github.com/google/osv-scalibr@v0.4.1/binary/cdx/testdata (about) doc.cyclonedx.json doc.cyclonedx.xml