https://github.com/anchore/syft 7cfb5f630a7a2105d49d65eaaaa2e2c06e4eda73