a99b4a85efd36795b4d6422d03ea9a5028c2e9b618a899ab2952c9e224348ca7  sbom-1938-csaf-v2.1-0105.json