github.com/anchore/syft@v1.4.2-0.20240516191711-1bec1fc5d397/syft/format/cyclonedxjson/test-fixtures/bad-sbom (about) 1 not an sbom!