c3e5f474df6d712ee800fd8aa84ea3f12d6576635217e39946b16317af50c280  sbom-spdx.json