https://github.com/anchore/syft 470b13045bbbf150f3c79d1487a01ae6acc5592d