fa38f29e0f34b43d8f2b6257e5a86cf3f2777a1973789fac156215d6ea3cc19ab1a5941dd3c4f73b5190d5fe7b00dbf9300c672688d220c22cdc2bf461b013f8  sbom-1938-csaf-v2.2-0029.json