How to Create an SPDX SBOM