https://github.com/anchore/syft f14742b3f3a6f8cd4bc696dbafee53ab1d665da7