https://github.com/anchore/syft 7cb8e1fc14a278ec5afce379623a47577aba9917