f8557e4097235f96aedbba80571eb20c19589bb83eb2075e32bba4a69a3715c7  sbom-spdx.json