Mirror
/
cpython
mirror of https://github.com/python/cpython
4
1
Fork 0
Code Issues Releases Wiki Activity

gh-113257: Fix SBOM metadata for pip 23.3.2 (#113262) 

Fix SBOM metadata for pip 23.3.2
This commit is contained in:
Seth Michael Larson 2023-12-19 00:34:53 -06:00 committed by GitHub
parent fa9ba02353
commit 4658464e9c
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 5 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
Misc/sbom.spdx.json generated
View File

@ -1703,16 +1703,16 @@
"checksumValue": "7ccf472345f20d35bdc9d1841ff5f313260c2c33fe417f48c30ac46cccabf5be"
}
],
"downloadLocation": "https://files.pythonhosted.org/packages/50/c2/e06851e8cc28dcad7c155f4753da8833ac06a5c704c109313b8d5a62968a/pip-23.2.1-py3-none-any.whl",
"downloadLocation": "https://files.pythonhosted.org/packages/15/aa/3f4c7bcee2057a76562a5b33ecbd199be08cdb4443a02e26bd2c3cf6fc39/pip-23.3.2-py3-none-any.whl",
"externalRefs": [
{
"referenceCategory": "SECURITY",
"referenceLocator": "cpe:2.3:a:pypa:pip:23.2.1:*:*:*:*:*:*:*",
"referenceLocator": "cpe:2.3:a:pypa:pip:23.3.2:*:*:*:*:*:*:*",
"referenceType": "cpe23Type"
},
{
"referenceCategory": "PACKAGE_MANAGER",
"referenceLocator": "pkg:pypi/pip@23.2.1",
"referenceLocator": "pkg:pypi/pip@23.3.2",
"referenceType": "purl"
}
],
@ -1720,7 +1720,7 @@
"name": "pip",
"originator": "Organization: Python Packaging Authority",
"primaryPackagePurpose": "SOURCE",
"versionInfo": "23.2.1"
"versionInfo": "23.3.2"
}
],
"relationships": [

2
Tools/build/generate_sbom.py
View File

@ -50,7 +50,7 @@ PACKAGE_TO_FILES = {
include=["Modules/expat/**"]
),
"pip": PackageFiles(
include=["Lib/ensurepip/_bundled/pip-*-py3-none-any.whl"]
include=["Lib/ensurepip/_bundled/pip-23.3.2-py3-none-any.whl"]
),
"macholib": PackageFiles(
include=["Lib/ctypes/macholib/**"],