github.com/devseccon/trivy@v0.47.1-0.20231123133102-bd902a0bd996/pkg/sbom/spdx (about) marshal.go marshal_test.go testdata unmarshal.go unmarshal_test.go