90bad3d2cc422abc80f6be5301b7967abbf15d5dfec4e85022c0472b1c4644d3  sbom-cdx.json