1d5d676fc29162c3b6f90546d5812df5d993026ba19dd0bec7965825fd7f3460  sbom-spdx.json