This is part of an OBOM, not a traditional SBOM. See my answer here - How to add .Net Framework into Cyclone DX BoM? - this is essentially same problem.