https://medium.com/@himanshu675/your-docker-images-are-lying-to-you-the-alarming-truth-about-sbom-validation-in-spring-boot-644dc5fef84a
