fc96b5d54ba9092ba4f57ceb1322380be3f7b369bb4202c2d61a26986f9383d1  sbom-cdx.json