bfabac1d60d7e6c2015e0520fe99cc1c41502f83e0aecb5ffc601193e55ee85d  sbom-1938-csaf-v2.1-0028.json