https://github.com/anchore/syft 1b121ac3f4d589060ddf1fac0bcd6871ea4731e3