https://github.com/anchore/syft ba9adb17ebb510a2a3bd2b641738b1d9235e1f3e