ܖip dZddlZddlZddlmZmZddlmZddlmZddl m Z ddl m Z ddlmZmZmZdd lmZdd lmZdd lmZdd lmZej8d k\rddlmZnddlmZddlZ ddl!m"Z"ddl#m$Z%ddl&m'Z'm(Z(ddl)m*Z*m+Z+ddl,m-Z-m.Z.m/Z/m0Z0m1Z1m2Z2m3Z3m4Z4ddl5m6Z6dZ7e jpGdde9eZ:e jvGddZe jpGd d!e9eZ?Gd"d#e jjZBe jvGd$d%ZCe jpGd&d'e9eZDGd(d)e jjZEe jvd*+Gd,d-e jjZFe jvd*+Gd.d/ZGe jvd*+Gd0d1ZHe jvd*+Gd2d3ZIe jvd*+Gd4d5ZJe jvd*+Gd6d7ZKe jvd*+Gd8d9ZLy):a Uniform set of models to represent objects within a CycloneDX software bill-of-materials. You can either create a `cyclonedx.model.bom.Bom` yourself programmatically, or generate a `cyclonedx.model.bom.Bom` from a `cyclonedx.parser.BaseParser` implementation. N) GeneratorIterable)datetime)Enum)reduce)loads)AnyOptionalUnion)quote)UUID)warn)Element) ) deprecated) SortedSet)ComparableTuple)InvalidLocaleTypeExceptionInvalidUriException)!CycloneDxDeserializationException'SerializationOfUnexpectedValueException)SchemaVersion1Dot0SchemaVersion1Dot1SchemaVersion1Dot2SchemaVersion1Dot3SchemaVersion1Dot4SchemaVersion1Dot5SchemaVersion1Dot6SchemaVersion1Dot7)BomRefzurn:cdx:c eZdZdZdZdZdZdZy)DataFlowz This is our internal representation of the dataFlowType simple type within the CycloneDX standard. .. note:: See the CycloneDX Schema: https://cyclonedx.org/docs/1.7/xml/#type_dataFlowType inboundoutboundzbi-directionalunknownN)__name__ __module__ __qualname____doc__INBOUNDOUTBOUNDBI_DIRECTIONALUNKNOWN\/var/www/html/content-pipeline/venv/lib/python3.12/site-packages/cyclonedx/model/__init__.pyr%r%@s GH%NGr2r%ceZdZdZdededdfdZeejdefdZ e jdeddfdZ eejd ejejjdefd Zejdeddfd Zdefd Zd edefdZd edefdZdefdZdefdZy)DataClassificationa This is our internal representation of the `dataClassificationType` complex type within the CycloneDX standard. DataClassification might be deprecated since CycloneDX 1.5, but it is not deprecated in this library. In fact, this library will try to provide a compatibility layer if needed. .. note:: See the CycloneDX Schema for dataClassificationType: https://cyclonedx.org/docs/1.7/xml/#type_dataClassificationType flowclassificationreturnNc ||_||_yN)r6r7)selfr6r7s r3__init__zDataClassification.__init__[s  ,r2c|jS)a Specifies the flow direction of the data. Valid values are: inbound, outbound, bi-directional, and unknown. Direction is relative to the service. - Inbound flow states that data enters the service - Outbound flow states that data leaves the service - Bi-directional states that data flows both ways - Unknown states that the direction is not known Returns: `DataFlow` _flowr;s r3r6zDataClassification.flowcs$zzr2c||_yr:r>)r;r6s r3r6zDataClassification.floww  r2.c|jS)z Data classification tags data according to its type, sensitivity, and value if altered, stolen, or destroyed. Returns: `str` _classificationr@s r3r7z!DataClassification.classification{s###r2c||_yr:rE)r;r7s r3r7z!DataClassification.classifications -r2cDt|j|jfSr:)_ComparableTupler6r7r@s r3__comparable_tuplez%DataClassification.__comparable_tuples# IIt**!   r2othercft|tr!|j|jk(SyNF) isinstancer5%_DataClassification__comparable_tupler;rKs r3__eq__zDataClassification.__eq__- e/ 0**,0H0H0JJ Jr2cpt|tr!|j|jkStSr:)rNr5rONotImplementedrPs r3__lt__zDataClassification.__lt__0 e/ 0**,u/G/G/II Ir2c4t|jSr:)hashrOr@s r3__hash__zDataClassification.__hash__D++-..r2c"d|jdS)Nz)r6r@s r3__repr__zDataClassification.__repr__s*499+Q77r2)r)r*r+r,r%strr<property serializable xml_attributer6setterxml_name xml_stringXmlStringSerializationTypeNORMALIZED_STRINGr7rIrOobjectboolrQrUintrYr]r1r2r3r5r5NsA ---  -\!h"$ [[d\3\\DDVVW$$X $.S.T.. $4 Ft Ft /#/8#8r2r5ceZdZdZdZy)Encodingz This is our internal representation of the encoding simple type within the CycloneDX standard. .. note:: See the CycloneDX Schema: https://cyclonedx.org/docs/1.7/xml/#type_encoding base64N)r)r*r+r,BASE_64r1r2r3rkrks Gr2rkc LeZdZdZdZedddededeeddfd Ze e je jd e je jjdefd Zej"deddfd Ze e jdeefd Zej"deeddfdZe e jddefdZej"deddfdZdefdZdedefdZdedefdZdefdZdefdZy) AttachedTextz This is our internal representation of the `attachedTextType` complex type within the CycloneDX standard. .. note:: See the CycloneDX Schema for hashType: https://cyclonedx.org/docs/1.7/xml/#type_attachedTextType text/plainN content_typeencodingcontentrrrsr8c.||_||_||_yr:)rrrsrtr;rtrrrss r3r<zAttachedText.__init__s )   r2 content-typec|jS)z Specifies the content type of the text. Defaults to text/plain if not specified. Returns: `str`  _content_typer@s r3rrzAttachedText.content_types!!!r2c||_yr:ryr;rrs r3rrzAttachedText.content_type )r2c|jS)z Specifies the optional encoding the text is represented in. Returns: `Encoding` if set else `None`  _encodingr@s r3rszAttachedText.encoding~~r2c||_yr:rr;rss r3rszAttachedText.encoding !r2rCc|jS)z The attachment data. Proactive controls such as input validation and sanitization should be employed to prevent misuse of attachment text. Returns: `str` _contentr@s r3rtzAttachedText.contents}}r2c||_yr:rr;rts r3rtzAttachedText.content  r2cZt|j|j|jfSr:)rIrrrsrtr@s r3rJzAttachedText.__comparable_tuples)   t}}dll!   r2rKcft|tr!|j|jk(SyrM)rNro_AttachedText__comparable_tuplerPs r3rQzAttachedText.__eq__s, e\ ***,0H0H0JJ Jr2cpt|tr!|j|jkStSr:)rNrorrTrPs r3rUzAttachedText.__lt__s/ e\ ***,u/G/G/II Ir2c4t|jSr:)rXrr@s r3rYzAttachedText.__hash__rZr2c<d|jd|jdS)Nz->,?{4==/YZ[[r2)r)r*r+r,DEFAULT_CONTENT_TYPEr^r rkr<r_r`rarcrdrerfrrrbrsrtrIrrgrhrQr rUrirYr]r1r2r3roros( 1'+ 8$   \!\>*\\DDVVW"c"X+""****\!(8,"__"(!3"""\3     ^^ s t   $4 Ft CD /#/\#\r2rocHeZdZdZdZdZdZdZdZdZ dZ d Z d Z d Z d Zd ZdZdZy) HashAlgorithmz This is our internal representation of the hashAlg simple type within the CycloneDX standard. .. note:: See the CycloneDX Schema: https://cyclonedx.org/docs/1.7/xml/#type_hashAlg z BLAKE2b-256z BLAKE2b-384z BLAKE2b-512BLAKE3MD5zSHA-1zSHA-256zSHA-384zSHA-512zSHA3-256zSHA3-384zSHA3-512z Streebog-256z Streebog-512N)r)r*r+r, BLAKE2B_256 BLAKE2B_384 BLAKE2B_512rrSHA_1SHA_256SHA_384SHA_512SHA3_256SHA3_384SHA3_512 STREEBOG_256 STREEBOG_512r1r2r3rr sO KKK F C EGGGHHH!L!Lr2rc TeZdZUdZeZeeeje e fe d<e e je je je je j e j"e j$hee<eeee<eee j*e j,e j.e j0e j2hzee<eeee<eeee<eeee<eeee<eee j>e j@hzee!<e"de#ddeejde$dfdZ%e"d e#dde&eejd e'de(e'fd Z)e"d e#dd e*de&eejd e&e*d e'de+f dZ,e"d e'd e'de(dfdZ-e"d dde&e*d e'de(dfdZ.y)&_HashTypeRepositorySerializationHelper THIS CLASS IS NON-PUBLIC API -_HashTypeRepositorySerializationHelper__CASEShtsHashTypeviewr8)rNNc#K|jj|d}|D]*}|j|vr|td|td,yw)Nr1z8serialization omitted due to unsupported HashAlgorithm: r)category stacklevel)rgetalgr UserWarning)clsrrcaseshts r3__prepz-_HashTypeRepositorySerializationHelper.__prep@sQ b) 9BvvOPRvV)a9  9sA Ao__c |J|j||Dcgc]}t|j|c}Scc}w)N)view_),_HashTypeRepositorySerializationHelper__prep json_loadsas_json)rrrrrs r3json_normalizez5_HashTypeRepositorySerializationHelper.json_normalizeJsX  1d+         s"> element_namexmlnsc ~Jt|}|jfd|j|D|S)Nc3HK|]}|jddyw)FrX)r as_stringrrN)as_xml).0rrrs r3 zG_HashTypeRepositorySerializationHelper.xml_normalize..^s2  IIe&   s") XmlElementextendr)rrrrrrelems `` r3 xml_normalizez4_HashTypeRepositorySerializationHelper.xml_normalizeVsH ,'   1d+   r2c R|Dcgc]}tj|c}Scc}wr:)r from_json)rrrrs r3json_denormalizez7_HashTypeRepositorySerializationHelper.json_denormalizees2          s$r default_nsc T|Dcgc]}tj||c}Scc}wr:)rfrom_xml)rrrrrs r3xml_denormalizez6_HashTypeRepositorySerializationHelper.xml_denormalizems4 +, $&   J    s%N)/r)r*r+r,dictrtyper`ViewType frozensetr__annotations__rrrrrrrrrrrrrrrrrrr rrr! classmethodrrrr r listrr^rrrrr1r2r3rr"s*KO6GT$|,,-y/GG HQ"+-#G #**<"=G ")*<"=!!!!!! A#G #**<"=G ")*<"=G ")*<"=G ")*<"=G ")*<"=""""A#G  9*-9T,:O:O5P9U^_uUv99  x 3  %d<+@+@&AB     %)#Y     hz2 $' $T,*?*?%@A &c]  %/    " '+J'7    $,SM ! &*:&6  r2rceZdZdZeeddededdfdZeeddeddfd Zd e dedd fd Z e e jde fd Zejd e dd fdZe e j de j"e j$j&defdZejdedd fdZdefdZdedefdZdedefdZdefdZdefdZy )rz This is our internal representation of the hashType complex type within the CycloneDX standard. .. note:: See the CycloneDX Schema for hashType: https://cyclonedx.org/docs/1.7/xml/#type_hashType z^Deprecated - use cyclonedx.contrib.hash.factories.HashTypeFactory().from_hashlib_alg() instead hashlib_algrtr8c<ddlm}|j||S)u<Deprecated — Alias of :func:`cyclonedx.contrib.hash.factories.HashTypeFactory.from_hashlib_alg`. Attempts to convert a hashlib-algorithm to our internal model classes. .. deprecated:: next Use ``cyclonedx.contrib.hash.factories.HashTypeFactory().from_hashlib_alg()`` instead. rHashTypeFactory)contrib.hash.factoriesrfrom_hashlib_alg)rrtrs r3rzHashType.from_hashlib_algs = 11+wGGr2z`Deprecated - use cyclonedx.contrib.hash.factories.HashTypeFactory().from_composite_str() insteadcomposite_hashc:ddlm}|j|S)uDeprecated — Alias of :func:`cyclonedx.contrib.hash.factories.HashTypeFactory.from_composite_str`. Attempts to convert a string which includes both the Hash Algorithm and Hash Value and represent using our internal model classes. .. deprecated:: next Use ``cyclonedx.contrib.hash.factories.HashTypeFactory().from_composite_str()`` instead. rr)rrfrom_composite_str)rrs r3rzHashType.from_composite_strs = 33NCCr2rNc ||_||_yr:)rrt)r;rrts r3r<zHashType.__init__s  r2c|jS)zp Specifies the algorithm used to create the hash. Returns: `HashAlgorithm` _algr@s r3rz HashType.algyyr2c||_yr:r)r;rs r3rz HashType.alg  r2rCc|jS)zI Hash value content. Returns: `str` rr@s r3rtzHashType.contents}}r2c||_yr:rrs r3rtzHashType.contentrr2cDt|j|jfSr:)rIrrtr@s r3rJzHashType.__comparable_tuples! HHdll!   r2rKcft|tr!|j|jk(SyrM)rNr_HashType__comparable_tuplerPs r3rQzHashType.__eq__, eX &**,0H0H0JJ Jr2cpt|tr!|j|jkStSr:)rNrrrTrPs r3rUzHashType.__lt__/ eX &**,u/G/G/II Ir2c4t|jSr:)rXrr@s r3rYzHashType.__hash__rZr2cPd|jjd|jdS)Nz ;;r2)r)r*r+r, staticmethodrr^rrrr<r_r`rarrbrcrdreTOKENrtrIrrgrhrQr rUrirYr]r1r2r3rrwspq Hc HC HJ Hr Hrs D3 D: Dt D   \!]" ZZ}\3\\DDJJKL  ^^ s t   $4 Ft CD /#/<#Y^a(s(%d<+@+@&AB( (%((( (c($T,*?*?%@A(($'(( (C($9((r2r:T)%ignore_unknown_during_deserializationc eZdZdZej dej ejzZdZ e de de e e fde fdZ ede de fd Zd e dd fd Zd edefdZd edefdZdefdZde fdZde fdZeej6dej8dde fdZedede fdZededdfdZe dde e!e fdede"e e e#fddfdZ$defdZ%y )XsUria Helper class that allows us to perform validation on data strings that are defined as xs:anyURI in CycloneDX schema. Developers can just use this via `str(XsUri('https://www.google.com'))`. .. note:: See XSD definition for xsd:anyURI: http://www.datypic.com/sc/xsd/t-xsd_anyURI.html See JSON Schema definition for iri-reference: https://tools.ietf.org/html/rfc3987 z%(?![0-9A-F]{2})|#.*#) ) z%20)"z%22)'z%27)[z%5B)]z%5D)  s 4/4 serial_numberversionbom_refcb|rdtt|nd}|t|d||S)a Generate a BOM-Link URI. Args: serial_number: The unique serial number of the BOM. version: The version of the BOM. The default version is 1. bom_ref: The unique identifier of the component, service, or vulnerability within the BOM. Returns: XsUri: Instance of XsUri with the generated BOM-Link URI. #/) url_quoter^_BOM_LINK_PREFIX)rrprqrr bom_ref_parts r3 make_bom_linkzXsUri.make_bom_links?$9@9S\234R &' ayOPPr2c@|jjtS)zV Check if the URI is a BOM-Link. Returns: `bool` )rb startswithrxr@s r3 is_bom_linkzXsUri.is_bom_linksyy##$455r2)r"N)&r)r*r+r,r_compile IGNORECASE MULTILINErar[rr^tuplerZrr\r<r rhrQrUrirYr]rir_r` json_namercr]rlrHr r r r#rzr}r1r2r3rKrKqs $$Z[ #%S/c Fc Fc F F,C,D,CD CD #&#&\C \3S !8#8#88 CG04 QT3Y'QQ%V ,- Q  QQ(6T6r2rKc eZdZdZdddddededeedeee deed d df d Z e e jd d efd Zejded dfdZe d eefdZejdeed dfdZe e j"ee j&d efdZejded dfdZe e j*ee j*ee j*ee j*ee j*ee j"eddZejdee d dfdZe e j*ee j:e j<j>dddZ e jded d dfdZ d e!fdZ"de#d e$fdZ%de&d e$fdZ'd e(fdZ)d efdZ*y) ExternalReferencea This is our internal representation of an ExternalReference complex type that can be used in multiple places within a CycloneDX BOM document. .. note:: See the CycloneDX Schema definition: https://cyclonedx.org/docs/1.7/xml/#type_externalReference N)commenthashes propertiesrurlrrrPropertyr8cZ||_||_||_|xsg|_|xsg|_yr:)rrrrr)r;rrrrrs r3r<zExternalReference.__init__s0  l $*r2r"c|jS)zZ The URL to the external reference. Returns: `XsUri` _urlr@s r3rzExternalReference.urlrr2c||_yr:r)r;rs r3rzExternalReference.urlrr2c|jS)z An optional comment describing the external reference. Returns: `str` if set else `None` _commentr@s r3rzExternalReference.comments}}r2c||_yr:r)r;rs r3rzExternalReference.comment rr2c|jS)a Specifies the type of external reference. There are built-in types to describe common references. If a type does not exist for the reference being referred to, use the "other" type. Returns: `ExternalReferenceType` _typer@s r3rzExternalReference.type$szzr2c||_yr:r)r;rs r3rzExternalReference.type3rBr2c|jS)zw The hashes of the external reference (if applicable). Returns: Set of `HashType` )_hashesr@s r3rzExternalReference.hashes7s||r2c$t||_yr:)rr)r;rs r3rzExternalReference.hashesGs ( r2r_c|jS)a Provides the ability to document properties in a key/value store. This provides flexibility to include data not officially supported in the standard without having to use additional namespaces or create extensions. Return: Set of `Property` ) _propertiesr@s r3rzExternalReference.propertiesKsr2c$t||_yr:)rr)r;rs r3rzExternalReference.propertiesXs$Z0r2c t|j|j|jt|jt|j fSr:)rIrrrrrr@s r3rJz$ExternalReference.__comparable_tuple\s? JJ 4== T\\ *,rr>r8c ||_||_yr:)rr>)r;rr>s r3r<zProperty.__init__s   r2c|jS)z The name of the property. Duplicate names are allowed, each potentially having a different value. Returns: `str` _namer@s r3rz Property.nameszzr2c||_yr:rr;rs r3rz Property.namerBr2rCc|jS)zN Value of this Property. Returns: `str` _valuer@s r3r>zProperty.values{{r2c||_yr:r)r;r>s r3r>zProperty.value  r2cDt|j|jfSr:)rIrr>r@s r3rJzProperty.__comparable_tuples! IItzz!   r2rKcft|tr!|j|jk(SyrM)rNr_Property__comparable_tuplerPs r3rQzProperty.__eq__rr2cpt|tr!|j|jkStSr:)rNrrrTrPs r3rUzProperty.__lt__rr2c4t|jSr:)rXrr@s r3rYzProperty.__hash__rZr2c"d|jdS)NzrIrrgrhrQr rUrirYr]r1r2r3rrssP $}  \! c "  [[\3\\DDVVWx}X  \\8C=T $4 Ft CD /#/.#.r2rc eZdZUdZdZeed<ddddedeedeed dfd Z e e jd d efd Z e jded dfd Z e e je jdd eefdZejded dfdZe e jd eefdZejdeed dfdZd efdZded efdZded efdZd efdZd efdZy)NoteTexta  This is our internal representation of the Note.text complex type that can be used in multiple places within a CycloneDX BOM document. .. note:: See the CycloneDX Schema definition: https://cyclonedx.org/docs/1.7/xml/#type_releaseNotesType rprNrqrtrrrsr8cR||_|xstj|_||_yr:)rtrrrrrsrvs r3r<zNoteText.__init__s%  (IH,I,I  r2rCc|jS)ze Get the text content of this Note. Returns: `str` note content rr@s r3rtzNoteText.contents}}r2c||_yr:rrs r3rtzNoteText.contentrr2rwc|jS)z Get the content-type of this Note. Defaults to 'text/plain' if one was not explicitly specified. Returns: `str` content-type ryr@s r3rrzNoteText.content_types!!!r2c||_yr:ryr|s r3rrzNoteText.content_typer}r2c|jS)z Get the encoding method used for the note's content. Returns: `Encoding` if set else `None` rr@s r3rszNoteText.encodingrr2c||_yr:rrs r3rszNoteText.encodingrr2cZt|j|j|jfSr:)rIrtrrrsr@s r3rJzNoteText.__comparable_tuples) LL$++T]]!   r2rKcft|tr!|j|jk(SyrM)rNr_NoteText__comparable_tuplerPs r3rQzNoteText.__eq__ rr2cpt|tr!|j|jkStSr:)rNrrrTrPs r3rUzNoteText.__lt__rr2c4t|jSr:)rXrr@s r3rYzNoteText.__hash__rZr2c<d|jd|jdS)Nz* "hsm "+" "****\!(8,"__"(!3""" $4 Ft CD /#/X#Xr2rcVeZdZdZej dZdddedee ddfdZ e defd Z e jdeddfd Z e ejd dee fd Zejdee ddfd ZdefdZdedefdZdedefdZdefdZde fdZy)Notea= This is our internal representation of the Note complex type that can be used in multiple places within a CycloneDX BOM document. .. note:: See the CycloneDX Schema definition: https://cyclonedx.org/docs/1.7/xml/#type_releaseNotesType @todo: Replace ``NoteText`` with ``AttachedText``? z^[a-z]{2}(?:\-[A-Z]{2})?$N)localetextrr8c ||_||_yr:)rr)r;rrs r3r<z Note.__init__(s   r2c|jS)zj Specifies the full content of the release note. Returns: `NoteText` _textr@s r3rz Note.text0szzr2c||_yr:rr;rs r3rz Note.text:rBr2r"c|jS)a  Get the ISO locale of this Note. The ISO-639 (or higher) language code and optional ISO-3166 (or higher) country code. Examples include: "en", "en-US", "fr" and "fr-CA". Returns: `str` locale if set else `None` )_localer@s r3rz Note.locale>s||r2c||_t|tr;tjt j |sd|_td|dyy)NzSupplied locale z is not a valid locale. Locale string should be formatted as the ISO-639 (or higher) language code and optional ISO-3166 (or higher) country code. according to ISO-639 format. Examples include: 'en', 'en-US'.)rrNr^r_r`r_LOCALE_TYPE_REGEXr)r;rs r3rz Note.localeMsX fc "99T44f=# 0&vj1xx> #r2cDt|j|jfSr:)rIrrr@s r3rJzNote.__comparable_tupleYs! KK!   r2rKcft|tr!|j|jk(SyrM)rNr_Note__comparable_tuplerPs r3rQz Note.__eq__^s, eT "**,0H0H0JJ Jr2cpt|tr!|j|jkStSr:)rNrrrTrPs r3rUz Note.__lt__cs/ eT "**,u/G/G/II Ir2c4t|jSr:)rXrr@s r3rYz Note.__hash__hrZr2c:dt|d|jdS)Nz rs$ /$''+7w#,&&CMp    sD     O8O8!O8dsD   Y\Y\!Y\x"C" "0R \-A-A-L-LR j  _<_<!_