sPj}ddlmZmZddlmZddlmZddlmZddlm Z m Z m Z ddl m Z mZddlmZddlZdd lmZd d lmZd d lmZd d lmZmZd dlmZd dl m!Z!m"Z"m#Z#m$Z$m%Z%m&Z&m'Z'm(Z(d dl)m*Z*ddl+m,Z,m-Z-m.Z.ddl/m0Z0ddl1m2Z2ddl3m4Z4m5Z5ddl6m7Z7ddl8m9Z9m:Z:ddl;mZ>m?Z?ddl@mAZAmBZBmCZCddlDmEZEddlFmGZGmHZHmIZIddlJmKZKe rddlLmMZMejGddeOeZPejd !Gd"d#ZRejd !Gd$d%ZSejhd&d 'Gd(d)ZTy)*) GeneratorIterable)datetime)Enum)chain) TYPE_CHECKINGOptionalUnion)UUIDuuid4)warnN) SortedSet)ComparableTuple) get_now_utc))LicenseExpressionAlongWithOthersException#UnknownComponentDependencyException)SchemaDeprecationWarning1Dot6)SchemaVersion1Dot0SchemaVersion1Dot1SchemaVersion1Dot2SchemaVersion1Dot3SchemaVersion1Dot4SchemaVersion1Dot5SchemaVersion1Dot6SchemaVersion1Dot7) UrnUuidHelper)_BOM_LINK_PREFIXExternalReferenceProperty)BomRef) Component)OrganizationalContactOrganizationalEntity) Definitions) Dependable Dependency)LicenseLicenseExpressionLicenseRepository%_LicenseRepositorySerializationHelper) LifecycleLifecycleRepository_LifecycleRepositoryHelper)Service)ToolToolRepository_ToolRepositoryHelper) Vulnerability) PackageURLc$eZdZdZdZdZdZdZdZy)TlpClassificationaT Enum object that defines the Traffic Light Protocol (TLP) classification that controls the sharing and distribution of the data that the BOM describes. .. note:: Introduced in CycloneDX v1.7 .. note:: See the CycloneDX Schema definition: https://cyclonedx.org/docs/1.7/xml/#type_tlpClassificationType CLEARGREENAMBERAMBER_AND_STRICTREDN) __name__ __module__ __qualname____doc__r8r9r:r;r<X/home/oem/CyberBrain26-unified/.venv/lib/python3.12/site-packages/cyclonedx/model/bom.pyr7r7=s#  E E E) CrBr7T)%ignore_unknown_during_deserializationceZdZdZdddeeddfdZeejddefdZ e jdeddfd Z de fd Z d edefd Zd edefd ZdefdZdefdZy)DistributionConstraintsam Our internal representation of the `distributionConstraints` complex type. Conditions and constraints governing the sharing and distribution of the data or components described by this BOM. .. note:: Introduced in CycloneDX v1.7 .. note:: See the CycloneDX Schema definition: https://cyclonedx.org/docs/1.7/xml/#type_metadata NtlprHreturnc6|xstj|_yN)r7r8rHselfrHs rC__init__z DistributionConstraints.__init__^s1+11rBrc|jS)z The Traffic Light Protocol (TLP) classification that controls the sharing and distribution of the data that the BOM describes. Returns: `TlpClassification` enum value _tlprMs rCrHzDistributionConstraints.tlpdsyyrBc||_yrKrPrLs rCrHzDistributionConstraints.tlpps  rBc,t|jSrK)_ComparableTuplerHrRs rC__comparable_tuplez*DistributionConstraints.__comparable_tuplets))rBothercft|tr!|j|jk(SyNF) isinstancerF*_DistributionConstraints__comparable_tuplerMrWs rC__eq__zDistributionConstraints.__eq__ws- e4 5**,0H0H0JJ JrBcpt|tr!|j|jkStSrK)rZrFr[NotImplementedr\s rC__lt__zDistributionConstraints.__lt__|s0 e4 5**,u/G/G/II IrBc4t|jSrK)hashr[rRs rC__hash__z DistributionConstraints.__hash__D++-..rBc"d|jdS)NzrGrRs rC__repr__z DistributionConstraints.__repr__s.txxj::rB)r=r>r?r@r r7rNproperty serializable xml_sequencerHsetterrUr[objectboolr]r`intrcstrrgrArBrCrFrFQs ,02 ' (2 2 \q!&" ZZ(T*$4*Ft Ft /#/;#;rBrFc: eZdZdZdddddddddddd deeeeefdeee dee dee deee d eee d eed ee d eeed eedee ddfdZeej(ej*j,ej.ddefdZej2d eddfdZeej4eej4eej4eej(eej.ddefdZ e j2d eeddfdZ eej(e!ej.ddefdZ"e"j2deeeefddfdZ"eejFejHjJdej.dd:dZ&e&j2dee ddfdZ&eej.ddee fdZ'e'j2dee ddfd Z'eej4e(ej4e)ej4e*ej4eej4eej4eej.d!dee fd"Z+e+j2dee ddfd#Z+eej4eej4eej.d$dee fd%Z,e,j2d ee ddfd&Z,eej.d'dee fd(Z-e-j2dee ddfd)Z-eej4e)ej4e*ej4eej4eej4eej(e.ej.d*de/fd+Z0e0j2dee ddfd,Z0eej4e)ej4e*ej4eej4eej4eejFejHjJd-ej.d.d;d/Z1e1j2d ee ddfd0Z1eej4eej.d1deefd2Z2e2j2d eeddfd3Z2de3fd4Z4d5e5de6fd6Z7d5e5de6fd7Z8de9fd8Z:de;fd9Zr?r@r r rr1r2r$r#r%r)r!rr-rFrNrhri type_mappinghelpers XsdDateTimerjrxrkviewrrrr/r.rzr3rr xml_arrayXmlArraySerializationTypeNESTEDrsrtrrrr|ryrur,r+rvrwr{rUrrlrmr]r`rnrcrorgrArBrCrqrqsBF=A)-370437(,7;48FJ6:'htnn<=>'(#89:'I& ' /0 ' 8G,- 'Xh/0'H%'34'Xi01'#++B"C'23' '8\|33??@\q!8"A$8$$$\)*\)*\)*\9:\q! / ";+++  ;Xi%8;T;;\45\q!~"6 \\-5$!?@-T-- \LBBII8T\q! "U  ^^+x(=>+4++\q!8I." $8I#6 $4 $ $\)*\)*\)*\)*\)*\)*\q!!X&:;!"++++++!(x0D'E($((\)*\)*\q! "h';< ""++ "*2F)G*D**\q! (#78 " __"*>!?"D""\)*\)*\)*\)*\)*\DE\q!+"F+++++__5'!25t55\)*\)*\)*\)*\)*\LBBII:V\r"  #W+++++  1Xh%71D11\)*\r".(3J*K.#+.$$BJaAbBgkB%B $4 Ft Ft /#/W#WrBrq>$schema bom_format spec_version)ignore_during_deserializationrDceZdZdZddddddddddd deeedeeedeeedee d e d ee d eee d eee d eeedeeddfdZeej&eej*eej*eej*eej*eej*eej*eej*eej:de fdZej>de ddfdZeej:de fdZ e j>d e ddfdZ eej*eej*eej*eej*eej*eej*eejBdde fdZ"e"j>d e ddfdZ"eejFe$ejFeejJejLjNdejBddGdZ(e(j>deeddfdZ(eej*eej*eej*eej*eej*eej*eejJejLjNdejBddHdZ)e)j>deeddfdZ)eej*eej*eej*eej*eej*eej*eej*eejJejLjNd ejBd!dId"Z*e*j>deeddfd#Z*eej*eej*eej*eej*eej*eej*eejJejLjNd$ejBd%dJd&Z+e+j>d ee ddfd'Z+eej*eej*eej*eejJejLjNd(ejBd)dKd*Z,e,j>d eeddfd+Z,eej*eej*eej*eej*eejJejLjNd,ejBd-dLd/Z-e-j>d ee ddfd0Z-eej*eej*eejBd1deefd2Z.e.j>deddfd3Z.d4ed5deefd6Z/de0fd7Z1dede2fd8Z3de4eddffd9Z5d:e6dd.fd;Z7de2fd<Z8dMd=e9d>eee9ddfd?Z:de0fd@Z;de2fdAZdCe?de2fdDZ@de fdEZAde0fdFZBy)NBoma! This is our internal representation of a bill-of-materials (BOM). Once you have an instance of `cyclonedx.model.bom.Bom`, you can pass this to an instance of `cyclonedx.output.BaseOutput` to produce a CycloneDX document according to a specific schema version and format. Nr) componentsservicesexternal_references serial_numberversionmetadata dependenciesvulnerabilitiesrw definitionsrrrrrrrrrwrrIc |xs t|_||_|xs t|_|xsg|_|xsg|_|xsg|_|xsg|_|xsg|_ | xsg|_ | xs t|_ y)z Create a new Bom that you can manually/programmatically add data to later. Returns: New, empty `cyclonedx.model.bom.Bom` instance. N) r rrrqrrrrrrrwr&r) rMrrrrrrrrrwrs rCrNz Bom.__init__s&+5eg  1KM $* B #6#<" .4"(.B$*&7+-rBc|jS)zt Unique UUID for this BOM Returns: `UUID` instance `UUID` instance _serial_numberrRs rCrzBom.serial_numbers$"""rBc||_yrKr)rMrs rCrzBom.serial_numbers +rBc|jSrK_versionrRs rCrz Bom.versions}}rBc||_yrKr)rMrs rCrz Bom.versions  rBrc|jS)a Get our internal metadata object for this Bom. Returns: Metadata object instance for this Bom. .. note:: See the CycloneDX Schema for Bom metadata: https://cyclonedx.org/docs/1.7/xml/#type_metadata  _metadatarRs rCrz Bom.metadatas$~~rBc||_yrKr)rMrs rCrz Bom.metadatarrBrtc|jS)z} Get all the Components currently in this Bom. Returns: Set of `Component` in this Bom ) _componentsrRs rCrzBom.components srBc$t||_yrK)rr)rMrs rCrzBom.componentsrrBservicec|jS)zy Get all the Services currently in this Bom. Returns: Set of `Service` in this BOM ) _servicesrRs rCrz Bom.servicess ~~rBc$t||_yrK)rr)rMrs rCrz Bom.services.s"8,rB reference(c|jS)z Provides the ability to document external references related to the BOM or to the project the BOM describes. Returns: Set of `ExternalReference` )_external_referencesrRs rCrzBom.external_references2s"(((rBc$t||_yrK)rr)rMrs rCrzBom.external_referencesEs$-.A$B!rB dependency2c|jSrK) _dependenciesrRs rCrzBom.dependenciesIs!!!rBc$t||_yrK)rr)rMrs rCrzBom.dependenciesUs&|4rBrhFc|jS)a Provides the ability to document properties in a name/value store. This provides flexibility to include data not officially supported in the standard without having to use additional namespaces or create extensions. Property names of interest to the general public are encouraged to be registered in the CycloneDX Property Taxonomy - https://github.com/CycloneDX/cyclonedx-property-taxonomy. Formal registration is OPTIONAL. Return: Set of `Property` rrRs rCrwzBom.propertiesfs$rBc$t||_yrKrrs rCrwzBom.propertieszrrB vulnerabilityPSortedSet[Vulnerability]c|jS)zp Get all the Vulnerabilities in this BOM. Returns: Set of `Vulnerability` )_vulnerabilitiesrRs rCrzBom.vulnerabilities~s$$$rBc$t||_yrK)rr)rMrs rCrzBom.vulnerabilitiess )/ :rBncbt|jjdkDr |jSdS)z\ The repository for definitions Returns: `Definitions` rN)len _definitions standardsrRs rCrzBom.definitionss-%((9(9(C(C$Dq$Ht  RdRrBc||_yrK)r)rMrs rCrzBom.definitionss 'rBpurlr5c|r<|jDcgc]}|j|k(s|}}t|dk(r|dSycc}w)a  Get a Component already in the Bom by its PURL Args: purl: An instance of `packageurl.PackageURL` to look and find `Component`. Returns: `Component` or `None` .. deprecated:: next rrN)rrr)rMrxfounds rCget_component_by_purlzBom.get_component_by_purlsE  $B1166T>QBEB5zQQx Cs AAc.|jjS)z Get the unique reference for this Bom. Returns: URN formatted UUID that uniquely identified this Bom instance. .. deprecated:: next )rurnrRs rC get_urn_uuidzBom.get_urn_uuids!!%%%rBc||jvS)ab Check whether this Bom contains the provided Component. Args: component: The instance of `cyclonedx.model.component.Component` to check if this Bom contains. Returns: `bool` - `True` if the supplied Component is part of this Bom, `False` otherwise. .. deprecated:: next )rrs rC has_componentzBom.has_componentsDOO++rBc#K|jjr.|jjjdEd{|jD]}|jdEd{y707 w)NT include_self)rrtget_all_nested_componentsr)rMcs rC_get_all_componentszBom._get_all_componentssk == " "}}..HHVZH[ [ [ FA222E E E F \ Es$AA7A3(A7+A5,A75A7bom_refct}|jD]>}|jD]-}|j|jk(s|j |/@|S)a  Get all known Vulnerabilities that affect the supplied bom_ref. Args: bom_ref: `BomRef` Returns: `SortedSet` of `Vulnerability` .. deprecated:: next Deprecated without any replacement. )rraffectsrefvalueadd)rMrrvtargets rCget_vulnerabilities_for_bom_refz#Bom.get_vulnerabilities_for_bom_refsY5>K%% +A)) +::.#''* + +rBc,t|jS)a Check whether this Bom has any declared vulnerabilities. Returns: `bool` - `True` if this Bom has at least one Vulnerability, `False` otherwise. .. deprecated:: next Deprecated without any replacement. )rmrrRs rChas_vulnerabilitieszBom.has_vulnerabilitiessD(())rBr depends_onc Zttfd|jd}|r)|rf|jjt d|n?|j j tj|r t d|ng|r|D]}|j|dyy)Nc6|jjk(SrK)rr)_drs rCz)Bom.register_dependency..sBFFfnn$<rBc.t|jSNrr(r)r s rCr!z)Bom.register_dependency..sjRZZ6PrBc.t|jSr#r%)_deps rCr!z)Bom.register_dependency..sjT\\.JrB)rr)rr) nextfilterrupdatemaprrr(rregister_dependency)rMrrr _d2s ` rCr,zBom.register_dependency s &O>OPRV W &&s+PR\']^    " ":NN[eS!JJWkm$  ! F(((E F rBcDt|jd|jS)zV .. deprecated:: next Deprecated without any replacement. /)rrrrRs rCrzBom.urns% ##D$6$6#7qGGrBc jjr&jjjjD]}j|jD]}j|t t djt t djz}t tdjDtjdjD}||z }t|dkDrtd|jjrntjdkDrVtt fdjs4td jjjd t d tjgjjr&jjj#d ngtjdjDjD]E}t|j$d kDstd|j$Ds9t'd|y )a  Perform data-model level validations to make sure we have some known data integrity prior to attempting output of this `Bom` Returns: `bool` .. deprecated:: next Deprecated without any replacement. )rc|jSrKr)rs rCr!zBom.validate..<s qyyrBc|jSrKr2)ss rCr!zBom.validate..=s !))rBc34K|]}|jywrKr$.0ds rC zBom.validate..?s .qQUU .sc3<K|]}|jywrK)dependencies_as_bom_refsr6s rCr9zBom.validate..@sX : : <XrzsOne or more Components have Dependency references to Components/Services that are not known in this BOM. They are: c|jjjjk(xrt |j dkDS)Nr)rrrtrrr)r8rMs rCr!zBom.validate..Ks4aeet}}66>>>Z3q~~CVYZCZrBz%The Component this BOM is describing z has no defined dependencies which means the Dependency Graph is incomplete - you should add direct dependencies to this "root" Component to complete the Dependency Graph data.r)category stacklevelTr c3@K|]}|jdyw)Tr N)r)r7rs rCr9zBom.validate..[shST ; ; ; Nhsc3<K|]}t|tywrK)rZr*)r7lis rCr9zBom.validate..^s-hTVj=N.O-hr<z7Found LicenseExpression along with others licenses in: )rrtr,rrsetr+rrr from_iterablerranyr r UserWarningrrvr)rM_c_scomponent_bom_refsdependency_bom_refsdependency_diffelems` rCvalidatez Bom.validate'sF == " "  $ $DMM,C,C $ D// 0B  $ $B $ / 0-- 0B  $ $B $ / 0!%8$:R:R:T!UVY\ #T]] 3Z55!% .D-- .   XdFWFWX X#  .0BB  ! #5""1!245 5 == " "s4??';a'?C Z   M I  7 8O8O8T8T7UVJJ%   ]]OTXTaTaTkTkDMM # # = =4 = Pqs   hX\XgXgh h MM   XD 4==!A%#-hZ^ZgZg-h*h?MdXVXX XrBc Jt|j|j|jt|jt|j t|j t|jt|jt|jf SrK) rUrrrrrrrrwrrRs rCrVzBom.__comparable_tupleds}    dmm=M>!"24=="A T55 68H!!9#$4T__$E T11 2 !   rBrWcft|tr!|j|jk(SyrY)rZr_Bom__comparable_tupler\s rCr]z Bom.__eq__ms, eS !**,0H0H0JJ JrBc4t|jSrK)rbrPrRs rCrcz Bom.__hash__rrdrBc:d|jdt|dS)Nz r?r@r rr#r0r r rnrqr(r4r!r&rNrhrirrrrrrrrrr xml_attributerrkrrjr include_nonerrrrrrrrrwrrrror rmr rrr"rrr'r,rrMrUrPrlr]rcrgrArBrCrrs 5904EI(,*.7;=A37-18Xi0188G,-8&h/@&AB 8  ~ 8  8;'8x 348"(="9:8Xh/08k*8 8<\}-\)*\)*\)*\)*\)*\)*\)*\!#t#"+++++++.#,4,D,,\!" ^^ s t  \)*\)*\)*\)*\)*\)*\r" + #++++++ __""""\12\12\LBBII;W\r" #X33  1Xi%81T11\)*\)*\)*\)*\)*\)*\LBBII9U\r"#V++++++__-'!2-t--\)*\)*\)*\)*\)*\)*\)*\LBBII;W\r")#X+++++++)Cx@Q7RCW[C C\)*\)*\)*\)*\)*\)*\LBBII<X\r""#Y++++++"5*)=5$55 \)*\)*\)*\LBBII:V\r"  #W+++  1Xh%71D11\)*\)*\)*\)*\LBBII?[\r"%#\++++%;x /F;4;;2\)*\)*\s#SXk2S$++S({(t(((<*@XiEX( &c & ,y ,T ,FYy$/D%EF vB\( *T *F*F(8T^K_B`FlpF$HSH;$;z $4 Ft /#/E#ErBr)Ucollections.abcrrrenumr itertoolsrtypingrr r uuidr r warningsr py_serializablerisortedcontainersr_internal.comparerrU_internal.timerr~exception.modelrrschema.deprecationr schema.schemarrrrrrrr serializationrrr r!rr"rtr#contactr$r% definitionr&rr'r(licenser)r*r+r, lifecycler-r.r/rr0toolr1r2r3rr4 packageurlr5serializable_enumror7serializable_classrFrqrrArBrCrls'&011&&C8l>   *;; @#.iiQQ==(%T &!  tL3;3;M3;l!  tLYWYWMYWx!  #+/  KEKE  KErB