/scripts/sbom/tests/spdx