d42406e36ad3bc8ae6195320979cefda72e9b1997fafd8d612076cc57ca73ea9  sbom-1938-csaf-v2.2-0096.json