7036a442c67f4318d38ce84ba6a8262ab8242c37ca4c191928e41107f6896d3c  sbom-spdx.json