https://github.com/anchore/syft 67888ee855ad37948bfee98e3aa7d592b4f91e95