Skip to content

Commit 1a434c7

Browse files
chore: Update SBOM (#2623)
Co-authored-by: blink1073 <2096628+blink1073@users.noreply.github.com>
1 parent cef27b1 commit 1a434c7

File tree

1 file changed

+168
-125
lines changed

1 file changed

+168
-125
lines changed

sbom.json

Lines changed: 168 additions & 125 deletions
Original file line numberDiff line numberDiff line change
@@ -1,159 +1,202 @@
11
{
2-
"bomFormat": "CycloneDX",
3-
"specVersion": "1.5",
4-
"serialNumber": "urn:uuid:f91a87bf-a37f-4c1e-805f-142f60b2c960",
5-
"version": 1,
6-
"metadata": {
7-
"timestamp": "2025-11-20T21:30:34Z",
8-
"tools": {
9-
"components": [
2+
"components": [
3+
{
4+
"bom-ref": "dnspython==2.8.0",
5+
"description": "DNS toolkit",
6+
"externalReferences": [
107
{
11-
"group": "@cyclonedx",
12-
"name": "cdxgen",
13-
"version": "11.11.0",
14-
"purl": "pkg:npm/%40cyclonedx/cdxgen@11.11.0",
15-
"type": "application",
16-
"bom-ref": "pkg:npm/@cyclonedx/cdxgen@11.11.0",
17-
"author": "OWASP Foundation",
18-
"publisher": "OWASP Foundation"
19-
}
20-
]
21-
},
22-
"authors": [
23-
{
24-
"name": "OWASP Foundation"
25-
}
26-
],
27-
"lifecycles": [
28-
{
29-
"phase": "build"
30-
}
31-
],
32-
"component": {
33-
"name": "pymongo",
34-
"description": "PyMongo - the Official MongoDB Python driver",
35-
"authors": [
8+
"comment": "from packaging metadata Project-URL: documentation",
9+
"type": "documentation",
10+
"url": "https://dnspython.readthedocs.io/en/stable/"
11+
},
3612
{
37-
"name": "The MongoDB Python Team"
38-
}
39-
],
40-
"tags": [
41-
"bson",
42-
"gridfs",
43-
"mongo",
44-
"mongodb",
45-
"pymongo"
46-
],
47-
"properties": [
13+
"comment": "from packaging metadata Project-URL: issues",
14+
"type": "issue-tracker",
15+
"url": "https://github.com/rthalley/dnspython/issues"
16+
},
4817
{
49-
"name": "cdx:pypi:requiresPython",
50-
"value": ">=3.9"
18+
"comment": "from packaging metadata Project-URL: repository",
19+
"type": "vcs",
20+
"url": "https://github.com/rthalley/dnspython.git"
5121
},
5222
{
53-
"name": "SrcFile",
54-
"value": "/home/runner/work/mongo-python-driver/mongo-python-driver/pyproject.toml"
23+
"comment": "from packaging metadata Project-URL: homepage",
24+
"type": "website",
25+
"url": "https://www.dnspython.org"
5526
}
5627
],
57-
"type": "application",
58-
"bom-ref": "pkg:pypi/pymongo@latest",
59-
"purl": "pkg:pypi/pymongo@latest",
60-
"version": "latest",
6128
"licenses": [
6229
{
6330
"license": {
64-
"id": "Apache-2.0",
65-
"url": "https://opensource.org/licenses/Apache-2.0"
31+
"id": "ISC"
6632
}
6733
}
68-
]
34+
],
35+
"name": "dnspython",
36+
"purl": "pkg:pypi/dnspython@2.8.0",
37+
"type": "library",
38+
"version": "2.8.0"
6939
},
70-
"properties": [
71-
{
72-
"name": "cdx:bom:componentTypes",
73-
"value": "pypi"
74-
},
75-
{
76-
"name": "cdx:bom:componentSrcFiles",
77-
"value": "pyproject.toml"
78-
}
79-
]
80-
},
81-
"components": [
8240
{
83-
"group": "",
84-
"name": "pymongo",
85-
"version": "latest",
86-
"purl": "pkg:pypi/pymongo@latest",
87-
"type": "library",
88-
"bom-ref": "pkg:pypi/pymongo@latest",
89-
"properties": [
41+
"bom-ref": "pymongo==4.16.0.dev0",
42+
"description": "PyMongo - the Official MongoDB Python driver",
43+
"externalReferences": [
44+
{
45+
"comment": "PackageSource: Local",
46+
"type": "distribution",
47+
"url": "file:///home/runner/work/mongo-python-driver/mongo-python-driver"
48+
},
49+
{
50+
"comment": "from packaging metadata Project-URL: Documentation",
51+
"type": "documentation",
52+
"url": "https://www.mongodb.com/docs/languages/python/pymongo-driver/current/"
53+
},
9054
{
91-
"name": "SrcFile",
92-
"value": "pyproject.toml"
55+
"comment": "from packaging metadata Project-URL: Tracker",
56+
"type": "issue-tracker",
57+
"url": "https://jira.mongodb.org/projects/PYTHON/issues"
58+
},
59+
{
60+
"comment": "from packaging metadata Project-URL: Source",
61+
"type": "other",
62+
"url": "https://github.com/mongodb/mongo-python-driver"
63+
},
64+
{
65+
"comment": "from packaging metadata Project-URL: Homepage",
66+
"type": "website",
67+
"url": "https://www.mongodb.org"
9368
}
9469
],
95-
"evidence": {
96-
"identity": {
97-
"field": "purl",
98-
"confidence": 1,
99-
"methods": [
100-
{
101-
"technique": "instrumentation",
102-
"confidence": 1,
103-
"value": "/home/runner/work/mongo-python-driver/mongo-python-driver/.venv"
104-
}
105-
]
106-
}
107-
}
108-
},
109-
{
110-
"author": "Bob Halley <halley@dnspython.org>",
111-
"group": "",
112-
"name": "dnspython",
113-
"version": "2.8.0",
114-
"description": "DNS toolkit",
11570
"licenses": [
11671
{
11772
"license": {
118-
"id": "ISC",
119-
"url": "https://opensource.org/licenses/ISC"
73+
"id": "Apache-2.0"
12074
}
12175
}
12276
],
123-
"purl": "pkg:pypi/dnspython@2.8.0",
77+
"name": "pymongo",
12478
"type": "library",
125-
"bom-ref": "pkg:pypi/dnspython@2.8.0",
126-
"properties": [
127-
{
128-
"name": "SrcFile",
129-
"value": "pyproject.toml"
130-
}
131-
],
132-
"evidence": {
133-
"identity": {
134-
"field": "purl",
135-
"confidence": 1,
136-
"methods": [
137-
{
138-
"technique": "instrumentation",
139-
"confidence": 1,
140-
"value": "/home/runner/work/mongo-python-driver/mongo-python-driver/.venv"
141-
}
142-
]
143-
}
144-
}
79+
"version": "4.16.0.dev0",
80+
"purl": "pkg:pypi/pymongo@4.16.0.dev0"
14581
}
14682
],
14783
"dependencies": [
14884
{
149-
"ref": "pkg:pypi/dnspython@2.8.0",
150-
"dependsOn": []
85+
"ref": "dnspython==2.8.0"
15186
},
15287
{
153-
"ref": "pkg:pypi/pymongo@latest",
15488
"dependsOn": [
155-
"pkg:pypi/dnspython@2.8.0"
89+
"dnspython==2.8.0"
90+
],
91+
"ref": "pymongo==4.16.0.dev0"
92+
}
93+
],
94+
"metadata": {
95+
"timestamp": "2025-11-24T16:21:47.249880+00:00",
96+
"tools": {
97+
"components": [
98+
{
99+
"description": "CycloneDX Software Bill of Materials (SBOM) generator for Python projects and environments",
100+
"externalReferences": [
101+
{
102+
"type": "build-system",
103+
"url": "https://github.com/CycloneDX/cyclonedx-python/actions"
104+
},
105+
{
106+
"type": "distribution",
107+
"url": "https://pypi.org/project/cyclonedx-bom/"
108+
},
109+
{
110+
"type": "documentation",
111+
"url": "https://cyclonedx-bom-tool.readthedocs.io/"
112+
},
113+
{
114+
"type": "issue-tracker",
115+
"url": "https://github.com/CycloneDX/cyclonedx-python/issues"
116+
},
117+
{
118+
"type": "license",
119+
"url": "https://github.com/CycloneDX/cyclonedx-python/blob/main/LICENSE"
120+
},
121+
{
122+
"type": "release-notes",
123+
"url": "https://github.com/CycloneDX/cyclonedx-python/blob/main/CHANGELOG.md"
124+
},
125+
{
126+
"type": "vcs",
127+
"url": "https://github.com/CycloneDX/cyclonedx-python/"
128+
},
129+
{
130+
"type": "website",
131+
"url": "https://github.com/CycloneDX/cyclonedx-python/#readme"
132+
}
133+
],
134+
"group": "CycloneDX",
135+
"licenses": [
136+
{
137+
"license": {
138+
"id": "Apache-2.0"
139+
}
140+
}
141+
],
142+
"name": "cyclonedx-py",
143+
"type": "application",
144+
"version": "7.2.1"
145+
},
146+
{
147+
"description": "Python library for CycloneDX",
148+
"externalReferences": [
149+
{
150+
"type": "build-system",
151+
"url": "https://github.com/CycloneDX/cyclonedx-python-lib/actions"
152+
},
153+
{
154+
"type": "distribution",
155+
"url": "https://pypi.org/project/cyclonedx-python-lib/"
156+
},
157+
{
158+
"type": "documentation",
159+
"url": "https://cyclonedx-python-library.readthedocs.io/"
160+
},
161+
{
162+
"type": "issue-tracker",
163+
"url": "https://github.com/CycloneDX/cyclonedx-python-lib/issues"
164+
},
165+
{
166+
"type": "license",
167+
"url": "https://github.com/CycloneDX/cyclonedx-python-lib/blob/main/LICENSE"
168+
},
169+
{
170+
"type": "release-notes",
171+
"url": "https://github.com/CycloneDX/cyclonedx-python-lib/blob/main/CHANGELOG.md"
172+
},
173+
{
174+
"type": "vcs",
175+
"url": "https://github.com/CycloneDX/cyclonedx-python-lib"
176+
},
177+
{
178+
"type": "website",
179+
"url": "https://github.com/CycloneDX/cyclonedx-python-lib/#readme"
180+
}
181+
],
182+
"group": "CycloneDX",
183+
"licenses": [
184+
{
185+
"license": {
186+
"id": "Apache-2.0"
187+
}
188+
}
189+
],
190+
"name": "cyclonedx-python-lib",
191+
"type": "library",
192+
"version": "11.5.0"
193+
}
156194
]
157195
}
158-
]
159-
}
196+
},
197+
"serialNumber": "urn:uuid:7a19d697-d41e-4e88-b953-4bccb5d79937",
198+
"version": 1,
199+
"$schema": "http://cyclonedx.org/schema/bom-1.5.schema.json",
200+
"bomFormat": "CycloneDX",
201+
"specVersion": "1.5"
202+
}

0 commit comments

Comments
 (0)