385c2e4c2f6b4517bfac9ed2461dad310b7cfd1f8756ea3224e887e04e78c1dd  sbom-cdx.json