ed0150c894b1b41bf0fa7184041d42682b880a0196c353a891c40a81ec013058  sbom-cdx.json