github.com/google/osv-scalibr@v0.4.1/extractor/filesystem/sbom/cdx/testdata (about) invalid_sbom.cdxjson minimal.cdx.json random_file.ext sbom-with-locations.cdx.json sbom-with-nested-comps.cdx.json sbom.bom.json sbom.bom.xml sbom.cdx.json sbom.cdx.json.foo.ext sbom.cdx.xml