github.com/devseccon/trivy@v0.47.1-0.20231123133102-bd902a0bd996/pkg/sbom/spdx/testdata/happy (about) bom.json empty-bom.json no-relationship.json os-only-bom.json unrelated-bom.json with-files-in-relationships-bom.json with-hasfiles-bom.json