cf373a334d5eca7017766c37e78c16147205585598ebc2080e29808a51d349db58295135f065509be7199474f94e3a237b75b91115b91a5e16f5c40cfefc1c2e  sbom-3-csaf-v2.1-0004.json