https://github.com/anchore/syft d38efb0b7fb7106909bc532a4efc68b78a917a34