https://github.com/anchore/syft 356f7c92b464b69be3a2a898cd98a63037eeadcc