ebbf4032fbb156fc8346b31615ec904198243c5456571ff421ddfb17d53947aefe395fc71cba362d90aa8602b62c52b83e7c386f732a4cb18f79490e7c30049e  sbom-1938-csaf-v2.2.json