170b55929bd96a39c5bed702828c74551319797053b977c16756237a5d672c59  sbom-cdx.json