ef3ef8878b9feb63d07c316121146e1d4aa9c469d121d4b39c9c8da408e08cdb  sbom-cdx.json