c434e46b92d11039e45283217d0e328395eb786c5a1b16095d1dbcff8eb871cc  sbom-cdx.json