0258d10c91a2e7aa3cb475efbeaffa176fdfb3b792c8ee5deba2ec887c322fc4  sbom-2298-csaf-v2.2-0003.json