error retrieving vulnerability data (400 Bad Request)

[ArwynFr]

I'm writing a SBOM files via Syft then merge them using cyclonedx-cli merge.
The resulting file works fine with OSV but fails with ossindex when using bomber 0.4.8:

sbom.json

Also I think that bomber should not halt the process when an error occurs.
Even a partial scan has value ; perhaps list the unscanned components in the output.