https://github.com/anchore/syft 4194a2cd34d2f15dd9a96774ba2fbc5463db4c58