https://github.com/anchore/syft 0748945c8341a06415ac80e624b84e8d3f548d39