12010861c025380d9afdddae96212b3756728e52c8fcf90cb175dece5aa58f30  sbom-cdx.json