cbf91b469a398bd2502348017d5b43ca7635b0e1921bed36ff263968e026f26a9538fb0c6d385006f571461d0c6aacd204e385e3ae3221b1345bdbf08e1484b6  sbom-1938-csaf-v2.2-0156.json