chore: update SBOM for Python 3.10 (#4153)

Co-authored-by: GitHub <[email protected]>
intel · Jun 3, 2024 · 53d3056 · 53d3056
1 parent 1ae6ab0
commit 53d3056
Show file tree

Hide file tree

Showing 2 changed files with 20 additions and 20 deletions.
diff --git a/sbom/cve-bin-tool-py3.10.json b/sbom/cve-bin-tool-py3.10.json
@@ -2,10 +2,10 @@
   "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
   "bomFormat": "CycloneDX",
   "specVersion": "1.6",
-  "serialNumber": "urn:uuid:b2dc5259-963f-4893-87ac-91f14b10d00c",
+  "serialNumber": "urn:uuid:81884484-1ead-4509-abb2-b308f15797f1",
   "version": 1,
   "metadata": {
-    "timestamp": "2024-05-27T00:28:44Z",
+    "timestamp": "2024-06-03T00:29:06Z",
     "tools": {
       "components": [
         {
@@ -2362,7 +2362,7 @@
       "type": "library",
       "bom-ref": "55-requests",
       "name": "requests",
-      "version": "2.32.2",
+      "version": "2.32.3",
       "supplier": {
         "name": "Kenneth Reitz",
         "contact": [
@@ -2371,7 +2371,7 @@
           }
         ]
       },
-      "cpe": "cpe:2.3:a:kenneth_reitz:requests:2.32.2:*:*:*:*:*:*:*",
+      "cpe": "cpe:2.3:a:kenneth_reitz:requests:2.32.3:*:*:*:*:*:*:*",
       "description": "Python HTTP for Humans.",
       "licenses": [
         {
@@ -2383,12 +2383,12 @@
       ],
       "externalReferences": [
         {
-          "url": "https://pypi.org/project/requests/2.32.2",
+          "url": "https://pypi.org/project/requests/2.32.3",
           "type": "distribution",
           "comment": "Download location for component"
         }
       ],
-      "purl": "pkg:pypi/[email protected].2",
+      "purl": "pkg:pypi/[email protected].3",
       "properties": [
         {
           "name": "language",
@@ -2404,7 +2404,7 @@
       "type": "library",
       "bom-ref": "56-certifi",
       "name": "certifi",
-      "version": "2024.2.2",
+      "version": "2024.6.2",
       "supplier": {
         "name": "Kenneth Reitz",
         "contact": [
@@ -2413,7 +2413,7 @@
           }
         ]
       },
-      "cpe": "cpe:2.3:a:kenneth_reitz:certifi:2024.2.2:*:*:*:*:*:*:*",
+      "cpe": "cpe:2.3:a:kenneth_reitz:certifi:2024.6.2:*:*:*:*:*:*:*",
       "description": "Python package for providing Mozilla's CA Bundle.",
       "licenses": [
         {
@@ -2425,12 +2425,12 @@
       ],
       "externalReferences": [
         {
-          "url": "https://pypi.org/project/certifi/2024.2.2",
+          "url": "https://pypi.org/project/certifi/2024.6.2",
           "type": "distribution",
           "comment": "Download location for component"
         }
       ],
-      "purl": "pkg:pypi/certifi@2024.2.2",
+      "purl": "pkg:pypi/certifi@2024.6.2",
       "properties": [
         {
           "name": "language",

diff --git a/sbom/cve-bin-tool-py3.10.spdx b/sbom/cve-bin-tool-py3.10.spdx
@@ -2,10 +2,10 @@ SPDXVersion: SPDX-2.3
 DataLicense: CC0-1.0
 SPDXID: SPDXRef-DOCUMENT
 DocumentName: Python-cve-bin-tool
-DocumentNamespace: http://spdx.org/spdxdocs/Python-cve-bin-tool-14a54b7e-c913-4e61-b581-813269f50967
+DocumentNamespace: http://spdx.org/spdxdocs/Python-cve-bin-tool-b364b017-d6d6-4fea-9a10-487368aa77e7
 LicenseListVersion: 3.22
 Creator: Tool: sbom4python-0.10.4
-Created: 2024-05-27T00:27:21Z
+Created: 2024-06-03T00:27:40Z
 CreatorComment: <text>This document has been automatically generated.</text>
 ##### 
 
@@ -873,32 +873,32 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:vinay_sajip:python-gnupg:0.5.2:*:*:*:*
 
 PackageName: requests
 SPDXID: SPDXRef-Package-55-requests
-PackageVersion: 2.32.2
+PackageVersion: 2.32.3
 PrimaryPackagePurpose: LIBRARY
 PackageSupplier: Person: Kenneth Reitz ([email protected])
-PackageDownloadLocation: https://pypi.org/project/requests/2.32.2
+PackageDownloadLocation: https://pypi.org/project/requests/2.32.3
 FilesAnalyzed: false
 PackageLicenseDeclared: Apache-2.0
 PackageLicenseConcluded: Apache-2.0
 PackageCopyrightText: NOASSERTION
 PackageSummary: <text>Python HTTP for Humans.</text>
-ExternalRef: PACKAGE_MANAGER purl pkg:pypi/[email protected].2
-ExternalRef: SECURITY cpe23Type cpe:2.3:a:kenneth_reitz:requests:2.32.2:*:*:*:*:*:*:*
+ExternalRef: PACKAGE_MANAGER purl pkg:pypi/[email protected].3
+ExternalRef: SECURITY cpe23Type cpe:2.3:a:kenneth_reitz:requests:2.32.3:*:*:*:*:*:*:*
 ##### 
 
 PackageName: certifi
 SPDXID: SPDXRef-Package-56-certifi
-PackageVersion: 2024.2.2
+PackageVersion: 2024.6.2
 PrimaryPackagePurpose: LIBRARY
 PackageSupplier: Person: Kenneth Reitz ([email protected])
-PackageDownloadLocation: https://pypi.org/project/certifi/2024.2.2
+PackageDownloadLocation: https://pypi.org/project/certifi/2024.6.2
 FilesAnalyzed: false
 PackageLicenseDeclared: MPL-2.0
 PackageLicenseConcluded: MPL-2.0
 PackageCopyrightText: NOASSERTION
 PackageSummary: <text>Python package for providing Mozilla's CA Bundle.</text>
-ExternalRef: PACKAGE_MANAGER purl pkg:pypi/certifi@2024.2.2
-ExternalRef: SECURITY cpe23Type cpe:2.3:a:kenneth_reitz:certifi:2024.2.2:*:*:*:*:*:*:*
+ExternalRef: PACKAGE_MANAGER purl pkg:pypi/certifi@2024.6.2
+ExternalRef: SECURITY cpe23Type cpe:2.3:a:kenneth_reitz:certifi:2024.6.2:*:*:*:*:*:*:*
 ##### 
 
 PackageName: charset-normalizer