f3b41ee6d66f38130fda4e1a33634ad476cae5be1de9fbee807ef3266a0ee4c5  sbom-1938-csaf-v2.2-0111.json