9d0bb65fe69b23189e49a1186c03e48afbfeb844a3cf82030907fa4c2a1bddcc  sbom-cdx.json