chore: update SBOM for Python 3.9

ffontaine · Feb 20, 2023 · 67d8761 · 67d8761
1 parent f58ffcc
commit 67d8761
Show file tree

Hide file tree

Showing 2 changed files with 22 additions and 22 deletions.
diff --git a/sbom/cve-bin-tool-py3.9.json b/sbom/cve-bin-tool-py3.9.json
@@ -2,10 +2,10 @@
   "$schema": "http://cyclonedx.org/schema/bom-1.4.schema.json",
   "bomFormat": "CycloneDX",
   "specVersion": "1.4",
-  "serialNumber": "urn:uuid50236333-8691-4c58-9c66-8a07f0c98760",
+  "serialNumber": "urn:uuid4f1d3f9b-8a8a-4e01-aed4-46eebbc45e28",
   "version": 1,
   "metadata": {
-    "timestamp": "2023-02-13T05:17:16Z",
+    "timestamp": "2023-02-20T01:02:58Z",
     "tools": [
       {
         "name": "sbom4python",
@@ -191,10 +191,10 @@
       "type": "library",
       "bom-ref": "12-soupsieve",
       "name": "soupsieve",
-      "version": "2.3.2.post1",
+      "version": "2.4",
       "author": "Isaac Muse",
-      "cpe": "cpe:/a:isaac_muse:soupsieve:2.3.2.post1",
-      "purl": "pkg:pypi/soupsieve@2.3.2.post1"
+      "cpe": "cpe:/a:isaac_muse:soupsieve:2.4",
+      "purl": "pkg:pypi/soupsieve@2.4"
     },
     {
       "type": "library",
@@ -544,9 +544,9 @@
       "type": "library",
       "bom-ref": "37-google-auth",
       "name": "google-auth",
-      "version": "2.16.0",
+      "version": "2.16.1",
       "author": "Google Cloud Platform",
-      "cpe": "cpe:/a:google_cloud_platform:google-auth:2.16.0",
+      "cpe": "cpe:/a:google_cloud_platform:google-auth:2.16.1",
       "licenses": [
         {
           "license": {
@@ -555,7 +555,7 @@
           }
         }
       ],
-      "purl": "pkg:pypi/google-auth@2.16.0"
+      "purl": "pkg:pypi/google-auth@2.16.1"
     },
     {
       "type": "library",
@@ -596,10 +596,10 @@
       "type": "library",
       "bom-ref": "41-zipp",
       "name": "zipp",
-      "version": "3.13.0",
+      "version": "3.14.0",
       "author": "Jason R. Coombs",
-      "cpe": "cpe:/a:jason_r._coombs:zipp:3.13.0",
-      "purl": "pkg:pypi/zipp@3.13.0"
+      "cpe": "cpe:/a:jason_r._coombs:zipp:3.14.0",
+      "purl": "pkg:pypi/zipp@3.14.0"
     },
     {
       "type": "library",

diff --git a/sbom/cve-bin-tool-py3.9.spdx b/sbom/cve-bin-tool-py3.9.spdx
@@ -2,10 +2,10 @@ SPDXVersion: SPDX-2.2
 DataLicense: CC0-1.0
 SPDXID: SPDXRef-DOCUMENT
 DocumentName: cve-bin-tool
-DocumentNamespace: http://spdx.org/spdxdocs/cve-bin-tool-3bfd4278-9d81-4e6f-909c-d53c1fb5fc4d
+DocumentNamespace: http://spdx.org/spdxdocs/cve-bin-tool-0981f29d-fbef-4171-9987-77791a0af643
 LicenseListVersion: 3.18
 Creator: Tool: sbom4python-0.7.0
-Created: 2023-02-13T05:16:05Z
+Created: 2023-02-20T01:01:24Z
 CreatorComment: <text>This document has been automatically generated.</text>
 ##### 
 
@@ -163,15 +163,15 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:leonard_richardson:beautifulsoup4:4.11
 PackageName: soupsieve
 SPDXID: SPDXRef-Package-12-soupsieve
 PackageSupplier: Person: Isaac Muse (use@gmail.com)
-PackageVersion: 2.3.2.post1
+PackageVersion: 2.4
 PackageDownloadLocation: NOASSERTION
 FilesAnalyzed: false
 ##### Reported license 
 PackageLicenseConcluded: NOASSERTION
 PackageLicenseDeclared: NOASSERTION
 PackageCopyrightText: NOASSERTION
-ExternalRef: PACKAGE-MANAGER purl pkg:pypi/soupsieve@2.3.2.post1
-ExternalRef: SECURITY cpe23Type cpe:2.3:a:isaac_muse:soupsieve:2.3.2.post1:*:*:*:*:*:*:*
+ExternalRef: PACKAGE-MANAGER purl pkg:pypi/soupsieve@2.4
+ExternalRef: SECURITY cpe23Type cpe:2.3:a:isaac_muse:soupsieve:2.4:*:*:*:*:*:*:*
 ##### 
 
 PackageName: cvss
@@ -513,15 +513,15 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:craig_citro:google-apitools:0.5.32:*:*
 PackageName: google-auth
 SPDXID: SPDXRef-Package-37-google-auth
 PackageSupplier: Organization: Google Cloud Platform (googleapis-packages@google.com)
-PackageVersion: 2.16.0
+PackageVersion: 2.16.1
 PackageDownloadLocation: NOASSERTION
 FilesAnalyzed: false
 ##### Reported license Apache 2.0
 PackageLicenseConcluded: Apache-2.0
 PackageLicenseDeclared: Apache-2.0
 PackageCopyrightText: NOASSERTION
-ExternalRef: PACKAGE-MANAGER purl pkg:pypi/google-auth@2.16.0
-ExternalRef: SECURITY cpe23Type cpe:2.3:a:google_cloud_platform:google-auth:2.16.0:*:*:*:*:*:*:*
+ExternalRef: PACKAGE-MANAGER purl pkg:pypi/google-auth@2.16.1
+ExternalRef: SECURITY cpe23Type cpe:2.3:a:google_cloud_platform:google-auth:2.16.1:*:*:*:*:*:*:*
 ##### 
 
 PackageName: cachetools
@@ -569,15 +569,15 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:jason_r._coombs:importlib-metadata:6.0
 PackageName: zipp
 SPDXID: SPDXRef-Package-41-zipp
 PackageSupplier: Organization: Jason R. Coombs (jaraco@jaraco.com)
-PackageVersion: 3.13.0
+PackageVersion: 3.14.0
 PackageDownloadLocation: NOASSERTION
 FilesAnalyzed: false
 ##### Reported license 
 PackageLicenseConcluded: NOASSERTION
 PackageLicenseDeclared: NOASSERTION
 PackageCopyrightText: NOASSERTION
-ExternalRef: PACKAGE-MANAGER purl pkg:pypi/zipp@3.13.0
-ExternalRef: SECURITY cpe23Type cpe:2.3:a:jason_r._coombs:zipp:3.13.0:*:*:*:*:*:*:*
+ExternalRef: PACKAGE-MANAGER purl pkg:pypi/zipp@3.14.0
+ExternalRef: SECURITY cpe23Type cpe:2.3:a:jason_r._coombs:zipp:3.14.0:*:*:*:*:*:*:*
 ##### 
 
 PackageName: jinja2