https://github.com/anchore/syft 9995950c70e849f9921919faffbfcf46401f71f3