cc720de6d43195e754b0f89fdef652ce47efeb0dacd423afa0686afddf3fac56  sbom-1938-csaf-v2.1-0107.json