de6c4d11d1f8619c58813f44e5f15adb85248a61bc882d198582a13798c1ebea  sbom-cdx.json