ad0bd384efe2fb96250bf83f1e18c78b1994a71534cd59d1c66f69a8ceb783111b972c08809d138eeb3d757049e4b85f7c02789e53687d7109b255c0aecdec1e  sbom-1938-csaf-v2.2-0108.json