Skip to content

Commit 44d347b

Browse files
authored
chore: update SBOM for Python 3.11
1 parent 30b85ba commit 44d347b

File tree

2 files changed

+20
-20
lines changed

2 files changed

+20
-20
lines changed

sbom/cve-bin-tool-py3.11.json

Lines changed: 10 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -2,10 +2,10 @@
22
"$schema": "http://cyclonedx.org/schema/bom-1.5.schema.json",
33
"bomFormat": "CycloneDX",
44
"specVersion": "1.5",
5-
"serialNumber": "urn:uuid:d207333a-18dd-4549-9979-6b7f093bf0f4",
5+
"serialNumber": "urn:uuid:68567627-40c2-47d5-9dc8-b9bb0e05b671",
66
"version": 1,
77
"metadata": {
8-
"timestamp": "2023-10-16T00:26:13Z",
8+
"timestamp": "2023-10-23T00:25:42Z",
99
"tools": {
1010
"components": [
1111
{
@@ -218,7 +218,7 @@
218218
"type": "library",
219219
"bom-ref": "7-charset-normalizer",
220220
"name": "charset-normalizer",
221-
"version": "3.3.0",
221+
"version": "3.3.1",
222222
"supplier": {
223223
"name": "Ahmed TAHRI",
224224
"contact": [
@@ -227,7 +227,7 @@
227227
}
228228
]
229229
},
230-
"cpe": "cpe:2.3:a:ahmed_tahri:charset-normalizer:3.3.0:*:*:*:*:*:*:*",
230+
"cpe": "cpe:2.3:a:ahmed_tahri:charset-normalizer:3.3.1:*:*:*:*:*:*:*",
231231
"description": "The Real First Universal Charset Detector. Open, modern and actively maintained alternative to Chardet.",
232232
"licenses": [
233233
{
@@ -239,12 +239,12 @@
239239
],
240240
"externalReferences": [
241241
{
242-
"url": "https://pypi.org/project/charset-normalizer/3.3.0",
242+
"url": "https://pypi.org/project/charset-normalizer/3.3.1",
243243
"type": "distribution",
244244
"comment": "Download location for component"
245245
}
246246
],
247-
"purl": "pkg:pypi/charset-normalizer@3.3.0"
247+
"purl": "pkg:pypi/charset-normalizer@3.3.1"
248248
},
249249
{
250250
"type": "library",
@@ -1845,7 +1845,7 @@
18451845
"type": "library",
18461846
"bom-ref": "56-urllib3",
18471847
"name": "urllib3",
1848-
"version": "2.0.6",
1848+
"version": "2.0.7",
18491849
"supplier": {
18501850
"name": "Andrey Petrov",
18511851
"contact": [
@@ -1854,16 +1854,16 @@
18541854
}
18551855
]
18561856
},
1857-
"cpe": "cpe:2.3:a:andrey_petrov:urllib3:2.0.6:*:*:*:*:*:*:*",
1857+
"cpe": "cpe:2.3:a:andrey_petrov:urllib3:2.0.7:*:*:*:*:*:*:*",
18581858
"description": "HTTP library with thread-safe connection pooling, file post, and more.",
18591859
"externalReferences": [
18601860
{
1861-
"url": "https://pypi.org/project/urllib3/2.0.6",
1861+
"url": "https://pypi.org/project/urllib3/2.0.7",
18621862
"type": "distribution",
18631863
"comment": "Download location for component"
18641864
}
18651865
],
1866-
"purl": "pkg:pypi/urllib3@2.0.6"
1866+
"purl": "pkg:pypi/urllib3@2.0.7"
18671867
},
18681868
{
18691869
"type": "library",

sbom/cve-bin-tool-py3.11.spdx

Lines changed: 10 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -2,10 +2,10 @@ SPDXVersion: SPDX-2.3
22
DataLicense: CC0-1.0
33
SPDXID: SPDXRef-DOCUMENT
44
DocumentName: Python-cve-bin-tool
5-
DocumentNamespace: http://spdx.org/spdxdocs/Python-cve-bin-tool-1630fc55-0869-4565-9fcd-5a9c2c3c3614
5+
DocumentNamespace: http://spdx.org/spdxdocs/Python-cve-bin-tool-65e198f7-3f3e-46bd-9024-dd466ede7839
66
LicenseListVersion: 3.21
77
Creator: Tool: sbom4python-0.10.0
8-
Created: 2023-10-16T00:24:59Z
8+
Created: 2023-10-23T00:24:26Z
99
CreatorComment: <text>This document has been automatically generated.</text>
1010
#####
1111

@@ -101,17 +101,17 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:hynek_schlawack:attrs:23.1.0:*:*:*:*:*
101101

102102
PackageName: charset-normalizer
103103
SPDXID: SPDXRef-Package-7-charset-normalizer
104-
PackageVersion: 3.3.0
104+
PackageVersion: 3.3.1
105105
PrimaryPackagePurpose: LIBRARY
106106
PackageSupplier: Person: Ahmed TAHRI (ahmed.tahri@cloudnursery.dev)
107-
PackageDownloadLocation: https://pypi.org/project/charset-normalizer/3.3.0
107+
PackageDownloadLocation: https://pypi.org/project/charset-normalizer/3.3.1
108108
FilesAnalyzed: false
109109
PackageLicenseDeclared: MIT
110110
PackageLicenseConcluded: MIT
111111
PackageCopyrightText: NOASSERTION
112112
PackageSummary: <text>The Real First Universal Charset Detector. Open, modern and actively maintained alternative to Chardet.</text>
113-
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/charset-normalizer@3.3.0
114-
ExternalRef: SECURITY cpe23Type cpe:2.3:a:ahmed_tahri:charset-normalizer:3.3.0:*:*:*:*:*:*:*
113+
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/charset-normalizer@3.3.1
114+
ExternalRef: SECURITY cpe23Type cpe:2.3:a:ahmed_tahri:charset-normalizer:3.3.1:*:*:*:*:*:*:*
115115
#####
116116

117117
PackageName: multidict
@@ -857,17 +857,17 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:kenneth_reitz:certifi:2023.7.22:*:*:*:
857857

858858
PackageName: urllib3
859859
SPDXID: SPDXRef-Package-56-urllib3
860-
PackageVersion: 2.0.6
860+
PackageVersion: 2.0.7
861861
PrimaryPackagePurpose: LIBRARY
862862
PackageSupplier: Person: Andrey Petrov (andrey.petrov@shazow.net)
863-
PackageDownloadLocation: https://pypi.org/project/urllib3/2.0.6
863+
PackageDownloadLocation: https://pypi.org/project/urllib3/2.0.7
864864
FilesAnalyzed: false
865865
PackageLicenseDeclared: NOASSERTION
866866
PackageLicenseConcluded: NOASSERTION
867867
PackageCopyrightText: NOASSERTION
868868
PackageSummary: <text>HTTP library with thread-safe connection pooling, file post, and more.</text>
869-
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/urllib3@2.0.6
870-
ExternalRef: SECURITY cpe23Type cpe:2.3:a:andrey_petrov:urllib3:2.0.6:*:*:*:*:*:*:*
869+
ExternalRef: PACKAGE-MANAGER purl pkg:pypi/urllib3@2.0.7
870+
ExternalRef: SECURITY cpe23Type cpe:2.3:a:andrey_petrov:urllib3:2.0.7:*:*:*:*:*:*:*
871871
#####
872872

873873
PackageName: rich

0 commit comments

Comments
 (0)