https://github.com/anchore/syft b9b13d5525df89194d332467f692bc28bc68d07f