github.com/lineaje-labs/syft@v0.98.1-0.20231227153149-9e393f60ff1b/syft/format/cyclonedxjson/test-fixtures/bad-sbom (about) 1 not an sbom!