1c7486fe0d92ff1941f21b94ead329561f9085f310bf56cd02c40fac0c294f74  sbom-1938-csaf-v2.2-0138.json