",
"type": "distribution",
"comment": "Download location for component"
}
],
"purl": "pkg:pypi/propcache@0.2.0",
"purl": "pkg:pypi/propcache@0.2.1",
"properties": [
{
"name": "language",
Expand All @@ -415,18 +409,14 @@
{
"name": "python_version",
"value": "3.11.10"
},
{
"name": "package_release_date",
"value": "2024-10-07T12:54:02.000Z"
}
]
},
{
"type": "library",
"bom-ref": "9-yarl",
"name": "yarl",
"version": "1.18.0",
"version": "1.18.3",
"supplier": {
"name": "Andrew Svetlov",
"contact": [
Expand All @@ -435,7 +425,7 @@
}
]
},
"cpe": "cpe:2.3:a:andrew_svetlov:yarl:1.18.0:*:*:*:*:*:*:*",
"cpe": "cpe:2.3:a:andrew_svetlov:yarl:1.18.3:*:*:*:*:*:*:*",
"description": "Yet another URL library",
"licenses": [
{
Expand All @@ -453,12 +443,12 @@
"comment": "Home page for project"
},
{
"url": "https://pypi.org/project/yarl/1.18.0/#files",
"url": "https://pypi.org/project/yarl/1.18.3/#files",
"type": "distribution",
"comment": "Download location for component"
}
],
"purl": "pkg:pypi/yarl@1.18.0",
"purl": "pkg:pypi/yarl@1.18.3",
"properties": [
{
"name": "language",
Expand All @@ -467,10 +457,6 @@
{
"name": "python_version",
"value": "3.11.10"
},
{
"name": "package_release_date",
"value": "2024-11-21T15:02:50.000Z"
}
]
},
Expand Down Expand Up @@ -1811,7 +1797,7 @@
"type": "library",
"bom-ref": "35-pyopenssl",
"name": "pyopenssl",
"version": "24.2.1",
"version": "24.3.0",
"supplier": {
"name": "The pyOpenSSL developers",
"contact": [
Expand All @@ -1820,7 +1806,7 @@
}
]
},
"cpe": "cpe:2.3:a:the_pyopenssl_developers:pyopenssl:24.2.1:*:*:*:*:*:*:*",
"cpe": "cpe:2.3:a:the_pyopenssl_developers:pyopenssl:24.3.0:*:*:*:*:*:*:*",
"description": "Python wrapper module around the OpenSSL library",
"licenses": [
{
Expand All @@ -1838,12 +1824,12 @@
"comment": "Home page for project"
},
{
"url": "https://pypi.org/project/pyopenssl/24.2.1/#files",
"url": "https://pypi.org/project/pyopenssl/24.3.0/#files",
"type": "distribution",
"comment": "Download location for component"
}
],
"purl": "pkg:pypi/pyopenssl@24.2.1",
"purl": "pkg:pypi/pyopenssl@24.3.0",
"properties": [
{
"name": "language",
Expand All @@ -1855,15 +1841,15 @@
},
{
"name": "package_release_date",
"value": "2024-07-20T17:26:29.000Z"
"value": "2024-11-27T20:43:21.000Z"
}
]
},
{
"type": "library",
"bom-ref": "36-cryptography",
"name": "cryptography",
"version": "43.0.3",
"version": "44.0.0",
"supplier": {
"name": "The cryptography developers The Python Cryptographic Authority and individual contributors",
"contact": [
Expand All @@ -1872,7 +1858,7 @@
}
]
},
"cpe": "cpe:2.3:a:the_cryptography_developers_the_python_cryptographic_authority_and_individual_contributors:cryptography:43.0.3:*:*:*:*:*:*:*",
"cpe": "cpe:2.3:a:the_cryptography_developers_the_python_cryptographic_authority_and_individual_contributors:cryptography:44.0.0:*:*:*:*:*:*:*",
"description": "cryptography is a package which provides cryptographic recipes and primitives to Python developers.",
"licenses": [
{
Expand All @@ -1886,12 +1872,12 @@
"comment": "Home page for project"
},
{
"url": "https://pypi.org/project/cryptography/43.0.3/#files",
"url": "https://pypi.org/project/cryptography/44.0.0/#files",
"type": "distribution",
"comment": "Download location for component"
}
],
"purl": "pkg:pypi/cryptography@43.0.3",
"purl": "pkg:pypi/cryptography@44.0.0",
"properties": [
{
"name": "language",
Expand All @@ -1903,7 +1889,7 @@
},
{
"name": "package_release_date",
"value": "2024-10-18T15:57:36.000Z"
"value": "2024-11-27T18:05:55.000Z"
}
]
},
Expand All @@ -1922,6 +1908,12 @@
},
"cpe": "cpe:2.3:a:armin_maciej_fijalkowski:cffi:1.17.1:*:*:*:*:*:*:*",
"description": "Foreign Function Interface for Python calling C code.",
"hashes": [
{
"alg": "SHA-1",
"content": "38bd6be6b94a65182f4bffb45c78e230e9290f51"
}
],
"licenses": [
{
"license": {
Expand Down
Loading

0 comments on commit 4a1b84e

Please sign in to comment.