7c34e996abcaf3362f11f005d055285588a3cb2da91a16130e6c07820c2de909845ef303a02e33d50ef1b217fa1aa80a9f7003dee87bdc7964937c2aa636fde2  sbom-1938-csaf-v2.2-0137.json