https://github.com/anchore/syft e2f7befbfbf88053dfb2007c6499a4bb2d232c3c