https://github.com/anchore/syft 334a775cb9cd6bf50033de1bb3aa04f46b669f5d