chore: update SBOM for Python 3.10 (#2722)

Co-authored-by: GitHub <noreply@github.com>
intel · Feb 21, 2023 · 25c0ee6 · 25c0ee6
1 parent dde1c55
commit 25c0ee6
Show file tree

Hide file tree

Showing 2 changed files with 22 additions and 22 deletions.
diff --git a/sbom/cve-bin-tool-py3.10.json b/sbom/cve-bin-tool-py3.10.json
@@ -2,10 +2,10 @@
   "$schema": "http://cyclonedx.org/schema/bom-1.4.schema.json",
   "bomFormat": "CycloneDX",
   "specVersion": "1.4",
-  "serialNumber": "urn:uuid5953ec30-bf3f-4414-b564-94e116d76a46",
+  "serialNumber": "urn:uuid02c1dd81-9f72-4f7c-8235-7caf95a8b4c1",
   "version": 1,
   "metadata": {
-    "timestamp": "2023-02-13T05:15:23Z",
+    "timestamp": "2023-02-21T05:31:12Z",
     "tools": [
       {
         "name": "sbom4python",
@@ -191,10 +191,10 @@
       "type": "library",
       "bom-ref": "12-soupsieve",
       "name": "soupsieve",
-      "version": "2.3.2.post1",
+      "version": "2.4",
       "author": "Isaac Muse",
-      "cpe": "cpe:/a:isaac_muse:soupsieve:2.3.2.post1",
-      "purl": "pkg:pypi/soupsieve@2.3.2.post1"
+      "cpe": "cpe:/a:isaac_muse:soupsieve:2.4",
+      "purl": "pkg:pypi/soupsieve@2.4"
     },
     {
       "type": "library",
@@ -544,9 +544,9 @@
       "type": "library",
       "bom-ref": "37-google-auth",
       "name": "google-auth",
-      "version": "2.16.0",
+      "version": "2.16.1",
       "author": "Google Cloud Platform",
-      "cpe": "cpe:/a:google_cloud_platform:google-auth:2.16.0",
+      "cpe": "cpe:/a:google_cloud_platform:google-auth:2.16.1",
       "licenses": [
         {
           "license": {
@@ -555,7 +555,7 @@
           }
         }
       ],
-      "purl": "pkg:pypi/google-auth@2.16.0"
+      "purl": "pkg:pypi/google-auth@2.16.1"
     },
     {
       "type": "library",
@@ -886,10 +886,10 @@
       "type": "library",
       "bom-ref": "59-zstandard",
       "name": "zstandard",
-      "version": "0.19.0",
+      "version": "0.20.0",
       "author": "Gregory Szorc",
-      "cpe": "cpe:/a:gregory_szorc:zstandard:0.19.0",
-      "purl": "pkg:pypi/zstandard@0.19.0"
+      "cpe": "cpe:/a:gregory_szorc:zstandard:0.20.0",
+      "purl": "pkg:pypi/zstandard@0.20.0"
     }
   ],
   "dependencies": [

diff --git a/sbom/cve-bin-tool-py3.10.spdx b/sbom/cve-bin-tool-py3.10.spdx
@@ -2,10 +2,10 @@ SPDXVersion: SPDX-2.2
 DataLicense: CC0-1.0
 SPDXID: SPDXRef-DOCUMENT
 DocumentName: cve-bin-tool
-DocumentNamespace: http://spdx.org/spdxdocs/cve-bin-tool-6a4d6040-a58d-4f5e-b993-ca04d8904b2e
+DocumentNamespace: http://spdx.org/spdxdocs/cve-bin-tool-3f2d1a08-0df5-4665-8eea-27f2ab706dc1
 LicenseListVersion: 3.18
 Creator: Tool: sbom4python-0.7.0
-Created: 2023-02-13T05:14:19Z
+Created: 2023-02-21T05:30:07Z
 CreatorComment: <text>This document has been automatically generated.</text>
 ##### 
 
@@ -163,15 +163,15 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:leonard_richardson:beautifulsoup4:4.11
 PackageName: soupsieve
 SPDXID: SPDXRef-Package-12-soupsieve
 PackageSupplier: Person: Isaac Muse (use@gmail.com)
-PackageVersion: 2.3.2.post1
+PackageVersion: 2.4
 PackageDownloadLocation: NOASSERTION
 FilesAnalyzed: false
 ##### Reported license 
 PackageLicenseConcluded: NOASSERTION
 PackageLicenseDeclared: NOASSERTION
 PackageCopyrightText: NOASSERTION
-ExternalRef: PACKAGE-MANAGER purl pkg:pypi/soupsieve@2.3.2.post1
-ExternalRef: SECURITY cpe23Type cpe:2.3:a:isaac_muse:soupsieve:2.3.2.post1:*:*:*:*:*:*:*
+ExternalRef: PACKAGE-MANAGER purl pkg:pypi/soupsieve@2.4
+ExternalRef: SECURITY cpe23Type cpe:2.3:a:isaac_muse:soupsieve:2.4:*:*:*:*:*:*:*
 ##### 
 
 PackageName: cvss
@@ -513,15 +513,15 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:craig_citro:google-apitools:0.5.32:*:*
 PackageName: google-auth
 SPDXID: SPDXRef-Package-37-google-auth
 PackageSupplier: Organization: Google Cloud Platform (googleapis-packages@google.com)
-PackageVersion: 2.16.0
+PackageVersion: 2.16.1
 PackageDownloadLocation: NOASSERTION
 FilesAnalyzed: false
 ##### Reported license Apache 2.0
 PackageLicenseConcluded: Apache-2.0
 PackageLicenseDeclared: Apache-2.0
 PackageCopyrightText: NOASSERTION
-ExternalRef: PACKAGE-MANAGER purl pkg:pypi/google-auth@2.16.0
-ExternalRef: SECURITY cpe23Type cpe:2.3:a:google_cloud_platform:google-auth:2.16.0:*:*:*:*:*:*:*
+ExternalRef: PACKAGE-MANAGER purl pkg:pypi/google-auth@2.16.1
+ExternalRef: SECURITY cpe23Type cpe:2.3:a:google_cloud_platform:google-auth:2.16.1:*:*:*:*:*:*:*
 ##### 
 
 PackageName: cachetools
@@ -821,15 +821,15 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:davide_brunato:elementpath:4.0.1:*:*:*
 PackageName: zstandard
 SPDXID: SPDXRef-Package-59-zstandard
 PackageSupplier: Person: Gregory Szorc (gregory.szorc@gmail.com)
-PackageVersion: 0.19.0
+PackageVersion: 0.20.0
 PackageDownloadLocation: NOASSERTION
 FilesAnalyzed: false
 ##### Reported license BSD
 PackageLicenseConcluded: NOASSERTION
 PackageLicenseDeclared: NOASSERTION
 PackageCopyrightText: NOASSERTION
-ExternalRef: PACKAGE-MANAGER purl pkg:pypi/zstandard@0.19.0
-ExternalRef: SECURITY cpe23Type cpe:2.3:a:gregory_szorc:zstandard:0.19.0:*:*:*:*:*:*:*
+ExternalRef: PACKAGE-MANAGER purl pkg:pypi/zstandard@0.20.0
+ExternalRef: SECURITY cpe23Type cpe:2.3:a:gregory_szorc:zstandard:0.20.0:*:*:*:*:*:*:*
 Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-Package-1-cve-bin-tool
 Relationship: SPDXRef-Package-1-cve-bin-tool DEPENDS_ON SPDXRef-Package-11-beautifulsoup4
 Relationship: SPDXRef-Package-1-cve-bin-tool DEPENDS_ON SPDXRef-Package-13-cvss