https://github.com/anchore/syft 41bc6bb410352845f22766e27dd48ba93aa825a4