bc0cc2516425a6e9ff042c505ba522475729c7d9dfe7b24192a6d6c447f4ac1568f64a92ecbb6d2febda9c2167d8eec668e31e3d8e1201a2fa5b380398d362c4  sbom-2912-csaf-v2.2-4001.json