a502fe38eff1bd2c5be7cc826dbe49b4f2a91552be4151929e241de6f92c5c9d  sbom-2912-csaf-v2.1-0435.json