bd52d7c4fada24aa701b846b123bc09a30fd5f77a240014c2786552bf3a95373  sbom-spdx.json