882ad20854f2967255dca3d6056cc0d4f32532d8e5139763b86475a13503d627  sbom-spdx.json