chore: update SBOM for Python 3.8

ffontaine · Apr 3, 2023 · 2368061 · 2368061
1 parent 2c603dc
commit 2368061
Show file tree

Hide file tree

Showing 2 changed files with 152 additions and 116 deletions.
diff --git a/sbom/cve-bin-tool-py3.8.json b/sbom/cve-bin-tool-py3.8.json
@@ -2,14 +2,14 @@
   "$schema": "http://cyclonedx.org/schema/bom-1.4.schema.json",
   "bomFormat": "CycloneDX",
   "specVersion": "1.4",
-  "serialNumber": "urn:uuid8615dee1-fdcd-4199-9336-a129eaecb135",
+  "serialNumber": "urn:uuide830a0da-1299-44c0-ae89-7853d99a66d0",
   "version": 1,
   "metadata": {
-    "timestamp": "2023-03-27T00:31:10Z",
+    "timestamp": "2023-04-03T00:55:26Z",
     "tools": [
       {
         "name": "sbom4python",
-        "version": "0.8.0"
+        "version": "0.9.0"
       }
     ],
     "component": {
@@ -364,7 +364,8 @@
       "licenses": [
         {
           "license": {
-            "name": "LGPLv3+"
+            "id": "LGPL-3.0-or-later",
+            "url": "https://www.gnu.org/licenses/lgpl-3.0-standalone.html"
           }
         }
       ],
@@ -395,7 +396,8 @@
       "licenses": [
         {
           "license": {
-            "name": "PSFL"
+            "id": "PSF-2.0",
+            "url": "https://opensource.org/licenses/Python-2.0"
           }
         }
       ],
@@ -549,7 +551,8 @@
       "licenses": [
         {
           "license": {
-            "name": "ASL 2.0"
+            "id": "Apache-2.0",
+            "url": "https://www.apache.org/licenses/LICENSE-2.0"
           }
         }
       ],
@@ -821,7 +824,8 @@
       "licenses": [
         {
           "license": {
-            "name": "BSD"
+            "id": "BSD-3-Clause",
+            "url": "https://opensource.org/licenses/BSD-3-Clause"
           }
         }
       ],
@@ -884,7 +888,8 @@
       "licenses": [
         {
           "license": {
-            "name": "ASL 2"
+            "id": "Apache-2.0",
+            "url": "https://www.apache.org/licenses/LICENSE-2.0"
           }
         }
       ],
@@ -901,7 +906,7 @@
       "type": "library",
       "bom-ref": "31-pyopenssl",
       "name": "pyopenssl",
-      "version": "23.1.0",
+      "version": "23.1.1",
       "supplier": {
         "name": "The pyOpenSSL developers",
         "contact": [
@@ -910,7 +915,7 @@
           }
         ]
       },
-      "cpe": "cpe:2.3:a:the_pyopenssl_developers:pyopenssl:23.1.0:*:*:*:*:*:*:*",
+      "cpe": "cpe:2.3:a:the_pyopenssl_developers:pyopenssl:23.1.1:*:*:*:*:*:*:*",
       "description": "Python wrapper module around the OpenSSL library",
       "licenses": [
         {
@@ -927,7 +932,7 @@
           "comment": "Home page for project"
         }
       ],
-      "purl": "pkg:pypi/pyopenssl@23.1.0"
+      "purl": "pkg:pypi/pyopenssl@23.1.1"
     },
     {
       "type": "library",
@@ -947,7 +952,7 @@
       "licenses": [
         {
           "license": {
-            "name": "(Apache-2.0 OR BSD-3-Clause) AND PSF-2.0"
+            "expression": "(Apache-2.0 OR BSD-3-Clause) AND PSF-2.0"
           }
         }
       ],
@@ -1010,7 +1015,8 @@
       "licenses": [
         {
           "license": {
-            "name": "BSD"
+            "id": "BSD-3-Clause",
+            "url": "https://opensource.org/licenses/BSD-3-Clause"
           }
         }
       ],
@@ -1091,7 +1097,7 @@
       "type": "library",
       "bom-ref": "37-google-auth",
       "name": "google-auth",
-      "version": "2.16.3",
+      "version": "2.17.1",
       "supplier": {
         "name": "Google Cloud Platform",
         "contact": [
@@ -1100,7 +1106,7 @@
           }
         ]
       },
-      "cpe": "cpe:2.3:a:google_cloud_platform:google-auth:2.16.3:*:*:*:*:*:*:*",
+      "cpe": "cpe:2.3:a:google_cloud_platform:google-auth:2.17.1:*:*:*:*:*:*:*",
       "description": "Google Authentication Library",
       "licenses": [
         {
@@ -1117,7 +1123,7 @@
           "comment": "Home page for project"
         }
       ],
-      "purl": "pkg:pypi/google-auth@2.16.3"
+      "purl": "pkg:pypi/google-auth@2.17.1"
     },
     {
       "type": "library",
@@ -1169,7 +1175,8 @@
       "licenses": [
         {
           "license": {
-            "name": "Apache"
+            "id": "Apache-2.0",
+            "url": "https://www.apache.org/licenses/LICENSE-2.0"
           }
         }
       ],
@@ -1412,7 +1419,7 @@
       "licenses": [
         {
           "license": {
-            "name": "BSD-2-Clause or Apache-2.0"
+            "expression": "BSD-2-Clause or Apache-2.0"
           }
         }
       ],
@@ -1429,7 +1436,7 @@
       "type": "library",
       "bom-ref": "49-plotly",
       "name": "plotly",
-      "version": "5.13.1",
+      "version": "5.14.0",
       "supplier": {
         "name": "Chris P",
         "contact": [
@@ -1438,7 +1445,7 @@
           }
         ]
       },
-      "cpe": "cpe:2.3:a:chris_p:plotly:5.13.1:*:*:*:*:*:*:*",
+      "cpe": "cpe:2.3:a:chris_p:plotly:5.14.0:*:*:*:*:*:*:*",
       "description": "An open-source, interactive data visualization library for Python",
       "licenses": [
         {
@@ -1455,7 +1462,7 @@
           "comment": "Home page for project"
         }
       ],
-      "purl": "pkg:pypi/plotly@5.13.1"
+      "purl": "pkg:pypi/plotly@5.14.0"
     },
     {
       "type": "library",
@@ -1621,7 +1628,7 @@
       "type": "library",
       "bom-ref": "55-rich",
       "name": "rich",
-      "version": "13.3.2",
+      "version": "13.3.3",
       "supplier": {
         "name": "Will McGugan",
         "contact": [
@@ -1630,7 +1637,7 @@
           }
         ]
       },
-      "cpe": "cpe:2.3:a:will_mcgugan:rich:13.3.2:*:*:*:*:*:*:*",
+      "cpe": "cpe:2.3:a:will_mcgugan:rich:13.3.3:*:*:*:*:*:*:*",
       "description": "Render rich text, tables, progress bars, syntax highlighting, markdown and more to the terminal",
       "licenses": [
         {
@@ -1647,7 +1654,7 @@
           "comment": "Home page for project"
         }
       ],
-      "purl": "pkg:pypi/rich@13.3.2"
+      "purl": "pkg:pypi/rich@13.3.3"
     },
     {
       "type": "library",
@@ -1878,7 +1885,8 @@
       "licenses": [
         {
           "license": {
-            "name": "BSD"
+            "id": "BSD-3-Clause",
+            "url": "https://opensource.org/licenses/BSD-3-Clause"
           }
         }
       ],
@@ -2097,6 +2105,7 @@
     {
       "ref": "49-plotly",
       "dependsOn": [
+        "48-packaging",
         "50-tenacity"
       ]
     },