c9a8ca855af6c428829ef1afccf77393a22ef28aa4b6b85b533359fd142802e079e5c970aec7aee62f3eaf52716cdb448e7d4df455c65546b2358faa99528e52  sbom-1-csaf-v2.2.json