https://github.com/anchore/syft 377538e4a692b8070716eb091456b112ccc2cb81