5a37a0ca7ec8d8e5d4af093e3596aaf5e83314e15c4b7f5ece8315ec95419266c2ca41800c9c946e538f3cfc1ac6511965e2e7ac771a6a99e1cbca09274a4a0b  sbom-677-csaf-v2.1.json