https://github.com/anchore/syft b81c9805dcc9bf25dad7659fd9c2bbf7dd3f3d90