fe03c350de52c3801922857c9c9a9c6d49ae1ff145ee479c57d8d0a641d198cc  sbom-cdx.json