PYTHON-4373 [v4.7] Add SBOM file (#1658)

.github/workflows/test-python.yml

@@ -53,7 +53,7 @@ jobs:
     strategy:
       matrix:
         os: [ubuntu-20.04]
-        python-version: ["3.7", "3.11", "pypy-3.8"]
+        python-version: ["3.7", "3.11", "pypy-3.9"]
     name: CPython ${{ matrix.python-version }}-${{ matrix.os }}
     steps:
       - uses: actions/checkout@v4
@@ -137,7 +137,7 @@ jobs:
     runs-on: ubuntu-latest
     strategy:
       matrix:
-        python: ["3.7", "3.11"]
+        python: ["3.8", "3.11"]
     steps:
       - uses: actions/checkout@v4
       - uses: actions/setup-python@v5

MANIFEST.in

@@ -8,6 +8,7 @@ exclude .git-blame-ignore-revs
 exclude .pre-commit-config.yaml
 exclude .readthedocs.yaml
 exclude CONTRIBUTING.md
+include sbom.json
 exclude RELEASE.md
 recursive-include doc *.rst
 recursive-include doc *.py

sbom.json

@@ -0,0 +1,10 @@
+{
+  "metadata": {
+    "timestamp": "2024-06-05T10:36:04.606968+00:00"
+  },
+  "serialNumber": "urn:uuid:a94f1412-ea1f-4821-b9f0-e14788b0776e",
+  "version": 1,
+  "$schema": "http://cyclonedx.org/schema/bom-1.5.schema.json",
+  "bomFormat": "CycloneDX",
+  "specVersion": "1.5"
+}