https://github.com/anchore/syft 03e37044d437294b0aac44a4e9277eb8f6c8be3f