chore: update SBOM for Python 3.9 (#4154)

Co-authored-by: GitHub <[email protected]>
intel · Jun 3, 2024 · 1ae6ab0 · 1ae6ab0
1 parent 969e0eb
commit 1ae6ab0
Show file tree

Hide file tree

Showing 2 changed files with 28 additions and 28 deletions.
diff --git a/sbom/cve-bin-tool-py3.9.json b/sbom/cve-bin-tool-py3.9.json
@@ -2,10 +2,10 @@
   "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
   "bomFormat": "CycloneDX",
   "specVersion": "1.6",
-  "serialNumber": "urn:uuid:0781fcf5-6025-4253-8689-3fb0fee811fe",
+  "serialNumber": "urn:uuid:6dca212c-a25c-458e-a965-17c2f0a95b2e",
   "version": 1,
   "metadata": {
-    "timestamp": "2024-05-27T00:28:55Z",
+    "timestamp": "2024-06-03T00:29:07Z",
     "tools": {
       "components": [
         {
@@ -1839,7 +1839,7 @@
       "type": "library",
       "bom-ref": "42-zipp",
       "name": "zipp",
-      "version": "3.19.0",
+      "version": "3.19.1",
       "supplier": {
         "name": "Jason R .",
         "contact": [
@@ -1848,16 +1848,16 @@
           }
         ]
       },
-      "cpe": "cpe:2.3:a:jason_r.:zipp:3.19.0:*:*:*:*:*:*:*",
+      "cpe": "cpe:2.3:a:jason_r.:zipp:3.19.1:*:*:*:*:*:*:*",
       "description": "Backport of pathlib-compatible object wrapper for zip files",
       "externalReferences": [
         {
-          "url": "https://pypi.org/project/zipp/3.19.0",
+          "url": "https://pypi.org/project/zipp/3.19.1",
           "type": "distribution",
           "comment": "Download location for component"
         }
       ],
-      "purl": "pkg:pypi/[email protected].0",
+      "purl": "pkg:pypi/[email protected].1",
       "properties": [
         {
           "name": "language",
@@ -2436,7 +2436,7 @@
       "type": "library",
       "bom-ref": "57-requests",
       "name": "requests",
-      "version": "2.32.2",
+      "version": "2.32.3",
       "supplier": {
         "name": "Kenneth Reitz",
         "contact": [
@@ -2445,7 +2445,7 @@
           }
         ]
       },
-      "cpe": "cpe:2.3:a:kenneth_reitz:requests:2.32.2:*:*:*:*:*:*:*",
+      "cpe": "cpe:2.3:a:kenneth_reitz:requests:2.32.3:*:*:*:*:*:*:*",
       "description": "Python HTTP for Humans.",
       "licenses": [
         {
@@ -2457,12 +2457,12 @@
       ],
       "externalReferences": [
         {
-          "url": "https://pypi.org/project/requests/2.32.2",
+          "url": "https://pypi.org/project/requests/2.32.3",
           "type": "distribution",
           "comment": "Download location for component"
         }
       ],
-      "purl": "pkg:pypi/[email protected].2",
+      "purl": "pkg:pypi/[email protected].3",
       "properties": [
         {
           "name": "language",
@@ -2478,7 +2478,7 @@
       "type": "library",
       "bom-ref": "58-certifi",
       "name": "certifi",
-      "version": "2024.2.2",
+      "version": "2024.6.2",
       "supplier": {
         "name": "Kenneth Reitz",
         "contact": [
@@ -2487,7 +2487,7 @@
           }
         ]
       },
-      "cpe": "cpe:2.3:a:kenneth_reitz:certifi:2024.2.2:*:*:*:*:*:*:*",
+      "cpe": "cpe:2.3:a:kenneth_reitz:certifi:2024.6.2:*:*:*:*:*:*:*",
       "description": "Python package for providing Mozilla's CA Bundle.",
       "licenses": [
         {
@@ -2499,12 +2499,12 @@
       ],
       "externalReferences": [
         {
-          "url": "https://pypi.org/project/certifi/2024.2.2",
+          "url": "https://pypi.org/project/certifi/2024.6.2",
           "type": "distribution",
           "comment": "Download location for component"
         }
       ],
-      "purl": "pkg:pypi/certifi@2024.2.2",
+      "purl": "pkg:pypi/certifi@2024.6.2",
       "properties": [
         {
           "name": "language",

diff --git a/sbom/cve-bin-tool-py3.9.spdx b/sbom/cve-bin-tool-py3.9.spdx
@@ -2,10 +2,10 @@ SPDXVersion: SPDX-2.3
 DataLicense: CC0-1.0
 SPDXID: SPDXRef-DOCUMENT
 DocumentName: Python-cve-bin-tool
-DocumentNamespace: http://spdx.org/spdxdocs/Python-cve-bin-tool-2d1ead98-5e2d-4e22-afb9-6dc405871fbe
+DocumentNamespace: http://spdx.org/spdxdocs/Python-cve-bin-tool-a77d888a-d245-4b2d-84fa-fba91a1777cb
 LicenseListVersion: 3.22
 Creator: Tool: sbom4python-0.10.4
-Created: 2024-05-27T00:27:28Z
+Created: 2024-06-03T00:27:33Z
 CreatorComment: <text>This document has been automatically generated.</text>
 ##### 
 
@@ -671,17 +671,17 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:jason_r._coombs:importlib-metadata:7.1
 
 PackageName: zipp
 SPDXID: SPDXRef-Package-42-zipp
-PackageVersion: 3.19.0
+PackageVersion: 3.19.1
 PrimaryPackagePurpose: LIBRARY
 PackageSupplier: Organization: Jason R. ([email protected])
-PackageDownloadLocation: https://pypi.org/project/zipp/3.19.0
+PackageDownloadLocation: https://pypi.org/project/zipp/3.19.1
 FilesAnalyzed: false
 PackageLicenseDeclared: NOASSERTION
 PackageLicenseConcluded: NOASSERTION
 PackageCopyrightText: NOASSERTION
 PackageSummary: <text>Backport of pathlib-compatible object wrapper for zip files</text>
-ExternalRef: PACKAGE_MANAGER purl pkg:pypi/[email protected].0
-ExternalRef: SECURITY cpe23Type cpe:2.3:a:jason_r.:zipp:3.19.0:*:*:*:*:*:*:*
+ExternalRef: PACKAGE_MANAGER purl pkg:pypi/[email protected].1
+ExternalRef: SECURITY cpe23Type cpe:2.3:a:jason_r.:zipp:3.19.1:*:*:*:*:*:*:*
 ##### 
 
 PackageName: jinja2
@@ -904,32 +904,32 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:vinay_sajip:python-gnupg:0.5.2:*:*:*:*
 
 PackageName: requests
 SPDXID: SPDXRef-Package-57-requests
-PackageVersion: 2.32.2
+PackageVersion: 2.32.3
 PrimaryPackagePurpose: LIBRARY
 PackageSupplier: Person: Kenneth Reitz ([email protected])
-PackageDownloadLocation: https://pypi.org/project/requests/2.32.2
+PackageDownloadLocation: https://pypi.org/project/requests/2.32.3
 FilesAnalyzed: false
 PackageLicenseDeclared: Apache-2.0
 PackageLicenseConcluded: Apache-2.0
 PackageCopyrightText: NOASSERTION
 PackageSummary: <text>Python HTTP for Humans.</text>
-ExternalRef: PACKAGE_MANAGER purl pkg:pypi/[email protected].2
-ExternalRef: SECURITY cpe23Type cpe:2.3:a:kenneth_reitz:requests:2.32.2:*:*:*:*:*:*:*
+ExternalRef: PACKAGE_MANAGER purl pkg:pypi/[email protected].3
+ExternalRef: SECURITY cpe23Type cpe:2.3:a:kenneth_reitz:requests:2.32.3:*:*:*:*:*:*:*
 ##### 
 
 PackageName: certifi
 SPDXID: SPDXRef-Package-58-certifi
-PackageVersion: 2024.2.2
+PackageVersion: 2024.6.2
 PrimaryPackagePurpose: LIBRARY
 PackageSupplier: Person: Kenneth Reitz ([email protected])
-PackageDownloadLocation: https://pypi.org/project/certifi/2024.2.2
+PackageDownloadLocation: https://pypi.org/project/certifi/2024.6.2
 FilesAnalyzed: false
 PackageLicenseDeclared: MPL-2.0
 PackageLicenseConcluded: MPL-2.0
 PackageCopyrightText: NOASSERTION
 PackageSummary: <text>Python package for providing Mozilla's CA Bundle.</text>
-ExternalRef: PACKAGE_MANAGER purl pkg:pypi/certifi@2024.2.2
-ExternalRef: SECURITY cpe23Type cpe:2.3:a:kenneth_reitz:certifi:2024.2.2:*:*:*:*:*:*:*
+ExternalRef: PACKAGE_MANAGER purl pkg:pypi/certifi@2024.6.2
+ExternalRef: SECURITY cpe23Type cpe:2.3:a:kenneth_reitz:certifi:2024.6.2:*:*:*:*:*:*:*
 ##### 
 
 PackageName: charset-normalizer