Merge branch 'main' into add-sbom-evidence-to-all-components

Author: ffontaine

.github/workflows/cve_bin_tool_action.yml

@@ -12,6 +12,7 @@ jobs:
     permissions:
       security-events: write
     runs-on: ubuntu-latest
+    timeout-minutes: 60
     steps:
       - uses: intel/cve-bin-tool-action@main
         with:

cve_bin_tool/cvedb.py

@@ -796,9 +796,9 @@ def copy_db(self, filename, export=True):
         """Copy database file to or from new path."""
         self.db_close()
         if export:
-            shutil.copy(self.dbpath, filename)
+            shutil.copy2(self.dbpath, filename)
         else:
-            shutil.copy(filename, self.dbpath)
+            shutil.copy2(filename, self.dbpath)
 
     def remove_cache_backup(self) -> None:
         """Removes the backup if database was successfully loaded."""

requirements.txt

@@ -9,8 +9,8 @@ importlib_metadata>=3.6; python_version < "3.10"
 importlib_resources; python_version < "3.9"
 jinja2>=2.11.3
 jsonschema>=3.0.2
-lib4sbom>=0.8.7
-lib4vex>=0.2.0
+lib4sbom>=0.9.0
+lib4vex>=0.2.1
 packageurl-python
 packaging>=22.0
 plotly