https://github.com/anchore/syft 098e61dcc81d7a6d666bc62a2166c9b8f32c61bc