c0dc3ee9e709c15848dc6b52c9d328b64f106f330ca3544ec5c0e91fa09b7f91  sbom-1938-csaf-v2.1-0035.json