https://github.com/anchore/syft aa151da5fe2a1b11502c852fd2d3ad462c1d245f