chore: update SBOM for Python 3.10 (#2609)

Co-authored-by: GitHub <noreply@github.com>
intel · Jan 30, 2023 · 74f6893 · 74f6893
1 parent 8d42524
commit 74f6893
Show file tree

Hide file tree

Showing 2 changed files with 28 additions and 28 deletions.
diff --git a/sbom/cve-bin-tool-py3.10.json b/sbom/cve-bin-tool-py3.10.json
@@ -2,10 +2,10 @@
   "$schema": "http://cyclonedx.org/schema/bom-1.4.schema.json",
   "bomFormat": "CycloneDX",
   "specVersion": "1.4",
-  "serialNumber": "urn:uuida1fefaeb-562e-403f-86d3-fd18d4d5701c",
+  "serialNumber": "urn:uuidfff932c0-06ef-485f-b571-b427b750b70e",
   "version": 1,
   "metadata": {
-    "timestamp": "2023-01-23T00:25:54Z",
+    "timestamp": "2023-01-30T00:24:01Z",
     "tools": [
       {
         "name": "sbom4python",
@@ -200,10 +200,10 @@
       "type": "library",
       "bom-ref": "13-cvss",
       "name": "cvss",
-      "version": "2.5",
+      "version": "2.6",
       "author": "Stanislav Red Hat Product Security",
-      "cpe": "cpe:/a:stanislav_red_hat_product_security:cvss:2.5",
-      "purl": "pkg:pypi/cvss@2.5"
+      "cpe": "cpe:/a:stanislav_red_hat_product_security:cvss:2.6",
+      "purl": "pkg:pypi/cvss@2.6"
     },
     {
       "type": "library",
@@ -235,9 +235,9 @@
       "type": "library",
       "bom-ref": "16-gsutil",
       "name": "gsutil",
-      "version": "5.18",
+      "version": "5.19",
       "author": "Google Inc.",
-      "cpe": "cpe:/a:google_inc.:gsutil:5.18",
+      "cpe": "cpe:/a:google_inc.:gsutil:5.19",
       "licenses": [
         {
           "license": {
@@ -246,7 +246,7 @@
           }
         }
       ],
-      "purl": "pkg:pypi/gsutil@5.18"
+      "purl": "pkg:pypi/gsutil@5.19"
     },
     {
       "type": "library",
@@ -664,9 +664,9 @@
       "type": "library",
       "bom-ref": "45-plotly",
       "name": "plotly",
-      "version": "5.12.0",
+      "version": "5.13.0",
       "author": "Chris P",
-      "cpe": "cpe:/a:chris_p:plotly:5.12.0",
+      "cpe": "cpe:/a:chris_p:plotly:5.13.0",
       "licenses": [
         {
           "license": {
@@ -675,7 +675,7 @@
           }
         }
       ],
-      "purl": "pkg:pypi/plotly@5.12.0"
+      "purl": "pkg:pypi/plotly@5.13.0"
     },
     {
       "type": "library",
@@ -766,9 +766,9 @@
       "type": "library",
       "bom-ref": "51-rich",
       "name": "rich",
-      "version": "13.2.0",
+      "version": "13.3.1",
       "author": "Will McGugan",
-      "cpe": "cpe:/a:will_mcgugan:rich:13.2.0",
+      "cpe": "cpe:/a:will_mcgugan:rich:13.3.1",
       "licenses": [
         {
           "license": {
@@ -777,7 +777,7 @@
           }
         }
       ],
-      "purl": "pkg:pypi/rich@13.2.0"
+      "purl": "pkg:pypi/rich@13.3.1"
     },
     {
       "type": "library",

diff --git a/sbom/cve-bin-tool-py3.10.spdx b/sbom/cve-bin-tool-py3.10.spdx
@@ -2,10 +2,10 @@ SPDXVersion: SPDX-2.2
 DataLicense: CC0-1.0
 SPDXID: SPDXRef-DOCUMENT
 DocumentName: cve-bin-tool
-DocumentNamespace: http://spdx.org/spdxdocs/cve-bin-tool-b7df1345-a1d7-4e06-a122-e0a312f2029a
+DocumentNamespace: http://spdx.org/spdxdocs/cve-bin-tool-4348ce8a-c0db-4e46-a2ad-09ec503018f0
 LicenseListVersion: 3.18
 Creator: Tool: sbom4python-0.7.0
-Created: 2023-01-23T00:24:51Z
+Created: 2023-01-30T00:22:56Z
 CreatorComment: <text>This document has been automatically generated.</text>
 ##### 
 
@@ -177,15 +177,15 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:isaac_muse:soupsieve:2.3.2.post1:*:*:*
 PackageName: cvss
 SPDXID: SPDXRef-Package-13-cvss
 PackageSupplier: Organization: Stanislav Red Hat Product Security (skontar@redhat.com)
-PackageVersion: 2.5
+PackageVersion: 2.6
 PackageDownloadLocation: NOASSERTION
 FilesAnalyzed: false
 ##### Reported license LGPLv3+
 PackageLicenseConcluded: NOASSERTION
 PackageLicenseDeclared: NOASSERTION
 PackageCopyrightText: NOASSERTION
-ExternalRef: PACKAGE-MANAGER purl pkg:pypi/cvss@2.5
-ExternalRef: SECURITY cpe23Type cpe:2.3:a:stanislav_red_hat_product_security:cvss:2.5:*:*:*:*:*:*:*
+ExternalRef: PACKAGE-MANAGER purl pkg:pypi/cvss@2.6
+ExternalRef: SECURITY cpe23Type cpe:2.3:a:stanislav_red_hat_product_security:cvss:2.6:*:*:*:*:*:*:*
 ##### 
 
 PackageName: defusedxml
@@ -219,15 +219,15 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:nir_cohen:distro:1.8.0:*:*:*:*:*:*:*
 PackageName: gsutil
 SPDXID: SPDXRef-Package-16-gsutil
 PackageSupplier: Person: Google Inc. (buganizer-system+187143@google.com)
-PackageVersion: 5.18
+PackageVersion: 5.19
 PackageDownloadLocation: NOASSERTION
 FilesAnalyzed: false
 ##### Reported license Apache 2.0
 PackageLicenseConcluded: Apache-2.0
 PackageLicenseDeclared: Apache-2.0
 PackageCopyrightText: NOASSERTION
-ExternalRef: PACKAGE-MANAGER purl pkg:pypi/gsutil@5.18
-ExternalRef: SECURITY cpe23Type cpe:2.3:a:google_inc.:gsutil:5.18:*:*:*:*:*:*:*
+ExternalRef: PACKAGE-MANAGER purl pkg:pypi/gsutil@5.19
+ExternalRef: SECURITY cpe23Type cpe:2.3:a:google_inc.:gsutil:5.19:*:*:*:*:*:*:*
 ##### 
 
 PackageName: argcomplete
@@ -625,15 +625,15 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:donald_stufft_and_individual_contribut
 PackageName: plotly
 SPDXID: SPDXRef-Package-45-plotly
 PackageSupplier: Person: Chris P (chris@plot.ly)
-PackageVersion: 5.12.0
+PackageVersion: 5.13.0
 PackageDownloadLocation: NOASSERTION
 FilesAnalyzed: false
 ##### Reported license MIT
 PackageLicenseConcluded: MIT
 PackageLicenseDeclared: MIT
 PackageCopyrightText: NOASSERTION
-ExternalRef: PACKAGE-MANAGER purl pkg:pypi/plotly@5.12.0
-ExternalRef: SECURITY cpe23Type cpe:2.3:a:chris_p:plotly:5.12.0:*:*:*:*:*:*:*
+ExternalRef: PACKAGE-MANAGER purl pkg:pypi/plotly@5.13.0
+ExternalRef: SECURITY cpe23Type cpe:2.3:a:chris_p:plotly:5.13.0:*:*:*:*:*:*:*
 ##### 
 
 PackageName: tenacity
@@ -709,15 +709,15 @@ ExternalRef: SECURITY cpe23Type cpe:2.3:a:andrey_petrov:urllib3:1.26.14:*:*:*:*:
 PackageName: rich
 SPDXID: SPDXRef-Package-51-rich
 PackageSupplier: Person: Will McGugan (willmcgugan@gmail.com)
-PackageVersion: 13.2.0
+PackageVersion: 13.3.1
 PackageDownloadLocation: NOASSERTION
 FilesAnalyzed: false
 ##### Reported license MIT
 PackageLicenseConcluded: MIT
 PackageLicenseDeclared: MIT
 PackageCopyrightText: NOASSERTION
-ExternalRef: PACKAGE-MANAGER purl pkg:pypi/rich@13.2.0
-ExternalRef: SECURITY cpe23Type cpe:2.3:a:will_mcgugan:rich:13.2.0:*:*:*:*:*:*:*
+ExternalRef: PACKAGE-MANAGER purl pkg:pypi/rich@13.3.1
+ExternalRef: SECURITY cpe23Type cpe:2.3:a:will_mcgugan:rich:13.3.1:*:*:*:*:*:*:*
 ##### 
 
 PackageName: markdown-it-py