588fbef08a19ff926f0d04df0c93f6b0c4aba03159bcdc2ab069a3494c5c1b43  sbom-spdx.json