dcf19bc47df1c92973c5bd0268759c51ea5dd8ac35809cedc0d67452644d0a85  sbom-spdx.json