a6c2da4573c3e5f2b2ea86f5fa0237b587d51058e829ff5f5caad9bcbe20d3e9  sbom-cdx.json