https://github.com/anchore/syft 55cc1877ef246d8cabfd9bbeb0a8747b59c03431