cef9b42bee86b8944d06c7c05d938f6301d40a3d9ba419467dd934fa0c508736ddbfb138334f953fccb5090bddc6eb696e5c8b3b59004682bbbcc96e2196402e  sbom-1938-csaf-v2.1-0165.json