38dd75f0e2e8368b0d2588dca582703b2f5d912d12467857726cc442e21fa3e4  sbom-cdx.json