https://github.com/anchore/syft 65cadda48653d2452a7e41a47a60d2934e8fcb07